[Snyk] Security upgrade gatsby-plugin-google-analytics from 2.11.0 to 5.1.0

[kaocher82]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • examples/using-sass/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gatsby-plugin-google-analytics

The new version differs by 250 commits.

• 2cfb64b chore(release): Publish
• c132f2d feat(gatsby-plugin-google-gtag): Add `delayOnRouteUpdate` option (feat(gatsby-plugin-google-gtag): Add delayOnRouteUpdate option gatsbyjs/gatsby#37017)
• 3032a1b fix(gatsby): Use xstate `predictableActionArguments` & update to 4.34 (fix(gatsby): Use xstate predictableActionArguments & update to 4.34 gatsbyjs/gatsby#36342)
• aca64b7 chore: Add constraints to renovate (chore: Add constraints to renovate gatsbyjs/gatsby#37047)
• f94db78 fix(gatsby-transformer-csv): Fix high memory consumption (fix(gatsby-transformer-csv): Fix high memory consumption gatsbyjs/gatsby#36610)
• f158930 test: e2e tests for Slices API (test: e2e tests for Slices API gatsbyjs/gatsby#36746)
• 9d67c13 chore(docs): Google Analytics: use gtag.js plugin (chore(docs): Google Analytics: use gtag.js plugin gatsbyjs/gatsby#36984)
• 8569655 chore(gatsby-plugin-google-analytics): Update `minimatch` (chore(gatsby-plugin-google-analytics): Update minimatch gatsbyjs/gatsby#37029)
• 086c862 fix(gatsby-core-utils): decode uri-encode filename for remote file (fix(gatsby-core-utils): decode uri-encode filename for remote file gatsbyjs/gatsby#35637)
• ccf56d5 chore: Add npm "engines" (chore: Add npm "engines" gatsbyjs/gatsby#37046)
• 5772595 fix(gatsby-source-wordpress) pass store for auth (fix(gatsby-source-wordpress) pass store for auth gatsbyjs/gatsby#37006)
• c411d69 chore(docs): Add `--` to quick start flags (chore(docs): Add -- to quick start flags gatsbyjs/gatsby#37041)
• 2a06fff chore(docs): Deployment Updates & Cleanup (chore(docs): Deployment Updates & Cleanup gatsbyjs/gatsby#37038)
• 0fb0390 chore: Repository Cleanup (chore: Repository Cleanup gatsbyjs/gatsby#37035)
• 88b9dc5 chore(gatsby-source-wordpress): remove runApisInSteps and call runApiSteps for each gatsby-node api (chore(gatsby-source-wordpress): remove runApisInSteps and call runApiSteps for each gatsby-node api gatsbyjs/gatsby#37039)
• b69709c build: include e2e tests in renovate config (build: include e2e tests in renovate config gatsbyjs/gatsby#37005)
• 8fc95f5 chore(docs): Clarify language in v4 to v5 migration guide (chore(docs): Clarify language in v4 to v5 migration guide gatsbyjs/gatsby#37007)
• 1cfd9b8 chore(e2e-tests): Wait for route change on back/forward (chore(e2e-tests): Wait for route change on back/forward gatsbyjs/gatsby#37033)
• 4842417 chore(docs): Add IE 11 note to v2 to v3 migration guide (chore(docs): Add IE 11 note to v2 to v3 migration guide gatsbyjs/gatsby#37022)
• 19dd1c4 fix(graphiql-explorer): Adjust env var truthiness logic (fix(graphiql-explorer): Adjust env var truthiness logic gatsbyjs/gatsby#37032)
• 57b37ae chore(changelogs): update changelogs (chore(changelogs): update changelogs gatsbyjs/gatsby#37030)
• 58197a0 fix(docs): update forEach to use map (fix(docs): update forEach to use map gatsbyjs/gatsby#37008)
• 3a4d333 chore: migrate from express-graphql to graphql-http (chore: migrate from express-graphql to graphql-http gatsbyjs/gatsby#37001)
• 5766694 chore(docs): Add overview video to release notes (+ other misc) (chore(docs): Add overview video to release notes (+ other misc) gatsbyjs/gatsby#37003)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)