Skip to content

chore(deps): update all non-major dependencies#114

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#114
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Dec 1, 2024

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@apollo/server (source) 4.11.24.13.0 age confidence devDependencies minor
@apollo/server-integration-testsuite (source) 4.11.24.13.0 age confidence devDependencies minor
@google-cloud/functions-framework 3.4.23.5.1 age confidence devDependencies minor
@types/node (source) 16.18.11916.18.126 age confidence devDependencies patch
node (source) 20.18.120.20.2 age confidence volta minor
npm (source) 10.9.110.9.8 age confidence volta patch
prettier (source) 3.3.33.8.3 age confidence devDependencies minor
ts-jest (source) 29.2.529.4.9 age confidence devDependencies minor
typescript (source) 5.7.25.9.3 age confidence devDependencies minor

Release Notes

apollographql/apollo-server (@​apollo/server)

v4.13.0

Compare Source

Minor Changes
  • #​8180 e9d49d1 Thanks @​github-actions! - ⚠️ SECURITY @apollo/server/standalone:

    The default configuration of startStandaloneServer was vulnerable to denial of service (DoS) attacks through specially crafted request bodies with exotic character set encodings.

    In accordance with RFC 7159, we now only accept request bodies encoded in UTF-8, UTF-16 (LE or BE), or UTF-32 (LE or BE).
    Any other character set will be rejected with a 415 Unsupported Media Type error.
    Additionally, upstream libraries used by this version of Apollo Server may not support all of these encodings, so some requests may still fail even if they pass this check.

    If you were not using startStandaloneServer, you were not affected by this vulnerability.

    Generally, please note that we provide startStandaloneServer as a convenience tool for quickly getting started with Apollo Server.
    For production deployments, we recommend using Apollo Server with a more fully-featured web server framework such as Express, Koa, or Fastify, where you have more control over security-related configuration options.

    Also please note that Apollo Server 4.x is considered EOL as of January 26, 2026, and Apollo no longer commits to providing support or updates for it. Please prioritize migrating to Apollo Server 5.x for continued support and updates.

v4.12.2

Compare Source

(No change; there is a change to the @apollo/server-integration-testsuite used to test integrations, and the two packages always have matching versions.)

v4.12.1

Compare Source

Patch Changes

v4.12.0

Compare Source

Minor Changes
  • #​8054 89e3f84 Thanks @​clenfest! - Adds a new graphql-js validation rule to reject operations that recursively request selections above a specified maximum, which is disabled by default. Use configuration option maxRecursiveSelections=true to enable with a maximum of 10,000,000, or maxRecursiveSelections=<number> for a custom maximum. Enabling this validation can help avoid performance issues with configured validation rules or plugins.
Patch Changes

v4.11.3

Compare Source

Patch Changes
GoogleCloudPlatform/functions-framework-nodejs (@​google-cloud/functions-framework)

v3.5.1

Compare Source

Bug Fixes
  • correct handling of IGNORED_ROUTES set to empty (4799207)

v3.5.0

Compare Source

Features
  • adds a new ignored-routes config option (70f68e9)
Bug Fixes

v3.4.6

Compare Source

Bug Fixes

v3.4.5

Compare Source

Bug Fixes
  • fix trace context pattern, remove trace id and respect logging span id field. (#​667) (0fb00a5)

v3.4.4

Compare Source

Bug Fixes

v3.4.3

Compare Source

Bug Fixes
  • Fix typings for functions.cloudEvent to include callback. (#​631) (47cd4c6)
nodejs/node (node)

v20.20.2: 2026-03-24, Version 20.20.2 'Iron' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-21717) fix array index hash collision (Joyee Cheung)
  • (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC and KMAC (Filip Skokan)
  • (CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina)
  • (CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS)pull/795>
  • (CVE-2026-21715) add permission check to realpath.native (RafaelGSS)
  • (CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS)
  • (CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina)
Commits

v20.20.1: 2026-03-05, Version 20.20.1 'Iron' (LTS), @​marco-ippolito

Compare Source

Notable Changes
Commits

v20.20.0: 2026-01-13, Version 20.20.0 'Iron' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes

lib:

Commits

v20.19.6: 2025-11-25, Version 20.19.6 'Iron' (LTS), @​marco-ippolito

Compare Source

Notable Changes
Commits

v20.19.5: 2025-09-03, Version 20.19.5 'Iron' (LTS), @​marco-ippolito

Compare Source

Notable Changes
Commits

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 05c8cc0 to 42146e9 Compare December 14, 2024 09:02
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 42146e9 to 4b88877 Compare December 21, 2024 11:12
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 2dbf793 to b81c205 Compare January 8, 2025 23:12
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from a40fbd9 to f648aaf Compare January 21, 2025 18:42
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from f648aaf to a44f069 Compare January 23, 2025 05:48
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 777c480 to 75e5800 Compare February 10, 2025 17:36
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 75e5800 to e14f2be Compare February 13, 2025 17:03
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from ee7e15f to 21bb329 Compare February 28, 2025 17:54
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from ee3bf4e to d2129b4 Compare March 4, 2025 23:14
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from d2129b4 to ea820d4 Compare March 13, 2025 14:59
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from dc1f6da to dcd405e Compare March 27, 2025 23:36
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from d5d9abd to 22d7d98 Compare April 7, 2025 17:05
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 22d7d98 to 1bd4f02 Compare April 13, 2025 10:24
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 1bd4f02 to 8dad0d5 Compare April 22, 2025 15:32
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 9c3560e to ae879c2 Compare May 14, 2025 23:28
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 2b2885a to ab5638c Compare September 6, 2025 22:42
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from c92c81e to de40920 Compare September 19, 2025 17:13
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 96fd7c7 to 9bf063c Compare September 30, 2025 23:47
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 9bf063c to 277a939 Compare October 10, 2025 13:36
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 277a939 to 9db0cdc Compare October 21, 2025 22:03
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 9db0cdc to ac1c75d Compare November 10, 2025 19:50
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from da24069 to 529dfc6 Compare November 25, 2025 13:41
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from d3bca6d to c2dea84 Compare December 3, 2025 06:44
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from c2dea84 to 83c7cb7 Compare December 31, 2025 16:49
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from c3f58ce to 2fdd6da Compare January 15, 2026 02:33
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 96a5a9b to 065b7ff Compare January 24, 2026 03:57
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from d924696 to cb042dd Compare February 4, 2026 13:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from cf87c44 to 16ddd2d Compare February 17, 2026 21:44
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 6fdfdb7 to bb3485a Compare March 19, 2026 01:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants