-
Notifications
You must be signed in to change notification settings - Fork 2.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Additional documentation for managing local state #10282
Conversation
Person: { | ||
fields: { | ||
isInCart: { | ||
read(_, { variables, storage }) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I tend to think of an async read function as something that would return a promise and the wording in the sentence above would lead me to believe I'd see something like an async read(...)
in here. Based on this example, it looks like this read
function is still synchronous, just with the a side-effect that the storage variable is updated sometime after the first read function is kicked off.
Should this truly be an async function (e.g. async read()
), or should we tweak the language above to better reflect the behavior in the example? I'm not sure of the intent on the comment about async reads.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for pointing this out. It looks like an async function would be the ideal outcome of a future feature. This workaround, though, doesn't use a promise. I tried wordsmithing the above a bit. How's this?
diff --git a/docs/source/local-state/managing-state-with-field-policies.mdx b/docs/source/local-state/managing-state-with-field-policies.mdx
index ae6da0682..91131ac08 100644
--- a/docs/source/local-state/managing-state-with-field-policies.mdx
+++ b/docs/source/local-state/managing-state-with-field-policies.mdx
@@ -62,7 +62,7 @@ You can use `read` functions to perform any sort of logic you want, including:
### Reads are synchronous by design
-Many UI frameworks like React (without `Suspense`) have synchronous rendering pipelines so it's important for UI components to have immediate access to any existing data. So all `read` functions are synchronous, as are the cache's `readQuery` and `readFragment` methods. It is possible, however, to leverage reactive variables and `options.storage` to roll your own asynchronous `read` function:
+Many UI frameworks like React have synchronous rendering pipelines, therefore it's important for UI components to have immediate access to any existing data. This is why all `read` functions are synchronous, as are the cache's `readQuery` and `readFragment` methods. It is possible, however, to leverage reactive variables and `options.storage` to compose a `read` function that behaves in a manner that resembles an asynchronous action:
<ExpansionPanel title="See example">
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I like that much better!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated - thanks!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🎉
* Use the term mutation more to help developers search for what they want * Wordsmith existing section to emphasize that local-only mutations aren't really "a thing" anymore - use reactive variables or writeQuery / writeFragment instead
* Paraphrase @benjamn's comment for content: https://github.com/apollographql/apollo-client/issues/6852#issuecomment-674984235
Co-authored-by: JV <jvajda@apollographql.com>
6845f31
to
d45cd70
Compare
<h3>Snyk has created this PR to upgrade @apollo/client from 3.5.10 to 3.7.3.</h3> :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project. <hr/> - The recommended version is **48 versions** ahead of your current version. - The recommended version was released **2 months ago**, on 2022-12-15. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:------------------------- <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Prototype Pollution<br/> [SNYK-JS-LOADERUTILS-3043105](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3043105) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Prototype Pollution<br/> [SNYK-JS-LOADERUTILS-3043105](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3043105) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Remote Code Execution (RCE)<br/> [SNYK-JS-EJS-2803307](https://snyk.io/vuln/SNYK-JS-EJS-2803307) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Denial of Service (DoS)<br/> [SNYK-JS-DECODEURICOMPONENT-3149970](https://snyk.io/vuln/SNYK-JS-DECODEURICOMPONENT-3149970) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Prototype Pollution<br/> [SNYK-JS-ASYNC-2441827](https://snyk.io/vuln/SNYK-JS-ASYNC-2441827) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-TERSER-2806366](https://snyk.io/vuln/SNYK-JS-TERSER-2806366) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Denial of Service (DoS)<br/> [SNYK-JS-NWSAPI-2841516](https://snyk.io/vuln/SNYK-JS-NWSAPI-2841516) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3105943](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3105943) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3042992](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3042992) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3105943](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3105943) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3042992](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3042992) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Prototype Pollution<br/> [SNYK-JS-JSON5-3182856](https://snyk.io/vuln/SNYK-JS-JSON5-3182856) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Prototype Pollution<br/> [SNYK-JS-JSON5-3182856](https://snyk.io/vuln/SNYK-JS-JSON5-3182856) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept (*) Note that the real score may have changed since the PR was raised. <details> <summary><b>Release notes</b></summary> <br/> <details> <summary>Package name: <b>@apollo/client</b></summary> <ul> <li> <b>3.7.3</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.3">2022-12-15</a></br><h3>Patch Changes</h3> <ul> <li> <p><a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10334" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10334/hovercard">#10334</a> <a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7d923939dd7e6db7d69f04f598c666104b076e78"><code>7d923939d</code></a> Thanks <a href="https://snyk.io/redirect/github/jerelmiller">@ jerelmiller</a>! - Better handle deferred queries that have cached or partial cached data for them</p> </li> <li> <p><a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10368" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10368/hovercard">#10368</a> <a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/46b58e9762abbffaee5c9abda8e309bea6d7a785"><code>46b58e976</code></a> Thanks <a href="https://snyk.io/redirect/github/alessbell">@ alessbell</a>! - Fix: unblocks support for defer in mutations</p> <p>If the <code>@ defer</code> directive is present in the document passed to <code>mutate</code>, the Promise will resolve with the final merged data after the last multipart chunk has arrived in the response.</p> </li> </ul> </li> <li> <b>3.7.2</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.2">2022-12-06</a></br><h2>Improvements (from <a href="https://snyk.io/redirect/github/apollographql/apollo-client/blob/main/CHANGELOG.md"><code>CHANGELOG.md</code></a>)</h2> <ul> <li> <p>Only show dev tools suggestion in the console when <code>connectToDevTools</code> is <code>true</code>.<br> <a href="https://snyk.io/redirect/github/chris110408">@ chris110408</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10258" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10258/hovercard">#10258</a></p> </li> <li> <p>Pass <code>TCache</code> generic to <code>MutationHookOptions</code> for better type support in <code>useMutation</code>.<br> <a href="https://snyk.io/redirect/github/igrlk">@ igrlk</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10223" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10223/hovercard">#10223</a></p> </li> <li> <p>Add <code>name</code> property to <code>ApolloError</code> to ensure better type safety and help error reporting tools better identify the error.<br> <a href="https://snyk.io/redirect/github/aaronadamsCA">@ aaronadamsCA</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/9323" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/9323/hovercard">#9323</a></p> </li> <li> <p>Export a <code>ModifierDetails</code> type for the <code>details</code> parameter of a <code>Modifier</code> function.<br> <a href="https://snyk.io/redirect/github/KeithGillette">@ KeithGillette</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/7133" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/7133/hovercard">#7133</a></p> </li> <li> <p>Revert use of <code>cloneDeep</code> to clone options when fetching queries.<br> <a href="https://snyk.io/redirect/github/MrDoomBringer">@ MrDoomBringer</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10215" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10215/hovercard">#10215</a></p> </li> </ul> <h2>What's Changed (auto-generated by GitHub)</h2> <ul> <li>Add connect to dev tools check by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chris110408/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/chris110408">@ chris110408</a> in <a aria-label="Pull request #10258" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1433824820" data-permission-text="Title is private" data-url="apollographql/apollo-client#10258" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10258/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10258">#10258</a></li> <li>Update the CHANGELOG by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jerelmiller/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/jerelmiller">@ jerelmiller</a> in <a aria-label="Pull request #10260" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1433855997" data-permission-text="Title is private" data-url="apollographql/apollo-client#10260" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10260/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10260">#10260</a></li> <li>Revert cloneDeep-ing request headers by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/MrDoomBringer/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/MrDoomBringer">@ MrDoomBringer</a> in <a aria-label="Pull request #10215" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1416787337" data-permission-text="Title is private" data-url="apollographql/apollo-client#10215" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10215/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10215">#10215</a></li> <li>chore(tests): warn on ts-jest diagnostics error outside of CI test runs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/alessbell/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/alessbell">@ alessbell</a> in <a aria-label="Pull request #10268" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1440751358" data-permission-text="Title is private" data-url="apollographql/apollo-client#10268" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10268/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10268">#10268</a></li> <li>updates roadmap nov 2022 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jpvajda/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/jpvajda">@ jpvajda</a> in <a aria-label="Pull request #10269" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1440838554" data-permission-text="Title is private" data-url="apollographql/apollo-client#10269" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10269/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10269">#10269</a></li> <li>docs: displays the error correctly by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ctesniere/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/ctesniere">@ ctesniere</a> in <a aria-label="Pull request #10275" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1444506371" data-permission-text="Title is private" data-url="apollographql/apollo-client#10275" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10275/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10275">#10275</a></li> <li>Update the CHANGELOG with changes from <a aria-label="Pull request #10275" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1444506371" data-permission-text="Title is private" data-url="apollographql/apollo-client#10275" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10275/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10275">#10275</a> by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bignimbus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/bignimbus">@ bignimbus</a> in <a aria-label="Pull request #10276" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1445656915" data-permission-text="Title is private" data-url="apollographql/apollo-client#10276" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10276/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10276">#10276</a></li> <li>Fix 'broken' links by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/StephenBarlow/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/StephenBarlow">@ StephenBarlow</a> in <a aria-label="Pull request #10288" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1450617736" data-permission-text="Title is private" data-url="apollographql/apollo-client#10288" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10288/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10288">#10288</a></li> <li>Additional documentation for managing local state by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bignimbus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/bignimbus">@ bignimbus</a> in <a aria-label="Pull request #10282" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1448345087" data-permission-text="Title is private" data-url="apollographql/apollo-client#10282" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10282/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10282">#10282</a></li> <li>chore(docs): remove graphql-anywhere from apollo-link-rest doc by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/alessbell/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/alessbell">@ alessbell</a> in <a aria-label="Pull request #10232" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424523033" data-permission-text="Title is private" data-url="apollographql/apollo-client#10232" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10232/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10232">#10232</a></li> <li>doc(static-typing): rewrite with GraphQL Code Generator setup by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/charlypoly/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/charlypoly">@ charlypoly</a> in <a aria-label="Pull request #10173" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1404287170" data-permission-text="Title is private" data-url="apollographql/apollo-client#10173" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10173/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10173">#10173</a></li> <li>Further update the TypeGen article for style by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/rkoron007/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/rkoron007">@ rkoron007</a> in <a aria-label="Pull request #10294" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1454068707" data-permission-text="Title is private" data-url="apollographql/apollo-client#10294" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10294/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10294">#10294</a></li> <li>Pass TCache generic to MutationHookOptions by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/igrlk/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/igrlk">@ igrlk</a> in <a aria-label="Pull request #10223" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1419515761" data-permission-text="Title is private" data-url="apollographql/apollo-client#10223" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10223/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10223">#10223</a></li> <li>Add name property to ApolloError by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronadamsCA/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/aaronadamsCA">@ aaronadamsCA</a> in <a aria-label="Pull request #9323" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1106740822" data-permission-text="Title is private" data-url="apollographql/apollo-client#9323" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/9323/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/9323">#9323</a></li> <li>Add array examples to reactive variable documentation by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/larrymyers/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/larrymyers">@ larrymyers</a> in <a aria-label="Pull request #10235" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424932503" data-permission-text="Title is private" data-url="apollographql/apollo-client#10235" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10235/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10235">#10235</a></li> <li>Update CHANGELOG with changes from <a aria-label="Pull request #10235" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424932503" data-permission-text="Title is private" data-url="apollographql/apollo-client#10235" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10235/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10235">#10235</a> by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bignimbus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/bignimbus">@ bignimbus</a> in <a aria-label="Pull request #10302" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1458514445" data-permission-text="Title is private" data-url="apollographql/apollo-client#10302" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10302/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10302">#10302</a></li> <li>docs: Update subscribeToMore example to use React hooks by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/trevorblades/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/trevorblades">@ trevorblades</a> in <a aria-label="Pull request #10309" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1460280026" data-permission-text="Title is private" data-url="apollographql/apollo-client#10309" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10309/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10309">#10309</a></li> <li>export separate <code>ModifierUtility</code> type by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KeithGillette/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/KeithGillette">@ KeithGillette</a> in <a aria-label="Pull request #7133" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="716972371" data-permission-text="Title is private" data-url="apollographql/apollo-client#7133" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/7133/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/7133">#7133</a></li> <li>Changelog and docs for preserveHeaderCase by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/MrDoomBringer/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/MrDoomBringer">@ MrDoomBringer</a> in <a aria-label="Pull request #10111" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1378274068" data-permission-text="Title is private" data-url="apollographql/apollo-client#10111" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10111/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10111">#10111</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chris110408/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/chris110408">@ chris110408</a> made their first contribution in <a aria-label="Pull request #10258" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1433824820" data-permission-text="Title is private" data-url="apollographql/apollo-client#10258" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10258/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10258">#10258</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ctesniere/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/ctesniere">@ ctesniere</a> made their first contribution in <a aria-label="Pull request #10275" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1444506371" data-permission-text="Title is private" data-url="apollographql/apollo-client#10275" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10275/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10275">#10275</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/charlypoly/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/charlypoly">@ charlypoly</a> made their first contribution in <a aria-label="Pull request #10173" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1404287170" data-permission-text="Title is private" data-url="apollographql/apollo-client#10173" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10173/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10173">#10173</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/igrlk/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/igrlk">@ igrlk</a> made their first contribution in <a aria-label="Pull request #10223" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1419515761" data-permission-text="Title is private" data-url="apollographql/apollo-client#10223" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10223/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10223">#10223</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronadamsCA/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/aaronadamsCA">@ aaronadamsCA</a> made their first contribution in <a aria-label="Pull request #9323" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1106740822" data-permission-text="Title is private" data-url="apollographql/apollo-client#9323" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/9323/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/9323">#9323</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/larrymyers/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/larrymyers">@ larrymyers</a> made their first contribution in <a aria-label="Pull request #10235" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424932503" data-permission-text="Title is private" data-url="apollographql/apollo-client#10235" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10235/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10235">#10235</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KeithGillette/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/KeithGillette">@ KeithGillette</a> made their first contribution in <a aria-label="Pull request #7133" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="716972371" data-permission-text="Title is private" data-url="apollographql/apollo-client#7133" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/7133/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/7133">#7133</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://snyk.io/redirect/github/apollographql/apollo-client/compare/v3.7.1...v3.7.2"><tt>v3.7.1...v3.7.2</tt></a></p> </li> <li> <b>3.7.1</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.1">2022-10-20</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.1"> Read more </a> </li> <li> <b>3.7.0</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.0">2022-09-30</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.0"> Read more </a> </li> <li> <b>3.7.0-rc.0</b> - 2022-09-21 </li> <li> <b>3.7.0-beta.8</b> - 2022-09-21 </li> <li> <b>3.7.0-beta.7</b> - 2022-09-08 </li> <li> <b>3.7.0-beta.6</b> - 2022-06-27 </li> <li> <b>3.7.0-beta.5</b> - 2022-06-10 </li> <li> <b>3.7.0-beta.4</b> - 2022-06-10 </li> <li> <b>3.7.0-beta.3</b> - 2022-06-07 </li> <li> <b>3.7.0-beta.2</b> - 2022-06-07 </li> <li> <b>3.7.0-beta.1</b> - 2022-05-26 </li> <li> <b>3.7.0-beta.0</b> - 2022-05-25 </li> <li> <b>3.7.0-alpha.6</b> - 2022-05-19 </li> <li> <b>3.7.0-alpha.5</b> - 2022-05-16 </li> <li> <b>3.7.0-alpha.4</b> - 2022-05-13 </li> <li> <b>3.7.0-alpha.3</b> - 2022-05-09 </li> <li> <b>3.7.0-alpha.2</b> - 2022-05-03 </li> <li> <b>3.7.0-alpha.1</b> - 2022-05-03 </li> <li> <b>3.7.0-alpha.0</b> - 2022-04-27 </li> <li> <b>3.6.10</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.10">2022-09-29</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.10"> Read more </a> </li> <li> <b>3.6.9</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.9">2022-06-21</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.9"> Read more </a> </li> <li> <b>3.6.8</b> - 2022-06-10 </li> <li> <b>3.6.7</b> - 2022-06-10 </li> <li> <b>3.6.6</b> - 2022-05-26 </li> <li> <b>3.6.5</b> - 2022-05-23 </li> <li> <b>3.6.4</b> - 2022-05-16 </li> <li> <b>3.6.3</b> - 2022-05-05 </li> <li> <b>3.6.2</b> - 2022-05-03 </li> <li> <b>3.6.1</b> - 2022-04-28 </li> <li> <b>3.6.0</b> - 2022-04-26 </li> <li> <b>3.6.0-rc.1</b> - 2022-04-19 </li> <li> <b>3.6.0-rc.0</b> - 2022-04-18 </li> <li> <b>3.6.0-beta.13</b> - 2022-04-14 </li> <li> <b>3.6.0-beta.12</b> - 2022-04-11 </li> <li> <b>3.6.0-beta.11</b> - 2022-04-05 </li> <li> <b>3.6.0-beta.10</b> - 2022-03-29 </li> <li> <b>3.6.0-beta.9</b> - 2022-03-10 </li> <li> <b>3.6.0-beta.8</b> - 2022-03-10 </li> <li> <b>3.6.0-beta.7</b> - 2022-03-10 </li> <li> <b>3.6.0-beta.6</b> - 2022-02-15 </li> <li> <b>3.6.0-beta.5</b> - 2022-02-04 </li> <li> <b>3.6.0-beta.4</b> - 2022-02-03 </li> <li> <b>3.6.0-beta.3</b> - 2021-11-23 </li> <li> <b>3.6.0-beta.2</b> - 2021-11-22 </li> <li> <b>3.6.0-beta.1</b> - 2021-11-16 </li> <li> <b>3.6.0-beta.0</b> - 2021-11-16 </li> <li> <b>3.5.10</b> - 2022-02-24 </li> </ul> from <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases">@apollo/client GitHub release notes</a> </details> </details> <details> <summary><b>Commit messages</b></summary> </br> <details> <summary>Package name: <b>@apollo/client</b></summary> <ul> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/2f79f03f1239b0496ddda938bf74a1b0ef97966e">2f79f03</a> Version Packages (#10341)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/b823f6c679f28fae1f5c1fb3f9e7545a2cb5c987">b823f6c</a> Fix Changesets release workflow from default branch (#10370)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/46b58e9762abbffaee5c9abda8e309bea6d7a785">46b58e9</a> Fixes support for defer in mutations (#10368)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/52d5af26129bcec6bd51b45511b8349695219c47">52d5af2</a> docs/updating-subscription-library-anchor-link (#10320)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/1398e42854590c685a63862534990e26d5013d16">1398e42</a> chore(deps): update actions/setup-node action to v3 (#10352)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/6739721ea04a66d94be6ca2ae956e95997925201">6739721</a> chore(deps): update mad9000/actions-find-and-replace-string action to v3 (#10354)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/b3e4574942afffd03cc8a383b9834bbb723720bf">b3e4574</a> Update static-typing.md (#10358)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/f4f00b6d01b33f08dad9992609e30ddf4011e701">f4f00b6</a> chore(deps): update dependency mocha to v10.2.0</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/0daf29fc02dba3e4ba53f36a8b412abcdbe79329">0daf29f</a> chore(deps): update dependency @ types/node to v18.11.13</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/ac7696ee7478cab6566c93430400a1ea19b2c7ad">ac7696e</a> chore(deps): update dependency recast to v0.22.0</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/543d687fe7b38726576821d7e671945549f6e49b">543d687</a> chore(deps): update dependency @ types/node to v18.11.12</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/14857a5b076a1a385a807620d4a3934fff51c0ea">14857a5</a> chore(deps): update dependency @ types/jest to v29.2.4</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7819c51ff6a0837e94cc0be6739a70fadf36eada">7819c51</a> chore(deps): update dependency @ graphql-tools/schema to v9.0.12</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/c02a17b30f96fe33649c1fad716cd9482d353868">c02a17b</a> chore(changesets): run changeset-version in prerelease workflow</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/6cf377f29b906e1eabfd2993107a0041db78ca4b">6cf377f</a> Changesets updates (#10342)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7d923939dd7e6db7d69f04f598c666104b076e78">7d92393</a> Better handle cached data with deferred queries (#10334)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/f982a8d3b0571cf841c7068bd374c8ee44d21492">f982a8d</a> Introduce Changesets (#10337)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7bff5ac3d9d4f441ff1cc70b6fd6ae60b1b7cfb2">7bff5ac</a> Roadmap updates (#10336)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/21c7d26220ce82a9856cd203bf1aa5ff1327b192">21c7d26</a> Exclude "cursor" argument to prevent separate cache instance (#10144)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/9f8fae1055880c8ec173e631e6009e5308376f34">9f8fae1</a> chore(deps): update dependency jest-junit to v15 (#10301)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/a55770437f110ae85cd1d8d1fb47a8e6de022c09">a557704</a> chore(deps): update dependency @ types/node to v18 (#9840)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/ce866132e2be18a989f8e0a78648e5a6d5abc25e">ce86613</a> Bump @ apollo/client npm version to 3.7.2.</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/365fcea4ad1a9c3682f91fc315c80e828edf3c41">365fcea</a> chore: update CHANGELOG in preparation for 3.7.2 (#10335)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/39d83c9dae30f32a0b2634a50763a87d369ff7df">39d83c9</a> chore(deps): update dependency @ types/react to v18.0.26</li> </ul> <a href="https://snyk.io/redirect/github/apollographql/apollo-client/compare/6ca525a6e2e520ea67cfbfd8df0ac48988b4abe4...2f79f03f1239b0496ddda938bf74a1b0ef97966e">Compare</a> </details> </details> <hr/> **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiIxNWZmNzVhNC03MTRhLTQ4ZTQtOGZlYS1kNTE2ZmVkMzBhNjkiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6IjE1ZmY3NWE0LTcxNGEtNDhlNC04ZmVhLWQ1MTZmZWQzMGE2OSJ9fQ==" width="0" height="0"/> 🧐 [View latest project report](https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872?utm_source=github&utm_medium=referral&page=upgrade-pr) 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr) 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872/settings/integration?pkg=@apollo/client&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades) <!--- (snyk:metadata:{"prId":"15ff75a4-714a-48e4-8fea-d516fed30a69","prPublicId":"15ff75a4-714a-48e4-8fea-d516fed30a69","dependencies":[{"name":"@apollo/client","from":"3.5.10","to":"3.7.3"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872?utm_source=github&utm_medium=referral&page=upgrade-pr","projectPublicId":"9043c51f-3f0d-45c6-8455-b658274f2872","env":"prod","prType":"upgrade","vulns":["SNYK-JS-LOADERUTILS-3043105","SNYK-JS-LOADERUTILS-3043105","SNYK-JS-EJS-2803307","SNYK-JS-DECODEURICOMPONENT-3149970","SNYK-JS-ASYNC-2441827","SNYK-JS-TERSER-2806366","SNYK-JS-NWSAPI-2841516","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-JSON5-3182856","SNYK-JS-JSON5-3182856"],"issuesToFix":[{"issueId":"SNYK-JS-LOADERUTILS-3043105","severity":"high","title":"Prototype Pollution","exploitMaturity":"no-known-exploit","priorityScore":375,"priorityScoreFactors":[{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-LOADERUTILS-3043105","severity":"high","title":"Prototype Pollution","exploitMaturity":"no-known-exploit","priorityScore":375,"priorityScoreFactors":[{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-EJS-2803307","severity":"high","title":"Remote Code Execution (RCE)","exploitMaturity":"proof-of-concept","priorityScore":512,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"8.1","score":405}]},{"issueId":"SNYK-JS-DECODEURICOMPONENT-3149970","severity":"high","title":"Denial of Service (DoS)","exploitMaturity":"proof-of-concept","priorityScore":482,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-ASYNC-2441827","severity":"high","title":"Prototype Pollution","exploitMaturity":"proof-of-concept","priorityScore":482,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-TERSER-2806366","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-NWSAPI-2841516","severity":"medium","title":"Denial of Service (DoS)","exploitMaturity":"no-known-exploit","priorityScore":310,"priorityScoreFactors":[{"type":"cvssScore","label":"6.2","score":310}]},{"issueId":"SNYK-JS-LOADERUTILS-3105943","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-LOADERUTILS-3042992","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-LOADERUTILS-3105943","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-LOADERUTILS-3042992","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-JSON5-3182856","severity":"medium","title":"Prototype Pollution","exploitMaturity":"proof-of-concept","priorityScore":427,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"6.4","score":320}]},{"issueId":"SNYK-JS-JSON5-3182856","severity":"medium","title":"Prototype Pollution","exploitMaturity":"proof-of-concept","priorityScore":427,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"6.4","score":320}]}],"upgrade":["SNYK-JS-LOADERUTILS-3043105","SNYK-JS-LOADERUTILS-3043105","SNYK-JS-EJS-2803307","SNYK-JS-DECODEURICOMPONENT-3149970","SNYK-JS-ASYNC-2441827","SNYK-JS-TERSER-2806366","SNYK-JS-NWSAPI-2841516","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-JSON5-3182856","SNYK-JS-JSON5-3182856"],"upgradeInfo":{"versionsDiff":48,"publishedDate":"2022-12-15T18:42:41.897Z"},"templateVariants":["priorityScore"],"hasFixes":true,"isMajorUpgrade":false,"isBreakingChange":false,"priorityScoreList":[375,375,512,482,482,265,310,265,265,265,265,427,427]}) ---> Co-authored-by: snyk-bot <snyk-bot@snyk.io>
<h3>Snyk has created this PR to upgrade @apollo/client from 3.5.10 to 3.7.3.</h3> :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project. <hr/> - The recommended version is **48 versions** ahead of your current version. - The recommended version was released **2 months ago**, on 2022-12-15. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:------------------------- <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Prototype Pollution<br/> [SNYK-JS-LOADERUTILS-3043105](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3043105) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Prototype Pollution<br/> [SNYK-JS-LOADERUTILS-3043105](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3043105) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Remote Code Execution (RCE)<br/> [SNYK-JS-EJS-2803307](https://snyk.io/vuln/SNYK-JS-EJS-2803307) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Denial of Service (DoS)<br/> [SNYK-JS-DECODEURICOMPONENT-3149970](https://snyk.io/vuln/SNYK-JS-DECODEURICOMPONENT-3149970) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png" width="20" height="20" title="high severity"/> | Prototype Pollution<br/> [SNYK-JS-ASYNC-2441827](https://snyk.io/vuln/SNYK-JS-ASYNC-2441827) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-TERSER-2806366](https://snyk.io/vuln/SNYK-JS-TERSER-2806366) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Denial of Service (DoS)<br/> [SNYK-JS-NWSAPI-2841516](https://snyk.io/vuln/SNYK-JS-NWSAPI-2841516) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3105943](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3105943) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3042992](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3042992) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3105943](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3105943) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Regular Expression Denial of Service (ReDoS)<br/> [SNYK-JS-LOADERUTILS-3042992](https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3042992) | **375/1000** <br/> **Why?** CVSS 7.5 | No Known Exploit <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Prototype Pollution<br/> [SNYK-JS-JSON5-3182856](https://snyk.io/vuln/SNYK-JS-JSON5-3182856) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept <img src="https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png" width="20" height="20" title="medium severity"/> | Prototype Pollution<br/> [SNYK-JS-JSON5-3182856](https://snyk.io/vuln/SNYK-JS-JSON5-3182856) | **375/1000** <br/> **Why?** CVSS 7.5 | Proof of Concept (*) Note that the real score may have changed since the PR was raised. <details> <summary><b>Release notes</b></summary> <br/> <details> <summary>Package name: <b>@apollo/client</b></summary> <ul> <li> <b>3.7.3</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.3">2022-12-15</a></br><h3>Patch Changes</h3> <ul> <li> <p><a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10334" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10334/hovercard">#10334</a> <a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7d923939dd7e6db7d69f04f598c666104b076e78"><code>7d923939d</code></a> Thanks <a href="https://snyk.io/redirect/github/jerelmiller">@ jerelmiller</a>! - Better handle deferred queries that have cached or partial cached data for them</p> </li> <li> <p><a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10368" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10368/hovercard">#10368</a> <a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/46b58e9762abbffaee5c9abda8e309bea6d7a785"><code>46b58e976</code></a> Thanks <a href="https://snyk.io/redirect/github/alessbell">@ alessbell</a>! - Fix: unblocks support for defer in mutations</p> <p>If the <code>@ defer</code> directive is present in the document passed to <code>mutate</code>, the Promise will resolve with the final merged data after the last multipart chunk has arrived in the response.</p> </li> </ul> </li> <li> <b>3.7.2</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.2">2022-12-06</a></br><h2>Improvements (from <a href="https://snyk.io/redirect/github/apollographql/apollo-client/blob/main/CHANGELOG.md"><code>CHANGELOG.md</code></a>)</h2> <ul> <li> <p>Only show dev tools suggestion in the console when <code>connectToDevTools</code> is <code>true</code>.<br> <a href="https://snyk.io/redirect/github/chris110408">@ chris110408</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10258" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10258/hovercard">#10258</a></p> </li> <li> <p>Pass <code>TCache</code> generic to <code>MutationHookOptions</code> for better type support in <code>useMutation</code>.<br> <a href="https://snyk.io/redirect/github/igrlk">@ igrlk</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10223" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10223/hovercard">#10223</a></p> </li> <li> <p>Add <code>name</code> property to <code>ApolloError</code> to ensure better type safety and help error reporting tools better identify the error.<br> <a href="https://snyk.io/redirect/github/aaronadamsCA">@ aaronadamsCA</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/9323" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/9323/hovercard">#9323</a></p> </li> <li> <p>Export a <code>ModifierDetails</code> type for the <code>details</code> parameter of a <code>Modifier</code> function.<br> <a href="https://snyk.io/redirect/github/KeithGillette">@ KeithGillette</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/7133" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/7133/hovercard">#7133</a></p> </li> <li> <p>Revert use of <code>cloneDeep</code> to clone options when fetching queries.<br> <a href="https://snyk.io/redirect/github/MrDoomBringer">@ MrDoomBringer</a> in <a href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10215" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10215/hovercard">#10215</a></p> </li> </ul> <h2>What's Changed (auto-generated by GitHub)</h2> <ul> <li>Add connect to dev tools check by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chris110408/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/chris110408">@ chris110408</a> in <a aria-label="Pull request #10258" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1433824820" data-permission-text="Title is private" data-url="apollographql/apollo-client#10258" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10258/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10258">#10258</a></li> <li>Update the CHANGELOG by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jerelmiller/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/jerelmiller">@ jerelmiller</a> in <a aria-label="Pull request #10260" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1433855997" data-permission-text="Title is private" data-url="apollographql/apollo-client#10260" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10260/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10260">#10260</a></li> <li>Revert cloneDeep-ing request headers by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/MrDoomBringer/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/MrDoomBringer">@ MrDoomBringer</a> in <a aria-label="Pull request #10215" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1416787337" data-permission-text="Title is private" data-url="apollographql/apollo-client#10215" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10215/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10215">#10215</a></li> <li>chore(tests): warn on ts-jest diagnostics error outside of CI test runs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/alessbell/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/alessbell">@ alessbell</a> in <a aria-label="Pull request #10268" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1440751358" data-permission-text="Title is private" data-url="apollographql/apollo-client#10268" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10268/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10268">#10268</a></li> <li>updates roadmap nov 2022 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jpvajda/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/jpvajda">@ jpvajda</a> in <a aria-label="Pull request #10269" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1440838554" data-permission-text="Title is private" data-url="apollographql/apollo-client#10269" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10269/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10269">#10269</a></li> <li>docs: displays the error correctly by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ctesniere/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/ctesniere">@ ctesniere</a> in <a aria-label="Pull request #10275" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1444506371" data-permission-text="Title is private" data-url="apollographql/apollo-client#10275" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10275/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10275">#10275</a></li> <li>Update the CHANGELOG with changes from <a aria-label="Pull request #10275" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1444506371" data-permission-text="Title is private" data-url="apollographql/apollo-client#10275" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10275/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10275">#10275</a> by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bignimbus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/bignimbus">@ bignimbus</a> in <a aria-label="Pull request #10276" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1445656915" data-permission-text="Title is private" data-url="apollographql/apollo-client#10276" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10276/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10276">#10276</a></li> <li>Fix 'broken' links by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/StephenBarlow/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/StephenBarlow">@ StephenBarlow</a> in <a aria-label="Pull request #10288" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1450617736" data-permission-text="Title is private" data-url="apollographql/apollo-client#10288" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10288/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10288">#10288</a></li> <li>Additional documentation for managing local state by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bignimbus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/bignimbus">@ bignimbus</a> in <a aria-label="Pull request #10282" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1448345087" data-permission-text="Title is private" data-url="apollographql/apollo-client#10282" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10282/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10282">#10282</a></li> <li>chore(docs): remove graphql-anywhere from apollo-link-rest doc by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/alessbell/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/alessbell">@ alessbell</a> in <a aria-label="Pull request #10232" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424523033" data-permission-text="Title is private" data-url="apollographql/apollo-client#10232" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10232/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10232">#10232</a></li> <li>doc(static-typing): rewrite with GraphQL Code Generator setup by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/charlypoly/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/charlypoly">@ charlypoly</a> in <a aria-label="Pull request #10173" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1404287170" data-permission-text="Title is private" data-url="apollographql/apollo-client#10173" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10173/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10173">#10173</a></li> <li>Further update the TypeGen article for style by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/rkoron007/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/rkoron007">@ rkoron007</a> in <a aria-label="Pull request #10294" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1454068707" data-permission-text="Title is private" data-url="apollographql/apollo-client#10294" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10294/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10294">#10294</a></li> <li>Pass TCache generic to MutationHookOptions by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/igrlk/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/igrlk">@ igrlk</a> in <a aria-label="Pull request #10223" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1419515761" data-permission-text="Title is private" data-url="apollographql/apollo-client#10223" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10223/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10223">#10223</a></li> <li>Add name property to ApolloError by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronadamsCA/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/aaronadamsCA">@ aaronadamsCA</a> in <a aria-label="Pull request #9323" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1106740822" data-permission-text="Title is private" data-url="apollographql/apollo-client#9323" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/9323/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/9323">#9323</a></li> <li>Add array examples to reactive variable documentation by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/larrymyers/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/larrymyers">@ larrymyers</a> in <a aria-label="Pull request #10235" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424932503" data-permission-text="Title is private" data-url="apollographql/apollo-client#10235" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10235/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10235">#10235</a></li> <li>Update CHANGELOG with changes from <a aria-label="Pull request #10235" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424932503" data-permission-text="Title is private" data-url="apollographql/apollo-client#10235" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10235/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10235">#10235</a> by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bignimbus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/bignimbus">@ bignimbus</a> in <a aria-label="Pull request #10302" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1458514445" data-permission-text="Title is private" data-url="apollographql/apollo-client#10302" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10302/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10302">#10302</a></li> <li>docs: Update subscribeToMore example to use React hooks by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/trevorblades/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/trevorblades">@ trevorblades</a> in <a aria-label="Pull request #10309" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1460280026" data-permission-text="Title is private" data-url="apollographql/apollo-client#10309" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10309/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10309">#10309</a></li> <li>export separate <code>ModifierUtility</code> type by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KeithGillette/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/KeithGillette">@ KeithGillette</a> in <a aria-label="Pull request #7133" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="716972371" data-permission-text="Title is private" data-url="apollographql/apollo-client#7133" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/7133/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/7133">#7133</a></li> <li>Changelog and docs for preserveHeaderCase by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/MrDoomBringer/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/MrDoomBringer">@ MrDoomBringer</a> in <a aria-label="Pull request #10111" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1378274068" data-permission-text="Title is private" data-url="apollographql/apollo-client#10111" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10111/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10111">#10111</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/chris110408/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/chris110408">@ chris110408</a> made their first contribution in <a aria-label="Pull request #10258" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1433824820" data-permission-text="Title is private" data-url="apollographql/apollo-client#10258" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10258/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10258">#10258</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ctesniere/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/ctesniere">@ ctesniere</a> made their first contribution in <a aria-label="Pull request #10275" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1444506371" data-permission-text="Title is private" data-url="apollographql/apollo-client#10275" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10275/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10275">#10275</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/charlypoly/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/charlypoly">@ charlypoly</a> made their first contribution in <a aria-label="Pull request #10173" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1404287170" data-permission-text="Title is private" data-url="apollographql/apollo-client#10173" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10173/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10173">#10173</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/igrlk/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/igrlk">@ igrlk</a> made their first contribution in <a aria-label="Pull request #10223" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1419515761" data-permission-text="Title is private" data-url="apollographql/apollo-client#10223" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10223/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10223">#10223</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronadamsCA/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/aaronadamsCA">@ aaronadamsCA</a> made their first contribution in <a aria-label="Pull request #9323" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1106740822" data-permission-text="Title is private" data-url="apollographql/apollo-client#9323" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/9323/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/9323">#9323</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/larrymyers/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/larrymyers">@ larrymyers</a> made their first contribution in <a aria-label="Pull request #10235" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1424932503" data-permission-text="Title is private" data-url="apollographql/apollo-client#10235" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/10235/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/10235">#10235</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/KeithGillette/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://snyk.io/redirect/github/KeithGillette">@ KeithGillette</a> made their first contribution in <a aria-label="Pull request #7133" class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="716972371" data-permission-text="Title is private" data-url="apollographql/apollo-client#7133" data-hovercard-type="pull_request" data-hovercard-url="/apollographql/apollo-client/pull/7133/hovercard" href="https://snyk.io/redirect/github/apollographql/apollo-client/pull/7133">#7133</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://snyk.io/redirect/github/apollographql/apollo-client/compare/v3.7.1...v3.7.2"><tt>v3.7.1...v3.7.2</tt></a></p> </li> <li> <b>3.7.1</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.1">2022-10-20</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.1"> Read more </a> </li> <li> <b>3.7.0</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.0">2022-09-30</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.7.0"> Read more </a> </li> <li> <b>3.7.0-rc.0</b> - 2022-09-21 </li> <li> <b>3.7.0-beta.8</b> - 2022-09-21 </li> <li> <b>3.7.0-beta.7</b> - 2022-09-08 </li> <li> <b>3.7.0-beta.6</b> - 2022-06-27 </li> <li> <b>3.7.0-beta.5</b> - 2022-06-10 </li> <li> <b>3.7.0-beta.4</b> - 2022-06-10 </li> <li> <b>3.7.0-beta.3</b> - 2022-06-07 </li> <li> <b>3.7.0-beta.2</b> - 2022-06-07 </li> <li> <b>3.7.0-beta.1</b> - 2022-05-26 </li> <li> <b>3.7.0-beta.0</b> - 2022-05-25 </li> <li> <b>3.7.0-alpha.6</b> - 2022-05-19 </li> <li> <b>3.7.0-alpha.5</b> - 2022-05-16 </li> <li> <b>3.7.0-alpha.4</b> - 2022-05-13 </li> <li> <b>3.7.0-alpha.3</b> - 2022-05-09 </li> <li> <b>3.7.0-alpha.2</b> - 2022-05-03 </li> <li> <b>3.7.0-alpha.1</b> - 2022-05-03 </li> <li> <b>3.7.0-alpha.0</b> - 2022-04-27 </li> <li> <b>3.6.10</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.10">2022-09-29</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.10"> Read more </a> </li> <li> <b>3.6.9</b> - <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.9">2022-06-21</a></br><a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases/tag/v3.6.9"> Read more </a> </li> <li> <b>3.6.8</b> - 2022-06-10 </li> <li> <b>3.6.7</b> - 2022-06-10 </li> <li> <b>3.6.6</b> - 2022-05-26 </li> <li> <b>3.6.5</b> - 2022-05-23 </li> <li> <b>3.6.4</b> - 2022-05-16 </li> <li> <b>3.6.3</b> - 2022-05-05 </li> <li> <b>3.6.2</b> - 2022-05-03 </li> <li> <b>3.6.1</b> - 2022-04-28 </li> <li> <b>3.6.0</b> - 2022-04-26 </li> <li> <b>3.6.0-rc.1</b> - 2022-04-19 </li> <li> <b>3.6.0-rc.0</b> - 2022-04-18 </li> <li> <b>3.6.0-beta.13</b> - 2022-04-14 </li> <li> <b>3.6.0-beta.12</b> - 2022-04-11 </li> <li> <b>3.6.0-beta.11</b> - 2022-04-05 </li> <li> <b>3.6.0-beta.10</b> - 2022-03-29 </li> <li> <b>3.6.0-beta.9</b> - 2022-03-10 </li> <li> <b>3.6.0-beta.8</b> - 2022-03-10 </li> <li> <b>3.6.0-beta.7</b> - 2022-03-10 </li> <li> <b>3.6.0-beta.6</b> - 2022-02-15 </li> <li> <b>3.6.0-beta.5</b> - 2022-02-04 </li> <li> <b>3.6.0-beta.4</b> - 2022-02-03 </li> <li> <b>3.6.0-beta.3</b> - 2021-11-23 </li> <li> <b>3.6.0-beta.2</b> - 2021-11-22 </li> <li> <b>3.6.0-beta.1</b> - 2021-11-16 </li> <li> <b>3.6.0-beta.0</b> - 2021-11-16 </li> <li> <b>3.5.10</b> - 2022-02-24 </li> </ul> from <a href="https://snyk.io/redirect/github/apollographql/apollo-client/releases">@apollo/client GitHub release notes</a> </details> </details> <details> <summary><b>Commit messages</b></summary> </br> <details> <summary>Package name: <b>@apollo/client</b></summary> <ul> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/2f79f03f1239b0496ddda938bf74a1b0ef97966e">2f79f03</a> Version Packages (#10341)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/b823f6c679f28fae1f5c1fb3f9e7545a2cb5c987">b823f6c</a> Fix Changesets release workflow from default branch (#10370)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/46b58e9762abbffaee5c9abda8e309bea6d7a785">46b58e9</a> Fixes support for defer in mutations (#10368)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/52d5af26129bcec6bd51b45511b8349695219c47">52d5af2</a> docs/updating-subscription-library-anchor-link (#10320)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/1398e42854590c685a63862534990e26d5013d16">1398e42</a> chore(deps): update actions/setup-node action to v3 (#10352)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/6739721ea04a66d94be6ca2ae956e95997925201">6739721</a> chore(deps): update mad9000/actions-find-and-replace-string action to v3 (#10354)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/b3e4574942afffd03cc8a383b9834bbb723720bf">b3e4574</a> Update static-typing.md (#10358)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/f4f00b6d01b33f08dad9992609e30ddf4011e701">f4f00b6</a> chore(deps): update dependency mocha to v10.2.0</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/0daf29fc02dba3e4ba53f36a8b412abcdbe79329">0daf29f</a> chore(deps): update dependency @ types/node to v18.11.13</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/ac7696ee7478cab6566c93430400a1ea19b2c7ad">ac7696e</a> chore(deps): update dependency recast to v0.22.0</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/543d687fe7b38726576821d7e671945549f6e49b">543d687</a> chore(deps): update dependency @ types/node to v18.11.12</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/14857a5b076a1a385a807620d4a3934fff51c0ea">14857a5</a> chore(deps): update dependency @ types/jest to v29.2.4</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7819c51ff6a0837e94cc0be6739a70fadf36eada">7819c51</a> chore(deps): update dependency @ graphql-tools/schema to v9.0.12</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/c02a17b30f96fe33649c1fad716cd9482d353868">c02a17b</a> chore(changesets): run changeset-version in prerelease workflow</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/6cf377f29b906e1eabfd2993107a0041db78ca4b">6cf377f</a> Changesets updates (#10342)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7d923939dd7e6db7d69f04f598c666104b076e78">7d92393</a> Better handle cached data with deferred queries (#10334)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/f982a8d3b0571cf841c7068bd374c8ee44d21492">f982a8d</a> Introduce Changesets (#10337)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/7bff5ac3d9d4f441ff1cc70b6fd6ae60b1b7cfb2">7bff5ac</a> Roadmap updates (#10336)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/21c7d26220ce82a9856cd203bf1aa5ff1327b192">21c7d26</a> Exclude "cursor" argument to prevent separate cache instance (#10144)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/9f8fae1055880c8ec173e631e6009e5308376f34">9f8fae1</a> chore(deps): update dependency jest-junit to v15 (#10301)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/a55770437f110ae85cd1d8d1fb47a8e6de022c09">a557704</a> chore(deps): update dependency @ types/node to v18 (#9840)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/ce866132e2be18a989f8e0a78648e5a6d5abc25e">ce86613</a> Bump @ apollo/client npm version to 3.7.2.</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/365fcea4ad1a9c3682f91fc315c80e828edf3c41">365fcea</a> chore: update CHANGELOG in preparation for 3.7.2 (#10335)</li> <li><a href="https://snyk.io/redirect/github/apollographql/apollo-client/commit/39d83c9dae30f32a0b2634a50763a87d369ff7df">39d83c9</a> chore(deps): update dependency @ types/react to v18.0.26</li> </ul> <a href="https://snyk.io/redirect/github/apollographql/apollo-client/compare/6ca525a6e2e520ea67cfbfd8df0ac48988b4abe4...2f79f03f1239b0496ddda938bf74a1b0ef97966e">Compare</a> </details> </details> <hr/> **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiIxNWZmNzVhNC03MTRhLTQ4ZTQtOGZlYS1kNTE2ZmVkMzBhNjkiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6IjE1ZmY3NWE0LTcxNGEtNDhlNC04ZmVhLWQ1MTZmZWQzMGE2OSJ9fQ==" width="0" height="0"/> 🧐 [View latest project report](https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872?utm_source=github&utm_medium=referral&page=upgrade-pr) 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr) 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872/settings/integration?pkg=@apollo/client&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades) <!--- (snyk:metadata:{"prId":"15ff75a4-714a-48e4-8fea-d516fed30a69","prPublicId":"15ff75a4-714a-48e4-8fea-d516fed30a69","dependencies":[{"name":"@apollo/client","from":"3.5.10","to":"3.7.3"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/sandbox-2ba/project/9043c51f-3f0d-45c6-8455-b658274f2872?utm_source=github&utm_medium=referral&page=upgrade-pr","projectPublicId":"9043c51f-3f0d-45c6-8455-b658274f2872","env":"prod","prType":"upgrade","vulns":["SNYK-JS-LOADERUTILS-3043105","SNYK-JS-LOADERUTILS-3043105","SNYK-JS-EJS-2803307","SNYK-JS-DECODEURICOMPONENT-3149970","SNYK-JS-ASYNC-2441827","SNYK-JS-TERSER-2806366","SNYK-JS-NWSAPI-2841516","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-JSON5-3182856","SNYK-JS-JSON5-3182856"],"issuesToFix":[{"issueId":"SNYK-JS-LOADERUTILS-3043105","severity":"high","title":"Prototype Pollution","exploitMaturity":"no-known-exploit","priorityScore":375,"priorityScoreFactors":[{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-LOADERUTILS-3043105","severity":"high","title":"Prototype Pollution","exploitMaturity":"no-known-exploit","priorityScore":375,"priorityScoreFactors":[{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-EJS-2803307","severity":"high","title":"Remote Code Execution (RCE)","exploitMaturity":"proof-of-concept","priorityScore":512,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"8.1","score":405}]},{"issueId":"SNYK-JS-DECODEURICOMPONENT-3149970","severity":"high","title":"Denial of Service (DoS)","exploitMaturity":"proof-of-concept","priorityScore":482,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-ASYNC-2441827","severity":"high","title":"Prototype Pollution","exploitMaturity":"proof-of-concept","priorityScore":482,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"7.5","score":375}]},{"issueId":"SNYK-JS-TERSER-2806366","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-NWSAPI-2841516","severity":"medium","title":"Denial of Service (DoS)","exploitMaturity":"no-known-exploit","priorityScore":310,"priorityScoreFactors":[{"type":"cvssScore","label":"6.2","score":310}]},{"issueId":"SNYK-JS-LOADERUTILS-3105943","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-LOADERUTILS-3042992","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-LOADERUTILS-3105943","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-LOADERUTILS-3042992","severity":"medium","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit","priorityScore":265,"priorityScoreFactors":[{"type":"cvssScore","label":"5.3","score":265}]},{"issueId":"SNYK-JS-JSON5-3182856","severity":"medium","title":"Prototype Pollution","exploitMaturity":"proof-of-concept","priorityScore":427,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"6.4","score":320}]},{"issueId":"SNYK-JS-JSON5-3182856","severity":"medium","title":"Prototype Pollution","exploitMaturity":"proof-of-concept","priorityScore":427,"priorityScoreFactors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"cvssScore","label":"6.4","score":320}]}],"upgrade":["SNYK-JS-LOADERUTILS-3043105","SNYK-JS-LOADERUTILS-3043105","SNYK-JS-EJS-2803307","SNYK-JS-DECODEURICOMPONENT-3149970","SNYK-JS-ASYNC-2441827","SNYK-JS-TERSER-2806366","SNYK-JS-NWSAPI-2841516","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-LOADERUTILS-3105943","SNYK-JS-LOADERUTILS-3042992","SNYK-JS-JSON5-3182856","SNYK-JS-JSON5-3182856"],"upgradeInfo":{"versionsDiff":48,"publishedDate":"2022-12-15T18:42:41.897Z"},"templateVariants":["priorityScore"],"hasFixes":true,"isMajorUpgrade":false,"isBreakingChange":false,"priorityScoreList":[375,375,512,482,482,265,310,265,265,265,265,427,427]}) ---> Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Fixes #10176
Checklist: