Upgrade graphql-yoga package to patch vulnerability (#8369)

Author: jdolle

.changeset/solid-knives-start.md

@@ -0,0 +1,8 @@
+---
+'@graphql-hive/gateway-plugin-console-sdk': patch
+'@graphql-hive/laboratory': patch
+'@graphql-hive/yoga': patch
+'hive': patch
+---
+
+Upgrade graphql-yoga package to patch vulnerability

integration-tests/package.json

@@ -44,7 +44,7 @@
     "dotenv": "16.4.7",
     "graphql": "16.9.0",
     "graphql-sse": "2.6.0",
-    "graphql-yoga": "5.13.3",
+    "graphql-yoga": "5.21.3",
     "human-id": "4.1.1",
     "set-cookie-parser": "2.7.1",
     "strip-ansi": "7.1.2",

packages/libraries/gateway-plugin-console-sdk/package.json

@@ -53,7 +53,7 @@
   },
   "devDependencies": {
     "@envelop/types": "^5.0.0",
-    "graphql-yoga": "5.13.3",
+    "graphql-yoga": "5.21.3",
     "tiny-lru": "^11.0.0 || ^12.0.0 || ^13.0.0"
   },
   "publishConfig": {

packages/libraries/laboratory/package.json

@@ -107,7 +107,7 @@
     "eslint-plugin-react-refresh": "^0.4.26",
     "globals": "^16.5.0",
     "graphql": "^16.14.0",
-    "graphql-yoga": "5.21.1",
+    "graphql-yoga": "5.21.3",
     "happy-dom": "^20.10.6",
     "jsdom": "^30.0.1",
     "lodash": "^4.18.1",

packages/libraries/pubsub/package.json

@@ -49,7 +49,7 @@
   "dependencies": {
     "@graphql-yoga/redis-event-target": "3.0.3",
     "graphile-worker": "^0.16.0",
-    "graphql-yoga": "5.13.3"
+    "graphql-yoga": "5.21.3"
   },
   "devDependencies": {
     "tslib": "2.8.1",

packages/libraries/yoga/package.json

@@ -59,7 +59,7 @@
     "@graphql-yoga/plugin-response-cache": "3.9.0",
     "@whatwg-node/fetch": "0.10.13",
     "graphql-ws": "5.16.1",
-    "graphql-yoga": "5.13.3",
+    "graphql-yoga": "5.21.3",
     "vitest": "4.1.3",
     "ws": "8.21.0"
   },

packages/services/api/package.json

@@ -70,7 +70,7 @@
     "graphql-modules": "3.1.2",
     "graphql-parse-resolve-info": "4.13.0",
     "graphql-scalars": "1.24.2",
-    "graphql-yoga": "5.13.3",
+    "graphql-yoga": "5.21.3",
     "ioredis-mock": "8.9.0",
     "jsonwebtoken": "9.0.3",
     "lodash": "4.18.1",

packages/services/demo/federation/package.json

@@ -9,7 +9,7 @@
     "@apollo/subgraph": "2.13.2",
     "@theguild/federation-composition": "0.24.1",
     "graphql": "16.9.0",
-    "graphql-yoga": "5.13.3"
+    "graphql-yoga": "5.21.3"
   },
   "devDependencies": {
     "wrangler": "3.114.17"

packages/services/server/package.json

@@ -44,7 +44,7 @@
     "fastify": "5.10.0",
     "got": "14.4.7",
     "graphql": "16.9.0",
-    "graphql-yoga": "5.13.3",
+    "graphql-yoga": "5.21.3",
     "hyperid": "4.0.0",
     "openid-client": "6.8.2",
     "pino-pretty": "11.3.0",

packages/services/workflows/package.json

@@ -33,7 +33,7 @@
     "dotenv": "16.4.7",
     "graphile-worker": "0.16.6",
     "graphql": "16.9.0",
-    "graphql-yoga": "5.13.3",
+    "graphql-yoga": "5.21.3",
     "mjml": "4.14.0",
     "nodemailer": "9.0.1",
     "p-limit": "6.2.0",