Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade gatsby from 4.25.9 to 5.14.0 #875

Open
wants to merge 24 commits into
base: main
Choose a base branch
from

Commits on Sep 6, 2024

  1. build(deps): bump sass from 1.77.8 to 1.78.0

    Bumps [sass](https://github.com/sass/dart-sass) from 1.77.8 to 1.78.0.
    - [Release notes](https://github.com/sass/dart-sass/releases)
    - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
    - [Commits](sass/dart-sass@1.77.8...1.78.0)
    
    ---
    updated-dependencies:
    - dependency-name: sass
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    e8b6c56 View commit details
    Browse the repository at this point in the history

Commits on Sep 13, 2024

  1. build(deps): bump i18next from 23.14.0 to 23.15.1

    Bumps [i18next](https://github.com/i18next/i18next) from 23.14.0 to 23.15.1.
    - [Release notes](https://github.com/i18next/i18next/releases)
    - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
    - [Commits](i18next/i18next@v23.14.0...v23.15.1)
    
    ---
    updated-dependencies:
    - dependency-name: i18next
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Sep 13, 2024
    Configuration menu
    Copy the full SHA
    daa3e05 View commit details
    Browse the repository at this point in the history
  2. build(deps): bump the npm_and_yarn group with 4 updates

    Bumps the npm_and_yarn group with 4 updates: [express](https://github.com/expressjs/express), [path-to-regexp](https://github.com/pillarjs/path-to-regexp), [send](https://github.com/pillarjs/send) and [serve-static](https://github.com/expressjs/serve-static).
    
    
    Updates `express` from 4.19.2 to 4.21.0
    - [Release notes](https://github.com/expressjs/express/releases)
    - [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)
    - [Commits](expressjs/express@4.19.2...4.21.0)
    
    Updates `path-to-regexp` from 0.1.7 to 0.1.10
    - [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
    - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
    - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.10)
    
    Updates `send` from 0.18.0 to 0.19.0
    - [Release notes](https://github.com/pillarjs/send/releases)
    - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)
    - [Commits](pillarjs/send@0.18.0...0.19.0)
    
    Updates `serve-static` from 1.15.0 to 1.16.2
    - [Release notes](https://github.com/expressjs/serve-static/releases)
    - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md)
    - [Commits](expressjs/serve-static@v1.15.0...v1.16.2)
    
    ---
    updated-dependencies:
    - dependency-name: express
      dependency-type: indirect
      dependency-group: npm_and_yarn
    - dependency-name: path-to-regexp
      dependency-type: indirect
      dependency-group: npm_and_yarn
    - dependency-name: send
      dependency-type: indirect
      dependency-group: npm_and_yarn
    - dependency-name: serve-static
      dependency-type: indirect
      dependency-group: npm_and_yarn
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Sep 13, 2024
    Configuration menu
    Copy the full SHA
    a256c28 View commit details
    Browse the repository at this point in the history

Commits on Sep 20, 2024

  1. build(deps): bump react-i18next from 15.0.1 to 15.0.2

    Bumps [react-i18next](https://github.com/i18next/react-i18next) from 15.0.1 to 15.0.2.
    - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
    - [Commits](i18next/react-i18next@v15.0.1...v15.0.2)
    
    ---
    updated-dependencies:
    - dependency-name: react-i18next
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Sep 20, 2024
    Configuration menu
    Copy the full SHA
    97ecd33 View commit details
    Browse the repository at this point in the history
  2. build(deps): bump sass from 1.78.0 to 1.79.2

    Bumps [sass](https://github.com/sass/dart-sass) from 1.78.0 to 1.79.2.
    - [Release notes](https://github.com/sass/dart-sass/releases)
    - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
    - [Commits](sass/dart-sass@1.78.0...1.79.2)
    
    ---
    updated-dependencies:
    - dependency-name: sass
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Sep 20, 2024
    Configuration menu
    Copy the full SHA
    6f82760 View commit details
    Browse the repository at this point in the history

Commits on Sep 27, 2024

  1. build(deps): bump sass from 1.79.2 to 1.79.3

    Bumps [sass](https://github.com/sass/dart-sass) from 1.79.2 to 1.79.3.
    - [Release notes](https://github.com/sass/dart-sass/releases)
    - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
    - [Commits](sass/dart-sass@1.79.2...1.79.3)
    
    ---
    updated-dependencies:
    - dependency-name: sass
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Sep 27, 2024
    Configuration menu
    Copy the full SHA
    2eb2d2d View commit details
    Browse the repository at this point in the history

Commits on Oct 4, 2024

  1. build(deps): bump sass from 1.79.3 to 1.79.4

    Bumps [sass](https://github.com/sass/dart-sass) from 1.79.3 to 1.79.4.
    - [Release notes](https://github.com/sass/dart-sass/releases)
    - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
    - [Commits](sass/dart-sass@1.79.3...1.79.4)
    
    ---
    updated-dependencies:
    - dependency-name: sass
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Oct 4, 2024
    Configuration menu
    Copy the full SHA
    970f7fc View commit details
    Browse the repository at this point in the history

Commits on Oct 11, 2024

  1. build(deps): bump i18next from 23.15.1 to 23.15.2

    Bumps [i18next](https://github.com/i18next/i18next) from 23.15.1 to 23.15.2.
    - [Release notes](https://github.com/i18next/i18next/releases)
    - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
    - [Commits](i18next/i18next@v23.15.1...v23.15.2)
    
    ---
    updated-dependencies:
    - dependency-name: i18next
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Oct 11, 2024
    Configuration menu
    Copy the full SHA
    a2d29ac View commit details
    Browse the repository at this point in the history
  2. build(deps): bump sass from 1.79.4 to 1.79.5

    Bumps [sass](https://github.com/sass/dart-sass) from 1.79.4 to 1.79.5.
    - [Release notes](https://github.com/sass/dart-sass/releases)
    - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
    - [Commits](sass/dart-sass@1.79.4...1.79.5)
    
    ---
    updated-dependencies:
    - dependency-name: sass
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Oct 11, 2024
    Configuration menu
    Copy the full SHA
    87d5e02 View commit details
    Browse the repository at this point in the history

Commits on Oct 18, 2024

  1. build(deps): bump react-i18next from 15.0.2 to 15.0.3

    Bumps [react-i18next](https://github.com/i18next/react-i18next) from 15.0.2 to 15.0.3.
    - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
    - [Commits](i18next/react-i18next@v15.0.2...v15.0.3)
    
    ---
    updated-dependencies:
    - dependency-name: react-i18next
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Oct 18, 2024
    Configuration menu
    Copy the full SHA
    38a23f0 View commit details
    Browse the repository at this point in the history
  2. build(deps): bump sass from 1.79.5 to 1.80.2

    Bumps [sass](https://github.com/sass/dart-sass) from 1.79.5 to 1.80.2.
    - [Release notes](https://github.com/sass/dart-sass/releases)
    - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
    - [Commits](sass/dart-sass@1.79.5...1.80.2)
    
    ---
    updated-dependencies:
    - dependency-name: sass
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Oct 18, 2024
    Configuration menu
    Copy the full SHA
    bea9710 View commit details
    Browse the repository at this point in the history

Commits on Oct 25, 2024

  1. build(deps): bump react-i18next from 15.0.3 to 15.1.0

    Bumps [react-i18next](https://github.com/i18next/react-i18next) from 15.0.3 to 15.1.0.
    - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
    - [Commits](i18next/react-i18next@v15.0.3...v15.1.0)
    
    ---
    updated-dependencies:
    - dependency-name: react-i18next
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Oct 25, 2024
    Configuration menu
    Copy the full SHA
    86fd085 View commit details
    Browse the repository at this point in the history
  2. build(deps): bump sass from 1.80.2 to 1.80.4

    Bumps [sass](https://github.com/sass/dart-sass) from 1.80.2 to 1.80.4.
    - [Release notes](https://github.com/sass/dart-sass/releases)
    - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
    - [Commits](sass/dart-sass@1.80.2...1.80.4)
    
    ---
    updated-dependencies:
    - dependency-name: sass
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Oct 25, 2024
    Configuration menu
    Copy the full SHA
    1fb1a1e View commit details
    Browse the repository at this point in the history
  3. build(deps): bump i18next from 23.15.2 to 23.16.3

    Bumps [i18next](https://github.com/i18next/i18next) from 23.15.2 to 23.16.3.
    - [Release notes](https://github.com/i18next/i18next/releases)
    - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
    - [Commits](i18next/i18next@v23.15.2...v23.16.3)
    
    ---
    updated-dependencies:
    - dependency-name: i18next
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Oct 25, 2024
    Configuration menu
    Copy the full SHA
    99b5dc6 View commit details
    Browse the repository at this point in the history

Commits on Nov 1, 2024

  1. build(deps): bump sass from 1.80.4 to 1.80.5

    Bumps [sass](https://github.com/sass/dart-sass) from 1.80.4 to 1.80.5.
    - [Release notes](https://github.com/sass/dart-sass/releases)
    - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
    - [Commits](sass/dart-sass@1.80.4...1.80.5)
    
    ---
    updated-dependencies:
    - dependency-name: sass
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Nov 1, 2024
    Configuration menu
    Copy the full SHA
    221864c View commit details
    Browse the repository at this point in the history
  2. build(deps): bump gatsby-plugin-react-i18next from 2.0.5 to 3.0.1

    Bumps [gatsby-plugin-react-i18next](https://github.com/microapps/gatsby-plugin-react-i18next) from 2.0.5 to 3.0.1.
    - [Release notes](https://github.com/microapps/gatsby-plugin-react-i18next/releases)
    - [Commits](microapps/gatsby-plugin-react-i18next@v2.0.5...v3.0.1)
    
    ---
    updated-dependencies:
    - dependency-name: gatsby-plugin-react-i18next
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Nov 1, 2024
    Configuration menu
    Copy the full SHA
    b603c26 View commit details
    Browse the repository at this point in the history
  3. build(deps): bump i18next from 23.16.3 to 23.16.4

    Bumps [i18next](https://github.com/i18next/i18next) from 23.16.3 to 23.16.4.
    - [Release notes](https://github.com/i18next/i18next/releases)
    - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
    - [Commits](i18next/i18next@v23.16.3...v23.16.4)
    
    ---
    updated-dependencies:
    - dependency-name: i18next
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Nov 1, 2024
    Configuration menu
    Copy the full SHA
    7d392d3 View commit details
    Browse the repository at this point in the history

Commits on Nov 5, 2024

  1. fix: package.json & yarn.lock to reduce vulnerabilities

    The following vulnerabilities are fixed with an upgrade:
    - https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728
    snyk-bot authored and neilime committed Nov 5, 2024
    Configuration menu
    Copy the full SHA
    f25b675 View commit details
    Browse the repository at this point in the history

Commits on Nov 8, 2024

  1. build(deps): bump gatsby-source-filesystem from 5.13.1 to 5.14.0

    Bumps [gatsby-source-filesystem](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-source-filesystem) from 5.13.1 to 5.14.0.
    - [Release notes](https://github.com/gatsbyjs/gatsby/releases)
    - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-source-filesystem/CHANGELOG.md)
    - [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-source-filesystem)
    
    ---
    updated-dependencies:
    - dependency-name: gatsby-source-filesystem
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Nov 8, 2024
    Configuration menu
    Copy the full SHA
    235f500 View commit details
    Browse the repository at this point in the history
  2. build(deps-dev): bump babel-preset-gatsby from 3.13.2 to 3.14.0

    Bumps [babel-preset-gatsby](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/babel-preset-gatsby) from 3.13.2 to 3.14.0.
    - [Release notes](https://github.com/gatsbyjs/gatsby/releases)
    - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/babel-preset-gatsby/CHANGELOG.md)
    - [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/babel-preset-gatsby)
    
    ---
    updated-dependencies:
    - dependency-name: babel-preset-gatsby
      dependency-type: direct:development
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Nov 8, 2024
    Configuration menu
    Copy the full SHA
    94558ae View commit details
    Browse the repository at this point in the history
  3. build(deps): bump react-i18next from 15.1.0 to 15.1.1

    Bumps [react-i18next](https://github.com/i18next/react-i18next) from 15.1.0 to 15.1.1.
    - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
    - [Commits](i18next/react-i18next@v15.1.0...v15.1.1)
    
    ---
    updated-dependencies:
    - dependency-name: react-i18next
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Nov 8, 2024
    Configuration menu
    Copy the full SHA
    b75045e View commit details
    Browse the repository at this point in the history
  4. build(deps): bump gatsby-plugin-react-helmet from 6.13.1 to 6.14.0

    Bumps [gatsby-plugin-react-helmet](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-react-helmet) from 6.13.1 to 6.14.0.
    - [Release notes](https://github.com/gatsbyjs/gatsby/releases)
    - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-react-helmet/CHANGELOG.md)
    - [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-plugin-react-helmet)
    
    ---
    updated-dependencies:
    - dependency-name: gatsby-plugin-react-helmet
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Nov 8, 2024
    Configuration menu
    Copy the full SHA
    2950568 View commit details
    Browse the repository at this point in the history
  5. build(deps): bump gatsby-plugin-sass from 6.13.1 to 6.14.0

    Bumps [gatsby-plugin-sass](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-sass) from 6.13.1 to 6.14.0.
    - [Release notes](https://github.com/gatsbyjs/gatsby/releases)
    - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-sass/CHANGELOG.md)
    - [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-plugin-sass)
    
    ---
    updated-dependencies:
    - dependency-name: gatsby-plugin-sass
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored and neilime committed Nov 8, 2024
    Configuration menu
    Copy the full SHA
    ec643d9 View commit details
    Browse the repository at this point in the history
  6. Configuration menu
    Copy the full SHA
    b9307ac View commit details
    Browse the repository at this point in the history