Dependency Dashboard

[renovate[bot]]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

[!WARNING] These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	babel-eslint
npm	eslint-loader
npm	express-graphql
npm	opn-cli

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• [ ] Update dependency babel-loader to v7.1.5
• [ ] Update dependency mkdirp to v0.5.6
• [ ] Update dependency postcss to v6.0.23
• [ ] Update dependency postcss-calc to v6.0.2
• [ ] Update dependency pretty-error to v2.1.2
• [ ] Update dependency react-deep-force-update to v2.1.3
• [ ] Update dependency sqlite3 to v3.1.13
• [ ] Update dependency webpack-dev-middleware to v1.12.2
• [ ] Update dependency whatwg-fetch to v2.0.4
• [ ] Update dependency babel-preset-env to v1.7.0
• [ ] Update dependency express-graphql to v0.12.0
• [ ] Update dependency express-jwt to v6.1.2
• [ ] Update dependency front-matter to v2.3.0
• [ ] Update dependency glob to v7.2.3
• [ ] Update dependency graphql to v0.13.2
• [ ] Update dependency history to v4.10.1
• [ ] Update dependency jest-codemods to v0.34.0
• [ ] Update dependency jscodeshift to v0.16.1
• [ ] Update dependency lint-staged to v4.3.0
• [ ] Update dependency postcss-color-function to v4.1.0
• [ ] Update dependency postcss-custom-properties to v6.3.1
• [ ] Update dependency postcss-flexbugs-fixes to v3.3.1
• [ ] Update dependency postcss-loader to v2.1.6
• [ ] Update dependency postcss-nesting to v4.2.1
• [ ] Update dependency prettier to v1.19.1
• [ ] Update dependency prop-types to v15.8.1
• [ ] Update dependency query-string to v5.1.1
• [ ] Update dependency react-hot-loader to v3.1.3
• [ ] Update dependency rimraf to v2.7.1
• [ ] Update dependency sinon to v3.3.0
• [ ] Update dependency source-map-support to v0.5.21
• [ ] Update dependency stylelint to v8.4.0
• [ ] Update dependency stylelint-order to v0.8.1
• [ ] Update dependency svg-url-loader to v2.3.3
• [ ] Update dependency url-loader to v0.6.2
• [ ] Update dependency webpack to v3.12.0
• [ ] Update dependency webpack-hot-middleware to v2.26.1
• [ ] Update dependency webpack-node-externals to v1.7.2
• [ ] Update react monorepo to v15.7.0 (react, react-dom, react-test-renderer)
• [ ] Update Node.js to v22
• [ ] Update dependency assets-webpack-plugin to v7
• [ ] Update dependency autoprefixer to v10
• [ ] Update dependency babel-eslint to v10
• [ ] Update dependency babel-loader to v9
• [ ] Update dependency browser-sync to v3
• [ ] Update dependency chokidar to v4
• [ ] Update dependency core-js to v3
• [ ] Update dependency cross-env to v7
• [ ] Update dependency css-loader to v7
• [ ] Update dependency enzyme to v3
• [ ] Update dependency eslint to v9
• [ ] Update dependency eslint-config-airbnb to v19
• [ ] Update dependency eslint-config-prettier to v9
• [ ] Update dependency eslint-loader to v4
• [ ] Update dependency eslint-plugin-flowtype to v8
• [ ] Update dependency eslint-plugin-prettier to v5
• [ ] Update dependency express-jwt to v8
• [ ] Update dependency file-loader to v6
• [ ] Update dependency front-matter to v4
• [ ] Update dependency glob to v11
• [ ] Update dependency graphql to v16
• [ ] Update dependency history to v5
• [ ] Update dependency husky to v9
• [ ] Update dependency isomorphic-style-loader to v5
• [ ] Update dependency jscodeshift to v17
• [ ] Update dependency lint-staged to v15
• [ ] Update dependency mkdirp to v3
• [ ] Update dependency normalize.css to v8
• [ ] Update dependency null-loader to v4
• [ ] Update dependency opn-cli to v5
• [ ] Update dependency passport-facebook to v3
• [ ] Update dependency pixrem to v5
• [ ] Update dependency postcss to v8
• [ ] Update dependency postcss-calc to v10
• [ ] Update dependency postcss-custom-media to v11
• [ ] Update dependency postcss-custom-properties to v14
• [ ] Update dependency postcss-custom-selectors to v8
• [ ] Update dependency postcss-flexbugs-fixes to v5
• [ ] Update dependency postcss-import to v16
• [ ] Update dependency postcss-loader to v8
• [ ] Update dependency postcss-media-minmax to v5
• [ ] Update dependency postcss-nested to v7
• [ ] Update dependency postcss-nesting to v13
• [ ] Update dependency postcss-selector-matches to v4
• [ ] Update dependency postcss-selector-not to v8
• [ ] Update dependency prettier to v3
• [ ] Update dependency pretty-error to v4
• [ ] Update dependency query-string to v9
• [ ] Update dependency raw-loader to v4
• [ ] Update dependency react-error-overlay to v6
• [ ] Update dependency react-hot-loader to v4
• [ ] Update dependency rimraf to v6
• [ ] Update dependency serialize-javascript to v6
• [ ] Update dependency sinon to v19
• [ ] Update dependency sqlite3 to v5
• [ ] Update dependency stylelint to v16
• [ ] Update dependency stylelint-config-standard to v36
• [ ] Update dependency stylelint-order to v6
• [ ] Update dependency svg-url-loader to v8
• [ ] Update dependency universal-router to v9
• [ ] Update dependency url-loader to v4
• [ ] Update dependency webpack to v5
• [ ] Update dependency webpack-bundle-analyzer to v4
• [ ] Update dependency webpack-dev-middleware to v7
• [ ] Update dependency webpack-node-externals to v3
• [ ] Update dependency whatwg-fetch to v3
• [ ] Update jest monorepo to v29 (major) (babel-jest, jest)
• [ ] Update react monorepo to v18 (major) (react, react-dom, react-test-renderer)
• [ ] 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• [ ] Update dependency markdown-it to v12 [SECURITY]
• [ ] Update dependency babel-core to v6.26.3
• [ ] Update dependency cookie-parser to v1.4.7
• [ ] Update dependency css-loader to v0.28.11
• [ ] Update dependency assets-webpack-plugin to v3.9.12
• [ ] Update dependency autoprefixer to v7.2.6
• [ ] Update dependency bluebird to v3.7.2
• [ ] Update dependency cross-env to v5.2.1
• [ ] Update dependency eslint-config-prettier to v2.10.0
• [ ] Update dependency eslint-plugin-css-modules to v2.12.0
• [ ] Update dependency eslint-plugin-flowtype to v2.50.3

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• [ ] Update dependency node-fetch to v2.6.7 [SECURITY]
• [ ] Update dependency passport to v0.6.0 [SECURITY]
• [ ] Update dependency jsonwebtoken to v9 [SECURITY]
• [ ] Update dependency sequelize to v6 [SECURITY]
• [ ] Update dependency eslint-import-resolver-node to v0.3.9
• [ ] Update Node.js to v8.17.0
• [ ] Update dependency body-parser to v1.20.3
• [ ] Update dependency browser-sync to v2.29.3
• [ ] Update dependency classnames to v2.5.1
• [ ] Update dependency eslint-plugin-import to v2.31.0
• [ ] Update dependency eslint-plugin-jsx-a11y to v6.10.2
• [ ] Update dependency eslint-plugin-prettier to v2.7.0
• [ ] Update dependency eslint-plugin-react to v7.37.2
• [ ] Update dependency express to v4.21.1
• [ ] Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

Dockerfile

- `node 8.5.0-alpine`

npm

package.json

- `babel-polyfill 6.26.0` - `bluebird 3.5.0` - `body-parser 1.17.2` - `classnames 2.2.5` - `cookie-parser 1.4.3` - `core-js 2.6.12` - `express 4.15.4` - `express-graphql 0.6.7` - `express-jwt 6.0.0` - `graphql 0.10.5` - `history 4.6.3` - `isomorphic-style-loader 4.0.0` - `jsonwebtoken 7.4.3` - `node-fetch 2.6.1` - `normalize.css 7.0.0` - `passport 0.4.0` - `passport-facebook 2.1.1` - `pretty-error 2.1.1` - `prop-types 15.5.10` - `query-string 5.0.0` - `react 15.6.1` - `react-dom 15.6.1` - `sequelize 4.44.4` - `serialize-javascript 3.1.0` - `source-map-support 0.4.16` - `sqlite3 3.1.9` - `universal-router 3.2.0` - `whatwg-fetch 2.0.3` - `assets-webpack-plugin 3.5.1` - `autoprefixer 7.1.2` - `babel-cli 6.26.0` - `babel-core 6.26.0` - `babel-eslint 7.2.3` - `babel-jest 20.0.3` - `babel-loader 7.1.2` - `babel-plugin-rewire 1.2.0` - `babel-preset-env 1.6.0` - `babel-preset-react 6.24.1` - `babel-preset-react-optimize 1.0.1` - `babel-preset-stage-2 6.24.1` - `babel-register 6.26.0` - `babel-template 6.26.0` - `babel-types 6.26.0` - `browser-sync 2.18.13` - `chokidar 1.7.0` - `cross-env 5.0.5` - `css-loader 0.28.5` - `enzyme 2.9.1` - `eslint 4.19.1` - `eslint-config-airbnb 15.1.0` - `eslint-config-prettier 2.3.0` - `eslint-import-resolver-node 0.3.1` - `eslint-loader 1.9.0` - `eslint-plugin-css-modules 2.7.4` - `eslint-plugin-flowtype 2.35.0` - `eslint-plugin-import 2.7.0` - `eslint-plugin-jsx-a11y 6.0.2` - `eslint-plugin-prettier 2.2.0` - `eslint-plugin-react 7.3.0` - `file-loader 0.11.2` - `front-matter 2.1.2` - `glob 7.1.2` - `husky 0.14.3` - `identity-obj-proxy 3.0.0` - `jest 20.0.4` - `jest-codemods 0.12.0` - `jscodeshift 0.3.32` - `lint-staged 4.0.3` - `markdown-it 8.3.2` - `mkdirp 0.5.1` - `null-loader 0.1.1` - `opn-cli 3.1.0` - `pixrem 4.0.1` - `pleeease-filters 4.0.0` - `postcss 6.0.9` - `postcss-calc 6.0.0` - `postcss-color-function 4.0.0` - `postcss-custom-media 6.0.0` - `postcss-custom-properties 6.1.0` - `postcss-custom-selectors 4.0.1` - `postcss-flexbugs-fixes 3.2.0` - `postcss-import 10.0.0` - `postcss-loader 2.0.6` - `postcss-media-minmax 3.0.0` - `postcss-nested 2.1.2` - `postcss-nesting 4.1.0` - `postcss-pseudoelements 5.0.0` - `postcss-selector-matches 3.0.1` - `postcss-selector-not 3.0.1` - `prettier 1.5.3` - `raw-loader 0.5.1` - `react-deep-force-update 2.1.0` - `react-error-overlay 1.0.10` - `react-hot-loader 3.0.0-beta.7` - `react-test-renderer 15.6.1` - `rimraf 2.6.1` - `sinon 3.2.1` - `stylelint 8.0.0` - `stylelint-config-standard 17.0.0` - `stylelint-order 0.6.0` - `svg-url-loader 2.1.1` - `url-loader 0.5.9` - `webpack 3.5.5` - `webpack-bundle-analyzer 3.9.0` - `webpack-dev-middleware 1.12.0` - `webpack-hot-middleware 2.18.2` - `webpack-node-externals 1.6.0` - `node >=6.5` - `npm >=3.10`

src/components/Feedback/package.json

src/components/Footer/package.json

src/components/Header/package.json

src/components/Layout/package.json

src/components/Link/package.json

src/components/Navigation/package.json

src/components/Page/package.json

travis

.travis.yml

- `node 8` - `node 7` - `node 6`

---

• [ ] Check this box to trigger a request for Renovate to run again on this repository

[secure-code-warrior-for-github[bot]]

Micro-Learning Topic: SQL injection (Detected by phrase)

Matched on "sqli"

What is this? (2min video)

This is probably one of the two most exploited vulnerabilities in web applications and has led to a number of high profile company breaches. It occurs when an application fails to sanitize or validate input before using it to dynamically construct a statement. An attacker that exploits this vulnerability will be able to gain access to the underlying database and view or modify data without permission.

Try this challenge in Secure Code Warrior