Update dependency gatsby-source-wordpress to v4 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
gatsby-source-wordpress (source)	^3.1.15 -> ^4.0.0

GitHub Vulnerability Alerts

CVE-2021-32770

Impact

The gatsby-source-wordpress plugin prior to versions 4.0.8 and 5.9.2 leaks .htaccess HTTP Basic Authentication variables into the app.js bundle during build-time. Users who are not initializing basic authentication credentials in the gatsby-config.js are not affected.

Example affected gatsby-config.js:

      resolve: 'gatsby-source-wordpress',
        auth: {
          htaccess: {
            username: leaked_username
            password: leaked_password,
          },
        },

Patches

A patch has been introduced in gatsby-source-wordpress@4.0.8 and gatsby-source-wordpress@5.9.2 which mitigates the issue by filtering all variables specified in the auth: { } section. Users that depend on this functionality are advised to upgrade to the latest release of gatsby-source-wordpress, run gatsby clean followed by a gatsby build.

Workarounds

There is no known workaround at this time, other than manually editing the app.js file post-build.

For more information

Email us at security@gatsbyjs.com

---

Release Notes

gatsbyjs/gatsby

v4.0.8

Compare Source

Other Changes

• run setGatsbyApiToState in onPreInit to delete auth options #​32339 (f49a976)

v4.0.7

Compare Source

Bug Fixes

• Backporting auth leak fix fix #​32315 (98e726f)

v4.0.6

Compare Source

Bug Fixes

• schema customization errors #​30358 #​30650 (8d7c3a1)

v4.0.5

Compare Source

Bug Fixes

• image fixes fixes #​29813 fixes #​29881 (c7a6e9f)

v4.0.4

Compare Source

Bug Fixes

• auto-rename types named "Filter" #​29718 #​29884 (8986b12)
• HTML image regex's #​29778 #​29883 (c2ea9b9)

v4.0.3

Compare Source

Other Changes

• fix(gatsby-source-wordpress):issue #​29535 not finished createSchemaCu… #​29535 #​29554 #​29712 (d806703)

v4.0.2

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v4.0.1

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v4.0.0

Compare Source

🧾 Release notes

Other Changes

• launch gatsby-source-wordpress v4 #​29150 #​29330 #​29150 (0a31b64)

v3.11.0

Compare Source

🧾 Release notes

Note: Version bump only for package gatsby-source-wordpress

v3.10.0

Compare Source

🧾 Release notes

Bug Fixes

• update vulnerable packages, include React 17 in peerDeps #​28545 (18b5f30)

Chores

• Fix all /packages links to /plugins Fix #​28816 (200e307)

3.9.1 (2021-01-16)

Note: Version bump only for package gatsby-source-wordpress

v3.9.1

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.9.0

Compare Source

🧾 Release notes

Note: Version bump only for package gatsby-source-wordpress

3.8.1 (2020-12-23)

Note: Version bump only for package gatsby-source-wordpress

v3.8.1

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.8.0

Compare Source

🧾 Release notes

Chores

• update dependency cross-env to ^7.0.3 #​28505 (a819b9b)

v3.7.0

Compare Source

🧾 Release notes

Note: Version bump only for package gatsby-source-wordpress

3.6.1 (2020-11-23)

Note: Version bump only for package gatsby-source-wordpress

v3.6.1

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.6.0

Compare Source

🧾 Release notes

Chores

• update babel monorepo #​27528 (539dbb0)

v3.5.0

Compare Source

🧾 Release notes

Note: Version bump only for package gatsby-source-wordpress

v3.4.2

Compare Source

v3.4.1

Compare Source

v3.4.0

Compare Source

Note: Version bump only for package gatsby-source-wordpress

3.3.41 (2020-10-27)

Note: Version bump only for package gatsby-source-wordpress

3.3.40 (2020-10-26)

Bug Fixes

• deps: update minor and patch for gatsby-source-wordpress (#​27655) (b33f403)

3.3.39 (2020-10-16)

Note: Version bump only for package gatsby-source-wordpress

3.3.38 (2020-10-08)

Note: Version bump only for package gatsby-source-wordpress

3.3.37 (2020-10-06)

Note: Version bump only for package gatsby-source-wordpress

3.3.36 (2020-10-01)

Note: Version bump only for package gatsby-source-wordpress

3.3.35 (2020-09-28)

Note: Version bump only for package gatsby-source-wordpress

3.3.34 (2020-09-15)

Note: Version bump only for package gatsby-source-wordpress

3.3.33 (2020-09-09)

Note: Version bump only for package gatsby-source-wordpress

3.3.32 (2020-09-07)

Note: Version bump only for package gatsby-source-wordpress

3.3.31 (2020-08-28)

Note: Version bump only for package gatsby-source-wordpress

3.3.30 (2020-08-26)

Note: Version bump only for package gatsby-source-wordpress

3.3.29 (2020-08-24)

Note: Version bump only for package gatsby-source-wordpress

3.3.28 (2020-08-05)

Note: Version bump only for package gatsby-source-wordpress

3.3.27 (2020-08-03)

Note: Version bump only for package gatsby-source-wordpress

3.3.26 (2020-07-24)

Note: Version bump only for package gatsby-source-wordpress

3.3.25 (2020-07-22)

Note: Version bump only for package gatsby-source-wordpress

3.3.24 (2020-07-21)

Note: Version bump only for package gatsby-source-wordpress

3.3.23 (2020-07-17)

Note: Version bump only for package gatsby-source-wordpress

3.3.22 (2020-07-15)

Note: Version bump only for package gatsby-source-wordpress

3.3.21 (2020-07-09)

Note: Version bump only for package gatsby-source-wordpress

3.3.20 (2020-07-09)

Note: Version bump only for package gatsby-source-wordpress

3.3.19 (2020-07-02)

Note: Version bump only for package gatsby-source-wordpress

3.3.18 (2020-07-02)

Note: Version bump only for package gatsby-source-wordpress

3.3.17 (2020-07-01)

Note: Version bump only for package gatsby-source-wordpress

3.3.16 (2020-07-01)

Note: Version bump only for package gatsby-source-wordpress

3.3.15 (2020-06-24)

Note: Version bump only for package gatsby-source-wordpress

3.3.14 (2020-06-22)

Note: Version bump only for package gatsby-source-wordpress

3.3.13 (2020-06-19)

Note: Version bump only for package gatsby-source-wordpress

3.3.12 (2020-06-15)

Note: Version bump only for package gatsby-source-wordpress

3.3.11 (2020-06-09)

Note: Version bump only for package gatsby-source-wordpress

3.3.10 (2020-06-02)

Note: Version bump only for package gatsby-source-wordpress

3.3.9 (2020-06-02)

Note: Version bump only for package gatsby-source-wordpress

3.3.8 (2020-05-22)

Note: Version bump only for package gatsby-source-wordpress

3.3.7 (2020-05-20)

Note: Version bump only for package gatsby-source-wordpress

3.3.6 (2020-05-20)

Note: Version bump only for package gatsby-source-wordpress

3.3.5 (2020-05-19)

Note: Version bump only for package gatsby-source-wordpress

3.3.4 (2020-05-18)

Note: Version bump only for package gatsby-source-wordpress

3.3.3 (2020-05-13)

Note: Version bump only for package gatsby-source-wordpress

3.3.2 (2020-05-13)

Note: Version bump only for package gatsby-source-wordpress

3.3.1 (2020-05-05)

Note: Version bump only for package gatsby-source-wordpress

v3.3.41

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.40

Compare Source

Bug Fixes

• deps: update minor and patch for gatsby-source-wordpress (#​27655) (b33f403)

v3.3.39

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.38

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.37

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.36

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.35

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.34

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.33

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.32

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.31

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.30

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.29

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.28

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.27

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.26

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.25

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.24

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.23

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.22

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.21

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.20

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.19

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.18

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.17

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.15

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.14

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.13

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.12

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.11

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.10

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.9

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.8

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.7

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.6

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.5

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.4

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.3

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.2

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.1

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.3.0

Compare Source

Note: Version bump only for package gatsby-source-wordpress

3.2.6 (2020-04-24)

Note: Version bump only for package gatsby-source-wordpress

3.2.5 (2020-04-17)

Bug Fixes

• wrap ignore pattern in quotes (#​23176) (7563db6)

3.2.4 (2020-04-16)

Note: Version bump only for package gatsby-source-wordpress

3.2.3 (2020-03-30)

Note: Version bump only for package gatsby-source-wordpress

3.2.2 (2020-03-23)

Note: Version bump only for package gatsby-source-wordpress

3.2.1 (2020-03-20)

Note: Version bump only for package gatsby-source-wordpress

v3.2.6

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.2.5

Compare Source

Bug Fixes

• wrap ignore pattern in quotes (#​23176) (7563db6)

v3.2.4

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.2.3

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.2.2

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.2.1

Compare Source

Note: Version bump only for package gatsby-source-wordpress

v3.2.0

Compare Source

Features

• gatsby: bump node min version to 10.13.0 (#​22400) (83d681a)

3.1.74 (2020-03-18)

Note: Version bump only for package gatsby-source-wordpress

3.1.73 (2020-03-18)

Bug Fixes

• update dependency axios to ^0.19.2 (#​22317) (91e780f)

3.1.72 (2020-03-16)

Note: Version bump only for package gatsby-source-wordpress

3.1.71 (2020-03-13)

Note: Version bump only for package gatsby-source-wordpress

3.1.70 (2020-03-13)

Note: Version bump only for package gatsby-source-wordpress

3.1.69 (2020-03-12)

Note: Version bump only for package gatsby-source-wordpress

3.1.68 (2020-03-11)

Note: Version bump only for package gatsby-source-wordpress

3.1.67 (2020-03-10)

Note: Version bump only for package gatsby-source-wordpress

3.1.66 (2020-03-09)

Note: Version bump only for package gatsby-source-wordpress

3.1.65 (2020-03-06)

Note: Version bump only for package gatsby-source-wordpress

3.1.64 (2020-03-06)

Note: Version bump only for package gatsby-source-wordpress

3.1.63 (2020-02-25)

Note: Version bump only for package gatsby-source-wordpress

3.1.62 (2020-02-10)

Note: Version bump only for package gatsby-source-wordpress

3.1.61 (2020-02-10)

Features

• gatsby-source-wordpress: Ability to set a custom rest api route prefix (#​20998) (789fb1c)

3.1.60 (2020-02-01)

Note: Version bump only for package gatsby-source-wordpress

3.1.59 (2020-01-29)

Note: Version bump only for package gatsby-source-wordpress

3.1.58 (2020-01-15)

Bug Fixes

• docs: improve WordPress tutorial (#​20520) (d5253f2)

3.1.57 (2020-01-09)

Features

• gatsby-source-wordpress: add normalizers option to modif… (#​18079) (2f67bce)

3.1.56 (2020-01-09)

Note: Version bump only for package gatsby-source-wordpress

3.1.55 (2020-01-09)

Note: Version bump only for package gatsby-source-wordpress

3.1.54 (2019-12-20)

Note: Version bump only for package gatsby-source-wordpress

3.1.53 (2019-12-10)

Note: Version bump only for package gatsby-source-wordpress

3.1.52 (2019-12-10)

Note: Version bump only for package gatsby-source-wordpress

3.1.51 (2019-12-02)

Note: Version bump only for package gatsby-source-wordpress

3.1.50 (2019-11-26)

Note: Version bump only for package gatsby-source-wordpress

3.1.49 (2019-11-18)

Note: Version bump only for package gatsby-source-wordpress

3.1.48 (2019-11-15)

Note: Version bump only for package gatsby-source-wordpress

3.1.47 (2019-11-10)

Bug Fixes

• gatsby-source-wordpress: Cannot read property of undefined error with polylang (#​19331) (bd48b21), closes gatsbyjs#​19285

3.1.46 (2019-10-28)

Note: Version bump only for package gatsby-source-wordpress

3.1.45 (2019-10-28)

Bug Fixes

• update minor updates in packages (#​18875) (b692879)

3.1.44 (2019-10-22)

Bug Fixes

• gatsby-source-wordpress: add undefined check to avoid mapPostsToTagsCategories error (#​18895) (ad646d6)

3.1.43 (2019-10-14)

Note: Version bump only for package gatsby-source-wordpress

3.1.42 (2019-10-14)

Note: Version bump only for package gatsby-source-wordpress

3.1.41 (2019-10-09)

Note: Version bump only for package gatsby-source-wordpress

3.1.40 (2019-10-08)

Note: Version bump only for package gatsby-source-wordpress

3.1.39 (2019-10-04)

Bug Fixes

• update dependency bluebird to ^3.7.0 (#​18029) (bd235a8)

3.1.38 (2019-09-26)

Note: Version bump only for package gatsby-source-wordpress

3.1.37 (2019-09-26)

Note: Version bump only for package gatsby-source-wordpress

3.1.36 (2019-09-23)

Bug Fixes

• update dependency qs to ^6.9.0 (#​17802) (8119d4b)

3.1.35 (2019-09-20)

Note: Version bump only for package gatsby-source-wordpress

3.1.34 (2019-09-20)

Note: Version bump only for package gatsby-source-wordpress

3.1.33 (2019-09-18)

Note: Version bump only for package gatsby-source-wordpress

3.1.32 (2019-09-18)

Note: Version bump only for package gatsby-source-wordpress

3.1.31 (2019-09-09)

Note: Version bump only for package gatsby-source-wordpress

3.1.30 (2019-09-04)

Note: Version bump only for package gatsby-source-wordpress

3.1.29 (2019-09-04)

Note: Version bump only for package gatsby-source-wordpress

3.1.28 (2019-09-01)

Bug Fixes

• update minor updates in packages except react, babel and eslint (#​17254) (252d867)

3.1.27 (2019-08-30)

Note: Version bump only for package gatsby-source-wordpress

3.1.26 (2019-08-30)

Note: Version bump only for package gatsby-source-wordpress

3.1.25 (2019-08-24)

Note: Version bump only for package gatsby-source-wordpress

3.1.24 (2019-08-24)

Note: Version bump only for package gatsby-source-wordpress

3.1.23 (2019-08-23)

Note: Version bump only for package gatsby-source-wordpress

3.1.22 (2019-08-23)

Note: Version bump only for package gatsby-source-wordpress

3.1.21 (2019-08-22)

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.