package updates/ apollo-server graphql version

[seandearnaley]

I'm trying to upgrade quite an old apollo-server package from apollo-server and apollo-server-express from ^2.4.8" to "^2.16.1" , its working fine it seems but we also have a graphql package dependency "graphql": "^14.3.0", do they need to be in lock step? how do I find out which graphql version is required by apollo-server?