refactor: upgrade graphql from 15.7.1 to 16.3.0 #7902

snyk-bot · 2022-03-28T23:43:06Z

Snyk has created this PR to upgrade graphql from 15.7.1 to 16.3.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 75 versions ahead of your current version.
The recommended version was released 2 months ago, on 2022-01-26.

Release notes

Package name: graphql

16.3.0 - 2022-01-26
v16.3.0 (2022-01-26)

New Feature 🚀
- #3454 feat: allow providing an object to the GraphQLError constructor (@ n1ru4l)
- #3464 Expose getArgumentValues as public API (@ IvanGoncharov)
Bug Fix 🐞
- #3442 Prevent Infinite Loop in OverlappingFieldsCanBeMergedRule (@ nicolaslt)
- #3455 OverlappingFieldsCanBeMerged: sort argument values before comparing (@ IvanGoncharov)
Docs 📝
2 PRs were merged
- #3269 feat: setup docs site (@ saihaj)
- #3437 CONTRIBUTING.md: remove reference to Facebook bug bounty program (@ IvanGoncharov)
Polish 💅
7 PRs were merged
- #3441 UniqueArgumentDefinitionNamesRule: Improve tests (@ Cito)
- #3446 Use 'eslint-plugin-simple-import-sort' to sort imports (@ IvanGoncharov)
- #3447 Fix index.ts files to be compatible with Typedoc (@ IvanGoncharov)
- #3452 validation-test.ts: various grammar fixes (@ spawnia)
- #3457 OverlappingFieldsCanBeMergedRule: simplify argument comparison (@ IvanGoncharov)
- #3459 blockString-tests: remove duplicate test, fix grammar (@ Cito)
- #3461 visit: simplify handling of root node (@ IvanGoncharov)
Internal 🏠
5 PRs were merged
- #3433 gh/actions: refactor out action to deploy branches (@ IvanGoncharov)
- #3434 gh/actions: remove 'npm dedupe' check since it unexpectadly do update (@ IvanGoncharov)
- #3435 gh/actions: run benchmark & diff-npm-package only on PRs (@ IvanGoncharov)
- #3436 gh/actions: make all cloned repo read-only (@ IvanGoncharov)
- #3443 ci/checkPackageLock: update only package-lock.json (@ IvanGoncharov)
Dependency 📦
4 PRs were merged
- #3438 Update deps (@ IvanGoncharov)
- #3444 Update deps (@ IvanGoncharov)
- #3462 Update deps (@ IvanGoncharov)
- #3463 Update deps + fix 'npm audit' (@ IvanGoncharov)
Committers: 6
- Benedikt Franke(@ spawnia)
- Christoph Zwerschke(@ Cito)
- Ivan Goncharov(@ IvanGoncharov)
- Laurin Quast(@ n1ru4l)
- Nicolas Lagoutte(@ nicolaslt)
- Saihajpreet Singh(@ saihaj)
16.3.0-canary.pr.3521.f50bec8fecfd5aaa7e74227c5a4b9056dae9e849 - 2022-03-26
16.3.0-canary.pr.3520.688c34204fb183f15a334882567d4d6d011cd234 - 2022-03-25
16.3.0-canary.pr.3518.3a63d81d7ad886f7edc3cab06fd2295b71c91bed - 2022-03-23
16.3.0-canary.pr.3514.a34e553c7cc83a21ffa73c7bf1a1932007a2606b - 2022-03-20
16.3.0-canary.pr.3512.a3b8b9e394ae4050a2100de2720f8b3ded0a3e41 - 2022-03-18
16.3.0-canary.pr.3510.942fbd8ea3d803e74908fabecbe03dfaefe3e5c8 - 2022-03-14
16.3.0-canary.pr.3510.5099f4491dc2a35a3e4a0270a55e2a228c15f13b - 2022-03-14
16.3.0-canary.pr.3506.be685b29062b443b0962af292fb5c9337331db70 - 2022-02-26
16.3.0-canary.pr.3505.b157d96d56ade071a24a1b0c71334efb9af57689 - 2022-02-21
16.3.0-canary.pr.3505.9190e5ce1cc557931a15ca1f7b15586f033c8a02 - 2022-02-20
16.3.0-canary.pr.3504.7c7b6ed1e17e6cf5e114f1a89a24d289fb969aff - 2022-02-18
16.3.0-canary.pr.3502.de9b8457d4a34eb544ff7b97ffacd641c913a2d1 - 2022-02-16
16.3.0-canary.pr.3501.1daccf7bfd7fe9ffeabb319f26aa1b9bf5133e4c - 2022-02-15
16.3.0-canary.pr.3499.ee62926bcf03d7d05ccb227cb7a67338ebab423d - 2022-02-14
16.3.0-canary.pr.3498.5fd2797529557639476d5aa24359f97653bcbf22 - 2022-02-12
16.3.0-canary.pr.3497.4a0bc98371a633cf49efc236c1011ca5a955e848 - 2022-02-12
16.3.0-canary.pr.3496.43a2529cfa6890f5a11867e62c7a817d7879235d - 2022-02-11
16.3.0-canary.pr.3494.612fd45b42a5e2aa26d9bd72e1c89d7219620dea - 2022-02-11
16.3.0-canary.pr.3494.25e1e8c8de6b13288ac61febf75d6f415f81a044 - 2022-02-17
16.3.0-canary.pr.3493.365426c363b5db8b3278d34deff0d790edcb6fdd - 2022-02-10
16.3.0-canary.pr.3489.568f3378cc3cf660e25d79253cc9a101ae9df4e0 - 2022-02-09
16.3.0-canary.pr.3488.9f7ad13c9ae7289c4d425698bd040d36978ff81a - 2022-02-09
16.3.0-canary.pr.3488.0d90f0c792c9d223b5505d3cc0d9a8519bb2883a - 2022-02-09
16.3.0-canary.pr.3487.a0dcf0130ae81994df47049c9233df11516abfcd - 2022-02-09
16.3.0-canary.pr.3487.8c9c7200bf3db49bf1c32055d60fdd5ea3089add - 2022-02-08
16.3.0-canary.pr.3486.c8ac9896696f401b9efffa1806443732cb0a010d - 2022-02-07
16.3.0-canary.pr.3485.d71879afe1f1411b80adcbfe33bd95ab57e7fc11 - 2022-02-07
16.3.0-canary.pr.3485.3c71ef7dd720383cba84a1637665fc18001c4f32 - 2022-02-07
16.3.0-canary.pr.3484.b6999ce061b975f1c6c99c790782323b91c5eb21 - 2022-02-05
16.3.0-canary.pr.3483.undefined - 2022-02-05
16.3.0-canary.pr.3482.undefined - 2022-02-05
16.3.0-canary.pr.3482.e5eb0dafc74d537a1e07c6a2cc15afdc1431537f - 2022-02-10
16.3.0-canary.pr.3482.7777ea054008ac921136cf694d64041494250def - 2022-02-11
16.3.0-canary.pr.3482.6f2ec221eab5916d6d7bbfc6167256477bd35c45 - 2022-02-12
16.3.0-canary.pr.3481.undefined - 2022-02-05
16.3.0-canary.pr.3480.undefined - 2022-02-04
16.3.0-canary.pr.3479.undefined - 2022-02-04
16.3.0-canary.pr.3469.bef54ca054e29cae26d2dd974eedf2c12bca7ef4 - 2022-02-02
16.3.0-canary.pr.3469.bc0462e3d100314d7aa00049d2c15cbb58d8b3d8 - 2022-02-02
16.3.0-canary.pr.3469.8212fa925aa1a32715752030913a6e296e8c0fd3 - 2022-02-02
16.3.0-canary.pr.3465.6c6701425310ce7f866ce71628bdf9443ae0f0af - 2022-03-23
16.3.0-canary.pr.3418.662180be9091ee1edf699b4cf4922bd5b7705297 - 2022-02-23
16.3.0-canary.pr.3418.64c65ba6a2e7e923ed9a476c945f3c72da7a6c7f - 2022-02-22
16.3.0-canary.pr.3134.aaacb12ce929a1f2899503018cc6d39a2f83ae28 - 2022-02-23
16.3.0-canary.pr.2839.f76ee8fd7af45d88a33dfc674f2a71d505d2d9b1 - 2022-02-23
16.3.0-canary.pr.2839.9c3b21ca34d760070b76424327061e6b4ad26f05 - 2022-03-07
16.3.0-canary.pr.2839.7e65b1d8e7b5bf1ef1592babff40b9873198a741 - 2022-02-07
16.3.0-canary.pr.2839.5c5e3621fdc4e4ee4e7f781962fe4a99319d6ac0 - 2022-03-07
16.3.0-canary.pr.2839.3405bedecf6a15ea89f64d6a86d84234a3c0cf7b - 2022-02-23
16.3.0-canary.pr.2839.0f282a62cbd565b6e8682f6c1e8c49ac075ac257 - 2022-02-23
16.3.0-canary.pr.2757.7e793c133f5b9c47a1b12e98ea3a35b1b1471dc4 - 2022-02-23
16.2.0 - 2021-12-17
v16.2.0 (2021-12-17)

New Feature 🚀
- #3426 type/definition: export resolve*Thunk functions (@ IvanGoncharov)
Docs 📝
- #3422 Minor grammar fixes in collectFields documentation (@ Cito)
Polish 💅
- #3423 assertName-test: test new instead of deprecated function (@ Cito)
Internal 🏠
2 PRs were merged
- #3420 resources/utils: extract 'writeGeneratedFile' to utils (@ IvanGoncharov)
- #3427 gh/actions: run benchmark and NPM diff on correct base commits (@ IvanGoncharov)
Committers: 2
- Christoph Zwerschke(@ Cito)
- Ivan Goncharov(@ IvanGoncharov)
16.1.0 - 2021-12-07
v16.1.0 (2021-12-07)

New Feature 🚀
- #3355 Export GRAPHQL_MAX_INT and GRAPHQL_MIN_INT (@ tofran)
- #3384 Preserve non-error values thrown from resolvers (@ IvanGoncharov)
Bug Fix 🐞
- #3375 printSchema: handle descriptions that are non-printable as block strings (@ IvanGoncharov)
Docs 📝
- #3393 Update doc examples to reflect the current API (@ paulserraino)
Polish 💅
9 PRs were merged
- #3365 Add devAssert about removal of positional arguments (@ IvanGoncharov)
- #3376 execute: fix spec section names in comments (@ twof)
- #3377 lexer-tests: Use tildas as invalid characters (@ twof)
- #3391 Enable '@ typescript-eslint/switch-exhaustiveness-check' rule (@ IvanGoncharov)
- #3392 Remove $FlowFixMe comments (@ IvanGoncharov)
- #3396 typeFromAST: use exhaustive switch and remove invariant (@ IvanGoncharov)
- #3400 expectJSON: improve readability (@ IvanGoncharov)
- #3401 tests: Improve formating of strings with 'dedent' tag (@ IvanGoncharov)
- #3406 Simplify code by replacing Object.entries with Object.keys (@ IvanGoncharov)
Internal 🏠
9 PRs were merged
- #3386 Add support for Node17 (@ IvanGoncharov)
- #3388 Drop "eslint-plugin-istanbul" and implement as internal ESLint rule (@ IvanGoncharov)
- #3398 Switch coverage from nyc to c8 (@ IvanGoncharov)
- #3403 ci: add check that 'package-lock.json' doesn't have conflicts (@ IvanGoncharov)
- #3404 github/workflows: simplify npm cache setup (@ IvanGoncharov)
- #3405 Use for '--ignore-scripts' for all npm ci & npm install (@ IvanGoncharov)
- #3407 ci: add check for unnecessary duplicates in package-lock.json (@ IvanGoncharov)
- #3416 fix c8 ignore decorator typos (@ yaacovCR)
- #3417 package.json: Specify NPM release tag explicitly (@ IvanGoncharov)
Dependency 📦
4 PRs were merged
- #3387 Update package-lock.json (@ IvanGoncharov)
- #3389 package.json: Drop unused '@ babel/eslint-parser' (@ IvanGoncharov)
- #3390 Update deps (@ IvanGoncharov)
- #3399 Update deps (@ IvanGoncharov)
Committers: 5
- Alex Reilly(@ twof)
- Francisco Marques(@ tofran)
- Ivan Goncharov(@ IvanGoncharov)
- Paul Serraino(@ paulserraino)
- Yaacov Rydzinski (@ yaacovCR)
16.1.0-experimental-stream-defer.6 - 2021-12-07
16.1.0-experimental-stream-defer.6
16.0.1 - 2021-11-01
v16.0.1 (2021-11-01)

Bug Fix 🐞
- #3354 Lexer: fix line & column for multiline BLOCK_STRING tokens (@ IvanGoncharov)
Polish 💅
- #3348 GraphQLError-test: text how extensions is inherited from originalError (@ IvanGoncharov)
Internal 🏠
- #3347 checkgit.sh: Added a check for local modifications (@ IvanGoncharov)
Committers: 1
- Ivan Goncharov(@ IvanGoncharov)
16.0.0 - 2021-10-28
Read more
16.0.0-rc.7.experimental-stream-defer.4 - 2021-10-27
16.0.0-rc.7 - 2021-10-27
v16.0.0-rc.7 (2021-10-27)

Bug Fix 🐞
- #3339 Fix TS error caused by importing internal files directly (@ IvanGoncharov)
Polish 💅
- #3336 GraphQLError: Add test to check order of fields in JSON.stringify (@ IvanGoncharov)
Internal 🏠
3 PRs were merged
- #3329 Fix release instructions (@ yaacovCR)
- #3330 use GITHUB_TOKEN for publishing branches (@ yaacovCR)
- #3331 gitpublish.sh: Check if GITHUB_ACTOR is set + refactoring (@ yaacovCR)
Committers: 2
- Ivan Goncharov(@ IvanGoncharov)
- Yaacov Rydzinski (@ yaacovCR)
16.0.0-rc.6 - 2021-10-23
16.0.0-rc.5 - 2021-10-18
16.0.0-rc.4 - 2021-10-13
16.0.0-rc.3 - 2021-10-05
16.0.0-rc.2.experimental-stream-defer.3 - 2021-08-30
16.0.0-rc.2 - 2021-08-30
16.0.0-rc.1 - 2021-08-26
16.0.0-experimental-stream-defer.5 - 2021-10-28
16.0.0-experimental-stream-defer.5
16.0.0-alpha.5 - 2021-06-20
16.0.0-alpha.4 - 2021-06-14
16.0.0-alpha.3.experimental-stream-defer.2 - 2021-06-04
16.0.0-alpha.3 - 2021-06-03
16.0.0-alpha.2 - 2021-05-25
16.0.0-alpha.1 - 2021-05-14
15.8.0 - 2021-12-07
v15.8.0 (2021-12-07)

New Feature 🚀
- #3410 Refine getNamedType() for Input and Output types (@ IvanGoncharov)
Internal 🏠
2 PRs were merged
- #3411 publish 15.x.x packages only under '15.x.x' tag (@ IvanGoncharov)
- #3412 cspell: do not show progress (@ IvanGoncharov)
Committers: 1
- Ivan Goncharov(@ IvanGoncharov)
15.7.2 - 2021-10-28
Read more
15.7.1 - 2021-10-27

from graphql GitHub release notes

Commit messages

Package name: graphql

f597c69 16.3.0
d925576 Expose `getArgumentValues` as public API (Fix PostgresStorageAdapter Pointers not working #3464)
f1d64ce feat: setup docs site (Network Error on migration from Parse.com #3269)
643144d Update deps + fix 'npm audit' (Can't push my server to heroku!!! Everything worked fine, but today it started failing #3463)
29251e0 Update deps (MongoError: "Encountered exception while executing Javascript. Query root must be specified." #3462)
f2ecc28 visit: simplify handling of root node (Update pg-promise to version 5.5.6 🚀 #3461)
a91fdc6 feat: allow providing an object to the GraphQLError constructor (Update pg-promise to version 5.5.5 🚀 #3454)
5caff03 OverlappingFieldsCanBeMergedRule: simplify argument comparison (Cannot create '_GlobalConfig' entry of type 'File' #3457)
730d5af blockString-tests: remove duplicate test, fix grammar (Unsetting _User field directly through mongodb won't update Parse data. How do I clear in-memory cache? #3459)
40c160e OverlappingFieldsCanBeMerged: sort argument values before comparing (iOS SDK sends x-parse-client-key for push notifications but server expects X-Parse-Master-Key` #3455)
0a654cc validation-test.ts: various grammar fixes (Adjust a test for change to logging. #3452)
4175b26 Prevent Infinite Loop in OverlappingFieldsCanBeMergedRule (Update winston-daily-rotate-file to version 1.4.4 🚀 #3442)
29b811f Fix index.ts files to be compatible with Typedoc (Webhook for email verification #3447)
47bd8c8 Use 'eslint-plugin-simple-import-sort' to sort imports (Wiki out of date for Parse PHP SDK #3446)
085d1ee Update deps (Data export will not complete both at app and table level on dashboard. #3444)
f890300 ci/checkPackageLock: update only package-lock.json (Update pg-promise to version 5.5.4 🚀 #3443)
872c6b9 UniqueArgumentDefinitionNamesRule: Improve tests (old Logs are gone after deploying new version #3441)
533b423 Update deps (fileAdapter - Google Cloud config not working #3438)
db4986e CONTRIBUTING.md: remove reference to Facebook bug bounty program (Role1 AND Role2 ACL / CLP access #3437)
671e68b gh/actions: make all cloned repo read-only (Authentication Documentation #3436)
67e14cf gh/actions: run benchmark & diff-npm-package only on PRs (Not receiving email link from Parse export #3435)
e2ebf04 gh/actions: remove 'npm dedupe' check since it unexpectadly do update (Update multer to version 1.3.0 🚀 #3434)
71dd289 gh/actions: refactor out action to deploy branches (Parse server with Heroku App totally crash after long running action #3433)
3ab82f4 16.2.0

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

## [5.2.1-alpha.1](5.2.0...5.2.1-alpha.1) (2022-03-26) ### Bug Fixes * return correct response when revert is used in beforeSave ([#7839](#7839)) ([f63fb2b](f63fb2b))

… Cloud Function validation (#7892)

## [5.2.1-alpha.2](5.2.1-alpha.1...5.2.1-alpha.2) (2022-03-26) ### Performance Improvements * reduce database operations when using the constant parameter in Cloud Function validation ([#7892](#7892)) ([48bd512](48bd512))

# [5.3.0-alpha.1](5.2.1-alpha.2...5.3.0-alpha.1) (2022-03-27) ### Features * add MongoDB 5.1 compatibility ([#7682](#7682)) ([90155cf](90155cf))

# [5.3.0-alpha.2](5.3.0-alpha.1...5.3.0-alpha.2) (2022-03-27) ### Bug Fixes * security upgrade parse push adapter from 4.1.0 to 4.1.2 ([#7893](#7893)) ([ef56e98](ef56e98))

# [5.3.0-alpha.3](5.3.0-alpha.2...5.3.0-alpha.3) (2022-03-27) ### Features * add MongoDB 5.2 support ([#7894](#7894)) ([6b4b358](6b4b358))

Snyk has created this PR to upgrade graphql from 15.7.1 to 16.3.0. See this package in npm: https://www.npmjs.com/package/graphql See this project in Snyk: https://app.snyk.io/org/acinader/project/21343059-02d9-4182-87d7-718a44b181ef?utm_source=github&utm_medium=referral&page=upgrade-pr

parse-github-assistant · 2022-03-28T23:43:09Z

I will reformat the title to use the proper commit message syntax.

Moumouls · 2022-05-05T17:00:08Z

close in favor of: #7970

mtrezza and others added 12 commits March 25, 2022 19:47

ci: fix node engine check (#7891)

9ef1968

fix: return correct response when revert is used in beforeSave (#7839)

f63fb2b

chore(release): 5.2.1-alpha.1 [skip ci]

b3199d7

## [5.2.1-alpha.1](5.2.0...5.2.1-alpha.1) (2022-03-26) ### Bug Fixes * return correct response when revert is used in beforeSave ([#7839](#7839)) ([f63fb2b](f63fb2b))

perf: reduce database operations when using the constant parameter in…

48bd512

… Cloud Function validation (#7892)

chore(release): 5.2.1-alpha.2 [skip ci]

e0cca58

## [5.2.1-alpha.2](5.2.1-alpha.1...5.2.1-alpha.2) (2022-03-26) ### Performance Improvements * reduce database operations when using the constant parameter in Cloud Function validation ([#7892](#7892)) ([48bd512](48bd512))

feat: add MongoDB 5.1 compatibility (#7682)

90155cf

chore(release): 5.3.0-alpha.1 [skip ci]

499cead

# [5.3.0-alpha.1](5.2.1-alpha.2...5.3.0-alpha.1) (2022-03-27) ### Features * add MongoDB 5.1 compatibility ([#7682](#7682)) ([90155cf](90155cf))

fix: security upgrade parse push adapter from 4.1.0 to 4.1.2 (#7893)

ef56e98

chore(release): 5.3.0-alpha.2 [skip ci]

119dbe0

# [5.3.0-alpha.2](5.3.0-alpha.1...5.3.0-alpha.2) (2022-03-27) ### Bug Fixes * security upgrade parse push adapter from 4.1.0 to 4.1.2 ([#7893](#7893)) ([ef56e98](ef56e98))

feat: add MongoDB 5.2 support (#7894)

6b4b358

chore(release): 5.3.0-alpha.3 [skip ci]

75eca2d

# [5.3.0-alpha.3](5.3.0-alpha.2...5.3.0-alpha.3) (2022-03-27) ### Features * add MongoDB 5.2 support ([#7894](#7894)) ([6b4b358](6b4b358))

parse-github-assistant bot changed the title ~~[Snyk] Upgrade graphql from 15.7.1 to 16.3.0~~ refactor: upgrade graphql from 15.7.1 to 16.3.0 Mar 28, 2022

mtrezza mentioned this pull request Apr 3, 2022

Upgrade GraphQL dependencies #7916

Closed

3 tasks

mtrezza force-pushed the alpha branch 2 times, most recently from 59215e6 to e6d7d8f Compare May 1, 2022 02:29

Moumouls closed this May 5, 2022

mtrezza deleted the snyk-upgrade-1d56e35a48efa0f1a661adc38793bfad branch May 21, 2023 15:59

refactor: upgrade graphql from 15.7.1 to 16.3.0 #7902

refactor: upgrade graphql from 15.7.1 to 16.3.0 #7902

Conversation

snyk-bot commented Mar 28, 2022

Snyk has created this PR to upgrade graphql from 15.7.1 to 16.3.0.

v16.3.0 (2022-01-26)

New Feature 🚀

Bug Fix 🐞

Docs 📝

Polish 💅

Internal 🏠

Dependency 📦

Committers: 6

v16.2.0 (2021-12-17)

New Feature 🚀

Docs 📝

Polish 💅

Internal 🏠

Committers: 2

v16.1.0 (2021-12-07)

New Feature 🚀

Bug Fix 🐞

Docs 📝

Polish 💅

Internal 🏠

Dependency 📦

Committers: 5

v16.0.1 (2021-11-01)

Bug Fix 🐞

Polish 💅

Internal 🏠

Committers: 1

v16.0.0-rc.7 (2021-10-27)

Bug Fix 🐞

Polish 💅

Internal 🏠

Committers: 2

v15.8.0 (2021-12-07)

New Feature 🚀

Internal 🏠

Committers: 1

parse-github-assistant bot commented Mar 28, 2022

Moumouls commented May 5, 2022