Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion sdk/@launchdarkly/observability-node/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -66,7 +66,7 @@
"@types/lru-cache": "^7.10.10",
"@types/node": "^14.18.63",
"encoding": "^0.1.13",
"rollup": "^4.34.8",
"rollup": "^4.59.0",
"typedoc": "^0.28.7",
"typescript": "^5.0.4",
"vitest": "^2.1.3"
Expand Down
2 changes: 1 addition & 1 deletion sdk/highlight-apollo/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@
"access": "public"
},
"dependencies": {
"@apollo/server": "^4.13.0",
"@apollo/server": "^5.5.0",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Major version bump of @apollo/server breaks published package consumers

High Severity

The @apollo/server dependency in @highlight-run/apollo is bumped from v4 to v5 — a major version change — without a corresponding major version bump of the published package itself (currently 3.4.49). Since @apollo/server is listed in dependencies (not peerDependencies), consumers using Apollo Server v4 will now get a conflicting v5 installed transitively. This causes TypeScript type incompatibilities (the ApolloServerPlugin type from v5 won't match the v4 ApolloServer constructor's expectations) and introduces stricter runtime requirements (Node.js v20+, graphql@^16.11.0) that consumers may not satisfy. This is a semver-breaking change to a published npm package being shipped as a patch-level update.

Fix in Cursor Fix in Web

"@highlight-run/node": "workspace:*",
"apollo-server-plugin-base": "^3"
},
Expand Down
2 changes: 1 addition & 1 deletion sdk/highlight-next/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -78,7 +78,7 @@
"@types/node": "^16.18.113",
"chokidar-cli": "^3.0.0",
"eslint": "^9.26.0",
"rollup": "^4.4.1",
"rollup": "^4.59.0",
"semver": "^7.6.3",
"tree-kill": "^1.2.2",
"typescript": "^5.0.4",
Expand Down
2 changes: 1 addition & 1 deletion sdk/highlight-node/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@
"@types/lru-cache": "^7.10.10",
"@types/node": "^14.18.63",
"encoding": "^0.1.13",
"rollup": "^4.34.8",
"rollup": "^4.59.0",
"typescript": "^5.0.4",
"vitest": "^2.1.3"
}
Expand Down
Loading
Loading