[Snyk] Fix for 25 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • www/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	616/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.9	Prototype Pollution SNYK-JS-ALGOLIASEARCHHELPER-1570421	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIHTML-1296849	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-CSSWHAT-1298035	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-HIGHLIGHTJS-1048676	Yes	No Known Exploit
	429/1000 Why? Has a fix available, CVSS 4.3	Reverse Tabnabbing SNYK-JS-ISTANBULREPORTS-2328088	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	Yes	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	Yes	Proof of Concept
	731/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.2	Prototype Pollution SNYK-JS-LODASH-567746	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	Yes	Proof of Concept
	539/1000 Why? Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-NODEFETCH-2342118	Yes	No Known Exploit
	520/1000 Why? Has a fix available, CVSS 5.9	Denial of Service SNYK-JS-NODEFETCH-674311	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Open Redirect SNYK-JS-NODEFORGE-2330875	Yes	Proof of Concept
	529/1000 Why? Has a fix available, CVSS 6.3	Prototype Pollution SNYK-JS-NODEFORGE-2331908	Yes	No Known Exploit
	494/1000 Why? Has a fix available, CVSS 5.6	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430337	Yes	No Known Exploit
	579/1000 Why? Has a fix available, CVSS 7.3	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430339	Yes	No Known Exploit
	494/1000 Why? Has a fix available, CVSS 5.6	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430341	Yes	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-NTHCHECK-1586032	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	Yes	Proof of Concept
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Command Injection SNYK-JS-REACTDEVUTILS-1083268	Yes	Proof of Concept
	714/1000 Why? Has a fix available, CVSS 10	Cross-site Scripting (XSS) SNYK-JS-REMARKHTML-1583433	Yes	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-TRIM-1017038	Yes	Proof of Concept
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-YARGSPARSER-560381	Yes	Proof of Concept
	469/1000 Why? Has a fix available, CVSS 5.1	Denial of Service (DoS) npm:mem:20180117	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gatsby

The new version differs by 250 commits.

• 441e6da chore(release): Publish
• ed1a9b5 fix(gatsby-cli): relax error location validation and ignore extra fields (fix(gatsby-cli): relax error location validation and ignore extra fields gatsbyjs/gatsby#34559) (fix(gatsby-cli): relax error location validation and ignore extra fields (#34559) gatsbyjs/gatsby#34588)
• e39f6cd fix(gatsby): don't remove onPluginInit in graphql-engine (fix(gatsby): don't remove onPluginInit in graphql-engine gatsbyjs/gatsby#34558) (fix(gatsby): don't remove onPluginInit in graphql-engine (#34558) gatsbyjs/gatsby#34586)
• 17e8698 feat(gatsby-plugin-gatsby-cloud): request customer feedback (feat(gatsby-plugin-gatsby-cloud): request customer feedback gatsbyjs/gatsby#34471)
• 94ffe33 chore(docs): Update client-only self-hosting instructions (chore(docs): Update client-only self-hosting instructions gatsbyjs/gatsby#34537)
• e1e55c9 chore(docs): Update FS route api client only splat description (chore(docs): Update FS route api client only splat description gatsbyjs/gatsby#34546)
• e9cd0ba chore(docs): Update links on gatsby-for-ecommerce (chore(docs): Update links on gatsby-for-ecommerce gatsbyjs/gatsby#34517)
• 1f28c1c chore(changelogs): update changelogs (chore(changelogs): update changelogs gatsbyjs/gatsby#34544)
• d20c97b fix: add missing dependencies (fix: add missing dependencies gatsbyjs/gatsby#28759)
• 42ed5ef fix(plugin-schema-snapshot): unlink file on init (fix(plugin-schema-snapshot): unlink file on init gatsbyjs/gatsby#34527)
• 195188c docs(migrating-from-v3-to-v4): correct getNode snippet (docs(migrating-from-v3-to-v4): correct getNode snippet gatsbyjs/gatsby#34543)
• d39265f docs(migrating-from-v2-to-v3): correct getNode snippet (docs(migrating-from-v2-to-v3): correct getNode snippet gatsbyjs/gatsby#34542)
• bb85cef chore(release): Publish next
• 022ce14 fix(deps): update starters and examples gatsby packages to ^4.5.4 (fix(deps): update starters and examples gatsby packages to ^4.5.4 gatsbyjs/gatsby#34541)
• 3954944 fix(gatsby-remark-images): regenerate markdown when used image changes (fix(gatsby-remark-images): regenerate markdown when used image changes gatsbyjs/gatsby#34433)
• f5bb0b6 chore(circleci): pin renovate cli version (chore(circleci): pin renovate cli version gatsbyjs/gatsby#34536)
• 77e4bb0 fix(gatsby): handle session storage not being available (fix(gatsby): handle session storage not being available gatsbyjs/gatsby#34525)
• d2ba1f9 perf: move id: eq fast path handling to node-model so it's shared between query running strategies (perf: move id.eq fast path handling to node-model so it's shared between query running strategies gatsbyjs/gatsby#34520)
• a3fa646 feat(gatsby-sharp): create more resilient wrapper around sharp (feat(gatsby-sharp): create more resilient wrapper around sharp gatsbyjs/gatsby#34339)
• d319983 chore(changelogs): update changelogs (chore(changelogs): update changelogs gatsbyjs/gatsby#34521)
• f10d0e5 feat(gatsby): content sync debugging tweaks (feat(gatsby): content sync debugging tweaks gatsbyjs/gatsby#34487)
• 15e549c fix(deps): update starters and examples - gatsby (fix(deps): update starters and examples - gatsby gatsbyjs/gatsby#34515)
• 7387918 chore(docs): Update links on plugins overview doc (chore(docs): Update links on plugins overview doc gatsbyjs/gatsby#34479)
• 44b2ef5 fix(create-gatsby): Respect telemetry disable (fix(create-gatsby): Respect telemetry disable gatsbyjs/gatsby#34495)

See the full diff

Package name: gatsby-plugin-subfont

The new version differs by 250 commits.

• fbc5893 chore(release): Publish
• e693b62 chore: update yarn.lock (chore: update yarn.lock gatsbyjs/gatsby#29078)
• e998870 fix(gatsby): Always render the body component to ensure needed head & pre/post body components are added (fix(gatsby): Always render the body component to ensure needed head & pre/post body components are added gatsbyjs/gatsby#29077)
• a1921b5 feat(gatsby): bump opt-in % to dev-ssr to 20% (feat(gatsby): bump opt-in % to dev-ssr to 20% gatsbyjs/gatsby#29075)
• 2439b44 feat(gatsby-codemods): Handle or warn on nested options changes (feat(gatsby-codemods): Handle or warn on nested options changes gatsbyjs/gatsby#29046)
• c0e6c92 fix(gatsby-plugin-typescript): add missing options validations (fix(gatsby-plugin-typescript): add missing options validations gatsbyjs/gatsby#29066)
• 3163ca6 fix(gatsby-plugin-mdx): Add `root` to plugin validation (fix(gatsby-plugin-mdx): Add root to plugin validation gatsbyjs/gatsby#29010)
• 6233382 fix(gatsby-plugin-image): Fix onload race condition (fix(gatsby-plugin-image): Fix onload race condition gatsbyjs/gatsby#29064)
• c76c175 benchmark(gabe-fs-markdown-images): add img benchmark (benchmark(gabe-fs-markdown-images): add img benchmark gatsbyjs/gatsby#29009)
• bd5b5f7 feat(gatsby): allow to skip cache persistence (allow to skip cache persistence gatsbyjs/gatsby#29047)
• 48db6ac fix(gatsby): fix broken GraphQL resolver tracing (fix(gatsby): fix broken GraphQL resolver tracing gatsbyjs/gatsby#29015)
• 90b6e3d fix(gatsby): Use fast-refresh for React 17 (fix(gatsby): Use fast-refresh for React 17 gatsbyjs/gatsby#28930)
• 9a55d12 feat(gatsby): Add eslint rules to warn against bad patterns in pageTemplates (for Fast Refresh) (feat(gatsby): Add eslint rules to warn against bad patterns in pageTemplates (for Fast Refresh) gatsbyjs/gatsby#28689)
• b9978e1 fix(gatsby-plugin-image): Handle imgStyle in SSR (fix(gatsby-plugin-image): Handle imgStyle in SSR gatsbyjs/gatsby#29043)
• f23ba4b fix(gatsby-source-contentful): Improve base64 placeholders (fix(gatsby-source-contentful): Improve base64 placeholders gatsbyjs/gatsby#29034)
• 18b5f30 fix(security): update vulnerable packages, include React 17 in peerDeps (fix(security): update vulnerable packages, include React 17 in peerDeps gatsbyjs/gatsby#28545)
• f8bbc06 docs: edit search documentation (Edit search documentation gatsbyjs/gatsby#28737)
• 004acf0 fix(sharp) wrap sharp calls in try/catch to avoid crashing on bad images (fix(sharp) wrap sharp calls in try/catch to avoid crashing on bad images gatsbyjs/gatsby#28645)
• bf6f264 Hydrate when the page was server rendered (feat(gatsby): Hydrate in development when the page was server rendered gatsbyjs/gatsby#29016)
• e72533d chore(gatsby-plugin-image): Unflag remote images (chore(gatsby-plugin-image): Unflag remote images gatsbyjs/gatsby#29032)
• 332543c chore(docs): adjust Contentful Rich Text example codes (chore(docs): adjust Contentful Rich Text example codes gatsbyjs/gatsby#29029)
• 9bcc12c feat(gatsby-plugin-image): Change fullWidth to use breakpoints (feat(gatsby-plugin-image): Change fullWidth to use breakpoints gatsbyjs/gatsby#29002)
• 168ff60 Fix/contentful add header (fix(gatsby-source-contentful): Add header gatsbyjs/gatsby#29028)
• a3ad6d7 fix(gatsbu-source-contentful): apply useNameForId when creating the graphql schema (fix(gatsbu-source-contentful): apply useNameForId when creating the g… gatsbyjs/gatsby#28649)

See the full diff

Package name: gatsby-remark-images

The new version differs by 250 commits.

• e98cb62 chore(release): Publish
• 164f9a1 fix(gatsby-source-contentful): De-dupe type names (fix(gatsby-source-contentful): De-dupe type names gatsbyjs/gatsby#30834) (fix(gatsby-source-contentful): De-dupe type names (#30834) gatsbyjs/gatsby#30850)
• 0b99d00 fix(gatsby): webpack warnings are no longer in object format by default (fix(gatsby): webpack warnings are no longer in object format by default gatsbyjs/gatsby#30801) (fix(gatsby): webpack warnings are no longer in object format by default (#30801) gatsbyjs/gatsby#30853)
• f561724 fix(gatsby): lower memory pressure in SSR (fix(gatsby): lower memory pressure in SSR gatsbyjs/gatsby#30793) (fix(gatsby): lower memory pressure in SSR (#30793) gatsbyjs/gatsby#30851)
• 96805d5 fix(gatsby-source-wordpress): change `console.warning` to `console.warn` (fix(gatsby-source-wordpress): error when sourcing nodes, change console.warning to console.warn gatsbyjs/gatsby#30764) (fix(gatsby-source-wordpress): change console.warning to console.warn (#30764) gatsbyjs/gatsby#30852)
• e40c83d chore(release): Publish next
• a5b5cf8 feat: upgrade to remark 13 (feat: upgrade to remark 13 gatsbyjs/gatsby#29678)
• 172cf4d chore(docs): Add link to perf implications siteContext (chore(docs): Add link to perf implications siteContext gatsbyjs/gatsby#30778)
• 4336d04 fix(gatsby-plugin-gatsby-cloud): Add missing index.js (so the plugin can be resolved in workspaces) (fix(gatsby-plugin-gatsby-cloud): Add missing index.js (so the plugin can be resolved in workspaces) gatsbyjs/gatsby#30761)
• 2bdd5a5 fix(gatsby-source-wordpress): only log out duplicate node if we have all the data we want to log (fix(gatsby-source-wordpress): only log out duplicate nodes if we have all the data we want to log gatsbyjs/gatsby#30751)
• 1a9b830 fix(gatsby-plugin-image): Don't inherit all img styles (fix(gatsby-plugin-image): Allow draggable=false on images gatsbyjs/gatsby#30754)
• e0df4cc chore(docs): Change "whitelist" to "allow list" (chore(docs): Change "whitelist" to "allow list" gatsbyjs/gatsby#30756)
• 81ec270 chore: Add backport script (chore: Add backport script gatsbyjs/gatsby#30732)
• 63cc8fa fix(docs): Copy edits for debugging html doc + add React-specific example (fix(docs): Copy edits for debugging html doc + add React-specific example gatsbyjs/gatsby#30745)
• eed1d43 fix(docs): Add link to how to enable DEV_SSR for fixing inconsistent css styles between dev/prod (fix(docs): Add link to how to enable DEV_SSR for fixing inconsistent css styles between dev/prod gatsbyjs/gatsby#30746)
• ecd823f perf(gatsby): cache babel config items (perf(gatsby): cache babel config items gatsbyjs/gatsby#28738)
• a60e92f chore(release): Publish next
• dd9e95c docs(gatsby-plugin-image): Note on tracedSVG options name change (docs(gatsby-plugin-image): Note on tracedSVG options name change gatsbyjs/gatsby#30736)
• a5869e3 fix(gatsby-plugin-image): Use bare GATSBY___IMAGE global (fix(gatsby-plugin-image): Use bare GATSBY___IMAGE global gatsbyjs/gatsby#30713)
• 0f3fa4e fix(contentful): make gatsby-plugin-image a peer dependency (fix(contentful): make gatsby-plugin-image a peer dependency gatsbyjs/gatsby#30709)
• 6b2fd94 fix(gatsby-source-wordpress): pass missing property helpers to gql fetch util (fix(gatsby-source-wordpress): pass missing property "helpers" to gql fetch util gatsbyjs/gatsby#30727)
• c6fa488 chore(docs): Update wording of tutorial part 8 (chore(docs): Update wording of tutorial part 8 gatsbyjs/gatsby#30606)
• a777367 fix(gatsby-cli): Update docs links in error-map (fix(gatsby-cli): Update docs links in error-map gatsbyjs/gatsby#30493)
• c473abf chore(docs): include autoprefixer in tailwind install command (chore(docs): include autoprefixer in tailwind install command gatsbyjs/gatsby#30718)

See the full diff

Package name: gatsby-transformer-documentationjs

The new version differs by 250 commits.

• fbc5893 chore(release): Publish
• e693b62 chore: update yarn.lock (chore: update yarn.lock gatsbyjs/gatsby#29078)
• e998870 fix(gatsby): Always render the body component to ensure needed head & pre/post body components are added (fix(gatsby): Always render the body component to ensure needed head & pre/post body components are added gatsbyjs/gatsby#29077)
• a1921b5 feat(gatsby): bump opt-in % to dev-ssr to 20% (feat(gatsby): bump opt-in % to dev-ssr to 20% gatsbyjs/gatsby#29075)
• 2439b44 feat(gatsby-codemods): Handle or warn on nested options changes (feat(gatsby-codemods): Handle or warn on nested options changes gatsbyjs/gatsby#29046)
• c0e6c92 fix(gatsby-plugin-typescript): add missing options validations (fix(gatsby-plugin-typescript): add missing options validations gatsbyjs/gatsby#29066)
• 3163ca6 fix(gatsby-plugin-mdx): Add `root` to plugin validation (fix(gatsby-plugin-mdx): Add root to plugin validation gatsbyjs/gatsby#29010)
• 6233382 fix(gatsby-plugin-image): Fix onload race condition (fix(gatsby-plugin-image): Fix onload race condition gatsbyjs/gatsby#29064)
• c76c175 benchmark(gabe-fs-markdown-images): add img benchmark (benchmark(gabe-fs-markdown-images): add img benchmark gatsbyjs/gatsby#29009)
• bd5b5f7 feat(gatsby): allow to skip cache persistence (allow to skip cache persistence gatsbyjs/gatsby#29047)
• 48db6ac fix(gatsby): fix broken GraphQL resolver tracing (fix(gatsby): fix broken GraphQL resolver tracing gatsbyjs/gatsby#29015)
• 90b6e3d fix(gatsby): Use fast-refresh for React 17 (fix(gatsby): Use fast-refresh for React 17 gatsbyjs/gatsby#28930)
• 9a55d12 feat(gatsby): Add eslint rules to warn against bad patterns in pageTemplates (for Fast Refresh) (feat(gatsby): Add eslint rules to warn against bad patterns in pageTemplates (for Fast Refresh) gatsbyjs/gatsby#28689)
• b9978e1 fix(gatsby-plugin-image): Handle imgStyle in SSR (fix(gatsby-plugin-image): Handle imgStyle in SSR gatsbyjs/gatsby#29043)
• f23ba4b fix(gatsby-source-contentful): Improve base64 placeholders (fix(gatsby-source-contentful): Improve base64 placeholders gatsbyjs/gatsby#29034)
• 18b5f30 fix(security): update vulnerable packages, include React 17 in peerDeps (fix(security): update vulnerable packages, include React 17 in peerDeps gatsbyjs/gatsby#28545)
• f8bbc06 docs: edit search documentation (Edit search documentation gatsbyjs/gatsby#28737)
• 004acf0 fix(sharp) wrap sharp calls in try/catch to avoid crashing on bad images (fix(sharp) wrap sharp calls in try/catch to avoid crashing on bad images gatsbyjs/gatsby#28645)
• bf6f264 Hydrate when the page was server rendered (feat(gatsby): Hydrate in development when the page was server rendered gatsbyjs/gatsby#29016)
• e72533d chore(gatsby-plugin-image): Unflag remote images (chore(gatsby-plugin-image): Unflag remote images gatsbyjs/gatsby#29032)
• 332543c chore(docs): adjust Contentful Rich Text example codes (chore(docs): adjust Contentful Rich Text example codes gatsbyjs/gatsby#29029)
• 9bcc12c feat(gatsby-plugin-image): Change fullWidth to use breakpoints (feat(gatsby-plugin-image): Change fullWidth to use breakpoints gatsbyjs/gatsby#29002)
• 168ff60 Fix/contentful add header (fix(gatsby-source-contentful): Add header gatsbyjs/gatsby#29028)
• a3ad6d7 fix(gatsbu-source-contentful): apply useNameForId when creating the graphql schema (fix(gatsbu-source-contentful): apply useNameForId when creating the g… gatsbyjs/gatsby#28649)

See the full diff

Package name: gatsby-transformer-remark

The new version differs by 250 commits.

• e98cb62 chore(release): Publish
• 164f9a1 fix(gatsby-source-contentful): De-dupe type names (fix(gatsby-source-contentful): De-dupe type names gatsbyjs/gatsby#30834) (fix(gatsby-source-contentful): De-dupe type names (#30834) gatsbyjs/gatsby#30850)
• 0b99d00 fix(gatsby): webpack warnings are no longer in object format by default (fix(gatsby): webpack warnings are no longer in object format by default gatsbyjs/gatsby#30801) (fix(gatsby): webpack warnings are no longer in object format by default (#30801) gatsbyjs/gatsby#30853)
• f561724 fix(gatsby): lower memory pressure in SSR (fix(gatsby): lower memory pressure in SSR gatsbyjs/gatsby#30793) (fix(gatsby): lower memory pressure in SSR (#30793) gatsbyjs/gatsby#30851)
• 96805d5 fix(gatsby-source-wordpress): change `console.warning` to `console.warn` (fix(gatsby-source-wordpress): error when sourcing nodes, change console.warning to console.warn gatsbyjs/gatsby#30764) (fix(gatsby-source-wordpress): change console.warning to console.warn (#30764) gatsbyjs/gatsby#30852)
• e40c83d chore(release): Publish next
• a5b5cf8 feat: upgrade to remark 13 (feat: upgrade to remark 13 gatsbyjs/gatsby#29678)
• 172cf4d chore(docs): Add link to perf implications siteContext (chore(docs): Add link to perf implications siteContext gatsbyjs/gatsby#30778)
• 4336d04 fix(gatsby-plugin-gatsby-cloud): Add missing index.js (so the plugin can be resolved in workspaces) (fix(gatsby-plugin-gatsby-cloud): Add missing index.js (so the plugin can be resolved in workspaces) gatsbyjs/gatsby#30761)
• 2bdd5a5 fix(gatsby-source-wordpress): only log out duplicate node if we have all the data we want to log (fix(gatsby-source-wordpress): only log out duplicate nodes if we have all the data we want to log gatsbyjs/gatsby#30751)
• 1a9b830 fix(gatsby-plugin-image): Don't inherit all img styles (fix(gatsby-plugin-image): Allow draggable=false on images gatsbyjs/gatsby#30754)
• e0df4cc chore(docs): Change "whitelist" to "allow list" (chore(docs): Change "whitelist" to "allow list" gatsbyjs/gatsby#30756)
• 81ec270 chore: Add backport script (chore: Add backport script gatsbyjs/gatsby#30732)
• 63cc8fa fix(docs): Copy edits for debugging html doc + add React-specific example (fix(docs): Copy edits for debugging html doc + add React-specific example gatsbyjs/gatsby#30745)
• eed1d43 fix(docs): Add link to how to enable DEV_SSR for fixing inconsistent css styles between dev/prod (fix(docs): Add link to how to enable DEV_SSR for fixing inconsistent css styles between dev/prod gatsbyjs/gatsby#30746)
• ecd823f perf(gatsby): cache babel config items (perf(gatsby): cache babel config items gatsbyjs/gatsby#28738)
• a60e92f chore(release): Publish next
• dd9e95c docs(gatsby-plugin-image): Note on tracedSVG options name change (docs(gatsby-plugin-image): Note on tracedSVG options name change gatsbyjs/gatsby#30736)
• a5869e3 fix(gatsby-plugin-image): Use bare GATSBY___IMAGE global (fix(gatsby-plugin-image): Use bare GATSBY___IMAGE global gatsbyjs/gatsby#30713)
• 0f3fa4e fix(contentful): make gatsby-plugin-image a peer dependency (fix(contentful): make gatsby-plugin-image a peer dependency gatsbyjs/gatsby#30709)
• 6b2fd94 fix(gatsby-source-wordpress): pass missing property helpers to gql fetch util (fix(gatsby-source-wordpress): pass missing property "helpers" to gql fetch util gatsbyjs/gatsby#30727)
• c6fa488 chore(docs): Update wording of tutorial part 8 (chore(docs): Update wording of tutorial part 8 gatsbyjs/gatsby#30606)
• a777367 fix(gatsby-cli): Update docs links in error-map (fix(gatsby-cli): Update docs links in error-map gatsbyjs/gatsby#30493)
• c473abf chore(docs): include autoprefixer in tailwind install command (chore(docs): include autoprefixer in tailwind install command gatsbyjs/gatsby#30718)

See the full diff

Package name: graphql-request

The new version differs by 34 commits.

• d7f4f2f chore: fix lint error
• 01ae7d0 feat: drop node 8 support
• 930ab90 chore: update renovate config
• 4ed1401 refactor: upgrade and run prettier
• a6e8e0a fix: build
• b69791c feat: export `Options` type ([Snyk] Fix for 1 vulnerabilities #155)
• 2246c4d docs: fix example by setting global fetch variable ([Snyk] Fix for 1 vulnerabilities #157)
• 5cb1aa1 fix: subclass Error by explicitly setting prototype ([Snyk] Fix for 1 vulnerabilities #101)
• c22d4b0 feat: drop cross-fetch polyfill dep ([Snyk] Fix for 1 vulnerabilities #127)
• d09a567 refactor: remove unused `async` keywords ([Snyk] Fix for 1 vulnerabilities #163)
• be27ac6 feat: remove dom dependency ([Snyk] Fix for 1 vulnerabilities #108)
• 9d5e344 feat: simplify typings by using full RequestInit type ([Snyk] Fix for 1 vulnerabilities #107)
• b0abe80 Merge pull request [Snyk] Fix for 1 vulnerabilities #114 from brikou/feature/npmignore
• c037f23 Add missing .npmignore
• 70d3555 Merge pull request [Snyk] Fix for 1 vulnerabilities #110 from brikou/feature/examples_ts_typings_only
• 4c6e037 Use TData interface
• 9f3fd07 Update link to circleci ([Snyk] Fix for 1 vulnerabilities #104)
• a0dbcf0 Add TS typings to example
• 62c0f75 [RFR] Add examples dir ([Snyk] Fix for 1 vulnerabilities #105)
• 248cde8 Merge pull request [Snyk] Fix for 1 vulnerabilities #66 from prismagraphql/renovate/cross-fetch-2.x
• 36c968f fix(deps): update dependency cross-fetch to v2.2.2
• 0b467b8 Merge pull request [Snyk] Fix for 1 vulnerabilities #97 from divyenduz/revert_feat_support_parsed_query
• 0248511 fix: add esnext.asynciterable to tsconfig.json
• d42784a Revert "feat: support parsed query ([Snyk] Fix for 1 vulnerabilities #92)"

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Open Redirect
🦉 Prototype Pollution
🦉 More lessons are available in Snyk Learn