[Snyk] Upgrade apollo-server from 3.10.0 to 3.13.0

[mashraby]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade apollo-server from 3.10.0 to 3.13.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 9 versions ahead of your current version.
• The recommended version was released 4 months ago, on 2023-11-14.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Cross-site Scripting (XSS) SNYK-JS-APOLLOSERVERCORE-2979828	424/1000 Why? Has a fix available, CVSS 4.2	No Known Exploit
	Cache Poisoning SNYK-JS-APOLLOSERVERCORE-3098876	424/1000 Why? Has a fix available, CVSS 4.2	No Known Exploit
	Information Exposure SNYK-JS-APOLLOSERVERCORE-5876618	424/1000 Why? Has a fix available, CVSS 4.2	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: apollo-server

• 3.13.0 - 2023-11-14
  

  apollo-server-micro@3.13.0

• 3.12.1 - 2023-08-30
• 3.12.0 - 2023-03-02
• 3.11.1 - 2022-11-03
• 3.11.0 - 2022-11-02
• 3.10.4 - 2022-10-31
• 3.10.3 - 2022-10-07
• 3.10.2 - 2022-08-26
• 3.10.1 - 2022-08-10
• 3.10.0 - 2022-07-11

from apollo-server GitHub release notes

Commit messages

Package name: apollo-server

• f93284e Release
• 02d882c update doc entry
• 4745ebe Rename option from disableValidation to dangerouslyDisableValidation
• 11f5981 Add disableValidation option to apollo-server-core
• ea2e2c3 Release
• 1dd45b8 get CI passing
• d38b43b Merge pull request from GHSA-j5g3-5c8r-7qfx
• 590ca13 Update v3 docs with new EOL
• 71b2c8a Apollo Server 3 docs typo: ctx.connectionParams not just connectionParams (#7503)
• fac578a Release
• 19f5167 Update changelog
• 8554050 Update protobuf (version-3) (#7412)
• 5352a9f Docs: fix previous-versions link
• ef4f430 Add AS3 deprecation notices (#7152)
• 6247d96 Release
• e366a58 Make newly-added GraphQLRequestContext.requestIsBatched field optional (#7119)
• b5a8de6 update package-lock
• eac82dc Revert "update package-lock"
• 160be7e update package-lock
• 538151b Release
• 3e840fa update package-lock
• 69be2f7 Merge pull request from GHSA-8r69-3cvp-wxc3
• 40fcd3d Backport #7107 (docs: document new usage reporting option)
• f519e1d Release

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs