[Snyk] Upgrade graphql-tag from 2.11.0 to 2.12.1

[snyk-bot]

Snyk has created this PR to upgrade graphql-tag from 2.11.0 to 2.12.1.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2021-02-12.

Release notes

Package name: graphql-tag

• 2.12.1 - 2021-02-12
  

  Bump npm version to 2.12.1.

• 2.12.0 - 2021-01-29
  

  Bump npm version to 2.12.0.

• 2.11.0 - 2020-07-28
  
  • package.json sideEffects changes to clearly identify that graphql-tag doesn't have side effects.
    @ hwillson in #313

from graphql-tag GitHub release notes

Commit messages

Package name: graphql-tag

• c0091e1 Bump npm version to 2.12.1.
• dfe0e62 Avoid TypeScript `import type ...` syntax for now. (#352)
• 5bbb229 Add "engines": { "node": ">=10" } to package.json (#309)
• a2109aa Bump @ types/node from 14.14.22 to 14.14.27 (#351)
• a9478eb Bump rollup from 2.38.5 to 2.39.0 (#349)
• 84075de Bump mocha from 8.2.1 to 8.3.0 (#350)
• 249e1a8 Fix the npm pack (#338)
• b0dff34 Bump @ types/node from 14.14.22 to 14.14.26 (#348)
• 6a3785d Bump @ types/chai from 4.2.14 to 4.2.15 (#347)
• 4c4eaa5 Bump chai from 4.2.0 to 4.3.0 (#341)
• e1ecebd Bump typescript from 4.1.3 to 4.1.5 (#346)
• eaba5e3 Bump rollup from 2.38.1 to 2.38.5 (#343)
• 6d2f4a8 Update LICENSE year and company name.
• a9f689a Bump npm version to 2.12.0.
• 1809a56 Set up dependabot to keep dependencies up-to-date.
• a9e1cc9 Merge pull request #325 from PowerKiKi/master
• bfe5a61 Mention PR #325 in CHANGELOG.md.
• 1dc4a23 Avoid using direct eval in tests.
• 159979b Convert repo to TypeScript.
• 9558fe3 Implement ES6 export file
• e06bd06 Remove no-longer-used .travis.yml configuration file.
• aa9c5c9 Set up GitHub Actions.
• 292bb8f Rename graphql-js to graphql (#318)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[rudouglas]

Passing all checks except the security/snyk check so maybe ok to merge?

[nr-opensource-bot]

:tada: This PR is included in version 1.5.8 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: