Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 29, 2024

Bumps micromatch to 4.0.8 and updates ancestor dependencies micromatch, gatsby, gatsby-plugin-google-tagmanager, gatsby-plugin-manifest, gatsby-plugin-offline, gatsby-plugin-react-helmet, gatsby-remark-prismjs, gatsby-source-filesystem and gatsby-transformer-remark. These dependencies need to be updated together.

Updates micromatch from 3.1.10 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

4.0.4

  • fix: Update picomatch to fix regression #179 (8becb55)

4.0.3

  • Enforce newer version of picomatch with bugfixes
Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

[4.0.7] - 2024-05-22

  • this is basically v4.0.5, with some README updates
  • it is vulnerable to CVE-2024-4067
  • Updated braces to v3.0.3 to avoid CVE-2024-4068
  • does NOT break API compatibility

[4.0.6] - 2024-05-21

  • Added hasBraces to check if a pattern contains braces.
  • Fixes CVE-2024-4067
  • BREAKS API COMPATIBILITY
  • Should be labeled as a major release, but it's not.

[4.0.1 - 4.0.5]

[4.0.0] - 2019-03-20

Added

  • Adds support for options.onMatch. See the readme for details
  • Adds support for options.onIgnore. See the readme for details
  • Adds support for options.onResult. See the readme for details

Breaking changes

  • Require Node.js >= 8.6
  • Removed support for passing an array of brace patterns to micromatch.braces().
  • To strictly enforce closing brackets (for {, [, and (), you must now use strictBrackets=true instead of strictErrors.
  • cache - caching and all related options and methods have been removed
  • options.unixify was renamed to options.windows
  • options.nodupes Was removed. Duplicates are always removed by default. You can override this with custom behavior by using the onMatch, onResult and onIgnore functions.
  • options.snapdragon was removed, as snapdragon is no longer used.
  • options.sourcemap was removed, as snapdragon is no longer used, which provided sourcemap support.

[3.0.0] - 2017-04-11

Complete overhaul, with 36,000+ new unit tests validated against actual output generated by Bash and minimatch. More specifically, 35,000+ of the tests:

  • micromatch results are directly compared to bash results
  • in rare cases, when micromatch and bash disagree, micromatch's results are compared to minimatch's results
  • micromatch is much more accurate than minimatch, so there were cases where I had to make assumptions. I'll try to document these.

This refactor introduces a parser and compiler that are supersets of more granular parsers and compilers from other sub-modules. Each of these sub-modules has a singular responsibility and focuses on a certain type of matching that aligns with a specific part of the Bash "expansion" API.

These sub-modules work like plugins to seamlessly create the micromatch parser/compiler, so that strings are parsed in one pass, an AST is created, then a new string is generated by the compiler.

... (truncated)

Commits

Updates gatsby from 2.32.13 to 5.13.7

Release notes

Sourced from gatsby's releases.

v5.13.0

Welcome to gatsby@5.13.0 release (December 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.12.0

Welcome to gatsby@5.12.0 release (August 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.11.0

Welcome to gatsby@5.11.0 release (June 2023 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.10.0

Welcome to gatsby@5.10.0 release (May 2023 #1)

This release focused on bug fixes and perf improvements. Check out notable bugfixes and improvements.

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.9.0

Welcome to gatsby@5.9.0 release (April 2023 #1)

... (truncated)

Commits

Updates gatsby-plugin-google-tagmanager from 2.11.0 to 5.13.1

Release notes

Sourced from gatsby-plugin-google-tagmanager's releases.

v5.13.0

Welcome to gatsby@5.13.0 release (December 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.12.0

Welcome to gatsby@5.12.0 release (August 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.11.0

Welcome to gatsby@5.11.0 release (June 2023 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.10.0

Welcome to gatsby@5.10.0 release (May 2023 #1)

This release focused on bug fixes and perf improvements. Check out notable bugfixes and improvements.

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.9.0

Welcome to gatsby@5.9.0 release (April 2023 #1)

... (truncated)

Changelog

Sourced from gatsby-plugin-google-tagmanager's changelog.

5.13.1 (2024-01-23)

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.13.0 (2023-12-18)

🧾 Release notes

Features

5.12.3 (2023-10-26)

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.12.2 (2023-10-20)

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.12.1 (2023-10-09)

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.12.0 (2023-08-24)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.11.0 (2023-06-15)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.10.0 (2023-05-16)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.9.0 (2023-04-18)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-google-tagmanager

5.8.0 (2023-03-21)

... (truncated)

Commits

Updates gatsby-plugin-manifest from 2.12.1 to 5.13.1

Release notes

Sourced from gatsby-plugin-manifest's releases.

v5.13.0

Welcome to gatsby@5.13.0 release (December 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.12.0

Welcome to gatsby@5.12.0 release (August 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.11.0

Welcome to gatsby@5.11.0 release (June 2023 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.10.0

Welcome to gatsby@5.10.0 release (May 2023 #1)

This release focused on bug fixes and perf improvements. Check out notable bugfixes and improvements.

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.9.0

Welcome to gatsby@5.9.0 release (April 2023 #1)

... (truncated)

Changelog

Sourced from gatsby-plugin-manifest's changelog.

5.13.1 (2024-01-23)

Note: Version bump only for package gatsby-plugin-manifest

5.13.0 (2023-12-18)

🧾 Release notes

Chores

5.12.3 (2023-10-26)

Note: Version bump only for package gatsby-plugin-manifest

5.12.2 (2023-10-20)

Note: Version bump only for package gatsby-plugin-manifest

5.12.1 (2023-10-09)

Chores

5.12.0 (2023-08-24)

🧾 Release notes

Bug Fixes

5.11.0 (2023-06-15)

🧾 Release notes

Chores

5.10.0 (2023-05-16)

🧾 Release notes

Bug Fixes

... (truncated)

Commits

Updates gatsby-plugin-offline from 3.10.2 to 6.13.3

Release notes

Sourced from gatsby-plugin-offline's releases.

v5.13.0

Welcome to gatsby@5.13.0 release (December 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.12.0

Welcome to gatsby@5.12.0 release (August 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.11.0

Welcome to gatsby@5.11.0 release (June 2023 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.10.0

Welcome to gatsby@5.10.0 release (May 2023 #1)

This release focused on bug fixes and perf improvements. Check out notable bugfixes and improvements.

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.9.0

Welcome to gatsby@5.9.0 release (April 2023 #1)

... (truncated)

Changelog

Sourced from gatsby-plugin-offline's changelog.

6.13.3 (2024-08-26)

Bug Fixes

6.13.2 (2024-04-10)

Bug Fixes

6.13.1 (2024-01-23)

Note: Version bump only for package gatsby-plugin-offline

6.13.0 (2023-12-18)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-offline

6.12.3 (2023-10-26)

Note: Version bump only for package gatsby-plugin-offline

6.12.2 (2023-10-20)

Note: Version bump only for package gatsby-plugin-offline

6.12.1 (2023-10-09)

Note: Version bump only for package gatsby-plugin-offline

6.12.0 (2023-08-24)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-offline

6.11.0 (2023-06-15)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-offline

6.10.0 (2023-05-16)

🧾 Release notes

... (truncated)

Commits

Updates gatsby-plugin-react-helmet from 3.10.0 to 6.13.1

Release notes

Sourced from gatsby-plugin-react-helmet's releases.

v5.13.0

Welcome to gatsby@5.13.0 release (December 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.12.0

Welcome to gatsby@5.12.0 release (August 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.11.0

Welcome to gatsby@5.11.0 release (June 2023 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.10.0

Welcome to gatsby@5.10.0 release (May 2023 #1)

This release focused on bug fixes and perf improvements. Check out notable bugfixes and improvements.

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.9.0

Welcome to gatsby@5.9.0 release (April 2023 #1)

... (truncated)

Changelog

Sourced from gatsby-plugin-react-helmet's changelog.

6.13.1 (2024-01-23)

Note: Version bump only for package gatsby-plugin-react-helmet

6.13.0 (2023-12-18)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-react-helmet

6.12.0 (2023-08-24)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-react-helmet

6.11.0 (2023-06-15)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-react-helmet

6.10.0 (2023-05-16)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-react-helmet

6.9.0 (2023-04-18)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-react-helmet

6.8.0 (2023-03-21)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-react-helmet

6.7.0 (2023-02-21)

🧾 Release notes

Note: Version bump only for package gatsby-plugin-react-helmet

6.6.0 (2023-02-07)

🧾 Release notes

... (truncated)

Commits

Updates gatsby-remark-prismjs from 3.13.0 to 7.13.2

Release notes

Sourced from gatsby-remark-prismjs's releases.

v5.13.0

Welcome to gatsby@5.13.0 release (December 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.12.0

Welcome to gatsby@5.12.0 release (August 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.11.0

Welcome to gatsby@5.11.0 release (June 2023 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.10.0

Welcome to gatsby@5.10.0 release (May 2023 #1)

This release focused on bug fixes and perf improvements. Check out notable bugfixes and improvements.

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.9.0

Welcome to gatsby@5.9.0 release (April 2023 #1)

... (truncated)

Changelog

Sourced from gatsby-remark-prismjs's changelog.

7.13.2 (2024-08-26)

Bug Fixes

7.13.1 (2024-01-23)

Note: Version bump only for package gatsby-remark-prismjs

7.13.0 (2023-12-18)

🧾 Release notes

Note: Version bump only for package gatsby-remark-prismjs

7.12.0 (2023-08-24)

🧾 Release notes

Note: Version bump only for package gatsby-remark-prismjs

7.11.0 (2023-06-15)

🧾 Release notes

Note: Version bump only for package gatsby-remark-prismjs

7.10.0 (2023-05-16)

🧾 Release notes

Note: Version bump only for package gatsby-remark-prismjs

7.9.0 (2023-04-18)

🧾 Release notes

Bug Fixes

  • update dependency parse-numeric-range to ^1.3.0 for gatsby-remark-prismjs #37861 (c4f8987)

7.8.0 (2023-03-21)

🧾 Release notes

Note: Version bump only for package gatsby-remark-prismjs

7.7.0 (2023-02-21)

... (truncated)

Commits

Updates gatsby-source-filesystem from 2.11.1 to 5.13.1

Release notes

Sourced from gatsby-source-filesystem's releases.

v5.13.0

Welcome to gatsby@5.13.0 release (December 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.12.0

Welcome to gatsby@5.12.0 release (August 2023 #1)

Key highlight of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.11.0

Welcome to gatsby@5.11.0 release (June 2023 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.10.0

Welcome to gatsby@5.10.0 release (May 2023 #1)

This release focused on bug fixes and perf improvements. Check out notable bugfixes and improvements.

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.9.0

Welcome to gatsby@5.9.0 release (April 2023 #1)

... (truncated)

Changelog

Sourced from gatsby-source-filesystem's changelog.

5.13.1 (2024-01-23)

Note: Version bump only for package gatsby-source-filesystem

5.13.0 (2023-12-18)

🧾 Release notes

Note: Version bump only for package gatsby-source-filesystem

5.12.1 (2023-10-26)

Note: Version bump only for package gatsby-source-filesystem

5.12.0 (2023-08-24)

🧾 Release notes

Bug Fixes

  • update dependency xstate to ^4.38.0 for gatsby-source-filesystem #38319 (1d2dd04)

5.11.0 (2023-06-15)

🧾 Release notes

Note: Version bump only for package gatsby-source-filesystem

5.10.0 (2023-05-16)

🧾 Release notes

Bug Fixes

  • update dependency xstate to ^4.37.2 for gatsby-source-filesystem #38004 (f192268)

5.9.0 (2023-04-18)

🧾 Release notes

Bug Fixes

  • update dependency xstate to ^4.37.1 for gatsby-source-filesystem #37872 (

…in-manifest, gatsby-plugin-offline, gatsby-plugin-react-helmet, gatsby-remark-prismjs, gatsby-source-filesystem and gatsby-transformer-remark

Bumps [micromatch](https://github.com/micromatch/micromatch) to 4.0.8 and updates ancestor dependencies [micromatch](https://github.com/micromatch/micromatch), [gatsby](https://github.com/gatsbyjs/gatsby), [gatsby-plugin-google-tagmanager](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-google-tagmanager), [gatsby-plugin-manifest](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-manifest), [gatsby-plugin-offline](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-offline), [gatsby-plugin-react-helmet](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-react-helmet), [gatsby-remark-prismjs](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-remark-prismjs), [gatsby-source-filesystem](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-source-filesystem) and [gatsby-transformer-remark](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-transformer-remark). These dependencies need to be updated together.


Updates `micromatch` from 3.1.10 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/micromatch@3.1.10...4.0.8)

Updates `gatsby` from 2.32.13 to 5.13.7
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/compare/gatsby@2.32.13...gatsby@5.13.7)

Updates `gatsby-plugin-google-tagmanager` from 2.11.0 to 5.13.1
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-google-tagmanager/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/commits/gatsby-plugin-google-tagmanager@5.13.1/packages/gatsby-plugin-google-tagmanager)

Updates `gatsby-plugin-manifest` from 2.12.1 to 5.13.1
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-manifest/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/commits/gatsby-plugin-manifest@5.13.1/packages/gatsby-plugin-manifest)

Updates `gatsby-plugin-offline` from 3.10.2 to 6.13.3
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-offline/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/commits/gatsby-plugin-offline@6.13.3/packages/gatsby-plugin-offline)

Updates `gatsby-plugin-react-helmet` from 3.10.0 to 6.13.1
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-react-helmet/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/commits/gatsby-plugin-react-helmet@6.13.1/packages/gatsby-plugin-react-helmet)

Updates `gatsby-remark-prismjs` from 3.13.0 to 7.13.2
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-remark-prismjs/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/commits/gatsby-remark-prismjs@7.13.2/packages/gatsby-remark-prismjs)

Updates `gatsby-source-filesystem` from 2.11.1 to 5.13.1
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-source-filesystem/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/commits/gatsby-source-filesystem@5.13.1/packages/gatsby-source-filesystem)

Updates `gatsby-transformer-remark` from 2.16.1 to 6.13.1
- [Release notes](https://github.com/gatsbyjs/gatsby/releases)
- [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-transformer-remark/CHANGELOG.md)
- [Commits](https://github.com/gatsbyjs/gatsby/commits/gatsby-transformer-remark@6.13.1/packages/gatsby-transformer-remark)

---
updated-dependencies:
- dependency-name: micromatch
  dependency-type: indirect
- dependency-name: gatsby
  dependency-type: direct:production
- dependency-name: gatsby-plugin-google-tagmanager
  dependency-type: direct:production
- dependency-name: gatsby-plugin-manifest
  dependency-type: direct:production
- dependency-name: gatsby-plugin-offline
  dependency-type: direct:production
- dependency-name: gatsby-plugin-react-helmet
  dependency-type: direct:production
- dependency-name: gatsby-remark-prismjs
  dependency-type: direct:production
- dependency-name: gatsby-source-filesystem
  dependency-type: direct:production
- dependency-name: gatsby-transformer-remark
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant