chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #71 · apollo-server-integrations/apollo-server-integration-hapi

renovate · 2025-09-15T01:54:00Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@apollo/server (source)	`5.0.0` → `5.4.0`	devDependencies	minor
@apollo/server-integration-testsuite (source)	`5.0.0` → `5.4.0`	devDependencies	minor
@changesets/changelog-github (source)	`0.5.1` → `0.5.2`	devDependencies	patch
@changesets/cli (source)	`2.29.6` → `2.29.8`	devDependencies	patch
@typescript-eslint/eslint-plugin (source)	`8.43.0` → `8.56.0`	overrides	minor
@typescript-eslint/eslint-plugin (source)	`8.43.0` → `8.56.0`	devDependencies	minor
@typescript-eslint/parser (source)	`8.43.0` → `8.56.0`	overrides	minor
@typescript-eslint/parser (source)	`8.43.0` → `8.56.0`	devDependencies	minor
@typescript-eslint/type-utils (source)	`8.43.0` → `8.56.0`	overrides	minor
@typescript-eslint/utils (source)	`8.43.0` → `8.56.0`	overrides	minor
cspell (source)	`9.2.1` → `9.6.4`	devDependencies	minor
node (source)	`v20.19.5` → `20.20.0`		minor
node	`7.1.1` → `7.2.1`	orb	minor
npm (source)	`11.6.0` → `11.10.0`	volta	minor
prettier (source)	`3.6.2` → `3.8.1`	devDependencies	minor
ts-jest (source)	`29.4.1` → `29.4.6`	devDependencies	patch
typescript (source)	`5.9.2` → `5.9.3`	devDependencies	patch

Release Notes

apollographql/apollo-server (@apollo/server)

`v5.4.0`

Compare Source

Minor Changes

d25a5bd Thanks @phryneas! - ⚠️ SECURITY @apollo/server/standalone:

The default configuration of startStandaloneServer was vulnerable to denial of service (DoS) attacks through specially crafted request bodies with exotic character set encodings.

In accordance with RFC 7159, we now only accept request bodies encoded in UTF-8, UTF-16 (LE or BE), or UTF-32 (LE or BE).
Any other character set will be rejected with a 415 Unsupported Media Type error.
Note that the more recent JSON RFC, RFC 8259, is more strict and will only allow UTF-8.
Since this is a minor release, we have chosen to remain compatible with the more permissive RFC 7159 for now.
In a future major release, we may tighten this restriction further to only allow UTF-8.

If you were not using startStandaloneServer, you were not affected by this vulnerability.

Generally, please note that we provide startStandaloneServer as a convenience tool for quickly getting started with Apollo Server.
For production deployments, we recommend using Apollo Server with a more fully-featured web server framework such as Express, Koa, or Fastify, where you have more control over security-related configuration options.

`v5.3.0`

Compare Source

Minor Changes

#8062 8e54e58 Thanks @cristunaranjo! - Allow configuration of graphql execution options (maxCoercionErrors)

const server = new ApolloServer({
  typeDefs,
  resolvers,
  executionOptions: {
    maxCoercionErrors: 50,
  },
});

#8014 26320bc Thanks @mo4islona! - Expose graphql validation options.

const server = new ApolloServer({
  typeDefs,
  resolvers,
  validationOptions: {
    maxErrors: 10,
  },
});

`v5.2.0`

Compare Source

Minor Changes

#8161 51acbeb Thanks @jerelmiller! - Fix an issue where some bundlers would fail to build because of the dynamic import for the optional peer dependency on @yaacovcr/transform introduced in @apollo/server 5.1.0. To provide support for the legacy incremental format, you must now provide the legacyExperimentalExecuteIncrementally option to the ApolloServer constructor.
```
import { legacyExecuteIncrementally } from '@&#8203;yaacovcr/transform';

const server = new ApolloServer({
  // ...
  legacyExperimentalExecuteIncrementally: legacyExecuteIncrementally,
});
```
If the legacyExperimentalExecuteIncrementally option is not provided and the client sends an Accept header with a value of multipart/mixed; deferSpec=20220824, an error is returned by the server.

`v5.1.0`

Compare Source

Minor Changes

#8148 80a1a1a Thanks @jerelmiller! - Apollo Server now supports the incremental delivery protocol (@defer and @stream) that ships with graphql@17.0.0-alpha.9. To use the current protocol, clients must send the Accept header with a value of multipart/mixed; incrementalSpec=v0.2.

Upgrading to 5.1 will depend on what version of graphql you have installed and whether you already support the incremental delivery protocol.

apollographql/apollo-server (@apollo/server-integration-testsuite)

`v5.4.0`

Compare Source

Patch Changes

Updated dependencies [d25a5bd]:
- @apollo/server@5.4.0

`v5.3.0`

Compare Source

Patch Changes

Updated dependencies [8e54e58, 26320bc]:
- @apollo/server@5.3.0

`v5.2.0`

Compare Source

Patch Changes

Updated dependencies [51acbeb]:
- @apollo/server@5.2.0

`v5.1.0`

Compare Source

Patch Changes

Updated dependencies [80a1a1a]:
- @apollo/server@5.1.0

changesets/changesets (@changesets/changelog-github)

`v0.5.2`

Compare Source

typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)

`v8.56.0`

Compare Source

🚀 Features

support ESLint v10 (#12057)

🩹 Fixes

use parser options from context.languageOptions (#12043)

❤️ Thank You

Brad Zacher @bradzacher
fnx @DMartens
Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.55.0`

Compare Source

🚀 Features

utils: deprecate defaultOptions in favor of meta.defaultOptions (#11992)

🩹 Fixes

eslint-plugin: [no-useless-default-assignment] reduce param index to ts this handling (#11949)
eslint-plugin: [no-useless-default-assignment] report unnecessary defaults in ternary expressions (#11984)
eslint-plugin: [no-useless-default-assignment] require strictNullChecks (#11966, #12000)
eslint-plugin: [no-unused-vars] remove trailing newline when removing entire import (#11990)

❤️ Thank You

Christian Rose @chrros95
Josh Goldberg
Maria Solano @MariaSolOs
Minyeong Kim @minyeong981
SungHyun627 @SungHyun627
Yukihiro Hasegawa @y-hsgw

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.54.0`

Compare Source

🚀 Features

eslint-plugin-internal: add prefer-tsutils-methods rule (#11974, #11625)
typescript-estree: add shortcut methods to ParserServicesWithTypeInformation (#11965, #11955)

🩹 Fixes

eslint-plugin: [no-unnecessary-type-assertion] check both base constraint and actual type for non-null assertions (#11967, #11559)
deps: update dependency prettier to v3.8.0 (#11991)
scope-manager: fix catch clause scopes def.name (#11982)
eslint-plugin: [no-unused-private-class-members] private destructured class member is defined but used (#11785)

❤️ Thank You

Brad Zacher @bradzacher
Josh Goldberg
MinJae @Ju-MINJAE
Minyeong Kim @minyeong981
overlookmotel
Yuya Yoshioka @YuyaYoshioka
김현수 @Kimsoo0119

You can read about our versioning strategy and releases on our website.

`v8.53.1`

Compare Source

🩹 Fixes

utils: make RuleCreator root defaultOptions optional (#11956)
eslint-plugin: [consistent-indexed-object-style] skip fixer if interface is a default export (#11951)

❤️ Thank You

Cameron
Yukihiro Hasegawa @y-hsgw

You can read about our versioning strategy and releases on our website.

`v8.53.0`

Compare Source

🚀 Features

eslint-plugin: add rule [strict-void-return] (#9707)
eslint-plugin: [no-unused-vars] add a fixer to remove unused imports (#11922)

🩹 Fixes

eslint-plugin: [no-useless-default-assignment] fix false positive for parameters corresponding to a rest parameter (#11916)
eslint-plugin: replace unclear "error typed" with more helpful description (#11704)
typescript-estree: forbid invalid extends and implements in interface declaration (#11935)
typescript-estree: forbid invalid class implements (#11934)
typescript-estree: forbid type-only import with both default and named specifiers (#11930)

❤️ Thank You

Brad Zacher @bradzacher
fisker Cheung @fisker
Josh Goldberg
Josh Goldberg ✨
Kirk Waiblinger
Niki @phaux
Nikita
SungHyun627 @SungHyun627
Will Harney @wjhsf

You can read about our versioning strategy and releases on our website.

`v8.52.0`

Compare Source

🚀 Features

eslint-plugin-internal: [no-multiple-lines-of-errors] add rule (#11899)

🩹 Fixes

eslint-plugin: [no-base-to-string] detect @@toPrimitive and valueOf (#11901)
eslint-plugin: [no-useless-default-assignment] handle conditional initializer (#11908)

❤️ Thank You

Josh Goldberg ✨
Ulrich Stark

You can read about our versioning strategy and releases on our website.

`v8.51.0`

Compare Source

🚀 Features

eslint-plugin: add namespace to plugin meta (#11885)
eslint-plugin: [no-useless-default-assignment] fix some cases to optional syntax (#11871)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] handle MemberExpression in final chain position (#11835)
eslint-plugin: bump ts-api-utils to 2.2.0 (#11881)
eslint-plugin: remove fixable from no-dynamic-delete rule (#11876)
eslint-plugin: fix crash and false positives in no-useless-default-assignment (#11845)

❤️ Thank You

Josh Goldberg ✨
Kirk Waiblinger @kirkwaiblinger
mdm317
Ulrich Stark
Yannick Decat @mho22

You can read about our versioning strategy and releases on our website.

`v8.50.1`

Compare Source

🩹 Fixes

eslint-plugin: [no-unnecessary-type-assertion] correct handling of undefined vs. void (#11826)
eslint-plugin: [method-signature-style] ignore methods that return this (#11813)

❤️ Thank You

Josh Goldberg ✨
Tamashoo @Tamashoo

You can read about our versioning strategy and releases on our website.

`v8.50.0`

Compare Source

🚀 Features

eslint-plugin: [no-useless-default-assignment] add rule (#11720)

❤️ Thank You

Josh Goldberg ✨
Ulrich Stark

You can read about our versioning strategy and releases on our website.

`v8.49.0`

Compare Source

🚀 Features

eslint-plugin: use Intl.Segmenter instead of graphemer (#11804)

🩹 Fixes

deps: update dependency prettier to v3.7.2 (#11820)

❤️ Thank You

Justin McBride
Kirk Waiblinger @kirkwaiblinger

You can read about our versioning strategy and releases on our website.

`v8.48.1`

Compare Source

🩹 Fixes

eslint-plugin: [restrict-template-expressions] check base types in allow list (#11764, #11759)
eslint-plugin: honor ignored base types on generic classes (#11767)
eslint-plugin: [consistent-type-exports] check value flag before resolving alias (#11769)

❤️ Thank You

Josh Goldberg
OleksandraKordonets
SangheeSon @Higangssh
tao

You can read about our versioning strategy and releases on our website.

`v8.48.0`

Compare Source

🚀 Features

eslint-plugin: [no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)

🩹 Fixes

typescript-estree: disallow binding patterns in parameter properties (#11760)
eslint-plugin: [consistent-generic-constructors] ignore when constructor is typed array (#10477)

❤️ Thank You

Dima Barabash @dbarabashh
JamesHenry @JamesHenry
Josh Goldberg
mdm317 @gen-ip-1

You can read about our versioning strategy and releases on our website.

`v8.47.0`

Compare Source

🚀 Features

eslint-plugin: [no-unused-private-class-members] new extension rule (#10913)

❤️ Thank You

Brad Zacher @bradzacher

You can read about our versioning strategy and releases on our website.

`v8.46.4`

Compare Source

🩹 Fixes

parser: error when both projectService and project are set (#11333)
eslint-plugin: handle override modifier in promise-function-async fixer (#11730)
eslint-plugin: [no-deprecated] fix double-report on computed literal identifiers (#11006, #10958)

❤️ Thank You

Evgeny Stepanovych @undsoft
Kentaro Suzuki @sushichan044
Maria Solano @MariaSolOs

You can read about our versioning strategy and releases on our website.

`v8.46.3`

Compare Source

🩹 Fixes

eslint-plugin: [no-duplicate-enum-values] support signed numbers (#11722, #11723)
eslint-plugin: [no-misused-promises] expand union type to retrieve target property (#11706)

❤️ Thank You

Evgeny Stepanovych @undsoft
tao

You can read about our versioning strategy and releases on our website.

`v8.46.2`

Compare Source

🩹 Fixes

eslint-plugin: [prefer-optional-chain] skip optional chaining when it could change the result (#11702)

❤️ Thank You

mdm317

You can read about our versioning strategy and releases on our website.

`v8.46.1`

Compare Source

🩹 Fixes

eslint-plugin: [no-misused-promises] special-case .finally not to report when a promise returning function is provided as an argument (#11667)
eslint-plugin: [prefer-optional-chain] include mixed "nullish comparison style" chains in checks (#11533)

❤️ Thank You

mdm317
Ronen Amiel

You can read about our versioning strategy and releases on our website.

`v8.46.0`

Compare Source

🚀 Features

eslint-plugin: [no-unsafe-member-access] add allowOptionalChaining option (#11659)
rule-schema-to-typescript-types: clean up and make public (#11633)

🩹 Fixes

eslint-plugin: [prefer-readonly-parameter-types] ignore tagged primitives (#11660)
typescript-estree: forbid abstract method and accessor to have implementation (#11657)
eslint-plugin: removed error type previously deprecated (#11674)
eslint-plugin: [no-deprecated] ignore deprecated export imports (#11603)
eslint-plugin: [unbound-method] improve wording around this: void and binding (#11634)
rule-tester: deprecate TestCaseError#type and LintMessage#nodeType (#11628)
eslint-plugin: [no-floating-promises] remove excess parentheses in suggestions (#11487)

❤️ Thank You

fisker Cheung @fisker
Josh Goldberg ✨
Kirk Waiblinger @kirkwaiblinger
Mark de Dios @peanutenthusiast
Richard Torres @richardtorres314
Victor Genaev @mainframev

You can read about our versioning strategy and releases on our website.

`v8.45.0`

Compare Source

🚀 Features

eslint-plugin: expose rule name via RuleModule interface (#11616)

🩹 Fixes

eslint-plugin: [prefer-nullish-coalescing] ignoreBooleanCoercion should not apply to top-level ternary expressions (#11614)
eslint-plugin: [no-base-to-string] check if superclass is ignored (#11617)

❤️ Thank You

mdm317
Moses Odutusin @thebolarin
Yukihiro Hasegawa @y-hsgw

You can read about our versioning strategy and releases on our website.

`v8.44.1`

Compare Source

🩹 Fixes

eslint-plugin: [await-thenable] should not report passing values to promise aggregators which may be a promise in an array literal (#11611)
eslint-plugin: [no-unsafe-enum-comparison] support unions of literals (#11599)
eslint-plugin: [no-base-to-string] make ignoredTypeNames match type names without generics (#11597)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger
mdm317
Ronen Amiel

You can read about our versioning strategy and releases on our website.

`v8.44.0`

Compare Source

🚀 Features

eslint-plugin: [await-thenable] report invalid (non-promise) values passed to promise aggregator methods (#11267)

🩹 Fixes

eslint-plugin: [no-unnecessary-type-conversion] ignore enum members (#11490)

❤️ Thank You

Moses Odutusin @thebolarin
Ronen Amiel

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@typescript-eslint/parser)

`v8.56.0`

Compare Source

🚀 Features

support ESLint v10 (#12057)

❤️ Thank You

Brad Zacher @bradzacher
Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.