chore(deps): bump @apollo/server from 4.6.0 to 4.7.1

[dependabot]

Bumps @apollo/server from 4.6.0 to 4.7.1.

Release notes

Sourced from @​apollo/server's releases.

@​apollo/server-integration-testsuite@​4.7.1

Patch Changes

• Updated dependencies [5d3c45be9]:
  • @​apollo/server@​4.7.1

@​apollo/server@​4.7.1

Patch Changes

• #7539 5d3c45be9 Thanks @​mayakoneval! - 🐛 Bug Fix for Apollo Server Landing Pages on Safari. A Content Security Policy was added to our landing page html so that Safari can run the inline scripts we use to call the Embedded Sandbox & Explorer.

@​apollo/server-integration-testsuite@​4.7.0

Patch Changes

• #7509 5c20aa02e Thanks @​renovate! - Update graphql-http dependency

• #7475 b9ac2d6b2 Thanks @​renovate! - Update graphql-http dependency

• Updated dependencies [22a5be934]:

  • @​apollo/server@​4.7.0

@​apollo/server@​4.7.0

Minor Changes

• #7504 22a5be934 Thanks @​mayakoneval! - In the Apollo Server Landing Page Local config, you can now opt out of the telemetry that Apollo Studio runs in the embedded Sandbox & Explorer landing pages. This telemetry includes Google Analytics for event tracking and Sentry for error tracking.

  Example of the new config option:

  const server = new ApolloServer({
    typeDefs,
    resolvers,
    plugins: [
      process.env.NODE_ENV === 'production'
        ? ApolloServerPluginLandingPageProductionDefault({
            graphRef: 'my-graph-id@my-graph-variant',
            embed: {
              runTelemetry: false
            },
          })
        : ApolloServerPluginLandingPageLocalDefault({
            embed: {
              runTelemetry: false
            },
          }),
    ],
  });
  

Changelog

Sourced from @​apollo/server's changelog.

4.7.1

Patch Changes

• #7539 5d3c45be9 Thanks @​mayakoneval! - 🐛 Bug Fix for Apollo Server Landing Pages on Safari. A Content Security Policy was added to our landing page html so that Safari can run the inline scripts we use to call the Embedded Sandbox & Explorer.

4.7.0

Minor Changes

• #7504 22a5be934 Thanks @​mayakoneval! - In the Apollo Server Landing Page Local config, you can now opt out of the telemetry that Apollo Studio runs in the embedded Sandbox & Explorer landing pages. This telemetry includes Google Analytics for event tracking and Sentry for error tracking.

  Example of the new config option:

  const server = new ApolloServer({
    typeDefs,
    resolvers,
    plugins: [
      process.env.NODE_ENV === 'production'
        ? ApolloServerPluginLandingPageProductionDefault({
            graphRef: 'my-graph-id@my-graph-variant',
            embed: {
              runTelemetry: false
            },
          })
        : ApolloServerPluginLandingPageLocalDefault({
            embed: {
              runTelemetry: false
            },
          }),
    ],
  });
  

Commits

• 5ab08c1 Version Packages (#7541)
• 3f7eaed update tests
• 7927a3f Update packages/server/src/tests/plugin/landingPage/getEmbeddedExplorerHT...
• 8ff7ce1 Update getEmbeddedExplorerHTML.test.ts
• f7157f4 Merge pull request #7539 from mayakoneval/maya/04-2023/meta-tags
• c81f738 Update packages/server/src/plugin/landingPage/default/index.ts
• 9a0d2ab update tests
• c097098 Safelist embedded cdn script urls via <meta tag in html, and use a nonce (sha...
• b9c6f4c Version Packages (#7489)
• 22a5be9 Allow disabling telemetry in embedded landing pages (#7504)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)