[Snyk] Security upgrade @nestjs/graphql from 6.6.2 to 7.10.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

  • package.json

• Adding or updating a Snyk policy (.snyk) file; this file is required in order to apply Snyk vulnerability patches.
  Find out more.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	Yes	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	Yes	Proof of Concept
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution SNYK-JS-LODASH-567746	Yes	Proof of Concept
	704/1000 Why? Has a fix available, CVSS 9.8	Prototype Pollution SNYK-JS-LODASH-590103	Yes	No Known Exploit
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @nestjs/graphql

The new version differs by 250 commits.

• 9f99236 chore(): upgrade deps
• 31d4ae3 Merge pull request #1434 from nestjs/renovate/nest-monorepo
• 2d4c1a9 Merge pull request #1363 from madzhup/master
• c8853a3 Merge pull request #1435 from nestjs/renovate/eslint-7.x
• c020294 Merge pull request #1430 from nestjs/renovate/nestjs-mapped-types-0.x
• 1bb61e6 Merge pull request #1437 from nestjs/renovate/typescript-eslint-monorepo
• 3635061 chore(deps): update nest monorepo to v7.6.14
• e704da0 chore(deps): update dependency eslint to v7.22.0
• 58e9ea6 Merge pull request #1426 from nestjs/renovate/node-14.x
• 0da5a2c fix(deps): update dependency @ nestjs/mapped-types to v0.4.0
• 9b8b6c0 Merge branch 'Joshswooft-update-browser-shims'
• cc8477b refactor(): small import tweak
• ac29ed6 Merge branch 'update-browser-shims' of https://github.com/Joshswooft/graphql into Joshswooft-update-browser-shims
• 9c11b3d chore(deps): update typescript-eslint monorepo to v4.18.0
• 353a671 chore(deps): update dependency @ types/node to v14.14.35
• df3b9ca ci(): fix package json and lock files
• 40a75ea chore(): upgrade deps
• ea59200 chore(deps): update typescript-eslint monorepo to v4.17.0
• 4db18d9 chore(deps): update dependency typescript to v4.2.3
• 2a303d1 chore(deps): update dependency ts-jest to v26.5.3
• fe14f28 chore(deps): update dependency husky to v5.1.3
• 6b18b49 chore(): release v7.9.11
• 1077622 Merge branch 'master' of https://github.com/nestjs/graphql
• eb4a0c3 fix(plugin): check version when updating file imports

See the full diff

With a Snyk patch:

Severity	Priority Score (*)	Issue	Exploit Maturity
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution SNYK-JS-LODASH-567746	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic