freeCodeCamp / chapter

A self-hosted event management tool for nonprofits
BSD 3-Clause "New" or "Revised" License
1.92k stars 360 forks source link

fix(deps): update apollo graphql packages - autoclosed #2475

Closed renovate[bot] closed 1 year ago

renovate[bot] commented 1 year ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@apollo/client (source) 3.7.10 -> 3.7.15 age adoption passing confidence dependencies patch
apollo-server-express 3.12.0 -> 4.0.0 age adoption passing confidence dependencies replacement

This is a special PR that replaces apollo-server-express with the community suggested minimal stable replacement version.


Release Notes

apollographql/apollo-client ### [`v3.7.15`](https://togithub.com/apollographql/apollo-client/blob/HEAD/CHANGELOG.md#​3715) [Compare Source](https://togithub.com/apollographql/apollo-client/compare/v3.7.14...v3.7.15) ##### Patch Changes - [#​10891](https://togithub.com/apollographql/apollo-client/pull/10891) [`ab42a5c08`](https://togithub.com/apollographql/apollo-client/commit/ab42a5c08840193cb915f4e66d71fac3834fec68) Thanks [@​laverdet](https://togithub.com/laverdet)! - Fixes a bug in how multipart responses are read when using `@defer`. When reading a multipart body, `HttpLink` no longer attempts to parse the boundary (e.g. `"---"` or other boundary string) within the response data itself, only when reading the beginning of each mulitpart chunked message. - [#​10789](https://togithub.com/apollographql/apollo-client/pull/10789) [`23a4e1578`](https://togithub.com/apollographql/apollo-client/commit/23a4e15786fe99658d741585366f3b02bcffb97f) Thanks [@​phryneas](https://togithub.com/phryneas)! - Fix a bug where other fields could be aliased to `__typename` or `id`, in which case an incoming result would be merged into the wrong cache entry. ### [`v3.7.14`](https://togithub.com/apollographql/apollo-client/blob/HEAD/CHANGELOG.md#​3714) [Compare Source](https://togithub.com/apollographql/apollo-client/compare/v3.7.13...v3.7.14) ##### Patch Changes - [#​10764](https://togithub.com/apollographql/apollo-client/pull/10764) [`1b0a61fe5`](https://togithub.com/apollographql/apollo-client/commit/1b0a61fe5a6593f319da26fec8692359232ccf9b) Thanks [@​phryneas](https://togithub.com/phryneas)! - Deprecate `useFragment` `returnPartialData` option - [#​10810](https://togithub.com/apollographql/apollo-client/pull/10810) [`a6252774f`](https://togithub.com/apollographql/apollo-client/commit/a6252774f43fd9a4be9c50b48b7a6d5a1c8e64ec) Thanks [@​dleavitt](https://togithub.com/dleavitt)! - Fix type signature of `ServerError`. In <3.7 `HttpLink` and `BatchHttpLink` would return a `ServerError.message` of e.g. `"Unexpected token 'E', \"Error! Foo bar\" is not valid JSON"` and a `ServerError.result` of `undefined` in the case where a server returned a >= 300 response code with a response body containing a string that could not be parsed as JSON. In >=3.7, `message` became e.g. `Response not successful: Received status code 302` and `result` became the string from the response body, however the type in `ServerError.result` was not updated to include the `string` type, which is now properly reflected. ### [`v3.7.13`](https://togithub.com/apollographql/apollo-client/blob/HEAD/CHANGELOG.md#​3713) [Compare Source](https://togithub.com/apollographql/apollo-client/compare/v3.7.12...v3.7.13) ##### Patch Changes - [#​10805](https://togithub.com/apollographql/apollo-client/pull/10805) [`a5503666c`](https://togithub.com/apollographql/apollo-client/commit/a5503666c2cc8220ac1d877e3296556e54e58ff6) Thanks [@​phryneas](https://togithub.com/phryneas)! - Fix a potential memory leak in SSR scenarios when many `persistedQuery` instances were created over time. - [#​10718](https://togithub.com/apollographql/apollo-client/pull/10718) [`577c68bdd`](https://togithub.com/apollographql/apollo-client/commit/577c68bdd26519f8341fd1188ea4b8aabe357856) Thanks [@​Hsifnus](https://togithub.com/Hsifnus)! - Delay Concast subscription teardown slightly in `useSubscription` to prevent unexpected Concast teardown when one `useSubscription` hook tears down its in-flight Concast subscription immediately followed by another `useSubscription` hook reusing and subscribing to that same Concast ### [`v3.7.12`](https://togithub.com/apollographql/apollo-client/blob/HEAD/CHANGELOG.md#​3712) [Compare Source](https://togithub.com/apollographql/apollo-client/compare/v3.7.11...v3.7.12) ##### Patch Changes - [#​10735](https://togithub.com/apollographql/apollo-client/pull/10735) [`895bcdcff`](https://togithub.com/apollographql/apollo-client/commit/895bcdcff146bc4575c8f3423c30fa9e885be16b) Thanks [@​alessbell](https://togithub.com/alessbell)! - If a multipart chunk contains only `hasNext: false`, immediately complete the observable. ### [`v3.7.11`](https://togithub.com/apollographql/apollo-client/blob/HEAD/CHANGELOG.md#​3711) [Compare Source](https://togithub.com/apollographql/apollo-client/compare/v3.7.10...v3.7.11) ##### Patch Changes - [#​10586](https://togithub.com/apollographql/apollo-client/pull/10586) [`4175af594`](https://togithub.com/apollographql/apollo-client/commit/4175af59419dbb698c32c074f44229f3a5b3b83d) Thanks [@​alessbell](https://togithub.com/alessbell)! - Improve WebSocket error handling for generic `Event` received on error. For more information see . - [#​10411](https://togithub.com/apollographql/apollo-client/pull/10411) [`152baac34`](https://togithub.com/apollographql/apollo-client/commit/152baac343b8b68c7a2d4691d5dc60d9e43e62bb) Thanks [@​lovasoa](https://togithub.com/lovasoa)! - Simplify error message generation and make 'undefined' an impossible message string. - [#​10592](https://togithub.com/apollographql/apollo-client/pull/10592) [`cdb98ae08`](https://togithub.com/apollographql/apollo-client/commit/cdb98ae082ae4c7da6cd6a0fd5ad8457810fceda) Thanks [@​alessbell](https://togithub.com/alessbell)! - Adds support for multipart subscriptions in `HttpLink`. - [#​10698](https://togithub.com/apollographql/apollo-client/pull/10698) [`38508a251`](https://togithub.com/apollographql/apollo-client/commit/38508a251423057fd8a0df50230f50e0a5dde5fd) Thanks [@​jerelmiller](https://togithub.com/jerelmiller)! - Changes the behavior of `useLazyQuery` introduced in [#​10427](https://togithub.com/apollographql/apollo-client/pull/10427) where unmounting a component before a query was resolved would reject the promise with an abort error. Instead, the promise will now resolve naturally with the result from the request. Other notable fixes: - Kicking off multiple requests in parallel with the execution function will now ensure each returned promise is resolved with the data from its request. Previously, each promise was resolved with data from the last execution. - Re-rendering `useLazyQuery` with a different query document will now ensure the execution function uses the updated query document. Previously, only the query document rendered the first time would be used for the request. - [#​10660](https://togithub.com/apollographql/apollo-client/pull/10660) [`364bee98f`](https://togithub.com/apollographql/apollo-client/commit/364bee98fe193a7915664c1a5b206fd52793f85a) Thanks [@​alessbell](https://togithub.com/alessbell)! - Upgrades TypeScript to v5. This change is fully backward-compatible and transparent to users. - [#​10597](https://togithub.com/apollographql/apollo-client/pull/10597) [`8fb9d190d`](https://togithub.com/apollographql/apollo-client/commit/8fb9d190dbf48147412517643e3e425a7d48c49c) Thanks [@​phryneas](https://togithub.com/phryneas)! - Fix a bug where an incoming cache update could prevent future updates from the active link. - [#​10629](https://togithub.com/apollographql/apollo-client/pull/10629) [`02605bb3c`](https://togithub.com/apollographql/apollo-client/commit/02605bb3c9e148bf87a6e52b4a9ecc7d523ef9f6) Thanks [@​phryneas](https://togithub.com/phryneas)! - `useQuery`: delay unsubscribe to fix race conditions

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR has been generated by Mend Renovate. View repository job log here.

renovate[bot] commented 1 year ago

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

The artifact failure details are included below:

File name: package-lock.json
npm notice 
npm notice New major version of npm available! 8.19.4 -> 9.6.7
npm notice Changelog: <https://github.com/npm/cli/releases/tag/v9.6.7>
npm notice Run `npm install -g npm@9.6.7` to update!
npm notice 
npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: chapter-server@0.0.1
npm ERR! Found: graphql@15.8.0
npm ERR! node_modules/graphql
npm ERR!   graphql@"15.8.0" from chapter-server@0.0.1
npm ERR!   server
npm ERR!     chapter-server@0.0.1
npm ERR!     node_modules/chapter-server
npm ERR!       workspace server from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer graphql@"^16.6.0" from @apollo/server@4.0.0
npm ERR! node_modules/@apollo/server
npm ERR!   @apollo/server@"4.0.0" from chapter-server@0.0.1
npm ERR!   server
npm ERR!     chapter-server@0.0.1
npm ERR!     node_modules/chapter-server
npm ERR!       workspace server from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/worker/d59d75/1a0f07/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/worker/d59d75/1a0f07/cache/others/npm/_logs/2023-06-04T09_54_53_665Z-debug-0.log
ghost commented 1 year ago
👇 Click on the image for a new way to code review #### [![Review these changes using an interactive CodeSee Map](https://s3.us-east-2.amazonaws.com/maps.codesee.io/images/github/freeCodeCamp/chapter/2475/50f5e803/789013ac082d94683f385546a7ce5274e083a181.svg)](https://app.codesee.io/r/reviews?pr=2475&src=https%3A%2F%2Fgithub.com%2FfreeCodeCamp%2Fchapter) #### Legend CodeSee Map legend
socket-security[bot] commented 1 year ago

New dependency changes detected. Learn more about Socket for GitHub ↗︎


👍 No new dependency issues detected in pull request

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

Pull request alert summary
Issue Status
Install scripts ✅ 0 issues
Native code ✅ 0 issues
Bin script shell injection ✅ 0 issues
Unresolved require ✅ 0 issues
Invalid package.json ✅ 0 issues
HTTP dependency ✅ 0 issues
Git dependency ✅ 0 issues
Potential typo squat ✅ 0 issues
Known Malware ✅ 0 issues
Telemetry ✅ 0 issues
Protestware/Troll package ✅ 0 issues

📊 Modified Dependency Overview:

➕ Added Package Capability Access +/- Transitive Count Publisher
@apollo/server@4.0.0 network, environment +16 apollo-bot
⬆️ Updated Package Version Diff Added Capability Access +/- Transitive Count Publisher
@apollo/client@3.7.15 3.7.10...3.7.15 None +4/-4 apollo-bot

🚮 Removed packages: apollo-server-express@3.12.0