Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): bump the npm_and_yarn group with 2 updates #1912

Merged
merged 1 commit into from
Dec 30, 2024
Merged

chore(deps): bump the npm_and_yarn group with 2 updates #1912

merged 1 commit into from
Dec 30, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 6, 2024 •
edited
Loading

Bumps the npm_and_yarn group with 2 updates: @apollo/gateway and @apollo/query-planner.

Updates @apollo/gateway from 2.5.6 to 2.9.3

Release notes

Sourced from @​apollo/gateway's releases.

@​apollo/gateway@​2.9.3

Patch Changes

@​apollo/gateway@​2.9.2

Patch Changes

@​apollo/gateway@​2.9.1

Patch Changes

@​apollo/gateway@​2.9.0

Patch Changes

@​apollo/gateway@​2.9.0-connectors.9

Patch Changes

  • fix: skip feature check on satisfiability validation

  • Updated dependencies []:

    • @​apollo/query-planner@​2.9.0-connectors.9
    • @​apollo/composition@​2.9.0-connectors.9
    • @​apollo/federation-internals@​2.9.0-connectors.9

@​apollo/gateway@​2.9.0-connectors.8

CHANGELOG for @apollo/gateway

... (truncated)

Changelog

Sourced from @​apollo/gateway's changelog.

2.9.3

Patch Changes

2.9.2

Patch Changes

2.9.1

Patch Changes

2.9.0

Patch Changes

2.8.5

🔒 Security

CVE-2024-43414: Prevent uncontrolled recursion for complex queries

Correct a bug where complex queries can cause uncontrolled recursion due to failure to reduce the number of possible query plans (classified as CWE-674). (#3128)

... (truncated)

Commits

Updates @apollo/query-planner from 2.5.6 to 2.9.3

Release notes

Sourced from @​apollo/query-planner's releases.

@​apollo/query-planner@​2.9.3

Patch Changes

  • Fixes edge case where contextual arguments can yield inefficient query plans. Also fixes naming of query plan arguments which can be a problem when using contextual variables in multiple subgraphs (#3140)

  • Ensure all useless fetch groups are removed (#3163)

    When removing "useless" fetch nodes/groups we remove them in-place while still iterating over the same list. This leads to potentially skipping processing of some the children fetch nodes, as when we remove nodes we left shift all remaining children but the iterator keeps the old position unchanged effectively skipping next child.

  • fix: normalize field set selection sets (#3162)

    FieldSet scalar represents a selection set without outer braces. This means that users could potentially specify some selections that could be normalized (i.e. eliminate duplicate field selections, hoist/collapse unnecessary inline fragments, etc). Previously we were using @requires field set selection AS-IS for edge conditions. With this change we will now normalize the FieldSet selections before using them as fetch node conditions.

  • Fixed missing referenced variables in the variableUsages field of fetch operations (#3166)

    Query variables used in fetch operation should be listed in the variableUsages field. However, there was a bug where variables referenced by query-level directives could be missing in the field.

  • Fixed a bug that __typename with applied directives gets lost in fetch operations. (#3164)

    The sibling typename optimization used by query planner simplifies operations by folding __typename selections into their sibling selections. However, that optimization does not account for directives or aliases. The bug was applying the optimization even if the __typename has directives on it, which caused the selection to lose its directives. Now, __typename with directives (or aliases) are excluded from the optimization.

  • Updated dependencies [345661c558773e4eb5d5f0b28464a8d1acdc2a2d, e00e1c9892b48ac89823597113989830877966ef, cc4573471696ef78d04fa00c4cf8e5c50314ba9f, 062572b3253e8640b60a0bf58b83945094b76b6f, df5eb3cb0e2b4802fcd425ab9c23714de2707db3, 1c99cb0dcc6c639ac351210932623ab0bd6907e4]:

    • @​apollo/query-graphs@​2.9.3
    • @​apollo/federation-internals@​2.9.3

@​apollo/query-planner@​2.9.2

Patch Changes

  • Fixes handling of a __typename selection during query planning process. (#3156)

    When expanding fragments we were keeping references to the same Fields regardless where those fragments appeared in our original selection set. This was generally fine as in most cases we would have same inline fragment selection sets across whole operation but was causing problems when we were applying another optimization by collapsing those expanded inline fragments creating a new selection set. As a result, if any single field selection (within that fragment) would perform optimization around the usage of __typename, ALL occurrences of that field selection would get that optimization as well.

  • Fixes issue where contextual parameters can have naming collisions if used in multiple subgraphs (#3155)

  • Updated dependencies [2192f355f50db33fe0807d16153f357696b9f190, e1e2605b30efc488b57f62ba43436606a38a3607, 5ac01b534318105e904c1e6598070f753add3bb1]:

    • @​apollo/federation-internals@​2.9.2
    • @​apollo/query-graphs@​2.9.2

@​apollo/query-planner@​2.9.1

Patch Changes

@​apollo/query-planner@​2.9.0

Patch Changes

  • Fix issue where variable was not passed into subgraph when embedded in a fragment (#3119)

... (truncated)

Changelog

Sourced from @​apollo/query-planner's changelog.

2.9.3

Patch Changes

  • Fixes edge case where contextual arguments can yield inefficient query plans. Also fixes naming of query plan arguments which can be a problem when using contextual variables in multiple subgraphs (#3140)

  • Ensure all useless fetch groups are removed (#3163)

    When removing "useless" fetch nodes/groups we remove them in-place while still iterating over the same list. This leads to potentially skipping processing of some the children fetch nodes, as when we remove nodes we left shift all remaining children but the iterator keeps the old position unchanged effectively skipping next child.

  • fix: normalize field set selection sets (#3162)

    FieldSet scalar represents a selection set without outer braces. This means that users could potentially specify some selections that could be normalized (i.e. eliminate duplicate field selections, hoist/collapse unnecessary inline fragments, etc). Previously we were using @requires field set selection AS-IS for edge conditions. With this change we will now normalize the FieldSet selections before using them as fetch node conditions.

  • Fixed missing referenced variables in the variableUsages field of fetch operations (#3166)

    Query variables used in fetch operation should be listed in the variableUsages field. However, there was a bug where variables referenced by query-level directives could be missing in the field.

  • Fixed a bug that __typename with applied directives gets lost in fetch operations. (#3164)

    The sibling typename optimization used by query planner simplifies operations by folding __typename selections into their sibling selections. However, that optimization does not account for directives or aliases. The bug was applying the optimization even if the __typename has directives on it, which caused the selection to lose its directives. Now, __typename with directives (or aliases) are excluded from the optimization.

  • Updated dependencies [345661c558773e4eb5d5f0b28464a8d1acdc2a2d, e00e1c9892b48ac89823597113989830877966ef, cc4573471696ef78d04fa00c4cf8e5c50314ba9f, 062572b3253e8640b60a0bf58b83945094b76b6f, df5eb3cb0e2b4802fcd425ab9c23714de2707db3, 1c99cb0dcc6c639ac351210932623ab0bd6907e4]:

    • @​apollo/query-graphs@​2.9.3
    • @​apollo/federation-internals@​2.9.3

2.9.2

Patch Changes

  • Fixes handling of a __typename selection during query planning process. (#3156)

    When expanding fragments we were keeping references to the same Fields regardless where those fragments appeared in our original selection set. This was generally fine as in most cases we would have same inline fragment selection sets across whole operation but was causing problems when we were applying another optimization by collapsing those expanded inline fragments creating a new selection set. As a result, if any single field selection (within that fragment) would perform optimization around the usage of __typename, ALL occurrences of that field selection would get that optimization as well.

  • Fixes issue where contextual parameters can have naming collisions if used in multiple subgraphs (#3155)

  • Updated dependencies [2192f355f50db33fe0807d16153f357696b9f190, e1e2605b30efc488b57f62ba43436606a38a3607, 5ac01b534318105e904c1e6598070f753add3bb1]:

    • @​apollo/federation-internals@​2.9.2
    • @​apollo/query-graphs@​2.9.2

2.9.1

Patch Changes

2.9.0

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 6, 2024
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-5023182406 branch from 5dc4c8f to bce728d Compare December 9, 2024 07:23
@dependabot
chore(deps): bump the npm_and_yarn group with 2 updates
0ecbc09 
Bumps the npm_and_yarn group with 2 updates: [@apollo/gateway](https://github.com/apollographql/federation/tree/HEAD/gateway-js) and [@apollo/query-planner](https://github.com/apollographql/federation/tree/HEAD/query-planner-js).


Updates `@apollo/gateway` from 2.5.6 to 2.9.3
- [Release notes](https://github.com/apollographql/federation/releases)
- [Changelog](https://github.com/apollographql/federation/blob/main/gateway-js/CHANGELOG.md)
- [Commits](https://github.com/apollographql/federation/commits/@apollo/gateway@2.9.3/gateway-js)

Updates `@apollo/query-planner` from 2.5.6 to 2.9.3
- [Release notes](https://github.com/apollographql/federation/releases)
- [Changelog](https://github.com/apollographql/federation/blob/main/query-planner-js/CHANGELOG.md)
- [Commits](https://github.com/apollographql/federation/commits/@apollo/query-planner@2.9.3/query-planner-js)

---
updated-dependencies:
- dependency-name: "@apollo/gateway"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@apollo/query-planner"
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-5023182406 branch from bce728d to 0ecbc09 Compare December 30, 2024 00:32
@9renpoto 9renpoto self-assigned this Dec 30, 2024
@9renpoto 9renpoto merged commit b068251 into main Dec 30, 2024
5 checks passed
@9renpoto 9renpoto deleted the dependabot/npm_and_yarn/npm_and_yarn-5023182406 branch December 30, 2024 00:35
@github-actions github-actions bot mentioned this pull request Dec 24, 2024
Draft
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@9renpoto 9renpoto

Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@9renpoto