[Snyk] Upgrade @graphprotocol/graph-cli from 0.55.0 to 0.95.0 #144
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade @graphprotocol/graph-cli from 0.55.0 to 0.95.0. See this package in npm: @graphprotocol/graph-cli See this project in Snyk: https://app.snyk.io/org/sammyfilly/project/476f9e01-2db1-4873-b22f-3940192a7b97?utm_source=github&utm_medium=referral&page=upgrade-pr
|
|
Review or Edit in CodeSandboxOpen the branch in Web Editor • VS Code • Insiders |
|
Reviewer's Guide by SourceryThis pull request upgrades the Updated class diagram for graph-cliclassDiagram
class GraphCLI {
<<package>>
version: string
+init()
+codegen()
+build()
+deploy()
+test()
+auth()
+add()
}
note for GraphCLI "Upgraded from 0.55.0 to 0.95.0"
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade @graphprotocol/graph-cli from 0.55.0 to 0.95.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 492 versions ahead of your current version.
The recommended version was released 22 days ago.
Issues fixed by the recommended upgrade:
SNYK-JS-ELLIPTIC-8187303
SNYK-JS-ELLIPTIC-8187303
SNYK-JS-EJS-2803307
SNYK-JS-WEB3UTILS-6229337
SNYK-JS-ELLIPTIC-8172694
SNYK-JS-REQUEST-3361831
SNYK-JS-TOUGHCOOKIE-5672873
SNYK-JS-ELLIPTIC-7577916
SNYK-JS-ELLIPTIC-7577917
SNYK-JS-ELLIPTIC-7577918
Release notes
Package name: @graphprotocol/graph-cli
Minor Changes
8cdaf31Thanks @ 0237h! - Add support for Sourcify contract information lookup
Patch Changes
#1910
15384e6Thanks @ renovate! - dependencies updates:
[email protected]↗︎ (from7.1.1, independencies)#1914
e63b483Thanks @ YaroShkvorets! - dependencies updates:
binary-install@^1.1.0↗︎ (fromdependencies)#1914
e63b483Thanks @ YaroShkvorets! - fix bug with graph test #1904
#1903
bcaad5eThanks @ 0237h! - Fix
import.meta.urlnot being parsed as pathproperly
#1918
14ac25cThanks @ YaroShkvorets! - fix bug with loud errors in
graph testMinor Changes
b4564a7Thanks @ YaroShkvorets! - handle tuple[] and address[] for
event parameters - #949
Patch Changes
#1891
d1fa5e0Thanks @ YaroShkvorets! - fix bug with duplicate IDs - #1604
#1889
e085e39Thanks @ YaroShkvorets! - fix confusing "no error" message when
pressing Escape on prompts
#1879
f6079a6Thanks @ McAronDev! - fix bug with missing Graft type in SpS
manifest definition
#1884
93d87a8Thanks @ YaroShkvorets! -
graph init: fix tests generationfor events with [][] params #1878
Patch Changes
675a89aThanks @ YaroShkvorets! - fix flag startup bug
Patch Changes
#1871
5b312cfThanks @ YaroShkvorets! - Fix empty source name for substreams
subgraphs #1868
#1863
4e70f64Thanks @ YaroShkvorets! - warn about outdated node version
#1866
a4f0745Thanks @ YaroShkvorets! - show skip-git deprecation warning
only when used
#1867
f979e55Thanks @ YaroShkvorets! - error out if node is too old
#1865
4ddb562Thanks @ YaroShkvorets! - minor
graph initux improvementsPatch Changes
71c8405Thanks @ YaroShkvorets! -
graph auth: fix bug with settingdeploy key
Minor Changes
#1849
00e0a83Thanks @ YaroShkvorets! - Update all dependencies
#1849
00e0a83Thanks @ YaroShkvorets! - - add networks registry support
graph initflowPatch Changes
#1849
00e0a83Thanks @ YaroShkvorets! - dependencies updates:
[email protected]↗︎ (from0.27.31, independencies)#1849
00e0a83Thanks @ YaroShkvorets! - Fix
graph addflag parametersparsing
#1849
00e0a83Thanks @ YaroShkvorets! - fix bug with clashing _id field name
in schema
#1849
00e0a83Thanks @ YaroShkvorets! - fix generated example entity id
uniqueness
#1849
00e0a83Thanks @ YaroShkvorets! - rollback asc version
@ graphprotocol/[email protected]
Patch Changes
ea1d948Thanks @ YaroShkvorets! - Fix bug with network selection
Summary by Sourcery
Upgrade
@graphprotocol/graph-clifrom 0.55.0 to 0.95.0 to fix several vulnerabilities and bugs, improve thegraph initflow, and add support for Sourcify contract information lookup.Bug Fixes:
tough-cookieto v4.1.3 to address Prototype Pollution vulnerability.requestto v2.88.2 to address Server-Side Request Forgery (SSRF) vulnerability.ejsto v3.1.9 to address Remote Code Execution (RCE) vulnerability.web3-utilsto v1.9.0 to address Prototype Pollution vulnerability.import.meta.urlnot being parsed as path properly.Enhancements:
Chores: