[Snyk] Fix for 1 vulnerabilities

[0xSebin]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • examples/using-sass/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	713/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.4	Prototype Pollution SNYK-JS-JSON5-3182856	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gatsby

The new version differs by 242 commits.

• f1d3f7b chore(release): Publish
• 6e6ea56 chore(release): Publish rc
• df50ce7 fix(gatsby): Add dir=ltr to Fast Refresh overlay (fix(gatsby): Add dir=ltr to Fast Refresh overlay gatsbyjs/gatsby#29900) (fix(gatsby): Add dir=ltr to Fast Refresh overlay (#29900) gatsbyjs/gatsby#29908)
• 83adec5 chore(docs): update readme (chore(docs): update readme gatsbyjs/gatsby#29837) (chore(docs): update readme (#29837) gatsbyjs/gatsby#29909)
• b2628da will git stop being weird (fix(gatsby-transformer-sharp): Fix options override gatsbyjs/gatsby#29897) (fix(gatsby-transformer-sharp): Fix options override (#29897) gatsbyjs/gatsby#29907)
• c98c87f chore(release): Publish rc
• c8bf571 fix(gatsby-source-wordpress): image fixes (fix(gatsby-source-wordpress): image fixes gatsbyjs/gatsby#29813) (fix(gatsby-source-wordpress): image fixes (#29813) gatsbyjs/gatsby#29886)
• 85bb8ea fix(gatsby-plugin-image): Update peerdeps (fix(gatsby-plugin-image): Update peerdeps gatsbyjs/gatsby#29880) (fix(gatsby-plugin-image): Update peerdeps (#29880) gatsbyjs/gatsby#29888)
• c266b83 fix(gatsby): Remove `react-hot-loader` deps & other unused deps (fix(gatsby): Remove react-hot-loader deps & other unused deps gatsbyjs/gatsby#29864) (fix(gatsby): Remove react-hot-loader deps & other unused deps (#29864) gatsbyjs/gatsby#29876)
• 222ca3f fix(gatsby): with some custom babel configs array spreading with Set is not safe (fix(gatsby): with some custom babel configs array spreading with Set is not safe gatsbyjs/gatsby#29885) (fix(gatsby): with some custom babel configs array spreading with Set is not safe (#29885) gatsbyjs/gatsby#29889)
• ea31900 chore(release): Publish rc
• f070422 fix(gatsby): Fix various small DEV_SSR bugs exposed in development_runtime tests (fix(gatsby): Fix various small DEV_SSR bugs exposed in development_runtime tests gatsbyjs/gatsby#29720) (fix(gatsby): Fix various small DEV_SSR bugs exposed in development_runtime tests (#29720) gatsbyjs/gatsby#29866)
• cb3b1ca chore: update peerdeps to latest major versions (chore: update peerdeps to latest major versions gatsbyjs/gatsby#29857) (chore: update peerdeps to latest major versions (#29857) gatsbyjs/gatsby#29867)
• 8639f7b fix(create-gatsby): Use legacy peer deps (fix(create-gatsby): Use legacy peer deps gatsbyjs/gatsby#29856) (fix(create-gatsby): Use legacy peer deps (#29856) gatsbyjs/gatsby#29862)
• fdc1fe2 fix(gatsby): fix some css HMR edge cases (fix(gatsby): fix some css HMR edge cases gatsbyjs/gatsby#29839) (fix(gatsby): fix some css HMR edge cases (#29839) gatsbyjs/gatsby#29865)
• e8a7e3b fix(gatsby-plugin-preact): fix fast-refresh (fix(gatsby-plugin-preact): fix fast-refresh gatsbyjs/gatsby#29831) (fix(gatsby-plugin-preact): fix fast-refresh (#29831) gatsbyjs/gatsby#29860)
• e7453c3 fix(gatsby): Improve Fast Refresh overlay styles (fix(gatsby): Improve Fast Refresh overlay styles gatsbyjs/gatsby#29855) (fix(gatsby): Improve Fast Refresh overlay styles (#29855) gatsbyjs/gatsby#29861)
• 76f4f96 chore: upgrade postcss & plugins (chore: upgrade postcss & plugins gatsbyjs/gatsby#29793)
• de6cba6 chore(release): Publish rc
• aafe584 fix: query on demand loading indicator always active on preact. (fix: query on demand loading indicator always active on preact. gatsbyjs/gatsby#29829) (fix: query on demand loading indicator always active on preact. (#29829) gatsbyjs/gatsby#29836)
• 34f5b8c fix(hmr): accept hot updates for modules above page templates (fix(hmr): accept hot updates for modules above page templates gatsbyjs/gatsby#29752) (fix(hmr): accept hot updates for modules above page templates (#29752) gatsbyjs/gatsby#29835)
• b8d21f8 fix(gatsby): workaround graphql-compose issue (fix(gatsby): workaround graphql-compose issue gatsbyjs/gatsby#29822) (fix(gatsby): workaround graphql-compose issue (#29822) gatsbyjs/gatsby#29834)
• 32fee71 fix(gatsby): eslint linting (fix(gatsby): eslint linting gatsbyjs/gatsby#29796) (fix(gatsby): eslint linting (#29796) gatsbyjs/gatsby#29814)
• bca7951 fix(gatsby-source-wordpress): HTML image regex's (fix(gatsby-source-wordpress): HTML image regex's gatsbyjs/gatsby#29778) (fix(gatsby-source-wordpress): HTML image regex's (#29778) gatsbyjs/gatsby#29816)

See the full diff

Package name: gatsby-plugin-sass

The new version differs by 102 commits.

• f8cc2a3 chore(release): Publish
• ecebdd3 fix(gatsby-plugin-sharp): Add avif to pipeline (fix(gatsby-plugin-sharp): Add avif to pipeline gatsbyjs/gatsby#28871) (fix(gatsby-plugin-sharp): Add avif to pipeline (#28871) gatsbyjs/gatsby#28876)
• 3f854ba perf(gatsby-plugin-mdx): Stop clobbering the same file over and over again (perf(gatsby-plugin-mdx): Stop clobbering the same file over and over again gatsbyjs/gatsby#27974) (perf(gatsby-plugin-mdx): Stop clobbering the same file over and over again (#27974) gatsbyjs/gatsby#28874)
• 0c1c807 fix(create-gatsby) the sessionId is supposed to be the same for the whole duration of the session (fix(create-gatsby) the sessionId is supposed to be the same for the whole duration of the session gatsbyjs/gatsby#28864) (fix(create-gatsby) the sessionId is supposed to be the same for the whole duration of the session (#28864) gatsbyjs/gatsby#28870)
• 6b7c5e7 fix(gatsby-plugin-image): Fix handling of sizes prop in SSR (fix(gatsby-plugin-image): Fix handling of sizes prop in SSR gatsbyjs/gatsby#28835) (fix(gatsby-plugin-image): Fix handling of sizes prop in SSR (#28835) gatsbyjs/gatsby#28867)
• afac774 perf(gatsby-plugin-sharp): change approach to concurrency for image processing (perf(gatsby-plugin-sharp): change approach to concurrency for image processing gatsbyjs/gatsby#28575) (perf(gatsby-plugin-sharp): change approach to concurrency for image processing (#28575) gatsbyjs/gatsby#28862)
• f04304e feat(gatsby): Partially release develop SSR to 5% (feat(gatsby): Partially release develop SSR to 5% gatsbyjs/gatsby#28844) (feat(gatsby): Partially release develop SSR to 5% (#28844) gatsbyjs/gatsby#28859)
• ceeb7d4 fix(gatsby-plugin-sharp): Pass format-specific options in image-data (fix(gatsby-plugin-sharp): Pass format-specific options in image data resolver gatsbyjs/gatsby#28826) (fix(gatsby-plugin-sharp): Pass format-specific options in image-data (#28826) gatsbyjs/gatsby#28853)
• 883d184 feature(gatsby): Extract non-css-in-js css and add add to <head> when SSRing in dev (feature(gatsby): Extract non-css-in-js css and add add to <head> when SSRing in dev gatsbyjs/gatsby#28471) (feature(gatsby): Extract non-css-in-js css and add add to <head> when SSRing in dev (#28471) gatsbyjs/gatsby#28856)
• b648728 fix(gatsby-plugin-image): Correct image styles (fix(gatsby-plugin-image): Correct image styles gatsbyjs/gatsby#28834) (fix(gatsby-plugin-image): Correct image styles (#28834) gatsbyjs/gatsby#28854)
• f45ba68 fix(gatsby-plugin-image): Better error logging (fix(gatsby-plugin-image): Better error logging gatsbyjs/gatsby#28741) (fix(gatsby-plugin-image): Better error logging (#28741) gatsbyjs/gatsby#28855)
• f19c807 chore(gatsby): enable query on demand (and lazy images) by default for local development (chore(gatsby): enable query on demand (and lazy images) by default for local development gatsbyjs/gatsby#28787)
• bd6b899 feat(gatsby): use production React for dev-ssr when CI=true (feat(gatsby): use production React for dev-ssr when CI=true gatsbyjs/gatsby#28728)
• abdb8d6 feat(gatsby-source-graphql): Default Apollo Link fetch wrapper to show better API errors (feat(gatsby-source-graphql): Default Apollo Link fetch wrapper to show better API errors gatsbyjs/gatsby#28786)
• 3b40d80 feat(gatsby): enable lazy images by default (feat(gatsby): enable lazy images by default gatsbyjs/gatsby#28743)
• 968914f chore(release): Publish next
• 5c3931c chore(gatsby): Keep page renderer around (chore(gatsby): Keep page renderer around gatsbyjs/gatsby#28784)
• 2058775 feat: Add AVIF image support to beta image plugin (feat: Add AVIF image support to beta image plugin gatsbyjs/gatsby#28742)
• 146b197 fix(gatsby): print childOf directive for implicit child fields (fix(gatsby): print childOf directive for implicit child fields gatsbyjs/gatsby#28483)
• 3af7182 chore(telemetry) improve github action and circle detection (chore(telemetry) improve github action and circle detection gatsbyjs/gatsby#28732)
• 338ed78 chore(telemetry): add valueBoolean (chore(telemetry): add valueBoolean gatsbyjs/gatsby#28734)
• 4021a57 chore(gatsby-source-graphql): docs on how to use apollo links (chore(gatsby-source-graphql): docs on how to use apollo links gatsbyjs/gatsby#28686)
• 3a51e22 perf(gatsby-source-contentful): dont re-create nodes (perf(gatsby-source-contentful): dont re-create nodes gatsbyjs/gatsby#28642)
• 6af620c fix(gatsby-plugin-image): Preload lazy-hydrator (fix(gatsby-plugin-image): Preload lazy-hydrator gatsbyjs/gatsby#28690)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution