chore: vulnerabilities 2026-03-27 (#7923)

integration-tests/package.json

@@ -12,7 +12,7 @@
   },
   "devDependencies": {
     "@apollo/gateway": "2.13.2",
-    "@apollo/server": "5.4.0",
+    "@apollo/server": "5.5.0",
     "@apollo/subgraph": "2.13.2",
     "@aws-sdk/client-s3": "3.723.0",
     "@esm2cjs/execa": "6.1.1-cjs.1",

packages/libraries/apollo/package.json

@@ -51,7 +51,7 @@
     "@graphql-hive/logger": "^1.0.9"
   },
   "devDependencies": {
-    "@apollo/server": "5.4.0",
+    "@apollo/server": "5.5.0",
     "@as-integrations/express4": "1.1.2",
     "@graphql-tools/schema": "10.0.25",
     "@types/express": "4.17.21",

packages/services/workflows/package.json

@@ -28,7 +28,7 @@
     "graphql-yoga": "5.13.3",
     "ioredis": "5.8.2",
     "mjml": "4.14.0",
-    "nodemailer": "7.0.11",
+    "nodemailer": "8.0.4",
     "sendmail": "1.6.1",
     "slonik": "30.4.4",
     "zod": "3.25.76"

pnpm-lock.yaml

@@ -319,8 +319,8 @@ importers:
         specifier: 2.13.2
         version: 2.13.2(encoding@0.1.13)(graphql@16.9.0)
       '@apollo/server':
-        specifier: 5.4.0
+        specifier: 5.5.0
-        version: 5.4.0(graphql@16.9.0)
+        version: 5.5.0(graphql@16.9.0)
       '@apollo/subgraph':
         specifier: 2.13.2
         version: 2.13.2(graphql@16.9.0)
@@ -440,11 +440,11 @@ importers:
         version: 1.0.9(pino@10.3.0)
     devDependencies:
       '@apollo/server':
-        specifier: 5.4.0
+        specifier: 5.5.0
-        version: 5.4.0(graphql@16.9.0)
+        version: 5.5.0(graphql@16.9.0)
       '@as-integrations/express4':
         specifier: 1.1.2
-        version: 1.1.2(@apollo/server@5.4.0(graphql@16.9.0))(express@4.21.2)
+        version: 1.1.2(@apollo/server@5.5.0(graphql@16.9.0))(express@4.21.2)
       '@graphql-tools/schema':
         specifier: 10.0.25
         version: 10.0.25(graphql@16.9.0)
@@ -2020,8 +2020,8 @@ importers:
         specifier: 4.14.0
         version: 4.14.0(encoding@0.1.13)
       nodemailer:
-        specifier: 7.0.11
+        specifier: 8.0.4
-        version: 7.0.11
+        version: 8.0.4
       sendmail:
         specifier: 1.6.1
         version: 1.6.1
@@ -2594,8 +2594,8 @@ packages:
     peerDependencies:
       graphql: 14.x || 15.x || 16.x
 
-  '@apollo/server@5.4.0':
+  '@apollo/server@5.5.0':
-    resolution: {integrity: sha512-E0/2C5Rqp7bWCjaDh4NzYuEPDZ+dltTf2c0FI6GCKJA6GBetVferX3h1//1rS4+NxD36wrJsGGJK+xyT/M3ysg==}
+    resolution: {integrity: sha512-vWtodBOK/SZwBTJzItECOmLfL8E8pn/IdvP7pnxN5g2tny9iW4+9sxdajE798wV1H2+PYp/rRcl/soSHIBKMPw==}
     engines: {node: '>=20'}
     peerDependencies:
       graphql: ^16.11.0
@@ -14851,10 +14851,6 @@ packages:
     resolution: {integrity: sha512-9ie8ItPR6tjY5uYJh8K/Zrv/RMZ5VOlOWvtZdEHYSTFKZfIBPQa9tOAEeAWhd+AnIneLJ22w5fjOYtoutpWq5w==}
     engines: {node: '>=18'}
 
-  loglevel@1.8.0:
-    resolution: {integrity: sha512-G6A/nJLRgWOuuwdNuA6koovfEV1YpqqAG4pRUlFaz3jj2QNZ8M4vBqnVA+HBTmU/AMNUtlOsMmSpF6NyOjztbA==}
-    engines: {node: '>= 0.6.0'}
-
   loglevel@1.9.2:
     resolution: {integrity: sha512-HgMmCqIJSAKqo68l0rS2AanEWfkxaZ5wNiEFb5ggm08lDs9Xl2KxBlX3PTcaD2chBM1gXAYf491/M2Rv8Jwayg==}
     engines: {node: '>= 0.6.0'}
@@ -15630,8 +15626,8 @@ packages:
   nodemailer-shared@1.1.0:
     resolution: {integrity: sha512-68xW5LSyPWv8R0GLm6veAvm7E+XFXkVgvE3FW0FGxNMMZqMkPFeGDVALfR1DPdSfcoO36PnW7q5AAOgFImEZGg==}
 
-  nodemailer@7.0.11:
+  nodemailer@8.0.4:
-    resolution: {integrity: sha512-gnXhNRE0FNhD7wPSCGhdNh46Hs6nm+uTyg+Kq0cZukNQiYdnCsoQjodNP9BQVG9XrcK/v6/MgpAPBUFyzh9pvw==}
+    resolution: {integrity: sha512-k+jf6N8PfQJ0Fe8ZhJlgqU5qJU44Lpvp2yvidH3vp1lPnVQMgi4yEEMPXg5eJS1gFIJTVq1NHBk7Ia9ARdSBdQ==}
     engines: {node: '>=6.0.0'}
 
   noms@0.0.0:
@@ -19267,7 +19263,7 @@ snapshots:
       '@apollo/utils.logger': 3.0.0
       graphql: 16.9.0
 
-  '@apollo/server@5.4.0(graphql@16.9.0)':
+  '@apollo/server@5.5.0(graphql@16.9.0)':
     dependencies:
       '@apollo/cache-control-types': 1.0.3(graphql@16.9.0)
       '@apollo/server-gateway-interface': 2.0.0(graphql@16.9.0)
@@ -19286,7 +19282,7 @@ snapshots:
       cors: 2.8.5
       finalhandler: 2.1.0
       graphql: 16.9.0
-      loglevel: 1.8.0
+      loglevel: 1.9.2
       lru-cache: 11.2.6
       negotiator: 1.0.0
       uuid: 11.1.0
@@ -19425,9 +19421,9 @@ snapshots:
     transitivePeerDependencies:
       - encoding
 
-  '@as-integrations/express4@1.1.2(@apollo/server@5.4.0(graphql@16.9.0))(express@4.21.2)':
+  '@as-integrations/express4@1.1.2(@apollo/server@5.5.0(graphql@16.9.0))(express@4.21.2)':
     dependencies:
-      '@apollo/server': 5.4.0(graphql@16.9.0)
+      '@apollo/server': 5.5.0(graphql@16.9.0)
       express: 4.21.2
 
   '@aws-crypto/crc32@5.2.0':
@@ -36699,8 +36695,6 @@ snapshots:
       strip-ansi: 7.1.2
       wrap-ansi: 9.0.2
 
-  loglevel@1.8.0: {}
-
   loglevel@1.9.2: {}
 
   long@2.4.0: {}
@@ -37958,7 +37952,7 @@ snapshots:
     dependencies:
       nodemailer-fetch: 1.6.0
 
-  nodemailer@7.0.11: {}
+  nodemailer@8.0.4: {}
 
   noms@0.0.0:
     dependencies: