Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump micromatch, gatsby, gatsby-plugin-google-tagmanager, gatsby-plugin-manifest, gatsby-plugin-offline, gatsby-plugin-react-helmet, gatsby-remark-prismjs, gatsby-source-filesystem and gatsby-transformer-remark #51

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 29, 2024

Bumps micromatch to 4.0.8 and updates ancestor dependencies micromatch, gatsby, gatsby-plugin-google-tagmanager, gatsby-plugin-manifest, gatsby-plugin-offline, gatsby-plugin-react-helmet, gatsby-remark-prismjs, gatsby-source-filesystem and gatsby-transformer-remark. These dependencies need to be updated together.

Updates micromatch from 3.1.10 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

4.0.4

  • fix: Update picomatch to fix regression #179 (8becb55)

4.0.3

  • Enforce newer version of picomatch with bugfixes
Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

[4.0.7] - 2024-05-22

  • this is basically v4.0.5, with some README updates
  • it is vulnerable to CVE-2024-4067
  • Updated braces to v3.0.3 to avoid CVE-2024-4068
  • does NOT break API compatibility

[4.0.6] - 2024-05-21

  • Added hasBraces to check if a pattern contains braces.
  • Fixes CVE-2024-4067
  • BREAKS API COMPATIBILITY
  • Should be labeled as a major release, but it's not.

[4.0.1 - 4.0.5]

[4.0.0] - 2019-03-20

Added

  • Adds support for options.onMatch. See the readme for details
  • Adds support for options.onIgnore. See the readme for details
  • Adds support for options.onResult. See the readme for details

Breaking changes

  • Require Node.js >= 8.6
  • Removed support for passing an array of brace patterns to micromatch.braces().
  • To strictly enforce closing brackets (for {, [, and (), you must now use strictBrackets=true instead of strictErrors.
  • cache - caching and all related options and methods have been removed
  • options.unixify was renamed to options.windows
  • options.nodupes Was removed. Duplicates are always removed by default. You can override this with custom behavior by using the onMatch, onResult and onIgnore functions.
  • options.snapdragon was removed, as snapdragon is no longer used.
  • options.sourcemap was removed, as snapdragon is no longer used, which provided sourcemap support.

[3.0.0] - 2017-04-11

Complete overhaul, with 36,000+ new unit tests validated against actual output generated by Bash and minimatch. More specifically, 35,000+ of the tests:

  • micromatch results are directly compared to bash results
  • in rare cases, when micromatch and bash disagree, micromatch's results are compared to minimatch's results
  • micromatch is much more accurate than minimatch, so there were cases where I had to make assumptions. I'll try to document these.

This refactor introduces a parser and compiler that are supersets of more granular parsers and compilers from other sub-modules. Each of these sub-modules has a singular responsibility and focuses on a certain type of matching that aligns with a specific part of the Bash "expansion" API.

These sub-modules work like plugins to seamlessly create the micromatch parser/compiler, so that strings are parsed in one pass, an AST is created, then a new string is generated by the compiler.

... (truncated)

Commits

Updates gatsby from 2.32.13 to 5.13.7

Release notes

Sourced from gatsby's releases.

v5.13.0

Welcome to [email protected] release (December 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.12.0

Welcome to [email protected] release (August 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.11.0

Welcome to [email protected] release (June 2023 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.10.0

Welcome to [email protected] release (May 2023 #1)

This release focused on bug fixes and perf improvements. Check out notable bugfixes and improvements.

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.9.0

Welcome to [email protected] release (April 2023 #1)

... (truncated)

Commits

Updates gatsby-plugin-google-tagmanager from 2.11.0 to 5.13.1

Release notes

Sourced from gatsby-plugin-google-tagmanager's releases.

v5.13.0

Welcome to [email protected] release (December 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.12.0

Welcome to [email protected] release (August 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.11.0

Welcome to [email protected] release (June 2023 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.10.0

Welcome to [email protected] release (May 2023 #1)

This release focused on bug fixes and perf improvements. Check out notable bugfixes and improvements.

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.9.0

Welcome to [email protected] release (April 2023 #1)

... (truncated)

Changelog

Sourced from gatsby-plugin-google-tagmanager's changelog.

5.13.1 (2024-01-23)

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.13.0 (2023-12-18)

🧾 Release notes

Features

5.12.3 (2023-10-26)

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.12.2 (2023-10-20)

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.12.1 (2023-10-09)

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.12.0 (2023-08-24)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.11.0 (2023-06-15)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.10.0 (2023-05-16)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.9.0 (2023-04-18)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.8.0 (2023-03-21)

... (truncated)

Commits

Updates gatsby-plugin-manifest from 2.12.1 to 5.13.1

Release notes

Sourced from gatsby-plugin-manifest's releases.

v5.13.0

Welcome to [email protected] release (December 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.12.0

Welcome to [email protected] release (August 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.11.0

Welcome to [email protected] release (June 2023 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.10.0

Welcome to [email protected] release (May 2023 #1)

This release focused on bug fixes and perf improvements. Check out notable bugfixes and improvements.

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.9.0

Welcome to [email protected] release (April 2023 #1)

... (truncated)

Changelog

Sourced from gatsby-plugin-manifest's changelog.

5.13.1 (2024-01-23)

Note: Version bump only for package gatsby-plugin-manifest

5.13.0 (2023-12-18)

🧾 Release notes

Chores

5.12.3 (2023-10-26)

Note: Version bump only for package gatsby-plugin-manifest

5.12.2 (2023-10-20)

Note: Version bump only for package gatsby-plugin-manifest

5.12.1 (2023-10-09)

Chores

5.12.0 (2023-08-24)

🧾 Release notes

Bug Fixes

5.11.0 (2023-06-15)

🧾 Release notes

Chores

5.10.0 (2023-05-16)

🧾 Release notes

Bug Fixes

... (truncated)

Commits

Updates gatsby-plugin-offline from 3.10.2 to 6.13.3

Release notes

Sourced from gatsby-plugin-offline's releases.

v5.13.0

Welcome to [email protected] release (December 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.12.0

Welcome to [email protected] release (August 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.11.0

Welcome to [email protected] release (June 2023 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.10.0

Welcome to [email protected] release (May 2023 #1)

This release focused on bug fixes and perf improvements. Check out notable bugfixes and improvements.

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.9.0

Welcome to [email protected] release (April 2023 #1)

... (truncated)

Changelog

Sourced from gatsby-plugin-offline's changelog.

6.13.3 (2024-08-26)

Bug Fixes

6.13.2 (2024-04-10)

Bug Fixes

6.13.1 (2024-01-23)

Note: Version bump only for package gatsby-plugin-offline

6.13.0 (2023-12-18)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-offline

6.12.3 (2023-10-26)

Note: Version bump only for package gatsby-plugin-offline

6.12.2 (2023-10-20)

Note: Version bump only for package gatsby-plugin-offline

6.12.1 (2023-10-09)

Note: Version bump only for package gatsby-plugin-offline

6.12.0 (2023-08-24)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-offline

6.11.0 (2023-06-15)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-offline

6.10.0 (2023-05-16)

🧾 Release notes

... (truncated)

Commits

Updates gatsby-plugin-react-helmet from 3.10.0 to 6.13.1

Release notes

Sourced from gatsby-plugin-react-helmet's releases.

v5.13.0

Welcome to [email protected] release (December 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.12.0

Welcome to [email protected] release (August 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.11.0

Welcome to [email protected] release (June 2023 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.10.0

Welcome to [email protected] release (May 2023 #1)

This release focused on bug fixes and perf improvements. Check out notable bugfixes and improvements.

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.9.0

Welcome to [email protected] release (April 2023 #1)

... (truncated)

Changelog

Sourced from gatsby-plugin-react-helmet's changelog.

6.13.1 (2024-01-23)

Note: Version bump only for package gatsby-plugin-react-helmet

6.13.0 (2023-12-18)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-react-helmet

6.12.0 (2023-08-24)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-react-helmet

6.11.0 (2023-06-15)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-react-helmet

6.10.0 (2023-05-16)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-react-helmet

6.9.0 (2023-04-18)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-react-helmet

6.8.0 (2023-03-21)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-react-helmet

6.7.0 (2023-02-21)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-react-helmet

6.6.0 (2023-02-07)

🧾 Release notes

... (truncated)

Commits

Updates gatsby-remark-prismjs from 3.13.0 to 7.13.2

Release notes

Sourced from gatsby-remark-prismjs's releases.

v5.13.0

Welcome to [email protected] release (December 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.12.0

Welcome to [email protected] release (August 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.11.0

Welcome to [email protected] release (June 2023 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.10.0

Welcome to [email protected] release (May 2023 #1)

This release focused on bug fixes and perf improvements. Check out notable bugfixes and improvements.

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.9.0

Welcome to [email protected] release (April 2023 #1)

... (truncated)

Changelog

Sourced from gatsby-remark-prismjs's changelog.

7.13.2 (2024-08-26)

Bug Fixes

7.13.1 (2024-01-23)

Note: Version bump only for package gatsby-remark-prismjs

7.13.0 (2023-12-18)

🧾 Release notes

Note: Version bump only for package gatsby-remark-prismjs

7.12.0 (2023-08-24)

🧾 Release notes

Note: Version bump only for package gatsby-remark-prismjs

7.11.0 (2023-06-15)

🧾 Release notes

Note: Version bump only for package gatsby-remark-prismjs

7.10.0 (2023-05-16)

🧾 Release notes

Note: Version bump only for package gatsby-remark-prismjs

7.9.0 (2023-04-18)

🧾 Release notes

Bug Fixes

  • update dependency parse-numeric-range to ^1.3.0 for gatsby-remark-prismjs #37861 (c4f8987)

7.8.0 (2023-03-21)

🧾 Release notes

Note: Version bump only for package gatsby-remark-prismjs

7.7.0 (2023-02-21)

... (truncated)

Commits

Updates gatsby-source-filesystem from 2.11.1 to 5.13.1

Release notes

Sourced from gatsby-source-filesystem's releases.

v5.13.0

Welcome to [email protected] release (December 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.12.0

Welcome to [email protected] release (August 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.11.0

Welcome to [email protected] release (June 2023 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.10.0

Welcome to [email protected] release (May 2023 #1)

This release focused on bug fixes and perf improvements. Check out notable bugfixes and improvements.

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.9.0

Welcome to [email protected] release (April 2023 #1)

... (truncated)

Changelog

Sourced from gatsby-source-filesystem's changelog.

5.13.1 (2024-01-23)

Note: Version bump only for package gatsby-source-filesystem

5.13.0 (2023-12-18)

🧾 Release notes

Note: Version bump only for package gatsby-source-filesystem

5.12.1 (2023-10-26)

Note: Version bump only for package gatsby-source-filesystem

5.12.0 (2023-08-24)

🧾 Release notes

Bug Fixes

  • update dependency xstate to ^4.38.0 for gatsby-source-filesystem #38319 (1d2dd04)

5.11.0 (2023-06-15)

🧾 Release notes

Note: Version bump only for package gatsby-source-filesystem

5.10.0 (2023-05-16)

🧾 Release notes

Bug Fixes

  • update dependency xstate to ^4.37.2 for gatsby-source-filesystem #38004 (f192268)

5.9.0 (2023-04-18)

🧾 Release notes

Bug Fixes

  • update dependency xstate to ^4.37.1 for gatsby-source-filesystem #37872 (

…in-manifest, gatsby-plugin-offline, gatsby-plugin-react-helmet, gatsby-remark-prismjs, gatsby-source-filesystem and gatsby-transformer-remark

Bumps [micromatch](https://github.com/micromatch/micromatch) to 4.0.8 and updates ancestor dependencies [micromatch](https://github.com/micromatch/micromatch), [gatsby](https://github.com/gatsbyjs/gatsby), [gatsby-plugin-google-tagmanager](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-google-tagmanager), [gatsby-plugin-manifest](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-manifest), [gatsby-plugin-offline](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-offline), [gatsby-plugin-react-helmet](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-react-helmet), [gatsby-remark-prismjs](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-remark-prismjs), [gatsby-source-filesystem](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-source-filesystem) and [gatsby-transformer-remark](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-transformer-remark). These dependencies need to be updated together.


Updates `micromatch` from 3.1.10 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/micromatch@3.1.10...4.0.8)

Updates `gatsby` from 2.32.13 to 5.13.7
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/compare/[email protected]@5.13.7)

Updates `gatsby-plugin-google-tagmanager` from 2.11.0 to 5.13.1
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-google-tagmanager/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-plugin-google-tagmanager)

Updates `gatsby-plugin-manifest` from 2.12.1 to 5.13.1
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-manifest/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-plugin-manifest)

Updates `gatsby-plugin-offline` from 3.10.2 to 6.13.3
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-offline/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-plugin-offline)

Updates `gatsby-plugin-react-helmet` from 3.10.0 to 6.13.1
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-react-helmet/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-plugin-react-helmet)

Updates `gatsby-remark-prismjs` from 3.13.0 to 7.13.2
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-remark-prismjs/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-remark-prismjs)

Updates `gatsby-source-filesystem` from 2.11.1 to 5.13.1
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-source-filesystem/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-source-filesystem)

Updates `gatsby-transformer-remark` from 2.16.1 to 6.13.1
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-transformer-remark/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-transformer-remark)

---
updated-dependencies:
- dependency-name: micromatch
  dependency-type: indirect
- dependency-name: gatsby
  dependency-type: direct:production
- dependency-name: gatsby-plugin-google-tagmanager
  dependency-type: direct:production
- dependency-name: gatsby-plugin-manifest
  dependency-type: direct:production
- dependency-name: gatsby-plugin-offline
  dependency-type: direct:production
- dependency-name: gatsby-plugin-react-helmet
  dependency-type: direct:production
- dependency-name: gatsby-remark-prismjs
  dependency-type: direct:production
- dependency-name: gatsby-source-filesystem
  dependency-type: direct:production
- dependency-name: gatsby-transformer-remark
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants