[Snyk] Upgrade @apollo/client from 3.3.20 to 3.8.4#447
Open
victorcmarinho wants to merge 1 commit into
Open
Conversation
Snyk has created this PR to upgrade @apollo/client from 3.3.20 to 3.8.4. See this package in npm: https://www.npmjs.com/package/@apollo/client See this project in Snyk: https://app.snyk.io/org/victorcmarinho/project/5a6b3cb7-4960-4017-8c0c-b5de7cd46e5e?utm_source=github&utm_medium=referral&page=upgrade-pr
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade @apollo/client from 3.3.20 to 3.8.4.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-APOLLOCLIENT-1085706
Why? Has a fix available, CVSS 5.3
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: @apollo/client
-
3.8.4 - 2023-09-19
- #11195
-
3.8.3 - 2023-09-05
- #11193
-
3.8.2 - 2023-09-01
-
-
-
-
-
-
-
-
3.8.1 - 2023-08-10
-
-
3.8.0 - 2023-08-07
-
3.8.0-rc.2 - 2023-08-01
-
import { skipToken } from "@ apollo/client";
function Parent() {
function Parent() {
-
-
-
-
-
-
3.8.0-rc.1 - 2023-07-17
- #11071
-
3.8.0-rc.0 - 2023-07-13
-
-
-
-import { SuspenseCache } from '@ apollo/client';
-
3.8.0-beta.7 - 2023-07-10
-
3.8.0-beta.6 - 2023-07-05
-
-
-
-
-
3.8.0-beta.5 - 2023-06-28
-
3.8.0-beta.4 - 2023-06-20
-
3.8.0-beta.3 - 2023-06-15
-
3.8.0-beta.2 - 2023-06-07
-
3.8.0-beta.1 - 2023-05-31
-
3.8.0-beta.0 - 2023-05-26
-
3.8.0-alpha.15 - 2023-05-17
-
3.8.0-alpha.14 - 2023-05-16
-
3.8.0-alpha.13 - 2023-05-03
-
3.8.0-alpha.12 - 2023-04-13
-
3.8.0-alpha.11 - 2023-03-28
-
3.8.0-alpha.10 - 2023-03-17
-
3.8.0-alpha.9 - 2023-03-15
-
3.8.0-alpha.8 - 2023-03-02
-
3.8.0-alpha.7 - 2023-02-15
-
3.8.0-alpha.6 - 2023-02-07
-
3.8.0-alpha.5 - 2023-01-19
-
3.8.0-alpha.4 - 2023-01-13
-
3.8.0-alpha.3 - 2023-01-03
-
3.8.0-alpha.2 - 2022-12-21
-
3.8.0-alpha.1 - 2022-12-21
-
3.8.0-alpha.0 - 2022-12-09
-
3.7.17 - 2023-07-05
-
3.7.16 - 2023-06-20
-
3.7.15 - 2023-05-26
-
3.7.14 - 2023-05-03
-
3.7.13 - 2023-04-27
-
3.7.12 - 2023-04-12
-
3.7.11 - 2023-03-31
-
3.7.10 - 2023-03-02
-
3.7.9 - 2023-02-17
-
3.7.8 - 2023-02-15
-
3.7.7 - 2023-02-03
-
3.7.6 - 2023-01-31
-
3.7.5 - 2023-01-24
-
3.7.4 - 2023-01-13
-
3.7.3 - 2022-12-15
-
3.7.2 - 2022-12-06
-
3.7.1 - 2022-10-20
-
3.7.0 - 2022-09-30
-
3.7.0-rc.0 - 2022-09-21
-
3.7.0-beta.8 - 2022-09-21
-
3.7.0-beta.7 - 2022-09-08
-
3.7.0-beta.6 - 2022-06-27
-
3.7.0-beta.5 - 2022-06-10
-
3.7.0-beta.4 - 2022-06-10
-
3.7.0-beta.3 - 2022-06-07
-
3.7.0-beta.2 - 2022-06-07
-
3.7.0-beta.1 - 2022-05-26
-
3.7.0-beta.0 - 2022-05-25
-
3.7.0-alpha.6 - 2022-05-19
-
3.7.0-alpha.5 - 2022-05-16
-
3.7.0-alpha.4 - 2022-05-13
-
3.7.0-alpha.3 - 2022-05-09
-
3.7.0-alpha.2 - 2022-05-03
-
3.7.0-alpha.1 - 2022-05-03
-
3.7.0-alpha.0 - 2022-04-27
-
3.6.10 - 2022-09-29
-
3.6.9 - 2022-06-21
-
3.6.8 - 2022-06-10
-
3.6.7 - 2022-06-10
-
3.6.6 - 2022-05-26
-
3.6.5 - 2022-05-23
-
3.6.4 - 2022-05-16
-
3.6.3 - 2022-05-05
-
3.6.2 - 2022-05-03
-
3.6.1 - 2022-04-28
-
3.6.0 - 2022-04-26
-
3.6.0-rc.1 - 2022-04-19
-
3.6.0-rc.0 - 2022-04-18
-
3.6.0-beta.13 - 2022-04-14
-
3.6.0-beta.12 - 2022-04-11
-
3.6.0-beta.11 - 2022-04-05
-
3.6.0-beta.10 - 2022-03-29
-
3.6.0-beta.9 - 2022-03-10
-
3.6.0-beta.8 - 2022-03-10
-
3.6.0-beta.7 - 2022-03-10
-
3.6.0-beta.6 - 2022-02-15
-
3.6.0-beta.5 - 2022-02-04
-
3.6.0-beta.4 - 2022-02-03
-
3.6.0-beta.3 - 2021-11-23
-
3.6.0-beta.2 - 2021-11-22
-
3.6.0-beta.1 - 2021-11-16
-
3.6.0-beta.0 - 2021-11-16
-
3.5.10 - 2022-02-24
-
3.5.9 - 2022-02-15
-
3.5.8 - 2022-01-24
-
3.5.7 - 2022-01-10
-
3.5.6 - 2021-12-07
-
3.5.5 - 2021-11-23
-
3.5.4 - 2021-11-19
-
3.5.3 - 2021-11-17
-
3.5.2 - 2021-11-10
-
3.5.1 - 2021-11-09
-
3.5.0 - 2021-11-08
-
3.5.0-rc.3 - 2021-11-03
-
3.5.0-rc.2 - 2021-10-22
-
3.5.0-rc.1 - 2021-10-04
-
3.5.0-rc.0 - 2021-10-04
-
3.5.0-beta.18 - 2021-10-01
-
3.5.0-beta.17 - 2021-09-27
-
3.5.0-beta.16 - 2021-09-20
-
3.5.0-beta.15 - 2021-09-17
-
3.5.0-beta.14 - 2021-09-17
-
3.5.0-beta.13 - 2021-09-13
-
3.5.0-beta.12 - 2021-09-10
-
3.5.0-beta.11 - 2021-08-30
-
3.5.0-beta.10 - 2021-08-30
-
3.5.0-beta.9 - 2021-08-26
-
3.5.0-beta.8 - 2021-08-24
-
3.5.0-beta.7 - 2021-08-23
-
3.5.0-beta.6 - 2021-08-18
-
3.5.0-beta.5 - 2021-08-09
-
3.5.0-beta.4 - 2021-08-04
-
3.5.0-beta.3 - 2021-08-03
-
3.5.0-beta.2 - 2021-08-02
-
3.5.0-beta.1 - 2021-07-29
-
3.5.0-beta.0 - 2021-07-28
-
3.4.17 - 2021-11-08
-
3.4.16 - 2021-10-04
-
3.4.15 - 2021-09-27
-
3.4.14 - 2021-09-27
-
3.4.13 - 2021-09-20
-
3.4.12 - 2021-09-17
-
3.4.11 - 2021-09-10
-
3.4.10 - 2021-08-27
-
3.4.9 - 2021-08-24
-
3.4.8 - 2021-08-16
-
3.4.7 - 2021-08-09
-
3.4.6 - 2021-08-09
-
3.4.5 - 2021-08-04
-
3.4.4 - 2021-08-03
-
3.4.3 - 2021-08-02
-
3.4.2 - 2021-08-02
-
3.4.1 - 2021-07-29
-
3.4.0 - 2021-07-28
-
3.4.0-rc.23 - 2021-07-23
-
3.4.0-rc.22 - 2021-07-22
-
3.4.0-rc.21 - 2021-07-19
-
3.4.0-rc.20 - 2021-07-15
-
3.4.0-rc.19 - 2021-07-12
-
3.4.0-rc.18 - 2021-07-09
-
3.4.0-rc.17 - 2021-07-06
-
3.4.0-rc.16 - 2021-07-06
-
3.4.0-rc.15 - 2021-06-28
-
3.4.0-rc.14 - 2021-06-24
-
3.4.0-rc.13 - 2021-06-23
-
3.4.0-rc.12 - 2021-06-22
-
3.4.0-rc.11 - 2021-06-17
-
3.4.0-rc.10 - 2021-06-16
-
3.4.0-rc.9 - 2021-06-16
-
3.4.0-rc.8 - 2021-06-16
-
3.4.0-rc.7 - 2021-06-15
-
3.4.0-rc.6 - 2021-06-08
-
3.4.0-rc.5 - 2021-06-07
-
3.4.0-rc.4 - 2021-06-04
-
3.4.0-rc.3 - 2021-06-02
-
3.4.0-rc.2 - 2021-05-26
-
3.4.0-rc.1 - 2021-05-25
-
3.4.0-rc.0 - 2021-05-19
-
3.4.0-beta.28 - 2021-05-19
-
3.4.0-beta.27 - 2021-05-18
-
3.4.0-beta.26 - 2021-05-12
-
3.4.0-beta.25 - 2021-05-11
-
3.4.0-beta.24 - 2021-05-05
-
3.4.0-beta.23 - 2021-04-13
-
3.4.0-beta.22 - 2021-04-10
-
3.4.0-beta.21 - 2021-04-07
-
3.4.0-beta.20 - 2021-04-05
-
3.4.0-beta.19 - 2021-03-26
-
3.4.0-beta.18 - 2021-03-26
-
3.4.0-beta.17 - 2021-03-25
-
3.4.0-beta.16 - 2021-03-24
-
3.4.0-beta.15 - 2021-03-17
-
3.4.0-beta.14 - 2021-03-15
-
3.4.0-beta.13 - 2021-03-11
-
3.4.0-beta.12 - 2021-03-03
-
3.4.0-beta.11 - 2021-02-14
-
3.4.0-beta.10 - 2021-02-09
-
3.4.0-beta.9 - 2021-02-09
-
3.4.0-beta.8 - 2021-02-05
-
3.4.0-beta.7 - 2021-02-04
-
3.4.0-beta.6 - 2021-01-29
-
3.4.0-beta.5 - 2021-01-29
-
3.4.0-beta.4 - 2020-12-16
-
3.4.0-beta.3 - 2020-12-12
-
3.4.0-beta.2 - 2020-12-04
-
3.4.0-beta.1 - 2020-12-03
-
3.4.0-beta.0 - 2020-12-01
-
3.3.21 - 2021-07-06
-
3.3.20 - 2021-06-08
from @apollo/client GitHub release notesPatch Changes
9e59b251dThanks @ phryneas! - Forinvariant.logetc., error arguments are now serialized correctly in the link to the error page.Patch Changes
fd2a4cf0cThanks @ phryneas! - Call devtools registration after ApolloClient is fully set up.Patch Changes
#10072
51045c336Thanks @ Huulivoide! - Fixes race conditions in useReactiveVar that may prevent updates to the reactive variable from propagating through the hook.#11162
d9685f53cThanks @ jerelmiller! - Ensures GraphQL errors returned in subscription payloads adhere to theerrorPolicyset inclient.subscribe(...)calls.#11134
96492e142Thanks @ alessbell! - Use separate type imports in useSuspenseQuery and useBackgroundQuery to workaround SWC compiler issue.#11117
6b8198109Thanks @ phryneas! - Adds a new devtools registration mechanism and tweaks the mechanism behind the"devtools not found" mechanic.
#11186
f1d429f32Thanks @ jerelmiller! - Fix an issue where race conditions when rapidly switching between variables would sometimes result in the wrongdatareturned from the query. Specifically this occurs when a query is triggered with an initial set of variables (VariablesA), then triggers the same query with another set of variables (VariablesB) but switches back to theVariablesAbefore the response forVariablesBis returned. Previously this would result in the data forVariablesBto be displayed whileVariablesAwas active. The data is forVariablesAis now properly returned.#11163
a8a9e11e9Thanks @ bignimbus! - Fix typo in error message: "occured" -> "occurred"#11180
7d9c481e5Thanks @ jerelmiller! - Fixes an issue where refetching fromuseBackgroundQueryviarefetchwith an error after an error was already fetched would get stuck in a loading state.Patch Changes
#11141
c469b1616Thanks @ jerelmiller! - Remove newly exported response iterator helpers that caused problems on some installs where@ types/nodewas not available.IMPORTANT
The following exports were added in version 3.8.0 that are removed with this patch.
isAsyncIterableIteratorisBlobisNodeReadableStreamisNodeResponseisReadableStreamisStreamableBlobRead more
3.8.0-rc.2
Minor Changes
#11112
b4aefcfe9Thanks @ jerelmiller! - Adds support for askipTokensentinel that can be used asoptionsinuseSuspenseQueryanduseBackgroundQueryto skip execution of a query. This works identically to theskipoption but is more type-safe and as such, becomes the recommended way to skip query execution. As such, theskipoption has been deprecated in favor ofskipToken.We are considering the removal of the
skipoption fromuseSuspenseQueryanduseBackgroundQueryin the next major. We are releasing with it now to make migration fromuseQueryeasier and makeskipTokenmore discoverable.const id: number | undefined;
const { data } = useSuspenseQuery(
query,
id ? { variables: { id } } : skipToken
);
Breaking change
Previously
useBackgroundQuerywould always return aqueryRefwhenever query execution was skipped. This behavior been updated to return aqueryRefonly when query execution is enabled. If initializing the hook with it skipped,queryRefis now returned asundefined.To migrate, conditionally render the component that accepts the
queryRefas props.Before
const [queryRef] = useBackgroundQuery(query, skip ? skipToken : undefined);
// ^? QueryReference<TData | undefined>
return <Child queryRef={queryRef} />;
}
function Child({
queryRef,
}: {
queryRef: QueryReference<TData | undefined>;
}) {
const { data } = useReadQuery(queryRef);
}
After
const [queryRef] = useBackgroundQuery(query, skip ? skipToken : undefined);
// ^? QueryReference<TData> | undefined
return queryRef ? <Child queryRef={queryRef} /> : null;
}
function Child({ queryRef }: { queryRef: QueryReference<TData> }) {
const { data } = useReadQuery(queryRef);
}
Patch Changes
#11086
0264fee06Thanks @ jerelmiller! - Fix an issue where a call torefetch,fetchMore, or changingskiptofalsethat returned a result deeply equal to data in the cache would get stuck in a pending state and never resolve.#11115
78739e3efThanks @ phryneas! - Enforceexport typefor all type-level exports.#11103
e3d611dafThanks @ caylahamann! - Fixes a bug inuseMutationso thatonErroris called when an error is returned from the request witherrorPolicyset to 'all' .#11083
f766e8305Thanks @ phryneas! - Adjust the rerender timing ofuseQueryto more closely align withuseFragment. This means that cache updates delivered to both hooks should trigger renders at relatively the same time. Previously, theuseFragmentmight rerender much faster leading to some confusion.#11082
0f1cde3a2Thanks @ phryneas! - Restore Apollo Client 3.7getApolloContextbehaviour3.8.0-rc.1
Patch Changes
4473e925aThanks @ jerelmiller! - #10509 introduced some helpers for determining the type of operation for a GraphQL query. This imported theOperationTypeNodefrom graphql-js which is not available in GraphQL 14. To maintain compatibility with graphql-js v14, this has been reverted to use plain strings.3.8.0-rc.0
Minor Changes
#11058
89bf33c42Thanks @ phryneas! - (Batch)HttpLink: PropagateAbortErrors to the user when a user-providedsignalis passed to the link. Previously, these links would swallow allAbortErrors, potentially causing queries and mutations to never resolve. As a result of this change, users are now expected to handleAbortErrors when passing in a user-providedsignal.#11040
125ef5b2aThanks @ phryneas! -HttpLink/BatchHttpLink: Abort theAbortControllersignal more granularly.Before this change, when
HttpLink/BatchHttpLinkcreated anAbortControllerinternally, the signal would always be
.aborted after the request was completed. This could cause issues with Sentry Session Replay and Next.js App Router Cache invalidations, which just replayed the fetch with the same options - including the cancelledAbortSignal.With this change, the
AbortControllerwill only be.abort()ed by outside events,not as a consequence of the request completing.
Patch Changes
#11053
c0ca70720Thanks @ phryneas! - AddSuspenseCacheas a lazy hidden property on ApolloClient.This means that
SuspenseCacheis now an implementation details of Apollo Clientand you no longer need to manually instantiate it and no longer need to pass it
into
ApolloProvider.Trying to instantiate a
SuspenseCacheinstance in your code will now throw anerror.
Migration:
-const suspenseCache = new SuspenseCache();
-<ApolloProvider client={client} suspenseCache={suspenseCache} />;
+<ApolloProvider client={client} />;
Read more
3.8.0-beta.6
Patch Changes
#11027
e47cfd04eThanks @ phryneas! - Prevents the DevTool installation warning to be turned into a documentation link.#11013
5ed2cfdafThanks @ alessbell! - Make private fieldsinFlightLinkObservablesandfetchCancelFnsprotected in QueryManager in order to make types available in@ apollo/experimental-nextjs-app-supportpackage when extending theApolloClientclass.#11032
6a4da900aThanks @ jerelmiller! - Throw errors inuseSuspenseQueryfor errors returned in incremental chunks whenerrorPolicyisnone. This provides a more consistent behavior of theerrorPolicyin the hook.Potentially breaking change
Previously, if you issued a query with
@ deferand relied onerrorPolicy: 'none'to set theerrorproperty returned fromuseSuspenseQuerywhen the error was returned in an incremental chunk, this error is now thrown. Switch theerrorPolicytoallto avoid throwing the error and instead return it in theerrorproperty.#11025
6092b6edfThanks @ jerelmiller! -useSuspenseQueryanduseBackgroundQuerywill now properly apply changes to its options between renders.Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs