Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: update rust crate async-graphql to v7.0.10 [security] #1120

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Dec 31, 2024

This PR contains the following updates:

Package Type Update Change
async-graphql dependencies patch 7.0.0 -> 7.0.10

GitHub Vulnerability Alerts

CVE-2024-47614

Impact

  • Service Disruption: The server may become unresponsive or extremely slow, potentially leading to downtime.
  • Resource Exhaustion: Excessive use of server resources, such as CPU and memory, could negatively impact other services running on the same infrastructure.
  • User Experience Degradation: Users may experience delays or failures when accessing the service, which could lead to frustration and loss of trust in the service.

Patches

  1. Upgrade to v7.0.10
  2. Use SchemaBuilder.limit_directives to limit the maximum number of directives for a single field.

Release Notes

async-graphql/async-graphql (async-graphql)

v7.0.10

  • add SchemeBuilder.limit_directives method to set the maximum number of directives on a single field.
  • remove needless ?Sized #​1593
  • fix: generate each variant description correctly. #​1589
  • Make From<T> for [Error] set source #​1561
  • feat(graphiql): add support for WS connection params #​1597

v7.0.9

  • add on_ping callback to WebSocket

v7.0.8

  • chore: Make Extensions nullable #​1563
  • expose rejection in async_graphql_axum #​1571
  • Updated crate time to 3.36, as it fixes a compilation error in rust 1.80 #​1572
  • Impl Debug for dynamic::FieldValue & Improve error messages for its methods #​1582
  • Support scraping #[doc = ...] attributes when generating descriptions #​1581
  • add Websocket::keepalive_timeout method to sets a timeout for receiving an acknowledgement of the keep-alive ping.

v7.0.7

  • Support raw values from serde_json #​1554
  • The custom directive ARGUMENT_DEFINITION is not being output at the appropriate location in SDL #​1559
  • Support for JSON extended representations of BSON ObjectId and Uuid #​1542
  • feat: get directives from SelectionField #​1548
  • Support Directives on Subscriptions #​1500
  • fix subscription err typo #​1556

v7.0.6

  • add license files to each project #​1523
  • Improve alignment of directive behavior with GraphQL spec #​1524
  • dynamic schema: pass default vals to ResolverContext #​1527
  • Add altair source #​1530
  • feat: Add support for using Interface and OneofObject on the same struct #​1534

v7.0.5

  • Fix compiler and clippy warnings #​1501
  • Added support for deploying to wasm targets with axum - (without subscriptions) #​1517
  • Bump opentelemetry (0.21.0 -> 0.22.0) #​1513
  • Update lru dependency #​1504
  • Support TypeDirective for ArgumentDefinition, Enum, EnumValue, InputFieldDefinition, InputObject, Interface #​1509
  • Add display attribute for Enum macro #​1518

v7.0.3

  • Sort schema fields & enums if required #​1475
  • Change the type_name of EmptySubscription fix #​1435 #​1475
  • add Request::set_parsed_query method #​1483
  • Upgrade strum to 0.26 #​1485
  • Fix validation of non-nullable variables with default values #​1491
  • add NextExecute::run_with_data method to attach context data before execution
  • feat: add registry method in dynamic::Registry #​1492
  • Allow non-scalars to be used as directive arguments #​1493
  • fix: add description to __schema introspection result #​1489

v7.0.2

  • Fix #[derive(OneofObject)] rejecting enums where the type comes from a macro subsitution #​1473
  • Optimize object proc-macro codegen #​1470
  • Use impl Future instead of async-trait in most traits. #​1468
  • Upgrade base64 to 0.21 #​1466
  • Standardize space between Args, Lists and Binary items #​1392
  • feat: support bigdecimal 0.4.x #​1358

v7.0.1

  • add support introspection inputValueDeprecation #​1621

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

netlify bot commented Dec 31, 2024

Deploy Preview for cynic-querygen-web canceled.

Name Link
🔨 Latest commit bcf7e98
🔍 Latest deploy log https://app.netlify.com/sites/cynic-querygen-web/deploys/6773fdc371580200087d76a3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants