[Snyk] Upgrade gatsby from 5.0.0 to 5.13.3

[X-oss-byte]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade gatsby from 5.0.0 to 5.13.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 126 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2024-01-25.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	572/1000 Why? Proof of Concept exploit, CVSS 9.3	Proof of Concept
	Denial of Service (DoS) SNYK-JS-ENGINEIO-3136336	572/1000 Why? Proof of Concept exploit, CVSS 9.3	No Known Exploit
	Denial of Service (DoS) SNYK-JS-SOCKETIOPARSER-5596892	572/1000 Why? Proof of Concept exploit, CVSS 9.3	No Known Exploit
	Sandbox Bypass SNYK-JS-WEBPACK-3358798	572/1000 Why? Proof of Concept exploit, CVSS 9.3	Proof of Concept
	Open Redirect SNYK-JS-EXPRESS-6474509	572/1000 Why? Proof of Concept exploit, CVSS 9.3	No Known Exploit
	Information Exposure SNYK-JS-GATSBY-5671647	572/1000 Why? Proof of Concept exploit, CVSS 9.3	Proof of Concept
	Information Exposure SNYK-JS-GATSBYCLI-5671903	572/1000 Why? Proof of Concept exploit, CVSS 9.3	Proof of Concept
	Denial of Service (DoS) SNYK-JS-GRAPHQL-5905181	572/1000 Why? Proof of Concept exploit, CVSS 9.3	Proof of Concept
	Heap-based Buffer Overflow SNYK-JS-SHARP-5922108	572/1000 Why? Proof of Concept exploit, CVSS 9.3	Mature
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SIDEWAYFORMULA-3317169	572/1000 Why? Proof of Concept exploit, CVSS 9.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-3244450	572/1000 Why? Proof of Concept exploit, CVSS 9.3	Proof of Concept
	Denial of Service (DoS) SNYK-JS-MSGPACKR-6140431	572/1000 Why? Proof of Concept exploit, CVSS 9.3	No Known Exploit
	Improper Input Validation SNYK-JS-POSTCSS-5926692	572/1000 Why? Proof of Concept exploit, CVSS 9.3	No Known Exploit
	Prototype Pollution SNYK-JS-JSON5-3182856	572/1000 Why? Proof of Concept exploit, CVSS 9.3	Proof of Concept
	Prototype Pollution SNYK-JS-JSON5-3182856	572/1000 Why? Proof of Concept exploit, CVSS 9.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: gatsby

• 5.13.3 - 2024-01-25
  

  gatsby-cli@5.13.3

• 5.13.2 - 2024-01-23
• 5.13.1 - 2023-12-22
• 5.13.0 - 2023-12-18
• 5.13.0-next.3 - 2023-12-04
• 5.13.0-next.2 - 2023-11-16
• 5.13.0-next.1 - 2023-08-22
• 5.13.0-next.0 - 2023-07-25
• 5.13.0-alpha-fix-pnpm.21 - 2023-12-20
• 5.13.0-alpha-fix-pnpm.17 - 2023-12-15
• 5.13.0-alpha-fix-pnpm.16 - 2023-12-14
• 5.13.0-alpha-alt-image-cdn.38 - 2023-11-03
• 5.12.12 - 2023-12-07
• 5.12.11 - 2023-11-22
• 5.12.10 - 2023-11-21
• 5.12.9 - 2023-10-26
• 5.12.8 - 2023-10-20
• 5.12.7 - 2023-10-17
• 5.12.6 - 2023-10-09
• 5.12.5 - 2023-09-27
• 5.12.4 - 2023-09-05
• 5.12.3 - 2023-08-28
• 5.12.2 - 2023-08-28
• 5.12.1 - 2023-08-24
• 5.12.0 - 2023-08-24
• 5.12.0-next.1 - 2023-07-03
• 5.12.0-next.0 - 2023-06-15
• 5.11.0 - 2023-06-15
• 5.11.0-touch-nodes-fix.4 - 2023-06-14
• 5.11.0-next.1 - 2023-06-05
• 5.11.0-next.0 - 2023-05-16
• 5.10.0 - 2023-05-16
• 5.10.0-next.4 - 2023-05-03
• 5.10.0-next.3 - 2023-04-27
• 5.10.0-next.2 - 2023-04-27
• 5.10.0-next.1 - 2023-04-19
• 5.10.0-next.0 - 2023-04-18
• 5.10.0-infer-block-less.13 - 2023-05-09
• 5.10.0-infer-block-less.12 - 2023-05-09
• 5.10.0-infer-block-less.11 - 2023-05-08
• 5.10.0-infer-block-less.8 - 2023-05-08
• 5.10.0-infer-block-less.7 - 2023-05-05
• 5.10.0-infer-block-less.6 - 2023-05-05
• 5.10.0-infer-block-less.5 - 2023-05-05
• 5.10.0-gatsby-gc.20 - 2023-05-16
• 5.10.0-gatsby-gc.19 - 2023-05-16
• 5.10.0-gatsby-gc.18 - 2023-05-16
• 5.10.0-gatsby-gc.17 - 2023-05-15
• 5.10.0-gatsby-gc.16 - 2023-05-15
• 5.10.0-gatsby-gc.15 - 2023-05-15
• 5.10.0-gatsby-gc.14 - 2023-05-15
• 5.10.0-alpha-adapters.165 - 2023-07-14
• 5.10.0-alpha-adapters.164 - 2023-07-13
• 5.10.0-alpha-adapters.159 - 2023-07-12
• 5.10.0-alpha-adapters.158 - 2023-07-12
• 5.10.0-alpha-adapters.156 - 2023-07-11
• 5.10.0-alpha-adapters.155 - 2023-07-11
• 5.10.0-alpha-adapters.153 - 2023-07-11
• 5.10.0-alpha-adapters.142 - 2023-07-04
• 5.10.0-alpha-adapters.141 - 2023-07-03
• 5.10.0-alpha-adapters.130 - 2023-06-30
• 5.10.0-alpha-adapters.96 - 2023-06-14
• 5.10.0-alpha-adapters.94 - 2023-06-14
• 5.10.0-alpha-adapters.89 - 2023-06-14
• 5.9.1 - 2023-05-09
• 5.9.0 - 2023-04-18
• 5.9.0-touch-nodes-optout.49 - 2023-04-12
• 5.9.0-reduce-contentful-mem-usage.39 - 2023-04-17
• 5.9.0-reduce-contentful-mem-usage.38 - 2023-04-17
• 5.9.0-reduce-contentful-mem-usage.36 - 2023-04-17
• 5.9.0-next.3 - 2023-04-06
• 5.9.0-next.2 - 2023-03-30
• 5.9.0-next.1 - 2023-03-28
• 5.9.0-next.0 - 2023-03-21
• 5.9.0-lmdb-remapchunks.41 - 2023-04-20
• 5.9.0-lmdb-remapchunks.40 - 2023-04-20
• 5.9.0-image-cdn-configurable.4 - 2023-04-11
• 5.9.0-alpha-cg-tailwind.23 - 2023-05-09
• 5.8.1 - 2023-03-29
• 5.8.0 - 2023-03-21
• 5.8.0-touchnodes-memdebug2.19 - 2023-03-23
• 5.8.0-touchnodes-memdebug2.17 - 2023-03-22
• 5.8.0-touchnodes-memdebug.17 - 2023-03-21
• 5.8.0-next.3 - 2023-03-14
• 5.8.0-next.2 - 2023-03-07
• 5.8.0-next.1 - 2023-02-22
• 5.8.0-next.0 - 2023-02-16
• 5.8.0-inference-memdebug.26 - 2023-03-23
• 5.8.0-inference-memdebug.22 - 2023-03-23
• 5.8.0-alpha-rspack.4 - 2023-03-10
• 5.8.0-alpha-react-profiling-env.8 - 2023-03-17
• 5.7.0 - 2023-02-21
• 5.7.0-next.1 - 2023-02-08
• 5.7.0-next.0 - 2023-02-03
• 5.6.1 - 2023-02-16
• 5.6.0 - 2023-02-07
• 5.6.0-next.2 - 2023-01-30
• 5.6.0-next.1 - 2023-01-26
• 5.6.0-next.0 - 2023-01-19
• 5.5.0 - 2023-01-24
• 5.5.0-next.1 - 2023-01-17
• 5.5.0-next.0 - 2023-01-05
• 5.5.0-alpha-initial-webhook-body.31 - 2023-01-16
• 5.5.0-alpha-initial-webhook-body.30 - 2023-01-16
• 5.4.2 - 2023-01-17
• 5.4.1 - 2023-01-13
• 5.4.0 - 2023-01-10
• 5.4.0-next.3 - 2023-01-04
• 5.4.0-next.2 - 2022-12-14
• 5.4.0-next.1 - 2022-12-14
• 5.4.0-next.0 - 2022-12-08
• 5.3.3 - 2022-12-20
• 5.3.2 - 2022-12-14
• 5.3.1 - 2022-12-14
• 5.3.0 - 2022-12-13
• 5.3.0-next.4 - 2022-12-07
• 5.3.0-next.3 - 2022-12-07
• 5.3.0-next.2 - 2022-12-06
• 5.3.0-next.1 - 2022-12-01
• 5.3.0-next.0 - 2022-11-25
• 5.2.0 - 2022-11-25
• 5.2.0-next.1 - 2022-11-23
• 5.2.0-next.0 - 2022-11-17
• 5.1.0 - 2022-11-22
• 5.1.0-next.0 - 2022-11-08
• 5.0.1 - 2022-11-10
• 5.0.0 - 2022-11-08

from gatsby GitHub release notes

Commit messages

Package name: gatsby

• b4ce9e6 chore(release): Publish
• c50e8f2 fix: add missing fs method rewrites to handle fetchRemoteFile in dsg/ssr engine (fix: add missing fs method rewrites to handle fetchRemoteFile in dsg/ssr engine gatsbyjs/gatsby#38822) (fix: add missing fs method rewrites to handle fetchRemoteFile in dsg/ssr engine (#38822) gatsbyjs/gatsby#38823)
• d328fd8 perf: use must-revalidate cache-control header as common and only create header routes for routes with different cache-control (perf: use must-revalidate cache-control header as common and only create header routes for routes with different cache-control gatsbyjs/gatsby#38820) (perf: use must-revalidate cache-control header as common and only create header routes for routes with different cache-control (#38820) gatsbyjs/gatsby#38824)
• b24134d chore(release): Publish
• c74745c fix(gatsby): support builtin modules prefixed with `node:` on `build-html` (fix(gatsby): support builtin modules prefixed with node: on build-html gatsbyjs/gatsby#38516) (fix(gatsby): support builtin modules prefixed with node: on build-html (#38516) gatsbyjs/gatsby#38818)
• c9f8c24 chore: swap babel-plugin-lodash with updated version that doesn't use deprecated APIs (chore: swap babel-plugin-lodash with updated version that doesn't use deprecated APIs gatsbyjs/gatsby#38797) (chore: swap babel-plugin-lodash with updated version that doesn't use deprecated APIs (#38797) gatsbyjs/gatsby#38803)
• fc0eea1 fix(gatsby): fix webpack compilation when pnpm is used (fix(gatsby): fix webpack compilation when pnpm is used gatsbyjs/gatsby#38757) (fix(gatsby): fix webpack compilation when pnpm is used (#38757) gatsbyjs/gatsby#38804)
• f6ed443 fix(gatsby): try to automatically recover when parcel segfaults (fix(gatsby): try to automatically recover when parcel segfaults gatsbyjs/gatsby#38773) (fix(gatsby): try to automatically recover when parcel segfaults (#38773) gatsbyjs/gatsby#38799)
• 68b0821 fix(gatsby): more robust adapter zero-conf handling (fix(gatsby): more robust adapter zero-conf handling gatsbyjs/gatsby#38778) (fix(gatsby): more robust adapter zero-conf handling (#38778) gatsbyjs/gatsby#38800)
• 366b54c chore(release): Publish
• 4b892c5 chore(gatsby-cli,gatsby-source-wordpress): bump clipboardy (chore(gatsby-cli,gatsby-source-wordpress): bump clipboardy gatsbyjs/gatsby#38775) (chore(gatsby-cli,gatsby-source-wordpress): bump clipboardy (#38775) gatsbyjs/gatsby#38776)
• 2c0622c chore(release): Publish
• 5d6bb65 fix(docs): update remote url docs (fix(docs): update remote url docs gatsbyjs/gatsby#38768) (fix(docs): update remote url docs (#38768) gatsbyjs/gatsby#38770)
• 18ffcfa chore(release): Publish
• 1953e5c fix(gatsby): allow gatsby-adapter-netlify@">=1.0.0 <=1.0.3" for gatsby@<5.12.10 (fix(gatsby): allow gatsby-adapter-netlify@">=1.0.0 <=1.0.3" for gatsby@<5.12.10 gatsbyjs/gatsby#38758)
• 4a780fb feat: image and file cdn url generator adapter implementation (feat: image and file cdn url generator adapter implementation gatsbyjs/gatsby#38685)
• f8c207b chore: move gatsby-plugin-netlify-cms to deprecated-packages (chore: move gatsby-plugin-netlify-cms to deprecated-packages gatsbyjs/gatsby#38755)
• 6d1d97e chore(gatsby-plugin-netlify-cms): add deprecation notice (chore(gatsby-plugin-netlify-cms): add deprecation notice  gatsbyjs/gatsby#38753)
• 7a7fa5f chore(deps): update dependency @ types/jscodeshift to ^0.11.11 for gatsby-codemods (chore(deps): update dependency @types/jscodeshift to ^0.11.11 for gatsby-codemods gatsbyjs/gatsby#38595)
• 8919982 fix(deps): update dependency gatsby-plugin-webpack-bundle-analyser-v2 to ^1.1.32 (fix(deps): update dependency gatsby-plugin-webpack-bundle-analyser-v2 to ^1.1.32 gatsbyjs/gatsby#38722)
• d148295 chore(deps): update [dev] minor and patch dependencies for gatsby-cli (chore(deps): update [dev] minor and patch dependencies for gatsby-cli gatsbyjs/gatsby#38592)
• 37f2288 chore(deps): update dependency rimraf to ^5.0.5 (chore(deps): update dependency rimraf to ^5.0.5 gatsbyjs/gatsby#38596)
• 0faf0fe chore(deps): update dependency rimraf to ^5.0.5 for gatsby-telemetry (chore(deps): update dependency rimraf to ^5.0.5 for gatsby-telemetry gatsbyjs/gatsby#38597)
• 31272e9 chore(deps): update dependency rimraf to ^5.0.5 for gatsby-worker (chore(deps): update dependency rimraf to ^5.0.5 for gatsby-worker gatsbyjs/gatsby#38598)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 5a26717

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[sourcery-ai]

We have skipped reviewing this pull request. It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!