[Snyk] Security upgrade @apollo/server from 4.3.2 to 4.7.4

[nexus-uw]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	441/1000 Why? Recently disclosed, Has a fix available, CVSS 3.1	Cross-site Scripting (XSS) SNYK-JS-APOLLOSERVER-5711899	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @apollo/server

The new version differs by 203 commits.

• 4dd276a Version Packages (#7609)
• 0adaf80 Merge pull request from GHSA-68jh-rf6x-836f
• aeb511c chore(deps): update dependency graphql-http to v1.19.0 (#7604)
• 864e861 Align RESTDataSource docs example
• 03991de chore(deps): update dependency rollup to v3.25.0 (#7606)
• b8551f0 chore(deps): update dependency @ types/node to v14.18.50 (#7605)
• 7213cc9 chore(deps): update all non-major dependencies (#7603)
• 2f4b034 Version Packages (#7602)
• 75b668d Allow landing page to be configured with a precomputed nonce (fix for CF workers) (#7601)
• 51b79ac Version Packages (#7600)
• c3f04d0 Update `@ apollo/utils.usagereporting` dependency (#7599)
• 4c26a8f chore(deps): update dependency rollup to v3.23.1 (#7596)
• 14c8b5d chore(deps): update all non-major dependencies (#7595)
• 27e22f1 chore(deps): update dependency @ apollo/client to v3.7.15 (#7593)
• 899f74b chore(deps): update all non-major dependencies (#7592)
• bcf5eea Docs: Improve DataLoader example from O(n²) to O(n) (#7589)
• 940d1f9 Cleanup GraphQL Playground usages/references (#7586)
• 6e94102 chore(deps): update all non-major dependencies (#7582)
• 0233a2d Update codegen types and enforce keeping types up-to-date (#7580)
• 3d0d4b4 chore(deps): update all non-major dependencies (#7577)
• 54cbece chore(deps): update dependency glob to v10.2.6 (#7576)
• 3b841f2 chore(deps): update all non-major dependencies (#7573)
• 540119c docs: fix internal link to heading in fetching-rest.mdx (#7572)
• 583d4c4 Change formatting/wording to be more explicit in express-middleware.mdx (#7561)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)