search

mattpaulwilliamson / matthew-williamson

A blog
https://matthew-williamson.netlify.com/
MIT License
0 stars 0 forks source link

[Snyk] Fix for 1 vulnerabilities #114

Open mattpaulwilliamson opened 9 months ago

mattpaulwilliamson commented 9 months ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png "high severity") | **661/1000**
**Why?** Recently disclosed, Has a fix available, CVSS 7.5 | Missing Release of Resource after Effective Lifetime
[SNYK-JS-INFLIGHT-6095116](https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116) | Yes | No Known Exploit (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: gatsby The new version differs by 250 commits.
  • 7c43f38 chore(release): Publish
  • 9a087ec fix(gatsby): fix eperm when cache getting cleared (#35154) (#35197)
  • a56b652 fix(gatsby): PnP fixes (#35194) (#35199)
  • 0b6067a fix(gatsby): remove apis from ts,tsx (#35183) (#35198)
  • f080b46 chore(release): Publish
  • 0275fad fix(gatsby-plugin-preact): fix preact alias (#35156) (#35169)
  • 3ac159f fix(gatsby-plugin-utils): Add missing fs-extra dep (#35165) (#35168)
  • 0f2ec73 fix(gatsby-cli): Resolve babel preset ts explicitly (#35153) (#35167)
  • 24b9fde chore(release): Publish
  • f10eb58 chore: Update eslintignore
  • 4753cf9 chore(docs): Update migration guide to add more info about image resolvers (#35105)
  • cd0b80c chore(docs): update documentation for node-fetch to use CommonJS (#35129)
  • 9690c7c fix(gatsby-plugin-sharp): Handle diff duotone settings (#35075)
  • bf8392c chore(gatsby): add generic to GatsbyFunctionRequest (#35029)
  • c5b8bb9 fix(deps): update starters and examples - gatsby (#35085)
  • 56fbf8d feat(gatsby-core-utils,gatsby-cli): Allow write to gatsby-config.ts (#35074)
  • fb9c014 chore(plugins): Deprecate create client paths plugin (#35124)
  • 500d17a chore(docs): Update query-execution.md (#35115)
  • 6d01f21 docs(gh-pages): improve separate repository instructions (#35118)
  • c02d256 chore(docs): Fix typos (#35119)
  • a5cd72a fix(gatsby): use lmdb for resultHash cache so shared across workers (#34925)
  • c0f394d fix(create-gatsby): Update wordpress deps in schema (#35107)
  • 46e2902 fix(gatsby): null check for context (#35096)
  • 5852dc8 feat(gatsby): Capture number of compiled TS files in Telemetry (#35023)
See the full diff
Package name: gatsby-plugin-netlify-cms The new version differs by 250 commits.
  • 102d92c chore(release): Publish
  • baa0804 fix(gatsby-plugin-mdx): enable hmr when importing mdx (#31288) (#31370)
  • a44a426 fix(gatsby): Fixes incorrect type (#31358) (#31365)
  • 63942db fix(gatsby): fix proxy creation on read-only properties (#31346) (#31364)
  • 4eca6cc fix(gatsby): Pass reporter from functions code for reporting warning (#31336) (#31363)
  • 01de613 fix(gatsby): don't print out flag suggestions if none are enabled or opted-in (#31299) (#31362)
  • 1a4a3a7 feat(gatsby): New overlay for DEV_SSR (#31061) (#31361)
  • fbab17b fix(gatsby-source-shopify): fix linting (#31291)
  • 62f0ad6 fix(deps): update minor and patch for gatsby-plugin-preact (#31169)
  • 95f52f0 chore: add gatsby-plugin-gatsby-cloud to renovate
  • 22cbc30 chore: update renovatebot config to support more packages (#31289)
  • 111647e chore(deps): update dependency @ types/semver to ^7.3.5 (#31148)
  • f3ee3fd fix(deps): update minor and patch for gatsby-plugin-manifest (#31160)
  • 2291fbd fix(deps): update minor and patch for gatsby-remark-copy-linked-files (#31163)
  • 137630e fix(deps): update dependency mini-css-extract-plugin to v1.6.0 (#31158)
  • b2ce9fe chore(deps): update dependency @ testing-library/react to ^11.2.6 (#31168)
  • b08c4c7 docs(gatsby-source-shopify): Updates Shopify README with new plugin info (#31287)
  • 06f4556 chore: run yarn deduplicate (#31285)
  • 4f84533 docs(gatsby-plugin-image): Add docs for customizing default options (#30344)
  • d0dee0d fix(gatsby-plugin-image): print error details (#30417)
  • 448061a chore(docs): Update "Adding Search with Algolia" guide (#29460)
  • ea81d3b chore(docs): Update MDX frontmatter for programmatic pages (#29798)
  • 5658261 docs: Add image plugin architecture doc (#31096)
  • fef8d6b perf(gatsby): use fastq instead of better-queue + refactor (#31269)
See the full diff
Package name: gatsby-plugin-sharp The new version differs by 250 commits.
  • 0a455df chore(release): Publish
  • 91dc167 fix(gatsby): don't log FAST_DEV message for each worker (#32961) (#32967)
  • f936c93 fix(gatsby): set staticQueryResultHash to new hash on data change (#32949) (#32966)
  • ea161ce feat(gatsby-graphiql-explorer): upgrade to webpack 5 (#30642)
  • 944e381 chore(release): Publish next
  • d6326df fix(gatsby-core-utils): Switch `auth` option from got to username/password (#32665)
  • cf9c066 fix(gatsby): add this typings to actions (#32210)
  • 53aa88e chore: enable test parallelism (#32766)
  • b7deabc fix(deps): update starters and examples - gatsby (#32843)
  • 6025c84 chore(deps): update dependency katex to ^0.13.13 for gatsby-remark-katex (#32567)
  • d87c5cb chore: enable lmdb by default and update node for next major (#32695)
  • 818d6c1 feat(gatsby-plugin-gatsby-cloud): Add `disablePreviewUI` option (#32907)
  • f556a00 chore: update changelogs (#32924)
  • aba5eba feat(gatsby): enable webpack caching in development for everyone (#32922)
  • ac7bd4e feat(gatsby-source-wordpress): allow path to js file for beforeChangeNode option (#32901)
  • 1a87a8a docs(gatsby-source-wordpress): document content sync (#32768)
  • 417df15 chore: re-generate changelogs (#32886)
  • 1810874 fix(gatsby-source-wordpress): draft previews (#32915)
  • 7c72ab8 chore(gatsby): remove unused packages (#32903)
  • afb06d7 chore(docs): Add hint for MDX plugin in remark-plugin-tutorial (#32876)
  • 1303ecb chore(docs): Update wording for "using-web-fonts" (#32902)
  • 9589911 chore(docs): Fix code highlighting in part 6 (#32900)
  • 568d4ce feat(gatsby-source-drupal): Use the collection count from JSON:API extras to enable parallel API requests for cold builds (#32883)
  • 41f5337 fix(deps): update typescript to ^4.29.3 (#32614)
See the full diff
Package name: node-sass The new version differs by 140 commits.
  • 3b556c1 7.0.2
  • c716359 Bump sass-graph@^4.0.1 (#3292)
  • 24741b3 docs(readme): fix docpad plugin link
  • 1523330 feat: Drop Node 12
  • 365d357 update https://registry.npm.taobao.org to https://registry.npmmirror.com
  • 1456114 build(deps): bump actions/upload-artifact from 2 to 3
  • b465b69 chore: bump GitHub Actions to Windows 2019 (#3254)
  • e6194b1 build(deps): bump make-fetch-happen from 9.1.0 to 10.0.4
  • 4edf594 build(deps): bump node-gyp from 8.4.1 to 9.0.0
  • 29e2344 build(deps): bump actions/checkout from 2 to 3
  • 85b0d22 build(deps): bump actions/setup-node from 2 to 3
  • 3bb51da Use make-fetch-happen instead of request (#3193)
  • adc2f8b build(deps): bump true-case-path from 1.0.3 to 2.2.1 (#3000)
  • 77d12f0 chore: disable Apline for Node 16/17 builds
  • 308d533 ci: use Python 3 for Node 12
  • c818907 ci: unpin actions/setup-node to v2
  • 99242d7 7.0.1
  • 77049d1 build(deps): bump sass-graph from 2.2.5 to 4.0.0 (#3224)
  • c929f25 build(deps): bump node-gyp from 7.1.2 to 8.4.1 (#3209)
  • 918dcb3 Lint fix
  • 0a21792 Set rejectUnauthorized to true by default (#3149)
  • e80d4af chore: Drop EOL Node 15 (#3122)
  • d753397 feat: Add Node 17 support (#3195)
  • dcf2e75 build(deps-dev): bump eslint from 7.32.0 to 8.0.0
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/mattpaulwilliamson-github-marketplace/project/a3ced4b5-efca-485a-8a3b-d513ccc955aa?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/mattpaulwilliamson-github-marketplace/project/a3ced4b5-efca-485a-8a3b-d513ccc955aa?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"fdb92e41-e0af-4714-ac53-e40f5795f8a2","prPublicId":"fdb92e41-e0af-4714-ac53-e40f5795f8a2","dependencies":[{"name":"gatsby","from":"2.1.18","to":"4.10.2"},{"name":"gatsby-plugin-netlify-cms","from":"3.0.12","to":"5.5.0"},{"name":"gatsby-plugin-sharp","from":"2.0.22","to":"3.13.0"},{"name":"node-sass","from":"4.11.0","to":"7.0.2"}],"packageManager":"npm","projectPublicId":"a3ced4b5-efca-485a-8a3b-d513ccc955aa","projectUrl":"https://app.snyk.io/org/mattpaulwilliamson-github-marketplace/project/a3ced4b5-efca-485a-8a3b-d513ccc955aa?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-INFLIGHT-6095116"],"upgrade":["SNYK-JS-INFLIGHT-6095116"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["priorityScore"],"priorityScoreList":[661],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Learn about vulnerability in an interactive lesson of Snyk Learn.](https://learn.snyk.io/?loc=fix-pr)