Update dependency type-graphql to v0.17.6 [SECURITY] #68
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.17.1
->0.17.6
GitHub Vulnerability Alerts
GHSA-xf64-2f9p-6pqq
Versions of
type-graphql
prior to 0.17.6 are vulnerable to Information Exposure. The package leaks the resolver source code in an error message. It is possible to force this error when no subscription topics are provided in the request.Recommendation
Upgrade to version 0.17.6 or later.
Release Notes
MichalLytek/type-graphql (type-graphql)
v0.17.6
Compare Source
Fixes
MissingSubscriptionTopicsError
error message (#489)v0.17.5
Compare Source
Features
DepreciationOptions
interface toDeprecationOptions
and deprecate the old onetslib
,semver
,graphql-query-complexity
andglob
)@Field(type => [[Int]])
) (#393)Fixes
() => TClassTypes
)v0.17.4
Compare Source
Features
subscribe
function in@Subscription
decorator (#328)v0.17.3
Compare Source
Features
semver
to^6.0.0
andgraphql-subscriptions
to^1.1.0
Fixes
@types/graphql
due to using removed private types (e.g.MaybePromise
) (#320)v0.17.2
Compare Source
Features
resolveType
function for interfaces and unions (#319)skipCheck
option inbuildSchema
to disable checking the correctness of a schemaFixes
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.