[Snyk] Upgrade @octokit/graphql from 5.0.4 to 7.0.1

[Woodpile37]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @octokit/graphql from 5.0.4 to 7.0.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2023-07-10.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Undesired Behavior SNYK-JS-STYLEDCOMPONENTS-3149924	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @octokit/graphql

• 7.0.1 - 2023-07-10
  

  7.0.1 (2023-07-10)

  Bug Fixes

  • deps: uprade @ octokit/request (#489) (631531d)
• 7.0.0 - 2023-07-07
  

  7.0.0 (2023-07-07)

  Bug Fixes

  • deps: update octokit monorepo (major) (#488) (585f4ae)

  BREAKING CHANGES

  • deps: Replace support for Node.js http(s) Agents with documentation on using fetch dispatchers instead
  • deps: Remove ability to pass custom request options, except from method, headers, body, signal, data
• 6.0.1 - 2023-06-20
  

  6.0.1 (2023-06-20)

  Bug Fixes

  • deps: bump @ octokit/request to get fixed version of @ octokit/endpoint (#486) (c067d9c), closes #485
• 6.0.0 - 2023-06-18
  

  6.0.0 (2023-06-18)

  Features

  • v6 (#473) (031b124)

  BREAKING CHANGES

  • Drop support for NodeJS v14, v16
• 6.0.0-beta.2 - 2023-06-16
  

  6.0.0-beta.2 (2023-06-16)

  Bug Fixes

  • build: bump Octokit deps (0eb3e9e)
• 6.0.0-beta.1 - 2023-05-22
  

  6.0.0-beta.1 (2023-05-22)

  Continuous Integration

  • stop testing against NodeJS v14, v16 (#469) (4722fc1)

  BREAKING CHANGES

  • Drop support for NodeJS v14, v16
• 5.0.6 - 2023-05-21
  

  5.0.6 (2023-05-21)

  Bug Fixes

  • build: replace pika with esbuild and tsc (#471) (bbf539f)
• 5.0.5 - 2023-01-20
  

  5.0.5 (2023-01-20)

  Bug Fixes

  • deps: update dependency @ octokit/types to v9 (#444) (2824b45)
• 5.0.4 - 2022-10-19
  

  5.0.4 (2022-10-19)

  Bug Fixes

  • docs: refer to Authorization header in the README, not Authentication (#418) (f4e8019)

from @octokit/graphql GitHub release notes

Commit messages

Package name: @octokit/graphql

• 631531d fix(deps): uprade `@ octokit/request` (docs: add paulyhedral as a contributor github/docs#489)
• 585f4ae fix(deps): update octokit monorepo (major) (sollo-users:patch-6 github/docs#488)
• 4818ae8 chore(deps): update dependency prettier to v3 (docs: add Protectator as a contributor github/docs#487)
• c067d9c fix(deps): bump `@ octokit/request` to get fixed version of `@ octokit/endpoint` (repo sync github/docs#486)
• 9bb16e2 build(deps): lock file maintenance (hi github/docs#484)
• 031b124 feat: v6 (Stray space github/docs#473)
• 3d4afc2 chore(deps): update dependency @ octokit/tsconfig to v2 (Fix typos in search part of contribution guideline github/docs#477)
• 3f33292 docs: replace references to Skypack CDN with esm.sh (Update adding-an-email-address-to-your-github-account.md github/docs#481)
• d061998 build(deps): lock file maintenance
• d56cb21 chore(deps): update dependency esbuild to ^0.18.0 (repo sync github/docs#478)
• d0afffb build(deps): lock file maintenance (Github Actions context variables data format not precise github/docs#476)
• dd892e7 build(deps): lock file maintenance
• 4e8668b build(deps): lock file maintenance (Confusing parameter description in REST API docs for /users github/docs#472)
• bbf539f fix(build): replace pika with esbuild and tsc (Create FUNDING.yml github/docs#471)
• 9942496 build(deps): lock file maintenance
• ab3f852 build(deps): lock file maintenance (Update building-github-apps.md github/docs#467)
• 303dd37 build(deps): lock file maintenance (repo sync github/docs#466)
• c102520 build(deps): lock file maintenance
• 1e689cf chore(deps): update dependency prettier to v2.8.8
• dcad92d build(deps): lock file maintenance
• ef50f64 build(deps): lock file maintenance (Kdeworkshops github/docs#462)
• 5dff6a9 build(deps): lock file maintenance (Commit link raw text contained unnecessary information github/docs#460)
• 7f61981 ci(action): update actions/add-to-project action to v0.5.0 (MAX_IN_VAIN github/docs#461)
• 392765c build(deps): lock file maintenance

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[changeset-bot]

⚠️ No Changeset found

Latest commit: 19830af

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR