[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Prototype Pollution SNYK-JS-LODASH-567746	No	Proof of Concept

Commit messages

Package name: gatsby

The new version differs by 250 commits.

• d345a83 chore(release): Publish
• c3c49de chore: format
• 159d008 fix(examples): GraphQL reference codesandbox issue (#10807)
• 292c128 Change number of plugins from 'dozens' to 'hundreds' (#10822)
• 9c42672 Added escaladesports.com to showcase (#10817)
• 7beed15 chore: format (#10820)
• 62db8e6 docs(www): better GATSBY_SCREENSHOT_PLACEHOLDER explanation (#10797)
• e2a6aa1 Indicate code sample is JS (#10819)
• 91c08a7 feat(docs): Update GraphQL reference (#10810)
• 58aa740 Add gatsby-tailwindcss-sass-starter (#10806)
• a25ccfd Add Gatsby Blog MDX Starter (#10809)
• da9a580 feat(examples): GraphQL reference (#10803)
• 2429459 feat: update builtin ESLint to v5 (#10220)
• 2b439de chore(release): Publish
• 3214f01 chore: updated yarn.lock
• 1e3f3f3 chore(docs): rename unstructured data to using gatsby without graphql (#10782)
• d9e404c fix(blog): Add missing key (#10798)
• 2f4ee94 docs: remove Promise clutter from createPages
• 5f16e65 docs(gatsby): Minor tweak to warning message (#10778)
• a037575 Add Luca Crea's portfolio to showcase (#10783)
• 70bb589 Improve createPages of blog starter (#10781)
• c02b1c4 feat(starters): make copyright year dynamic (#10759)
• 060661f docs(gatsby): improve createPages example (#10777)
• 49c9324 Add gatsby minimal porfolio website blog starter (#10776)

See the full diff

Package name: snyk

The new version differs by 86 commits.

• 1819ace Merge pull request #356 from snyk/fix/bump-nodejs-lockfile-parser-vulnerable-deps
• c311382 fix: bump nodejs-lockfile-parser to update vulnerable deps
• 0006647 Merge pull request #353 from snyk/feat/remove-semver-use-for-os-packages
• a38167c feat: move fixed in calculation for os packages to phoenix
• f229c28 Merge pull request #349 from snyk/feat/remove-semver-use
• 97a2d63 feat: remove semver for binaries and use nearestFixedInVersion instead
• 5160c55 Merge pull request #346 from snyk/lirantal-composer-lockfile-help
• f66d1b9 fix(docs): add missing composer.lock file
• e98739a Merge pull request #318 from snyk/refactor/commands-test
• 2080fa0 refactor: test command rewritten to TS
• 7a4a915 Merge pull request #342 from snyk/chore/remove-build-from-toc
• 6d2feb0 chore: remove build from TOC
• 6b07600 Merge pull request #337 from snyk/fix/php-plugin-bump
• 319cf35 fix: bump php plugin to better support file paths
• f773c77 Merge pull request #338 from snyk/fix/bump-docker-plugin
• b4ba234 Merge pull request #341 from snyk/test/revert-a-fixture-change
• bbfd700 test: remove a fixture change done in https:/fix: pin proxy-agent & get-uri deps to not-break node 4 snyk/cli#340
• 3667dcd fix: bump docker plugin
• 567e3b3 Merge pull request #340 from snyk/fix/pin-deps-to-unbreak-node-4
• c7966f8 test: pin `get-uri` to 2.0.2 in a fixture
• 8bfae15 fix: pin proxy-agent & get-uri deps to not-break node 4
• a8c561d Merge pull request #327 from snyk/fix/undefined-base-image
• 962810a fix: Undefined base image
• bc82842 Merge pull request #325 from snyk/chore/run-travis-on-node-10

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic