[Snyk] Security upgrade mercurius from 9.1.0 to 9.4.0

[vitorsalgado]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	623/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 4.6	CRLF Injection SNYK-JS-UNDICI-3323844	No	Proof of Concept
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-UNDICI-3323845	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: mercurius

The new version differs by 54 commits.

• c0a9538 Bumped v9.4.0
• 696c5dc Updated to standard v17 (#783)
• 4170381 Merge branch 'master' of github.com:mercurius-js/mercurius
• d26a635 chore: update fastify deps to @ fastify (#780)
• 49e9a50 Merge pull request #775 from conradthegray/fix/fix-771
• fbbf78a fix: allow cross origin loading for graphiql
• 397949d Added async support in rewriteHeaders (#773)
• 25b7e88 refactor!: replace promise.allsettled dependency with node implementation (#774)
• 72d6871 fix(docs): add small corrections (#770)
• 02f448f feat(docs): add nestjs integration docs (#769)
• bce821f build(deps-dev): bump tsd from 0.19.1 to 0.20.0 (#766)
• 1fbd1e9 build(deps): bump undici from 4.16.0 to 5.0.0 (#765)
• ec46796 build(deps): bump actions/setup-node from 3.0.0 to 3.1.0 (#763)
• 54cc2a2 Bumped v9.3.6
• 57ff23a Keep requires directive in gateway schema (#756)
• ea2e50d Document new `service.agent` configuration option. (#753)
• 6be150b fixed backport action
• 7c7bff7 Bumped v9.3.5
• 411be81 Correctly handle reference types at the same path in the gateway (#754)
• 423ff0a Add backport GitHub action (#752)
• 6e3ace1 Bumped v9.3.4
• bfa6891 build(deps-dev): bump tap from 15.2.3 to 16.0.0 (#747)
• afb3b62 Fix #748 Ensure FederatedError errors is an array. (#749)
• 66273fb build: reduce dependabot update frequency (#750)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 CRLF Injection
🦉 Regular Expression Denial of Service (ReDoS)

[netlify]

❌ Deploy Preview for camara-deputados-graphql failed.

Name	Link
🔨 Latest commit	41f7a5f
🔍 Latest deploy log	https://app.netlify.com/sites/camara-deputados-graphql/deploys/63efc486c2d9600008437c33