Skip to content
This repository was archived by the owner on May 5, 2025. It is now read-only.

[Snyk] Upgrade @vue/apollo-components from 4.0.0-beta.5 to 4.0.0 #146

Merged
merged 2 commits into from
Aug 27, 2024

Conversation

xorinzor
Copy link
Member

snyk-top-banner

Snyk has created this PR to upgrade @vue/apollo-components from 4.0.0-beta.5 to 4.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 4 versions ahead of your current version.

  • The recommended version was released on 7 months ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Server-side Request Forgery (SSRF)
SNYK-JS-AXIOS-7361793
833 Proof of Concept
Release notes
Package name: @vue/apollo-components
  • 4.0.0 - 2024-01-15

    🚀 Enhancements

    • useLazyQuery: Add interface for lazy query return (#1523)

    🩹 Fixes

    • Improve esm support, fix #1524 (#1524)
    • Import serializeJs using default import instead of a namespace import (#1485)
    • options: Use exponential backoff on subscribe error retry (b17817e)
    • ApolloMutation: Return result in mutate (ddf9aa0)
    • Prefetch type (f8568e8)

    📖 Documentation

    • Update vitepress + enable detailed search by default (fb66dce)

    🏡 Chore

    ✅ Tests

    🤖 CI

    ❤️ Contributors

  • 4.0.0-beta.12 - 2023-11-29

    🚀 Enhancements

    • New context params in event hook handlers (0be5d9b)

    🩹 Fixes

    • Use shallowRef for apollo query (76f19f6)

    📖 Documentation

    • Missing curly brace (#1512)
    • Added missing createClient import in example when creating Graph… (#1513)
    • Import createApolloProvider is missing (#1515)

    🏡 Chore

    • Moved resolutions to the root of the workspace (#1508)

    ❤️ Contributors

  • 4.0.0-beta.10 - 2023-09-12

    🚀 Enhancements

    • Support effect scope outside of component, fix #1505 (#1505)
    • useLazyQuery: Load returns Promise, fix #1486 (#1486)

    🩹 Fixes

    • Apollo components should have emits (#1504)

    🌊 Types

    • Extended "enabled" option type (#1492)

    🏡 Chore

    • Package test-e2e-composable-vue3, update deps, migrate to vite (#1488)
    • Upgrade vitepress to 1.0 RC (daffd75)
    • Seq test (995131d)

    ✅ Tests

    ❤️ Contributors

  • 4.0.0-beta.9 - 2023-08-28
  • 4.0.0-beta.5 - 2023-05-16
from @vue/apollo-components GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade @vue/apollo-components from 4.0.0-beta.5 to 4.0.0.

See this package in npm:
@vue/apollo-components

See this project in Snyk:
https://app.snyk.io/org/shoutz0r-shared/project/71a76727-a61b-4cc8-aecd-bfff7773f421?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@vue/[email protected] None +2 287 kB akryum

🚮 Removed packages: npm/@vue/[email protected])

View full report↗︎

@xorinzor xorinzor merged commit c48e876 into main Aug 27, 2024
5 of 7 checks passed
@xorinzor xorinzor deleted the snyk-upgrade-b4863c6ca5f137f1fca1f98fe52cade5 branch August 27, 2024 09:24
Copy link

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
2 participants