Update npm - all minor and patch updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@apollo/datasource-rest	^6.0.1 -> ^6.1.0
@apollo/server	^4.9.1 -> ^4.9.3
@babel/eslint-parser (source)	^7.22.10 -> ^7.22.15
chai (source)	^4.3.7 -> ^4.3.8
eslint (source)	^8.47.0 -> ^8.49.0
prettier (source)	^3.0.2 -> ^3.0.3

---

Release Notes

apollographql/datasource-rest (@​apollo/datasource-rest)

v6.1.0

Compare Source

Minor Changes

• #​242 dfb8bcc Thanks @​trevor-scheer! - Add optional url parameter to didEncounterErrors hook

  In previous versions of RESTDataSource, the URL of the request was available on the Request object passed in to the hook. The Request object is no longer passed as an argument, so this restores the availability of the url to the hook.

  This is optional for now in order to keep this change forward compatible for existing this.didEncounterErrors call sites in userland code. In the next major version, this might become a required parameter.

apollographql/apollo-server (@​apollo/server)

v4.9.3

Compare Source

Patch Changes

• a1c725eaf Thanks @​trevor-scheer! - Ensure API keys are valid header values on startup

  Apollo Server previously performed no sanitization or validation of API keys on startup. In the case that an API key was provided which contained characters that are invalid as header values, Apollo Server could inadvertently log the API key in cleartext.

  This only affected users who:

  • Provide an API key with characters that are invalid as header values
  • Use either schema or usage reporting
  • Use the default fetcher provided by Apollo Server or configure their own node-fetch fetcher

  Apollo Server now trims whitespace from API keys and validates that they are valid header values. If an invalid API key is provided, Apollo Server will throw an error on startup.

  For more details, see the security advisory:
  GHSA-j5g3-5c8r-7qfx

v4.9.2

Compare Source

Patch Changes

• #​7699 62e7d940d Thanks @​trevor-scheer! - Fix error path attachment for list items

  Previously, when errors occurred while resolving a list item, the trace builder would fail to place the error at the correct path and just default to the root node with a warning message:

  Could not find node with path x.y.1, defaulting to put errors on root node.

  This change places these errors at their correct paths and removes the log.

babel/babel (@​babel/eslint-parser)

v7.22.15

Compare Source

🐛 Bug Fix

• babel-core
  • #​15923 Only perform config loading re-entrancy check for cjs (@​nicolo-ribaudo)

🏠 Internal

• babel-cli, babel-core, babel-generator, babel-helper-builder-binary-assignment-operator-visitor, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-create-regexp-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-imports, babel-helper-module-transforms, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-helper-validator-option, babel-helpers, babel-node, babel-parser, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-async-generator-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-for-of, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-property-mutators, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-typescript, babel-preset-env, babel-preset-flow, babel-preset-react, babel-preset-typescript, babel-register, babel-standalone, babel-template, babel-traverse, babel-types
  • #​15892 Add explicit .ts/.js extension to all imports in src (@​nicolo-ribaudo)

v7.22.11

Compare Source

🐛 Bug Fix

• babel-plugin-transform-typescript
  • #​15882 Fix: fully remove TS nested type-only exported namespaces (@​yangguansen)
• babel-types
  • #​15867 fix: definition of TS function type params (@​danez)
• babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object
  • #​15858 fix(standalone): strip archived syntax plugins (@​JLHwung)
• babel-core
  • #​15850 Support configuring cache in ESM configs (@​nicolo-ribaudo)

🏠 Internal

• babel-parser
  • #​10940 Do not record trailing comma pos when maybeAsyncArrow: false (@​JLHwung)
• babel-core, babel-helper-compilation-targets, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decorators, babel-preset-env, babel-preset-react, babel-register, babel-traverse, babel-types
  • #​15872 enable jest/no-standalone-expect (@​JLHwung)
• babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-modules-commonjs, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​15833 bump json5, terser and webpack, further minimize babel helpers (@​JLHwung)
• Other
  • #​15846 Use Babel 8.0 alpha to build babel (@​JLHwung)
  • #​15856 Exclude redundant files from publish process (@​JLHwung)

🔬 Output optimization

• babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-optional-chaining, babel-preset-env
  • #​15871 Simplify ?. output when chain result is ignored (@​nicolo-ribaudo)

chaijs/chai (chai)

v4.3.8

Compare Source

What's Changed

• 4.x.x: Fix link to commit logs on GitHub by @​bugwelle in https://github.com/chaijs/chai/pull/1487
• build(deps): bump socket.io-parser from 4.0.4 to 4.0.5 by @​dependabot in https://github.com/chaijs/chai/pull/1488
• Small typo in test.js by @​mavaddat in https://github.com/chaijs/chai/pull/1459
• docs: specify return type of objDisplay by @​scarf005 in https://github.com/chaijs/chai/pull/1490
• Update CONTRIBUTING.md by @​matheus-rodrigues00 in https://github.com/chaijs/chai/pull/1521
• Fix: update exports.version to current version by @​peanutenthusiast in https://github.com/chaijs/chai/pull/1534

New Contributors

• @​bugwelle made their first contribution in https://github.com/chaijs/chai/pull/1487
• @​mavaddat made their first contribution in https://github.com/chaijs/chai/pull/1459
• @​scarf005 made their first contribution in https://github.com/chaijs/chai/pull/1490
• @​matheus-rodrigues00 made their first contribution in https://github.com/chaijs/chai/pull/1521
• @​peanutenthusiast made their first contribution in https://github.com/chaijs/chai/pull/1534

Full Changelog: chaijs/chai@v4.3.7...v4.3.8

eslint/eslint (eslint)

v8.49.0

Compare Source

Features

• da09f4e feat: Implement onUnreachableCodePathStart/End (#​17511) (Nicholas C. Zakas)
• 32b2327 feat: Emit deprecation warnings in RuleTester (#​17527) (Nicholas C. Zakas)
• acb7df3 feat: add new enforce option to lines-between-class-members (#​17462) (Nitin Kumar)

Documentation

• ecfb54f docs: Update README (GitHub Actions Bot)
• de86b3b docs: update no-promise-executor-return examples (#​17529) (Nitin Kumar)
• 032c4b1 docs: add typescript template (#​17500) (James)
• cd7da5c docs: Update README (GitHub Actions Bot)

Chores

• b7621c3 chore: remove browser test from npm test (#​17550) (Milos Djermanovic)
• cac45d0 chore: upgrade @​eslint/js@​8.49.0 (#​17549) (Milos Djermanovic)
• cd39508 chore: package.json update for @​eslint/js release (ESLint Jenkins)
• 203a971 ci: bump actions/checkout from 3 to 4 (#​17530) (dependabot[bot])
• a40fa50 chore: use eslint-plugin-jsdoc's flat config (#​17516) (Milos Djermanovic)
• 926a286 test: replace Karma with Webdriver.IO (#​17126) (Christian Bromann)
• f591d2c chore: Upgrade config-array (#​17512) (Nicholas C. Zakas)

v8.48.0

Compare Source

Features

• 1fbb3b0 feat: correct update direction in for-direction (#​17483) (Francesco Trotta)
• d73fbf2 feat: rule tester do not create empty valid or invalid test suites (#​17475) (fnx)
• ee2f718 feat: Allow void in rule no-promise-executor-return (#​17282) (nopeless)

Bug Fixes

• 7234f6a fix: update RuleTester JSDoc and deprecations (#​17496) (Jonas Berlin)

Documentation

• 7a51d77 docs: no-param-reassign mention strict mode (#​17494) (Stephen Hardy)
• 9cd7ac2 docs: add fetch script to package.json conventions (#​17459) (Nitin Kumar)
• cab21e6 docs: advice for inline disabling of rules (#​17458) (Ashish Yadav)
• 056499d docs: fix example of flat config from plugin (#​17482) (Francesco Trotta)
• 9e9edf9 docs: update documentation URL in error message (#​17465) (Nitin Kumar)

Chores

• 8dd3cec chore: upgrade @​eslint/js@​8.48.0 (#​17501) (Milos Djermanovic)
• 6d0496e chore: package.json update for @​eslint/js release (ESLint Jenkins)
• 9d4216d chore: Refactor and document CodePathSegment (#​17474) (Nicholas C. Zakas)

prettier/prettier (prettier)

v3.0.3

Compare Source

diff

Add preferUnplugged: true to package.json (#​15169 by @​fisker and @​so1ve)

Prettier v3 uses dynamic imports, user will need to unplug Prettier when Yarn's PnP mode is enabled, add preferUnplugged: true to package.json, so Yarn will install Prettier as unplug by default.

Support shared config that forbids require() (#​15233 by @​fisker)

If an external shared config package is used, and the package exports don't have require or default export.

In Prettier 3.0.2 Prettier fails when attempt to require() the package, and throws an error.

Error [ERR_PACKAGE_PATH_NOT_EXPORTED]: No "exports" main defined in <packageName>/package.json

Allow argument of require() to break (#​15256 by @​fisker)

// Input
const plugin = require(
  global.STANDALONE
    ? path.join(__dirname, "../standalone.js")
    : path.join(__dirname, "..")
);

// Prettier 3.0.2
const plugin = require(global.STANDALONE
  ? path.join(__dirname, "../standalone.js")
  : path.join(__dirname, ".."));

// Prettier 3.0.3
const plugin = require(
  global.STANDALONE
    ? path.join(__dirname, "../standalone.js")
    : path.join(__dirname, "..")
);

Do not print trailing commas in arrow function type parameter lists in ts code blocks (#​15286 by @​sosukesuzuki)

<!-- Input -->
```ts
const foo = <T>() => {}
```

<!-- Prettier 3.0.2 -->
```ts
const foo = <T,>() => {}
```

<!-- Prettier 3.0.3 -->
```ts
const foo = <T>() => {}
```

Support TypeScript 5.2 using / await using declaration (#​15321 by @​sosukesuzuki)

Support for the upcoming Explicit Resource Management feature in ECMAScript. using / await using declaration

{
   using foo = new Foo();
   await using bar = new Bar();
}

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - "after 10pm every weekday,before 5am every weekday,every weekend" in timezone Europe/London.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.