Skip to content

Commit

Permalink
Version Packages (#7917)
Browse files Browse the repository at this point in the history
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## @apollo/[email protected]

### Minor Changes

- [#7916](#7916)
[`4686454`](4686454)
Thanks [@andrewmcgivery](https://github.com/andrewmcgivery)! - Add
`hideSchemaDetailsFromClientErrors` option to ApolloServer to allow
hiding 'did you mean' suggestions from validation errors.

Even with introspection disabled, it is possible to "fuzzy test" a graph
manually or with automated tools to try to determine the shape of your
schema. This is accomplished by taking advantage of the default behavior
where a misspelt field in an operation
will be met with a validation error that includes a helpful "did you
mean" as part of the error text.

For example, with this option set to `true`, an error would read `Cannot
query field "help" on type "Query".` whereas with this option set to
`false` it would read `Cannot query field "help" on type "Query". Did
you mean "hello"?`.

We recommend enabling this option in production to avoid leaking
information about your schema to malicious actors.

    To enable, set this option to `true` in your `ApolloServer` options:

    ```javascript
    const server = new ApolloServer({
      typeDefs,
      resolvers,
      hideSchemaDetailsFromClientErrors: true,
    });
    ```

## @apollo/[email protected]

### Patch Changes

- Updated dependencies
\[[`4686454`](4686454)]:
    -   @apollo/[email protected]

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
  • Loading branch information
github-actions[bot] and github-actions[bot] authored Aug 8, 2024
1 parent 4686454 commit 289846b
Show file tree
Hide file tree
Showing 6 changed files with 37 additions and 29 deletions.
22 changes: 0 additions & 22 deletions .changeset/pretty-buckets-develop.md

This file was deleted.

8 changes: 4 additions & 4 deletions package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

7 changes: 7 additions & 0 deletions packages/integration-testsuite/CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,12 @@
# @apollo/server-integration-testsuite

## 4.11.0

### Patch Changes

- Updated dependencies [[`4686454`](https://github.com/apollographql/apollo-server/commit/46864546e131d0079785575f621d69862e635663)]:
- @apollo/server@4.11.0

## 4.10.5

### Patch Changes
Expand Down
4 changes: 2 additions & 2 deletions packages/integration-testsuite/package.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "@apollo/server-integration-testsuite",
"version": "4.10.5",
"version": "4.11.0",
"description": "Test suite for Apollo Server integrations",
"main": "dist/index.js",
"types": "dist/index.d.ts",
Expand Down Expand Up @@ -28,7 +28,7 @@
"dependencies": {
"@apollo/cache-control-types": "^1.0.3",
"@apollo/client": "^3.6.9",
"@apollo/server": "4.10.5",
"@apollo/server": "4.11.0",
"@apollo/usage-reporting-protobuf": "^4.1.1",
"@apollo/utils.createhash": "^2.0.0",
"@apollo/utils.keyvaluecache": "^2.1.0",
Expand Down
23 changes: 23 additions & 0 deletions packages/server/CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,28 @@
# @apollo/server

## 4.11.0

### Minor Changes

- [#7916](https://github.com/apollographql/apollo-server/pull/7916) [`4686454`](https://github.com/apollographql/apollo-server/commit/46864546e131d0079785575f621d69862e635663) Thanks [@andrewmcgivery](https://github.com/andrewmcgivery)! - Add `hideSchemaDetailsFromClientErrors` option to ApolloServer to allow hiding 'did you mean' suggestions from validation errors.

Even with introspection disabled, it is possible to "fuzzy test" a graph manually or with automated tools to try to determine the shape of your schema. This is accomplished by taking advantage of the default behavior where a misspelt field in an operation
will be met with a validation error that includes a helpful "did you mean" as part of the error text.

For example, with this option set to `true`, an error would read `Cannot query field "help" on type "Query".` whereas with this option set to `false` it would read `Cannot query field "help" on type "Query". Did you mean "hello"?`.

We recommend enabling this option in production to avoid leaking information about your schema to malicious actors.

To enable, set this option to `true` in your `ApolloServer` options:

```javascript
const server = new ApolloServer({
typeDefs,
resolvers,
hideSchemaDetailsFromClientErrors: true,
});
```

## 4.10.5

### Patch Changes
Expand Down
2 changes: 1 addition & 1 deletion packages/server/package.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "@apollo/server",
"version": "4.10.5",
"version": "4.11.0",
"description": "Core engine for Apollo GraphQL server",
"type": "module",
"main": "dist/cjs/index.js",
Expand Down

0 comments on commit 289846b

Please sign in to comment.