apollographql/apollo-server (@apollo/server)
### [`v4.11.0`](https://togithub.com/apollographql/apollo-server/blob/HEAD/packages/server/CHANGELOG.md#4110)
[Compare Source](https://togithub.com/apollographql/apollo-server/compare/@apollo/server@4.10.5...@apollo/server@4.11.0)
##### Minor Changes
- [#7916](https://togithub.com/apollographql/apollo-server/pull/7916) [`4686454`](https://togithub.com/apollographql/apollo-server/commit/46864546e131d0079785575f621d69862e635663) Thanks [@andrewmcgivery](https://togithub.com/andrewmcgivery)! - Add `hideSchemaDetailsFromClientErrors` option to ApolloServer to allow hiding 'did you mean' suggestions from validation errors.
Even with introspection disabled, it is possible to "fuzzy test" a graph manually or with automated tools to try to determine the shape of your schema. This is accomplished by taking advantage of the default behavior where a misspelt field in an operation
will be met with a validation error that includes a helpful "did you mean" as part of the error text.
For example, with this option set to `true`, an error would read `Cannot query field "help" on type "Query".` whereas with this option set to `false` it would read `Cannot query field "help" on type "Query". Did you mean "hello"?`.
We recommend enabling this option in production to avoid leaking information about your schema to malicious actors.
To enable, set this option to `true` in your `ApolloServer` options:
```javascript
const server = new ApolloServer({
typeDefs,
resolvers,
hideSchemaDetailsFromClientErrors: true,
});
```
streetsidesoftware/cspell (cspell)
### [`v8.13.2`](https://togithub.com/streetsidesoftware/cspell/blob/HEAD/packages/cspell/CHANGELOG.md#small8132-2024-08-08-small)
[Compare Source](https://togithub.com/streetsidesoftware/cspell/compare/v8.13.1...v8.13.2)
- chore: Update Integration Test Performance Data ([#6060](https://togithub.com/streetsidesoftware/cspell/issues/6060)) ([c766d18](https://togithub.com/streetsidesoftware/cspell/commit/c766d18)), closes [#6060](https://togithub.com/streetsidesoftware/cspell/issues/6060)
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
[ ] If you want to rebase/retry this PR, check this box
This PR contains the following updates:
4.10.5
->4.11.0
8.13.1
->8.13.2
Release Notes
apollographql/apollo-server (@apollo/server)
### [`v4.11.0`](https://togithub.com/apollographql/apollo-server/blob/HEAD/packages/server/CHANGELOG.md#4110) [Compare Source](https://togithub.com/apollographql/apollo-server/compare/@apollo/server@4.10.5...@apollo/server@4.11.0) ##### Minor Changes - [#7916](https://togithub.com/apollographql/apollo-server/pull/7916) [`4686454`](https://togithub.com/apollographql/apollo-server/commit/46864546e131d0079785575f621d69862e635663) Thanks [@andrewmcgivery](https://togithub.com/andrewmcgivery)! - Add `hideSchemaDetailsFromClientErrors` option to ApolloServer to allow hiding 'did you mean' suggestions from validation errors. Even with introspection disabled, it is possible to "fuzzy test" a graph manually or with automated tools to try to determine the shape of your schema. This is accomplished by taking advantage of the default behavior where a misspelt field in an operation will be met with a validation error that includes a helpful "did you mean" as part of the error text. For example, with this option set to `true`, an error would read `Cannot query field "help" on type "Query".` whereas with this option set to `false` it would read `Cannot query field "help" on type "Query". Did you mean "hello"?`. We recommend enabling this option in production to avoid leaking information about your schema to malicious actors. To enable, set this option to `true` in your `ApolloServer` options: ```javascript const server = new ApolloServer({ typeDefs, resolvers, hideSchemaDetailsFromClientErrors: true, }); ```streetsidesoftware/cspell (cspell)
### [`v8.13.2`](https://togithub.com/streetsidesoftware/cspell/blob/HEAD/packages/cspell/CHANGELOG.md#small8132-2024-08-08-small) [Compare Source](https://togithub.com/streetsidesoftware/cspell/compare/v8.13.1...v8.13.2) - chore: Update Integration Test Performance Data ([#6060](https://togithub.com/streetsidesoftware/cspell/issues/6060)) ([c766d18](https://togithub.com/streetsidesoftware/cspell/commit/c766d18)), closes [#6060](https://togithub.com/streetsidesoftware/cspell/issues/6060)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.