Skip to content

[Snyk] Upgrade graphql from 0.11.7 to 16.5.0#41

Open
snyk-bot wants to merge 1 commit intomasterfrom
snyk-upgrade-5a30a514d6585ff9a01d9c6dc63a0466
Open

[Snyk] Upgrade graphql from 0.11.7 to 16.5.0#41
snyk-bot wants to merge 1 commit intomasterfrom
snyk-upgrade-5a30a514d6585ff9a01d9c6dc63a0466

Conversation

@snyk-bot
Copy link

Snyk has created this PR to upgrade graphql from 0.11.7 to 16.5.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 132 versions ahead of your current version.
  • The recommended version was released 3 months ago, on 2022-05-09.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-Y18N-1021887
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-URIJS-1319806
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TMPL-1583443
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Arbitrary File Overwrite
SNYK-JS-TAR-174125
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Arbitrary File Overwrite
SNYK-JS-TAR-174125
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-SETVALUE-450213
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-SETVALUE-1540541
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-SETVALUE-450213
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-SETVALUE-1540541
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MOMENT-2944238
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Directory Traversal
SNYK-JS-MOMENT-2440688
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Prototype Pollution
SNYK-JS-LODASH-567746
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Command Injection
SNYK-JS-LODASH-1040724
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Prototype Pollution
SNYK-JS-INI-1048974
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Remote Code Execution (RCE)
SNYK-JS-HANDLEBARS-1056767
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-ASYNC-2441827
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Denial of Service (DoS)
npm:mem:20180117
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Time of Check Time of Use (TOCTOU)
npm:chownr:20180731
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Cross-site Scripting (XSS)
SNYK-JS-URIJS-2441239
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Misinterpretation of Input
SNYK-JS-URIJS-2440699
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Open Redirect
SNYK-JS-URIJS-2419067
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Improper Input Validation
SNYK-JS-URIJS-2415026
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Open Redirect
SNYK-JS-URIJS-2401466
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Open Redirect
SNYK-JS-URIJS-1319803
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Improper Input Validation
SNYK-JS-URIJS-1078286
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-UGLIFYJS-1727251
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Denial of Service (DoS)
SNYK-JS-NWSAPI-2841516
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Command Injection
SNYK-JS-NODENOTIFIER-1035794
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Prototype Pollution
SNYK-JS-MINIMIST-559764
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-559764
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-HANDLEBARS-1279029
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-2429795
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-2429795
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Validation Bypass
SNYK-JS-KINDOF-537849
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: graphql
  • 16.5.0 - 2022-05-09

    v16.5.0 (2022-05-09)

    New Feature 🚀

    Committers: 1

  • 16.5.0-canary.pr.3686.d9ad8e3fd58929d38deea522d794a6b22d3244b5 - 2022-08-02
  • 16.4.0 - 2022-04-25

    v16.4.0 (2022-04-25)

    New Feature 🚀

    Bug Fix 🐞

    Docs 📝

    2 PRs were merged

    Polish 💅

    3 PRs were merged

    Internal 🏠

    26 PRs were merged

    Dependency 📦

    2 PRs were merged

    Committers: 7

  • 16.4.0-canary.pr.2839.e3a8069cfaa6406186314b62aced6487f417a2e6 - 2022-04-27
  • 16.3.0 - 2022-01-26

    v16.3.0 (2022-01-26)

    New Feature 🚀

    Bug Fix 🐞

    Docs 📝

    2 PRs were merged

    Polish 💅

    7 PRs were merged

    Internal 🏠

    5 PRs were merged

    Dependency 📦

    4 PRs were merged

    Committers: 6

  • 16.3.0-canary.pr.3521.f50bec8fecfd5aaa7e74227c5a4b9056dae9e849 - 2022-03-26
  • 16.3.0-canary.pr.3520.688c34204fb183f15a334882567d4d6d011cd234 - 2022-03-25
  • 16.3.0-canary.pr.3518.3a63d81d7ad886f7edc3cab06fd2295b71c91bed - 2022-03-23
  • 16.3.0-canary.pr.3514.a34e553c7cc83a21ffa73c7bf1a1932007a2606b - 2022-03-20
  • 16.3.0-canary.pr.3512.a3b8b9e394ae4050a2100de2720f8b3ded0a3e41 - 2022-03-18
  • 16.3.0-canary.pr.3510.942fbd8ea3d803e74908fabecbe03dfaefe3e5c8 - 2022-03-14
  • 16.3.0-canary.pr.3510.5099f4491dc2a35a3e4a0270a55e2a228c15f13b - 2022-03-14
  • 16.3.0-canary.pr.3506.be685b29062b443b0962af292fb5c9337331db70 - 2022-02-26
  • 16.3.0-canary.pr.3505.b157d96d56ade071a24a1b0c71334efb9af57689 - 2022-02-21
  • 16.3.0-canary.pr.3505.9190e5ce1cc557931a15ca1f7b15586f033c8a02 - 2022-02-20
  • 16.3.0-canary.pr.3504.7c7b6ed1e17e6cf5e114f1a89a24d289fb969aff - 2022-02-18
  • 16.3.0-canary.pr.3502.de9b8457d4a34eb544ff7b97ffacd641c913a2d1 - 2022-02-16
  • 16.3.0-canary.pr.3501.1daccf7bfd7fe9ffeabb319f26aa1b9bf5133e4c - 2022-02-15
  • 16.3.0-canary.pr.3499.ee62926bcf03d7d05ccb227cb7a67338ebab423d - 2022-02-14
  • 16.3.0-canary.pr.3498.5fd2797529557639476d5aa24359f97653bcbf22 - 2022-02-12
  • 16.3.0-canary.pr.3497.4a0bc98371a633cf49efc236c1011ca5a955e848 - 2022-02-12
  • 16.3.0-canary.pr.3496.43a2529cfa6890f5a11867e62c7a817d7879235d - 2022-02-11
  • 16.3.0-canary.pr.3494.612fd45b42a5e2aa26d9bd72e1c89d7219620dea - 2022-02-11
  • 16.3.0-canary.pr.3494.25e1e8c8de6b13288ac61febf75d6f415f81a044 - 2022-02-17
  • 16.3.0-canary.pr.3493.365426c363b5db8b3278d34deff0d790edcb6fdd - 2022-02-10
  • 16.3.0-canary.pr.3489.568f3378cc3cf660e25d79253cc9a101ae9df4e0 - 2022-02-09
  • 16.3.0-canary.pr.3488.9f7ad13c9ae7289c4d425698bd040d36978ff81a - 2022-02-09
  • 16.3.0-canary.pr.3488.0d90f0c792c9d223b5505d3cc0d9a8519bb2883a - 2022-02-09
  • 16.3.0-canary.pr.3487.a0dcf0130ae81994df47049c9233df11516abfcd - 2022-02-09
  • 16.3.0-canary.pr.3487.8c9c7200bf3db49bf1c32055d60fdd5ea3089add - 2022-02-08
  • 16.3.0-canary.pr.3486.c8ac9896696f401b9efffa1806443732cb0a010d - 2022-02-07
  • 16.3.0-canary.pr.3485.d71879afe1f1411b80adcbfe33bd95ab57e7fc11 - 2022-02-07
  • 16.3.0-canary.pr.3485.3c71ef7dd720383cba84a1637665fc18001c4f32 - 2022-02-07
  • 16.3.0-canary.pr.3484.b6999ce061b975f1c6c99c790782323b91c5eb21 - 2022-02-05
  • 16.3.0-canary.pr.3483.undefined - 2022-02-05
  • 16.3.0-canary.pr.3482.undefined - 2022-02-05
  • 16.3.0-canary.pr.3482.e5eb0dafc74d537a1e07c6a2cc15afdc1431537f - 2022-02-10
  • 16.3.0-canary.pr.3482.7777ea054008ac921136cf694d64041494250def - 2022-02-11
  • 16.3.0-canary.pr.3482.6f2ec221eab5916d6d7bbfc6167256477bd35c45 - 2022-02-12
  • 16.3.0-canary.pr.3481.undefined - 2022-02-05
  • 16.3.0-canary.pr.3480.undefined - 2022-02-04
  • 16.3.0-canary.pr.3479.undefined - 2022-02-04
  • 16.3.0-canary.pr.3469.bef54ca054e29cae26d2dd974eedf2c12bca7ef4 - 2022-02-02
  • 16.3.0-canary.pr.3469.bc0462e3d100314d7aa00049d2c15cbb58d8b3d8 - 2022-02-02
  • 16.3.0-canary.pr.3469.8212fa925aa1a32715752030913a6e296e8c0fd3 - 2022-02-02
  • 16.3.0-canary.pr.3465.6c6701425310ce7f866ce71628bdf9443ae0f0af - 2022-03-23
  • 16.3.0-canary.pr.3418.662180be9091ee1edf699b4cf4922bd5b7705297 - 2022-02-23
  • 16.3.0-canary.pr.3418.64c65ba6a2e7e923ed9a476c945f3c72da7a6c7f - 2022-02-22
  • 16.3.0-canary.pr.3134.aaacb12ce929a1f2899503018cc6d39a2f83ae28 - 2022-02-23
  • 16.3.0-canary.pr.2839.f76ee8fd7af45d88a33dfc674f2a71d505d2d9b1 - 2022-02-23
  • 16.3.0-canary.pr.2839.aab5478afb03155d26abbee8ad8fa34841ee3be3 - 2022-04-18
  • 16.3.0-canary.pr.2839.9c3b21ca34d760070b76424327061e6b4ad26f05 - 2022-03-07
  • 16.3.0-canary.pr.2839.7e65b1d8e7b5bf1ef1592babff40b9873198a741 - 2022-02-07
  • 16.3.0-canary.pr.2839.5c5e3621fdc4e4ee4e7f781962fe4a99319d6ac0 - 2022-03-07
  • 16.3.0-canary.pr.2839.3405bedecf6a15ea89f64d6a86d84234a3c0cf7b - 2022-02-23
  • 16.3.0-canary.pr.2839.0f282a62cbd565b6e8682f6c1e8c49ac075ac257 - 2022-02-23
  • 16.3.0-canary.pr.2839.09322403ecf6640bfc695dab3ffe5e98f611911d - 2022-04-22
  • 16.3.0-canary.pr.2757.7e793c133f5b9c47a1b12e98ea3a35b1b1471dc4 - 2022-02-23
  • 16.2.0 - 2021-12-17

    v16.2.0 (2021-12-17)

    New Feature 🚀

    Docs 📝

    • #3422 Minor grammar fixes in collectFields documentation (@ Cito)

    Polish 💅

    • #3423 assertName-test: test new instead of deprecated function (@ Cito)

    Internal 🏠

    2 PRs were merged

    Committers: 2

  • 16.1.0 - 2021-12-07
    Read more
  • 16.1.0-experimental-stream-defer.6 - 2021-12-07

    16.1.0-experimental-stream-defer.6

  • 16.0.1 - 2021-11-01
    Read more
  • 16.0.0 - 2021-10-28
    Read more
  • 16.0.0-rc.7.experimental-stream-defer.4 - 2021-10-27
  • 16.0.0-rc.7 - 2021-10-27
  • 16.0.0-rc.6 - 2021-10-23
  • 16.0.0-rc.5 - 2021-10-18
  • 16.0.0-rc.4 - 2021-10-13
  • 16.0.0-rc.3 - 2021-10-05
  • 16.0.0-rc.2.experimental-stream-defer.3 - 2021-08-30
  • 16.0.0-rc.2 - 2021-08-30
  • 16.0.0-rc.1 - 2021-08-26
  • 16.0.0-experimental-stream-defer.5 - 2021-10-28

    16.0.0-experimental-stream-defer.5

  • 16.0.0-alpha.5 - 2021-06-20
  • 16.0.0-alpha.4 - 2021-06-14
  • 16.0.0-alpha.3.experimental-stream-defer.2 - 2021-06-04
  • 16.0.0-alpha.3 - 2021-06-03
  • 16.0.0-alpha.2 - 2021-05-25
  • 16.0.0-alpha.1 - 2021-05-14
  • 15.8.0 - 2021-12-07
    Read more
  • 15.7.2 - 2021-10-28
  • 15.7.1 - 2021-10-27
  • 15.7.0 - 2021-10-26
  • 15.6.1 - 2021-10-05
  • 15.6.0 - 2021-09-20
  • 15.5.3 - 2021-09-06
  • 15.5.2 - 2021-08-30
  • 15.5.1 - 2021-06-20
  • 15.5.0 - 2021-01-26
  • 15.4.0 - 2020-10-26
  • 15.4.0-experimental-stream-defer.1 - 2020-10-28
  • 15.3.0 - 2020-07-05
  • 15.2.0 - 2020-06-29
  • 15.1.0 - 2020-06-07
  • 15.0.0 - 2020-04-02
  • 15.0.0-rc.2 - 2020-02-10
  • 15.0.0-rc.1 - 2020-01-06
  • 15.0.0-alpha.2 - 2019-12-29
  • 15.0.0-alpha.1 - 2019-10-14
  • 14.7.0 - 2020-07-06
  • 14.6.0 - 2020-01-26
  • 14.5.8 - 2019-09-25
  • 14.5.7 - 2019-09-20
  • 14.5.6 - 2019-09-15
  • 14.5.5 - 2019-09-13
  • 14.5.4 - 2019-08-29
  • 14.5.3 - 2019-08-24
  • 14.5.2 - 2019-08-23
  • 14.5.1 - 2019-08-23
  • 14.5.0 - 2019-08-22
  • 14.4.2 - 2019-07-03
  • 14.4.1 - 2019-06-28
  • 14.4.0 - 2019-06-26
  • 14.3.1 - 2019-05-23
  • 14.3.0 - 2019-05-07
  • 14.2.1 - 2019-03-31
  • 14.2.0 - 2019-03-26
  • 14.1.1 - 2019-01-16
  • 14.1.0 - 2019-01-15
  • 14.0.2 - 2018-09-06
  • 14.0.1 - 2018-09-06
  • 14.0.0 - 2018-08-30
  • 14.0.0-rc.2 - 2018-06-08
  • 14.0.0-rc.1 - 2018-06-08
  • 0.13.2 - 2018-03-16
  • 0.13.1 - 2018-02-15
  • 0.13.0 - 2018-02-07
  • 0.13.0-rc.1 - 2018-01-29
  • 0.12.3 - 2017-12-17
  • 0.12.2 - 2017-12-17
  • 0.12.1 - 2017-12-17
  • 0.12.0 - 2017-12-16
  • 0.11.7 - 2017-10-03
from graphql GitHub release notes
Commit messages
Package name: graphql
  • 1f8ba95 16.5.0
  • 1112b4d Expose GraphQLErrorOptions type (#3554) (#3565)
  • 23dba4e 16.4.0
  • af64b67 pass valid value to codecov config (#3543)
  • 16503cd github-actions-bot: fix reply on commands (#3538)
  • 0926554 ESLint: disallow using node globals in src/tests (#3537)
  • 4f062aa github-actions-bot: fix usage of NPM_CANARY_PR_PUBLISH_TOKEN (#3536)
  • a981dc6 github-actions-bot: fix publishing of canary releases (#3534)
  • bb70cbc Update deps (#3533)
  • b38429f integrationTests/node: fix crash on Mac with M1 by using docker (#3530)
  • 15040d0 Update documentation on deprecated formatError(..) (#3512)
  • ff06428 refactor: use object for GraphQLError constructor (#3465)
  • 5f247e0 github-actions-bot: Fix collapsing of unrelated comments (#3525)
  • faa42e2 tests(printSchema): test omitting schema of common names (#3524)
  • def26e6 github-actions-bot: replace 'octokit/request-action' action (#3523)
  • f3248cd tests(execution): add missing new lines (#3522)
  • 6bcd241 ci: Add '@ github-actions' bot (#3503)
  • e1726df GraphQLError: switch constructor overload order (#3514)
  • da57238 correct outdated documentation (#3505)
  • 6407307 ci: fix deployments of npm & deno branches (#3502)
  • 95dac43 ci: use environments to track deployments (#3497)
  • c5345df ci: fix deprecation of canary package (#3496)
  • 8a9658f ci: remove unused 'workflow_id' input (#3493)
  • 895539c ci: use separate workflows for 'push' and 'pull_request' (#3491)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Development

Successfully merging this pull request may close these issues.

1 participant