-
Notifications
You must be signed in to change notification settings - Fork 2.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
doc(static-typing): rewrite with GraphQL Code Generator setup #10173
doc(static-typing): rewrite with GraphQL Code Generator setup #10173
Conversation
Hi @charlypoly! Thanks for this PR. Many Apollo folks are taking a breather after our big conference last week, but we'll take a look at this properly next week 👍 |
Hi @StephenBarlow, Thank you for the update! |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM @charlypoly - I added a couple of tiny corrections and one question for you. Thanks so much!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you so much for this PR charlypoly! 🙏 So sorry for my late review here, my suggestions mostly revolve around style, but please feel free to push back if anything doesn't feel good to you.
@bignimbus, @rkoron007, thank you for your thorough review! I've applied the suggestion and committed some changes. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I had a few small suggestions, but since they are mainly tiny tweaks, I can take care of batching and committing them so this merged in sooner!
@rkoron007 @bignimbus @StephenBarlow, thank you for your valuable and fast feedback! ⚡ |
<h3>Snyk has created this PR to upgrade @apollo/client from 3.5.10 to 3.7.3.</h3> :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project. <hr/> - The recommended version is **48 versions** ahead of your current version. - The recommended version was released **2 months ago**, on 2022-12-15. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:------------------------- <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Prototype Pollution<br/> [SNYK-JS-LOADERUTILS-3043105](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3043105) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Prototype Pollution<br/> [SNYK-JS-LOADERUTILS-3043105](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3043105) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Remote Code Execution (RCE)<br/> [SNYK-JS-EJS-2803307](https://snyk.io/vuln/SNYK-JS-EJS-2803307) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Denial of Service (DoS)<br/> [SNYK-JS-DECODEURICOMPONENT-3149970](https://snyk.io/vuln/SNYK-JS-DECODEURICOMPONENT-3149970) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Prototype Pollution<br/> [SNYK-JS-ASYNC-2441827](https://snyk.io/vuln/SNYK-JS-ASYNC-2441827) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-TERSER-2806366](https://snyk.io/vuln/SNYK-JS-TERSER-2806366) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Denial of Service (DoS)<br/> [SNYK-JS-NWSAPI-2841516](https://snyk.io/vuln/SNYK-JS-NWSAPI-2841516) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3105943](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3105943) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3042992](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3042992) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3105943](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3105943) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3042992](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3042992) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Prototype Pollution<br/> [SNYK-JS-JSON5-3182856](https://snyk.io/vuln/SNYK-JS-JSON5-3182856) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Prototype Pollution<br/> [SNYK-JS-JSON5-3182856](https://snyk.io/vuln/SNYK-JS-JSON5-3182856) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept (*) Note that the real score may have changed since the PR was raised. <details> <summary><b>Release notes</b></summary> <br/> <details> <summary>Package name: <b>@apollo/client</b></summary> <ul> <li> <b>3.7.3</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.3">2022-12-15</a></br><h3>Patch Changes</h3> <ul> <li> <p><a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10334" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10334/hovercard">#10334</a> <a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7d923939dd7e6db7d69f04f598c666104b076e78"><code>7d923939d</code></a> Thanks <a href="https://snyk.io/redirect/github/jerelmiller">@ jerelmiller</a>! - Better handle deferred queries that have cached or partial cached data for them</p> </li> <li> <p><a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10368" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10368/hovercard">#10368</a> <a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/46b58e9762abbffaee5c9abda8e309bea6d7a785"><code>46b58e976</code></a> Thanks <a href="https://snyk.io/redirect/github/alessbell">@ alessbell</a>! - Fix: unblocks support for defer in mutations</p> <p>If the <code>@ defer</code> directive is present in the document passed to <code>mutate</code>, the Promise will resolve with the final merged data after the last multipart chunk has arrived in the response.</p> </li> </ul> </li> <li> <b>3.7.2</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.2">2022-12-06</a></br><h2>Improvements (from <a href="https://snyk.io/redirect/github/apollographql/apollo-client/blob/main/CHANGELOG.md"><code>CHANGELOG.md</code></a>)</h2> <ul> <li> <p>Only show dev tools suggestion in the console when <code>connectToDevTools</code> is <code>true</code>.<br> <a href="https://snyk.io/redirect/github/chris110408">@ chris110408</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10258" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10258/hovercard">#10258</a></p> </li> <li> <p>Pass <code>TCache</code> generic to <code>MutationHookOptions</code> for better type support in <code>useMutation</code>.<br> <a href="https://snyk.io/redirect/github/igrlk">@ igrlk</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10223" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10223/hovercard">#10223</a></p> </li> <li> <p>Add <code>name</code> property to <code>ApolloError</code> to ensure better type safety and help error reporting tools better identify the error.<br> <a href="https://snyk.io/redirect/github/aaronadamsCA">@ aaronadamsCA</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/9323" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/9323/hovercard">#9323</a></p> </li> <li> <p>Export a <code>ModifierDetails</code> type for the <code>details</code> parameter of a <code>Modifier</code> function.<br> <a href="https://snyk.io/redirect/github/KeithGillette">@ KeithGillette</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/7133" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/7133/hovercard">#7133</a></p> </li> <li> <p>Revert use of <code>cloneDeep</code> to clone options when fetching queries.<br> <a href="https://snyk.io/redirect/github/MrDoomBringer">@ MrDoomBringer</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10215" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10215/hovercard">#10215</a></p> </li> </ul> <h2>What's Changed (auto-generated by GitHub)</h2> <ul> <li>Add connect to dev tools check by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chris110408/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/chris110408">@ chris110408</a> in <a aria-label="Pull request #10258" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1433824820" data-permission-text="Title is private" data-url="apollographql/apollo-client#10258" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10258/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10258">#10258</a></li> <li>Update the CHANGELOG by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jerelmiller/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/jerelmiller">@ jerelmiller</a> in <a aria-label="Pull request #10260" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1433855997" data-permission-text="Title is private" data-url="apollographql/apollo-client#10260" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10260/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10260">#10260</a></li> <li>Revert cloneDeep-ing request headers by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/MrDoomBringer/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/MrDoomBringer">@ MrDoomBringer</a> in <a aria-label="Pull request #10215" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1416787337" data-permission-text="Title is private" data-url="apollographql/apollo-client#10215" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10215/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10215">#10215</a></li> <li>chore(tests): warn on ts-jest diagnostics error outside of CI test runs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/alessbell/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/alessbell">@ alessbell</a> in <a aria-label="Pull request #10268" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1440751358" data-permission-text="Title is private" data-url="apollographql/apollo-client#10268" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10268/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10268">#10268</a></li> <li>updates roadmap nov 2022 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jpvajda/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/jpvajda">@ jpvajda</a> in <a aria-label="Pull request #10269" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1440838554" data-permission-text="Title is private" data-url="apollographql/apollo-client#10269" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10269/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10269">#10269</a></li> <li>docs: displays the error correctly by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ctesniere/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/ctesniere">@ ctesniere</a> in <a aria-label="Pull request #10275" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1444506371" data-permission-text="Title is private" data-url="apollographql/apollo-client#10275" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10275/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10275">#10275</a></li> <li>Update the CHANGELOG with changes from <a aria-label="Pull request #10275" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1444506371" data-permission-text="Title is private" data-url="apollographql/apollo-client#10275" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10275/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10275">#10275</a> by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bignimbus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/bignimbus">@ bignimbus</a> in <a aria-label="Pull request #10276" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1445656915" data-permission-text="Title is private" data-url="apollographql/apollo-client#10276" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10276/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10276">#10276</a></li> <li>Fix 'broken' links by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/StephenBarlow/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/StephenBarlow">@ StephenBarlow</a> in <a aria-label="Pull request #10288" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1450617736" data-permission-text="Title is private" data-url="apollographql/apollo-client#10288" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10288/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10288">#10288</a></li> <li>Additional documentation for managing local state by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bignimbus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/bignimbus">@ bignimbus</a> in <a aria-label="Pull request #10282" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1448345087" data-permission-text="Title is private" data-url="apollographql/apollo-client#10282" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10282/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10282">#10282</a></li> <li>chore(docs): remove graphql-anywhere from apollo-link-rest doc by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/alessbell/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/alessbell">@ alessbell</a> in <a aria-label="Pull request #10232" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424523033" data-permission-text="Title is private" data-url="apollographql/apollo-client#10232" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10232/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10232">#10232</a></li> <li>doc(static-typing): rewrite with GraphQL Code Generator setup by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/charlypoly/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/charlypoly">@ charlypoly</a> in <a aria-label="Pull request #10173" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1404287170" data-permission-text="Title is private" data-url="apollographql/apollo-client#10173" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10173/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10173">#10173</a></li> <li>Further update the TypeGen article for style by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/rkoron007/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/rkoron007">@ rkoron007</a> in <a aria-label="Pull request #10294" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1454068707" data-permission-text="Title is private" data-url="apollographql/apollo-client#10294" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10294/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10294">#10294</a></li> <li>Pass TCache generic to MutationHookOptions by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/igrlk/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/igrlk">@ igrlk</a> in <a aria-label="Pull request #10223" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1419515761" data-permission-text="Title is private" data-url="apollographql/apollo-client#10223" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10223/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10223">#10223</a></li> <li>Add name property to ApolloError by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronadamsCA/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/aaronadamsCA">@ aaronadamsCA</a> in <a aria-label="Pull request #9323" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1106740822" data-permission-text="Title is private" data-url="apollographql/apollo-client#9323" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/9323/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/9323">#9323</a></li> <li>Add array examples to reactive variable documentation by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/larrymyers/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/larrymyers">@ larrymyers</a> in <a aria-label="Pull request #10235" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424932503" data-permission-text="Title is private" data-url="apollographql/apollo-client#10235" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10235/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10235">#10235</a></li> <li>Update CHANGELOG with changes from <a aria-label="Pull request #10235" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424932503" data-permission-text="Title is private" data-url="apollographql/apollo-client#10235" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10235/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10235">#10235</a> by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bignimbus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/bignimbus">@ bignimbus</a> in <a aria-label="Pull request #10302" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1458514445" data-permission-text="Title is private" data-url="apollographql/apollo-client#10302" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10302/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10302">#10302</a></li> <li>docs: Update subscribeToMore example to use React hooks by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/trevorblades/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/trevorblades">@ trevorblades</a> in <a aria-label="Pull request #10309" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1460280026" data-permission-text="Title is private" data-url="apollographql/apollo-client#10309" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10309/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10309">#10309</a></li> <li>export separate <code>ModifierUtility</code> type by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KeithGillette/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/KeithGillette">@ KeithGillette</a> in <a aria-label="Pull request #7133" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="716972371" data-permission-text="Title is private" data-url="apollographql/apollo-client#7133" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/7133/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/7133">#7133</a></li> <li>Changelog and docs for preserveHeaderCase by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/MrDoomBringer/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/MrDoomBringer">@ MrDoomBringer</a> in <a aria-label="Pull request #10111" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1378274068" data-permission-text="Title is private" data-url="apollographql/apollo-client#10111" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10111/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10111">#10111</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chris110408/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/chris110408">@ chris110408</a> made their first contribution in <a aria-label="Pull request #10258" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1433824820" data-permission-text="Title is private" data-url="apollographql/apollo-client#10258" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10258/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10258">#10258</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ctesniere/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/ctesniere">@ ctesniere</a> made their first contribution in <a aria-label="Pull request #10275" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1444506371" data-permission-text="Title is private" data-url="apollographql/apollo-client#10275" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10275/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10275">#10275</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/charlypoly/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/charlypoly">@ charlypoly</a> made their first contribution in <a aria-label="Pull request #10173" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1404287170" data-permission-text="Title is private" data-url="apollographql/apollo-client#10173" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10173/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10173">#10173</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/igrlk/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/igrlk">@ igrlk</a> made their first contribution in <a aria-label="Pull request #10223" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1419515761" data-permission-text="Title is private" data-url="apollographql/apollo-client#10223" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10223/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10223">#10223</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronadamsCA/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/aaronadamsCA">@ aaronadamsCA</a> made their first contribution in <a aria-label="Pull request #9323" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1106740822" data-permission-text="Title is private" data-url="apollographql/apollo-client#9323" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/9323/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/9323">#9323</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/larrymyers/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/larrymyers">@ larrymyers</a> made their first contribution in <a aria-label="Pull request #10235" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424932503" data-permission-text="Title is private" data-url="apollographql/apollo-client#10235" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10235/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10235">#10235</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KeithGillette/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/KeithGillette">@ KeithGillette</a> made their first contribution in <a aria-label="Pull request #7133" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="716972371" data-permission-text="Title is private" data-url="apollographql/apollo-client#7133" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/7133/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/7133">#7133</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://snyk.io/redirect/github/apollographql/apollo-client/compare/v3.7.1...v3.7.2"><tt>v3.7.1...v3.7.2</tt></a></p> </li> <li> <b>3.7.1</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.1">2022-10-20</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.1"> Read more </a> </li> <li> <b>3.7.0</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.0">2022-09-30</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.0"> Read more </a> </li> <li> <b>3.7.0-rc.0</b> - 2022-09-21 </li> <li> <b>3.7.0-beta.8</b> - 2022-09-21 </li> <li> <b>3.7.0-beta.7</b> - 2022-09-08 </li> <li> <b>3.7.0-beta.6</b> - 2022-06-27 </li> <li> <b>3.7.0-beta.5</b> - 2022-06-10 </li> <li> <b>3.7.0-beta.4</b> - 2022-06-10 </li> <li> <b>3.7.0-beta.3</b> - 2022-06-07 </li> <li> <b>3.7.0-beta.2</b> - 2022-06-07 </li> <li> <b>3.7.0-beta.1</b> - 2022-05-26 </li> <li> <b>3.7.0-beta.0</b> - 2022-05-25 </li> <li> <b>3.7.0-alpha.6</b> - 2022-05-19 </li> <li> <b>3.7.0-alpha.5</b> - 2022-05-16 </li> <li> <b>3.7.0-alpha.4</b> - 2022-05-13 </li> <li> <b>3.7.0-alpha.3</b> - 2022-05-09 </li> <li> <b>3.7.0-alpha.2</b> - 2022-05-03 </li> <li> <b>3.7.0-alpha.1</b> - 2022-05-03 </li> <li> <b>3.7.0-alpha.0</b> - 2022-04-27 </li> <li> <b>3.6.10</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.10">2022-09-29</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.10"> Read more </a> </li> <li> <b>3.6.9</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.9">2022-06-21</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.9"> Read more </a> </li> <li> <b>3.6.8</b> - 2022-06-10 </li> <li> <b>3.6.7</b> - 2022-06-10 </li> <li> <b>3.6.6</b> - 2022-05-26 </li> <li> <b>3.6.5</b> - 2022-05-23 </li> <li> <b>3.6.4</b> - 2022-05-16 </li> <li> <b>3.6.3</b> - 2022-05-05 </li> <li> <b>3.6.2</b> - 2022-05-03 </li> <li> <b>3.6.1</b> - 2022-04-28 </li> <li> <b>3.6.0</b> - 2022-04-26 </li> <li> <b>3.6.0-rc.1</b> - 2022-04-19 </li> <li> <b>3.6.0-rc.0</b> - 2022-04-18 </li> <li> <b>3.6.0-beta.13</b> - 2022-04-14 </li> <li> <b>3.6.0-beta.12</b> - 2022-04-11 </li> <li> <b>3.6.0-beta.11</b> - 2022-04-05 </li> <li> <b>3.6.0-beta.10</b> - 2022-03-29 </li> <li> <b>3.6.0-beta.9</b> - 2022-03-10 </li> <li> <b>3.6.0-beta.8</b> - 2022-03-10 </li> <li> <b>3.6.0-beta.7</b> - 2022-03-10 </li> <li> <b>3.6.0-beta.6</b> - 2022-02-15 </li> <li> <b>3.6.0-beta.5</b> - 2022-02-04 </li> <li> <b>3.6.0-beta.4</b> - 2022-02-03 </li> <li> <b>3.6.0-beta.3</b> - 2021-11-23 </li> <li> <b>3.6.0-beta.2</b> - 2021-11-22 </li> <li> <b>3.6.0-beta.1</b> - 2021-11-16 </li> <li> <b>3.6.0-beta.0</b> - 2021-11-16 </li> <li> <b>3.5.10</b> - 2022-02-24 </li> </ul> from <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases">@apollo/client GitHub release notes</a> </details> </details> <details> <summary><b>Commit messages</b></summary> </br> <details> <summary>Package name: <b>@apollo/client</b></summary> <ul> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/2f79f03f1239b0496ddda938bf74a1b0ef97966e">2f79f03</a> Version Packages (#10341)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/b823f6c679f28fae1f5c1fb3f9e7545a2cb5c987">b823f6c</a> Fix Changesets release workflow from default branch (#10370)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/46b58e9762abbffaee5c9abda8e309bea6d7a785">46b58e9</a> Fixes support for defer in mutations (#10368)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/52d5af26129bcec6bd51b45511b8349695219c47">52d5af2</a> docs/updating-subscription-library-anchor-link (#10320)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/1398e42854590c685a63862534990e26d5013d16">1398e42</a> chore(deps): update actions/setup-node action to v3 (#10352)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/6739721ea04a66d94be6ca2ae956e95997925201">6739721</a> chore(deps): update mad9000/actions-find-and-replace-string action to v3 (#10354)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/b3e4574942afffd03cc8a383b9834bbb723720bf">b3e4574</a> Update static-typing.md (#10358)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/f4f00b6d01b33f08dad9992609e30ddf4011e701">f4f00b6</a> chore(deps): update dependency mocha to v10.2.0</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/0daf29fc02dba3e4ba53f36a8b412abcdbe79329">0daf29f</a> chore(deps): update dependency @ types/node to v18.11.13</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/ac7696ee7478cab6566c93430400a1ea19b2c7ad">ac7696e</a> chore(deps): update dependency recast to v0.22.0</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/543d687fe7b38726576821d7e671945549f6e49b">543d687</a> chore(deps): update dependency @ types/node to v18.11.12</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/14857a5b076a1a385a807620d4a3934fff51c0ea">14857a5</a> chore(deps): update dependency @ types/jest to v29.2.4</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7819c51ff6a0837e94cc0be6739a70fadf36eada">7819c51</a> chore(deps): update dependency @ graphql-tools/schema to v9.0.12</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/c02a17b30f96fe33649c1fad716cd9482d353868">c02a17b</a> chore(changesets): run changeset-version in prerelease workflow</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/6cf377f29b906e1eabfd2993107a0041db78ca4b">6cf377f</a> Changesets updates (#10342)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7d923939dd7e6db7d69f04f598c666104b076e78">7d92393</a> Better handle cached data with deferred queries (#10334)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/f982a8d3b0571cf841c7068bd374c8ee44d21492">f982a8d</a> Introduce Changesets (#10337)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7bff5ac3d9d4f441ff1cc70b6fd6ae60b1b7cfb2">7bff5ac</a> Roadmap updates (#10336)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/21c7d26220ce82a9856cd203bf1aa5ff1327b192">21c7d26</a> Exclude "cursor" argument to prevent separate cache instance (#10144)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/9f8fae1055880c8ec173e631e6009e5308376f34">9f8fae1</a> chore(deps): update dependency jest-junit to v15 (#10301)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/a55770437f110ae85cd1d8d1fb47a8e6de022c09">a557704</a> chore(deps): update dependency @ types/node to v18 (#9840)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/ce866132e2be18a989f8e0a78648e5a6d5abc25e">ce86613</a> Bump @ apollo/client npm version to 3.7.2.</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/365fcea4ad1a9c3682f91fc315c80e828edf3c41">365fcea</a> chore: update CHANGELOG in preparation for 3.7.2 (#10335)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/39d83c9dae30f32a0b2634a50763a87d369ff7df">39d83c9</a> chore(deps): update dependency @ types/react to v18.0.26</li> </ul> <a href="https://snyk.io/redirect/github/apollographql/apollo-client/compare/6ca525a6e2e520ea67cfbfd8df0ac48988b4abe4...2f79f03f1239b0496ddda938bf74a1b0ef97966e">Compare</a> </details> </details> <hr/> **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiIxNWZmNzVhNC03MTRhLTQ4ZTQtOGZlYS1kNTE2ZmVkMzBhNjkiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6IjE1ZmY3NWE0LTcxNGEtNDhlNC04ZmVhLWQ1MTZmZWQzMGE2OSJ9fQ==" width="0" height="0"/> 🧐 [View latest project report](https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872?utm_source=github&utm_medium=referral&page=upgrade-pr) 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr) 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872/settings/integration?pkg=@apollo/client&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades) <!--- (snyk:metadata:{"prId":"15ff75a4-714a-48e4-8fea-d516fed30a69","prPublicId":"15ff75a4-714a-48e4-8fea-d516fed30a69","dependencies":[{"name":"@apollo/client","from":"3.5.10","to":"3.7.3"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872?utm_source=github&utm_medium=referral&page=upgrade-pr","projectPublicId":"9043c51f-3f0d-45c6-8455-b658274f2872","env":"prod","prType":"upgrade","vulns":["SNYK-JS-LOADERUTILS-3043105","SNYK-JS-LOADERUTILS-3043105","SNYK-JS-EJS-2803307","SNYK-JS-DECODEURICOMPONENT-3149970","SNYK-JS-ASYNC-2441827","SNYK-JS-TERSER-2806366","SNYK-JS-NWSAPI-2841516","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-JSON5-3182856","SNYK-JS-JSON5-3182856"],"issuesToFix":[{"issueId":"SNYK-JS-LOADERUTILS-3043105","severity":"high","title":"Prototype Pollution","exploitMaturity":"no-known-exploit","priorityScore":375,"priorityScoreFactors":[{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-LOADERUTILS-3043105","severity":"high","title":"Prototype Pollution","exploitMaturity":"no-known-exploit","priorityScore":375,"priorityScoreFactors":[{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-EJS-2803307","severity":"high","title":"Remote Code Execution (RCE)","exploitMaturity":"proof-of-concept","priorityScore":512,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"8.1","score":405}]},{"issueId":"SNYK-JS-DECODEURICOMPONENT-3149970","severity":"high","title":"Denial of Service (DoS)","exploitMaturity":"proof-of-concept","priorityScore":482,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-ASYNC-2441827","severity":"high","title":"Prototype Pollution","exploitMaturity":"proof-of-concept","priorityScore":482,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-TERSER-2806366","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-NWSAPI-2841516","severity":"medium","title":"Denial of Service (DoS)","exploitMaturity":"no-known-exploit","priorityScore":310,"priorityScoreFactors":[{"type":"cvssScore","label":"6.2","score":310}]},{"issueId":"SNYK-JS-LOADERUTILS-3105943","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-LOADERUTILS-3042992","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-LOADERUTILS-3105943","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-LOADERUTILS-3042992","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-JSON5-3182856","severity":"medium","title":"Prototype Pollution","exploitMaturity":"proof-of-concept","priorityScore":427,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"6.4","score":320}]},{"issueId":"SNYK-JS-JSON5-3182856","severity":"medium","title":"Prototype Pollution","exploitMaturity":"proof-of-concept","priorityScore":427,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"6.4","score":320}]}],"upgrade":["SNYK-JS-LOADERUTILS-3043105","SNYK-JS-LOADERUTILS-3043105","SNYK-JS-EJS-2803307","SNYK-JS-DECODEURICOMPONENT-3149970","SNYK-JS-ASYNC-2441827","SNYK-JS-TERSER-2806366","SNYK-JS-NWSAPI-2841516","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-JSON5-3182856","SNYK-JS-JSON5-3182856"],"upgradeInfo":{"versionsDiff":48,"publishedDate":"2022-12-15T18:42:41.897Z"},"templateVariants":["priorityScore"],"hasFixes":true,"isMajorUpgrade":false,"isBreakingChange":false,"priorityScoreList":[375,375,512,482,482,265,310,265,265,265,265,427,427]}) ---> Co-authored-by: snyk-bot <[email protected]>
<h3>Snyk has created this PR to upgrade @apollo/client from 3.5.10 to 3.7.3.</h3> :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project. <hr/> - The recommended version is **48 versions** ahead of your current version. - The recommended version was released **2 months ago**, on 2022-12-15. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:------------------------- <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Prototype Pollution<br/> [SNYK-JS-LOADERUTILS-3043105](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3043105) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Prototype Pollution<br/> [SNYK-JS-LOADERUTILS-3043105](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3043105) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Remote Code Execution (RCE)<br/> [SNYK-JS-EJS-2803307](https://snyk.io/vuln/SNYK-JS-EJS-2803307) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Denial of Service (DoS)<br/> [SNYK-JS-DECODEURICOMPONENT-3149970](https://snyk.io/vuln/SNYK-JS-DECODEURICOMPONENT-3149970) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Prototype Pollution<br/> [SNYK-JS-ASYNC-2441827](https://snyk.io/vuln/SNYK-JS-ASYNC-2441827) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-TERSER-2806366](https://snyk.io/vuln/SNYK-JS-TERSER-2806366) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Denial of Service (DoS)<br/> [SNYK-JS-NWSAPI-2841516](https://snyk.io/vuln/SNYK-JS-NWSAPI-2841516) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3105943](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3105943) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3042992](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3042992) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3105943](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3105943) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3042992](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3042992) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Prototype Pollution<br/> [SNYK-JS-JSON5-3182856](https://snyk.io/vuln/SNYK-JS-JSON5-3182856) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Prototype Pollution<br/> [SNYK-JS-JSON5-3182856](https://snyk.io/vuln/SNYK-JS-JSON5-3182856) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept (*) Note that the real score may have changed since the PR was raised. <details> <summary><b>Release notes</b></summary> <br/> <details> <summary>Package name: <b>@apollo/client</b></summary> <ul> <li> <b>3.7.3</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.3">2022-12-15</a></br><h3>Patch Changes</h3> <ul> <li> <p><a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10334" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10334/hovercard">#10334</a> <a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7d923939dd7e6db7d69f04f598c666104b076e78"><code>7d923939d</code></a> Thanks <a href="https://snyk.io/redirect/github/jerelmiller">@ jerelmiller</a>! - Better handle deferred queries that have cached or partial cached data for them</p> </li> <li> <p><a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10368" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10368/hovercard">#10368</a> <a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/46b58e9762abbffaee5c9abda8e309bea6d7a785"><code>46b58e976</code></a> Thanks <a href="https://snyk.io/redirect/github/alessbell">@ alessbell</a>! - Fix: unblocks support for defer in mutations</p> <p>If the <code>@ defer</code> directive is present in the document passed to <code>mutate</code>, the Promise will resolve with the final merged data after the last multipart chunk has arrived in the response.</p> </li> </ul> </li> <li> <b>3.7.2</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.2">2022-12-06</a></br><h2>Improvements (from <a href="https://snyk.io/redirect/github/apollographql/apollo-client/blob/main/CHANGELOG.md"><code>CHANGELOG.md</code></a>)</h2> <ul> <li> <p>Only show dev tools suggestion in the console when <code>connectToDevTools</code> is <code>true</code>.<br> <a href="https://snyk.io/redirect/github/chris110408">@ chris110408</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10258" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10258/hovercard">#10258</a></p> </li> <li> <p>Pass <code>TCache</code> generic to <code>MutationHookOptions</code> for better type support in <code>useMutation</code>.<br> <a href="https://snyk.io/redirect/github/igrlk">@ igrlk</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10223" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10223/hovercard">#10223</a></p> </li> <li> <p>Add <code>name</code> property to <code>ApolloError</code> to ensure better type safety and help error reporting tools better identify the error.<br> <a href="https://snyk.io/redirect/github/aaronadamsCA">@ aaronadamsCA</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/9323" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/9323/hovercard">#9323</a></p> </li> <li> <p>Export a <code>ModifierDetails</code> type for the <code>details</code> parameter of a <code>Modifier</code> function.<br> <a href="https://snyk.io/redirect/github/KeithGillette">@ KeithGillette</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/7133" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/7133/hovercard">#7133</a></p> </li> <li> <p>Revert use of <code>cloneDeep</code> to clone options when fetching queries.<br> <a href="https://snyk.io/redirect/github/MrDoomBringer">@ MrDoomBringer</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10215" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10215/hovercard">#10215</a></p> </li> </ul> <h2>What's Changed (auto-generated by GitHub)</h2> <ul> <li>Add connect to dev tools check by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chris110408/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/chris110408">@ chris110408</a> in <a aria-label="Pull request #10258" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1433824820" data-permission-text="Title is private" data-url="apollographql/apollo-client#10258" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10258/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10258">#10258</a></li> <li>Update the CHANGELOG by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jerelmiller/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/jerelmiller">@ jerelmiller</a> in <a aria-label="Pull request #10260" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1433855997" data-permission-text="Title is private" data-url="apollographql/apollo-client#10260" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10260/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10260">#10260</a></li> <li>Revert cloneDeep-ing request headers by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/MrDoomBringer/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/MrDoomBringer">@ MrDoomBringer</a> in <a aria-label="Pull request #10215" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1416787337" data-permission-text="Title is private" data-url="apollographql/apollo-client#10215" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10215/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10215">#10215</a></li> <li>chore(tests): warn on ts-jest diagnostics error outside of CI test runs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/alessbell/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/alessbell">@ alessbell</a> in <a aria-label="Pull request #10268" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1440751358" data-permission-text="Title is private" data-url="apollographql/apollo-client#10268" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10268/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10268">#10268</a></li> <li>updates roadmap nov 2022 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jpvajda/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/jpvajda">@ jpvajda</a> in <a aria-label="Pull request #10269" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1440838554" data-permission-text="Title is private" data-url="apollographql/apollo-client#10269" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10269/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10269">#10269</a></li> <li>docs: displays the error correctly by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ctesniere/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/ctesniere">@ ctesniere</a> in <a aria-label="Pull request #10275" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1444506371" data-permission-text="Title is private" data-url="apollographql/apollo-client#10275" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10275/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10275">#10275</a></li> <li>Update the CHANGELOG with changes from <a aria-label="Pull request #10275" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1444506371" data-permission-text="Title is private" data-url="apollographql/apollo-client#10275" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10275/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10275">#10275</a> by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bignimbus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/bignimbus">@ bignimbus</a> in <a aria-label="Pull request #10276" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1445656915" data-permission-text="Title is private" data-url="apollographql/apollo-client#10276" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10276/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10276">#10276</a></li> <li>Fix 'broken' links by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/StephenBarlow/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/StephenBarlow">@ StephenBarlow</a> in <a aria-label="Pull request #10288" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1450617736" data-permission-text="Title is private" data-url="apollographql/apollo-client#10288" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10288/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10288">#10288</a></li> <li>Additional documentation for managing local state by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bignimbus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/bignimbus">@ bignimbus</a> in <a aria-label="Pull request #10282" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1448345087" data-permission-text="Title is private" data-url="apollographql/apollo-client#10282" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10282/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10282">#10282</a></li> <li>chore(docs): remove graphql-anywhere from apollo-link-rest doc by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/alessbell/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/alessbell">@ alessbell</a> in <a aria-label="Pull request #10232" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424523033" data-permission-text="Title is private" data-url="apollographql/apollo-client#10232" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10232/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10232">#10232</a></li> <li>doc(static-typing): rewrite with GraphQL Code Generator setup by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/charlypoly/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/charlypoly">@ charlypoly</a> in <a aria-label="Pull request #10173" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1404287170" data-permission-text="Title is private" data-url="apollographql/apollo-client#10173" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10173/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10173">#10173</a></li> <li>Further update the TypeGen article for style by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/rkoron007/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/rkoron007">@ rkoron007</a> in <a aria-label="Pull request #10294" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1454068707" data-permission-text="Title is private" data-url="apollographql/apollo-client#10294" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10294/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10294">#10294</a></li> <li>Pass TCache generic to MutationHookOptions by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/igrlk/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/igrlk">@ igrlk</a> in <a aria-label="Pull request #10223" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1419515761" data-permission-text="Title is private" data-url="apollographql/apollo-client#10223" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10223/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10223">#10223</a></li> <li>Add name property to ApolloError by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronadamsCA/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/aaronadamsCA">@ aaronadamsCA</a> in <a aria-label="Pull request #9323" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1106740822" data-permission-text="Title is private" data-url="apollographql/apollo-client#9323" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/9323/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/9323">#9323</a></li> <li>Add array examples to reactive variable documentation by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/larrymyers/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/larrymyers">@ larrymyers</a> in <a aria-label="Pull request #10235" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424932503" data-permission-text="Title is private" data-url="apollographql/apollo-client#10235" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10235/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10235">#10235</a></li> <li>Update CHANGELOG with changes from <a aria-label="Pull request #10235" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424932503" data-permission-text="Title is private" data-url="apollographql/apollo-client#10235" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10235/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10235">#10235</a> by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bignimbus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/bignimbus">@ bignimbus</a> in <a aria-label="Pull request #10302" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1458514445" data-permission-text="Title is private" data-url="apollographql/apollo-client#10302" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10302/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10302">#10302</a></li> <li>docs: Update subscribeToMore example to use React hooks by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/trevorblades/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/trevorblades">@ trevorblades</a> in <a aria-label="Pull request #10309" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1460280026" data-permission-text="Title is private" data-url="apollographql/apollo-client#10309" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10309/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10309">#10309</a></li> <li>export separate <code>ModifierUtility</code> type by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KeithGillette/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/KeithGillette">@ KeithGillette</a> in <a aria-label="Pull request #7133" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="716972371" data-permission-text="Title is private" data-url="apollographql/apollo-client#7133" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/7133/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/7133">#7133</a></li> <li>Changelog and docs for preserveHeaderCase by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/MrDoomBringer/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/MrDoomBringer">@ MrDoomBringer</a> in <a aria-label="Pull request #10111" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1378274068" data-permission-text="Title is private" data-url="apollographql/apollo-client#10111" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10111/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10111">#10111</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chris110408/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/chris110408">@ chris110408</a> made their first contribution in <a aria-label="Pull request #10258" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1433824820" data-permission-text="Title is private" data-url="apollographql/apollo-client#10258" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10258/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10258">#10258</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ctesniere/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/ctesniere">@ ctesniere</a> made their first contribution in <a aria-label="Pull request #10275" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1444506371" data-permission-text="Title is private" data-url="apollographql/apollo-client#10275" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10275/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10275">#10275</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/charlypoly/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/charlypoly">@ charlypoly</a> made their first contribution in <a aria-label="Pull request #10173" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1404287170" data-permission-text="Title is private" data-url="apollographql/apollo-client#10173" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10173/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10173">#10173</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/igrlk/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/igrlk">@ igrlk</a> made their first contribution in <a aria-label="Pull request #10223" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1419515761" data-permission-text="Title is private" data-url="apollographql/apollo-client#10223" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10223/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10223">#10223</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronadamsCA/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/aaronadamsCA">@ aaronadamsCA</a> made their first contribution in <a aria-label="Pull request #9323" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1106740822" data-permission-text="Title is private" data-url="apollographql/apollo-client#9323" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/9323/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/9323">#9323</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/larrymyers/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/larrymyers">@ larrymyers</a> made their first contribution in <a aria-label="Pull request #10235" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424932503" data-permission-text="Title is private" data-url="apollographql/apollo-client#10235" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10235/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10235">#10235</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KeithGillette/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/KeithGillette">@ KeithGillette</a> made their first contribution in <a aria-label="Pull request #7133" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="716972371" data-permission-text="Title is private" data-url="apollographql/apollo-client#7133" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/7133/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/7133">#7133</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://snyk.io/redirect/github/apollographql/apollo-client/compare/v3.7.1...v3.7.2"><tt>v3.7.1...v3.7.2</tt></a></p> </li> <li> <b>3.7.1</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.1">2022-10-20</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.1"> Read more </a> </li> <li> <b>3.7.0</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.0">2022-09-30</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.0"> Read more </a> </li> <li> <b>3.7.0-rc.0</b> - 2022-09-21 </li> <li> <b>3.7.0-beta.8</b> - 2022-09-21 </li> <li> <b>3.7.0-beta.7</b> - 2022-09-08 </li> <li> <b>3.7.0-beta.6</b> - 2022-06-27 </li> <li> <b>3.7.0-beta.5</b> - 2022-06-10 </li> <li> <b>3.7.0-beta.4</b> - 2022-06-10 </li> <li> <b>3.7.0-beta.3</b> - 2022-06-07 </li> <li> <b>3.7.0-beta.2</b> - 2022-06-07 </li> <li> <b>3.7.0-beta.1</b> - 2022-05-26 </li> <li> <b>3.7.0-beta.0</b> - 2022-05-25 </li> <li> <b>3.7.0-alpha.6</b> - 2022-05-19 </li> <li> <b>3.7.0-alpha.5</b> - 2022-05-16 </li> <li> <b>3.7.0-alpha.4</b> - 2022-05-13 </li> <li> <b>3.7.0-alpha.3</b> - 2022-05-09 </li> <li> <b>3.7.0-alpha.2</b> - 2022-05-03 </li> <li> <b>3.7.0-alpha.1</b> - 2022-05-03 </li> <li> <b>3.7.0-alpha.0</b> - 2022-04-27 </li> <li> <b>3.6.10</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.10">2022-09-29</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.10"> Read more </a> </li> <li> <b>3.6.9</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.9">2022-06-21</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.9"> Read more </a> </li> <li> <b>3.6.8</b> - 2022-06-10 </li> <li> <b>3.6.7</b> - 2022-06-10 </li> <li> <b>3.6.6</b> - 2022-05-26 </li> <li> <b>3.6.5</b> - 2022-05-23 </li> <li> <b>3.6.4</b> - 2022-05-16 </li> <li> <b>3.6.3</b> - 2022-05-05 </li> <li> <b>3.6.2</b> - 2022-05-03 </li> <li> <b>3.6.1</b> - 2022-04-28 </li> <li> <b>3.6.0</b> - 2022-04-26 </li> <li> <b>3.6.0-rc.1</b> - 2022-04-19 </li> <li> <b>3.6.0-rc.0</b> - 2022-04-18 </li> <li> <b>3.6.0-beta.13</b> - 2022-04-14 </li> <li> <b>3.6.0-beta.12</b> - 2022-04-11 </li> <li> <b>3.6.0-beta.11</b> - 2022-04-05 </li> <li> <b>3.6.0-beta.10</b> - 2022-03-29 </li> <li> <b>3.6.0-beta.9</b> - 2022-03-10 </li> <li> <b>3.6.0-beta.8</b> - 2022-03-10 </li> <li> <b>3.6.0-beta.7</b> - 2022-03-10 </li> <li> <b>3.6.0-beta.6</b> - 2022-02-15 </li> <li> <b>3.6.0-beta.5</b> - 2022-02-04 </li> <li> <b>3.6.0-beta.4</b> - 2022-02-03 </li> <li> <b>3.6.0-beta.3</b> - 2021-11-23 </li> <li> <b>3.6.0-beta.2</b> - 2021-11-22 </li> <li> <b>3.6.0-beta.1</b> - 2021-11-16 </li> <li> <b>3.6.0-beta.0</b> - 2021-11-16 </li> <li> <b>3.5.10</b> - 2022-02-24 </li> </ul> from <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases">@apollo/client GitHub release notes</a> </details> </details> <details> <summary><b>Commit messages</b></summary> </br> <details> <summary>Package name: <b>@apollo/client</b></summary> <ul> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/2f79f03f1239b0496ddda938bf74a1b0ef97966e">2f79f03</a> Version Packages (#10341)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/b823f6c679f28fae1f5c1fb3f9e7545a2cb5c987">b823f6c</a> Fix Changesets release workflow from default branch (#10370)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/46b58e9762abbffaee5c9abda8e309bea6d7a785">46b58e9</a> Fixes support for defer in mutations (#10368)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/52d5af26129bcec6bd51b45511b8349695219c47">52d5af2</a> docs/updating-subscription-library-anchor-link (#10320)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/1398e42854590c685a63862534990e26d5013d16">1398e42</a> chore(deps): update actions/setup-node action to v3 (#10352)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/6739721ea04a66d94be6ca2ae956e95997925201">6739721</a> chore(deps): update mad9000/actions-find-and-replace-string action to v3 (#10354)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/b3e4574942afffd03cc8a383b9834bbb723720bf">b3e4574</a> Update static-typing.md (#10358)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/f4f00b6d01b33f08dad9992609e30ddf4011e701">f4f00b6</a> chore(deps): update dependency mocha to v10.2.0</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/0daf29fc02dba3e4ba53f36a8b412abcdbe79329">0daf29f</a> chore(deps): update dependency @ types/node to v18.11.13</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/ac7696ee7478cab6566c93430400a1ea19b2c7ad">ac7696e</a> chore(deps): update dependency recast to v0.22.0</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/543d687fe7b38726576821d7e671945549f6e49b">543d687</a> chore(deps): update dependency @ types/node to v18.11.12</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/14857a5b076a1a385a807620d4a3934fff51c0ea">14857a5</a> chore(deps): update dependency @ types/jest to v29.2.4</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7819c51ff6a0837e94cc0be6739a70fadf36eada">7819c51</a> chore(deps): update dependency @ graphql-tools/schema to v9.0.12</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/c02a17b30f96fe33649c1fad716cd9482d353868">c02a17b</a> chore(changesets): run changeset-version in prerelease workflow</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/6cf377f29b906e1eabfd2993107a0041db78ca4b">6cf377f</a> Changesets updates (#10342)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7d923939dd7e6db7d69f04f598c666104b076e78">7d92393</a> Better handle cached data with deferred queries (#10334)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/f982a8d3b0571cf841c7068bd374c8ee44d21492">f982a8d</a> Introduce Changesets (#10337)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7bff5ac3d9d4f441ff1cc70b6fd6ae60b1b7cfb2">7bff5ac</a> Roadmap updates (#10336)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/21c7d26220ce82a9856cd203bf1aa5ff1327b192">21c7d26</a> Exclude "cursor" argument to prevent separate cache instance (#10144)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/9f8fae1055880c8ec173e631e6009e5308376f34">9f8fae1</a> chore(deps): update dependency jest-junit to v15 (#10301)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/a55770437f110ae85cd1d8d1fb47a8e6de022c09">a557704</a> chore(deps): update dependency @ types/node to v18 (#9840)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/ce866132e2be18a989f8e0a78648e5a6d5abc25e">ce86613</a> Bump @ apollo/client npm version to 3.7.2.</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/365fcea4ad1a9c3682f91fc315c80e828edf3c41">365fcea</a> chore: update CHANGELOG in preparation for 3.7.2 (#10335)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/39d83c9dae30f32a0b2634a50763a87d369ff7df">39d83c9</a> chore(deps): update dependency @ types/react to v18.0.26</li> </ul> <a href="https://snyk.io/redirect/github/apollographql/apollo-client/compare/6ca525a6e2e520ea67cfbfd8df0ac48988b4abe4...2f79f03f1239b0496ddda938bf74a1b0ef97966e">Compare</a> </details> </details> <hr/> **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiIxNWZmNzVhNC03MTRhLTQ4ZTQtOGZlYS1kNTE2ZmVkMzBhNjkiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6IjE1ZmY3NWE0LTcxNGEtNDhlNC04ZmVhLWQ1MTZmZWQzMGE2OSJ9fQ==" width="0" height="0"/> 🧐 [View latest project report](https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872?utm_source=github&utm_medium=referral&page=upgrade-pr) 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr) 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872/settings/integration?pkg=@apollo/client&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades) <!--- (snyk:metadata:{"prId":"15ff75a4-714a-48e4-8fea-d516fed30a69","prPublicId":"15ff75a4-714a-48e4-8fea-d516fed30a69","dependencies":[{"name":"@apollo/client","from":"3.5.10","to":"3.7.3"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872?utm_source=github&utm_medium=referral&page=upgrade-pr","projectPublicId":"9043c51f-3f0d-45c6-8455-b658274f2872","env":"prod","prType":"upgrade","vulns":["SNYK-JS-LOADERUTILS-3043105","SNYK-JS-LOADERUTILS-3043105","SNYK-JS-EJS-2803307","SNYK-JS-DECODEURICOMPONENT-3149970","SNYK-JS-ASYNC-2441827","SNYK-JS-TERSER-2806366","SNYK-JS-NWSAPI-2841516","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-JSON5-3182856","SNYK-JS-JSON5-3182856"],"issuesToFix":[{"issueId":"SNYK-JS-LOADERUTILS-3043105","severity":"high","title":"Prototype Pollution","exploitMaturity":"no-known-exploit","priorityScore":375,"priorityScoreFactors":[{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-LOADERUTILS-3043105","severity":"high","title":"Prototype Pollution","exploitMaturity":"no-known-exploit","priorityScore":375,"priorityScoreFactors":[{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-EJS-2803307","severity":"high","title":"Remote Code Execution (RCE)","exploitMaturity":"proof-of-concept","priorityScore":512,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"8.1","score":405}]},{"issueId":"SNYK-JS-DECODEURICOMPONENT-3149970","severity":"high","title":"Denial of Service (DoS)","exploitMaturity":"proof-of-concept","priorityScore":482,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-ASYNC-2441827","severity":"high","title":"Prototype Pollution","exploitMaturity":"proof-of-concept","priorityScore":482,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-TERSER-2806366","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-NWSAPI-2841516","severity":"medium","title":"Denial of Service (DoS)","exploitMaturity":"no-known-exploit","priorityScore":310,"priorityScoreFactors":[{"type":"cvssScore","label":"6.2","score":310}]},{"issueId":"SNYK-JS-LOADERUTILS-3105943","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-LOADERUTILS-3042992","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-LOADERUTILS-3105943","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-LOADERUTILS-3042992","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-JSON5-3182856","severity":"medium","title":"Prototype Pollution","exploitMaturity":"proof-of-concept","priorityScore":427,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"6.4","score":320}]},{"issueId":"SNYK-JS-JSON5-3182856","severity":"medium","title":"Prototype Pollution","exploitMaturity":"proof-of-concept","priorityScore":427,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"6.4","score":320}]}],"upgrade":["SNYK-JS-LOADERUTILS-3043105","SNYK-JS-LOADERUTILS-3043105","SNYK-JS-EJS-2803307","SNYK-JS-DECODEURICOMPONENT-3149970","SNYK-JS-ASYNC-2441827","SNYK-JS-TERSER-2806366","SNYK-JS-NWSAPI-2841516","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-JSON5-3182856","SNYK-JS-JSON5-3182856"],"upgradeInfo":{"versionsDiff":48,"publishedDate":"2022-12-15T18:42:41.897Z"},"templateVariants":["priorityScore"],"hasFixes":true,"isMajorUpgrade":false,"isBreakingChange":false,"priorityScoreList":[375,375,512,482,482,265,310,265,265,265,265,427,427]}) ---> Co-authored-by: snyk-bot <[email protected]>
Hi Apollo team 👋🏼
I am Charly, a member of The Guild and current lead of the GraphQL Code Generator project.
As we recently collaborated on AS4 documentation update on Types Generation, we thought that we could also help in updating AS3 (and upcoming AS4) documentation regarding best practices when using TypeScript with GraphQL.
GraphQL Code Generator rapidly evolved in the last months and now provides a way smoother way to get typed queries, mutations, and subscriptions, that no longer rely on generated types or hooks.
Example:
Please consider the following changes as a starting draft, I would love to work together in providing documentation that recommends the best developer experience for all GraphQL developers out there.
N.B notes/questions: