[Snyk] Upgrade gatsby-source-wordpress from 7.0.0 to 7.14.0

[X-oss-byte]

Snyk has created this PR to upgrade gatsby-source-wordpress from 7.0.0 to 7.14.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 70 versions ahead of your current version.

• The recommended version was released on a month ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-FILETYPE-2958042	589	No Known Exploit
	Improper Handling of Extra Parameters SNYK-JS-FOLLOWREDIRECTS-6141137	589	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	589	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SIDEWAYFORMULA-3317169	589	No Known Exploit

Release notes

Package name: gatsby-source-wordpress

• 7.14.0 - 2024-11-06
• 7.14.0-next.4 - 2024-02-20
• 7.14.0-next.3 - 2024-01-23
• 7.14.0-next.2 - 2024-01-05
• 7.14.0-next.1 - 2024-01-04
• 7.14.0-next.0 - 2023-12-15
• 7.13.5 - 2024-08-26
• 7.13.4 - 2024-04-10
• 7.13.3 - 2024-02-23
• 7.13.2 - 2024-01-23
• 7.13.1 - 2023-12-22
• 7.13.0 - 2023-12-18
• 7.13.0-next.1 - 2023-11-16
• 7.13.0-next.0 - 2023-07-25
• 7.13.0-alpha-alt-image-cdn.44 - 2023-11-03
• 7.12.3 - 2023-10-26
• 7.12.2 - 2023-10-20
• 7.12.1 - 2023-10-09
• 7.12.0 - 2023-08-24
• 7.12.0-next.1 - 2023-07-03
• 7.12.0-next.0 - 2023-06-15
• 7.11.0 - 2023-06-15
• 7.11.0-next.1 - 2023-06-05
• 7.11.0-next.0 - 2023-05-16
• 7.10.1 - 2023-05-25
• 7.10.0 - 2023-05-16
• 7.10.0-next.2 - 2023-05-03
• 7.10.0-next.1 - 2023-04-27
• 7.10.0-next.0 - 2023-04-18
• 7.9.0 - 2023-04-18
• 7.9.0-stateful-wp.2 - 2023-04-07
• 7.9.0-next.1 - 2023-04-06
• 7.9.0-next.0 - 2023-03-21
• 7.9.0-image-cdn-configurable.4 - 2023-04-11
• 7.8.0 - 2023-03-21
• 7.8.0-next.0 - 2023-02-16
• 7.8.0-alpha-wp-inconsistent-schema.29 - 2023-03-16
• 7.7.0 - 2023-02-21
• 7.7.0-next.0 - 2023-02-03
• 7.6.0 - 2023-02-07
• 7.6.0-next.1 - 2023-01-26
• 7.6.0-next.0 - 2023-01-19
• 7.5.0 - 2023-01-24
• 7.5.0-next.1 - 2023-01-17
• 7.5.0-next.0 - 2023-01-05
• 7.5.0-alpha-wp-preview-errors.0 - 2023-01-17
• 7.4.1 - 2023-01-19
• 7.4.0 - 2023-01-10
• 7.4.0-next.2 - 2023-01-04
• 7.4.0-next.1 - 2022-12-14
• 7.4.0-next.0 - 2022-12-08
• 7.3.2 - 2022-12-14
• 7.3.1 - 2022-12-14
• 7.3.0 - 2022-12-13
• 7.3.0-next.3 - 2022-12-07
• 7.3.0-next.2 - 2022-12-06
• 7.3.0-next.1 - 2022-12-01
• 7.3.0-next.0 - 2022-11-25
• 7.3.0-alpha-wpgql-thirteen.26 - 2022-12-07
• 7.3.0-alpha-wpgql-thirteen.20 - 2022-12-05
• 7.3.0-alpha-wpgql-13.36 - 2022-12-01
• 7.2.3 - 2022-12-08
• 7.2.2 - 2022-12-07
• 7.2.1 - 2022-12-06
• 7.2.0 - 2022-11-25
• 7.2.0-next.1 - 2022-11-23
• 7.2.0-next.0 - 2022-11-17
• 7.2.0-alpha-wordpress-exclude-fields-on-media-item.14 - 2022-11-18
• 7.1.0 - 2022-11-22
• 7.1.0-next.0 - 2022-11-08
• 7.0.0 - 2022-11-08

from gatsby-source-wordpress GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Summary by Sourcery

Enhancements:

• Upgrade gatsby-source-wordpress from version 7.0.0 to 7.14.0 to address security vulnerabilities.

[stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 38dd171

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[sourcery-ai]

Reviewer's Guide by Sourcery

This PR upgrades the gatsby-source-wordpress dependency from version 7.0.0 to 7.14.0 to address several security vulnerabilities. The upgrade spans 70 versions and includes fixes for four security issues: two high-severity issues (DoS and Improper Parameter Handling) and two medium-severity issues (Information Exposure and ReDoS).

No diagrams generated as the changes look simple and do not need a visual representation.

File-Level Changes

Change	Details	Files
Dependency version upgrade in package configuration	Updated gatsby-source-wordpress from 7.0.0 to 7.14.0 Updated version constraint in package.json Updated related entries in package-lock.json	starters/gatsby-starter-wordpress-blog/package.json starters/gatsby-starter-wordpress-blog/package-lock.json
Security vulnerability fixes	Fixed high-severity Denial of Service vulnerability in file-type dependency Fixed high-severity Improper Parameter Handling in follow-redirects dependency Fixed medium-severity Information Exposure in follow-redirects dependency Fixed medium-severity ReDoS vulnerability in sideway-formula dependency	starters/gatsby-starter-wordpress-blog/package.json starters/gatsby-starter-wordpress-blog/package-lock.json

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time. You can also use
  this command to specify where the summary should be inserted.

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[sourcery-ai]

We have skipped reviewing this pull request. It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!