Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade apollo-server-koa #7087

Merged
merged 3 commits into from Jul 22, 2020

Conversation

IkeLutra
Copy link
Contributor

@IkeLutra IkeLutra commented Jul 20, 2020

Description of what you did:

Updates apollo-server-koa to a version that fixes the security advisory in #7085

@derrickmehaffy
Copy link
Member

I've forcefully retriggered the TravisCI PG test that failed.

@@ -12,7 +12,7 @@
},
"dependencies": {
"@apollo/federation": "^0.15.0",
"apollo-server-koa": "2.9.12",
"apollo-server-koa": "^2.14.2",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please make use of strict versions :)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You mean like 2.14.2? I'm happy to chnage but can you explain the reasoning for strict versioning on just this dependency?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@IkeLutra it is not specific to this package but we are taking every occasion to move to strict versions :) We have a PR to add dependabot PRs so we can get automated upgrades for thise kind of issues and still have stable versions so we don't break in unintended ways when dependecies break (which happened a few times already) Hope this helps

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks that is really helpful. Just wanted to understand the reasoning that makes a lot of sense. Will update now 😄

Will Eldrid-Otterburn added 2 commits July 22, 2020 09:02
Signed-off-by: Will Eldrid-Otterburn <will.eldrid-otterburn@red-badger.com>
Signed-off-by: Will Eldrid-Otterburn <will.eldrid-otterburn@red-badger.com>
@alexandrebodin alexandrebodin added this to the 3.1.1 milestone Jul 22, 2020
@alexandrebodin alexandrebodin added source: plugin:graphql Source is plugin/graphql package issue: enhancement Issue suggesting an enhancement to an existing feature type: security and removed type: security labels Jul 22, 2020
@alexandrebodin alexandrebodin merged commit 22319dc into strapi:master Jul 22, 2020
gilfernandes pushed a commit to onepointconsulting/strapi that referenced this pull request Aug 13, 2020
* Upgrade apollo-server-koa

Signed-off-by: Will Eldrid-Otterburn <will.eldrid-otterburn@red-badger.com>

* Set apollo-server-koa to strict version

Signed-off-by: Will Eldrid-Otterburn <will.eldrid-otterburn@red-badger.com>

Co-authored-by: Alexandre BODIN <alexandrebodin@users.noreply.github.com>
Signed-off-by: Gil Fernandes <gil.fernandes@onepointltd.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
issue: enhancement Issue suggesting an enhancement to an existing feature source: plugin:graphql Source is plugin/graphql package
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants