[Snyk] Security upgrade gatsby from 2.20.25 to 3.0.0

[wizbit]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • starters/default/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LODASH-6139239	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gatsby

The new version differs by 250 commits.

• f1d3f7b chore(release): Publish
• 6e6ea56 chore(release): Publish rc
• df50ce7 fix(gatsby): Add dir=ltr to Fast Refresh overlay (fix(gatsby): Add dir=ltr to Fast Refresh overlay gatsbyjs/gatsby#29900) (fix(gatsby): Add dir=ltr to Fast Refresh overlay (#29900) gatsbyjs/gatsby#29908)
• 83adec5 chore(docs): update readme (chore(docs): update readme gatsbyjs/gatsby#29837) (chore(docs): update readme (#29837) gatsbyjs/gatsby#29909)
• b2628da will git stop being weird (fix(gatsby-transformer-sharp): Fix options override gatsbyjs/gatsby#29897) (fix(gatsby-transformer-sharp): Fix options override (#29897) gatsbyjs/gatsby#29907)
• c98c87f chore(release): Publish rc
• c8bf571 fix(gatsby-source-wordpress): image fixes (fix(gatsby-source-wordpress): image fixes gatsbyjs/gatsby#29813) (fix(gatsby-source-wordpress): image fixes (#29813) gatsbyjs/gatsby#29886)
• 85bb8ea fix(gatsby-plugin-image): Update peerdeps (fix(gatsby-plugin-image): Update peerdeps gatsbyjs/gatsby#29880) (fix(gatsby-plugin-image): Update peerdeps (#29880) gatsbyjs/gatsby#29888)
• c266b83 fix(gatsby): Remove `react-hot-loader` deps & other unused deps (fix(gatsby): Remove react-hot-loader deps & other unused deps gatsbyjs/gatsby#29864) (fix(gatsby): Remove react-hot-loader deps & other unused deps (#29864) gatsbyjs/gatsby#29876)
• 222ca3f fix(gatsby): with some custom babel configs array spreading with Set is not safe (fix(gatsby): with some custom babel configs array spreading with Set is not safe gatsbyjs/gatsby#29885) (fix(gatsby): with some custom babel configs array spreading with Set is not safe (#29885) gatsbyjs/gatsby#29889)
• ea31900 chore(release): Publish rc
• f070422 fix(gatsby): Fix various small DEV_SSR bugs exposed in development_runtime tests (fix(gatsby): Fix various small DEV_SSR bugs exposed in development_runtime tests gatsbyjs/gatsby#29720) (fix(gatsby): Fix various small DEV_SSR bugs exposed in development_runtime tests (#29720) gatsbyjs/gatsby#29866)
• cb3b1ca chore: update peerdeps to latest major versions (chore: update peerdeps to latest major versions gatsbyjs/gatsby#29857) (chore: update peerdeps to latest major versions (#29857) gatsbyjs/gatsby#29867)
• 8639f7b fix(create-gatsby): Use legacy peer deps (fix(create-gatsby): Use legacy peer deps gatsbyjs/gatsby#29856) (fix(create-gatsby): Use legacy peer deps (#29856) gatsbyjs/gatsby#29862)
• fdc1fe2 fix(gatsby): fix some css HMR edge cases (fix(gatsby): fix some css HMR edge cases gatsbyjs/gatsby#29839) (fix(gatsby): fix some css HMR edge cases (#29839) gatsbyjs/gatsby#29865)
• e8a7e3b fix(gatsby-plugin-preact): fix fast-refresh (fix(gatsby-plugin-preact): fix fast-refresh gatsbyjs/gatsby#29831) (fix(gatsby-plugin-preact): fix fast-refresh (#29831) gatsbyjs/gatsby#29860)
• e7453c3 fix(gatsby): Improve Fast Refresh overlay styles (fix(gatsby): Improve Fast Refresh overlay styles gatsbyjs/gatsby#29855) (fix(gatsby): Improve Fast Refresh overlay styles (#29855) gatsbyjs/gatsby#29861)
• 76f4f96 chore: upgrade postcss & plugins (chore: upgrade postcss & plugins gatsbyjs/gatsby#29793)
• de6cba6 chore(release): Publish rc
• aafe584 fix: query on demand loading indicator always active on preact. (fix: query on demand loading indicator always active on preact. gatsbyjs/gatsby#29829) (fix: query on demand loading indicator always active on preact. (#29829) gatsbyjs/gatsby#29836)
• 34f5b8c fix(hmr): accept hot updates for modules above page templates (fix(hmr): accept hot updates for modules above page templates gatsbyjs/gatsby#29752) (fix(hmr): accept hot updates for modules above page templates (#29752) gatsbyjs/gatsby#29835)
• b8d21f8 fix(gatsby): workaround graphql-compose issue (fix(gatsby): workaround graphql-compose issue gatsbyjs/gatsby#29822) (fix(gatsby): workaround graphql-compose issue (#29822) gatsbyjs/gatsby#29834)
• 32fee71 fix(gatsby): eslint linting (fix(gatsby): eslint linting gatsbyjs/gatsby#29796) (fix(gatsby): eslint linting (#29796) gatsbyjs/gatsby#29814)
• bca7951 fix(gatsby-source-wordpress): HTML image regex's (fix(gatsby-source-wordpress): HTML image regex's gatsbyjs/gatsby#29778) (fix(gatsby-source-wordpress): HTML image regex's (#29778) gatsbyjs/gatsby#29816)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution