From a1dd4bf7b32df60bb753105b014a6bcb73824953 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 19 Sep 2023 16:11:57 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-GRAPHQL-5905181 --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 49ce323..f609c0c 100644 --- a/package.json +++ b/package.json @@ -40,7 +40,7 @@ "@urql/core": "^3.0.3", "cross-fetch": "^3.1.5", "dedent-js": "^1.0.1", - "graphql": "^16.6.0", + "graphql": "^16.8.1", "graphql-tag": "^2.12.6" } } \ No newline at end of file diff --git a/yarn.lock b/yarn.lock index ca5e449..19e21e7 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3711,10 +3711,10 @@ graphql-ws@5.12.1: resolved "https://registry.yarnpkg.com/graphql-ws/-/graphql-ws-5.12.1.tgz#c62d5ac54dbd409cc6520b0b39de374b3d59d0dd" integrity sha512-umt4f5NnMK46ChM2coO36PTFhHouBrK9stWWBczERguwYrGnPNxJ9dimU6IyOBfOkC6Izhkg4H8+F51W/8CYDg== -graphql@^16.6.0: - version "16.6.0" - resolved "https://registry.yarnpkg.com/graphql/-/graphql-16.6.0.tgz#c2dcffa4649db149f6282af726c8c83f1c7c5fdb" - integrity sha512-KPIBPDlW7NxrbT/eh4qPXz5FiFdL5UbaA0XUNz2Rp3Z3hqBSkbj0GVjwFDztsWVauZUWsbKHgMg++sk8UX0bkw== +graphql@^16.8.1: + version "16.8.1" + resolved "https://registry.yarnpkg.com/graphql/-/graphql-16.8.1.tgz#1930a965bef1170603702acdb68aedd3f3cf6f07" + integrity sha512-59LZHPdGZVh695Ud9lRzPBVTtlX9ZCV150Er2W43ro37wVof0ctenSaskPPjN7lVTIN8mSZt8PHUNKZuNQUuxw== gtoken@^6.1.0: version "6.1.2"