[Snyk] Upgrade gatsby from 5.0.0 to 5.13.4 #702

X-oss-byte · 2024-05-02T21:58:37Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade gatsby from 5.0.0 to 5.13.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 127 versions ahead of your current version.
The recommended version was released 22 days ago, on 2024-04-10.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Heap-based Buffer Overflow SNYK-JS-SHARP-5922108	694/1000 Why? Mature exploit, CVSS 9.6	Mature
Denial of Service (DoS) SNYK-JS-SOCKETIOPARSER-5596892	694/1000 Why? Mature exploit, CVSS 9.6	No Known Exploit
Sandbox Bypass SNYK-JS-WEBPACK-3358798	694/1000 Why? Mature exploit, CVSS 9.6	Proof of Concept
Denial of Service (DoS) SNYK-JS-ENGINEIO-3136336	694/1000 Why? Mature exploit, CVSS 9.6	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-SIDEWAYFORMULA-3317169	694/1000 Why? Mature exploit, CVSS 9.6	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-3244450	694/1000 Why? Mature exploit, CVSS 9.6	Proof of Concept
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	694/1000 Why? Mature exploit, CVSS 9.6	Proof of Concept
Open Redirect SNYK-JS-EXPRESS-6474509	694/1000 Why? Mature exploit, CVSS 9.6	No Known Exploit
Denial of Service (DoS) SNYK-JS-MSGPACKR-6140431	694/1000 Why? Mature exploit, CVSS 9.6	No Known Exploit
Improper Input Validation SNYK-JS-POSTCSS-5926692	694/1000 Why? Mature exploit, CVSS 9.6	No Known Exploit
Information Exposure SNYK-JS-GATSBY-5671647	694/1000 Why? Mature exploit, CVSS 9.6	Proof of Concept
Information Exposure SNYK-JS-GATSBYCLI-5671903	694/1000 Why? Mature exploit, CVSS 9.6	Proof of Concept
Denial of Service (DoS) SNYK-JS-GRAPHQL-5905181	694/1000 Why? Mature exploit, CVSS 9.6	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	694/1000 Why? Mature exploit, CVSS 9.6	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	694/1000 Why? Mature exploit, CVSS 9.6	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: gatsby

5.13.4 - 2024-04-10
[email protected]
5.13.3 - 2024-01-25
[email protected]
5.13.2 - 2024-01-23
5.13.1 - 2023-12-22
5.13.0 - 2023-12-18
5.13.0-next.3 - 2023-12-04
5.13.0-next.2 - 2023-11-16
5.13.0-next.1 - 2023-08-22
5.13.0-next.0 - 2023-07-25
5.13.0-alpha-fix-pnpm.21 - 2023-12-20
5.13.0-alpha-fix-pnpm.17 - 2023-12-15
5.13.0-alpha-fix-pnpm.16 - 2023-12-14
5.13.0-alpha-alt-image-cdn.38 - 2023-11-03
5.12.12 - 2023-12-07
5.12.11 - 2023-11-22
5.12.10 - 2023-11-21
5.12.9 - 2023-10-26
5.12.8 - 2023-10-20
5.12.7 - 2023-10-17
5.12.6 - 2023-10-09
5.12.5 - 2023-09-27
5.12.4 - 2023-09-05
5.12.3 - 2023-08-28
5.12.2 - 2023-08-28
5.12.1 - 2023-08-24
5.12.0 - 2023-08-24
5.12.0-next.1 - 2023-07-03
5.12.0-next.0 - 2023-06-15
5.11.0 - 2023-06-15
5.11.0-touch-nodes-fix.4 - 2023-06-14
5.11.0-next.1 - 2023-06-05
5.11.0-next.0 - 2023-05-16
5.10.0 - 2023-05-16
5.10.0-next.4 - 2023-05-03
5.10.0-next.3 - 2023-04-27
5.10.0-next.2 - 2023-04-27
5.10.0-next.1 - 2023-04-19
5.10.0-next.0 - 2023-04-18
5.10.0-infer-block-less.13 - 2023-05-09
5.10.0-infer-block-less.12 - 2023-05-09
5.10.0-infer-block-less.11 - 2023-05-08
5.10.0-infer-block-less.8 - 2023-05-08
5.10.0-infer-block-less.7 - 2023-05-05
5.10.0-infer-block-less.6 - 2023-05-05
5.10.0-infer-block-less.5 - 2023-05-05
5.10.0-gatsby-gc.20 - 2023-05-16
5.10.0-gatsby-gc.19 - 2023-05-16
5.10.0-gatsby-gc.18 - 2023-05-16
5.10.0-gatsby-gc.17 - 2023-05-15
5.10.0-gatsby-gc.16 - 2023-05-15
5.10.0-gatsby-gc.15 - 2023-05-15
5.10.0-gatsby-gc.14 - 2023-05-15
5.10.0-alpha-adapters.165 - 2023-07-14
5.10.0-alpha-adapters.164 - 2023-07-13
5.10.0-alpha-adapters.159 - 2023-07-12
5.10.0-alpha-adapters.158 - 2023-07-12
5.10.0-alpha-adapters.156 - 2023-07-11
5.10.0-alpha-adapters.155 - 2023-07-11
5.10.0-alpha-adapters.153 - 2023-07-11
5.10.0-alpha-adapters.142 - 2023-07-04
5.10.0-alpha-adapters.141 - 2023-07-03
5.10.0-alpha-adapters.130 - 2023-06-30
5.10.0-alpha-adapters.96 - 2023-06-14
5.10.0-alpha-adapters.94 - 2023-06-14
5.10.0-alpha-adapters.89 - 2023-06-14
5.9.1 - 2023-05-09
5.9.0 - 2023-04-18
5.9.0-touch-nodes-optout.49 - 2023-04-12
5.9.0-reduce-contentful-mem-usage.39 - 2023-04-17
5.9.0-reduce-contentful-mem-usage.38 - 2023-04-17
5.9.0-reduce-contentful-mem-usage.36 - 2023-04-17
5.9.0-next.3 - 2023-04-06
5.9.0-next.2 - 2023-03-30
5.9.0-next.1 - 2023-03-28
5.9.0-next.0 - 2023-03-21
5.9.0-lmdb-remapchunks.41 - 2023-04-20
5.9.0-lmdb-remapchunks.40 - 2023-04-20
5.9.0-image-cdn-configurable.4 - 2023-04-11
5.9.0-alpha-cg-tailwind.23 - 2023-05-09
5.8.1 - 2023-03-29
5.8.0 - 2023-03-21
5.8.0-touchnodes-memdebug2.19 - 2023-03-23
5.8.0-touchnodes-memdebug2.17 - 2023-03-22
5.8.0-touchnodes-memdebug.17 - 2023-03-21
5.8.0-next.3 - 2023-03-14
5.8.0-next.2 - 2023-03-07
5.8.0-next.1 - 2023-02-22
5.8.0-next.0 - 2023-02-16
5.8.0-inference-memdebug.26 - 2023-03-23
5.8.0-inference-memdebug.22 - 2023-03-23
5.8.0-alpha-rspack.4 - 2023-03-10
5.8.0-alpha-react-profiling-env.8 - 2023-03-17
5.7.0 - 2023-02-21
5.7.0-next.1 - 2023-02-08
5.7.0-next.0 - 2023-02-03
5.6.1 - 2023-02-16
5.6.0 - 2023-02-07
5.6.0-next.2 - 2023-01-30
5.6.0-next.1 - 2023-01-26
5.6.0-next.0 - 2023-01-19
5.5.0 - 2023-01-24
5.5.0-next.1 - 2023-01-17
5.5.0-next.0 - 2023-01-05
5.5.0-alpha-initial-webhook-body.31 - 2023-01-16
5.5.0-alpha-initial-webhook-body.30 - 2023-01-16
5.4.2 - 2023-01-17
5.4.1 - 2023-01-13
5.4.0 - 2023-01-10
5.4.0-next.3 - 2023-01-04
5.4.0-next.2 - 2022-12-14
5.4.0-next.1 - 2022-12-14
5.4.0-next.0 - 2022-12-08
5.3.3 - 2022-12-20
5.3.2 - 2022-12-14
5.3.1 - 2022-12-14
5.3.0 - 2022-12-13
5.3.0-next.4 - 2022-12-07
5.3.0-next.3 - 2022-12-07
5.3.0-next.2 - 2022-12-06
5.3.0-next.1 - 2022-12-01
5.3.0-next.0 - 2022-11-25
5.2.0 - 2022-11-25
5.2.0-next.1 - 2022-11-23
5.2.0-next.0 - 2022-11-17
5.1.0 - 2022-11-22
5.1.0-next.0 - 2022-11-08
5.0.1 - 2022-11-10
5.0.0 - 2022-11-08

from gatsby GitHub release notes

Commit messages

Package name: gatsby

8f0f7c5 chore(release): Publish
edaf016 fix(gatsby-adapter-netlify): handler generation on windows (fix(gatsby-adapter-netlify): handler generation on windows gatsbyjs/gatsby#38900) (fix(gatsby-adapter-netlify): handler generation on windows (#38900) gatsbyjs/gatsby#38929)
b0960f5 chore(release): Publish
07761d4 chore(gatsby-source-wordpress): upgrade file-type (chore(gatsby-source-wordpress): upgrade file-type gatsbyjs/gatsby#38861) (chore(gatsby-source-wordpress): upgrade file-type (#38861) gatsbyjs/gatsby#38863)
85f6c90 fix(gatsby-source-wordpress): only diff wpgraphql schema if the user opts in (fix(gatsby-source-wordpress): only diff wpgraphql schema if the user opts in gatsbyjs/gatsby#38856) (fix(gatsby-source-wordpress): only diff wpgraphql schema if the user opts in (#38856) gatsbyjs/gatsby#38860)
b4ce9e6 chore(release): Publish
c50e8f2 fix: add missing fs method rewrites to handle fetchRemoteFile in dsg/ssr engine (fix: add missing fs method rewrites to handle fetchRemoteFile in dsg/ssr engine gatsbyjs/gatsby#38822) (fix: add missing fs method rewrites to handle fetchRemoteFile in dsg/ssr engine (#38822) gatsbyjs/gatsby#38823)
d328fd8 perf: use must-revalidate cache-control header as common and only create header routes for routes with different cache-control (perf: use must-revalidate cache-control header as common and only create header routes for routes with different cache-control gatsbyjs/gatsby#38820) (perf: use must-revalidate cache-control header as common and only create header routes for routes with different cache-control (#38820) gatsbyjs/gatsby#38824)
b24134d chore(release): Publish
c74745c fix(gatsby): support builtin modules prefixed with `node:` on `build-html` (fix(gatsby): support builtin modules prefixed with node: on build-html gatsbyjs/gatsby#38516) (fix(gatsby): support builtin modules prefixed with node: on build-html (#38516) gatsbyjs/gatsby#38818)
c9f8c24 chore: swap babel-plugin-lodash with updated version that doesn't use deprecated APIs (chore: swap babel-plugin-lodash with updated version that doesn't use deprecated APIs gatsbyjs/gatsby#38797) (chore: swap babel-plugin-lodash with updated version that doesn't use deprecated APIs (#38797) gatsbyjs/gatsby#38803)
fc0eea1 fix(gatsby): fix webpack compilation when pnpm is used (fix(gatsby): fix webpack compilation when pnpm is used gatsbyjs/gatsby#38757) (fix(gatsby): fix webpack compilation when pnpm is used (#38757) gatsbyjs/gatsby#38804)
f6ed443 fix(gatsby): try to automatically recover when parcel segfaults (fix(gatsby): try to automatically recover when parcel segfaults gatsbyjs/gatsby#38773) (fix(gatsby): try to automatically recover when parcel segfaults (#38773) gatsbyjs/gatsby#38799)
68b0821 fix(gatsby): more robust adapter zero-conf handling (fix(gatsby): more robust adapter zero-conf handling gatsbyjs/gatsby#38778) (fix(gatsby): more robust adapter zero-conf handling (#38778) gatsbyjs/gatsby#38800)
366b54c chore(release): Publish
4b892c5 chore(gatsby-cli,gatsby-source-wordpress): bump clipboardy (chore(gatsby-cli,gatsby-source-wordpress): bump clipboardy gatsbyjs/gatsby#38775) (chore(gatsby-cli,gatsby-source-wordpress): bump clipboardy (#38775) gatsbyjs/gatsby#38776)
2c0622c chore(release): Publish
5d6bb65 fix(docs): update remote url docs (fix(docs): update remote url docs gatsbyjs/gatsby#38768) (fix(docs): update remote url docs (#38768) gatsbyjs/gatsby#38770)
18ffcfa chore(release): Publish
1953e5c fix(gatsby): allow gatsby-adapter-netlify@">=1.0.0 <=1.0.3" for gatsby@<5.12.10 (fix(gatsby): allow gatsby-adapter-netlify@">=1.0.0 <=1.0.3" for gatsby@<5.12.10 gatsbyjs/gatsby#38758)
4a780fb feat: image and file cdn url generator adapter implementation (feat: image and file cdn url generator adapter implementation gatsbyjs/gatsby#38685)
f8c207b chore: move gatsby-plugin-netlify-cms to deprecated-packages (chore: move gatsby-plugin-netlify-cms to deprecated-packages gatsbyjs/gatsby#38755)
6d1d97e chore(gatsby-plugin-netlify-cms): add deprecation notice (chore(gatsby-plugin-netlify-cms): add deprecation notice gatsbyjs/gatsby#38753)
7a7fa5f chore(deps): update dependency @ types/jscodeshift to ^0.11.11 for gatsby-codemods (chore(deps): update dependency @types/jscodeshift to ^0.11.11 for gatsby-codemods gatsbyjs/gatsby#38595)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade gatsby from 5.0.0 to 5.13.4. See this package in npm: https://www.npmjs.com/package/gatsby See this project in Snyk: https://app.snyk.io/org/sammytezzy/project/f5fdc01b-8aa3-49af-9e83-74a833d59c17?utm_source=github&utm_medium=referral&page=upgrade-pr

stackblitz · 2024-05-02T21:58:40Z

Run & review this pull request in StackBlitz Codeflow.

changeset-bot · 2024-05-02T21:58:41Z

⚠️ No Changeset found

Latest commit: bdc90f4

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

sourcery-ai

We have skipped reviewing this pull request. It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!

sourcery-ai bot reviewed May 2, 2024

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade gatsby from 5.0.0 to 5.13.4 #702

[Snyk] Upgrade gatsby from 5.0.0 to 5.13.4 #702

X-oss-byte commented May 2, 2024

stackblitz bot commented May 2, 2024

changeset-bot bot commented May 2, 2024

sourcery-ai bot left a comment

[Snyk] Upgrade gatsby from 5.0.0 to 5.13.4 #702

Are you sure you want to change the base?

[Snyk] Upgrade gatsby from 5.0.0 to 5.13.4 #702

Conversation

X-oss-byte commented May 2, 2024

Snyk has created this PR to upgrade gatsby from 5.0.0 to 5.13.4.

stackblitz bot commented May 2, 2024

changeset-bot bot commented May 2, 2024

⚠️ No Changeset found

sourcery-ai bot left a comment

Choose a reason for hiding this comment