refactor: Upgrade graphql-upload from 15.0.2 to 17.0.0

[parseplatformorg]

Snyk has created this PR to upgrade graphql-upload from 15.0.2 to 17.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

• The recommended version is 4 versions ahead of your current version.

• The recommended version was released on a month ago.

Release notes

Package name: graphql-upload

• 17.0.0 - 2024-10-08
  

  Major

  • Updated Node.js support to ^18.18.0 || ^20.9.0 || >=22.0.0.

  • Updated dev dependencies, some of which require newer Node.js versions than previously supported.

  • Use the TypeScript v5.5+ JSDoc tag @ import to import types in modules.

  • Removed JSDoc tag @ typedef that were unintentionally re-exporting types; to migrate import TypeScript types from the correct module:

    - import type { GraphQLUpload } from "graphql-upload/Upload.mjs";
    + import type GraphQLUpload from "graphql-upload/GraphQLUpload.mjs";

    - import type { processRequest } from "graphql-upload/Upload.mjs";
    + import type processRequest from "graphql-upload/processRequest.mjs";

    - import type { GraphQLUpload } from "graphql-upload/processRequest.mjs";
    + import type GraphQLUpload from "graphql-upload/GraphQLUpload.mjs";

  • Refactored tests to use the standard AbortController, fetch, File, and FormData APIs available in modern Node.js and removed the dev dependencies node-abort-controller and node-fetch.

  • Replaced the test utility function streamToString with the function text from node:stream/consumers that’s available in modern Node.js.

  • Use the Node.js test runner API and remove the dev dependency test-director.

  Minor

  • Support Express v5 by updating the optional peer dependency @ types/express to 4.0.29 - 5 and the dev dependency express to v5, via #389.

  Patch

  • Tweaked the package description.
  • Updated the package.json field repository to conform to new npm requirements.
  • Updated the package scripts:
    • Reordered the scripts.
    • Replaced npm run with node --run.
  • Updated GitHub Actions CI config:
    • No longer run the workflow on pull request.
    • Enable manual workflow dispatching.
    • Run checks in seperate jobs.
    • Removed custom step names.
    • Replaced npm run with node --run.
    • Updated the tested Node.js versions to v18, v20, v22.
    • Updated actions/checkout to v4.
    • Updated actions/setup-node to v4.
  • Migrated to the ESLint v9 CLI and “flat” config.
  • Integrated a new dev dependency eslint-plugin-jsdoc and revised types.
  • Removed the Node.js CLI option --unhandled-rejections=throw in the package script tests as it’s now the default for all supported Node.js versions.
  • Avoid hardcoding a default value in the type FileUploadCreateReadStreamOptions property highWaterMark description and use the function getDefaultHighWaterMark from node:stream in tests.
  • Replaced the test helper class Deferred with polyfilled Promise.withResolvers.
  • Removed an unnecessary await in tests.
  • Omit unused catch bindings in the function processRequest.
  • Corrected the JSDoc type FileUploadCreateReadStreamOptions in the module processRequest.mjs.
  • Avoid using return in the middleware.
  • Added a new dev dependency async-listen to replace the test utility function listen.
  • Enabled the TypeScript compiler options noUnusedLocals and noUnusedParameters and used the prefix _ for purposefully unused function parameters in tests.
  • Updated the GitHub Markdown syntax for alerts in the readme.
  • Tweaked wording in the readme and JSDoc descriptions.
• 16.0.2 - 2022-09-01
  

  Patch

  • Updated dev dependencies.
  • Use the node: URL scheme for Node.js builtin module imports.
  • Improved JSDoc in the module GraphQLUpload.mjs.
  • Revamped the readme:
    • Removed the badges.
    • More detailed installation instructions.
    • Added information about TypeScript config and optimal JavaScript module design.
• 16.0.1 - 2022-08-01
  

  Patch

  • Support non latin1 characters in file names by setting the busboy option defParamCharset to utf8, fixing #328.
  • Removed a redundant @ ts-ignore comment.
• 16.0.0 - 2022-07-23
  

  Major

  • Updated the fs-capacitor dependency to v8, fixing #318.

  • The type FileUploadCreateReadStreamOptions from the processRequest.mjs module now uses types from fs-capacitor that are slightly more specific.

  • The API is now ESM in .mjs files instead of CJS in .js files, accessible via import but not require. To migrate imports:

    - import GraphQLUpload from "graphql-upload/GraphQLUpload.js";
    + import GraphQLUpload from "graphql-upload/GraphQLUpload.mjs";

    - import graphqlUploadExpress from "graphql-upload/graphqlUploadExpress.js";
    + import graphqlUploadExpress from "graphql-upload/graphqlUploadExpress.mjs";

    - import graphqlUploadKoa from "graphql-upload/graphqlUploadKoa.js";
    + import graphqlUploadKoa from "graphql-upload/graphqlUploadKoa.mjs";

    - import processRequest from "graphql-upload/processRequest.js";
    + import processRequest from "graphql-upload/processRequest.mjs";

    - import Upload from "graphql-upload/Upload.js";
    + import Upload from "graphql-upload/Upload.mjs";

  Patch

  • Updated dev dependencies.
  • Updated examples in JSDoc comments.
  • Updated the changelog entry for v14.0.0 to show how to migrate imports.
• 15.0.2 - 2022-06-28
  

  Patch

  • Updated dev dependencies.
  • Corrected the TypeScript type for the Koa context ctx parameter for the Koa middleware created by the function graphqlUploadKoa, from import("koa").Context to import("koa").ParameterizedContext.

from graphql-upload GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[parse-github-assistant]

I will reformat the title to use the proper commit message syntax.

[parse-github-assistant]

Thanks for opening this pull request!

• ❌ Please link an issue that describes the reason for this pull request, otherwise your pull request will be closed. Make sure to write it as Closes: #123 in the PR description, so I can recognize it.