[Snyk] Fix for 7 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • examples/using-javascript-transforms/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-CSSWHAT-1298035	Yes	No Known Exploit
	624/1000 Why? Has a fix available, CVSS 8.2	Arbitrary File Overwrite SNYK-JS-TAR-1536528	Yes	No Known Exploit
	688/1000 Why? Currently trending on Twitter, Has a fix available, CVSS 8.2	Arbitrary File Overwrite SNYK-JS-TAR-1536531	Yes	No Known Exploit
	410/1000 Why? Has a fix available, CVSS 3.7	Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	Yes	No Known Exploit
	711/1000 Why? Recently disclosed, Has a fix available, CVSS 8.5	Arbitrary File Write SNYK-JS-TAR-1579147	Yes	No Known Exploit
	711/1000 Why? Recently disclosed, Has a fix available, CVSS 8.5	Arbitrary File Write SNYK-JS-TAR-1579152	Yes	No Known Exploit
	711/1000 Why? Recently disclosed, Has a fix available, CVSS 8.5	Arbitrary File Write SNYK-JS-TAR-1579155	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gatsby

The new version differs by 242 commits.

• f1d3f7b chore(release): Publish
• 6e6ea56 chore(release): Publish rc
• df50ce7 fix(gatsby): Add dir=ltr to Fast Refresh overlay (fix(gatsby): Add dir=ltr to Fast Refresh overlay gatsbyjs/gatsby#29900) (fix(gatsby): Add dir=ltr to Fast Refresh overlay (#29900) gatsbyjs/gatsby#29908)
• 83adec5 chore(docs): update readme (chore(docs): update readme gatsbyjs/gatsby#29837) (chore(docs): update readme (#29837) gatsbyjs/gatsby#29909)
• b2628da will git stop being weird (fix(gatsby-transformer-sharp): Fix options override gatsbyjs/gatsby#29897) (fix(gatsby-transformer-sharp): Fix options override (#29897) gatsbyjs/gatsby#29907)
• c98c87f chore(release): Publish rc
• c8bf571 fix(gatsby-source-wordpress): image fixes (fix(gatsby-source-wordpress): image fixes gatsbyjs/gatsby#29813) (fix(gatsby-source-wordpress): image fixes (#29813) gatsbyjs/gatsby#29886)
• 85bb8ea fix(gatsby-plugin-image): Update peerdeps (fix(gatsby-plugin-image): Update peerdeps gatsbyjs/gatsby#29880) (fix(gatsby-plugin-image): Update peerdeps (#29880) gatsbyjs/gatsby#29888)
• c266b83 fix(gatsby): Remove `react-hot-loader` deps & other unused deps (fix(gatsby): Remove react-hot-loader deps & other unused deps gatsbyjs/gatsby#29864) (fix(gatsby): Remove react-hot-loader deps & other unused deps (#29864) gatsbyjs/gatsby#29876)
• 222ca3f fix(gatsby): with some custom babel configs array spreading with Set is not safe (fix(gatsby): with some custom babel configs array spreading with Set is not safe gatsbyjs/gatsby#29885) (fix(gatsby): with some custom babel configs array spreading with Set is not safe (#29885) gatsbyjs/gatsby#29889)
• ea31900 chore(release): Publish rc
• f070422 fix(gatsby): Fix various small DEV_SSR bugs exposed in development_runtime tests (fix(gatsby): Fix various small DEV_SSR bugs exposed in development_runtime tests gatsbyjs/gatsby#29720) (fix(gatsby): Fix various small DEV_SSR bugs exposed in development_runtime tests (#29720) gatsbyjs/gatsby#29866)
• cb3b1ca chore: update peerdeps to latest major versions (chore: update peerdeps to latest major versions gatsbyjs/gatsby#29857) (chore: update peerdeps to latest major versions (#29857) gatsbyjs/gatsby#29867)
• 8639f7b fix(create-gatsby): Use legacy peer deps (fix(create-gatsby): Use legacy peer deps gatsbyjs/gatsby#29856) (fix(create-gatsby): Use legacy peer deps (#29856) gatsbyjs/gatsby#29862)
• fdc1fe2 fix(gatsby): fix some css HMR edge cases (fix(gatsby): fix some css HMR edge cases gatsbyjs/gatsby#29839) (fix(gatsby): fix some css HMR edge cases (#29839) gatsbyjs/gatsby#29865)
• e8a7e3b fix(gatsby-plugin-preact): fix fast-refresh (fix(gatsby-plugin-preact): fix fast-refresh gatsbyjs/gatsby#29831) (fix(gatsby-plugin-preact): fix fast-refresh (#29831) gatsbyjs/gatsby#29860)
• e7453c3 fix(gatsby): Improve Fast Refresh overlay styles (fix(gatsby): Improve Fast Refresh overlay styles gatsbyjs/gatsby#29855) (fix(gatsby): Improve Fast Refresh overlay styles (#29855) gatsbyjs/gatsby#29861)
• 76f4f96 chore: upgrade postcss & plugins (chore: upgrade postcss & plugins gatsbyjs/gatsby#29793)
• de6cba6 chore(release): Publish rc
• aafe584 fix: query on demand loading indicator always active on preact. (fix: query on demand loading indicator always active on preact. gatsbyjs/gatsby#29829) (fix: query on demand loading indicator always active on preact. (#29829) gatsbyjs/gatsby#29836)
• 34f5b8c fix(hmr): accept hot updates for modules above page templates (fix(hmr): accept hot updates for modules above page templates gatsbyjs/gatsby#29752) (fix(hmr): accept hot updates for modules above page templates (#29752) gatsbyjs/gatsby#29835)
• b8d21f8 fix(gatsby): workaround graphql-compose issue (fix(gatsby): workaround graphql-compose issue gatsbyjs/gatsby#29822) (fix(gatsby): workaround graphql-compose issue (#29822) gatsbyjs/gatsby#29834)
• 32fee71 fix(gatsby): eslint linting (fix(gatsby): eslint linting gatsbyjs/gatsby#29796) (fix(gatsby): eslint linting (#29796) gatsbyjs/gatsby#29814)
• bca7951 fix(gatsby-source-wordpress): HTML image regex's (fix(gatsby-source-wordpress): HTML image regex's gatsbyjs/gatsby#29778) (fix(gatsby-source-wordpress): HTML image regex's (#29778) gatsbyjs/gatsby#29816)

See the full diff

Package name: node-sass

The new version differs by 43 commits.

• 7105b0a 5.0.0 ([Snyk] Security upgrade gatsby from 2.32.13 to 4.5.0 #3015)
• 0648b5a chore: Add Node 15 support ([Snyk] Security upgrade gatsby from 2.32.13 to 3.0.0 #2983)
• e2391c2 Add a deprecation message to the readme ([Snyk] Security upgrade gatsby from 2.32.13 to 3.0.0 #3011)
• 6a33e53 chore: Don't upload artifacts on PRs
• d763506 chore: Only run coverage on main repo
• d4ebe72 build(deps): update actions/setup-node requirement to v2.1.2
• 2bebe05 build(deps-dev): bump rimraf from 2.7.1 to 3.0.2
• f877689 chore: Don't double build DependaBot PRs
• b48fac4 chore: Add weekly DependaBot updates
• 91c40a0 Remove deprecated process.sass API
• 1f6df86 Replace lodash/assign in favor of the native Object.assign
• 522828a Remove workarounds for old Node.js versions
• 40e0f00 chore: Remove second NPM badge
• ab91bf6 chore: Remove Slack badge
• 6853a80 chore: Cleanup status badges
• fb1109c chore: Bump minimum engine version to v10
• d185440 chore: Add basic Node version support policy
• db25736 chore: Bump node-gyp to 7.1.0
• 2c5b110 chore: Bump cross-spawn to v7.0.3
• 38b9633 chore: Update Istanbul to NYC
• d63b5bf chore: Bump mocha to v8.1.3
• d0d8865 chore: Skip constructor tests on v14.6+
• ee3984d chore: Hoist test ESLint config
• feee448 chore: Remove disabled and recommended rules

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic