fix(deps): update all non-major dependencies #1419
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^4.7.1
->^4.7.4
^7.21.5
->^7.22.5
^7.21.4
->^7.22.5
^7.22.1
->^7.22.5
^7.21.8
->^7.22.5
^7.22.4
->^7.22.5
^7.22.4
->^7.22.5
^7.22.3
->^7.22.5
^7.21.5
->^7.22.5
^7.21.0
->^7.22.5
^7.22.3
->^7.22.5
^2.7.0
->^2.7.1
^11.11.0
->^11.11.1
^0.12.0
->^0.13.0
^25.0.0
->^25.0.2
^7.0.18
->^7.0.23
^7.0.18
->^7.0.23
^7.0.18
->^7.0.23
^7.0.18
->^7.0.23
^7.0.18
->^7.0.23
^9.3.0
->^9.3.1
^5.60.7
->^5.60.8
^18.16.16
->^18.16.18
^18.2.8
->^18.2.13
^18.2.4
->^18.2.6
^9.0.1
->^9.0.2
^5.59.8
->^5.60.0
^5.59.8
->^5.60.0
^25.1.0
->^25.2.0
^8.42.0
->^8.43.0
^27.2.1
->^27.2.2
^10.12.16
->^10.12.17
^16.6.0
->^16.7.1
^2.3.3
->^2.3.6
^5.5.1
->^5.5.3
^1.2.1
->^1.2.2
8.6.0
->8.6.3
^2.7.4
->^2.8.0
^4.9.0
->^4.10.1
^8.0.7
->^8.1.1
^6.11.2
->^6.13.0
^3.23.0
->^3.25.1
^0.34.1
->^0.35.0
^4.9.2
->^4.10.0
^7.5.1
->^7.5.3
^7.0.18
->^7.0.23
^15.6.3
->^15.9.0
^5.85.0
->^5.88.0
^5.1.3
->^5.1.4
^4.15.0
->^4.15.1
Release Notes
apollographql/apollo-server
v4.7.4
Compare Source
Patch Changes
0adaf80d1
Thanks @trevor-scheer! - Address Content Security Policy issuesThe previous implementation of CSP nonces within the landing pages did not take full advantage of the security benefit of using them. Nonces should only be used once per request, whereas Apollo Server was generating one nonce and reusing it for the lifetime of the instance. The reuse of nonces degrades the security benefit of using them but does not pose a security risk on its own. The CSP provides a defense-in-depth measure against a potential XSS, so in the absence of a known XSS vulnerability there is likely no risk to the user.
The mentioned fix also coincidentally addresses an issue with using crypto functions on startup within Cloudflare Workers. Crypto functions are now called during requests only, which resolves the error that Cloudflare Workers were facing. A recent change introduced a
precomputedNonce
configuration option to mitigate this issue, but it was an incorrect approach given the nature of CSP nonces. This configuration option is now deprecated and should not be used for any reason since it suffers from the previously mentioned issue of reusing nonces.Additionally, this change adds other applicable CSPs for the scripts, styles, images, manifest, and iframes that the landing pages load.
A final consequence of this change is an extension of the
renderLandingPage
plugin hook. This hook can now return an object with anhtml
property which returns aPromise<string>
in addition to astring
(which was the only option before).v4.7.3
Compare Source
Patch Changes
#7601
75b668d9e
Thanks @trevor-scheer! - Provide a new configuration option for landing page pluginsprecomputedNonce
which allows users to provide a nonce and avoid calling intouuid
functions on startup. This is useful for Cloudflare Workers where random number generation is not available on startup (only during requests). Unless you are using Cloudflare Workers, you can ignore this change.The example below assumes you've provided a
PRECOMPUTED_NONCE
variable in yourwrangler.toml
file.Example usage:
v4.7.2
Compare Source
Patch Changes
c3f04d050
Thanks @trevor-scheer! - Update@apollo/utils.usagereporting
dependency. Previously, installing@apollo/gateway
and@apollo/server
could result in duplicate / differently versioned installs of@apollo/usage-reporting-protobuf
. This is because the@apollo/server-gateway-interface
package was updated to use the latest protobuf, but the@apollo/utils.usagereporting
package was not. After this change, users should always end up with a single install of the protobuf package when installing both@apollo/server
and@apollo/gateway
latest versions.babel/babel
v7.22.5
Compare Source
🐛 Bug Fix
babel-preset-env
,babel-standalone
syntax-unicode-sets-regex
in standalone (@nicolo-ribaudo)💅 Polish
babel-core
-transform-
when resolving missing plugins (@nicolo-ribaudo)chakra-ui/chakra-ui
v2.7.1
Compare Source
Patch Changes
#7730
2456a7090
Thanks @TylerAPfledderer! - Expose the
skip nav components and types to the main package
emotion-js/emotion
v11.11.1
Compare Source
Patch Changes
9357f337
Thanks @naari3! - AddedElementType
to the Emotion'sJSX
namespace. It's defined in the same way as the one in@types/react
and should make it possible to use components that returnstring
s,Promise
s and other types that are valid in React.rollup/plugins
v25.0.2
Compare Source
2023-06-19
Bugfixes
v25.0.1
Compare Source
2023-06-10
Bugfixes
storybookjs/storybook
v7.0.23
Compare Source
7.0.23
esbuild
require - #22486, thanks @youngboy!v7.0.22
Compare Source
7.0.22
v7.0.21
Compare Source
builder-manager
adding multiple dashes to relative path - #22974, thanks @MarioCadenas!of={...}
DocBlock error in story index - #22782, thanks @shilman!v7.0.20
Compare Source
Bug Fixes
Maintenance
Build
v7.0.19
Compare Source
Bad release
testing-library/dom-testing-library
v9.3.1
Compare Source
Bug Fixes
typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)
v5.60.0
Compare Source
Features
5.59.11 (2023-06-12)
Note: Version bump only for package @typescript-eslint/eslint-plugin
5.59.10 (2023-06-12)
Note: Version bump only for package @typescript-eslint/eslint-plugin
5.59.9 (2023-06-05)
Note: Version bump only for package @typescript-eslint/eslint-plugin
5.59.8 (2023-05-29)
Note: Version bump only for package @typescript-eslint/eslint-plugin
5.59.7 (2023-05-22)
Note: Version bump only for package @typescript-eslint/eslint-plugin
5.59.6 (2023-05-15)
Note: Version bump only for package @typescript-eslint/eslint-plugin
5.59.5 (2023-05-08)
Note: Version bump only for package @typescript-eslint/eslint-plugin
5.59.4 (2023-05-08)
Note: Version bump only for package @typescript-eslint/eslint-plugin
5.59.3 (2023-05-08)
Note: Version bump only for package @typescript-eslint/eslint-plugin
5.59.2 (2023-05-01)
Note: Version bump only for package @typescript-eslint/eslint-plugin
5.59.1 (2023-04-24)
Bug Fixes
v5.59.11
Compare Source
Note: Version bump only for package @typescript-eslint/eslint-plugin
v5.59.10
Compare Source
Note: Version bump only for package @typescript-eslint/eslint-plugin
v5.59.9
Compare Source
Note: Version bump only for package @typescript-eslint/eslint-plugin
typescript-eslint/typescript-eslint (@typescript-eslint/parser)
v5.60.0
Compare Source
Note: Version bump only for package @typescript-eslint/parser
5.59.11 (2023-06-12)
Note: Version bump only for package @typescript-eslint/parser
5.59.10 (2023-06-12)
Note: Version bump only for package @typescript-eslint/parser
5.59.9 (2023-06-05)
Note: Version bump only for package @typescript-eslint/parser
[5.59.8](https://togithub.com/typescript-eslint/typescr