-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Snyk] Security upgrade gatsby from 4.25.9 to 5.14.0 #875
base: main
Are you sure you want to change the base?
Commits on Sep 6, 2024
-
build(deps): bump sass from 1.77.8 to 1.78.0
Bumps [sass](https://github.com/sass/dart-sass) from 1.77.8 to 1.78.0. - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.77.8...1.78.0) --- updated-dependencies: - dependency-name: sass dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for e8b6c56 - Browse repository at this point
Copy the full SHA e8b6c56View commit details
Commits on Sep 13, 2024
-
build(deps): bump i18next from 23.14.0 to 23.15.1
Bumps [i18next](https://github.com/i18next/i18next) from 23.14.0 to 23.15.1. - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](i18next/i18next@v23.14.0...v23.15.1) --- updated-dependencies: - dependency-name: i18next dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for daa3e05 - Browse repository at this point
Copy the full SHA daa3e05View commit details -
build(deps): bump the npm_and_yarn group with 4 updates
Bumps the npm_and_yarn group with 4 updates: [express](https://github.com/expressjs/express), [path-to-regexp](https://github.com/pillarjs/path-to-regexp), [send](https://github.com/pillarjs/send) and [serve-static](https://github.com/expressjs/serve-static). Updates `express` from 4.19.2 to 4.21.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md) - [Commits](expressjs/express@4.19.2...4.21.0) Updates `path-to-regexp` from 0.1.7 to 0.1.10 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.10) Updates `send` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.18.0...0.19.0) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) --- updated-dependencies: - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for a256c28 - Browse repository at this point
Copy the full SHA a256c28View commit details
Commits on Sep 20, 2024
-
build(deps): bump react-i18next from 15.0.1 to 15.0.2
Bumps [react-i18next](https://github.com/i18next/react-i18next) from 15.0.1 to 15.0.2. - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md) - [Commits](i18next/react-i18next@v15.0.1...v15.0.2) --- updated-dependencies: - dependency-name: react-i18next dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 97ecd33 - Browse repository at this point
Copy the full SHA 97ecd33View commit details -
build(deps): bump sass from 1.78.0 to 1.79.2
Bumps [sass](https://github.com/sass/dart-sass) from 1.78.0 to 1.79.2. - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.78.0...1.79.2) --- updated-dependencies: - dependency-name: sass dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 6f82760 - Browse repository at this point
Copy the full SHA 6f82760View commit details
Commits on Sep 27, 2024
-
build(deps): bump sass from 1.79.2 to 1.79.3
Bumps [sass](https://github.com/sass/dart-sass) from 1.79.2 to 1.79.3. - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.79.2...1.79.3) --- updated-dependencies: - dependency-name: sass dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 2eb2d2d - Browse repository at this point
Copy the full SHA 2eb2d2dView commit details
Commits on Oct 4, 2024
-
build(deps): bump sass from 1.79.3 to 1.79.4
Bumps [sass](https://github.com/sass/dart-sass) from 1.79.3 to 1.79.4. - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.79.3...1.79.4) --- updated-dependencies: - dependency-name: sass dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 970f7fc - Browse repository at this point
Copy the full SHA 970f7fcView commit details
Commits on Oct 11, 2024
-
build(deps): bump i18next from 23.15.1 to 23.15.2
Bumps [i18next](https://github.com/i18next/i18next) from 23.15.1 to 23.15.2. - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](i18next/i18next@v23.15.1...v23.15.2) --- updated-dependencies: - dependency-name: i18next dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for a2d29ac - Browse repository at this point
Copy the full SHA a2d29acView commit details -
build(deps): bump sass from 1.79.4 to 1.79.5
Bumps [sass](https://github.com/sass/dart-sass) from 1.79.4 to 1.79.5. - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.79.4...1.79.5) --- updated-dependencies: - dependency-name: sass dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 87d5e02 - Browse repository at this point
Copy the full SHA 87d5e02View commit details
Commits on Oct 18, 2024
-
build(deps): bump react-i18next from 15.0.2 to 15.0.3
Bumps [react-i18next](https://github.com/i18next/react-i18next) from 15.0.2 to 15.0.3. - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md) - [Commits](i18next/react-i18next@v15.0.2...v15.0.3) --- updated-dependencies: - dependency-name: react-i18next dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 38a23f0 - Browse repository at this point
Copy the full SHA 38a23f0View commit details -
build(deps): bump sass from 1.79.5 to 1.80.2
Bumps [sass](https://github.com/sass/dart-sass) from 1.79.5 to 1.80.2. - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.79.5...1.80.2) --- updated-dependencies: - dependency-name: sass dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for bea9710 - Browse repository at this point
Copy the full SHA bea9710View commit details
Commits on Oct 25, 2024
-
build(deps): bump react-i18next from 15.0.3 to 15.1.0
Bumps [react-i18next](https://github.com/i18next/react-i18next) from 15.0.3 to 15.1.0. - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md) - [Commits](i18next/react-i18next@v15.0.3...v15.1.0) --- updated-dependencies: - dependency-name: react-i18next dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 86fd085 - Browse repository at this point
Copy the full SHA 86fd085View commit details -
build(deps): bump sass from 1.80.2 to 1.80.4
Bumps [sass](https://github.com/sass/dart-sass) from 1.80.2 to 1.80.4. - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.80.2...1.80.4) --- updated-dependencies: - dependency-name: sass dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 1fb1a1e - Browse repository at this point
Copy the full SHA 1fb1a1eView commit details -
build(deps): bump i18next from 23.15.2 to 23.16.3
Bumps [i18next](https://github.com/i18next/i18next) from 23.15.2 to 23.16.3. - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](i18next/i18next@v23.15.2...v23.16.3) --- updated-dependencies: - dependency-name: i18next dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 99b5dc6 - Browse repository at this point
Copy the full SHA 99b5dc6View commit details
Commits on Nov 1, 2024
-
build(deps): bump sass from 1.80.4 to 1.80.5
Bumps [sass](https://github.com/sass/dart-sass) from 1.80.4 to 1.80.5. - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.80.4...1.80.5) --- updated-dependencies: - dependency-name: sass dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 221864c - Browse repository at this point
Copy the full SHA 221864cView commit details -
build(deps): bump gatsby-plugin-react-i18next from 2.0.5 to 3.0.1
Bumps [gatsby-plugin-react-i18next](https://github.com/microapps/gatsby-plugin-react-i18next) from 2.0.5 to 3.0.1. - [Release notes](https://github.com/microapps/gatsby-plugin-react-i18next/releases) - [Commits](microapps/gatsby-plugin-react-i18next@v2.0.5...v3.0.1) --- updated-dependencies: - dependency-name: gatsby-plugin-react-i18next dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for b603c26 - Browse repository at this point
Copy the full SHA b603c26View commit details -
build(deps): bump i18next from 23.16.3 to 23.16.4
Bumps [i18next](https://github.com/i18next/i18next) from 23.16.3 to 23.16.4. - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](i18next/i18next@v23.16.3...v23.16.4) --- updated-dependencies: - dependency-name: i18next dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 7d392d3 - Browse repository at this point
Copy the full SHA 7d392d3View commit details
Commits on Nov 5, 2024
-
fix: package.json & yarn.lock to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728
Configuration menu - View commit details
-
Copy full SHA for f25b675 - Browse repository at this point
Copy the full SHA f25b675View commit details
Commits on Nov 8, 2024
-
build(deps): bump gatsby-source-filesystem from 5.13.1 to 5.14.0
Bumps [gatsby-source-filesystem](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-source-filesystem) from 5.13.1 to 5.14.0. - [Release notes](https://github.com/gatsbyjs/gatsby/releases) - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-source-filesystem/CHANGELOG.md) - [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-source-filesystem) --- updated-dependencies: - dependency-name: gatsby-source-filesystem dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 235f500 - Browse repository at this point
Copy the full SHA 235f500View commit details -
build(deps-dev): bump babel-preset-gatsby from 3.13.2 to 3.14.0
Bumps [babel-preset-gatsby](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/babel-preset-gatsby) from 3.13.2 to 3.14.0. - [Release notes](https://github.com/gatsbyjs/gatsby/releases) - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/babel-preset-gatsby/CHANGELOG.md) - [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/babel-preset-gatsby) --- updated-dependencies: - dependency-name: babel-preset-gatsby dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 94558ae - Browse repository at this point
Copy the full SHA 94558aeView commit details -
build(deps): bump react-i18next from 15.1.0 to 15.1.1
Bumps [react-i18next](https://github.com/i18next/react-i18next) from 15.1.0 to 15.1.1. - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md) - [Commits](i18next/react-i18next@v15.1.0...v15.1.1) --- updated-dependencies: - dependency-name: react-i18next dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for b75045e - Browse repository at this point
Copy the full SHA b75045eView commit details -
build(deps): bump gatsby-plugin-react-helmet from 6.13.1 to 6.14.0
Bumps [gatsby-plugin-react-helmet](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-react-helmet) from 6.13.1 to 6.14.0. - [Release notes](https://github.com/gatsbyjs/gatsby/releases) - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-react-helmet/CHANGELOG.md) - [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-plugin-react-helmet) --- updated-dependencies: - dependency-name: gatsby-plugin-react-helmet dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for 2950568 - Browse repository at this point
Copy the full SHA 2950568View commit details -
build(deps): bump gatsby-plugin-sass from 6.13.1 to 6.14.0
Bumps [gatsby-plugin-sass](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-sass) from 6.13.1 to 6.14.0. - [Release notes](https://github.com/gatsbyjs/gatsby/releases) - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-sass/CHANGELOG.md) - [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-plugin-sass) --- updated-dependencies: - dependency-name: gatsby-plugin-sass dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for ec643d9 - Browse repository at this point
Copy the full SHA ec643d9View commit details -
fix: package.json & yarn.lock to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555 - https://snyk.io/vuln/SNYK-JS-AXIOS-6032459 - https://snyk.io/vuln/SNYK-JS-AXIOS-6124857
Configuration menu - View commit details
-
Copy full SHA for b9307ac - Browse repository at this point
Copy the full SHA b9307acView commit details