Skip to content

Commit

Permalink
fix: package.json & yarn.lock to reduce vulnerabilities
Browse files Browse the repository at this point in the history
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-APOLLOSERVERCORE-5876618
  • Loading branch information
snyk-bot committed Dec 20, 2023
1 parent 77cc19f commit 108f0df
Show file tree
Hide file tree
Showing 2 changed files with 38 additions and 48 deletions.
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -117,7 +117,7 @@
"@electron/remote": "2.0.9",
"@graphql-tools/schema": "^8.3.13",
"analytics-node": "^6.0.0",
"apollo-server-express": "^3.9.0",
"apollo-server-express": "^3.13.0",
"args-parser": "^1.1.0",
"auto-launch": "^5.0.5",
"body-parser": "1.19.2",
Expand Down
84 changes: 37 additions & 47 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -551,10 +551,10 @@
dependencies:
"@types/ms" "*"

"@types/[email protected].29":
version "4.17.29"
resolved "https://registry.yarnpkg.com/@types/express-serve-static-core/-/express-serve-static-core-4.17.29.tgz#2a1795ea8e9e9c91b4a4bbe475034b20c1ec711c"
integrity sha512-uMd++6dMKS32EOuw1Uli3e3BPgdLIXmezcfHv7N4c1s3gkhikBplORPpMq3fuWkxncZN1reb16d5n8yhQ80x7Q==
"@types/[email protected].31":
version "4.17.31"
resolved "https://registry.yarnpkg.com/@types/express-serve-static-core/-/express-serve-static-core-4.17.31.tgz#a1139efeab4e7323834bb0226e62ac019f474b2f"
integrity sha512-DxMhY+NAsTwMMFHBTtJFNp5qiHKJ7TeqOo23zVEM9alT1Ml27Q3xcTH0xwxn7Q0BbMcVEJOs/7aQtUWupUQN3Q==
dependencies:
"@types/node" "*"
"@types/qs" "*"
Expand All @@ -569,10 +569,10 @@
"@types/qs" "*"
"@types/range-parser" "*"

"@types/[email protected].13":
version "4.17.13"
resolved "https://registry.yarnpkg.com/@types/express/-/express-4.17.13.tgz#a76e2995728999bab51a33fabce1d705a3709034"
integrity sha512-6bSZTPaTIACxn48l50SR+axgrqm6qXFIxrdAKaG6PaJk3+zuUr35hBlgT7vOmJcum+OEaIBLtHV/qloEAFITeA==
"@types/[email protected].14":
version "4.17.14"
resolved "https://registry.yarnpkg.com/@types/express/-/express-4.17.14.tgz#143ea0557249bc1b3b54f15db4c81c3d4eb3569c"
integrity sha512-TEbt+vaPFQ+xpxFLFssxUDXj5cWCxZJjIcB7Yg0k0GMHGtgtQgpvx/MUQUeAkNbA9AAGrwkAsoeItdTgS7FMyg==
dependencies:
"@types/body-parser" "*"
"@types/express-serve-static-core" "^4.17.18"
Expand Down Expand Up @@ -1066,17 +1066,17 @@ apollo-reporting-protobuf@^3.3.1:
dependencies:
"@apollo/protobufjs" "1.2.2"

apollo-reporting-protobuf@^3.3.3:
version "3.3.3"
resolved "https://registry.yarnpkg.com/apollo-reporting-protobuf/-/apollo-reporting-protobuf-3.3.3.tgz#df2b7ff73422cd682af3f1805d32301aefdd9e89"
integrity sha512-L3+DdClhLMaRZWVmMbBcwl4Ic77CnEBPXLW53F7hkYhkaZD88ivbCVB1w/x5gunO6ZHrdzhjq0FHmTsBvPo7aQ==
apollo-reporting-protobuf@^3.4.0:
version "3.4.0"
resolved "https://registry.yarnpkg.com/apollo-reporting-protobuf/-/apollo-reporting-protobuf-3.4.0.tgz#6edd31f09d4a3704d9e808d1db30eca2229ded26"
integrity sha512-h0u3EbC/9RpihWOmcSsvTW2O6RXVaD/mPEjfrPkxRPTEPWqncsgOoRJw+wih4OqfH3PvTJvoEIf4LwKrUaqWog==
dependencies:
"@apollo/protobufjs" "1.2.6"

apollo-server-core@^3.9.0:
version "3.11.1"
resolved "https://registry.yarnpkg.com/apollo-server-core/-/apollo-server-core-3.11.1.tgz#89d83aeaa71a59f760ebfa35bb0cbd31e15474ca"
integrity sha512-t/eCKrRFK1lYZlc5pHD99iG7Np7CEm3SmbDiONA7fckR3EaB/pdsEdIkIwQ5QBBpT5JLp/nwvrZRVwhaWmaRvw==
apollo-server-core@^3.13.0:
version "3.13.0"
resolved "https://registry.yarnpkg.com/apollo-server-core/-/apollo-server-core-3.13.0.tgz#ad6601fbb34cc97eedca27a9fb0b5738d11cd27d"
integrity sha512-v/g6DR6KuHn9DYSdtQijz8dLOkP78I5JSVJzPkARhDbhpH74QNwrQ2PP2URAPPEDJ2EeZNQDX8PvbYkAKqg+kg==
dependencies:
"@apollo/utils.keyvaluecache" "^1.0.1"
"@apollo/utils.logger" "^1.0.0"
Expand All @@ -1087,11 +1087,11 @@ apollo-server-core@^3.9.0:
"@graphql-tools/schema" "^8.0.0"
"@josephg/resolvable" "^1.0.0"
apollo-datasource "^3.3.2"
apollo-reporting-protobuf "^3.3.3"
apollo-reporting-protobuf "^3.4.0"
apollo-server-env "^4.2.1"
apollo-server-errors "^3.3.1"
apollo-server-plugin-base "^3.7.1"
apollo-server-types "^3.7.1"
apollo-server-plugin-base "^3.7.2"
apollo-server-types "^3.8.0"
async-retry "^1.2.1"
fast-json-stable-stringify "^2.1.0"
graphql-tag "^2.11.0"
Expand All @@ -1114,48 +1114,38 @@ apollo-server-errors@^3.3.1:
resolved "https://registry.yarnpkg.com/apollo-server-errors/-/apollo-server-errors-3.3.1.tgz#ba5c00cdaa33d4cbd09779f8cb6f47475d1cd655"
integrity sha512-xnZJ5QWs6FixHICXHxUfm+ZWqqxrNuPlQ+kj5m6RtEgIpekOPssH/SD9gf2B4HuWV0QozorrygwZnux8POvyPA==

apollo-server-express@^3.9.0:
version "3.9.0"
resolved "https://registry.yarnpkg.com/apollo-server-express/-/apollo-server-express-3.9.0.tgz#1ff3b53fe76e4e8be04b8477ea8a3d9586313af1"
integrity sha512-scSeHy9iB7W3OiF3uLQEzad9Jm9tEfDF8ACsJb2P+xX69uqg6zizsrQvj3qRhazCO7FKMcMu9zQFR0hy7zKbUA==
apollo-server-express@^3.13.0:
version "3.13.0"
resolved "https://registry.yarnpkg.com/apollo-server-express/-/apollo-server-express-3.13.0.tgz#0d8d9bbba3b8b8264912d215f63fd44e74d5f42a"
integrity sha512-iSxICNbDUyebOuM8EKb3xOrpIwOQgKxGbR2diSr4HP3IW8T3njKFOoMce50vr+moOCe1ev8BnLcw9SNbuUtf7g==
dependencies:
"@types/accepts" "^1.3.5"
"@types/body-parser" "1.19.2"
"@types/cors" "2.8.12"
"@types/express" "4.17.13"
"@types/express-serve-static-core" "4.17.29"
"@types/express" "4.17.14"
"@types/express-serve-static-core" "4.17.31"
accepts "^1.3.5"
apollo-server-core "^3.9.0"
apollo-server-types "^3.6.1"
apollo-server-core "^3.13.0"
apollo-server-types "^3.8.0"
body-parser "^1.19.0"
cors "^2.8.5"
parseurl "^1.3.3"

apollo-server-plugin-base@^3.7.1:
version "3.7.1"
resolved "https://registry.yarnpkg.com/apollo-server-plugin-base/-/apollo-server-plugin-base-3.7.1.tgz#aa78ef49bd114e35906ca9cf7493fed2664cbde8"
integrity sha512-g3vJStmQtQvjGI289UkLMfThmOEOddpVgHLHT2bNj0sCD/bbisj4xKbBHETqaURokteqSWyyd4RDTUe0wAUDNQ==
apollo-server-plugin-base@^3.7.2:
version "3.7.2"
resolved "https://registry.yarnpkg.com/apollo-server-plugin-base/-/apollo-server-plugin-base-3.7.2.tgz#c19cd137bc4c993ba2490ba2b571b0f3ce60a0cd"
integrity sha512-wE8dwGDvBOGehSsPTRZ8P/33Jan6/PmL0y0aN/1Z5a5GcbFhDaaJCjK5cav6npbbGL2DPKK0r6MPXi3k3N45aw==
dependencies:
apollo-server-types "^3.7.1"
apollo-server-types "^3.8.0"

apollo-server-types@^3.6.1:
version "3.6.1"
resolved "https://registry.yarnpkg.com/apollo-server-types/-/apollo-server-types-3.6.1.tgz#704e5309bd947306030df01f982e36d1d4753eaa"
integrity sha512-XOPlBlRdwP00PrG03OffGGWuzyei+J9t1rAnvyHsSdP0JCgQWigHJfvL1N9Bhgi4UTjl9JadKOJh1znLNlqIFQ==
dependencies:
"@apollo/utils.keyvaluecache" "^1.0.1"
"@apollo/utils.logger" "^1.0.0"
apollo-reporting-protobuf "^3.3.1"
apollo-server-env "^4.2.1"

apollo-server-types@^3.7.1:
version "3.7.1"
resolved "https://registry.yarnpkg.com/apollo-server-types/-/apollo-server-types-3.7.1.tgz#87adfcb52ec0893999a9cfafd5474bfda7ab0798"
integrity sha512-aE9RDVplmkaOj/OduNmGa+0a1B5RIWI0o3zC1zLvBTVWMKTpo0ifVf11TyMkLCY+T7cnZqVqwyShziOyC3FyUw==
apollo-server-types@^3.8.0:
version "3.8.0"
resolved "https://registry.yarnpkg.com/apollo-server-types/-/apollo-server-types-3.8.0.tgz#d976b6967878681f715fe2b9e4dad9ba86b1346f"
integrity sha512-ZI/8rTE4ww8BHktsVpb91Sdq7Cb71rdSkXELSwdSR0eXu600/sY+1UXhTWdiJvk+Eq5ljqoHLwLbY2+Clq2b9A==
dependencies:
"@apollo/utils.keyvaluecache" "^1.0.1"
"@apollo/utils.logger" "^1.0.0"
apollo-reporting-protobuf "^3.3.3"
apollo-reporting-protobuf "^3.4.0"
apollo-server-env "^4.2.1"

[email protected]:
Expand Down

0 comments on commit 108f0df

Please sign in to comment.