build(deps): bump the npm_and_yarn group across 1 directory with 7 updates #60

dependabot · 2024-03-17T07:27:24Z

Bumps the npm_and_yarn group with 6 updates in the / directory:

Package	From	To
@apollo/server	`4.3.0`	`4.9.3`
mongodb	`4.4.1`	`4.17.0`
mongoose	`6.6.0`	`6.11.3`
nodemailer	`6.8.0`	`6.9.9`
sharp	`0.30.7`	`0.32.6`
semver	`6.3.0`	`6.3.1`

Updates @apollo/server from 4.3.0 to 4.9.3

Release notes

Sourced from @apollo/server's releases.

@apollo/server-integration-testsuite@4.9.3

Patch Changes

Updated dependencies [a1c725eaf]:

@apollo/server@4.9.3

@apollo/server@4.9.3

Patch Changes

a1c725eaf Thanks @trevor-scheer! - Ensure API keys are valid header values on startup

Apollo Server previously performed no sanitization or validation of API keys on startup. In the case that an API key was provided which contained characters that are invalid as header values, Apollo Server could inadvertently log the API key in cleartext.

This only affected users who:

Provide an API key with characters that are invalid as header values

Use either schema or usage reporting

Use the default fetcher provided by Apollo Server or configure their own node-fetch fetcher

Apollo Server now trims whitespace from API keys and validates that they are valid header values. If an invalid API key is provided, Apollo Server will throw an error on startup.

For more details, see the security advisory: GHSA-j5g3-5c8r-7qfx

@apollo/server-integration-testsuite@4.9.2

Patch Changes

Updated dependencies [62e7d940d]:

@apollo/server@4.9.2

@apollo/server@4.9.2

Patch Changes

#7699 62e7d940d Thanks @trevor-scheer! - Fix error path attachment for list items

Previously, when errors occurred while resolving a list item, the trace builder would fail to place the error at the correct path and just default to the root node with a warning message:

Could not find node with path x.y.1, defaulting to put errors on root node.

This change places these errors at their correct paths and removes the log.

@apollo/server-integration-testsuite@4.9.1

Patch Changes

Updated dependencies [ebfde0007]:

@apollo/server@4.9.1

@apollo/server@4.9.1

Patch Changes

... (truncated)

Changelog

Sourced from @apollo/server's changelog.

4.9.3

Patch Changes

a1c725eaf Thanks @trevor-scheer! - Ensure API keys are valid header values on startup

Apollo Server previously performed no sanitization or validation of API keys on startup. In the case that an API key was provided which contained characters that are invalid as header values, Apollo Server could inadvertently log the API key in cleartext.

This only affected users who:

Provide an API key with characters that are invalid as header values

Use either schema or usage reporting

Use the default fetcher provided by Apollo Server or configure their own node-fetch fetcher

Apollo Server now trims whitespace from API keys and validates that they are valid header values. If an invalid API key is provided, Apollo Server will throw an error on startup.

For more details, see the security advisory: GHSA-j5g3-5c8r-7qfx

4.9.2

Patch Changes

#7699 62e7d940d Thanks @trevor-scheer! - Fix error path attachment for list items

Previously, when errors occurred while resolving a list item, the trace builder would fail to place the error at the correct path and just default to the root node with a warning message:

Could not find node with path x.y.1, defaulting to put errors on root node.

This change places these errors at their correct paths and removes the log.

4.9.1

Patch Changes

#7672 ebfde0007 Thanks @trevor-scheer! - Add missing nonce on script tag for non-embedded landing page

4.9.0

Minor Changes
#7617 4ff81ca50 Thanks @trevor-scheer! - Introduce new ApolloServerPluginSubscriptionCallback plugin. This plugin implements the subscription callback protocol which is used by Apollo Router. This feature implements subscriptions over HTTP via a callback URL which Apollo Router registers with Apollo Server. This feature is currently in preview and is subject to change.

You can enable callback subscriptions like so:
import { ApolloServerPluginSubscriptionCallback } from "@apollo/server/plugin/subscriptionCallback";
import { ApolloServer } from "@apollo/server";
const server = new ApolloServer({

... (truncated)

Commits

a9d288a Version Packages (#7712)
2c8106c Merge pull request from GHSA-j5g3-5c8r-7qfx
d6ce603 create README for technical details of landing pages (#7671)
e8c00a7 Version Packages (#7702)
62b941a chore(deps): update all non-major dependencies (#7693)
62e7d94 Fix trace placement for errors occurring in lists (#7699)
b72485a chore: update documentation to include install commands for typescript (#7691)
a48e8e0 Version Packages (#7673)
ebfde00 Add missing nonce to script tag (#7672)
1235611 Version Packages (#7661)
Additional commits viewable in compare view

Updates mongodb from 4.4.1 to 4.17.0

Release notes

Sourced from mongodb's releases.

v4.17.0

4.17.0 (2023-08-17)

The MongoDB Node.js team is pleased to announce version 4.17.0 of the mongodb package!

Release Notes

mongodb-js/saslprep is now installed by default

Until v6, the driver included the saslprep package as an optional dependency for SCRAM-SHA-256 authentication. saslprep breaks when bundled with webpack because it attempted to read a file relative to the package location and consequently the driver would throw errors when using SCRAM-SHA-256 if it were bundled.

The driver now depends on mongodb-js/saslprep, a fork of saslprep that can be bundled with webpack because it includes the necessary saslprep data in memory upon loading. This will be installed by default but will only be used if SCRAM-SHA-256 authentication is used.

Remove credential availability on ConnectionPoolCreatedEvent

In order to avoid mistakenly printing credentials the ConnectionPoolCreatedEvent will replace the credentials option with an empty object. The credentials are still accessble via MongoClient options: client.options.credentials.

Features

NODE-5272: do not create or drop ecc collections (#3678) (d26ad61)

NODE-5398: use mongodb-js/saslprep instead of saslprep (#3820) (5244711)

Bug Fixes

NODE-5262: AWS Lambda metadata detection logic is too permissive (#3683) (c0c3d99)

NODE-5311: construct error messages for AggregateErrors in Node16+ (#3683) (98b7bdf)

NODE-5316: prevent parallel topology creation in MongoClient.connect (#3696) (e13038d)

Thank you @clemclx for contributing this fix! 🎉

NODE-5356: prevent scram auth from throwing TypeError if saslprep is not a function (#3732) (2d028af)

NODE-5536: remove credentials from ConnectionPoolCreatedEvent options (#3812) (2910dca)

Documentation

Reference

API

Changelog

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

v4.16.0

The MongoDB Node.js team is pleased to announce version 4.16.0 of the mongodb package!

... (truncated)

Changelog

Sourced from mongodb's changelog.

4.17.0 (2023-08-17)

Features

NODE-5272: do not create or drop ecc collections (#3678) (d26ad61)

NODE-5398: use mongodb-js/saslprep instead of saslprep (#3820) (5244711)

Bug Fixes

NODE-5262: AWS Lambda metadata detection logic is too permissive (#3683) (c0c3d99)

NODE-5311: construct error messages for AggregateErrors in Node16+ (#3683) (98b7bdf)

NODE-5316: prevent parallel topology creation in MongoClient.connect (#3696) (e13038d)

NODE-5356: prevent scram auth from throwing TypeError if saslprep is not a function (#3732) (2d028af)

NODE-5536: remove credentials from ConnectionPoolCreatedEvent options (#3812) (2910dca)

4.16.0 (2023-04-18)

Features

NODE-5159: add FaaS env information to client metadata (#3639) (e0b20f1)

NODE-5199: add alternative runtime detection to client metadata (#3647) (fba16ad)

Bug Fixes

NODE-5161: metadata duplication in handshake (#3628) (b790142)

NODE-5200: relax SRV record validation to account for a dot suffix (#3640) (4272c43)

4.15.0 (2023-04-04)

Features

NODE-5054: add AssumeRoleWithWebIdentity support to 4x driver (#3566) (8a8c386)

Bug Fixes

NODE-5097: set timeout on write and reset on message (#3590) (2d3576b)

4.14.0 (2023-02-07)

Features

NODE-4992: Deprecate methods and options that reference legacy logger (#3532) (6c94b4a)

... (truncated)

Commits

c83a801 chore(4.x): release 4.17.0 [skip-ci] (#3763)
1b59955 chore: update release automation scripts 4.x (#3824)
5244711 feat(NODE-5398): use mongodb-js/saslprep instead of saslprep (#3820)
2910dca fix(NODE-5536): remove credentials from ConnectionPoolCreatedEvent options (#...
0c1b654 chore(NODE-5400): add @octokit/core as a devDep (#3750)
4adff37 chore(NODE-5382): backport release automation scripts (#3747)
2d028af fix(NODE-5356): prevent scram auth from throwing TypeError if saslprep is not...
0e1afc0 ci(Node 5335): clean up instance profile from instance after CI runs (#3719)
7f5b334 ci(NODE-5334): install npm to node_artifacts directory in CI (#3709)
e13038d fix(NODE-5316): prevent parallel topology creation in MongoClient.connect (#3...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by dbx-node, a new releaser for mongodb since your current version.

Updates graphql from 14.7.0 to 16.6.0

Release notes

Sourced from graphql's releases.

v16.6.0 (2022-08-16)

New Feature 🚀

#3645 createSourceEventStream: introduce named arguments and deprecate positional arguments (@yaacovCR)

#3702 parser: limit maximum number of tokens (@IvanGoncharov)

Bug Fix 🐞

#3686 Workaround for codesandbox having bug with TS enums (@IvanGoncharov)

#3701 Parser: allow 'options' to explicitly accept undefined (@IvanGoncharov)

Committers: 2

Ivan Goncharov(@IvanGoncharov)

Yaacov Rydzinski (@yaacovCR)

v16.5.0 (2022-05-09)

New Feature 🚀

#3565 Expose GraphQLErrorOptions type (#3554) (@IvanGoncharov)

Committers: 1

Ivan Goncharov(@IvanGoncharov)

v16.4.0 (2022-04-25)

New Feature 🚀

#3465 refactor: use object for GraphQLError constructor (@n1ru4l)

#3487 feat: expose getArgumentValues (@saihaj)

Bug Fix 🐞

#3514 GraphQLError: switch constructor overload order (@glasser)

Docs 📝

#3505 correct outdated documentation (@Ginhing)

#3512 Update documentation on deprecated formatError(..) (@dwelch2344)

Polish 💅

#3522 tests(execution): add missing new lines (@IvanGoncharov)

#3524 tests(printSchema): test omitting schema of common names (@IvanGoncharov)

#3537 ESLint: disallow using node globals in src/tests (@IvanGoncharov)

Internal 🏠

... (truncated)

Commits

3a51eca 16.6.0
f0a0a4d parser: limit maximum number of tokens (#3702)
6c6508b Parser: allow 'options' to explicitly accept undefined (#3701)
af8221a Workaround for codesandbox having bug with TS enums (#3686)
59a73d6 createSourceEventStream: introduce named arguments and deprecate positional a...
1f8ba95 16.5.0
1112b4d Expose GraphQLErrorOptions type (#3554) (#3565)
23dba4e 16.4.0
af64b67 pass valid value to codecov config (#3543)
16503cd github-actions-bot: fix reply on commands (#3538)
Additional commits viewable in compare view

Updates mongoose from 6.6.0 to 6.11.3

Release notes

Sourced from mongoose's releases.

6.10.1 / 2023-03-03

fix: avoid removing empty query filters in $and and $or #13086 #12898

fix(schematype): fixed validation for required UUID field #13018 lpizzinidev

fix(types): add missing Paths generic param to Model.populate() #13070

docs(migrating_to_6): added info about removal of reconnectTries and reconnectInterval options #13083 lpizzinidev

docs: fix code in headers for migrating_to_5 #13077 hasezoey

docs: backport misc documentation changes into 6.x #13091 hasezoey

6.10.0 / 2023-02-22

feat: upgrade to mongodb driver 4.14.0 #13036

feat: added Schema.prototype.omit() function #12939 #12931 lpizzinidev

feat(index): added createInitialConnection option to Mongoose constructor #13021 #12965 lpizzinidev

6.9.3 / 2023-02-22

fix(connection): delay calculating autoCreate and autoIndex until after initial connection established #13007 #12940 lpizzinidev

fix(discriminator): allows update doc with discriminatorKey #13056 #13055 abarriel

fix(query): avoid sending unnecessary empty projection to MongoDB server #13059 #13050

fix(model): avoid sending null session option with document operations #13053 #13052 lpizzinidev

fix(types): use MergeTypes for type overrides in HydratedDocument #13066 #13040

docs(middleware): list validate as a potential query middleware #13057 #12680

docs(getters-setters): explain that getters do not run by default on toJSON() #13058 #13049

docs: refactor docs generation scripts #13044 hasezoey

6.9.2 / 2023-02-16

fix(model): fixed post('save') callback parameter #13030 #13026 lpizzinidev

fix(UUID): added null check to prevent error on binaryToString conversion #13034 #13032 #13029 lpizzinidev Freezystem

fix(query): revert breaking changes introduced by #12797 #12999 lpizzinidev

fix(document): make array $shift() use $pop instead of overwriting array #13004

docs: update & remove old links #13019 hasezoey

docs(middleware): describe how to access model from document middleware #13031 AxeOfMen

docs: update broken & outdated links #13001 hasezoey

chore: change deno tests to also use MMS #12918 hasezoey

6.9.1 / 2023-02-06

fix(document): isModified should not be triggered when setting a nested boolean to the same value as previously #12994 lpizzinidev

fix(document): save newly set defaults underneath single nested subdocuments #13002 #12905

fix(update): handle custom discriminator model name when casting update #12947 wassil

fix(connection): handles unique autoincrement ID for connections #12990 lpizzinidev

fix(types): fix type of options of Model.aggregate #12933 ghost91-

fix(types): fix "near" aggregation operator input type #12954 Jokero

fix(types): add missing Top operator to AccumulatorOperator type declaration #12952 lpizzinidev

docs(transactions): added example for Connection.transaction() method #12943 #12934 lpizzinidev

docs(populate): fix out of date comment referencing onModel property #13000

docs(transactions): fix typo in transactions.md #12995 Parth86

... (truncated)

Changelog

Sourced from mongoose's changelog.

6.11.3 / 2023-07-11

fix: avoid prototype pollution on init

fix(schema): correctly handle uuids with populate() #13317 #13595

7.3.3 / 2023-07-10

fix: avoid prototype pollution on init

fix(document): clean up all array subdocument modified paths on save() #13589 #13582

types: avoid unnecessary MergeType<> if TOverrides not set, clean up statics and insertMany() type issues #13577 #13529

7.3.2 / 2023-07-06

fix(model): avoid TypeError if insertMany() fails with error that does not have writeErrors property #13579 #13531

fix(query): convert findOneAndUpdate to findOneAndReplace when overwrite set for backwards compat with Mongoose 6 #13572 #13550

fix(query): throw readable error when executing a Query instance without an associated model #13571 #13570

types: support mongoose.Schema.ObjectId as alias for mongoose.Schema.Types.ObjectId #13543 #13534

docs(connections): clarify that socketTimeoutMS now defaults to 0 #13576 #13537

docs(migrating_to_7): add mapReduce() removal to migration guide #13568 #13548

docs(schemas): fix typo in schemas.md #13540 Metehan-Altuntekin

7.3.1 / 2023-06-21

fix(query): respect query-level strict option on findOneAndReplace() #13516 #13507

docs(connections): expand docs on serverSelectionTimeoutMS #13533 #12967

docs: add example of accessing save options in pre save #13498

docs(connections+faq): add info on localhost vs 127.0.0.1

docs(SchemaType): validate members are validator & message (not msg) #13521 lorand-horvath

7.3.0 / 2023-06-14

feat: upgrade mongodb -> 5.6.0 #13455 lorand-horvath

feat(aggregate): add Aggregate.prototype.finally() to be consistent with Promise API for TypeScript #13509

feat(schema): support selecting subset of fields to apply optimistic concurrency to #13506 #10591

feat(model): add ordered option to Model.create() #13472 #4038

feat(schema): consistently add .get() function to all SchemaType classes

feat(populate): pass virtual to match function to allow merging match options #13477 #12443

types: allow overwriting Paths in select() to tell TypeScript which fields are projected #13478 #13224

types(schema): add validateModifiedOnly as schema option #13503 #10153

docs: add note about validateModifiedOnly as a schema option #13503 #10153

docs(migrating_to_7): update migrating_to_7.md to include Model.countDocuments #13508 Climax777

docs(further_reading): remove style for "img" hasezoey

7.2.4 / 2023-06-12

fix(query): handle non-string discriminator key values in query #13496 #13492

7.2.3 / 2023-06-09

fix(model): ignore falsy last argument to create() for backwards compatibility #13493 #13491 #13487 MohOraby

... (truncated)

Commits

e9eb8ab chore: release 6.11.3
688da8f test: fix flakey tests, remove test for #9597 because it affects global state...
4f264a8 test: fix tests re: #13317
9616af7 fix(schema): correctly handle uuids with populate()
305ce4f fix: avoid prototype pollution on init
35e59eb docs: link to migrating to 6 in 6.x docs
a28933e chore: release 6.11.2
3a6b0dd chore: use deno v1.34 in test for MMS HTTP issues
f7c6d3e Merge pull request #13476 from Automattic/vkarpov15/gh-13453
5552107 fix(cursor): allow find middleware to modify query cursor options
Additional commits viewable in compare view

Updates nodemailer from 6.8.0 to 6.9.9

Release notes

Sourced from nodemailer's releases.

v6.9.9

6.9.9 (2024-02-01)

Bug Fixes

security: Fix issues described in GHSA-9h6g-pr28-7cqp. Do not use eternal matching pattern if only a few occurences are expected (dd8f5e8)

tests: Use native node test runner, added code coverage support, removed grunt (#1604) (be45c1b)

v6.9.8

6.9.8 (2023-12-30)

Bug Fixes

punycode: do not use native punycode module (b4d0e0c)

v6.9.7

6.9.7 (2023-10-22)

Bug Fixes

customAuth: Do not require user and pass to be set for custom authentication schemes (fixes #1584) (41d482c)

v6.9.6

6.9.6 (2023-10-09)

Bug Fixes

inline: Use 'inline' as the default Content Dispostion value for embedded images (db32c93)

tests: Removed Node v12 from test matrix as it is not compatible with the test framework anymore (7fe0a60)

v6.9.5

6.9.5 (2023-09-06)

Bug Fixes

license: Updated license year (da4744e)

Changelog

Sourced from nodemailer's changelog.

6.9.9 (2024-02-01)

Bug Fixes

security: Fix issues described in GHSA-9h6g-pr28-7cqp. Do not use eternal matching pattern if only a few occurences are expected (dd8f5e8)

tests: Use native node test runner, added code coverage support, removed grunt (#1604) (be45c1b)

6.9.8 (2023-12-30)

Bug Fixes

punycode: do not use native punycode module (b4d0e0c)

6.9.7 (2023-10-22)

Bug Fixes

customAuth: Do not require user and pass to be set for custom authentication schemes (fixes #1584) (41d482c)

6.9.6 (2023-10-09)

Bug Fixes

inline: Use 'inline' as the default Content Dispostion value for embedded images (db32c93)

tests: Removed Node v12 from test matrix as it is not compatible with the test framework anymore (7fe0a60)

6.9.5 (2023-09-06)

Bug Fixes

license: Updated license year (da4744e)

6.9.4 2023-07-19

Renamed SendinBlue to Brevo

6.9.3 2023-05-29

Specified license identifier (was defined as MIT, actual value MIT-0)

If SMTP server disconnects with a message, process it and include as part of the response error

6.9.2 2023-05-11

Fix uncaught exception on invalid attachment content payload

... (truncated)

Commits

5a2e10f chore(master): release 6.9.9 [skip-ci] (#1606)
dd8f5e8 fix(security): Fix issues described in GHSA-9h6g-pr28-7cqp. Do not use eterna...
2c2b46a chore: do not use caret in version specifier
be45c1b fix(tests): Use native node test runner, added code coverage support, removed...
4233f6f chore(master): release 6.9.8 [skip-ci] (#1605)
09d502f chore: removed double file
b4d0e0c fix(punycode): do not use native punycode module
8376c02 Test new github notice syntax for README
bc46a3b Updated stale github action
78bdaf8 chore: remove redundant AWS SDK for JavaScript v2 (#1593)
Additional commits viewable in compare view

Updates sharp from 0.30.7 to 0.32.6

Changelog

Sourced from sharp's changelog.

v0.32.6 - 18th September 2023

Upgrade to libvips v8.14.5 for upstream bug fixes.

Ensure composite tile images are fully decoded (regression in 0.32.0). #3767

Ensure withMetadata can add ICC profiles to RGB16 output. #3773

Ensure withMetadata does not reduce 16-bit images to 8-bit (regression in 0.32.5). #3773

TypeScript: Add definitions for block and unblock. #3799 @ldrick

v0.32.5 - 15th August 2023

Upgrade to libvips v8.14.4 for upstream bug fixes.

TypeScript: Add missing WebpPresetEnum to definitions. #3748 @pilotso11

Ensure compilation using musl v1.2.4. #3755 @kleisauke

Ensure resize with a fit of inside respects 90/270 degree rotation. #3756

TypeScript: Ensure minSize property of WebpOptions is boolean. #3758 @sho-xizz

Ensure withMetadata adds default sRGB profile. #3761

v0.32.4 - 21st July 2023

Upgrade to libvips v8.14.3 for upstream bug fixes.

Expose ability to (un)block low-level libvips operations by name.

Prebuilt binaries: restore support for tile-based output. #3581

v0.32.3 - 14th July 2023

... (truncated)

Commits

eefaa99 Release v0.32.6
dbce6fa Upgrade to libvips v8.14.5
af0fcb3 Docs: changelog for #3799
c6f54e5 Bump devDeps
846563e TypeScript: add definitions for block and unblock (#3799)
9c217ab Ensure withMetadata can add RGB16 profiles #3773
e7381e5 Alternative fix for 4340d60, uses existing StaySequential
4340d60 Ensure composite tile images fully decoded #3767
7f64d46 Docs: add missing returns property to raw
67e927b Docs: ensure all functions include method signature #3777
Additional commits viewable in compare view

Updates semver from 6.3.0 to 6.3.1

Release notes

Sourced from semver's releases.

v6.3.1

6.3.1 (2023-07-10)

Bug Fixes

928e56d #591 better handling of whitespace (#591) (@lukekarrys, @joaomoreno, @nicolo-ribaudo)

Changelog

Sourced from semver's changelog.

6.3.1 (2023-07-10)

Bug Fixes

928e56d #591 better handling of whitespace (#591) (@lukekarrys, @joaomoreno, @nicolo-ribaudo)

6.2.0

Coerce numbers to strings when passed to semver.coerce()

Add rtl option to coerce from right to left

6.1.3

Handle X-ranges properly in includePrerelease mode

6.1.2

Do not throw when testing invalid version strings

6.1.1

Add options support for semver.coerce()

Handle undefined version passed to Range.test

6.1.0

Add semver.compareBuild function

Support * in semver.intersects

6.0

Fix intersects logic.

This is technically a bug fix, but since it is also a change to behavior that may require users updating their code, it is marked as a major version increment.

5.7

Add minVersion method

5.6

Move boolean loose param to an options object, with backwards-compatibility protection.

Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

... (truncated)

Commits

44d27bc chore: release 6.3.1
928e56d fix: better handling of whitespace (#591)
39f6326 chore: @npmcli/template-oss@4.16.0
See full diff in compare view

Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by ...

Description has been truncated

…dates Bumps the npm_and_yarn group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@apollo/server](https://github.com/apollographql/apollo-server/tree/HEAD/packages/server) | `4.3.0` | `4.9.3` | | [mongodb](https://github.com/mongodb/node-mongodb-native) | `4.4.1` | `4.17.0` | | [mongoose](https://github.com/Automattic/mongoose) | `6.6.0` | `6.11.3` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `6.8.0` | `6.9.9` | | [sharp](https://github.com/lovell/sharp) | `0.30.7` | `0.32.6` | | [semver](https://github.com/npm/node-semver) | `6.3.0` | `6.3.1` | Updates `@apollo/server` from 4.3.0 to 4.9.3 - [Release notes](https://github.com/apollographql/apollo-server/releases) - [Changelog](https://github.com/apollographql/apollo-server/blob/main/packages/server/CHANGELOG.md) - [Commits](https://github.com/apollographql/apollo-server/commits/@apollo/[email protected]/packages/server) Updates `mongodb` from 4.4.1 to 4.17.0 - [Release notes](https://github.com/mongodb/node-mongodb-native/releases) - [Changelog](https://github.com/mongodb/node-mongodb-native/blob/v4.17.0/HISTORY.md) - [Commits](mongodb/node-mongodb-native@v4.4.1...v4.17.0) Updates `graphql` from 14.7.0 to 16.6.0 - [Release notes](https://github.com/graphql/graphql-js/releases) - [Commits](graphql/graphql-js@v14.7.0...v16.6.0) Updates `mongoose` from 6.6.0 to 6.11.3 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@6.6.0...6.11.3) Updates `nodemailer` from 6.8.0 to 6.9.9 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v6.8.0...v6.9.9) Updates `sharp` from 0.30.7 to 0.32.6 - [Release notes](https://github.com/lovell/sharp/releases) - [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md) - [Commits](lovell/sharp@v0.30.7...v0.32.6) Updates `semver` from 6.3.0 to 6.3.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v6.3.1/CHANGELOG.md) - [Commits](npm/node-semver@v6.3.0...v6.3.1) --- updated-dependencies: - dependency-name: "@apollo/server" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: mongodb dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: graphql dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: mongoose dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: nodemailer dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: sharp dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-03-28T14:50:21Z

Superseded by #61.

dependabot bot added the dependencies Pull requests that update a dependency file label Mar 17, 2024

dependabot bot closed this Mar 28, 2024

dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn-security-group-b97f1e35ee branch March 28, 2024 14:50

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the npm_and_yarn group across 1 directory with 7 updates #60

build(deps): bump the npm_and_yarn group across 1 directory with 7 updates #60

dependabot bot commented on behalf of github Mar 17, 2024

dependabot bot commented on behalf of github Mar 28, 2024

build(deps): bump the npm_and_yarn group across 1 directory with 7 updates #60

build(deps): bump the npm_and_yarn group across 1 directory with 7 updates #60

Conversation

dependabot bot commented on behalf of github Mar 17, 2024

@​apollo/server-integration-testsuite@​4.9.3

Patch Changes

@​apollo/server@​4.9.3

Patch Changes

@​apollo/server-integration-testsuite@​4.9.2

Patch Changes

@​apollo/server@​4.9.2

Patch Changes

@​apollo/server-integration-testsuite@​4.9.1

Patch Changes

@​apollo/server@​4.9.1

Patch Changes

4.9.3

Patch Changes

4.9.2

Patch Changes

4.9.1

Patch Changes

4.9.0

Minor Changes

v4.17.0

4.17.0 (2023-08-17)

Release Notes

mongodb-js/saslprep is now installed by default

Remove credential availability on ConnectionPoolCreatedEvent

Features

Bug Fixes

Documentation

v4.16.0

4.17.0 (2023-08-17)

Features

Bug Fixes

4.16.0 (2023-04-18)

Features

Bug Fixes

4.15.0 (2023-04-04)

Features

Bug Fixes

4.14.0 (2023-02-07)

Features

v16.6.0 (2022-08-16)

New Feature 🚀

Bug Fix 🐞

Committers: 2

v16.5.0 (2022-05-09)

New Feature 🚀

Committers: 1

v16.4.0 (2022-04-25)

New Feature 🚀

Bug Fix 🐞

Docs 📝

Polish 💅

Internal 🏠

6.10.1 / 2023-03-03

6.10.0 / 2023-02-22

6.9.3 / 2023-02-22

6.9.2 / 2023-02-16

6.9.1 / 2023-02-06

6.11.3 / 2023-07-11

7.3.3 / 2023-07-10

7.3.2 / 2023-07-06

7.3.1 / 2023-06-21

7.3.0 / 2023-06-14

7.2.4 / 2023-06-12

7.2.3 / 2023-06-09

v6.9.9

6.9.9 (2024-02-01)

Bug Fixes

v6.9.8

6.9.8 (2023-12-30)

Bug Fixes

v6.9.7

6.9.7 (2023-10-22)

Bug Fixes

v6.9.6

6.9.6 (2023-10-09)

`@apollo/server-integration-testsuite@4`.9.3

`@apollo/server@4`.9.3

`@apollo/server-integration-testsuite@4`.9.2

`@apollo/server@4`.9.2

`@apollo/server-integration-testsuite@4`.9.1

`@apollo/server@4`.9.1

`mongodb-js/saslprep` is now installed by default

Remove credential availability on `ConnectionPoolCreatedEvent`