fix(deps): update dependency gatsby-plugin-sharp to v4 [security] #599

renovate · 2023-05-28T09:06:49Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
gatsby-plugin-sharp (source)	`2.6.14` -> `4.25.1`

GitHub Vulnerability Alerts

CVE-2023-30548

Impact

The gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal vulnerability exposed when running the Gatsby develop server (gatsby develop).

The following steps can be used to reproduce the vulnerability:


# Create a new Gatsby project, and install gatsby-plugin-sharp
$ npm init gatsby
$ cd my-gatsby-site
$ npm install gatsby-plugin-sharp

# Add the plugin to gatsby-config.js
module.exports = {
  plugins: [
    {
      resolve: `gatsby-plugin-sharp`,
    },
  ]
}

# Start the Gatsby develop server
$ gatsby develop

# Execute the path traversal vulnerability
$ curl "http://127.0.0.1:8000/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd"

It should be noted that by default gatsby develop is only accessible via the localhost 127.0.0.1, and one would need to intentionally expose the server to other interfaces to exploit this vulnerability by using server options such as --host 0.0.0.0, -H 0.0.0.0, or the GATSBY_HOST=0.0.0.0 environment variable.

Patches

A patch has been introduced in [email protected] and [email protected] which mitigates the issue by ensuring that included paths remain within the project directory.

Workarounds

As stated above, by default gatsby develop is only exposed to the localhost 127.0.0.1. For those using the develop server in the default configuration no risk is posed. If other ranges are required, preventing the develop server from being exposed to untrusted interfaces or IP address ranges would mitigate the risk from this vulnerability.

We encourage projects to upgrade to the latest major release branch for all Gatsby plugins to ensure the latest security updates and bug fixes are received in a timely manner.

Credits

We would like to thank Patrick Rombouts and Bart Veneman [drukwerkdeal.nl] for bringing the issue to our attention.

For more information

Email us at [email protected].

Release Notes

gatsbyjs/gatsby (gatsby-plugin-sharp)

Note: Version bump only for package gatsby-plugin-sharp

4.23.1 (2022-09-22)

Note: Version bump only for package gatsby-plugin-sharp

`v4.23.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.23.0`

Compare Source

🧾 Release notes

Chores

Cleanup v4 compile flag conditions #36486 (9dcc773)
upgrade svgo #36445 (4707fb8)

`v4.22.0`

Compare Source

🧾 Release notes

Chores

bump min potrace version #36443 (0d896ae)
Remove unused deps #36368 (8bad1a7)

`v4.21.0`

Compare Source

🧾 Release notes

Chores

Update got #36366 (ab55e4e)
update sharp #35539 (a9132a5)

`v4.20.0`

Compare Source

🧾 Release notes

Bug Fixes

Ensure min 1px height for BLURRED placeholder #35914 (abad94f)

`v4.19.0`

Compare Source

🧾 Release notes

Bug Fixes

update dependency async to ^3.2.4 for gatsby-plugin-sharp #36032 (20c790a)

4.18.1 (2022-07-12)

Note: Version bump only for package gatsby-plugin-sharp

`v4.18.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.18.0`

Compare Source

🧾 Release notes

Bug Fixes

update dependency got to ^11.8.5 for gatsby-plugin-sharp #35800 (c2d3336)

`v4.17.0`

Compare Source

🧾 Release notes

Note: Version bump only for package gatsby-plugin-sharp

4.16.1 (2022-06-08)

Note: Version bump only for package gatsby-plugin-sharp

`v4.16.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.16.0`

Compare Source

🧾 Release notes

Features

cache image metadata #35791 (7d93d2e)

Performance Improvements

downsize image before extracting dominant color #35814 (5e6c808)

4.15.1 (2022-06-01)

Note: Version bump only for package gatsby-plugin-sharp

`v4.15.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.15.0`

Compare Source

🧾 Release notes

Chores

remove old unused UUID dependency #35657 (d4aaa2a)

4.14.1 (2022-05-12)

Note: Version bump only for package gatsby-plugin-sharp

`v4.14.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.14.0`

Compare Source

🧾 Release notes

Bug Fixes

update dependency fs-extra to ^10.1.0 #34976 (10752ed)
update dependency semver to ^7.3.7 #35543 (f593e00)

`v4.13.0`

Compare Source

🧾 Release notes

Features

enable tracedsvg #35328 (a246011)

4.12.1 (2022-04-13)

Note: Version bump only for package gatsby-plugin-sharp

`v4.12.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.12.0`

Compare Source

🧾 Release notes

Bug Fixes

update minor and patch dependencies for gatsby-plugin-sharp #35296 (6f088aa)
windows quirks #35246 (392d6bc)

Chores

update sharp #35303 (d267bb3)

4.11.1 (2022-03-31)

Bug Fixes

windows quirks #35246 #35268 (a527891)

`v4.11.1`

Compare Source

Bug Fixes

windows quirks #35246 #35268 (a527891)

`v4.11.0`

Compare Source

🧾 Release notes

Refactoring

replace deprecated String.prototype.substr() #35205 (21f7c65)

4.10.2 (2022-03-23)

Note: Version bump only for package gatsby-plugin-sharp

4.10.1 (2022-03-18)

Note: Version bump only for package gatsby-plugin-sharp

`v4.10.2`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.10.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.10.0`

Compare Source

🧾 Release notes

Bug Fixes

Handle diff duotone settings #35075 (9690c7c)
Upgrade probe-image-size to fix memory leak warning fix #35009 (f98c9ba)

4.9.1 (2022-03-09)

Note: Version bump only for package gatsby-plugin-sharp

`v4.9.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.9.0`

Compare Source

🧾 Release notes

Chores

Format changelog files (088f23b)

4.8.2 (2022-03-01)

Note: Version bump only for package gatsby-plugin-sharp

4.8.1 (2022-02-25)

Note: Version bump only for package gatsby-plugin-sharp

`v4.8.2`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.8.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.8.0`

Compare Source

🧾 Release notes

Bug Fixes

update dependency sharp to ^0.30.1 #34755 (326a483)

`v4.7.0`

Compare Source

🧾 Release notes

Bug Fixes

update minor and patch dependencies for gatsby-plugin-sharp #34656 (c70ab01)

`v4.6.0`

Compare Source

🧾 Release notes

Bug Fixes

add missing dependencies #28759 (d20c97b)

4.5.2 (2022-01-17)

Note: Version bump only for package gatsby-plugin-sharp

4.5.1 (2022-01-12)

Note: Version bump only for package gatsby-plugin-sharp

`v4.5.2`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.5.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.5.0`

Compare Source

🧾 Release notes

Chores

update dependency @types/sharp to ^0.29.5 #34356 (79186ab)

`v4.4.0`

Compare Source

🧾 Release notes

Bug Fixes

update dependency got to ^11.8.3 for gatsby-plugin-sharp #34130 (80ef329)

Chores

update sharp #34120 (df36406)

`v4.3.0`

Compare Source

🧾 Release notes

Note: Version bump only for package gatsby-plugin-sharp

`v4.2.0`

Compare Source

🧾 Release notes

Bug Fixes

update minor and patch dependencies for gatsby-plugin-sharp #33770 (e9f0f32)
update dependency sharp to ^0.29.2 #33766 (0dfbc48)

4.1.4 (2021-11-15)

Note: Version bump only for package gatsby-plugin-sharp

4.1.3 (2021-11-11)

Note: Version bump only for package gatsby-plugin-sharp

4.1.2 (2021-11-10)

Note: Version bump only for package gatsby-plugin-sharp

4.1.1 (2021-11-09)

Note: Version bump only for package gatsby-plugin-sharp

`v4.1.4`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.1.3`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.1.2`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.1.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v4.1.0`

Compare Source

🧾 Release notes

Bug Fixes

pass failOnError to sharp in getImageMetadata #33547 (82cd584)
pass input buffer instead of readStream when processing image jobs #33685 (b800559)

4.0.1 (2021-10-27)

Bug Fixes

pass input buffer instead of readStream when processing image jobs #33685 #33694 (9b3d44f)

`v4.0.1`

Compare Source

Bug Fixes

pass input buffer instead of readStream when processing image jobs #33685 #33694 (9b3d44f)

`v4.0.0`

Compare Source

🧾 Release notes

Bug Fixes

run sharp in 1 core when in gatsby worker #33505 (4658b80)

Chores

update sharp #33379 (eb70b46)
remove old unused code #33504 (31952b4)
Remove sizeByPixelDensity option #33468 (d467372)

3.14.3 (2021-11-02)

Note: Version bump only for package gatsby-plugin-sharp

3.14.2 (2021-10-28)

Bug Fixes

pass input buffer instead of readStream when processing image jobs #33685 #33703 (84053a2)

3.14.1 (2021-10-06)

Note: Version bump only for package gatsby-plugin-sharp

`v3.15.0`

Compare Source

`v3.14.3`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v3.14.2`

Compare Source

Bug Fixes

pass input buffer instead of readStream when processing image jobs #33685 #33703 (84053a2)

`v3.14.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v3.14.0`

Compare Source

🧾 Release notes

Features

Use file streams instead of file paths #33029 (e6d9eb3)

Bug Fixes

Add TS type/v4 patches for unstable_onPluginInit #33062 (8901eb2)
update dependency async to ^3.2.1 for gatsby-plugin-sharp #32983 (6857e26)

Chores

update babel monorepo #32996 (048c7a7)
update semver #32979 (ecf1fa7)
upgrade got package #32928 (2ac366e)
update fs-extra (major) #32654 (eea2687)

Other Changes

Revert "chore(release): Publish next" (a0c4d44)

`v3.13.0`

Compare Source

🧾 Release notes

Features

reduce encoding time and install size #32851 #1 (ddcfbd8)

Chores

re-generate changelogs #32886 (417df15)

`v3.12.0`

Compare Source

🧾 Release notes

Bug Fixes

update minor and patch dependencies for gatsby-plugin-sharp #32633 (c6b75f7)

Chores

update formatting & linting #32626 (4a765b5)
update dependency @types/sharp to ^0.28.5 #32566 (ef9fa95)
update babel monorepo #32564 (a554998)

`v3.11.0`

Compare Source

🧾 Release notes

Bug Fixes

expose ".del" function on lmdb cache #32459 (e1a1396)

3.10.2 (2021-07-21)

Bug Fixes

expose ".del" function on lmdb cache #32459 #32464 (c01551e)

3.10.1 (2021-07-21)

Note: Version bump only for package gatsby-plugin-sharp

`v3.10.2`

Compare Source

Bug Fixes

expose ".del" function on lmdb cache #32459 #32464 (c01551e)

`v3.10.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v3.10.0`

Compare Source

🧾 Release notes

Chores

update sharp to ^0.28.3 #32227 (4fabc64)
update babel monorepo #32238 (466d4c0)

`v3.9.0`

Compare Source

🧾 Release notes

Features

add unstable_onPluginInit that would execute once in all processes #31901 (2bf8c0d)

`v3.8.0`

Compare Source

🧾 Release notes

Chores

bump babel minor #31857 (7d42e8d)

3.7.1 (2021-06-10)

Chores

bump babel minor #31857 #31859 (8636025)

`v3.7.1`

Compare Source

Chores

bump babel minor #31857 #31859 (8636025)

`v3.7.0`

Compare Source

🧾 Release notes

Chores

update babel monorepo #31143 (701ab2f)

`v3.6.0`

Compare Source

🧾 Release notes

Note: Version bump only for package gatsby-plugin-sharp

`v3.5.0`

Compare Source

🧾 Release notes

Bug Fixes

Handle fractional image sizes #31057 (08dfb37)

3.4.2 (2021-05-08)

Note: Version bump only for package gatsby-plugin-sharp

3.4.1 (2021-05-05)

Note: Version bump only for package gatsby-plugin-sharp

`v3.4.2`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v3.4.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v3.4.0`

Compare Source

🧾 Release notes

Bug Fixes

Handle fractional image sizes #31057 #31081 (21dc379)
use cpuCount for all parallel parts #30548 (9dbb772)

3.3.1 (2021-04-20)

Note: Version bump only for package gatsby-plugin-sharp

`v3.3.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v3.3.0`

Compare Source

🧾 Release notes

Chores

Update sharp to 0.28.0 #30541 (b0fcb57)

3.2.1 (2021-04-07)

Note: Version bump only for package gatsby-plugin-sharp

`v3.2.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v3.2.0`

Compare Source

🧾 Release notes

Note: Version bump only for package gatsby-plugin-sharp

3.1.3 (2021-03-30)

Note: Version bump only for package gatsby-plugin-sharp

3.1.2 (2021-03-23)

Note: Version bump only for package gatsby-plugin-sharp

3.1.1 (2021-03-18)

Note: Version bump only for package gatsby-plugin-sharp

`v3.1.3`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v3.1.2`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v3.1.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v3.1.0`

Compare Source

🧾 Release notes

Bug Fixes

update lodash monorepo to ^4.17.21 #29382 (9fd287b)

Chores

update eslint to fix linting issues fix #29988 (5636389)
update peerdeps to latest major versions #29857 (0a3e922)
fix spelling, remove whitespace and fix link fix #29846 (63bfa09)

3.0.1 (2021-03-11)

Note: Version bump only for package gatsby-plugin-sharp

`v3.0.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v3.0.0`

Compare Source

🧾 Release notes

Features

shim reporter from gatsby #29669 (249905a)
Remove boundActionCreators #29129 (b1f8663)

Bug Fixes

Fix defaults handling Fix #29564 (107926a)

Chores

update peerdeps to latest major versions #29857 #29867 (cb3b1ca)
remove unneeded whitespace before commas and full stops #29629 (acc6a1b)

Other Changes

Update index.js #29758 (3cafa4f)
remove progress bar #29436 (6b93c1c)

2.14.4 (2021-05-04)

Note: Version bump only for package gatsby-plugin-sharp

2.14.3 (2021-02-25)

Other Changes

Update index.js #29758 #29761 (997985a)

2.14.2 (2021-02-24)

Bug Fixes

Fix defaults handling Fix #29564 Fix #29589 (be9d9f9)

2.14.1 (2021-02-05)

Note: Version bump only for package gatsby-plugin-sharp

`v2.14.4`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v2.14.3`

Compare Source

Other Changes

Update index.js #29758 #29761 (997985a)

`v2.14.2`

Compare Source

Bug Fixes

Fix defaults handling Fix #29564 Fix #29589 (be9d9f9)

`v2.14.1`

Compare Source

Note: Version bump only for package gatsby-plugin-sharp

`v2.14.0`

Compare Source

🧾 Release notes

Features

Add gatsbyImageData resolver #28236 #29095 #29162 fix #29163 #29067 #29137 ([a823622]

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

vercel · 2023-05-28T09:06:51Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
neontribe-www	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Jan 20, 2025 11:11am

vercel bot deployed to Preview May 28, 2023 09:09 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from 14a1ff8 to bb16aa5 Compare June 2, 2023 14:03

vercel bot deployed to Preview June 2, 2023 14:15 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from bb16aa5 to 6c01886 Compare June 2, 2023 14:19

vercel bot deployed to Preview June 2, 2023 14:28 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from 6c01886 to 9e74bef Compare September 1, 2023 14:58

vercel bot deployed to Preview September 1, 2023 15:02 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from 9e74bef to 4c6a2d7 Compare September 1, 2023 17:13

vercel bot deployed to Preview September 1, 2023 17:20 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from 4c6a2d7 to 2616d25 Compare November 3, 2023 15:02

vercel bot deployed to Preview November 3, 2023 15:12 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from 2616d25 to cd79fa1 Compare January 3, 2024 15:02

vercel bot deployed to Preview January 3, 2024 15:10 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from cd79fa1 to f8d1be9 Compare February 5, 2024 09:37

vercel bot deployed to Preview February 5, 2024 09:44 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from f8d1be9 to 0f6ae47 Compare February 9, 2024 09:34

vercel bot deployed to Preview February 9, 2024 09:40 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from 0f6ae47 to 01192b2 Compare March 15, 2024 11:11

vercel bot deployed to Preview March 15, 2024 11:20 View deployment

renovate bot changed the title ~~fix(deps): update dependency gatsby-plugin-sharp to v4 [security]~~ fix(deps): update dependency gatsby-plugin-sharp to v4 [security] - autoclosed Apr 3, 2024

renovate bot closed this Apr 3, 2024

renovate bot deleted the renovate/npm-gatsby-plugin-sharp-vulnerability branch April 3, 2024 13:26

renovate bot changed the title ~~fix(deps): update dependency gatsby-plugin-sharp to v4 [security] - autoclosed~~ fix(deps): update dependency gatsby-plugin-sharp to v4 [security] Apr 3, 2024

renovate bot reopened this Apr 3, 2024

renovate bot restored the renovate/npm-gatsby-plugin-sharp-vulnerability branch April 3, 2024 16:33

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from 01192b2 to 0d1b433 Compare April 3, 2024 16:34

vercel bot deployed to Preview April 3, 2024 16:39 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from 0d1b433 to 4fe164f Compare April 25, 2024 14:48

vercel bot deployed to Preview April 25, 2024 14:55 View deployment

vercel bot deployed to Preview June 5, 2024 14:50 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from 3b42d0a to d5786f8 Compare June 10, 2024 08:53

renovate bot changed the title ~~Update dependency gatsby-plugin-sharp to v4 [SECURITY]~~ fix(deps): update dependency gatsby-plugin-sharp to v4 [security] Jun 10, 2024

vercel bot deployed to Preview June 10, 2024 09:01 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from d5786f8 to 19388f1 Compare June 10, 2024 09:50

renovate bot changed the title ~~fix(deps): update dependency gatsby-plugin-sharp to v4 [security]~~ Update dependency gatsby-plugin-sharp to v4 [SECURITY] Jun 10, 2024

vercel bot deployed to Preview June 10, 2024 09:54 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from 19388f1 to a44d0c7 Compare July 5, 2024 14:36

renovate bot changed the title ~~Update dependency gatsby-plugin-sharp to v4 [SECURITY]~~ fix(deps): update dependency gatsby-plugin-sharp to v4 [security] Jul 5, 2024

vercel bot deployed to Preview July 5, 2024 14:41 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from a44d0c7 to 1b8f6ed Compare July 24, 2024 09:23

vercel bot deployed to Preview July 24, 2024 10:13 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from 1b8f6ed to 999a0b1 Compare August 14, 2024 09:41

vercel bot deployed to Preview August 14, 2024 09:48 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from 999a0b1 to 178c18a Compare September 3, 2024 16:02

vercel bot deployed to Preview September 3, 2024 16:08 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from 178c18a to c56c993 Compare September 9, 2024 13:24

vercel bot deployed to Preview September 9, 2024 13:30 View deployment

renovate bot changed the title ~~fix(deps): update dependency gatsby-plugin-sharp to v4 [security]~~ fix(deps): update dependency gatsby-plugin-sharp to v4 [security] - autoclosed Dec 8, 2024

renovate bot closed this Dec 8, 2024

renovate bot deleted the renovate/npm-gatsby-plugin-sharp-vulnerability branch December 8, 2024 18:20

renovate bot changed the title ~~fix(deps): update dependency gatsby-plugin-sharp to v4 [security] - autoclosed~~ fix(deps): update dependency gatsby-plugin-sharp to v4 [security] Dec 8, 2024

renovate bot reopened this Dec 8, 2024

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from c56c993 to c28c5a1 Compare January 14, 2025 18:55

vercel bot deployed to Preview January 14, 2025 19:03 View deployment

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from c28c5a1 to 0ec748c Compare January 16, 2025 12:16

vercel bot deployed to Preview January 16, 2025 12:22 View deployment

fix(deps): update dependency gatsby-plugin-sharp to v4 [security]

28658d6

renovate bot force-pushed the renovate/npm-gatsby-plugin-sharp-vulnerability branch from 0ec748c to 28658d6 Compare January 20, 2025 11:06

vercel bot deployed to Preview January 20, 2025 11:11 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update dependency gatsby-plugin-sharp to v4 [security] #599

fix(deps): update dependency gatsby-plugin-sharp to v4 [security] #599

renovate bot commented May 28, 2023 •

edited

Loading

vercel bot commented May 28, 2023 •

edited

Loading

fix(deps): update dependency gatsby-plugin-sharp to v4 [security] #599

Are you sure you want to change the base?

fix(deps): update dependency gatsby-plugin-sharp to v4 [security] #599

Conversation

renovate bot commented May 28, 2023 • edited Loading

GitHub Vulnerability Alerts

Impact

Patches

Workarounds

Credits

For more information

Release Notes

4.23.1 (2022-09-22)

Chores

Chores

Chores

Bug Fixes

Bug Fixes

4.18.1 (2022-07-12)

Bug Fixes

4.16.1 (2022-06-08)

Features

Performance Improvements

4.15.1 (2022-06-01)

Chores

4.14.1 (2022-05-12)

Bug Fixes

Features

4.12.1 (2022-04-13)

Bug Fixes

Chores

4.11.1 (2022-03-31)

Bug Fixes

Bug Fixes

Refactoring

4.10.2 (2022-03-23)

4.10.1 (2022-03-18)

Bug Fixes

4.9.1 (2022-03-09)

Chores

4.8.2 (2022-03-01)

4.8.1 (2022-02-25)

Bug Fixes

Bug Fixes

Bug Fixes

4.5.2 (2022-01-17)

4.5.1 (2022-01-12)

Chores

Bug Fixes

Chores

Bug Fixes

4.1.4 (2021-11-15)

4.1.3 (2021-11-11)

4.1.2 (2021-11-10)

4.1.1 (2021-11-09)

Bug Fixes

4.0.1 (2021-10-27)

Bug Fixes

Bug Fixes

Bug Fixes

Chores

3.14.3 (2021-11-02)

3.14.2 (2021-10-28)

Bug Fixes

3.14.1 (2021-10-06)

Bug Fixes

Features

Bug Fixes

Chores

Other Changes

Features

Chores

Bug Fixes

Chores

Bug Fixes

3.10.2 (2021-07-21)

Bug Fixes

3.10.1 (2021-07-21)

Bug Fixes

Chores

renovate bot commented May 28, 2023 •

edited

Loading