Skip to content

Conversation

@parseplatformorg
Copy link
Contributor

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 658/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3
Denial of Service (DoS)
SNYK-JS-GRAPHQL-5905181
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: graphql The new version differs by 10 commits.
  • 8a95335 16.8.1
  • 8f4c64e OverlappingFieldsCanBeMergedRule: Fix performance degradation (#3967)
  • e4f759d 16.8.0
  • bec1b49 Support fourfold nested lists (#3950)
  • bf6a9f0 16.7.1
  • a08aaee instanceOf: workaround bundler issue with `process.env` (#3923)
  • 1519fda 16.7.0
  • 84bb146 check "globalThis.process" before accessing it (#3887)
  • 076972e Fix/invalid error propagation custom scalars (backport for 16.x.x) (#3838)
  • 4a82557 Fix crash in node when mixing sync/async resolvers (backport of #3706) (#3707)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)

@parse-github-assistant
Copy link

I will reformat the title to use the proper commit message syntax.

@parse-github-assistant parse-github-assistant bot changed the title [Snyk] Security upgrade graphql from 16.6.0 to 16.8.1 refactor: Security upgrade graphql from 16.6.0 to 16.8.1 Sep 20, 2023
@parse-github-assistant
Copy link

Thanks for opening this pull request!

  • ❌ Please link an issue that describes the reason for this pull request, otherwise your pull request will be closed. Make sure to write it as Closes: #123 in the PR description, so I can recognize it.

@uffizzi-cloud
Copy link

uffizzi-cloud bot commented Sep 20, 2023

Uffizzi Ephemeral Environment deployment-36374

⌚ Updated Sep 20, 2023, 02:10 UTC

☁️ https://app.uffizzi.com/github.com/parse-community/parse-dashboard/pull/2500

📄 View Application Logs etc.

What is Uffizzi? Learn more

@mtrezza mtrezza merged commit d64e8f0 into alpha Sep 20, 2023
@mtrezza mtrezza deleted the snyk-fix-834f128cbd393290b96b0c81a6d3424e branch September 20, 2023 13:14
@parseplatformorg
Copy link
Contributor Author

🎉 This change has been released in version 5.3.0-alpha.1

@parseplatformorg parseplatformorg added the state:released-alpha Released as alpha version label Sep 20, 2023
@parseplatformorg
Copy link
Contributor Author

🎉 This change has been released in version 5.4.0-beta.1

@parseplatformorg parseplatformorg added the state:released-beta Released as beta version label Nov 16, 2023
@parseplatformorg
Copy link
Contributor Author

🎉 This change has been released in version 5.4.0-alpha.1

@parseplatformorg
Copy link
Contributor Author

🎉 This change has been released in version 5.4.0

@parseplatformorg parseplatformorg added the state:released Released as stable version label May 16, 2024
beiguancyc pushed a commit to beiguancyc/parse-dashboard that referenced this pull request Jun 13, 2024
* release:
  chore(release): 5.4.0 [skip ci]
  empty
  chore(release): 5.4.0-beta.1 [skip ci]
  release
  chore(release): 5.3.0-alpha.2 [skip ci]
  feat: Add refresh indicator to Cloud Config page (parse-community#2505)
  chore(release): 5.3.0-alpha.1 [skip ci]
  refactor: Security upgrade graphql from 16.6.0 to 16.8.1 (parse-community#2500)

# Conflicts:
#	package-lock.json
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

state:released Released as stable version state:released-alpha Released as alpha version state:released-beta Released as beta version

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants