@mondomob/gae-node-nestjs 12.0.0-alpha1 → 12.0.0-alpha2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +17 -0
  2. package/package.json +2 -2
package/CHANGELOG.md CHANGED
@@ -1,3 +1,20 @@
1
+ ## 12.0.0-alpha2 (2026-10-17)
2
+
3
+ Clears the remaining critical and high `npm audit` findings that come from this lib's own dependencies.
4
+
5
+ `@apollo/server` has moved from `dependencies` to `peerDependencies` (`^4.13.0`).
6
+ - the lib never imported it; `@nestjs/apollo` also declares it as a peer
7
+ - apps that use GraphQL must declare `@apollo/server` themselves (npm 7+ installs missing peers automatically)
8
+ - this removes `@apollo/server`'s vulnerable transitive packages (`sha.js`, `@graphql-tools/*`) from the lib's own dependencies
9
+ - `@apollo/server` 5 is not supported by `@nestjs/apollo` 12 yet, so stay on 4.x
10
+
11
+ Refreshed the lockfile to pick up patched versions of transitive packages including:
12
+ - @grpc/grpc-js, @xmldom/xmldom, axios, form-data, jws
13
+ - brace-expansion, minimatch, path-to-regexp, browserslist, serialize-javascript
14
+
15
+ Consumers should refresh their own lockfiles to pick these up.
16
+
17
+
1
18
  ## 12.0.0-alpha1 (2026-10-17)
2
19
 
3
20
  Security release: clears the critical and several high `npm audit` findings from this lib's dependencies.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@mondomob/gae-node-nestjs",
3
- "version": "12.0.0-alpha1",
3
+ "version": "12.0.0-alpha2",
4
4
  "description": "Google App Engine datastore repositories and graphql setup with nestjs",
5
5
  "main": "dist/index.js",
6
6
  "typings": "dist/index.d.ts",
@@ -26,7 +26,6 @@
26
26
  "license": "MIT",
27
27
  "homepage": "https://github.com/mondo-mob/gae-node-nestjs",
28
28
  "dependencies": {
29
- "@apollo/server": "4.13.0",
30
29
  "@google-cloud/datastore": "9.2.1",
31
30
  "@google-cloud/logging-bunyan": "5.1.0",
32
31
  "@google-cloud/storage": "7.19.0",
@@ -65,6 +64,7 @@
65
64
  "webpack": "5.94.0"
66
65
  },
67
66
  "peerDependencies": {
67
+ "@apollo/server": "^4.13.0",
68
68
  "@nestjs/common": "^10.4.22",
69
69
  "@nestjs/core": "^10.4.22",
70
70
  "@nestjs/graphql": "^12.2.2",