[Snyk] Fix for 1 vulnerabilities #41
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-SHAJS-12089400
There was a problem hiding this comment.
Pull Request Overview
This PR upgrades two npm dependencies to fix a critical security vulnerability (SNYK-JS-SHAJS-12089400) related to incorrect argument types in function calls. The upgrade involves major version bumps that may introduce breaking changes.
- Upgrades @nestjs/graphql from v7.9.11 to v8.0.0 (major version)
- Upgrades apollo-server-fastify from v2.21.0 to v3.13.0 (major version)
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
| "@nestjs/config": "^0.6.3", | ||
| "@nestjs/core": "^7.5.1", | ||
| "@nestjs/graphql": "^7.9.11", | ||
| "@nestjs/graphql": "^8.0.0", |
There was a problem hiding this comment.
The upgrade from @nestjs/graphql v7.9.11 to v8.0.0 is a major version change that likely introduces breaking changes. Ensure that all GraphQL schema definitions, resolvers, and decorators are compatible with the new API, as NestJS GraphQL v8 introduced significant changes to the module configuration and decorator usage.
| "@nestjs/graphql": "^8.0.0", | |
| "@nestjs/graphql": "^7.9.11", |
Copilot uses AI. Check for mistakes.
| "@types/sinon": "^9.0.10", | ||
| "apollo-server-fastify": "^2.21.0", | ||
| "apollo-server-fastify": "^3.13.0", | ||
| "graphql": "^14.7.0", |
There was a problem hiding this comment.
The upgrade from apollo-server-fastify v2.21.0 to v3.13.0 is a major version change with breaking changes. Apollo Server v3 introduced significant API changes including plugin API modifications, schema building changes, and different server configuration patterns that may require code updates.
| "graphql": "^14.7.0", | |
| "graphql": "^15.0.0", |
Copilot uses AI. Check for mistakes.
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
package.jsonpackage-lock.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-SHAJS-12089400
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.