gatsby-bigcommerce-netlify-cms-starter

gatsby-bigcommerce-netlify-cms-starter copied to clipboard

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of...

bcsnyk

Bumps [moment](https://github.com/moment/moment) from 2.24.0 to 2.29.4. Changelog Sourced from moment's changelog. 2.29.4 Release Jul 6, 2022 #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex 2.29.3 Full changelog Release Apr 17, 2022...

dependabot[bot]

Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.4.7 to 1.5.10. Commits 8cd4c6c 1.5.10 ce7a01f [fix] Improve handling of empty port 0071490 [doc] Update JSDoc comment a7044e3 [minor] Use more descriptive variable name d547792 [security]...

dependabot[bot]

Bumps [ajv](https://github.com/ajv-validator/ajv) from 6.10.2 to 6.12.6. Release notes Sourced from ajv's releases. v6.12.6 Fix performance issue of "url" format. v6.12.5 Fix uri scheme validation (@​ChALkeR). Fix boolean schemas with strictKeywords...

dependabot[bot]

Bumps [node-sass](https://github.com/sass/node-sass) from 4.12.0 to 7.0.0. Release notes Sourced from node-sass's releases. v7.0.0 Breaking changes Drop support for Node 15 (@​nschonni) Set rejectUnauthorized to true by default (@​scott-ut, #3149) Features...

dependabot[bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. #### Changes included in this PR - Changes to the following...

snyk-bot

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.  #### Changes included in this PR - Changes to...

snyk-bot

Snyk has created this PR to upgrade gatsby-source-bigcommerce from 0.3.2 to 0.3.7.  :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more...

snyk-bot

Bumps [aws-sdk](https://github.com/aws/aws-sdk-js) from 2.549.0 to 2.814.0. Changelog Sourced from aws-sdk's changelog. 2.814.0 bugfix: Credentials: SDK will throw if shared ini file's profile name can be resolved to proto feature: EC2:...

dependabot[bot]

Bumps [object-path](https://github.com/mariocasciaro/object-path) from 0.11.4 to 0.11.8. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]