tot-ra / graphql-schema-registry

GraphQL schema registry
MIT License
372 stars 68 forks source link

[Snyk] Upgrade @apollo/composition from 2.0.5 to 2.2.1 #176

Closed matu33 closed 1 year ago

matu33 commented 1 year ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade @apollo/composition from 2.0.5 to 2.2.1.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **17 versions** ahead of your current version. - The recommended version was released **25 days ago**, on 2022-11-22.
Release notes
Package name: @apollo/composition
  • 2.2.1 - 2022-11-22
  • 2.2.0 - 2022-11-18
  • 2.1.4 - 2022-10-24
  • 2.1.3 - 2022-09-23
  • 2.1.2 - 2022-09-21
  • 2.1.2-alpha.2 - 2022-09-14
  • 2.1.2-alpha.1 - 2022-09-12
  • 2.1.2-alpha.0 - 2022-09-06
  • 2.1.1 - 2022-08-31
  • 2.1.0 - 2022-08-29
  • 2.1.0-alpha.4 - 2022-08-12
  • 2.1.0-alpha.3 - 2022-08-09
  • 2.1.0-alpha.2 - 2022-08-03
  • 2.1.0-alpha.1 - 2022-07-19
  • 2.1.0-alpha.0 - 2022-06-23
  • 2.0.6-rc.1 - 2022-06-16
  • 2.0.6-rc.0 - 2022-06-09
  • 2.0.5 - 2022-06-07
from @apollo/composition GitHub release notes
Commit messages
Package name: @apollo/composition
  • 03597ce Release
  • b21a75f Fix always expanding the federation spec to the last version (#2274)
  • fd75650 Release (#2264)
  • 9b31bb7 Merge remote-tracking branch 'origin/main' into next
  • 867ac31 Avoid reusing named fragments that are invalid for the subgraph (#2255)
  • b54ccc1 Fix building additional abstract type edges (#2259)
  • 4281442 Document that `@ shareable` on interface field is not allowed (#2257)
  • 9ca1f4e Remove `@ external` directly on types in fed1 upgrades (#2249)
  • e80a1fe Merge remote-tracking branch 'origin/main' into next
  • 789feb6 Fix query planning not find plan in some specific interactions of shareable fields and interfaces (#2246)
  • 92766fd Don't validate out introspection type names (#2248)
  • f310d63 Docs edits for gateway changes (#2252)
  • e89dd87 Merge remote-tracking branch 'origin/main' into next
  • 4ce4206 Fix potential QP issue with shareable root fields (#2239)
  • 0366537 Correctly reject field names starting with `__` (#2237)
  • 331baaa Fix error when a skipped enum value had directives applied (#2232)
  • 13d3c86 Disable `exposeDocumentNodeInFetchNode` by default (#2230)
  • cf3bfcc merge main into next (#2229)
  • 778f84a renovate updates for make-fetch-happen and jest (#2225)
  • 6bfec24 Update opentelemetry.mdx comment for default Collector URL (#2221)
  • 0bdbb5c Remove node12 support and bump circle build images (#2202)
  • 1e2dab3 Align @ external with @ shareable for how it behaves on a type (#2214)
  • c33cc19 Preserve default values for input object fields when extracting subgraph (#2218)
  • d88c328 Release (#2215)
Compare

**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/core-hxz/project/b4caf22f-e067-4d8a-8df3-3a1dbfccd3dd?utm_source=github&utm_medium=referral&page=upgrade-pr) 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/core-hxz/project/b4caf22f-e067-4d8a-8df3-3a1dbfccd3dd/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr) 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/core-hxz/project/b4caf22f-e067-4d8a-8df3-3a1dbfccd3dd/settings/integration?pkg=@apollo/composition&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)
pipedrive-bot-eventsink commented 1 year ago

Main branch dependencies

snyk vulnerabilities

pipedrive-bot-dora commented 1 year ago

Neodora Analysis ⚠

⚠ Incorrect runner in Github Workflow
**Message:** Github workflow must run on a self-hosted runner
Workflow file Job name Actual runs-on value Expected runs-on value
functional-test.yml docker ubuntu-latest Any of [eks-runner, eks-runner-php, eks-runner-nano, eks-runner-debug, eks-runner-compute]
🔍 [How to fix it](https://neodora.pipedrive.tools/rules/workflowRunner)
⚠ Incorrect runner in Github Workflow
**Message:** Github workflow must run on a self-hosted runner
Workflow file Job name Actual runs-on value Expected runs-on value
lint.yml test ubuntu-latest Any of [eks-runner, eks-runner-php, eks-runner-nano, eks-runner-debug, eks-runner-compute]
🔍 [How to fix it](https://neodora.pipedrive.tools/rules/workflowRunner)
⚠ Missing service namespace configuration
**Message:** The property `namespace` in **repository.json** must exist in SPOT and service must be deployed under correct `namespace` **Repository file:** [repository.json](https://github.com/pipedrive/graphql-schema-registry/tree/a4631b64218a02f6722455bfb6020e14ae45e443/repository.json)
Namespace status
Error: namespace is not defined
🔍 [How to fix it](https://neodora.pipedrive.tools/rules/namespace)
⚠ Incorrect runner in Github Workflow
**Message:** Github workflow must run on a self-hosted runner
Workflow file Job name Actual runs-on value Expected runs-on value
unit-test.yml test ubuntu-latest Any of [eks-runner, eks-runner-php, eks-runner-nano, eks-runner-debug, eks-runner-compute]
🔍 [How to fix it](https://neodora.pipedrive.tools/rules/workflowRunner)
⚠ Incorrect runner in Github Workflow
**Message:** Github workflow must run on a self-hosted runner
Workflow file Job name Actual runs-on value Expected runs-on value
integration-test.yml test ubuntu-latest Any of [eks-runner, eks-runner-php, eks-runner-nano, eks-runner-debug, eks-runner-compute]
🔍 [How to fix it](https://neodora.pipedrive.tools/rules/workflowRunner)
⚠ Incorrect runner in Github Workflow
**Message:** Github workflow must run on a self-hosted runner
Workflow file Job name Actual runs-on value Expected runs-on value
perf-test.yml docker ubuntu-latest Any of [eks-runner, eks-runner-php, eks-runner-nano, eks-runner-debug, eks-runner-compute]
🔍 [How to fix it](https://neodora.pipedrive.tools/rules/workflowRunner)

Commit a4631b6 Job 126672