[Snyk] Upgrade graphql from 0.10.5 to 0.13.2

[snyk-bot]

Snyk has created this PR to upgrade graphql from 0.10.5 to 0.13.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 16 versions ahead of your current version.
• The recommended version was released 5 years ago, on 2018-03-16.

Release notes

Package name: graphql

• 0.13.2 - 2018-03-16
  

  New:

  • Allow buildSchema() to take options (#1249)
  • Update to Flow v0.68 (#1290)

  Fixes:

  • Update iterall (#1254)
  • buildSchema: Make options optional (#1270)
• 0.13.1 - 2018-02-15
  

  New:

  • Publish .mjs files for module code to support native esmodules (#1244)
  • Interface type definitions may now be extended with extendSchema (#1222)
  • isValidNameError utility is now exported as a non-throwing alternative to assertValidName (#1237)
  • ExectuableDefinitionNode Flow type is now exported (#1241)

  Fixes:

  • extendSchema now preserves (and allows extending) a list of legacy field names which would otherwise be considered invalid (#1235)
  • Replaced a misplaced licensing header (7e68984)
• 0.13.0 - 2018-02-07
  

  Breaking:

  • Updated to latest spec for SDL for multiple interface implementations (#1169)

    To continue to support the pre-spec variation, use parse(text, {allowLegacySDLImplementsInterfaces: true})

  • Internal module 'graphql/language/kinds' no longer directly exports enum values #1221

    Not that you were relying on internal modules, were you :)

  New:

  • getDescription helper function is now exported (#1165)
  • Allows parsing pre-spec object type SDL with parse(text, {allowLegacySDLEmptyFields: true}) (#1171)
  • Add introspectionFromSchema utility function (#1187)
  • Add lexicographicSortSchema utility function (#1208) (#1220)
  • Allow use of legacy names during schema validation with {allowedLegacyNames: ['__badName']} (#1194)

  Fixed:

  • Only trigger "one instance of graphql" error in DEV environments, removing false errors from minified bundles. (#1174)
  • Fix 'astFromValue' to correctly handle integers and strings (#1181)
  • Fix getTypeMap() not including input types used in directives (#1189)
  • Support executeSync with mutations. (#1198)
  • Fix block string printing edge cases (#1190, #1212)
  • Fix SourceLocation incorrect export causing rollup bundling to fail (#1210)
  • Preserve allowedLegacyNames when using extendSchema (#1226) (added since v0.13.0-rc.1)
• 0.13.0-rc.1 - 2018-01-29
  

  Breaking:

  • Updated to latest spec for SDL for multiple interface implementations (#1169)

    To continue to support the pre-spec variation, use parse(text, {allowLegacySDLImplementsInterfaces: true})

  • Internal module 'graphql/language/kinds' no longer directly exports enum values #1221

    Not that you were relying on internal modules, were you :)

  New:

  • getDescription helper function is now exported (#1165)
  • Allows parsing pre-spec object type SDL with parse(text, {allowLegacySDLEmptyFields: true}) (#1171)
  • Add introspectionFromSchema utility function (#1187)
  • Add lexographicSortSchema utility function (#1208)
  • Allow use of legacy names during schema validation with {allowedLegacyNames: ['__badName']} (#1194)

  Fixed:

  • Only trigger "one instance of graphql" error in DEV environments, removing false errors from minified bundles. (#1174)
  • Fix 'astFromValue' to correctly handle integers and strings (#1181)
  • Fix getTypeMap() not including input types used in directives (#1189)
  • Support executeSync with mutations. (#1198)
  • Fix block string printing edge cases (#1190, #1212)
  • Fix SourceLocation incorrect export causing rollup bundling to fail (#1210)
• 0.12.3 - 2017-12-17
  

  Fixes:

  • Excluded lock files from deployed npm package
• 0.12.2 - 2017-12-17
  

  Fixes:

  • Properly deploy a package on npm which contains es6-modules (#1161)
  • Support 5-year-old legacy GraphQL services (#1162)
• 0.12.1 - 2017-12-17
  

  Flow Type Fixes:

  • Removed experimental.const_params Flow option to ensure support for projects which do not enable this option (#1157, #1160)
  • Changed visit() to return any instead of mixed to reduce the scope of the breaking change of adding Flow types for this function.
• 0.12.0 - 2017-12-16
  Read more
• 0.11.7 - 2017-10-03
  

  Fixes:

  • Fix an issue where flow typed resolvers would unnecessarily need to include __proto__ (#1056)
• 0.11.6 - 2017-09-29
  

  Fixes

  • Upgrades iterall dependency to v01.1.3, removing an undesired arrow function in the published package that could break build and runtime processes (leebyron/iterall#27).
• 0.11.5 - 2017-09-29
• 0.11.4 - 2017-09-26
• 0.11.3 - 2017-09-06
• 0.11.2 - 2017-08-29
• 0.11.1 - 2017-08-26
• 0.11.0 - 2017-08-25
• 0.10.5 - 2017-07-17

from graphql GitHub release notes

Commit messages

Package name: graphql

• f995c1f 0.13.2
• 3fe5dee Merge pull request [Language::Visitor] use method-based visit handlers rmosolgo/graphql-ruby#1290 from samwgoldman/master
• 207a2fd Update to Flow v0.68
• 70f008e Remove redundant Flow type casts (NoTypedChildren should return a Hash, not Array rmosolgo/graphql-ruby#1278)
• 1fbd7ec Throws descriptive error when non-type used instead of interface (Add multiple errors - with correct nesting to a query rmosolgo/graphql-ruby#1282)
• fb27b92 Merge wrappers into type/definition to fix circular imports (New Mutation API Brainstorming  rmosolgo/graphql-ruby#1275) (Add Guides for Datadog Tracing rmosolgo/graphql-ruby#1276)
• 4a9e37a Cleanup variables test (extracted from resolve_type vs is_type_of rmosolgo/graphql-ruby#1267) (Non-null arguments rmosolgo/graphql-ruby#1273)
• 8913bf0 Remove unused dev dependencies
• fbcda23 Add nested nullable test in VariablesInAllowedPositions test
• 65fb6ae buildSchema: Make options optional ([1.8] more upgrader fixes rmosolgo/graphql-ruby#1270)
• 323f2d2 Tests: Remove excessive dependencies and async/await (scalar coercion borks if argument passed in via variable rmosolgo/graphql-ruby#1269)
• a62eea8 Unify extending of type system (Update link to Relay Connections documentation rmosolgo/graphql-ruby#1261)
• 261b99b Eliminate circular dependency in validation rules (How to do a delete mutation ? rmosolgo/graphql-ruby#1263)
• 499a759 Replace getPromise with isPromise (Fix printing object type definitions rmosolgo/graphql-ruby#1255)
• fb3257c Update iterall and flow v0.66 (Revert "fix(Relay::Node) use consistent description for id fields" rmosolgo/graphql-ruby#1254)
• c2c01e7 Covariant MaybePromise<T>
• 5ec393e Benchmark introspecting a schema built from SDL in a supplied file. (Question - Ability to retrieve all arguments (including nested input arguments) from context ast_node rmosolgo/graphql-ruby#1163)
• 8151240 Benchmark task (Upgrader: underscore & symbol args access rmosolgo/graphql-ruby#1251)
• 86d33b4 Allow buildSchema() to take options. (Cannot authorise connections / scopes when using Mongoid (MongoDB) rmosolgo/graphql-ruby#1249)
• 31ae8a8 0.13.1
• 2c58b26 Make 'ASTDefinitionBuilder' responsible only for build types from AST (Enable resolvers to return an array of GraphQL::ExecutionErrors rmosolgo/graphql-ruby#1230)
• 65afbaf Use .mjs for module code (How to get parent resolved object in deeply nested resolver? rmosolgo/graphql-ruby#1244)
• d640f9f Update to latest release of iterall
• 7e68984 Fix outdated reference to old license

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs