Skip to content

[Snyk] Security upgrade gatsby-plugin-sharp from 4.2.0 to 4.13.0#49

Open
shdkej wants to merge 1 commit into
masterfrom
snyk-fix-b5a498f869c3f8abf88a8ae6210a91b2
Open

[Snyk] Security upgrade gatsby-plugin-sharp from 4.2.0 to 4.13.0#49
shdkej wants to merge 1 commit into
masterfrom
snyk-fix-b5a498f869c3f8abf88a8ae6210a91b2

Conversation

@shdkej

@shdkej shdkej commented Apr 14, 2024

Copy link
Copy Markdown
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
⚠️ Warning
Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 501/1000
Why? Recently disclosed, Has a fix available, CVSS 4.3
Information Exposure Through Sent Data
SNYK-JS-PHIN-6598077
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: gatsby-plugin-sharp The new version differs by 250 commits.
  • 89509ff chore(release): Publish
  • dc25387 fix(gatsby-source-contentful): Prevent null pointer exception (#35244) (#35492)
  • 4627e3d chore(docs):Update Link URL (#35462)
  • 028f348 fix(gatsby-dev-cli): use package name not directory name (#35447)
  • 027acf8 feat(gatsby-source-wordpress): bring back defaults before image_cdn (#35370)
  • a246011 feat(gatsby-plugin-utils): enable tracedsvg (#35328)
  • dfa5991 chore(gatsby-source-wordpress): Fix typo in `presets[].options` (#35455)
  • 697e6f4 docs(gatsby): image cdn author docs tweak (#35451)
  • 3fb8642 fix(gatsby-transformer-screenshot): finished migration from better-queue to fastq (#35425)
  • e30be3e fix(gatsby-link): modify relative links based on trailing slash option (#35444)
  • 1b6a35b chore(docs): Typo on "Adding forms" (#35438)
  • e1e82bc chore(changelogs): update changelogs (#35431)
  • d50457f fix(gatsby-source-wordpress): localFile id (#35423)
  • 6476633 fix(gatsby): limit node manifest creation limit (#35359)
  • 5698ada fix(gatsby-plugin-netlify-cms): react18-compatible require resolve (#35365)
  • f63d13d chore(changelogs): update changelogs (#35414)
  • 233f54a fix(deps): update starters and examples - gatsby (#35413)
  • 5979c88 chore(docs): Release Notes for 4.12 (#35376)
  • 68c8e74 fix(deps): update starters and examples gatsby packages to ^4.11.3 (#35401)
  • f49f10b chore(changelogs): update changelogs (#35402)
  • 68aabc8 fix(gatsby-plugin-gatsby-cloud): don't add `undefined` to preload path if assetPrefix is falsy (#35400)
  • 9b8aadc fix(gatsby-source-wordpress): fix integration tests (#35399)
  • 316ac02 chore(release): Publish next
  • 92d384f fix(gatsby): only install 2.2.x patch versions of lmdb while 2.3.0 has a bug (#35397)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-PHIN-6598077
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants