[Snyk] Upgrade @apollo/client from 3.5.10 to 3.7.3

[admin-token-bot]

Snyk has created this PR to upgrade @apollo/client from 3.5.10 to 3.7.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 48 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2022-12-15.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-LOADERUTILS-3043105	375/1000 Why? CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-LOADERUTILS-3043105	375/1000 Why? CVSS 7.5	No Known Exploit
	Remote Code Execution (RCE) SNYK-JS-EJS-2803307	375/1000 Why? CVSS 7.5	Proof of Concept
	Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-ASYNC-2441827	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	375/1000 Why? CVSS 7.5	No Known Exploit
	Denial of Service (DoS) SNYK-JS-NWSAPI-2841516	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	375/1000 Why? CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-JSON5-3182856	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-JSON5-3182856	375/1000 Why? CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @apollo/client

• 3.7.3 - 2022-12-15
  

  Patch Changes

  • #10334 7d923939d Thanks @ jerelmiller! - Better handle deferred queries that have cached or partial cached data for them

  • #10368 46b58e976 Thanks @ alessbell! - Fix: unblocks support for defer in mutations

    If the @ defer directive is present in the document passed to mutate, the Promise will resolve with the final merged data after the last multipart chunk has arrived in the response.

• 3.7.2 - 2022-12-06
  

  Improvements (from CHANGELOG.md)

  • Only show dev tools suggestion in the console when connectToDevTools is true.
    @ chris110408 in #10258

  • Pass TCache generic to MutationHookOptions for better type support in useMutation.
    @ igrlk in #10223

  • Add name property to ApolloError to ensure better type safety and help error reporting tools better identify the error.
    @ aaronadamsCA in #9323

  • Export a ModifierDetails type for the details parameter of a Modifier function.
    @ KeithGillette in #7133

  • Revert use of cloneDeep to clone options when fetching queries.
    @ MrDoomBringer in #10215

  What's Changed (auto-generated by GitHub)

  • Add connect to dev tools check by @ chris110408 in #10258
  • Update the CHANGELOG by @ jerelmiller in #10260
  • Revert cloneDeep-ing request headers by @ MrDoomBringer in #10215
  • chore(tests): warn on ts-jest diagnostics error outside of CI test runs by @ alessbell in #10268
  • updates roadmap nov 2022 by @ jpvajda in #10269
  • docs: displays the error correctly by @ ctesniere in #10275
  • Update the CHANGELOG with changes from #10275 by @ bignimbus in #10276
  • Fix 'broken' links by @ StephenBarlow in #10288
  • Additional documentation for managing local state by @ bignimbus in #10282
  • chore(docs): remove graphql-anywhere from apollo-link-rest doc by @ alessbell in #10232
  • doc(static-typing): rewrite with GraphQL Code Generator setup by @ charlypoly in #10173
  • Further update the TypeGen article for style by @ rkoron007 in #10294
  • Pass TCache generic to MutationHookOptions by @ igrlk in #10223
  • Add name property to ApolloError by @ aaronadamsCA in #9323
  • Add array examples to reactive variable documentation by @ larrymyers in #10235
  • Update CHANGELOG with changes from #10235 by @ bignimbus in #10302
  • docs: Update subscribeToMore example to use React hooks by @ trevorblades in #10309
  • export separate ModifierUtility type by @ KeithGillette in #7133
  • Changelog and docs for preserveHeaderCase by @ MrDoomBringer in #10111

  New Contributors

  • @ chris110408 made their first contribution in #10258
  • @ ctesniere made their first contribution in #10275
  • @ charlypoly made their first contribution in #10173
  • @ igrlk made their first contribution in #10223
  • @ aaronadamsCA made their first contribution in #9323
  • @ larrymyers made their first contribution in #10235
  • @ KeithGillette made their first contribution in #7133

  Full Changelog: v3.7.1...v3.7.2

• 3.7.1 - 2022-10-20
  Read more
• 3.7.0 - 2022-09-30
  Read more
• 3.7.0-rc.0 - 2022-09-21
• 3.7.0-beta.8 - 2022-09-21
• 3.7.0-beta.7 - 2022-09-08
• 3.7.0-beta.6 - 2022-06-27
• 3.7.0-beta.5 - 2022-06-10
• 3.7.0-beta.4 - 2022-06-10
• 3.7.0-beta.3 - 2022-06-07
• 3.7.0-beta.2 - 2022-06-07
• 3.7.0-beta.1 - 2022-05-26
• 3.7.0-beta.0 - 2022-05-25
• 3.7.0-alpha.6 - 2022-05-19
• 3.7.0-alpha.5 - 2022-05-16
• 3.7.0-alpha.4 - 2022-05-13
• 3.7.0-alpha.3 - 2022-05-09
• 3.7.0-alpha.2 - 2022-05-03
• 3.7.0-alpha.1 - 2022-05-03
• 3.7.0-alpha.0 - 2022-04-27
• 3.6.10 - 2022-09-29
  Read more
• 3.6.9 - 2022-06-21
  Read more
• 3.6.8 - 2022-06-10
• 3.6.7 - 2022-06-10
• 3.6.6 - 2022-05-26
• 3.6.5 - 2022-05-23
• 3.6.4 - 2022-05-16
• 3.6.3 - 2022-05-05
• 3.6.2 - 2022-05-03
• 3.6.1 - 2022-04-28
• 3.6.0 - 2022-04-26
• 3.6.0-rc.1 - 2022-04-19
• 3.6.0-rc.0 - 2022-04-18
• 3.6.0-beta.13 - 2022-04-14
• 3.6.0-beta.12 - 2022-04-11
• 3.6.0-beta.11 - 2022-04-05
• 3.6.0-beta.10 - 2022-03-29
• 3.6.0-beta.9 - 2022-03-10
• 3.6.0-beta.8 - 2022-03-10
• 3.6.0-beta.7 - 2022-03-10
• 3.6.0-beta.6 - 2022-02-15
• 3.6.0-beta.5 - 2022-02-04
• 3.6.0-beta.4 - 2022-02-03
• 3.6.0-beta.3 - 2021-11-23
• 3.6.0-beta.2 - 2021-11-22
• 3.6.0-beta.1 - 2021-11-16
• 3.6.0-beta.0 - 2021-11-16
• 3.5.10 - 2022-02-24

from @apollo/client GitHub release notes

Commit messages

Package name: @apollo/client

• 2f79f03 Version Packages (#10341)
• b823f6c Fix Changesets release workflow from default branch (#10370)
• 46b58e9 Fixes support for defer in mutations (#10368)
• 52d5af2 docs/updating-subscription-library-anchor-link (#10320)
• 1398e42 chore(deps): update actions/setup-node action to v3 (#10352)
• 6739721 chore(deps): update mad9000/actions-find-and-replace-string action to v3 (#10354)
• b3e4574 Update static-typing.md (#10358)
• f4f00b6 chore(deps): update dependency mocha to v10.2.0
• 0daf29f chore(deps): update dependency @ types/node to v18.11.13
• ac7696e chore(deps): update dependency recast to v0.22.0
• 543d687 chore(deps): update dependency @ types/node to v18.11.12
• 14857a5 chore(deps): update dependency @ types/jest to v29.2.4
• 7819c51 chore(deps): update dependency @ graphql-tools/schema to v9.0.12
• c02a17b chore(changesets): run changeset-version in prerelease workflow
• 6cf377f Changesets updates (#10342)
• 7d92393 Better handle cached data with deferred queries (#10334)
• f982a8d Introduce Changesets (#10337)
• 7bff5ac Roadmap updates (#10336)
• 21c7d26 Exclude "cursor" argument to prevent separate cache instance (#10144)
• 9f8fae1 chore(deps): update dependency jest-junit to v15 (#10301)
• a557704 chore(deps): update dependency @ types/node to v18 (#9840)
• ce86613 Bump @ apollo/client npm version to 3.7.2.
• 365fcea chore: update CHANGELOG in preparation for 3.7.2 (#10335)
• 39d83c9 chore(deps): update dependency @ types/react to v18.0.26

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs