Version Packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

graphiql@1.8.1

Patch Changes

• #2257 6cc95851 Thanks @acao! - security fix: replace the vulnerable dset dependency with set-value

  dset is vulnerable to prototype pollution attacks. this is only possible if you are doing all of the following:

  1. running graphiql with an experimental graphql-js release tag that supports @stream and @defer
  2. executing a properly @streamed or @deferred query ala IncrementalDelivery spec, with multipart chunks
  3. consuming a malicious schema that contains field names like proto, prototype, or constructor that return malicious data designed to exploit a prototype pollution attack

monaco-graphql@1.0.14

Patch Changes

• #2253 63177891 Thanks @acao! - fix worker + n problem when changing config (schema, etc) in monaco-graphql

[linux-foundation-easycla]

• ❌ - login: @github-actions[bot] . The commit (23ac1ce) is not authorized under a signed CLA. Please click here to be authorized. For further assistance with EasyCLA, please submit a support request ticket.