[Snyk] Upgrade graphql from 0.11.7 to 0.13.2

[snyk-bot]

Snyk has created this PR to upgrade graphql from 0.11.7 to 0.13.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 5 years ago, on 2018-03-16.

Release notes

Package name: graphql

• 0.13.2 - 2018-03-16
  

  New:

  • Allow buildSchema() to take options (#1249)
  • Update to Flow v0.68 (#1290)

  Fixes:

  • Update iterall (#1254)
  • buildSchema: Make options optional (#1270)
• 0.13.1 - 2018-02-15
  

  New:

  • Publish .mjs files for module code to support native esmodules (#1244)
  • Interface type definitions may now be extended with extendSchema (#1222)
  • isValidNameError utility is now exported as a non-throwing alternative to assertValidName (#1237)
  • ExectuableDefinitionNode Flow type is now exported (#1241)

  Fixes:

  • extendSchema now preserves (and allows extending) a list of legacy field names which would otherwise be considered invalid (#1235)
  • Replaced a misplaced licensing header (7e68984)
• 0.13.0 - 2018-02-07
  

  Breaking:

  • Updated to latest spec for SDL for multiple interface implementations (#1169)

    To continue to support the pre-spec variation, use parse(text, {allowLegacySDLImplementsInterfaces: true})

  • Internal module 'graphql/language/kinds' no longer directly exports enum values #1221

    Not that you were relying on internal modules, were you :)

  New:

  • getDescription helper function is now exported (#1165)
  • Allows parsing pre-spec object type SDL with parse(text, {allowLegacySDLEmptyFields: true}) (#1171)
  • Add introspectionFromSchema utility function (#1187)
  • Add lexicographicSortSchema utility function (#1208) (#1220)
  • Allow use of legacy names during schema validation with {allowedLegacyNames: ['__badName']} (#1194)

  Fixed:

  • Only trigger "one instance of graphql" error in DEV environments, removing false errors from minified bundles. (#1174)
  • Fix 'astFromValue' to correctly handle integers and strings (#1181)
  • Fix getTypeMap() not including input types used in directives (#1189)
  • Support executeSync with mutations. (#1198)
  • Fix block string printing edge cases (#1190, #1212)
  • Fix SourceLocation incorrect export causing rollup bundling to fail (#1210)
  • Preserve allowedLegacyNames when using extendSchema (#1226) (added since v0.13.0-rc.1)
• 0.13.0-rc.1 - 2018-01-29
  

  Breaking:

  • Updated to latest spec for SDL for multiple interface implementations (#1169)

    To continue to support the pre-spec variation, use parse(text, {allowLegacySDLImplementsInterfaces: true})

  • Internal module 'graphql/language/kinds' no longer directly exports enum values #1221

    Not that you were relying on internal modules, were you :)

  New:

  • getDescription helper function is now exported (#1165)
  • Allows parsing pre-spec object type SDL with parse(text, {allowLegacySDLEmptyFields: true}) (#1171)
  • Add introspectionFromSchema utility function (#1187)
  • Add lexographicSortSchema utility function (#1208)
  • Allow use of legacy names during schema validation with {allowedLegacyNames: ['__badName']} (#1194)

  Fixed:

  • Only trigger "one instance of graphql" error in DEV environments, removing false errors from minified bundles. (#1174)
  • Fix 'astFromValue' to correctly handle integers and strings (#1181)
  • Fix getTypeMap() not including input types used in directives (#1189)
  • Support executeSync with mutations. (#1198)
  • Fix block string printing edge cases (#1190, #1212)
  • Fix SourceLocation incorrect export causing rollup bundling to fail (#1210)
• 0.12.3 - 2017-12-17
  

  Fixes:

  • Excluded lock files from deployed npm package
• 0.12.2 - 2017-12-17
  

  Fixes:

  • Properly deploy a package on npm which contains es6-modules (#1161)
  • Support 5-year-old legacy GraphQL services (#1162)
• 0.12.1 - 2017-12-17
  

  Flow Type Fixes:

  • Removed experimental.const_params Flow option to ensure support for projects which do not enable this option (#1157, #1160)
  • Changed visit() to return any instead of mixed to reduce the scope of the breaking change of adding Flow types for this function.
• 0.12.0 - 2017-12-16
  Read more
• 0.11.7 - 2017-10-03
  

  Fixes:

  • Fix an issue where flow typed resolvers would unnecessarily need to include __proto__ (#1056)

from graphql GitHub release notes

Commit messages

Package name: graphql

• f995c1f 0.13.2
• 3fe5dee Merge pull request #1290 from samwgoldman/master
• 207a2fd Update to Flow v0.68
• 70f008e Remove redundant Flow type casts (#1278)
• 1fbd7ec Throws descriptive error when non-type used instead of interface (#1282)
• fb27b92 Merge wrappers into type/definition to fix circular imports (#1275) (#1276)
• 4a9e37a Cleanup variables test (extracted from #1267) (#1273)
• 8913bf0 Remove unused dev dependencies
• fbcda23 Add nested nullable test in VariablesInAllowedPositions test
• 65fb6ae buildSchema: Make options optional (#1270)
• 323f2d2 Tests: Remove excessive dependencies and async/await (#1269)
• a62eea8 Unify extending of type system (#1261)
• 261b99b Eliminate circular dependency in validation rules (#1263)
• 499a759 Replace getPromise with isPromise (#1255)
• fb3257c Update iterall and flow v0.66 (#1254)
• c2c01e7 Covariant MaybePromise<T>
• 5ec393e Benchmark introspecting a schema built from SDL in a supplied file. (#1163)
• 8151240 Benchmark task (#1251)
• 86d33b4 Allow buildSchema() to take options. (#1249)
• 31ae8a8 0.13.1
• 2c58b26 Make 'ASTDefinitionBuilder' responsible only for build types from AST (#1230)
• 65afbaf Use .mjs for module code (#1244)
• d640f9f Update to latest release of iterall
• 7e68984 Fix outdated reference to old license

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs