NotificationsYou must be signed in to change notification settings
Fork4.8k
Star21.3k

refactor: Security upgrade @apollo/server from 4.12.1 to 5.0.0#9849

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Jump to bottom

Open

parseplatformorg wants to merge1 commit intorelease-7.x.x

base:release-7.x.x

Choose a base branch

fromsnyk-fix-9356d9384ff9c7e57532acf6a2ba8623

Open

refactor: Security upgrade @apollo/server from 4.12.1 to 5.0.0#9849

parseplatformorg wants to merge1 commit intorelease-7.x.xfromsnyk-fix-9356d9384ff9c7e57532acf6a2ba8623

Conversation

Copy link

Contributor

parseplatformorg commentedAug 26, 2025

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

package.json
package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Function Call With Incorrect Argument Type SNYK-JS-SHAJS-12089400	730

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐View latest project report
📜Customise PR templates
🛠Adjust project settings
📚Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉Learn about vulnerability in an interactive lesson of Snyk Learn.

fix: package.json & package-lock.json to reduce vulnerabilities

1b53c94

The following vulnerabilities are fixed with an upgrade:-https://snyk.io/vuln/SNYK-JS-SHAJS-12089400

Copy link

parse-github-assistantbot commentedAug 26, 2025

I will reformat the title to use the proper commit message syntax.

parse-github-assistantbot changed the title~~[Snyk] Security upgrade @apollo/server from 4.12.1 to 5.0.0~~refactor: Security upgrade @apollo/server from 4.12.1 to 5.0.0

Aug 26, 2025

Copy link

parse-github-assistantbot commentedAug 26, 2025

🚀 Thanks for opening this pull request!

Copy link

coderabbitaibot commentedAug 26, 2025

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the.coderabbit.yaml file in this repository. To trigger a single review, invoke the@coderabbitai review command.

You can disable this status message by setting thereviews.review_status tofalse in the CodeRabbit configuration file.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

🪧 Tips

Chat

There are 3 ways to chat withCodeRabbit:

Review comments: Directly reply to a review comment made by CodeRabbit. Example:
- I pushed a fix in commit <commit_id>, please review it.
- Open a follow-up GitHub issue for this discussion.
Files and specific lines of code (under the "Files changed" tab): Tag@coderabbitai in a new review comment at the desired location with your query.
PR comments: Tag@coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
- @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Create a ticket on oursupport page for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR/Issue comments)

Type@coderabbitai help to get the list of available commands.

Other keywords and placeholders

Add@coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
Add@coderabbitai summary to generate the high-level summary at a specific location in the PR description.
Add@coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (`.coderabbit.yaml`)

You can programmatically configure CodeRabbit by adding a.coderabbit.yaml file to the root of your repository.
Please see theconfiguration documentation for more information.
If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation:# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json