Skip to content

chore(deps): update all non-major dependencies#419

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#419
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Apr 27, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@apollo/server (source) 4.12.04.13.0 age confidence devDependencies minor
@changesets/changelog-github (source) 0.5.10.6.0 age confidence devDependencies minor
@changesets/cli (source) 2.29.22.30.0 age confidence devDependencies minor
cspell (source) 8.19.28.19.4 age confidence devDependencies patch
form-data 4.0.44.0.5 age confidence devDependencies patch
graphql 16.11.016.13.2 age confidence devDependencies minor
node (source) 20.19.120.20.2 age confidence volta minor
npm (source) 10.9.210.9.8 age confidence volta patch
prettier (source) 3.5.33.8.1 age confidence devDependencies minor
secops 2.0.72.0.9 age confidence orb patch
ts-jest (source) 29.3.229.4.9 age confidence devDependencies minor
typescript (source) 5.8.35.9.3 age confidence devDependencies minor

Release Notes

apollographql/apollo-server (@​apollo/server)

v4.13.0

Compare Source

Minor Changes
  • #​8180 e9d49d1 Thanks @​github-actions! - ⚠️ SECURITY @apollo/server/standalone:

    The default configuration of startStandaloneServer was vulnerable to denial of service (DoS) attacks through specially crafted request bodies with exotic character set encodings.

    In accordance with RFC 7159, we now only accept request bodies encoded in UTF-8, UTF-16 (LE or BE), or UTF-32 (LE or BE).
    Any other character set will be rejected with a 415 Unsupported Media Type error.
    Additionally, upstream libraries used by this version of Apollo Server may not support all of these encodings, so some requests may still fail even if they pass this check.

    If you were not using startStandaloneServer, you were not affected by this vulnerability.

    Generally, please note that we provide startStandaloneServer as a convenience tool for quickly getting started with Apollo Server.
    For production deployments, we recommend using Apollo Server with a more fully-featured web server framework such as Express, Koa, or Fastify, where you have more control over security-related configuration options.

    Also please note that Apollo Server 4.x is considered EOL as of January 26, 2026, and Apollo no longer commits to providing support or updates for it. Please prioritize migrating to Apollo Server 5.x for continued support and updates.

v4.12.2

Compare Source

(No change; there is a change to the @apollo/server-integration-testsuite used to test integrations, and the two packages always have matching versions.)

v4.12.1

Compare Source

Patch Changes
changesets/changesets (@​changesets/changelog-github)

v0.6.0

Compare Source

Minor Changes
Patch Changes

v0.5.2

Compare Source

streetsidesoftware/cspell (cspell)

v8.19.4

Compare Source

Note: Version bump only for package cspell

v8.19.3

Compare Source

Note: Version bump only for package cspell

form-data/form-data (form-data)

v4.0.5

Compare Source

Commits
  • [Tests] Switch to newer v8 prediction library; enable node 24 testing 16e0076
  • [Dev Deps] update @ljharb/eslint-config, eslint 5822467
  • [Fix] set Symbol.toStringTag in the proper place 76d0dee
graphql/graphql-js (graphql)

v16.13.2

Compare Source

v16.13.1

Compare Source

v16.13.1 (2026-03-04)

Docs 📝
Internal 🏠
Committers: 2

v16.13.0

Compare Source

v16.12.0: 16.12.0

Compare Source

v16.12.0 (2025-11-01)

New Feature 🚀
Bug Fix 🐞
Docs 📝
28 PRs were merged
Polish 💅
Internal 🏠
3 PRs were merged
Committers: 9
nodejs/node (node)

v20.20.2: 2026-03-24, Version 20.20.2 'Iron' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-21717) fix array index hash collision (Joyee Cheung)
  • (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC and KMAC (Filip Skokan)
  • (CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina)
  • (CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS)pull/795>
  • (CVE-2026-21715) add permission check to realpath.native (RafaelGSS)
  • (CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS)
  • (CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina)
Commits

v20.20.1: 2026-03-05, Version 20.20.1 'Iron' (LTS), @​marco-ippolito

Compare Source

Notable Changes
Commits

v20.20.0: 2026-01-13, Version 20.20.0 'Iron' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes

lib:

Commits

v20.19.6: 2025-11-25, Version 20.19.6 'Iron' (LTS), @​marco-ippolito

Compare Source

Notable Changes
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner April 27, 2025 06:39
@renovate renovate bot enabled auto-merge (squash) April 27, 2025 06:39
@codesandbox-ci
Copy link
Copy Markdown

codesandbox-ci bot commented Apr 27, 2025

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 8b78095 to 0add9b7 Compare May 3, 2025 14:37
@renovate renovate bot changed the title chore(deps): update dependency cspell to v8.19.3 chore(deps): update dependency cspell to v8.19.4 May 3, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 0add9b7 to e4bf9c0 Compare May 10, 2025 09:52
@renovate renovate bot changed the title chore(deps): update dependency cspell to v8.19.4 chore(deps): update all non-major dependencies May 10, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 8a23451 to e8d3b3e Compare May 16, 2025 18:27
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 2f41dc6 to 4e95874 Compare June 12, 2025 05:52
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 140b264 to db86ade Compare June 27, 2025 06:11
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 18bbabe to 7690e6d Compare July 22, 2025 14:34
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from a06fc87 to 0fd77fa Compare August 4, 2025 23:44
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 4822e36 to 04b47a2 Compare August 16, 2025 14:24
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 04b47a2 to dc8f98a Compare August 19, 2025 12:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from dc8f98a to b5618f9 Compare August 31, 2025 10:22
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 5f2697c to c9d4850 Compare December 1, 2025 20:36
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from c9d4850 to 85af250 Compare December 3, 2025 07:04
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 85af250 to 0e4fb69 Compare December 31, 2025 14:35
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from aed768c to 11b3829 Compare January 15, 2026 00:35
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 6d2dae9 to a127e29 Compare January 23, 2026 18:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 6a3c22c to e44ffde Compare February 4, 2026 12:35
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 6109e93 to 20a23c7 Compare February 17, 2026 16:52
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 20a23c7 to e989b84 Compare February 24, 2026 09:51
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from e732673 to b1fcc38 Compare March 5, 2026 15:56
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 1069587 to 3c8c0c5 Compare March 18, 2026 21:57
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 3c8c0c5 to 35a7b9c Compare March 19, 2026 08:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants