Upgrade latest version (#7991)

* upgrade latest-version

* bump latest-version

* revert graphql-cli-codegen-plugin update

* add comment

Author: kevcube

.changeset/perfect-mails-repair.md

@@ -0,0 +1,5 @@
+---
+'@graphql-codegen/cli': patch
+---
+
+bump latest-version to patch vuln

packages/graphql-codegen-cli/package.json

@@ -64,7 +64,7 @@
     "inquirer": "^8.0.0",
     "is-glob": "^4.0.1",
     "json-to-pretty-yaml": "^1.2.2",
-    "latest-version": "5.1.0",
+    "latest-version": "^6.0.0",
     "listr": "^0.14.3",
     "listr-update-renderer": "^0.5.0",
     "log-symbols": "^4.0.0",
@@ -76,13 +76,13 @@
     "yargs": "^17.0.0"
   },
   "devDependencies": {
+    "@graphql-tools/merge": "8.3.0",
     "@types/debounce": "1.2.1",
     "@types/inquirer": "8.2.1",
     "@types/is-glob": "4.0.2",
     "@types/js-yaml": "4.0.5",
     "@types/listr": "0.14.4",
     "@types/mkdirp": "1.0.2",
-    "@graphql-tools/merge": "8.3.0",
     "bdd-stdin": "0.2.0",
     "js-yaml": "4.1.0",
     "make-dir": "3.1.0",

packages/graphql-codegen-cli/src/init/helpers.ts

@@ -4,7 +4,6 @@ import { writeFileSync, readFileSync } from 'fs';
 import { Types } from '@graphql-codegen/plugin-helpers';
 import detectIndent from 'detect-indent';
 import { Answers } from './types';
-import getLatestVersion from 'latest-version';
 
 // Parses config and writes it to a file
 export async function writeConfig(answers: Answers, config: Types.Config) {
@@ -26,6 +25,8 @@ export async function writeConfig(answers: Answers, config: Types.Config) {
 
 // Updates package.json (script and plugins as dependencies)
 export async function writePackage(answers: Answers, configLocation: string) {
+  // dynamic import because latest-version is pure ESM
+  const getLatestVersion = (await import('latest-version')).default;
   // script
   const pkgPath = resolve(process.cwd(), 'package.json');
   const pkgContent = readFileSync(pkgPath, {