New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 6 vulnerabilities #2270

Open

kaocher82 wants to merge 1 commit into master from snyk-fix-8e2cace954e453bbf7593cd6349c4863

kaocher82 commented Jun 22, 2022

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- examples/using-MDX/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	798/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.1	Deserialization of Untrusted Data SNYK-JS-GATSBYPLUGINMDX-2405699	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	Yes	Proof of Concept
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Command Injection SNYK-JS-REACTDEVUTILS-1083268	Yes	Proof of Concept
	619/1000 Why? Has a fix available, CVSS 8.1	Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	Yes	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-TRIM-1017038	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @mdx-js/mdx

The new version differs by 30 commits.

bf7deab v2.0.0-next.5
5c15a00 fix(remark-mdx): move remark-stringify to deps ([Snyk] Security upgrade gatsby from 2.32.13 to 3.0.0 #1190)
f59b174 Make type test run in their own action, closes [Snyk] Security upgrade unist-util-select from 1.5.0 to 3.0.3 #1172 ([Snyk] Fix for 1 vulnerabilities #1179)
9ac9755 docs(typescript): document how to use mdx 2 with typescript ([Snyk] Security upgrade gatsby from 2.32.13 to 3.0.0 #1181)
42077e4 ci(github): update github actions to latest versions ([Snyk] Security upgrade gatsby from 2.32.13 to 3.0.0 #1180)
cc95646 ci(github): update github actions and dtslint to latest ([Snyk] Security upgrade gatsby from 2.32.13 to 3.0.0 #1178)
6098d94 Remove deprecated plugin options, fixes [Snyk] Security upgrade gatsby from 2.32.13 to 3.0.0 #718 ([Snyk] Fix for 1 vulnerabilities #1174)
0da2fcf Specify pre-dist-tag
e1b45e3 v2.0.0-next.4
649dbd8 Implement inline link serialization that doesn't wrap them in angle ([Snyk] Security upgrade gatsby from 2.32.13 to 3.0.0 #1171)
d08c5b6 Make testing matrix simpler ([Snyk] Security upgrade gatsby from 2.32.13 to 3.0.0 #1173)
d0059c8 v2.0.0-next.3
fa091d2 v2.0.0-next.2
7829b88 Move publish to its own action
afd60c2 Break out linting into its own action
3ca8e0a Fix linting ([Snyk] Security upgrade gatsby from 2.32.13 to 3.0.0 #1161)
577d48f Fix some linting
db93304 Improve export name extraction for shortcode generation ([Snyk] Fix for 1 vulnerabilities #1160)
ea9970a Bump deps, fix core-js version in babel configs
166fd9d v2.0.0-next.1
569f82f Make preid next to match dist tag
a3d8f08 types: add types to test utils ([Snyk] Security upgrade gatsby from 2.32.13 to 3.13.0 #1083)
e2eb4ee types: add typescript typings for remark-mdx, remark-mdx-remove-exports, remark-mdx-remove-imports, @ mdx-js/util ([Snyk] Security upgrade gatsby from 2.32.13 to 3.13.0 #1082)
65af47c Break three main tests into their own scripts

See the full diff

Package name: gatsby

The new version differs by 250 commits.

2c324f6 chore(release): Publish
55c7183 feat(contentful): add support for tables in Rich Text (feat(contentful): add support for tables in Rich Text gatsbyjs/gatsby#33870)
053180a fix(gatsby): Better TS compilation error (fix(gatsby): Better TS compilation error gatsbyjs/gatsby#35594)
0cf0bd9 chore(release): Publish next
9a91295 fix(gatsby-plugin-image): fix image flickers (fix(gatsby-plugin-image): fix image flickers gatsbyjs/gatsby#35226)
f358dc3 chore(release): Publish next
966aca8 feat(gatsby): Improvements to GraphQL TypeScript Generation (feat(gatsby): Improvements to GraphQL TypeScript Generation gatsbyjs/gatsby#35581)
8bad9b3 perf(gatsby): Minify page-data (perf(gatsby): Minify page-data gatsbyjs/gatsby#35578)
39e9840 chore(gatsby): Expose `serverDataStatus` field in SSR type declaration file (chore(gatsby): Expose serverDataStatus field in SSR type declaration file gatsbyjs/gatsby#35505)
ebd63b2 feat(gatsby-source-wordpress): use image cdn for non-resizable images in html (svgs/gifs mainly) (feat(gatsby-source-wordpress): use image cdn for non-resizable images in html (svgs/gifs mainly) gatsbyjs/gatsby#35529)
5e51519 fix(gatsby-source-wordpress): update test deps and fix int tests (fix(gatsby-source-wordpress): update test deps and fix int tests gatsbyjs/gatsby#35582)
128c7bb feat(gatsby-source-wordpress): always include draft slugs (feat(gatsby-source-wordpress): always include draft slugs gatsbyjs/gatsby#35573)
abc6dca feat(gatsby-plugin-image): add check for node.gatsbyImage in the getImage helper (feat(gatsby-plugin-image): add check for node.gatsbyImage in the getImage helper gatsbyjs/gatsby#35507)
e51c3a3 chore(release): Publish next
c9d98a4 feat(gatsby): Initial GraphQL Typegen Implementation (feat(gatsby): Initial GraphQL Typegen Implementation gatsbyjs/gatsby#35487)
17cbc7c fix(deps): update minor and patch dependencies for gatsby-source-graphql (fix(deps): update minor and patch dependencies for gatsby-source-graphql gatsbyjs/gatsby#35545)
10752ed fix(deps): update dependency fs-extra to ^10.1.0 (fix(deps): update dependency fs-extra to ^10.1.0 gatsbyjs/gatsby#34976)
0abdcd6 fix(deps): update dependency coffeescript to ^2.7.0 for gatsby-plugin-coffeescript (fix(deps): update dependency coffeescript to ^2.7.0 for gatsby-plugin-coffeescript gatsbyjs/gatsby#35550)
7cda002 fix(deps): update dependency eslint-plugin-import to ^2.26.0 (fix(deps): update dependency eslint-plugin-import to ^2.26.0 gatsbyjs/gatsby#35551)
3e74a9f fix(deps): update dependency eslint-plugin-react-hooks to ^4.5.0 (fix(deps): update dependency eslint-plugin-react-hooks to ^4.5.0 gatsbyjs/gatsby#35552)
fb98116 fix(deps): update minor and patch dependencies for gatsby-source-drupal (fix(deps): update minor and patch dependencies for gatsby-source-drupal gatsbyjs/gatsby#35554)
c09287a chore(deps): update starters and examples (chore(deps): update starters and examples gatsbyjs/gatsby#35565)
bf854ca fix(deps): update dependency prop-types to ^15.8.1 for gatsby-link (fix(deps): update dependency prop-types to ^15.8.1 for gatsby-link gatsbyjs/gatsby#35291)
71eb414 chore(deps): update dependency typescript to ^4.6.4 (chore(deps): update dependency typescript to ^4.6.4 gatsbyjs/gatsby#34984)

See the full diff

Package name: gatsby-plugin-manifest

The new version differs by 250 commits.

e98cb62 chore(release): Publish
164f9a1 fix(gatsby-source-contentful): De-dupe type names (fix(gatsby-source-contentful): De-dupe type names gatsbyjs/gatsby#30834) (fix(gatsby-source-contentful): De-dupe type names (#30834) gatsbyjs/gatsby#30850)
0b99d00 fix(gatsby): webpack warnings are no longer in object format by default (fix(gatsby): webpack warnings are no longer in object format by default gatsbyjs/gatsby#30801) (fix(gatsby): webpack warnings are no longer in object format by default (#30801) gatsbyjs/gatsby#30853)
f561724 fix(gatsby): lower memory pressure in SSR (fix(gatsby): lower memory pressure in SSR gatsbyjs/gatsby#30793) (fix(gatsby): lower memory pressure in SSR (#30793) gatsbyjs/gatsby#30851)
96805d5 fix(gatsby-source-wordpress): change `console.warning` to `console.warn` (fix(gatsby-source-wordpress): error when sourcing nodes, change console.warning to console.warn gatsbyjs/gatsby#30764) (fix(gatsby-source-wordpress): change console.warning to console.warn (#30764) gatsbyjs/gatsby#30852)
e40c83d chore(release): Publish next
a5b5cf8 feat: upgrade to remark 13 (feat: upgrade to remark 13 gatsbyjs/gatsby#29678)
172cf4d chore(docs): Add link to perf implications siteContext (chore(docs): Add link to perf implications siteContext gatsbyjs/gatsby#30778)
4336d04 fix(gatsby-plugin-gatsby-cloud): Add missing index.js (so the plugin can be resolved in workspaces) (fix(gatsby-plugin-gatsby-cloud): Add missing index.js (so the plugin can be resolved in workspaces) gatsbyjs/gatsby#30761)
2bdd5a5 fix(gatsby-source-wordpress): only log out duplicate node if we have all the data we want to log (fix(gatsby-source-wordpress): only log out duplicate nodes if we have all the data we want to log gatsbyjs/gatsby#30751)
1a9b830 fix(gatsby-plugin-image): Don't inherit all img styles (fix(gatsby-plugin-image): Allow draggable=false on images gatsbyjs/gatsby#30754)
e0df4cc chore(docs): Change "whitelist" to "allow list" (chore(docs): Change "whitelist" to "allow list" gatsbyjs/gatsby#30756)
81ec270 chore: Add backport script (chore: Add backport script gatsbyjs/gatsby#30732)
63cc8fa fix(docs): Copy edits for debugging html doc + add React-specific example (fix(docs): Copy edits for debugging html doc + add React-specific example gatsbyjs/gatsby#30745)
eed1d43 fix(docs): Add link to how to enable DEV_SSR for fixing inconsistent css styles between dev/prod (fix(docs): Add link to how to enable DEV_SSR for fixing inconsistent css styles between dev/prod gatsbyjs/gatsby#30746)
ecd823f perf(gatsby): cache babel config items (perf(gatsby): cache babel config items gatsbyjs/gatsby#28738)
a60e92f chore(release): Publish next
dd9e95c docs(gatsby-plugin-image): Note on tracedSVG options name change (docs(gatsby-plugin-image): Note on tracedSVG options name change gatsbyjs/gatsby#30736)
a5869e3 fix(gatsby-plugin-image): Use bare GATSBY___IMAGE global (fix(gatsby-plugin-image): Use bare GATSBY___IMAGE global gatsbyjs/gatsby#30713)
0f3fa4e fix(contentful): make gatsby-plugin-image a peer dependency (fix(contentful): make gatsby-plugin-image a peer dependency gatsbyjs/gatsby#30709)
6b2fd94 fix(gatsby-source-wordpress): pass missing property helpers to gql fetch util (fix(gatsby-source-wordpress): pass missing property "helpers" to gql fetch util gatsbyjs/gatsby#30727)
c6fa488 chore(docs): Update wording of tutorial part 8 (chore(docs): Update wording of tutorial part 8 gatsbyjs/gatsby#30606)
a777367 fix(gatsby-cli): Update docs links in error-map (fix(gatsby-cli): Update docs links in error-map gatsbyjs/gatsby#30493)
c473abf chore(docs): include autoprefixer in tailwind install command (chore(docs): include autoprefixer in tailwind install command gatsbyjs/gatsby#30718)

See the full diff

Package name: gatsby-plugin-mdx

The new version differs by 250 commits.

4997d63 chore(release): Publish
ff94ed5 fix(gatsby-plugin-mdx): don't allow JS frontmatter by default (fix(gatsby-plugin-mdx): don't allow JS frontmatter by default gatsbyjs/gatsby#35830) (fix(gatsby-plugin-mdx): don't allow JS frontmatter by default (#35830) gatsbyjs/gatsby#35834)
36f21b0 chore: Removate validate-renovate from v3-latest branch (chore: Removate validate-renovate from v3-latest branch gatsbyjs/gatsby#34460)
1acb1bc chore(release): Publish
1589bd8 fix(gatsby): ensure that writing node manifests to disk does not break on Windows (fix(gatsby): ensure that writing node manifests to disk does not break on Windows gatsbyjs/gatsby#33853) (fix(gatsby): ensure that writing node manifests to disk does not break on Windows (#33853) gatsbyjs/gatsby#34020)
9694010 fix(gatsby-source-drupal): Ensure all new nodes are created before creating relationships (fix(gatsby-source-drupal): Ensure all new nodes are created before creating relationships gatsbyjs/gatsby#33864) (fix(gatsby-source-drupal): Ensure all new nodes are created before creating relationships (#33864) gatsbyjs/gatsby#34019)
76deb39 fix(gatsby-source-drupal): searcParams missing from urls (fix(gatsby-source-drupal): Add missing params from options to API urls gatsbyjs/gatsby#33861) (fix(gatsby-source-drupal): searcParams missing from urls (#33861) gatsbyjs/gatsby#34018)
f74cc8f feat(gatsby-source-drupal): Add node manifest support for previews (feat(gatsby-source-drupal): Add node manifest support for previews gatsbyjs/gatsby#33683) (feat(gatsby-source-drupal): Add node manifest support for previews (#33683) gatsbyjs/gatsby#34017)
476a591 chore(release): Publish
35b48f8 fix(gatsby-plugin-image): GatsbyImage not displaying image in IE11 (fix(gatsby-plugin-image): GatsbyImage not displaying image in IE11 gatsbyjs/gatsby#33416) (fix(gatsby-plugin-image): GatsbyImage not displaying image in IE11 (#33416) gatsbyjs/gatsby#33806)
880022e fix(gatsby-plugin-image): flickering when state changes (fix(gatsby-plugin-image): flickering when state changes gatsbyjs/gatsby#33732) (fix(gatsby-plugin-image): flickering when state changes (#33732) gatsbyjs/gatsby#33807)
c0d07e7 feat(gatsby-source-wordpress): Update supported-remote-plugin-versions.ts (feat(gatsby-source-wordpress): Update supported-remote-plugin-versions.ts gatsbyjs/gatsby#33801) (feat(gatsby-source-wordpress): Update supported-remote-plugin-versions.ts (#33801) gatsbyjs/gatsby#33804)
3d9a702 chore(release): Publish
84053a2 fix(gatsby-plugin-sharp): pass input buffer instead of readStream when processing image jobs (fix(gatsby-plugin-sharp): pass input buffer instead of readStream when processing image jobs gatsbyjs/gatsby#33685) (fix(gatsby-plugin-sharp): pass input buffer instead of readStream when processing image jobs (#33685) gatsbyjs/gatsby#33703)
4722a0d fix(gatsby-source-drupal): Add timeout in case of stalled API requests (fix(gatsby-source-drupal): Add timeout in case of stalled API requests gatsbyjs/gatsby#33668) (fix(gatsby-source-drupal): Add timeout in case of stalled API requests (#33668) gatsbyjs/gatsby#33705)
857a628 fix(gatsby): single page node manifest accuracy (fix(gatsby): single page node manifest accuracy gatsbyjs/gatsby#33642) (fix(gatsby): single page node manifest accuracy (#33642) gatsbyjs/gatsby#33698)
6bfd0f1 Properly set the pathPrefix and assetPrefix in the pluginData (Properly set the pathPrefix and assetPrefix in the pluginData gatsbyjs/gatsby#33667) (Properly set the pathPrefix and assetPrefix in the pluginData (#33667) gatsbyjs/gatsby#33702)
26c51c0 fix(gatsby-source-drupal): cache backlink records (fix(gatsby-source-drupal): cache backlink records gatsbyjs/gatsby#33444) (fix(gatsby-source-drupal): cache backlink records (#33444) gatsbyjs/gatsby#33701)
b80c53a fix(gatsby-source-drupal): Correctly update nodes with changed back references so queries are re-run (fix(gatsby-source-drupal): Clone nodes before adding back references so Gatsby knows the node has changed (so knows to re-run queries) gatsbyjs/gatsby#33328) (fix(gatsby-source-drupal): Correctly update nodes with changed back references so queries are re-run (#33328) gatsbyjs/gatsby#33699)
e29a194 chore: use gatsby-dev-cli@latest-v3 in tests
f90c61c chore(lerna): use latest-v3 npm dist tag (chore(lerna): use latest-v3 npm dist tag gatsbyjs/gatsby#33638)
fdf616c chore(release): Publish
d4cf891 fix(gatsby): use lmdb.removeSync so getNode can't return deleted nodes (fix(gatsby): use lmdb.removeSync so getNode can't return deleted nodes gatsbyjs/gatsby#33554) (fix(gatsby): use lmdb.removeSync so getNode can't return deleted nodes (#33554) gatsbyjs/gatsby#33633)
c692e1f chore(release): Publish

See the full diff

Package name: gatsby-plugin-sharp

The new version differs by 250 commits.

e98cb62 chore(release): Publish
164f9a1 fix(gatsby-source-contentful): De-dupe type names (fix(gatsby-source-contentful): De-dupe type names gatsbyjs/gatsby#30834) (fix(gatsby-source-contentful): De-dupe type names (#30834) gatsbyjs/gatsby#30850)
0b99d00 fix(gatsby): webpack warnings are no longer in object format by default (fix(gatsby): webpack warnings are no longer in object format by default gatsbyjs/gatsby#30801) (fix(gatsby): webpack warnings are no longer in object format by default (#30801) gatsbyjs/gatsby#30853)
f561724 fix(gatsby): lower memory pressure in SSR (fix(gatsby): lower memory pressure in SSR gatsbyjs/gatsby#30793) (fix(gatsby): lower memory pressure in SSR (#30793) gatsbyjs/gatsby#30851)
96805d5 fix(gatsby-source-wordpress): change `console.warning` to `console.warn` (fix(gatsby-source-wordpress): error when sourcing nodes, change console.warning to console.warn gatsbyjs/gatsby#30764) (fix(gatsby-source-wordpress): change console.warning to console.warn (#30764) gatsbyjs/gatsby#30852)
e40c83d chore(release): Publish next
a5b5cf8 feat: upgrade to remark 13 (feat: upgrade to remark 13 gatsbyjs/gatsby#29678)
172cf4d chore(docs): Add link to perf implications siteContext (chore(docs): Add link to perf implications siteContext gatsbyjs/gatsby#30778)
4336d04 fix(gatsby-plugin-gatsby-cloud): Add missing index.js (so the plugin can be resolved in workspaces) (fix(gatsby-plugin-gatsby-cloud): Add missing index.js (so the plugin can be resolved in workspaces) gatsbyjs/gatsby#30761)
2bdd5a5 fix(gatsby-source-wordpress): only log out duplicate node if we have all the data we want to log (fix(gatsby-source-wordpress): only log out duplicate nodes if we have all the data we want to log gatsbyjs/gatsby#30751)
1a9b830 fix(gatsby-plugin-image): Don't inherit all img styles (fix(gatsby-plugin-image): Allow draggable=false on images gatsbyjs/gatsby#30754)
e0df4cc chore(docs): Change "whitelist" to "allow list" (chore(docs): Change "whitelist" to "allow list" gatsbyjs/gatsby#30756)
81ec270 chore: Add backport script (chore: Add backport script gatsbyjs/gatsby#30732)
63cc8fa fix(docs): Copy edits for debugging html doc + add React-specific example (fix(docs): Copy edits for debugging html doc + add React-specific example gatsbyjs/gatsby#30745)
eed1d43 fix(docs): Add link to how to enable DEV_SSR for fixing inconsistent css styles between dev/prod (fix(docs): Add link to how to enable DEV_SSR for fixing inconsistent css styles between dev/prod gatsbyjs/gatsby#30746)
ecd823f perf(gatsby): cache babel config items (perf(gatsby): cache babel config items gatsbyjs/gatsby#28738)
a60e92f chore(release): Publish next
dd9e95c docs(gatsby-plugin-image): Note on tracedSVG options name change (docs(gatsby-plugin-image): Note on tracedSVG options name change gatsbyjs/gatsby#30736)
a5869e3 fix(gatsby-plugin-image): Use bare GATSBY___IMAGE global (fix(gatsby-plugin-image): Use bare GATSBY___IMAGE global gatsbyjs/gatsby#30713)
0f3fa4e fix(contentful): make gatsby-plugin-image a peer dependency (fix(contentful): make gatsby-plugin-image a peer dependency gatsbyjs/gatsby#30709)
6b2fd94 fix(gatsby-source-wordpress): pass missing property helpers to gql fetch util (fix(gatsby-source-wordpress): pass missing property "helpers" to gql fetch util gatsbyjs/gatsby#30727)
c6fa488 chore(docs): Update wording of tutorial part 8 (chore(docs): Update wording of tutorial part 8 gatsbyjs/gatsby#30606)
a777367 fix(gatsby-cli): Update docs links in error-map (fix(gatsby-cli): Update docs links in error-map gatsbyjs/gatsby#30493)
c473abf chore(docs): include autoprefixer in tailwind install command (chore(docs): include autoprefixer in tailwind install command gatsbyjs/gatsby#30718)

See the full diff

Package name: gatsby-transformer-sharp

The new version differs by 250 commits.

e98cb62 chore(release): Publish
164f9a1 fix(gatsby-source-contentful): De-dupe type names (fix(gatsby-source-contentful): De-dupe type names gatsbyjs/gatsby#30834) (fix(gatsby-source-contentful): De-dupe type names (#30834) gatsbyjs/gatsby#30850)
0b99d00 fix(gatsby): webpack warnings are no longer in object format by default (fix(gatsby): webpack warnings are no longer in object format by default gatsbyjs/gatsby#30801) (fix(gatsby): webpack warnings are no longer in object format by default (#30801) gatsbyjs/gatsby#30853)
f561724 fix(gatsby): lower memory pressure in SSR (fix(gatsby): lower memory pressure in SSR gatsbyjs/gatsby#30793) (fix(gatsby): lower memory pressure in SSR (#30793) gatsbyjs/gatsby#30851)
96805d5 fix(gatsby-source-wordpress): change `console.warning` to `console.warn` (fix(gatsby-source-wordpress): error when sourcing nodes, change console.warning to console.warn gatsbyjs/gatsby#30764) (fix(gatsby-source-wordpress): change console.warning to console.warn (#30764) gatsbyjs/gatsby#30852)
e40c83d chore(release): Publish next
a5b5cf8 feat: upgrade to remark 13 (feat: upgrade to remark 13 gatsbyjs/gatsby#29678)
172cf4d chore(docs): Add link to perf implications siteContext (chore(docs): Add link to perf implications siteContext gatsbyjs/gatsby#30778)
4336d04 fix(gatsby-plugin-gatsby-cloud): Add missing index.js (so the plugin can be resolved in workspaces) (fix(gatsby-plugin-gatsby-cloud): Add missing index.js (so the plugin can be resolved in workspaces) gatsbyjs/gatsby#30761)
2bdd5a5 fix(gatsby-source-wordpress): only log out duplicate node if we have all the data we want to log (fix(gatsby-source-wordpress): only log out duplicate nodes if we have all the data we want to log gatsbyjs/gatsby#30751)
1a9b830 fix(gatsby-plugin-image): Don't inherit all img styles (fix(gatsby-plugin-image): Allow draggable=false on images gatsbyjs/gatsby#30754)
e0df4cc chore(docs): Change "whitelist" to "allow list" (chore(docs): Change "whitelist" to "allow list" gatsbyjs/gatsby#30756)
81ec270 chore: Add backport script (chore: Add backport script gatsbyjs/gatsby#30732)
63cc8fa fix(docs): Copy edits for debugging html doc + add React-specific example (fix(docs): Copy edits for debugging html doc + add React-specific example gatsbyjs/gatsby#30745)
eed1d43 fix(docs): Add link to how to enable DEV_SSR for fixing inconsistent css styles between dev/prod (fix(docs): Add link to how to enable DEV_SSR for fixing inconsistent css styles between dev/prod gatsbyjs/gatsby#30746)
ecd823f perf(gatsby): cache babel config items (perf(gatsby): cache babel config items gatsbyjs/gatsby#28738)
a60e92f chore(release): Publish next
dd9e95c docs(gatsby-plugin-image): Note on tracedSVG options name change (docs(gatsby-plugin-image): Note on tracedSVG options name change gatsbyjs/gatsby#30736)
a5869e3 fix(gatsby-plugin-image): Use bare GATSBY___IMAGE global (fix(gatsby-plugin-image): Use bare GATSBY___IMAGE global gatsbyjs/gatsby#30713)
0f3fa4e fix(contentful): make gatsby-plugin-image a peer dependency (fix(contentful): make gatsby-plugin-image a peer dependency gatsbyjs/gatsby#30709)
6b2fd94 fix(gatsby-source-wordpress): pass missing property helpers to gql fetch util (fix(gatsby-source-wordpress): pass missing property "helpers" to gql fetch util gatsbyjs/gatsby#30727)
c6fa488 chore(docs): Update wording of tutorial part 8 (chore(docs): Update wording of tutorial part 8 gatsbyjs/gatsby#30606)
a777367 fix(gatsby-cli): Update docs links in error-map (fix(gatsby-cli): Update docs links in error-map gatsbyjs/gatsby#30493)
c473abf chore(docs): include autoprefixer in tailwind install command (chore(docs): include autoprefixer in tailwind install command gatsbyjs/gatsby#30718)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Deserialization of Untrusted Data
🦉 Remote Code Execution (RCE)


          fix: examples/using-MDX/package.json to reduce vulnerabilities

d48d5c5

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908
- https://snyk.io/vuln/SNYK-JS-GATSBYPLUGINMDX-2405699
- https://snyk.io/vuln/SNYK-JS-POSTCSS-1255640
- https://snyk.io/vuln/SNYK-JS-REACTDEVUTILS-1083268
- https://snyk.io/vuln/SNYK-JS-SHELLQUOTE-1766506
- https://snyk.io/vuln/SNYK-JS-TRIM-1017038

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet