[Security] Upgrade minimatch to fix RegEx DoS security issue

[phacks]

See #10198 for context.

Description

One of the dependencies of the gatsby-remark-code-repls package relies on an outdated version of minimatch that allows for a Regular Expression Denial of Service (see npm report on the matter)

Steps to reproduce

Run yarn audit and see the high severity security issue.

[phacks]

I’ll try to work this out when I can spare some time!

Also this is a good opportunity to refactor the package, see

gatsby/packages/gatsby-remark-code-repls/src/gatsby-node.js

Lines 39 to 42 in 9bd0a27

	// TODO We could refactor this to use 'recursive-readdir' instead,
	// And wrap with Promise.all() to execute createPage() in parallel.
	// I'd need to find a way to reliably test error handling though.
	const files = recursiveReaddir(directory)

[gatsbot]

Hiya!

This issue has gone quiet. Spooky quiet. 👻

We get a lot of issues, so we currently close issues after 30 days of inactivity. It’s been at least 20 days since the last update here.

If we missed this issue or if you want to keep it open, please reply here. You can also add the label "not stale" to keep this issue open!

Thanks for being a part of the Gatsby community! 💪💜

[phacks]

Issue is not stale, PR #10338 is still alive and kickin’

[gatsbot]

Hey again!

It’s been 30 days since anything happened on this issue, so our friendly neighborhood robot (that’s me!) is going to close it.

Please keep in mind that I’m only a robot, so if I’ve closed this issue in error, I’m HUMAN_EMOTION_SORRY. Please feel free to reopen this issue or create a new one if you need anything else.

Thanks again for being part of the Gatsby community!