Graphql-yoga: [email protected] is deprecated

[shreyansh-zazz]

npm WARN deprecated [email protected]: Please migrate to https://npm.im/graphql-upload (see https://git.io/fADhl).

[tianhuil]

Any sense of when this will get upgraded?

[helfi92]

There seems to be a DoS security vulnerability with graphql-yoga. https://app.snyk.io/test/npm/graphql-yoga/1.16.7. A possible fix would be to upgrade the apollo-upload-server dependency to at least version v7.0.0.

[beeman]

I've just updated my PR so it can be merged :)

/cc @schickling

[helfi92]

Resolved in v.16.9 🎉

https://github.com/prisma/graphql-yoga/releases/tag/v1.16.9.

[beeman]

@schickling could you please take a look at this pr that addresses the deprecation of the package that just got updated? Thanks for considering.

https://github.com/prisma/graphql-yoga/pull/462

[timsuchanek]

:tada: This issue has been resolved in version 1.18.0 :tada:

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot :package::rocket: