@mondomob/gae-node-nestjs 12.0.0-alpha2 → 12.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +13 -20
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,23 +1,6 @@
|
|
|
1
|
-
## 12.0.0
|
|
1
|
+
## 12.0.0 (2026-10-18)
|
|
2
2
|
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
`@apollo/server` has moved from `dependencies` to `peerDependencies` (`^4.13.0`).
|
|
6
|
-
- the lib never imported it; `@nestjs/apollo` also declares it as a peer
|
|
7
|
-
- apps that use GraphQL must declare `@apollo/server` themselves (npm 7+ installs missing peers automatically)
|
|
8
|
-
- this removes `@apollo/server`'s vulnerable transitive packages (`sha.js`, `@graphql-tools/*`) from the lib's own dependencies
|
|
9
|
-
- `@apollo/server` 5 is not supported by `@nestjs/apollo` 12 yet, so stay on 4.x
|
|
10
|
-
|
|
11
|
-
Refreshed the lockfile to pick up patched versions of transitive packages including:
|
|
12
|
-
- @grpc/grpc-js, @xmldom/xmldom, axios, form-data, jws
|
|
13
|
-
- brace-expansion, minimatch, path-to-regexp, browserslist, serialize-javascript
|
|
14
|
-
|
|
15
|
-
Consumers should refresh their own lockfiles to pick these up.
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
## 12.0.0-alpha1 (2026-10-17)
|
|
19
|
-
|
|
20
|
-
Security release: clears the critical and several high `npm audit` findings from this lib's dependencies.
|
|
3
|
+
Security release: clears the critical and high `npm audit` findings that come from this lib's own dependencies.
|
|
21
4
|
|
|
22
5
|
Node.js 22 or newer is now required (`engines.node >= 22`).
|
|
23
6
|
|
|
@@ -37,7 +20,17 @@ Updating major versions of internal packages including:
|
|
|
37
20
|
Updating minor versions of internal packages including:
|
|
38
21
|
- lodash 4.17.21 -> 4.18.1
|
|
39
22
|
|
|
40
|
-
|
|
23
|
+
`@apollo/server` has moved from `dependencies` to `peerDependencies` (`^4.13.0`).
|
|
24
|
+
- the lib never imported it; `@nestjs/apollo` also declares it as a peer
|
|
25
|
+
- apps that use GraphQL must declare `@apollo/server` themselves (npm 7+ installs missing peers automatically)
|
|
26
|
+
- this removes `@apollo/server`'s vulnerable transitive packages (`sha.js`, `@graphql-tools/*`) from the lib's own dependencies
|
|
27
|
+
- `@apollo/server` 5 is not supported by `@nestjs/apollo` 12 yet, so stay on 4.x
|
|
28
|
+
|
|
29
|
+
Refreshed the lockfile to pick up patched versions of transitive packages including:
|
|
30
|
+
- @grpc/grpc-js, @xmldom/xmldom, axios, form-data, jws
|
|
31
|
+
- brace-expansion, minimatch, path-to-regexp, browserslist, serialize-javascript
|
|
32
|
+
- protobufjs, proxy-addr, sha.js (previously flagged critical)
|
|
33
|
+
|
|
41
34
|
Consumers should refresh their own lockfiles to pick these up.
|
|
42
35
|
|
|
43
36
|
|
package/package.json
CHANGED