[Snyk] Fix for 1 vulnerabilities

[jufemaiz]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Uncaught Exception SNYK-JS-YAML-5458867	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gatsby

The new version differs by 250 commits.

• 13bf518 chore(release): Publish
• b30a43f chore(deps): Bump yaml-loader (#37401) (#37407)
• 492a31a fix(gatsby): handle initializing multiple instances of gatsby-plugin-sharp (#37306) (#37329)
• 4dcca80 chore(release): Publish
• 59076c8 fix(gatsby-transformer-remark): Disallow JS frontmatter by default (#37244) (#37298)
• 48a3db4 fix(gatsby): [rendering engines] use results of exports removal if sourceMap was not generated alongside transformed code (#37282) (#37299)
• ea42d7f fix(gatsby): don't output file-loader assets to .cache (#37284) (#37300)
• 2cc9eaf chore(release): Publish
• a729764 fix(gatsby-source-wordpress): Add back nodeType field that was removed in last version (#37212) (#37218)
• 188d3e7 chore(release): Publish
• 947e11b chore(gatsby-source-wordpress): use wpgql 1.13 in itests (#37146) (#37208)
• 5e72a5d chore(release): Publish
• 2dc715d chore: remove tracedSVG (#37093) (#37127)
• 07c0478 chore(release): Publish
• c698f13 fix(gatsby-source-wordpress): WPGraphQL 1.13.0 compatibility (#37134) (#37183)
• 49cca44 chore(release): Publish
• fac9fbc feat(gatsby-source-drupal): Provide proxyUrl in addition to baseUrl to allow using CDN, API gateway, etc. (#36819) (#37084)
• 2bc5902 feat(gatsby-source-wordpress): MediaItem.excludeFieldNames / auto exclude interface types that have no fields (#37062) (#37085)
• 1f92e69 fix(gatsby-source-wordpress) pass store for auth (#37006) (#37083)
• ab793c3 chore(release): Publish
• 07a126d fix(gatsby): stale node manifests (#36988)
• 288d836 chore(lerna): Use latest-v4 npm dist tag in 4.24 branch (#36995)
• c7b94b5 chore(release): Publish
• 1926b4e feat(gatsby): handle graphql-import-node bundling (#36951) (#36953)

See the full diff

Package name: snyk

The new version differs by 130 commits.

• 4cc1a94 Merge pull request #2105 from snyk/feat/webpack
• 7737f75 Merge pull request #2181 from snyk/test/migrate-old-snyk-format
• 418e6ad Merge pull request #2180 from snyk/test/migrate-is-docker
• 95631e7 test: migrate is-docker to jest
• babe22a test: migrate old-snyk-format to jest
• e22e94f feat: Snyk CLI is bundled with Webpack
• dd46c19 Merge pull request #2175 from snyk/fix/snyk-protect-multiple
• e7c314f Merge pull request #2178 from snyk/test/server-close
• 5e824c0 fix(protect): skip previously patched files
• ca2177a fix(protect): catch and log unexpected errors
• c9ddb44 chore(protect): move api url warnings to stderr
• e8fed38 refactor(protect): move stdout logs to top level
• 55e88f9 Merge pull request #2177 from snyk/test/set-jest-acceptance-timeout
• 1522c5f test: server.close uses callbacks, not promises
• 13dce51 test: increase timeout for slow oauth test
• 65c35be Merge pull request #2172 from snyk/chore/no-run-test-on-master
• a1e3992 chore: don't run tests on master
• 20feb67 Merge pull request #2165 from snyk/chore/dont-wait-for-regression-tests
• f50bca7 Merge pull request #2167 from snyk/refactor/replace-cc-parser-with-split-functions
• 1ed7d11 refactor: replace cc parser with split functions
• 707801d Merge pull request #2166 from snyk/fix/support_quotes_in_poetry_toml
• dc6b784 Merge pull request #2163 from snyk/chore/remove-store-test-results
• 7973015 fix: support quoted keys in inline tables
• 18f0d2a Merge pull request #2164 from snyk/chore/upgrade-snyk-nuget-plugin

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.