Skip to content

Bump node-fetch and graphqurl#65

Merged
dependabot[bot] merged 1 commit intomainfrom
dependabot/npm_and_yarn/node-fetch-and-graphqurl-2.6.11
May 30, 2023
Merged

Bump node-fetch and graphqurl#65
dependabot[bot] merged 1 commit intomainfrom
dependabot/npm_and_yarn/node-fetch-and-graphqurl-2.6.11

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 25, 2023

Bumps node-fetch to 2.6.11 and updates ancestor dependency graphqurl. These dependencies need to be updated together.

Updates node-fetch from 2.1.2 to 2.6.11

Release notes

Sourced from node-fetch's releases.

v2.6.11

2.6.11 (2023-05-09)

Reverts

v2.6.10

2.6.10 (2023-05-08)

Bug Fixes

v2.6.9

2.6.9 (2023-01-30)

Bug Fixes

v2.6.8

2.6.8 (2023-01-13)

Bug Fixes

v2.6.7

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed

Full Changelog: node-fetch/node-fetch@v2.6.6...v2.6.7

v2.6.6

What's Changed

Full Changelog: node-fetch/node-fetch@v2.6.5...v2.6.6

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by node-fetch-bot, a new releaser for node-fetch since your current version.


Updates graphqurl from 0.3.3 to 1.0.1

Changelog

Sourced from graphqurl's changelog.

v1.0.1

Remove usage of Apollo client

With v1.0, graphqurl removed usage of Apollo Client and instead makes use of light-weight isomorphic HTTP clients which reduced the bundle size from 142 kB to 58 kB, a 56% size reduction.

GraphiQL Improvements

The custom graphiQL now supports graphiQL explorer and graphQL code explorer.

Improved Scripting API

GraphQL queries are no longer parsed before execution. For usage as a node library, v1.0 onwards, a client needs to be created before executing GraphQL operations. You can find a sample script in the example directory.

CLI changes

  • Deprecates flag --graphiqlAddress in favour of the new flag --graphiqlHost.
  • Support for multiple queries in files and specify which query to execute through the newly added flag --operationName.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @AlexanderWells-diamond.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 25, 2023
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/node-fetch-and-graphqurl-2.6.11 branch from a1f4833 to 23dbdfe Compare May 25, 2023 10:49
@AlexanderWells-diamond
Copy link
Contributor

@dependabot merge

@codecov
Copy link

codecov bot commented May 25, 2023

Codecov Report

Merging #65 (94533ac) into main (c81745a) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main      #65   +/-   ##
=======================================
  Coverage   93.30%   93.30%           
=======================================
  Files          10       10           
  Lines         807      807           
=======================================
  Hits          753      753           
  Misses         54       54           

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github May 25, 2023

One of your CI runs failed on this pull request, so Dependabot won't merge it.

Dependabot will still automatically merge this pull request if you amend it and your tests pass.

1 similar comment
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github May 25, 2023

One of your CI runs failed on this pull request, so Dependabot won't merge it.

Dependabot will still automatically merge this pull request if you amend it and your tests pass.

@AlexanderWells-diamond
Copy link
Contributor

@dependabot rebase

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) to 2.6.11 and updates ancestor dependency [graphqurl](https://github.com/hasura/graphqurl). These dependencies need to be updated together.


Updates `node-fetch` from 2.1.2 to 2.6.11
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.1.2...v2.6.11)

Updates `graphqurl` from 0.3.3 to 1.0.1
- [Changelog](https://github.com/hasura/graphqurl/blob/main/CHANGELOG.md)
- [Commits](hasura/graphqurl@v0.3.3...v1.0.1)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: indirect
- dependency-name: graphqurl
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/node-fetch-and-graphqurl-2.6.11 branch from 23dbdfe to 94533ac Compare May 30, 2023 12:51
@dependabot dependabot bot merged commit 6f95922 into main May 30, 2023
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/node-fetch-and-graphqurl-2.6.11 branch May 30, 2023 13:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant