New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump xml2js, gatsby-plugin-sharp, gatsby-remark-images and gatsby-transformer-sharp #55
base: main
Are you sure you want to change the base?
Conversation
New dependency changes detected. Learn more about Socket for GitHub ↗︎ 🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again. Bot CommandsTo ignore an alert, reply with a comment starting with
🫣 Native codeContains native code which could be a vector to obscure malicious code, and generally decrease the likelihood of reproducible or reliable installs. Ensure that native code bindings are expected. Consumers may consider pure JS and functionally similar alternatives to avoid the challenges and risks associated with native code bindings.
Pull request alert summary
📊 Modified Dependency Overview:
|
…nsformer-sharp Removes [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js). It's no longer used after updating ancestor dependencies [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js), [gatsby-plugin-sharp](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-sharp), [gatsby-remark-images](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-remark-images) and [gatsby-transformer-sharp](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-transformer-sharp). These dependencies need to be updated together. Removes `xml2js` Updates `gatsby-plugin-sharp` from 2.14.4 to 5.8.1 - [Release notes](https://github.com/gatsbyjs/gatsby/releases) - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-sharp/CHANGELOG.md) - [Commits](https://github.com/gatsbyjs/gatsby/commits/gatsby-plugin-sharp@5.8.1/packages/gatsby-plugin-sharp) Updates `gatsby-remark-images` from 3.11.1 to 7.8.0 - [Release notes](https://github.com/gatsbyjs/gatsby/releases) - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-remark-images/CHANGELOG.md) - [Commits](https://github.com/gatsbyjs/gatsby/commits/gatsby-remark-images@7.8.0/packages/gatsby-remark-images) Updates `gatsby-transformer-sharp` from 2.12.1 to 5.8.0 - [Release notes](https://github.com/gatsbyjs/gatsby/releases) - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-transformer-sharp/CHANGELOG.md) - [Commits](https://github.com/gatsbyjs/gatsby/commits/gatsby-transformer-sharp@5.8.0/packages/gatsby-transformer-sharp) --- updated-dependencies: - dependency-name: xml2js dependency-type: indirect - dependency-name: gatsby-plugin-sharp dependency-type: direct:production - dependency-name: gatsby-remark-images dependency-type: direct:production - dependency-name: gatsby-transformer-sharp dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
809fc87
to
8b78bc3
Compare
* feat(HTD-34): refactor cta, use variant prop instead on isHero * feat(HTD-34): set download button with border only if isHero * feat(HTD-34): some styling tweaks * feat(HTD-34): use DownloadButton instead of regular dropdown * feat(HTD-34): improve hero consistency * fix(HTD-34): spacing * fix(HTD-34): add cta bg variants * fix(HTD-34): makes lines looks better on bigger screens * fix(HTD-34): remove unused comments * fix(HTD-34): remove download buttom todo message * fix(HTD-34): use custom logo for linux and apple * fix(HTD-34): render lines background only in desktop
* feat(HTD-34): refactor cta, use variant prop instead on isHero * feat(HTD-34): set download button with border only if isHero * feat(HTD-34): some styling tweaks * feat(HTD-34): use DownloadButton instead of regular dropdown * feat(HTD-34): improve hero consistency * fix(HTD-34): spacing * fix(HTD-34): add cta bg variants * fix(HTD-34): makes lines looks better on bigger screens * fix(HTD-34): remove unused comments * fix(HTD-34): remove download buttom todo message * fix(HTD-34): use custom logo for linux and apple * fix(HTD-34): render lines background only in desktop
Removes xml2js. It's no longer used after updating ancestor dependencies xml2js, gatsby-plugin-sharp, gatsby-remark-images and gatsby-transformer-sharp. These dependencies need to be updated together.
Removes
xml2js
Updates
gatsby-plugin-sharp
from 2.14.4 to 5.8.1Release notes
Sourced from gatsby-plugin-sharp's releases.
... (truncated)
Changelog
Sourced from gatsby-plugin-sharp's changelog.
... (truncated)
Commits
12c91db
chore(release): Publish5f44208
fix(gatsby-plugin-sharp): don't serve static assets that are not result of cu...b1abb5b
chore(release): Publish3588ad1
chore(changelogs): update changelogs (#37686)fed83d5
chore(release): Publish next pre-minor6bf35a5
chore(changelogs): update changelogs (#37628)342e393
chore(release): Publish next pre-minor13a0a9e
fix(deps): update babel monorepo (#37568)e86d87c
chore(deps): update dependency@types/sharp
to ^0.31.1 (#37562)bea75ae
chore(release): Publish nextUpdates
gatsby-remark-images
from 3.11.1 to 7.8.0Release notes
Sourced from gatsby-remark-images's releases.
... (truncated)
Changelog
Sourced from gatsby-remark-images's changelog.
... (truncated)
Commits
b1abb5b
chore(release): Publish3588ad1
chore(changelogs): update changelogs (#37686)fed83d5
chore(release): Publish next pre-minor6bf35a5
chore(changelogs): update changelogs (#37628)342e393
chore(release): Publish next pre-minor13a0a9e
fix(deps): update babel monorepo (#37568)bea75ae
chore(release): Publish next1a24414
chore(changelogs): update changelogs (#37529)ede0901
chore(release): Publish next pre-minorf8f084a
chore(release): Publish nextUpdates
gatsby-transformer-sharp
from 2.12.1 to 5.8.0Release notes
Sourced from gatsby-transformer-sharp's releases.
... (truncated)
Changelog
Sourced from gatsby-transformer-sharp's changelog.
... (truncated)
Commits
b1abb5b
chore(release): Publish3588ad1
chore(changelogs): update changelogs (#37686)fed83d5
chore(release): Publish next pre-minor6bf35a5
chore(changelogs): update changelogs (#37628)342e393
chore(release): Publish next pre-minor13a0a9e
fix(deps): update babel monorepo (#37568)e86d87c
chore(deps): update dependency@types/sharp
to ^0.31.1 (#37562)bea75ae
chore(release): Publish next1a24414
chore(changelogs): update changelogs (#37529)ede0901
chore(release): Publish next pre-minorYou can trigger a rebase of this PR by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.