graphql-boilerplates / react-fullstack-graphql

Starter projects for fullstack applications based on React & GraphQL.
1.44k stars 322 forks source link

fix(deps): update dependency subscriptions-transport-ws to v0.9.19 #759

Closed renovate[bot] closed 3 years ago

renovate[bot] commented 3 years ago

WhiteSource Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
subscriptions-transport-ws 0.9.18 -> 0.9.19 age adoption passing confidence

Release Notes

apollostack/subscriptions-transport-ws ### [`v0.9.19`](https://togithub.com/apollostack/subscriptions-transport-ws/blob/master/CHANGELOG.md#v0919-2021-06-08) [Compare Source](https://togithub.com/apollostack/subscriptions-transport-ws/compare/v0.9.18...299fdb3aa0a4a75fcf53807c5dc914472428fd36) - Bump `ws` dependency to allow v6 and v7. Note that there are breaking changes in `ws` [`6.0.0`](https://togithub.com/websockets/ws/releases/tag/6.0.0) and [`7.0.0`](https://togithub.com/websockets/ws/releases/tag/7.0.0); for example, messages over 100MiB are rejected, and (in v7) the behavior of sending messages while the connection is starting or ending has changed. We are publishing this package to allow users of Apollo Server 2 to avoid seeing [this CVE](https://www.npmjs.com/advisories/1748) in their `npm audit`. However, note that (a) this CVE does not affect the subscriptions client, just the server and (b) Apollo Server 3 will remove its superficial integration with this package entirely. We encourage users of Apollo Server 2 to disable the integration with this unmaintained package via `new ApolloServer({subscriptions: false})`, and consider packages such as `graphql-ws` to power GraphQL subscriptions until such time as Apollo Server has more fully integrated subscriptions support.

Configuration

šŸ“… Schedule: At any time (no schedule defined).

šŸš¦ Automerge: Enabled.

ā™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

šŸ”• Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by WhiteSource Renovate. View repository job log here.