[Snyk] Fix for 1 vulnerabilities

[mjperrins]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:-------------------------  | **661/1000**
**Why?** Recently disclosed, Has a fix available, CVSS 7.5 | Prototype Pollution
[SNYK-JS-LOADERUTILS-3043105](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3043105) | Yes | No Known Exploit (*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gatsby

The new version differs by 242 commits.

• f1d3f7b chore(release): Publish
• 6e6ea56 chore(release): Publish rc
• df50ce7 fix(gatsby): Add dir=ltr to Fast Refresh overlay (#29900) (#29908)
• 83adec5 chore(docs): update readme (#29837) (#29909)
• b2628da will git stop being weird (#29897) (#29907)
• c98c87f chore(release): Publish rc
• c8bf571 fix(gatsby-source-wordpress): image fixes (#29813) (#29886)
• 85bb8ea fix(gatsby-plugin-image): Update peerdeps (#29880) (#29888)
• c266b83 fix(gatsby): Remove `react-hot-loader` deps & other unused deps (#29864) (#29876)
• 222ca3f fix(gatsby): with some custom babel configs array spreading with Set is not safe (#29885) (#29889)
• ea31900 chore(release): Publish rc
• f070422 fix(gatsby): Fix various small DEV_SSR bugs exposed in development_runtime tests (#29720) (#29866)
• cb3b1ca chore: update peerdeps to latest major versions (#29857) (#29867)
• 8639f7b fix(create-gatsby): Use legacy peer deps (#29856) (#29862)
• fdc1fe2 fix(gatsby): fix some css HMR edge cases (#29839) (#29865)
• e8a7e3b fix(gatsby-plugin-preact): fix fast-refresh (#29831) (#29860)
• e7453c3 fix(gatsby): Improve Fast Refresh overlay styles (#29855) (#29861)
• 76f4f96 chore: upgrade postcss & plugins (#29793)
• de6cba6 chore(release): Publish rc
• aafe584 fix: query on demand loading indicator always active on preact. (#29829) (#29836)
• 34f5b8c fix(hmr): accept hot updates for modules above page templates (#29752) (#29835)
• b8d21f8 fix(gatsby): workaround graphql-compose issue (#29822) (#29834)
• 32fee71 fix(gatsby): eslint linting (#29796) (#29814)
• bca7951 fix(gatsby-source-wordpress): HTML image regex's (#29778) (#29816)

See the full diff

Package name: gatsby-plugin-mdx

The new version differs by 250 commits.

• b8eac2d chore(release): Publish
• 3253a38 fix(gatsby-plugin-mdx): Hashing and pluginOptions (#36387) (#36395)
• 1880491 fix(gatsby-script): Reach router import (#36385) (#36394)
• f664ad2 feat(gatsby): Telemetry tracking for Head API (#36352)
• ab55e4e chore: Update `got` (#36366)
• 2b4ff76 fix(gatsby): Make runtime error overlay work in non-v8 browsers (#36365)
• f990e08 fix(test): clear and close lmdb after each test suite (#36343)
• 7fcf580 fix(gatsby): e.remove() is not a function when using Gatsby Head API (#36338)
• 25fb9d1 chore: Fix pipeline tests (#36363)
• a9132a5 chore(deps): update sharp (#35539)
• bc80c23 chore: Add note about rehype-slug-custom-id
• 5b6f1f6 chore(gatsby): upgrade multer (#36359)
• f2f0acf chore(gatsby-telemetry): upgrade git-up (#36358)
• 86a8efc chore(release): Publish next
• 0705ac7 chore(gatsby-plugin-mdx): Update .gitignore
• c92db36 BREAKING CHANGE(gatsby-plugin-mdx): MDX v2 (#35650)
• 3c0dd6d chore(release): Publish next
• 86b6ee9 Revert "chore(gatsby): Make `plugins` in `PluginOptions` type optional (#36351)"
• a2fa5a2 chore(gatsby): Make `plugins` in `PluginOptions` type optional (#36351)
• 6ecfe4a fix(gatsby-source-contentful): Correctly overwrite field type on Assets (#36337)
• 0ed362c chore(docs): Pre-encoded unicode characters can't be used in paths (#36325)
• 2bbe96d fix(deps): update dependency file-type to ^16.5.4 for gatsby-source-filesystem (#36276)
• 2be3fa7 chore(docs): Add first batch of Cloud docs (#36218)
• 4238142 chore(docs): Remove outdated examples and recipes (#36335)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/mjperrins/project/7fa00037-13ec-4559-8c3c-d5a59fffa36d?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/mjperrins/project/7fa00037-13ec-4559-8c3c-d5a59fffa36d?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"68109726-a87a-40f1-8c59-60d4e6164e60","prPublicId":"68109726-a87a-40f1-8c59-60d4e6164e60","dependencies":[{"name":"gatsby","from":"2.32.13","to":"3.0.0"},{"name":"gatsby-plugin-mdx","from":"2.6.0","to":"4.0.0"},{"name":"gatsby-theme-carbon","from":"1.29.2","to":"3.0.0"}],"packageManager":"npm","projectPublicId":"7fa00037-13ec-4559-8c3c-d5a59fffa36d","projectUrl":"https://app.snyk.io/org/mjperrins/project/7fa00037-13ec-4559-8c3c-d5a59fffa36d?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-LOADERUTILS-3043105"],"upgrade":["SNYK-JS-LOADERUTILS-3043105"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["priorityScore"],"priorityScoreList":[661]}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Prototype Pollution](https://learn.snyk.io/lessons/prototype-pollution/javascript//?loc=fix-pr)