[Snyk] Security upgrade apollo-server from 2.4.6 to 2.25.4

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Cross-site Request Forgery (CSRF) SNYK-JS-APOLLOSERVER-3043107	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: apollo-server

The new version differs by 250 commits.

• ae444b2 Release
• 54879d0 Update OSS orb to pass --no-verify-access to lerna publish
• 82d4498 Disable graphql-upload integration when it is not used (#6476)
• c98507e Remove files from old Gatsby docs theme (v2) (#6216)
• 628fbb7 Updates for new docs infra (v2) (#6210)
• 41671ec docs: fix error on custom directives page (#6183)
• a725306 Release
• 5069bd8 apollo-server-core: update GraphQL Playground React app
• 378cce6 Merge pull request #5022 from apollographql/sb/custom-directive-edits
• 851cdba Update v2 codesandbox links (#5520)
• 18ec8e8 docs(fix typo: saem -> same) (#5474)
• a121f86 Revert "Add 3.0 release notice to 2.0 docs (#5443)"
• 4ccdae0 Release
• 6f894bb Mess around more with package-lock until it's happy
• 08c92eb Support graphql@15 in operation registry plugin (#5445)
• 43f3b5b Clean package-lock.json (#5446)
• 06151ad Add 3.0 release notice to 2.0 docs (#5443)
• e456b41 renovate config: group non-major dependencies
• c0bc794 Add AS3 preview docs to nav (#5164)
• 0922120 Updating blog post link (#5392)
• eefa7c2 Merge pull request #5380 from apollographql/sb/gatsby-theme
• c926472 Bump docs theme version
• 6a99e90 Merge pull request #5368 from hamstu/patch-1
• 35e0de6 docs: fix small typo

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Request Forgery (CSRF)