Skip to content

build(deps): bump the npm_and_yarn group across 2 directories with 4 updates #437

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dependabot wants to merge 1 commit into from
Closed

build(deps): bump the npm_and_yarn group across 2 directories with 4 updates #437

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion sdk/highlight-apollo/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@
"access": "public"
},
"dependencies": {
"@apollo/server": "^4.13.0",
"@apollo/server": "^5.5.0",
Copy link
Copy Markdown

@cursor cursor bot Mar 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Major version bump of @apollo/server breaks published package consumers

High Severity

The @apollo/server dependency in the published @highlight-run/apollo package (v3.4.49) is bumped from ^4.13.0 to ^5.5.0 — a major version change — without a corresponding major version bump of the package itself. Since @apollo/server is declared as a regular dependency (not a peerDependency), consumers still on @apollo/server v4 will end up with two incompatible versions installed. The ApolloServerHighlightPlugin will return a plugin typed against v5's ApolloServerPlugin, which won't be type-compatible with a consumer's v4 ApolloServer constructor, breaking TypeScript compilation. Apollo Server v5 also raises the graphql peer dependency to ^16.11.0 and drops Node.js < 20 support, which can further break downstream consumers.

Fix in Cursor Fix in Web

"@highlight-run/node": "workspace:*",
"apollo-server-plugin-base": "^3"
},
Expand Down
177 changes: 93 additions & 84 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -555,52 +555,48 @@ __metadata:
languageName: node
linkType: hard

"@apollo/server-gateway-interface@npm:^1.1.1":
version: 1.1.1
resolution: "@apollo/server-gateway-interface@npm:1.1.1"
"@apollo/server-gateway-interface@npm:^2.0.0":
version: 2.0.0
resolution: "@apollo/server-gateway-interface@npm:2.0.0"
dependencies:
"@apollo/usage-reporting-protobuf": "npm:^4.1.1"
"@apollo/utils.fetcher": "npm:^2.0.0"
"@apollo/utils.keyvaluecache": "npm:^2.1.0"
"@apollo/utils.logger": "npm:^2.0.0"
"@apollo/utils.fetcher": "npm:^3.0.0"
"@apollo/utils.keyvaluecache": "npm:^4.0.0"
"@apollo/utils.logger": "npm:^3.0.0"
peerDependencies:
graphql: 14.x || 15.x || 16.x
checksum: 10/af0e95399297aa403c32ffff08c6dfa91a70aae73d5954f36e357f045cdb7e89f3bb4c3e70816d244f8f18af21d257bc79e934dd8bbaa1214c5f6d42a6a825d0
checksum: 10/2186a2926afdae07b2afbe927ff8eb7caf045f6906c5e0db8f84d38557588a39c21742f8fe06bb95d4a240f19e4ee5724135ef3b7980929b68888239875c6d83
languageName: node
linkType: hard

"@apollo/server@npm:^4.13.0":
version: 4.13.0
resolution: "@apollo/server@npm:4.13.0"
"@apollo/server@npm:^5.5.0":
version: 5.5.0
resolution: "@apollo/server@npm:5.5.0"
dependencies:
"@apollo/cache-control-types": "npm:^1.0.3"
"@apollo/server-gateway-interface": "npm:^1.1.1"
"@apollo/server-gateway-interface": "npm:^2.0.0"
"@apollo/usage-reporting-protobuf": "npm:^4.1.1"
"@apollo/utils.createhash": "npm:^2.0.2"
"@apollo/utils.fetcher": "npm:^2.0.0"
"@apollo/utils.isnodelike": "npm:^2.0.0"
"@apollo/utils.keyvaluecache": "npm:^2.1.0"
"@apollo/utils.logger": "npm:^2.0.0"
"@apollo/utils.createhash": "npm:^3.0.0"
"@apollo/utils.fetcher": "npm:^3.0.0"
"@apollo/utils.isnodelike": "npm:^3.0.0"
"@apollo/utils.keyvaluecache": "npm:^4.0.0"
"@apollo/utils.logger": "npm:^3.0.0"
"@apollo/utils.usagereporting": "npm:^2.1.0"
"@apollo/utils.withrequired": "npm:^2.0.0"
"@graphql-tools/schema": "npm:^9.0.0"
"@types/express": "npm:^4.17.13"
"@types/express-serve-static-core": "npm:^4.17.30"
"@types/node-fetch": "npm:^2.6.1"
"@apollo/utils.withrequired": "npm:^3.0.0"
"@graphql-tools/schema": "npm:^10.0.0"
async-retry: "npm:^1.2.1"
body-parser: "npm:^2.2.2"
content-type: "npm:^1.0.5"
cors: "npm:^2.8.5"
express: "npm:^4.21.1"
finalhandler: "npm:^2.1.0"
loglevel: "npm:^1.6.8"
lru-cache: "npm:^7.10.1"
negotiator: "npm:^0.6.3"
node-abort-controller: "npm:^3.1.1"
node-fetch: "npm:^2.6.7"
uuid: "npm:^9.0.0"
whatwg-mimetype: "npm:^3.0.0"
lru-cache: "npm:^11.1.0"
negotiator: "npm:^1.0.0"
uuid: "npm:^11.1.0"
whatwg-mimetype: "npm:^4.0.0"
peerDependencies:
graphql: ^16.6.0
checksum: 10/7dbe6b7f2ff8dc3d397310c90fb0da281cec744346e9b7591066c2102c72f98b300df5b1c5b526eef8ed443a5d88123a19fdd53ec44c064598799cc73bc91469
graphql: ^16.11.0
checksum: 10/35ec7455e90d15cc44c6cd4ea0c0983cd642d0cad843e7e0cb4d7754762ccd7a9e23b05ab9c1313c175b4179e6f4fa08ecb1ad0f34a429a53840cbf6964faef2
languageName: node
linkType: hard

Expand All @@ -613,13 +609,13 @@ __metadata:
languageName: node
linkType: hard

"@apollo/utils.createhash@npm:^2.0.2":
version: 2.0.2
resolution: "@apollo/utils.createhash@npm:2.0.2"
"@apollo/utils.createhash@npm:^3.0.0":
version: 3.0.1
resolution: "@apollo/utils.createhash@npm:3.0.1"
dependencies:
"@apollo/utils.isnodelike": "npm:^2.0.1"
"@apollo/utils.isnodelike": "npm:^3.0.0"
sha.js: "npm:^2.4.11"
checksum: 10/54b299aedae46052374e008b714b4f60995a86f2e08514cc1c1105d5551d3207843e857177e6451ff9257578be552115d8c04f77200cc0aef9019405c42170ff
checksum: 10/3ceb2bf47c47635dc796d26ff82eb8b0d21dc6a003b35d1e165303f9e8d3422bb7c35a702b4d10fc62e8d86019e28d760ad2377978d7dc78879b71d79901398e
languageName: node
linkType: hard

Expand All @@ -641,17 +637,17 @@ __metadata:
languageName: node
linkType: hard

"@apollo/utils.fetcher@npm:^2.0.0":
version: 2.0.0
resolution: "@apollo/utils.fetcher@npm:2.0.0"
checksum: 10/3fbe9bb7074ebf979c33a6a59c2ab5b7404a40974bca0d71a162f23174dc7c538861bf7c7896d480ceb33f35c0b93ce89df880c7f0871294aa3cb6e464e87f94
"@apollo/utils.fetcher@npm:^3.0.0":
version: 3.1.0
resolution: "@apollo/utils.fetcher@npm:3.1.0"
checksum: 10/be536a773c2895e5cfc9212ebbb4719a693d0f501088ca14ff008468064f49a46f3ee4eb148bc4438fd408581c13317ce05bc3ad9068f2024f9cfaa4538a1de2
languageName: node
linkType: hard

"@apollo/utils.isnodelike@npm:^2.0.0, @apollo/utils.isnodelike@npm:^2.0.1":
version: 2.0.1
resolution: "@apollo/utils.isnodelike@npm:2.0.1"
checksum: 10/c2e858186a60cccb7e4fc53e8b97b2a4d5470cd4975ad9cccd29e57a23eff1aa3a0c03edceb13c423632224ce2c327c6f1bb8bd77dc3fb039316bba5750536ec
"@apollo/utils.isnodelike@npm:^3.0.0":
version: 3.0.0
resolution: "@apollo/utils.isnodelike@npm:3.0.0"
checksum: 10/c441fe25ae8a01167ad50806d7ba81f0f461ad28a413579d37867e76936bac03bf0938faee87afeeaf9e2b5dd5a6ae27595cfcc19aa213b990eef77e195103c5
languageName: node
linkType: hard

Expand All @@ -665,13 +661,13 @@ __metadata:
languageName: node
linkType: hard

"@apollo/utils.keyvaluecache@npm:^2.1.0":
version: 2.1.0
resolution: "@apollo/utils.keyvaluecache@npm:2.1.0"
"@apollo/utils.keyvaluecache@npm:^4.0.0":
version: 4.0.0
resolution: "@apollo/utils.keyvaluecache@npm:4.0.0"
dependencies:
"@apollo/utils.logger": "npm:^2.0.0"
lru-cache: "npm:^7.14.1"
checksum: 10/dcd04edee72dcbeecb2047b10507d979575dd8d673cf4a0003388179c6e3ed579f4a18a4671ad4d9659dbef00c252f2794bcc187aa4d704520b85f0bcd1474da
"@apollo/utils.logger": "npm:^3.0.0"
lru-cache: "npm:^11.0.0"
checksum: 10/e18d48d0de490bec0ae1d0849409dcd9415ef8b64de963df9955f21bb0852f058149a1862c585abd9d4d64c0b75f2d532b7c504695605177dfa74463b135498b
languageName: node
linkType: hard

Expand All @@ -682,10 +678,10 @@ __metadata:
languageName: node
linkType: hard

"@apollo/utils.logger@npm:^2.0.0":
version: 2.0.0
resolution: "@apollo/utils.logger@npm:2.0.0"
checksum: 10/bfe87036382adaf1b5f05acc8e926b6316a8b37dc0c0b20ae0c2010b61085d018620203eda9cb6884e650f3d971a4dfdbc30980deedba99d219ba2abd9bd8ffa
"@apollo/utils.logger@npm:^3.0.0":
version: 3.0.0
resolution: "@apollo/utils.logger@npm:3.0.0"
checksum: 10/e3bd3e55e7ff86410afa2620dd767073dcf017a8d1e5ab5484fe293a42d06c38e73b5dc5ada99dbb7b9ef2919f225214f7a7d3944a1665e72d84082837359c0b
languageName: node
linkType: hard

Expand Down Expand Up @@ -797,10 +793,10 @@ __metadata:
languageName: node
linkType: hard

"@apollo/utils.withrequired@npm:^2.0.0":
version: 2.0.0
resolution: "@apollo/utils.withrequired@npm:2.0.0"
checksum: 10/144cef2859318879b3478693eb891c31afa75f30e807bdfbef98ec3aa93c74cb0a3f76d245dbdedd4954f52c1b9ec8bebbccc69eb5d8bb8109c88c4352225e24
"@apollo/utils.withrequired@npm:^3.0.0":
version: 3.0.0
resolution: "@apollo/utils.withrequired@npm:3.0.0"
checksum: 10/63fb7e93a64d24b0f02ef8a14f53ed16288a9481bfde401b679614d00b18ecc894bac8e36e9bff53d6955a031d2a080d4056914530bf32592a131eb63a4c7ed0
languageName: node
linkType: hard

Expand Down Expand Up @@ -6683,7 +6679,7 @@ __metadata:
languageName: node
linkType: hard

"@graphql-tools/schema@npm:^9.0.0, @graphql-tools/schema@npm:^9.0.18":
"@graphql-tools/schema@npm:^9.0.18":
version: 9.0.19
resolution: "@graphql-tools/schema@npm:9.0.19"
dependencies:
Expand Down Expand Up @@ -6858,7 +6854,7 @@ __metadata:
version: 0.0.0-use.local
resolution: "@highlight-run/apollo@workspace:sdk/highlight-apollo"
dependencies:
"@apollo/server": "npm:^4.13.0"
"@apollo/server": "npm:^5.5.0"
"@highlight-run/node": "workspace:*"
apollo-server: "npm:^3.13.0"
apollo-server-plugin-base: "npm:^3"
Expand Down Expand Up @@ -16576,7 +16572,7 @@ __metadata:
languageName: node
linkType: hard

"@types/express-serve-static-core@npm:^4.17.18, @types/express-serve-static-core@npm:^4.17.21, @types/express-serve-static-core@npm:^4.17.30, @types/express-serve-static-core@npm:^4.17.33":
"@types/express-serve-static-core@npm:^4.17.18, @types/express-serve-static-core@npm:^4.17.21, @types/express-serve-static-core@npm:^4.17.33":
version: 4.19.8
resolution: "@types/express-serve-static-core@npm:4.19.8"
dependencies:
Expand Down Expand Up @@ -16622,7 +16618,7 @@ __metadata:
languageName: node
linkType: hard

"@types/express@npm:^4.17.13, @types/express@npm:^4.17.14, @types/express@npm:^4.17.17, @types/express@npm:^4.17.25":
"@types/express@npm:^4.17.14, @types/express@npm:^4.17.17, @types/express@npm:^4.17.25":
version: 4.17.25
resolution: "@types/express@npm:4.17.25"
dependencies:
Expand Down Expand Up @@ -17034,16 +17030,6 @@ __metadata:
languageName: node
linkType: hard

"@types/node-fetch@npm:^2.6.1":
version: 2.6.11
resolution: "@types/node-fetch@npm:2.6.11"
dependencies:
"@types/node": "npm:*"
form-data: "npm:^4.0.0"
checksum: 10/c416df8f182ec3826278ea42557fda08f169a48a05e60722d9c8edd4e5b2076ae281c6b6601ad406035b7201f885b0257983b61c26b3f9eb0f41192a807b5de5
languageName: node
linkType: hard

"@types/node-forge@npm:^1.3.0":
version: 1.3.11
resolution: "@types/node-forge@npm:1.3.11"
Expand Down Expand Up @@ -21229,7 +21215,7 @@ __metadata:
languageName: node
linkType: hard

"body-parser@npm:^2.0.1, body-parser@npm:^2.2.0":
"body-parser@npm:^2.0.1, body-parser@npm:^2.2.0, body-parser@npm:^2.2.2":
version: 2.2.2
resolution: "body-parser@npm:2.2.2"
dependencies:
Expand Down Expand Up @@ -27121,7 +27107,7 @@ __metadata:
languageName: node
linkType: hard

"express@npm:^4.16.4, express@npm:^4.17.1, express@npm:^4.19.2, express@npm:^4.20.0, express@npm:^4.21.1, express@npm:^4.22.1":
"express@npm:^4.16.4, express@npm:^4.17.1, express@npm:^4.19.2, express@npm:^4.20.0, express@npm:^4.22.1":
version: 4.22.1
resolution: "express@npm:4.22.1"
dependencies:
Expand Down Expand Up @@ -28990,8 +28976,8 @@ __metadata:
linkType: hard

"handlebars@npm:^4.7.7":
version: 4.7.8
resolution: "handlebars@npm:4.7.8"
version: 4.7.9
resolution: "handlebars@npm:4.7.9"
dependencies:
minimist: "npm:^1.2.5"
neo-async: "npm:^2.6.2"
Expand All @@ -29003,7 +28989,7 @@ __metadata:
optional: true
bin:
handlebars: bin/handlebars
checksum: 10/bd528f4dd150adf67f3f857118ef0fa43ff79a153b1d943fa0a770f2599e38b25a7a0dbac1a3611a4ec86970fd2325a81310fb788b5c892308c9f8743bd02e11
checksum: 10/e755433d652e8a15fc02f83d7478e652359e7a4d354c4328818853ed4f8a39d4a09e1d22dad3c7213c5240864a65b3c840970b8b181745575dd957dd258f2b8d
languageName: node
linkType: hard

Expand Down Expand Up @@ -34296,6 +34282,13 @@ __metadata:
languageName: node
linkType: hard

"lru-cache@npm:^11.0.0, lru-cache@npm:^11.1.0":
version: 11.2.7
resolution: "lru-cache@npm:11.2.7"
checksum: 10/fbff4b8dee8189dde9b52cdfb3ea89b4c9cec094c1538cd30d1f47299477ff312efdb35f7994477ec72328f8e754e232b26a143feda1bd1f79ff22da6664d2c5
languageName: node
linkType: hard

"lru-cache@npm:^5.1.1":
version: 5.1.1
resolution: "lru-cache@npm:5.1.1"
Expand All @@ -34314,7 +34307,7 @@ __metadata:
languageName: node
linkType: hard

"lru-cache@npm:^7.10.1, lru-cache@npm:^7.14.1, lru-cache@npm:^7.4.4, lru-cache@npm:^7.5.1, lru-cache@npm:^7.7.1":
"lru-cache@npm:^7.14.1, lru-cache@npm:^7.4.4, lru-cache@npm:^7.5.1, lru-cache@npm:^7.7.1":
version: 7.18.3
resolution: "lru-cache@npm:7.18.3"
checksum: 10/6029ca5aba3aacb554e919d7ef804fffd4adfc4c83db00fac8248c7c78811fb6d4b6f70f7fd9d55032b3823446546a007edaa66ad1f2377ae833bd983fac5d98
Expand Down Expand Up @@ -36969,7 +36962,7 @@ __metadata:
languageName: node
linkType: hard

"node-abort-controller@npm:^3.0.1, node-abort-controller@npm:^3.1.1":
"node-abort-controller@npm:^3.0.1":
version: 3.1.1
resolution: "node-abort-controller@npm:3.1.1"
checksum: 10/0a2cdb7ec0aeaf3cb31e1ca0e192f5add48f1c5c9c9ed822129f9dddbd9432f69b7425982f94ce803c56a2104884530aa67cd57696e5774b2e5b8ec2f58de042
Expand Down Expand Up @@ -38897,9 +38890,9 @@ __metadata:
linkType: hard

"picomatch@npm:^2.0.4, picomatch@npm:^2.2.1, picomatch@npm:^2.2.3, picomatch@npm:^2.3.1":
version: 2.3.1
resolution: "picomatch@npm:2.3.1"
checksum: 10/60c2595003b05e4535394d1da94850f5372c9427ca4413b71210f437f7b2ca091dbd611c45e8b37d10036fa8eade25c1b8951654f9d3973bfa66a2ff4d3b08bc
version: 2.3.2
resolution: "picomatch@npm:2.3.2"
checksum: 10/b788ef8148a2415b9dec12f0bb350ae6a5830f8f1950e472abc2f5225494debf7d1b75eb031df0ceaea9e8ec3e7bad599e8dbf3c60d61b42be429ba41bff4426
languageName: node
linkType: hard

Expand Down Expand Up @@ -47077,6 +47070,15 @@ __metadata:
languageName: node
linkType: hard

"uuid@npm:^11.1.0":
version: 11.1.0
resolution: "uuid@npm:11.1.0"
bin:
uuid: dist/esm/bin/uuid
checksum: 10/d2da43b49b154d154574891ced66d0c83fc70caaad87e043400cf644423b067542d6f3eb641b7c819224a7cd3b4c2f21906acbedd6ec9c6a05887aa9115a9cf5
languageName: node
linkType: hard

"uuid@npm:^3.3.2":
version: 3.4.0
resolution: "uuid@npm:3.4.0"
Expand Down Expand Up @@ -48329,6 +48331,13 @@ __metadata:
languageName: node
linkType: hard

"whatwg-mimetype@npm:^4.0.0":
version: 4.0.0
resolution: "whatwg-mimetype@npm:4.0.0"
checksum: 10/894a618e2d90bf444b6f309f3ceb6e58cf21b2beaa00c8b333696958c4076f0c7b30b9d33413c9ffff7c5832a0a0c8569e5bb347ef44beded72aeefd0acd62e8
languageName: node
linkType: hard

"whatwg-url-without-unicode@npm:8.0.0-3":
version: 8.0.0-3
resolution: "whatwg-url-without-unicode@npm:8.0.0-3"
Expand Down Expand Up @@ -48977,9 +48986,9 @@ __metadata:
linkType: hard

"yaml@npm:^1.10.0, yaml@npm:^1.10.2":
version: 1.10.2
resolution: "yaml@npm:1.10.2"
checksum: 10/e088b37b4d4885b70b50c9fa1b7e54bd2e27f5c87205f9deaffd1fb293ab263d9c964feadb9817a7b129a5bf30a06582cb08750f810568ecc14f3cdbabb79cb3
version: 1.10.3
resolution: "yaml@npm:1.10.3"
checksum: 10/e2ef2feb92c708138f016c69777a0f1e45f6d3c5e7cbcda30807a98a37eda2e008bd4fa57352b043c65245a4c799d0c99d1f9b3425de40e70929e26d2ea38215
languageName: node
linkType: hard

Expand Down
Loading