Update module github.com/vektah/gqlparser/v2 to v2.5.14 [SECURITY] - autoclosed #9

renovate · 2024-06-12T22:55:28Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/vektah/gqlparser/v2	`v2.2.0` -> `v2.5.14`

GitHub Vulnerability Alerts

CVE-2023-49559

An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a crafted script to the parserDirectives function.

Release Notes

vektah/gqlparser (github.com/vektah/gqlparser/v2)

What's Changed

Bump the actions-deps group in /validator/imported with 6 updates by @dependabot in https://github.com/vektah/gqlparser/pull/298
Bump prettier from 3.2.5 to 3.3.0 in /validator/imported in the actions-deps group by @dependabot in https://github.com/vektah/gqlparser/pull/299
Bump the actions-deps group in /validator/imported with 7 updates by @dependabot in https://github.com/vektah/gqlparser/pull/301
Bump braces from 3.0.2 to 3.0.3 in /validator/imported by @dependabot in https://github.com/vektah/gqlparser/pull/302
Token limit fix CVE-2023-49559 by @uvzz in https://github.com/vektah/gqlparser/pull/291

New Contributors

@uvzz made their first contribution in https://github.com/vektah/gqlparser/pull/291

Full Changelog: vektah/gqlparser@v2.5.12...v2.5.13

`v2.5.12`

Compare Source

What's Changed

Disallow empty parens (#292). by @yuchenshi in https://github.com/vektah/gqlparser/pull/293
WithBuiltin FormatterOption added by @atzedus in https://github.com/vektah/gqlparser/pull/294
Redo github actions by @StevenACoffman in https://github.com/vektah/gqlparser/pull/295
Bump github.com/stretchr/testify from 1.4.0 to 1.9.0 in the actions-deps group by @dependabot in https://github.com/vektah/gqlparser/pull/296
Bump the actions-deps group in /validator/imported with 8 updates by @dependabot in https://github.com/vektah/gqlparser/pull/297

New Contributors

@yuchenshi made their first contribution in https://github.com/vektah/gqlparser/pull/293

Full Changelog: vektah/gqlparser@v2.5.11...v2.5.12

`v2.5.11`

Compare Source

What's Changed

Bump get-func-name from 2.0.0 to 2.0.2 in /validator/imported by @dependabot in https://github.com/vektah/gqlparser/pull/284
Bump @babel/traverse from 7.22.6 to 7.23.2 in /validator/imported by @dependabot in https://github.com/vektah/gqlparser/pull/285
Fix description formatting (possible " character) by @blmhemu in https://github.com/vektah/gqlparser/pull/289
gqlerror: implement List.Unwrap by @emersion in https://github.com/vektah/gqlparser/pull/290

New Contributors

@blmhemu made their first contribution in https://github.com/vektah/gqlparser/pull/289
@emersion made their first contribution in https://github.com/vektah/gqlparser/pull/290

Full Changelog: vektah/gqlparser@v2.5.10...v2.5.11

`v2.5.10`

Compare Source

What's Changed

fix for #281 by @Metamogul in https://github.com/vektah/gqlparser/pull/282
Format the error file from #282 by @StevenACoffman in https://github.com/vektah/gqlparser/pull/283

New Contributors

@Metamogul made their first contribution in https://github.com/vektah/gqlparser/pull/282

Full Changelog: vektah/gqlparser@v2.5.9...v2.5.10

`v2.5.9`

Compare Source

What's Changed

Convenience to avoid wrapping nil by @StevenACoffman in https://github.com/vektah/gqlparser/pull/274
Add WrapIfUnwrapped and other Lint fixes by @StevenACoffman in https://github.com/vektah/gqlparser/pull/275
More lint by @StevenACoffman in https://github.com/vektah/gqlparser/pull/276
More minor tweaks by @StevenACoffman in https://github.com/vektah/gqlparser/pull/277
Make all fields of *gqlerror.Error public by @fredzqm in https://github.com/vektah/gqlparser/pull/273
Revert Path string change by @StevenACoffman in https://github.com/vektah/gqlparser/pull/278
Adjust lexer to return gqlerror where it does not break tests by @StevenACoffman in https://github.com/vektah/gqlparser/pull/279

Full Changelog: vektah/gqlparser@v2.5.8...v2.5.9

`v2.5.8`

Compare Source

What's Changed

Put comments behind an option in formatter by @benjaminjkraft in https://github.com/vektah/gqlparser/pull/271

Full Changelog: vektah/gqlparser@v2.5.7...v2.5.8

`v2.5.7`

Compare Source

What's Changed

[Snyk] Security upgrade @babel/preset-env from 7.16.11 to 7.22.6 by @lwc in https://github.com/vektah/gqlparser/pull/267
Bump semver from 5.7.1 to 5.7.2 in /validator/imported by @dependabot in https://github.com/vektah/gqlparser/pull/268
Allow ommitting Directive arguments that are non-null if they have defaults by @StevenACoffman in https://github.com/vektah/gqlparser/pull/270

Full Changelog: vektah/gqlparser@v2.5.6...v2.5.7

`v2.5.6`

Compare Source

What's Changed

feat: support end of definition comment and end of file comment by @Warashi in https://github.com/vektah/gqlparser/pull/264
feat(formatter): preserve spaces at the head of comments by @Warashi in https://github.com/vektah/gqlparser/pull/265

Full Changelog: vektah/gqlparser@v2.5.5...v2.5.6

`v2.5.5`

Compare Source

What's Changed

feat: format with comments by @Warashi in https://github.com/vektah/gqlparser/pull/263

Full Changelog: vektah/gqlparser@v2.5.4...v2.5.5

`v2.5.4`

Compare Source

What's Changed

feat(lexer): comment token support by @Warashi in https://github.com/vektah/gqlparser/pull/261

New Contributors

@Warashi made their first contribution in https://github.com/vektah/gqlparser/pull/261

Full Changelog: vektah/gqlparser@v2.5.3...v2.5.4

`v2.5.3`

Compare Source

What's Changed

Update modules by @StevenACoffman in https://github.com/vektah/gqlparser/pull/259

Full Changelog: vektah/gqlparser@v2.5.2...v2.5.3

`v2.5.2`

Compare Source

What's Changed

Add github actions to lint by @StevenACoffman in https://github.com/vektah/gqlparser/pull/241
GH Actions CI Additions + Linter fixups by @philipaconrad in https://github.com/vektah/gqlparser/pull/242
Prefer to wrap third party errors by @StevenACoffman in https://github.com/vektah/gqlparser/pull/243
Remove a duplicate line in lexer_test.yml by @ryicoh in https://github.com/vektah/gqlparser/pull/244
Point to the right GraphQL spec by @Khyme in https://github.com/vektah/gqlparser/pull/250
Bump json5 from 2.2.0 to 2.2.3 in /validator/imported by @dependabot in https://github.com/vektah/gqlparser/pull/251
support @defer directive by @fiatjaf in https://github.com/vektah/gqlparser/pull/255
Don't drop repeatable keyword when formatting directive by @tadeokondrak in https://github.com/vektah/gqlparser/pull/256
Validate directive arguments during schema parsing by @fredzqm in https://github.com/vektah/gqlparser/pull/258
Validate enum values directive are legit by @fredzqm in https://github.com/vektah/gqlparser/pull/257

New Contributors

@ryicoh made their first contribution in https://github.com/vektah/gqlparser/pull/244
@Khyme made their first contribution in https://github.com/vektah/gqlparser/pull/250
@fiatjaf made their first contribution in https://github.com/vektah/gqlparser/pull/255
@tadeokondrak made their first contribution in https://github.com/vektah/gqlparser/pull/256
@fredzqm made their first contribution in https://github.com/vektah/gqlparser/pull/258

Full Changelog: vektah/gqlparser@v2.5.1...v2.5.2

`v2.5.1`

Compare Source

What's Changed

Fixes #231: Parsing a field type with a bang should not increase the … by @Aven30 in https://github.com/vektah/gqlparser/pull/236

Full Changelog: vektah/gqlparser@v2.5.0...v2.5.1

`v2.5.0`

Compare Source

What's Changed

fix : returning error instead of *gqlError.Error by @schafle in https://github.com/vektah/gqlparser/pull/234

New Contributors

@schafle made their first contribution in https://github.com/vektah/gqlparser/pull/234

Full Changelog: vektah/gqlparser@v2.4.8...v2.5.0

`v2.4.8`

Compare Source

What's Changed

Add UnmarshalJSON implementations. by @philipaconrad in https://github.com/vektah/gqlparser/pull/232

New Contributors

@philipaconrad made their first contribution in https://github.com/vektah/gqlparser/pull/232

Full Changelog: vektah/gqlparser@v2.4.7...v2.4.8

`v2.4.7`

Compare Source

What's Changed

Fix #229 by @Aven30 in https://github.com/vektah/gqlparser/pull/230

New Contributors

@Aven30 made their first contribution in https://github.com/vektah/gqlparser/pull/230

Full Changelog: vektah/gqlparser@v2.4.6...v2.4.7

`v2.4.6`

Compare Source

What's Changed

Check for non-enum values on validation by @ameyarao98 in https://github.com/vektah/gqlparser/pull/227
Replace deprecated ioutil pkg with os & io by @abhinavnair in https://github.com/vektah/gqlparser/pull/228

New Contributors

@ameyarao98 made their first contribution in https://github.com/vektah/gqlparser/pull/227
@abhinavnair made their first contribution in https://github.com/vektah/gqlparser/pull/228

Full Changelog: vektah/gqlparser@v2.4.5...v2.4.6

`v2.4.5`

Compare Source

What's Changed

Allow doubly-defined builtin directives by @benjaminjkraft in https://github.com/vektah/gqlparser/pull/226
Validate that the operation's root type is valid by @benjaminjkraft in https://github.com/vektah/gqlparser/pull/225

New Contributors

@benjaminjkraft made their first contribution in https://github.com/vektah/gqlparser/pull/226

Full Changelog: vektah/gqlparser@v2.4.4...v2.4.5

`v2.4.4`

Compare Source

What's Changed

Report error about null value for any type that cannot be null, not for only built-in by @atzedus in https://github.com/vektah/gqlparser/pull/222

New Contributors

@atzedus made their first contribution in https://github.com/vektah/gqlparser/pull/222

Full Changelog: vektah/gqlparser@v2.4.3...v2.4.4

`v2.4.3`

Compare Source

What's Changed

formatter: skip printing insignificant commas in arguments definitions by @a8m in https://github.com/vektah/gqlparser/pull/220

New Contributors

@a8m made their first contribution in https://github.com/vektah/gqlparser/pull/220

Full Changelog: vektah/gqlparser@v2.4.2...v2.4.3

`v2.4.2`

Compare Source

What's Changed

Report definition name in validateDefinition errors by @sonatard in https://github.com/vektah/gqlparser/pull/206
Fix type documentation by @obukhov in https://github.com/vektah/gqlparser/pull/207
formatter: support setting space indent by @giautm in https://github.com/vektah/gqlparser/pull/208
fix: only write newline in the description if needs by @giautm in https://github.com/vektah/gqlparser/pull/209
Bump minimist from 1.2.5 to 1.2.6 in /validator/imported by @dependabot in https://github.com/vektah/gqlparser/pull/210
formatter fix: include argument directives by @jpleasu in https://github.com/vektah/gqlparser/pull/213
Embed prelude by @AndrewWPhillips in https://github.com/vektah/gqlparser/pull/214
feat: added AddTypes helper to ast.Schema by @giautm in https://github.com/vektah/gqlparser/pull/215
fix bug and delete String of Int and Float by @pjmd89 in https://github.com/vektah/gqlparser/pull/205
fix issue #160: validateVarType parsing numbers by @StevenACoffman in https://github.com/vektah/gqlparser/pull/216

New Contributors

@sonatard made their first contribution in https://github.com/vektah/gqlparser/pull/206
@obukhov made their first contribution in https://github.com/vektah/gqlparser/pull/207
@giautm made their first contribution in https://github.com/vektah/gqlparser/pull/208
@jpleasu made their first contribution in https://github.com/vektah/gqlparser/pull/213
@AndrewWPhillips made their first contribution in https://github.com/vektah/gqlparser/pull/214
@pjmd89 made their first contribution in https://github.com/vektah/gqlparser/pull/205

Full Changelog: vektah/gqlparser@v2.4.1...v2.4.2

`v2.4.1`

Compare Source

What's Changed

fixed issue for https://github.com/99designs/gqlgen/issues/2028 by @Code-Hex in https://github.com/vektah/gqlparser/pull/201
added validateTypeImplementsAncestors to validate implemented types by @Code-Hex in https://github.com/vektah/gqlparser/pull/202

Full Changelog: vektah/gqlparser@v2.4.0...v2.4.1

`v2.4.0`

Compare Source

What's Changed

Support intermediate interfaces by @wilhelmeek in https://github.com/vektah/gqlparser/pull/169
fixed prelude.graphql to be correct in the latest spec by @Code-Hex in https://github.com/vektah/gqlparser/pull/182
supported schema description for introspection by @Code-Hex in https://github.com/vektah/gqlparser/pull/183
update Node.js harness by @vektah @Code-Hex @StevenACoffman in https://github.com/vektah/gqlparser/pull/181
updated prelude.graphql for the beta spec by @Code-Hex in https://github.com/vektah/gqlparser/pull/200
Bump gopkg.in/yaml.v2 from 2.2.4 to 2.2.8 by @dependabot in https://github.com/vektah/gqlparser/pull/199

New Contributors

@dependabot made their first contribution in https://github.com/vektah/gqlparser/pull/199

Full Changelog: vektah/gqlparser@v2.3.1...v2.4.0

`v2.3.1`

Compare Source

What's Changed

Revert "Add @specifiedBy directive declaration" by @StevenACoffman in https://github.com/vektah/gqlparser/pull/176

Full Changelog: vektah/gqlparser@v2.3.0...v2.3.1

`v2.3.0`

Compare Source

What's Changed

make reproducable importer by @vvakame in https://github.com/vektah/gqlparser/pull/112
Update prelude to match graphql_spec for @deprecated directive by @danielnovograd in https://github.com/vektah/gqlparser/pull/155
Stop validator mutating the provided *Schema by @xzyfer in https://github.com/vektah/gqlparser/pull/158
docs: Fix a few typos in the README by @enisdenjo in https://github.com/vektah/gqlparser/pull/174
feat: do not mark __typename field as unknown in the schema validation by @damianopetrungaro in https://github.com/vektah/gqlparser/pull/172
Fix: argument comparison between two sets of args by @jufemaiz in https://github.com/vektah/gqlparser/pull/170
Add @specifiedBy directive declaration by @wilhelmeek in https://github.com/vektah/gqlparser/pull/168
Fix for update by reference of default variable values by @aurelijusbanelis in https://github.com/vektah/gqlparser/pull/161
Add release script by @StevenACoffman in https://github.com/vektah/gqlparser/pull/175

New Contributors

@danielnovograd made their first contribution in https://github.com/vektah/gqlparser/pull/155
@xzyfer made their first contribution in https://github.com/vektah/gqlparser/pull/158
@enisdenjo made their first contribution in https://github.com/vektah/gqlparser/pull/174
@damianopetrungaro made their first contribution in https://github.com/vektah/gqlparser/pull/172
@jufemaiz made their first contribution in https://github.com/vektah/gqlparser/pull/170
@wilhelmeek made their first contribution in https://github.com/vektah/gqlparser/pull/168
@aurelijusbanelis made their first contribution in https://github.com/vektah/gqlparser/pull/161
@StevenACoffman made their first contribution in https://github.com/vektah/gqlparser/pull/175

Full Changelog: vektah/gqlparser@v2.2.0...v2.3.0

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

[ci nobuild]

renovate · 2024-06-12T22:55:30Z

ℹ Artifact update notice

File name: gql-test/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated

Details:

Package	Change
`github.com/stretchr/testify`	`v1.7.0` -> `v1.9.0`

Update module github.com/vektah/gqlparser/v2 to v2.5.14 [SECURITY]

9dc158d

[ci nobuild]

renovate bot changed the title ~~Update module github.com/vektah/gqlparser/v2 to v2.5.14 [SECURITY]~~ Update module github.com/vektah/gqlparser/v2 to v2.5.14 [SECURITY] - autoclosed Aug 10, 2024

renovate bot closed this Aug 10, 2024

renovate bot deleted the renovate/go-jackfan.us.kg/vektah/gqlparser/v2-vulnerability branch August 10, 2024 05:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update module github.com/vektah/gqlparser/v2 to v2.5.14 [SECURITY] - autoclosed #9

Update module github.com/vektah/gqlparser/v2 to v2.5.14 [SECURITY] - autoclosed #9

renovate bot commented Jun 12, 2024 •

edited

Loading

renovate bot commented Jun 12, 2024

Update module github.com/vektah/gqlparser/v2 to v2.5.14 [SECURITY] - autoclosed #9

Update module github.com/vektah/gqlparser/v2 to v2.5.14 [SECURITY] - autoclosed #9

Conversation

renovate bot commented Jun 12, 2024 • edited Loading

GitHub Vulnerability Alerts

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

Configuration

renovate bot commented Jun 12, 2024

ℹ Artifact update notice

File name: gql-test/go.mod

renovate bot commented Jun 12, 2024 •

edited

Loading