gatsby
5.16.1 · 10 Feb 2026MIT252.9k / weekRepositoryHomepagenpmAtom feed
Upgrading gatsby from 0.12.27 to 0.12.28
1 release in betweenevery note read
Reading releases, release notes and advisories…
- 0
- changes to make
- 0
- advisories fixed
- 0
- new
- 0
- fixes
Security
1 advisory still affects 0.12.28
- Gatsby develop server has Local File Inclusion vulnerabilitymoderate · GHSA-c6f8-8r25-c4gc
Upgrading to 4.25.7 clears it.
2 other lines we could not sort, mostly version bumps
- 0.12.28
@antoniocapelo noticed that while our README promised you could override plugins like you can override loaders... we hadn't defined core plugins with webpack-configurator (the lib that makes it easy to override Gatsby's webpack config in userspace) and then submitted a PR to fix this! Thanks! #626
- 0.12.28
@jbolda added postcss to the loader stack for Sass/Less so they can take advantage of the prefixing built in to our postcss config. #628