fix(security): update vulnerable packages, include React 17 in peerDeps (#28545)

hoobdeebla · web-flow · commit 18b5f30e3678 · 2021-01-15T09:54:08.000+01:00
diff --git a/package.json b/package.json
@@ -90,7 +90,7 @@
     "ts-jest": "^22",
     "typescript": "^3.9.7",
     "unified": "^9.2.0",
-    "yargs": "^10.1.2"
+    "yargs": "^15.4.1"
   },
   "resolutions": {
     "theme-ui": "0.4.0-rc.14",
diff --git a/packages/gatsby-admin/package.json b/packages/gatsby-admin/package.json
@@ -23,7 +23,7 @@
     "gatsby": "^2.31.0-next.1",
     "gatsby-interface": "^0.0.225",
     "gatsby-plugin-typescript": "^2.11.0-next.0",
-    "gatsby-plugin-webfonts": "^1.1.3",
+    "gatsby-plugin-webfonts": "^1.1.4",
     "gatsby-source-graphql": "^2.13.0-next.0",
     "lodash-es": "^4.17.20",
     "ncp": "^2.0.0",
diff --git a/packages/gatsby-cli/package.json b/packages/gatsby-cli/package.json
@@ -47,7 +47,7 @@
     "uuid": "3.4.0",
     "yargs": "^15.4.1",
     "yoga-layout-prebuilt": "^1.9.6",
-    "yurnalist": "^1.1.2"
+    "yurnalist": "^2.1.0"
   },
   "devDependencies": {
     "@babel/cli": "^7.12.1",
diff --git a/packages/gatsby-link/package.json b/packages/gatsby-link/package.json
@@ -20,8 +20,8 @@
   },
   "peerDependencies": {
     "@reach/router": "^1.3.3",
-    "react": "^16.4.2",
-    "react-dom": "^16.4.2"
+    "react": "^16.4.2 || ^17.0.0",
+    "react-dom": "^16.4.2 || ^17.0.0"
   },
   "homepage": "https://github.com/gatsbyjs/gatsby/tree/master/packages/gatsby-link#readme",
   "keywords": [
diff --git a/packages/gatsby-plugin-google-analytics/package.json b/packages/gatsby-plugin-google-analytics/package.json
@@ -27,8 +27,8 @@
   "main": "index.js",
   "peerDependencies": {
     "gatsby": "^2.0.0",
-    "react": "^16.4.2",
-    "react-dom": "^16.4.2"
+    "react": "^16.4.2 || ^17.0.0",
+    "react-dom": "^16.4.2 || ^17.0.0"
   },
   "repository": {
     "type": "git",
diff --git a/packages/gatsby-plugin-lodash/package.json b/packages/gatsby-plugin-lodash/package.json
@@ -9,7 +9,7 @@
   "dependencies": {
     "@babel/runtime": "^7.12.5",
     "babel-plugin-lodash": "^3.3.4",
-    "lodash-webpack-plugin": "^0.11.5"
+    "lodash-webpack-plugin": "^0.11.6"
   },
   "devDependencies": {
     "@babel/cli": "^7.12.1",
diff --git a/packages/gatsby-plugin-mdx/package.json b/packages/gatsby-plugin-mdx/package.json
@@ -29,7 +29,7 @@
     "change-case": "^3.1.0",
     "core-js": "^3.6.5",
     "dataloader": "^1.4.0",
-    "debug": "^4.1.1",
+    "debug": "^4.3.1",
     "escape-string-regexp": "^1.0.5",
     "eval": "^0.1.4",
     "fs-extra": "^8.1.0",
diff --git a/packages/gatsby-plugin-netlify-cms/package.json b/packages/gatsby-plugin-netlify-cms/package.json
@@ -38,8 +38,8 @@
   "peerDependencies": {
     "gatsby": "^2.0.101",
     "netlify-cms-app": "^2.9.0",
-    "react": "^16.8.4",
-    "react-dom": "^16.8.4"
+    "react": "^16.8.4 || ^17.0.0",
+    "react-dom": "^16.8.4 || ^17.0.0"
   },
   "repository": {
     "type": "git",
diff --git a/packages/gatsby-plugin-offline/package.json b/packages/gatsby-plugin-offline/package.json
@@ -22,7 +22,7 @@
     "cpx": "^1.5.0",
     "cross-env": "^7.0.3",
     "gatsby-plugin-utils": "^0.8.0-next.1",
-    "rewire": "^4.0.1"
+    "rewire": "^5.0.0"
   },
   "homepage": "https://github.com/gatsbyjs/gatsby/tree/master/packages/gatsby-plugin-offline#readme",
   "keywords": [
diff --git a/packages/gatsby-plugin-sharp/package.json b/packages/gatsby-plugin-sharp/package.json
@@ -20,7 +20,7 @@
     "lodash": "^4.17.20",
     "mini-svg-data-uri": "^1.2.3",
     "potrace": "^2.1.8",
-    "probe-image-size": "^5.0.0",
+    "probe-image-size": "^6.0.0",
     "progress": "^2.0.3",
     "semver": "^7.3.4",
     "sharp": "^0.27.0",
diff --git a/packages/gatsby-plugin-styletron/package.json b/packages/gatsby-plugin-styletron/package.json
@@ -23,7 +23,7 @@
   "main": "index.js",
   "peerDependencies": {
     "gatsby": "^2.0.0",
-    "react": "^16.4.2",
+    "react": "^16.4.2 || ^17.0.0",
     "styletron-engine-atomic": "^1.4.6",
     "styletron-react": "^5.2.7"
   },
diff --git a/packages/gatsby-plugin-subfont/package.json b/packages/gatsby-plugin-subfont/package.json
@@ -24,7 +24,7 @@
   },
   "license": "MIT",
   "dependencies": {
-    "subfont": "^4.2.2"
+    "subfont": "^5.2.5"
   },
   "devDependencies": {
     "@babel/cli": "^7.12.1",
diff --git a/packages/gatsby-plugin-typography/package.json b/packages/gatsby-plugin-typography/package.json
@@ -30,8 +30,8 @@
   "main": "index.js",
   "peerDependencies": {
     "gatsby": "^2.0.0",
-    "react": "^16.4.2",
-    "react-dom": "^16.4.2",
+    "react": "^16.4.2 || ^17.0.0",
+    "react-dom": "^16.4.2 || ^17.0.0",
     "react-typography": "^0.16.1 || ^1.0.0-alpha.0",
     "typography": "^0.16.0 || ^1.0.0-alpha.0"
   },
diff --git a/packages/gatsby-react-router-scroll/package.json b/packages/gatsby-react-router-scroll/package.json
@@ -25,8 +25,8 @@
   "main": "index.js",
   "peerDependencies": {
     "@reach/router": "^1.0.0",
-    "react": "^16.4.2",
-    "react-dom": "^16.4.2"
+    "react": "^16.4.2 || ^17.0.0",
+    "react-dom": "^16.4.2 || ^17.0.0"
   },
   "repository": {
     "type": "git",
diff --git a/packages/gatsby-recipes/package.json b/packages/gatsby-recipes/package.json
@@ -21,9 +21,9 @@
     "@hapi/joi": "^15.1.1",
     "better-queue": "^3.8.10",
     "chokidar": "^3.4.2",
-    "contentful-management": "^5.26.3",
+    "contentful-management": "^7.5.1",
     "cors": "^2.8.5",
-    "debug": "^4.1.1",
+    "debug": "^4.3.1",
     "detect-port": "^1.3.0",
     "dotenv": "^8.2.0",
     "execa": "^4.0.2",
@@ -37,7 +37,7 @@
     "graphql-compose": "^6.3.8",
     "graphql-subscriptions": "^1.1.0",
     "graphql-type-json": "^0.3.2",
-    "hicat": "^0.7.0",
+    "hicat": "^0.8.0",
     "is-binary-path": "^2.1.0",
     "is-url": "^1.2.4",
     "jest-diff": "^25.5.0",
@@ -84,7 +84,7 @@
     "react": "^16.12.0",
     "react-reconciler": "^0.25.1",
     "rimraf": "^3.0.2",
-    "rollup": "^2.34.2 ",
+    "rollup": "^2.34.2",
     "rollup-plugin-auto-external": "^2.0.0",
     "rollup-plugin-internal": "^1.0.0",
     "subscriptions-transport-ws": "^0.9.16",
diff --git a/packages/gatsby-remark-copy-linked-files/package.json b/packages/gatsby-remark-copy-linked-files/package.json
@@ -13,7 +13,7 @@
     "is-relative-url": "^3.0.0",
     "lodash": "^4.17.20",
     "path-is-inside": "^1.0.2",
-    "probe-image-size": "^5.0.0",
+    "probe-image-size": "^6.0.0",
     "unist-util-visit": "^1.4.1"
   },
   "devDependencies": {
diff --git a/packages/gatsby-remark-images-contentful/package.json b/packages/gatsby-remark-images-contentful/package.json
@@ -16,7 +16,7 @@
   "homepage": "https://github.com/gatsbyjs/gatsby/tree/master/packages/gatsby-remark-images-contentful#readme",
   "dependencies": {
     "@babel/runtime": "^7.12.5",
-    "axios": "^0.21.0",
+    "axios": "^0.21.1",
     "chalk": "^4.1.0",
     "cheerio": "^1.0.0-rc.3",
     "is-relative-url": "^3.0.0",
diff --git a/packages/gatsby-source-contentful/package.json b/packages/gatsby-source-contentful/package.json
@@ -11,7 +11,7 @@
     "@contentful/rich-text-react-renderer": "^14.1.2",
     "@contentful/rich-text-types": "^14.1.2",
     "@hapi/joi": "^15.1.1",
-    "axios": "^0.21.0",
+    "axios": "^0.21.1",
     "base64-img": "^1.0.4",
     "bluebird": "^3.7.2",
     "chalk": "^4.1.0",
diff --git a/packages/gatsby-source-drupal/package.json b/packages/gatsby-source-drupal/package.json
@@ -8,7 +8,7 @@
   },
   "dependencies": {
     "@babel/runtime": "^7.12.5",
-    "axios": "^0.21.0",
+    "axios": "^0.21.1",
     "bluebird": "^3.7.2",
     "body-parser": "^1.19.0",
     "gatsby-source-filesystem": "^2.10.0-next.1",
diff --git a/packages/gatsby-source-graphql/package.json b/packages/gatsby-source-graphql/package.json
@@ -15,7 +15,7 @@
     "apollo-link-http": "^1.5.17",
     "dataloader": "^2.0.0",
     "invariant": "^2.2.4",
-    "node-fetch": "^1.7.3",
+    "node-fetch": "^2.6.1",
     "uuid": "3.4.0"
   },
   "devDependencies": {
diff --git a/packages/gatsby-source-hacker-news/package.json b/packages/gatsby-source-hacker-news/package.json
@@ -8,7 +8,7 @@
   },
   "dependencies": {
     "@babel/runtime": "^7.12.5",
-    "axios": "^0.21.0",
+    "axios": "^0.21.1",
     "lodash": "^4.17.20"
   },
   "devDependencies": {
diff --git a/packages/gatsby-source-lever/package.json b/packages/gatsby-source-lever/package.json
@@ -9,7 +9,7 @@
   "bundledDependencies": [],
   "dependencies": {
     "@babel/runtime": "^7.12.5",
-    "axios": "^0.21.0",
+    "axios": "^0.21.1",
     "bluebird": "^3.7.2",
     "deep-map": "^1.5.0",
     "deep-map-keys": "^1.2.0",
diff --git a/packages/gatsby-source-medium/package.json b/packages/gatsby-source-medium/package.json
@@ -8,7 +8,7 @@
   },
   "dependencies": {
     "@babel/runtime": "^7.12.5",
-    "axios": "^0.21.0"
+    "axios": "^0.21.1"
   },
   "devDependencies": {
     "@babel/cli": "^7.12.1",
diff --git a/packages/gatsby-source-wordpress/package.json b/packages/gatsby-source-wordpress/package.json
@@ -9,7 +9,7 @@
   "bundledDependencies": [],
   "dependencies": {
     "@babel/runtime": "^7.12.5",
-    "axios": "^0.21.0",
+    "axios": "^0.21.1",
     "better-queue": "^3.8.10",
     "bluebird": "^3.7.2",
     "deep-map": "^1.5.0",
diff --git a/packages/gatsby-transformer-documentationjs/package.json b/packages/gatsby-transformer-documentationjs/package.json
@@ -8,7 +8,7 @@
   },
   "dependencies": {
     "@babel/runtime": "^7.12.5",
-    "documentation": "^12.3.0",
+    "documentation": "^13.1.0",
     "prismjs": "^1.23.0"
   },
   "devDependencies": {
diff --git a/packages/gatsby-transformer-screenshot/package.json b/packages/gatsby-transformer-screenshot/package.json
@@ -7,7 +7,7 @@
     "url": "https://github.com/gatsbyjs/gatsby/issues"
   },
   "dependencies": {
-    "axios": "^0.21.0",
+    "axios": "^0.21.1",
     "better-queue": "^3.8.10"
   },
   "devDependencies": {
diff --git a/packages/gatsby-transformer-sharp/package.json b/packages/gatsby-transformer-sharp/package.json
@@ -11,7 +11,7 @@
     "bluebird": "^3.7.2",
     "fs-extra": "^9.0.1",
     "potrace": "^2.1.8",
-    "probe-image-size": "^5.0.0",
+    "probe-image-size": "^6.0.0",
     "semver": "^7.3.4",
     "sharp": "^0.27.0"
   },
diff --git a/packages/gatsby-transformer-sqip/package.json b/packages/gatsby-transformer-sqip/package.json
@@ -20,7 +20,7 @@
     "@babel/core": "^7.12.3",
     "babel-preset-gatsby-package": "^0.11.0-next.0",
     "cross-env": "^7.0.3",
-    "debug": "^3.2.6"
+    "debug": "^3.2.7"
   },
   "peerDependencies": {
     "gatsby": "^2.0.0",
diff --git a/packages/gatsby/package.json b/packages/gatsby/package.json
@@ -29,13 +29,13 @@
     "anser": "^2.0.1",
     "ansi-html": "^0.0.7",
     "autoprefixer": "^9.8.4",
-    "axios": "^0.20.0",
+    "axios": "^0.21.1",
     "babel-core": "7.0.0-bridge.0",
     "babel-eslint": "^10.1.0",
     "babel-loader": "^8.1.0",
-    "babel-plugin-add-module-exports": "^0.3.3",
+    "babel-plugin-add-module-exports": "^1.0.4",
     "babel-plugin-dynamic-import-node": "^2.3.3",
-    "babel-plugin-lodash": "3.3.4",
+    "babel-plugin-lodash": "^3.3.4",
     "babel-plugin-remove-graphql-queries": "^2.15.0-next.0",
     "babel-preset-gatsby": "^0.11.0-next.0",
     "better-opn": "^2.0.0",
@@ -54,7 +54,7 @@
     "cors": "^2.8.5",
     "css-loader": "^1.0.1",
     "date-fns": "^2.14.0",
-    "debug": "^3.2.6",
+    "debug": "^3.2.7",
     "del": "^5.1.0",
     "detect-port": "^1.3.0",
     "devcert": "^1.1.3",
@@ -156,7 +156,7 @@
     "v8-compile-cache": "^1.1.2",
     "webpack": "^4.44.1",
     "webpack-dev-middleware": "^3.7.2",
-    "webpack-dev-server": "^3.11.0",
+    "webpack-dev-server": "^3.11.2",
     "webpack-hot-middleware": "^2.25.0",
     "webpack-merge": "^4.2.2",
     "webpack-stats-plugin": "^0.3.2",
@@ -180,7 +180,7 @@
     "@types/webpack-virtual-modules": "^0.1.0",
     "babel-preset-gatsby-package": "^0.11.0-next.0",
     "cross-env": "^7.0.3",
-    "documentation": "^12.3.0",
+    "documentation": "^13.1.0",
     "enhanced-resolve": "^4.2.0",
     "eslint-plugin-jsx-a11y": "^6.3.1",
     "react": "^16.12.0",
@@ -225,8 +225,8 @@
   "main": "cache-dir/commonjs/gatsby-browser-entry.js",
   "module": "cache-dir/gatsby-browser-entry.js",
   "peerDependencies": {
-    "react": "^16.4.2",
-    "react-dom": "^16.4.2"
+    "react": "^16.4.2 || ^17.0.0",
+    "react-dom": "^16.4.2 || ^17.0.0"
   },
   "repository": {
     "type": "git",
diff --git a/yarn.lock b/yarn.lock
