Skip to content

Commit 289846b

Browse files
Version Packages (#7917)
This PR was opened by the [Changesets release](https://github.com/changesets/action) GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated. # Releases ## @apollo/[email protected] ### Minor Changes - [#7916](#7916) [`4686454`](4686454) Thanks [@andrewmcgivery](https://github.com/andrewmcgivery)! - Add `hideSchemaDetailsFromClientErrors` option to ApolloServer to allow hiding 'did you mean' suggestions from validation errors. Even with introspection disabled, it is possible to "fuzzy test" a graph manually or with automated tools to try to determine the shape of your schema. This is accomplished by taking advantage of the default behavior where a misspelt field in an operation will be met with a validation error that includes a helpful "did you mean" as part of the error text. For example, with this option set to `true`, an error would read `Cannot query field "help" on type "Query".` whereas with this option set to `false` it would read `Cannot query field "help" on type "Query". Did you mean "hello"?`. We recommend enabling this option in production to avoid leaking information about your schema to malicious actors. To enable, set this option to `true` in your `ApolloServer` options: ```javascript const server = new ApolloServer({ typeDefs, resolvers, hideSchemaDetailsFromClientErrors: true, }); ``` ## @apollo/[email protected] ### Patch Changes - Updated dependencies \[[`4686454`](4686454)]: - @apollo/[email protected] Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
1 parent 4686454 commit 289846b

File tree

6 files changed

+37
-29
lines changed

6 files changed

+37
-29
lines changed

.changeset/pretty-buckets-develop.md

-22
This file was deleted.

package-lock.json

+4-4
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

packages/integration-testsuite/CHANGELOG.md

+7
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,12 @@
11
# @apollo/server-integration-testsuite
22

3+
## 4.11.0
4+
5+
### Patch Changes
6+
7+
- Updated dependencies [[`4686454`](https://github.com/apollographql/apollo-server/commit/46864546e131d0079785575f621d69862e635663)]:
8+
- @apollo/server@4.11.0
9+
310
## 4.10.5
411

512
### Patch Changes

packages/integration-testsuite/package.json

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@apollo/server-integration-testsuite",
3-
"version": "4.10.5",
3+
"version": "4.11.0",
44
"description": "Test suite for Apollo Server integrations",
55
"main": "dist/index.js",
66
"types": "dist/index.d.ts",
@@ -28,7 +28,7 @@
2828
"dependencies": {
2929
"@apollo/cache-control-types": "^1.0.3",
3030
"@apollo/client": "^3.6.9",
31-
"@apollo/server": "4.10.5",
31+
"@apollo/server": "4.11.0",
3232
"@apollo/usage-reporting-protobuf": "^4.1.1",
3333
"@apollo/utils.createhash": "^2.0.0",
3434
"@apollo/utils.keyvaluecache": "^2.1.0",

packages/server/CHANGELOG.md

+23
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,28 @@
11
# @apollo/server
22

3+
## 4.11.0
4+
5+
### Minor Changes
6+
7+
- [#7916](https://github.com/apollographql/apollo-server/pull/7916) [`4686454`](https://github.com/apollographql/apollo-server/commit/46864546e131d0079785575f621d69862e635663) Thanks [@andrewmcgivery](https://github.com/andrewmcgivery)! - Add `hideSchemaDetailsFromClientErrors` option to ApolloServer to allow hiding 'did you mean' suggestions from validation errors.
8+
9+
Even with introspection disabled, it is possible to "fuzzy test" a graph manually or with automated tools to try to determine the shape of your schema. This is accomplished by taking advantage of the default behavior where a misspelt field in an operation
10+
will be met with a validation error that includes a helpful "did you mean" as part of the error text.
11+
12+
For example, with this option set to `true`, an error would read `Cannot query field "help" on type "Query".` whereas with this option set to `false` it would read `Cannot query field "help" on type "Query". Did you mean "hello"?`.
13+
14+
We recommend enabling this option in production to avoid leaking information about your schema to malicious actors.
15+
16+
To enable, set this option to `true` in your `ApolloServer` options:
17+
18+
```javascript
19+
const server = new ApolloServer({
20+
typeDefs,
21+
resolvers,
22+
hideSchemaDetailsFromClientErrors: true,
23+
});
24+
```
25+
326
## 4.10.5
427

528
### Patch Changes

packages/server/package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@apollo/server",
3-
"version": "4.10.5",
3+
"version": "4.11.0",
44
"description": "Core engine for Apollo GraphQL server",
55
"type": "module",
66
"main": "dist/cjs/index.js",

0 commit comments

Comments
 (0)