search

mattpaulwilliamson / matthew-williamson

A blog
https://matthew-williamson.netlify.com/
MIT License
0 stars 0 forks source link

[Snyk] Security upgrade gatsby-plugin-netlify-cms from 3.0.12 to 5.0.0 #102

Open mattpaulwilliamson opened 1 year ago

mattpaulwilliamson commented 1 year ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json
⚠️ Warning ``` Failed to update the package-lock.json, please update manually before merging. ```
#### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity") | **551/1000**
**Why?** Recently disclosed, Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
[SNYK-JS-LOADERUTILS-3105943](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3105943) | Yes | No Known Exploit (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: gatsby-plugin-netlify-cms The new version differs by 250 commits.
  • f1d3f7b chore(release): Publish
  • 6e6ea56 chore(release): Publish rc
  • df50ce7 fix(gatsby): Add dir=ltr to Fast Refresh overlay (#29900) (#29908)
  • 83adec5 chore(docs): update readme (#29837) (#29909)
  • b2628da will git stop being weird (#29897) (#29907)
  • c98c87f chore(release): Publish rc
  • c8bf571 fix(gatsby-source-wordpress): image fixes (#29813) (#29886)
  • 85bb8ea fix(gatsby-plugin-image): Update peerdeps (#29880) (#29888)
  • c266b83 fix(gatsby): Remove `react-hot-loader` deps & other unused deps (#29864) (#29876)
  • 222ca3f fix(gatsby): with some custom babel configs array spreading with Set is not safe (#29885) (#29889)
  • ea31900 chore(release): Publish rc
  • f070422 fix(gatsby): Fix various small DEV_SSR bugs exposed in development_runtime tests (#29720) (#29866)
  • cb3b1ca chore: update peerdeps to latest major versions (#29857) (#29867)
  • 8639f7b fix(create-gatsby): Use legacy peer deps (#29856) (#29862)
  • fdc1fe2 fix(gatsby): fix some css HMR edge cases (#29839) (#29865)
  • e8a7e3b fix(gatsby-plugin-preact): fix fast-refresh (#29831) (#29860)
  • e7453c3 fix(gatsby): Improve Fast Refresh overlay styles (#29855) (#29861)
  • 76f4f96 chore: upgrade postcss & plugins (#29793)
  • de6cba6 chore(release): Publish rc
  • aafe584 fix: query on demand loading indicator always active on preact. (#29829) (#29836)
  • 34f5b8c fix(hmr): accept hot updates for modules above page templates (#29752) (#29835)
  • b8d21f8 fix(gatsby): workaround graphql-compose issue (#29822) (#29834)
  • 32fee71 fix(gatsby): eslint linting (#29796) (#29814)
  • bca7951 fix(gatsby-source-wordpress): HTML image regex's (#29778) (#29816)
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/mattpaulwilliamson-github-marketplace/project/a3ced4b5-efca-485a-8a3b-d513ccc955aa?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/mattpaulwilliamson-github-marketplace/project/a3ced4b5-efca-485a-8a3b-d513ccc955aa?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"1fd89fdb-2a3b-4d73-8d5d-4c3010acaf64","prPublicId":"1fd89fdb-2a3b-4d73-8d5d-4c3010acaf64","dependencies":[{"name":"gatsby-plugin-netlify-cms","from":"3.0.12","to":"5.0.0"}],"packageManager":"npm","projectPublicId":"a3ced4b5-efca-485a-8a3b-d513ccc955aa","projectUrl":"https://app.snyk.io/org/mattpaulwilliamson-github-marketplace/project/a3ced4b5-efca-485a-8a3b-d513ccc955aa?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-LOADERUTILS-3105943"],"upgrade":["SNYK-JS-LOADERUTILS-3105943"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","pr-warning-shown","priorityScore"],"priorityScoreList":[551]}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Regular Expression Denial of Service (ReDoS)](https://learn.snyk.io/lessons/redos/javascript/?loc=fix-pr)