[Snyk] Upgrade gatsby-plugin-image from 3.0.0 to 3.13.1 #512
Conversation
Snyk has created this PR to upgrade gatsby-plugin-image from 3.0.0 to 3.13.1. See this package in npm: https://www.npmjs.com/package/gatsby-plugin-image See this project in Snyk: https://app.snyk.io/org/sammytezzy/project/20794044-5f49-41de-a492-223de49c2642?utm_source=github&utm_medium=referral&page=upgrade-pr
|
|
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
PR Type: Enhancement
PR Summary: This pull request upgrades the gatsby-plugin-image from version 3.0.0 to 3.13.1. The upgrade addresses several high and medium severity vulnerabilities, including Prototype Pollution, Regular Expression Denial of Service (ReDoS), Denial of Service (DoS), Improper Input Validation, and Information Exposure, among others. The new version also brings the package 47 versions ahead, incorporating improvements and bug fixes released over approximately the last three months.
Decision: Comment
📝 Type: 'Enhancement' - not supported yet.
- Sourcery currently only approves 'Typo fix' PRs.
✅ Issue addressed: this change correctly addresses the issue or implements the desired feature.
No details provided.
✅ Small diff: the diff is small enough to approve with confidence.
No details provided.
General suggestions:
- Ensure thorough testing of the website's image handling capabilities post-upgrade to confirm that the plugin's new version integrates seamlessly with the existing codebase and other dependencies.
- Review the release notes and commit messages linked in the PR description to understand the changes and new features introduced in the upgraded version. This can help identify any necessary adjustments or opportunities to leverage new functionalities.
- Consider setting up a continuous monitoring or alert system for dependency updates if not already in place. Tools like Snyk, as used here, can automate the detection of vulnerabilities and the creation of upgrade PRs, helping to maintain the security and stability of the project.
Thanks for using Sourcery. We offer it for free for open source projects and would be very grateful if you could help us grow. If you like it, would you consider sharing Sourcery on your favourite social media? ✨
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade gatsby-plugin-image from 3.0.0 to 3.13.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-LOADERUTILS-3043105
Why? CVSS 7.5
SNYK-JS-SEMVER-3247795
Why? CVSS 7.5
SNYK-JS-DECODEURICOMPONENT-3149970
Why? CVSS 7.5
SNYK-JS-ENGINEIO-3136336
Why? CVSS 7.5
SNYK-JS-FOLLOWREDIRECTS-6141137
Why? CVSS 7.5
SNYK-JS-IMMER-1019369
Why? CVSS 7.5
SNYK-JS-SEMVER-3247795
Why? CVSS 7.5
SNYK-JS-SEMVER-3247795
Why? CVSS 7.5
SNYK-JS-SEMVER-3247795
Why? CVSS 7.5
SNYK-JS-SOCKETIOPARSER-5596892
Why? CVSS 7.5
SNYK-JS-WEBPACK-3358798
Why? CVSS 7.5
SNYK-JS-LOADERUTILS-3042992
Why? CVSS 7.5
SNYK-JS-LOADERUTILS-3105943
Why? CVSS 7.5
SNYK-JS-LOADERUTILS-3042992
Why? CVSS 7.5
SNYK-JS-LOADERUTILS-3105943
Why? CVSS 7.5
SNYK-JS-LOADERUTILS-3042992
Why? CVSS 7.5
SNYK-JS-LOADERUTILS-3105943
Why? CVSS 7.5
SNYK-JS-MSGPACKR-6140431
Why? CVSS 7.5
SNYK-JS-POSTCSS-5926692
Why? CVSS 7.5
SNYK-JS-GATSBY-5671647
Why? CVSS 7.5
SNYK-JS-GATSBYCLI-5671903
Why? CVSS 7.5
SNYK-JS-GATSBYPLUGINSHARP-5425803
Why? CVSS 7.5
SNYK-JS-GATSBYPLUGINSHARP-5671648
Why? CVSS 7.5
SNYK-JS-GRAPHQL-5905181
Why? CVSS 7.5
SNYK-JS-HTTPCACHESEMANTICS-3248783
Why? CVSS 7.5
SNYK-JS-IMMER-1540542
Why? CVSS 7.5
SNYK-JS-JSON5-3182856
Why? CVSS 7.5
SNYK-JS-WORDWRAP-3149973
Why? CVSS 7.5
SNYK-JS-BABELTRAVERSE-5962462
Why? CVSS 7.5
SNYK-JS-JSON5-3182856
Why? CVSS 7.5
SNYK-JS-SHARP-5922108
Why? CVSS 7.5
SNYK-JS-SIDEWAYFORMULA-3317169
Why? CVSS 7.5
SNYK-JS-UAPARSERJS-3244450
Why? CVSS 7.5
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: gatsby-plugin-image
-
3.13.1 - 2024-01-23
-
3.13.0 - 2023-12-18
-
3.13.0-next.1 - 2023-11-16
-
3.13.0-next.0 - 2023-07-25
-
3.13.0-alpha-alt-image-cdn.44 - 2023-11-03
-
3.12.3 - 2023-10-26
-
3.12.2 - 2023-10-20
-
3.12.1 - 2023-10-09
-
3.12.0 - 2023-08-24
-
3.12.0-next.1 - 2023-07-03
-
3.12.0-next.0 - 2023-06-15
-
3.11.0 - 2023-06-15
-
3.11.0-next.1 - 2023-06-05
-
3.11.0-next.0 - 2023-05-16
-
3.10.0 - 2023-05-16
-
3.10.0-next.2 - 2023-05-03
-
3.10.0-next.1 - 2023-04-27
-
3.10.0-next.0 - 2023-04-18
-
3.9.0 - 2023-04-18
-
3.9.0-next.1 - 2023-04-06
-
3.9.0-next.0 - 2023-03-21
-
3.9.0-image-cdn-configurable.4 - 2023-04-11
-
3.8.0 - 2023-03-21
-
3.8.0-next.0 - 2023-02-16
-
3.7.0 - 2023-02-21
-
3.7.0-next.0 - 2023-02-03
-
3.6.0 - 2023-02-07
-
3.6.0-next.1 - 2023-01-26
-
3.6.0-next.0 - 2023-01-19
-
3.5.0 - 2023-01-24
-
3.5.0-next.1 - 2023-01-17
-
3.5.0-next.0 - 2023-01-05
-
3.4.0 - 2023-01-10
-
3.4.0-next.2 - 2023-01-04
-
3.4.0-next.1 - 2022-12-14
-
3.4.0-next.0 - 2022-12-08
-
3.3.2 - 2022-12-14
-
3.3.1 - 2022-12-14
-
3.3.0 - 2022-12-13
-
3.3.0-next.3 - 2022-12-07
-
3.3.0-next.2 - 2022-12-06
-
3.3.0-next.1 - 2022-12-01
-
3.3.0-next.0 - 2022-11-25
-
3.2.0 - 2022-11-25
-
3.2.0-next.0 - 2022-11-17
-
3.1.0 - 2022-11-22
-
3.1.0-next.0 - 2022-11-08
-
3.0.0 - 2022-11-08
from gatsby-plugin-image GitHub release notesCommit messages
Package name: gatsby-plugin-image
node:onbuild-htmlgatsbyjs/gatsby#38516) (fix(gatsby): support builtin modules prefixed withnode:onbuild-html(#38516) gatsbyjs/gatsby#38818)Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs