Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update dependency com.graphql-java:graphql-java to v18.3 #2108

Merged
merged 2 commits into from
Sep 23, 2022

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 10, 2022

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
com.graphql-java:graphql-java 18.1 -> 18.3 age adoption passing confidence

Release Notes

graphql-java/graphql-java

v18.3

This is a security bugfix release containing only one PR: https://github.com/graphql-java/graphql-java/pull/2897

GraphQL Java has a max token limit per request preventing DOS attacks. But in some circumstances it was not enough to prevent malicious requests. This release fixes this problem.

All details can be found here: https://github.com/graphql-java/graphql-java/pull/2892

v18.2

This bug fix release fixes the double variable coercion problem identified in #​2819, and introduces RawVariables and CoercedVariables to indicate whether variables have been coerced.

Note: This is a bug fix release. Only changes to fix #​2819 have been cherry picked in this release. Other merged changes will be released separately as v19.

What's Changed

Full Changelog: graphql-java/graphql-java@v18.1...v18.2


Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by Mend Renovate. View repository job log here.

@boring-cyborg boring-cyborg bot added the api API layer changes label Sep 10, 2022
@codecov
Copy link

codecov bot commented Sep 10, 2022

Codecov Report

❗ No coverage uploaded for pull request base (main@59dd1ef). Click here to learn what that means.
The diff coverage is n/a.

❗ Current head 5e4b223 differs from pull request most recent head c4afc59. Consider uploading reports for the commit c4afc59 to get more accurate results

@@           Coverage Diff           @@
##             main    #2108   +/-   ##
=======================================
  Coverage        ?   75.30%           
  Complexity      ?     1038           
=======================================
  Files           ?      203           
  Lines           ?     4883           
  Branches        ?      399           
=======================================
  Hits            ?     3677           
  Misses          ?      763           
  Partials        ?      443           

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

@renovate renovate bot force-pushed the renovate/com.graphql-java-graphql-java-18.x branch 5 times, most recently from 4e01f70 to 4f2374f Compare September 15, 2022 20:21
@renovate renovate bot force-pushed the renovate/com.graphql-java-graphql-java-18.x branch 5 times, most recently from 4d3ab39 to deb2e2a Compare September 23, 2022 20:40
@wslulciuc wslulciuc enabled auto-merge (squash) September 23, 2022 20:45
@renovate renovate bot force-pushed the renovate/com.graphql-java-graphql-java-18.x branch 7 times, most recently from 776a15a to c4afc59 Compare September 23, 2022 21:10
@renovate renovate bot force-pushed the renovate/com.graphql-java-graphql-java-18.x branch from c4afc59 to eaf258d Compare September 23, 2022 21:15
@wslulciuc wslulciuc merged commit 0022008 into main Sep 23, 2022
@wslulciuc wslulciuc deleted the renovate/com.graphql-java-graphql-java-18.x branch September 23, 2022 21:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
api API layer changes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant