[Snyk] Security upgrade graphql from 16.6.0 to 16.8.1 (#686)

* fix: libraries/hermes/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-GRAPHQL-5905181 * chore: update yarn.lock --------- Co-authored-by: snyk-bot <[email protected]>
ConduitPlatform · Sep 20, 2023 · cfca447 · cfca447
1 parent 057828a
commit cfca447
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/libraries/hermes/package.json b/libraries/hermes/package.json
@@ -29,7 +29,7 @@
     "deepdash": "^5.3.9",
     "express": "~4.18.2",
     "express-winston": "^4.2.0",
-    "graphql": "^16.6.0",
+    "graphql": "^16.8.1",
     "graphql-parse-resolve-info": "^4.13.0",
     "graphql-tools": "^8.3.19",
     "graphql-type-json": "^0.3.2",

diff --git a/yarn.lock b/yarn.lock
@@ -8311,10 +8311,10 @@ graphql@^14.5.3:
   dependencies:
     iterall "^1.2.2"
 
-graphql@^16.6.0:
-  version "16.6.0"
-  resolved "https://registry.yarnpkg.com/graphql/-/graphql-16.6.0.tgz#c2dcffa4649db149f6282af726c8c83f1c7c5fdb"
-  integrity sha512-KPIBPDlW7NxrbT/eh4qPXz5FiFdL5UbaA0XUNz2Rp3Z3hqBSkbj0GVjwFDztsWVauZUWsbKHgMg++sk8UX0bkw==
+graphql@^16.8.1:
+  version "16.8.1"
+  resolved "https://registry.yarnpkg.com/graphql/-/graphql-16.8.1.tgz#1930a965bef1170603702acdb68aedd3f3cf6f07"
+  integrity sha512-59LZHPdGZVh695Ud9lRzPBVTtlX9ZCV150Er2W43ro37wVof0ctenSaskPPjN7lVTIN8mSZt8PHUNKZuNQUuxw==
 
 gtoken@^6.0.0:
   version "6.1.0"