[Snyk] Fix for 7 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • starters/gatsby-starter-blog-theme/package.json
  • starters/gatsby-starter-blog-theme/package-lock.json
  • starters/gatsby-starter-blog-theme/.snyk

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	Yes	Proof of Concept
	Command Injection SNYK-JS-LODASH-1040724	Yes	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-567746	Yes	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-590103	Yes	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-608086	Yes	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NTHCHECK-1586032	Yes	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	Yes	Proof of Concept

Commit messages

Package name: gatsby-theme-blog

The new version differs by 26 commits.

• a9dd4d1 chore(release): Publish
• ca08c16 feat: upgrade to gatsby v4 ([Snyk] Security upgrade gatsby from 2.32.13 to 3.13.0 #149)
• 692499e BREAKING: v3 ([Snyk] Security upgrade gatsby from 2.32.13 to 3.13.0 #112)
• c05f29d chore: Revert to push again
• e6d333c chore(release): Publish
• 8f1ba38 feat(gatsby-theme-blog-core): Support filter, limit options ([Snyk] Security upgrade gatsby from 2.32.13 to 3.13.0 #98)
• 335eb8e chore: Run Cypress on push & PR
• 1b9267f chore(release): Publish
• dd7d0a6 chore: Dependency maintenance ([Snyk] Security upgrade gatsby from 2.32.13 to 3.13.0 #107)
• 069fb47 chore(release): Publish
• 107c28e fix(gatsby-theme-i18n-react-i18next): default options typo ([Snyk] Security upgrade gatsby from 2.32.13 to 3.13.0 #96)
• 6ff5c7a chore(release): Publish
• 003cd70 chore: Linting
• 7b3b008 chore(release): Publish
• 60d8928 fix(gatsby-theme-blog): Remove console.log
• 25e76f5 chore(release): Publish
• c2b71f9 chore: One more .org to .com change
• 0c2f843 chore: Change .org links to .com
• e6a3b30 fix(gatsby-theme-i18n): Correct HTML lang ([Snyk] Security upgrade gatsby from 2.32.13 to 3.13.0 #92)
• 631ae27 feat(gatsby-theme-i18n): Add "prefixDefault" option ([Snyk] Security upgrade gatsby from 2.32.13 to 3.13.0 #75)
• 6dd2936 Added post-hero-caption component and relevant mdx properties, with example usage ([Snyk] Security upgrade gatsby from 2.32.13 to 3.13.0 #95)
• fead1c2 Fix incorrect path in documentation ([Snyk] Security upgrade gatsby from 2.32.13 to 3.13.0 #86)
• 212d7b3 Add frontmatter imageAlt to fieldData ([Snyk] Security upgrade gatsby from 2.32.13 to 3.13.0 #85)
• 1ddd07c add small tests to check that notes pages from theme render ([Snyk] Security upgrade gatsby from 2.32.13 to 3.13.0 #77)

See the full diff

Package name: theme-ui

The new version differs by 250 commits.

• 6f37cdd v0.6.0
• 8ff0379 docs: change version in readme
• d8b715d chore: update snapshots
• 0c6d050 Merge branch 'develop' into stable
• 949cbcf chore(docs): remove comma
• ac60158 chore: write more on migrating
• 7e3afbb refactor(theme-provider): remove unused import
• 15c7a0b chore: describe color mode flash fix in changelog
• 4b34c2c Merge branch '0.6-stable' into develop
• ac304c7 chore: make contributors table narrower
• c1a2c09 Merge pull request [Snyk] Security upgrade gatsby from 2.32.13 to 5.0.0 #1544 from system-ui/chores
• 6b11630 fix(color-modes): stop mutating theme
• 469dc4a feat(core): export internal base provider
• 9c3c7db fix(editor): fix colors logic
• 6652bb1 chore: we must run prepare before publish, because Lerna does not build in order
• 7f8f796 Merge branch 'develop' into chores
• a368159 fix(editor): make editor demo work (broken for a longer time)
• ed94681 fix(color-modes): read correct color mode name
• 00cd0e6 refactor(docs): format themed.mdx, add title to styled.mdx
• 79a678c chore: bump Gatsby peer dep again
• 2bbfea7 Revert "chore: bump Gatsby peer dep"
• d52e4ec chore: write migration notes for 0.6
• c0f6551 Merge pull request [Snyk] Security upgrade gatsby from 2.32.13 to 5.0.0 #1453 from atanasster/css-vars-remove-defaults
• 8433b4e feat(types): rename ContextValue to ThemeUIContextValue

See the full diff

With a Snyk patch:

Severity	Issue	Exploit Maturity
	Prototype Pollution SNYK-JS-LODASH-567746	Proof of Concept

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic