chore(deps-dev): bump @apollo/gateway from 2.2.3 to 2.8.5 (#292)

Bumps [@apollo/gateway](https://github.com/apollographql/federation/tree/HEAD/gateway-js) from 2.2.3 to 2.8.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apollographql/federation/releases"><code>@apollo/gateway</code>'s releases</a>.</em></p> <blockquote> <h2><code>@apollo/gateway</code><a href="https://github.com/2"><code>@2</code></a>.8.5</h2> <h2>🔒 Security</h2> <h3>CVE-2024-43414: Prevent uncontrolled recursion for complex queries</h3> <p>Correct a bug where complex queries can cause uncontrolled recursion due to failure to reduce the number of possible query plans (classified as <a href="https://cwe.mitre.org/data/definitions/674.html">CWE-674</a>). (<a href="https://redirect.github.com/apollographql/federation/pull/3128">#3128</a>)</p> <p>This weakness impacts all v2 versions of <code>@apollo/gateway</code> prior to this release. See the associated Github Advisory, <a href="https://github.com/apollographql/federation/security/advisories/GHSA-fmj9-77q8-g6c4">GHSA-fmj9-77q8-g6c4</a>, for more information.</p> <h2></h2> <ul> <li>Updated dependencies [<a href="https://github.com/apollographql/federation/commit/926cbb7949200e12b81100a07fa3438b5ae9efd0"><code>926cbb7949200e12b81100a07fa3438b5ae9efd0</code></a>]: <ul> <li><code>@apollo/query-planner</code><a href="https://github.com/2"><code>@2</code></a>.8.5</li> <li><code>@apollo/composition</code><a href="https://github.com/2"><code>@2</code></a>.8.5</li> <li><code>@apollo/federation-internals</code><a href="https://github.com/2"><code>@2</code></a>.8.5</li> </ul> </li> </ul> <h2><code>@apollo/gateway</code><a href="https://github.com/2"><code>@2</code></a>.8.4</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/apollographql/federation/commit/4d9e0f6390c5114132d205ab73b6aa1b9ffa8cd8"><code>4d9e0f6390c5114132d205ab73b6aa1b9ffa8cd8</code></a>, <a href="https://github.com/apollographql/federation/commit/5f4bb160d024678d6facd471c43c8ec61c86e701"><code>5f4bb160d024678d6facd471c43c8ec61c86e701</code></a>, <a href="https://github.com/apollographql/federation/commit/672aca7cbeb0a6a38586357a4e154f2dd91caa0c"><code>672aca7cbeb0a6a38586357a4e154f2dd91caa0c</code></a>]: <ul> <li><code>@apollo/composition</code><a href="https://github.com/2"><code>@2</code></a>.8.4</li> <li><code>@apollo/federation-internals</code><a href="https://github.com/2"><code>@2</code></a>.8.4</li> <li><code>@apollo/query-planner</code><a href="https://github.com/2"><code>@2</code></a>.8.4</li> </ul> </li> </ul> <h2><code>@apollo/gateway</code><a href="https://github.com/2"><code>@2</code></a>.8.3</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/apollographql/federation/commit/38debcf2f9af1a719bd1c8acbd9335efa8427ddb"><code>38debcf2f9af1a719bd1c8acbd9335efa8427ddb</code></a>, <a href="https://github.com/apollographql/federation/commit/50d648ccffb05591878de75dc5522914ed48698f"><code>50d648ccffb05591878de75dc5522914ed48698f</code></a>, <a href="https://github.com/apollographql/federation/commit/860aace9904e787f9bf05aad94be5b5920f10543"><code>860aace9904e787f9bf05aad94be5b5920f10543</code></a>, <a href="https://github.com/apollographql/federation/commit/67b70c6e68b1cdbf8f03dacafd636e27ed9b7814"><code>67b70c6e68b1cdbf8f03dacafd636e27ed9b7814</code></a>, <a href="https://github.com/apollographql/federation/commit/f753d55e9a49d11389ee4f8d7976533447e95ede"><code>f753d55e9a49d11389ee4f8d7976533447e95ede</code></a>, <a href="https://github.com/apollographql/federation/commit/f5f6a799d6b3675eecb0eaec7a816d746cd136b2"><code>f5f6a799d6b3675eecb0eaec7a816d746cd136b2</code></a>, <a href="https://github.com/apollographql/federation/commit/42bd27af6a23bcfdd36951dbfa3fb9f7ba833f3a"><code>42bd27af6a23bcfdd36951dbfa3fb9f7ba833f3a</code></a>, <a href="https://github.com/apollographql/federation/commit/f376447a820e3c0ae41d16d1fd3b681d2f1e8c14"><code>f376447a820e3c0ae41d16d1fd3b681d2f1e8c14</code></a>, <a href="https://github.com/apollographql/federation/commit/3af790517d662f3bec9064c0bf243014c579e9cd"><code>3af790517d662f3bec9064c0bf243014c579e9cd</code></a>]: <ul> <li><code>@apollo/composition</code><a href="https://github.com/2"><code>@2</code></a>.8.3</li> <li><code>@apollo/federation-internals</code><a href="https://github.com/2"><code>@2</code></a>.8.3</li> <li><code>@apollo/query-planner</code><a href="https://github.com/2"><code>@2</code></a>.8.3</li> </ul> </li> </ul> <h2><code>@apollo/gateway</code><a href="https://github.com/2"><code>@2</code></a>.8.3-beta.2</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/apollographql/federation/commit/50d648ccffb05591878de75dc5522914ed48698f"><code>50d648ccffb05591878de75dc5522914ed48698f</code></a>]: <ul> <li><code>@apollo/federation-internals</code><a href="https://github.com/2"><code>@2</code></a>.8.3-beta.2</li> <li><code>@apollo/composition</code><a href="https://github.com/2"><code>@2</code></a>.8.3-beta.2</li> <li><code>@apollo/query-planner</code><a href="https://github.com/2"><code>@2</code></a>.8.3-beta.2</li> </ul> </li> </ul> <h2><code>@apollo/gateway</code><a href="https://github.com/2"><code>@2</code></a>.8.3-beta.1</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/apollographql/federation/commit/f376447a820e3c0ae41d16d1fd3b681d2f1e8c14"><code>f376447a820e3c0ae41d16d1fd3b681d2f1e8c14</code></a>]: <ul> <li><code>@apollo/composition</code><a href="https://github.com/2"><code>@2</code></a>.8.3-beta.1</li> <li><code>@apollo/federation-internals</code><a href="https://github.com/2"><code>@2</code></a>.8.3-beta.1</li> <li><code>@apollo/query-planner</code><a href="https://github.com/2"><code>@2</code></a>.8.3-beta.1</li> </ul> </li> </ul> <h2><code>@apollo/gateway</code><a href="https://github.com/2"><code>@2</code></a>.8.3-beta.0</h2> <h3>Patch Changes</h3>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apollographql/federation/blob/main/gateway-js/CHANGELOG.md"><code>@apollo/gateway</code>'s changelog</a>.</em></p> <blockquote> <h2>2.8.5</h2> <h2>🔒 Security</h2> <h3>CVE-2024-43414: Prevent uncontrolled recursion for complex queries</h3> <p>Correct a bug where complex queries can cause uncontrolled recursion due to failure to reduce the number of possible query plans (classified as <a href="https://cwe.mitre.org/data/definitions/674.html">CWE-674</a>). (<a href="https://redirect.github.com/apollographql/federation/pull/3128">#3128</a>)</p> <p>This weakness impacts all v2 versions of <code>@apollo/gateway</code> prior to this release. See the associated Github Advisory, <a href="https://github.com/apollographql/federation/security/advisories/GHSA-fmj9-77q8-g6c4">GHSA-fmj9-77q8-g6c4</a>, for more information.</p> <h2></h2> <ul> <li>Updated dependencies [<a href="https://github.com/apollographql/federation/commit/926cbb7949200e12b81100a07fa3438b5ae9efd0"><code>926cbb7949200e12b81100a07fa3438b5ae9efd0</code></a>]: <ul> <li><code>@apollo/query-planner</code><a href="https://github.com/2"><code>@2</code></a>.8.5</li> <li><code>@apollo/composition</code><a href="https://github.com/2"><code>@2</code></a>.8.5</li> <li><code>@apollo/federation-internals</code><a href="https://github.com/2"><code>@2</code></a>.8.5</li> </ul> </li> </ul> <h2>2.8.4</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/apollographql/federation/commit/4d9e0f6390c5114132d205ab73b6aa1b9ffa8cd8"><code>4d9e0f6390c5114132d205ab73b6aa1b9ffa8cd8</code></a>, <a href="https://github.com/apollographql/federation/commit/5f4bb160d024678d6facd471c43c8ec61c86e701"><code>5f4bb160d024678d6facd471c43c8ec61c86e701</code></a>, <a href="https://github.com/apollographql/federation/commit/672aca7cbeb0a6a38586357a4e154f2dd91caa0c"><code>672aca7cbeb0a6a38586357a4e154f2dd91caa0c</code></a>]: <ul> <li><code>@apollo/composition</code><a href="https://github.com/2"><code>@2</code></a>.8.4</li> <li><code>@apollo/federation-internals</code><a href="https://github.com/2"><code>@2</code></a>.8.4</li> <li><code>@apollo/query-planner</code><a href="https://github.com/2"><code>@2</code></a>.8.4</li> </ul> </li> </ul> <h2>2.8.3</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/apollographql/federation/commit/38debcf2f9af1a719bd1c8acbd9335efa8427ddb"><code>38debcf2f9af1a719bd1c8acbd9335efa8427ddb</code></a>, <a href="https://github.com/apollographql/federation/commit/50d648ccffb05591878de75dc5522914ed48698f"><code>50d648ccffb05591878de75dc5522914ed48698f</code></a>, <a href="https://github.com/apollographql/federation/commit/860aace9904e787f9bf05aad94be5b5920f10543"><code>860aace9904e787f9bf05aad94be5b5920f10543</code></a>, <a href="https://github.com/apollographql/federation/commit/67b70c6e68b1cdbf8f03dacafd636e27ed9b7814"><code>67b70c6e68b1cdbf8f03dacafd636e27ed9b7814</code></a>, <a href="https://github.com/apollographql/federation/commit/f753d55e9a49d11389ee4f8d7976533447e95ede"><code>f753d55e9a49d11389ee4f8d7976533447e95ede</code></a>, <a href="https://github.com/apollographql/federation/commit/f5f6a799d6b3675eecb0eaec7a816d746cd136b2"><code>f5f6a799d6b3675eecb0eaec7a816d746cd136b2</code></a>, <a href="https://github.com/apollographql/federation/commit/42bd27af6a23bcfdd36951dbfa3fb9f7ba833f3a"><code>42bd27af6a23bcfdd36951dbfa3fb9f7ba833f3a</code></a>, <a href="https://github.com/apollographql/federation/commit/f376447a820e3c0ae41d16d1fd3b681d2f1e8c14"><code>f376447a820e3c0ae41d16d1fd3b681d2f1e8c14</code></a>, <a href="https://github.com/apollographql/federation/commit/3af790517d662f3bec9064c0bf243014c579e9cd"><code>3af790517d662f3bec9064c0bf243014c579e9cd</code></a>]: <ul> <li><code>@apollo/composition</code><a href="https://github.com/2"><code>@2</code></a>.8.3</li> <li><code>@apollo/federation-internals</code><a href="https://github.com/2"><code>@2</code></a>.8.3</li> <li><code>@apollo/query-planner</code><a href="https://github.com/2"><code>@2</code></a>.8.3</li> </ul> </li> </ul> <h2>2.8.3-beta.2</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/apollographql/federation/commit/50d648ccffb05591878de75dc5522914ed48698f"><code>50d648ccffb05591878de75dc5522914ed48698f</code></a>]: <ul> <li><code>@apollo/federation-internals</code><a href="https://github.com/2"><code>@2</code></a>.8.3-beta.2</li> <li><code>@apollo/composition</code><a href="https://github.com/2"><code>@2</code></a>.8.3-beta.2</li> <li><code>@apollo/query-planner</code><a href="https://github.com/2"><code>@2</code></a>.8.3-beta.2</li> </ul> </li> </ul> <h2>2.8.3-beta.1</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/apollographql/federation/commit/f376447a820e3c0ae41d16d1fd3b681d2f1e8c14"><code>f376447a820e3c0ae41d16d1fd3b681d2f1e8c14</code></a>]: <ul> <li><code>@apollo/composition</code><a href="https://github.com/2"><code>@2</code></a>.8.3-beta.1</li> </ul> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apollographql/federation/commit/f9b5f65c7460fefb89a387d66460c10bc6e227a7"><code>f9b5f65</code></a> release: on branch main (<a href="https://github.com/apollographql/federation/tree/HEAD/gateway-js/issues/3129">#3129</a>)</li> <li><a href="https://github.com/apollographql/federation/commit/38beaa2f753eaf31be74b272ea62f3c1948c854f"><code>38beaa2</code></a> release: on branch main (<a href="https://github.com/apollographql/federation/tree/HEAD/gateway-js/issues/3085">#3085</a>)</li> <li><a href="https://github.com/apollographql/federation/commit/1a55925ebff64dd9b79142e8a1bd19e7a06e6626"><code>1a55925</code></a> release: on branch main (<a href="https://github.com/apollographql/federation/tree/HEAD/gateway-js/issues/3055">#3055</a>)</li> <li><a href="https://github.com/apollographql/federation/commit/5fd0028534515f50937ad2a1721badfa1cdc2b5b"><code>5fd0028</code></a> release: on branch version-2.8.3-beta (beta) (<a href="https://github.com/apollographql/federation/tree/HEAD/gateway-js/issues/3079">#3079</a>)</li> <li><a href="https://github.com/apollographql/federation/commit/47d4d79b505f4fc9b3c69a784fb879de5a045f13"><code>47d4d79</code></a> release: on branch version-2.8.3-beta (beta) (<a href="https://github.com/apollographql/federation/tree/HEAD/gateway-js/issues/3077">#3077</a>)</li> <li><a href="https://github.com/apollographql/federation/commit/f5603721f2dd6b465708ffe38aa5439b57a26134"><code>f560372</code></a> release: on branch version-2.8.3-beta (beta) (<a href="https://github.com/apollographql/federation/tree/HEAD/gateway-js/issues/3065">#3065</a>)</li> <li><a href="https://github.com/apollographql/federation/commit/bc79013a4f85b14ccd74b18db888b6abf9c21112"><code>bc79013</code></a> Revert <a href="https://github.com/apollographql/federation/tree/HEAD/gateway-js/issues/3054">#3054</a> (<a href="https://github.com/apollographql/federation/tree/HEAD/gateway-js/issues/3063">#3063</a>)</li> <li><a href="https://github.com/apollographql/federation/commit/a4e105e78ac7b5fd94e0ca35584d3dd76ff0fb3f"><code>a4e105e</code></a> Don't put join__enumValue onto an EnumValue if all subgraphs who have the enu...</li> <li><a href="https://github.com/apollographql/federation/commit/5a1be373dd7ddd46f427676dca540a151e673713"><code>5a1be37</code></a> release: on branch main (<a href="https://github.com/apollographql/federation/tree/HEAD/gateway-js/issues/3044">#3044</a>)</li> <li><a href="https://github.com/apollographql/federation/commit/0c98eac9797f212e8cd50708a277177fa6eb9f3f"><code>0c98eac</code></a> release: on branch main (<a href="https://github.com/apollographql/federation/tree/HEAD/gateway-js/issues/3039">#3039</a>)</li> <li>Additional commits viewable in <a href="https://github.com/apollographql/federation/commits/@apollo/gateway@2.8.5/gateway-js">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@apollo/gateway&package-manager=npm_and_yarn&previous-version=2.2.3&new-version=2.8.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/TriPSs/nestjs-query/network/alerts). </details>
TriPSs · Aug 28, 2024 · 8520f18 · 8520f18
2 parents 823abfb + 128d1d3
commit 8520f18
Show file tree

Hide file tree

Showing 2 changed files with 52 additions and 62 deletions.
diff --git a/package.json b/package.json
@@ -11,7 +11,7 @@
     "test:e2e": "nx e2e examples"
   },
   "resolutions": {
-    "@apollo/gateway": "2.2.3",
+    "@apollo/gateway": "2.8.5",
     "@apollo/subgraph": "2.2.3"
   },
   "dependencies": {
@@ -36,7 +36,7 @@
   "devDependencies": {
     "@actions/core": "^1.10.1",
     "@apollo/federation": "0.38.1",
-    "@apollo/gateway": "2.8.4",
+    "@apollo/gateway": "2.8.5",
     "@apollo/server": "^4.11.0",
     "@apollo/subgraph": "2.8.4",
     "@commitlint/cli": "19.4.0",

diff --git a/yarn.lock b/yarn.lock
@@ -348,19 +348,33 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@apollo/composition@npm:^2.2.3":
-  version: 2.6.2
-  resolution: "@apollo/composition@npm:2.6.2"
+"@apollo/composition@npm:2.8.5":
+  version: 2.8.5
+  resolution: "@apollo/composition@npm:2.8.5"
   dependencies:
-    "@apollo/federation-internals": "npm:2.6.2"
-    "@apollo/query-graphs": "npm:2.6.2"
+    "@apollo/federation-internals": "npm:2.8.5"
+    "@apollo/query-graphs": "npm:2.8.5"
   peerDependencies:
     graphql: ^16.5.0
-  checksum: 10/0e82263cff59e177ce05ef7e9ed3a2e30bdd28a0fe5833f95a6bbc5a381c876f4e78bf6817e9fbfe1f1925fd74a6c5a137d54c2528b6851b6475ed0c7eb15c74
+  checksum: 10/10740580465e31d848dbbf2ec4a866d39c03dabf07560c4fa535b3cad127e59647430f542a2eee426fe5820b0d549bb9648b512e514a00ad9b1cc86b80f92e81
   languageName: node
   linkType: hard
 
-"@apollo/federation-internals@npm:2.6.2, @apollo/federation-internals@npm:^2.2.3":
+"@apollo/federation-internals@npm:2.8.5":
+  version: 2.8.5
+  resolution: "@apollo/federation-internals@npm:2.8.5"
+  dependencies:
+    "@types/uuid": "npm:^9.0.0"
+    chalk: "npm:^4.1.0"
+    js-levenshtein: "npm:^1.1.6"
+    uuid: "npm:^9.0.0"
+  peerDependencies:
+    graphql: ^16.5.0
+  checksum: 10/0af264155e73e866a49b22ad9e7822ec6e7125c8c381f4e2283ff6afd81f94370fe60bf1ddd2bd35b54c092246c02a196847ab5d583cb1101cc581737cfe5425
+  languageName: node
+  linkType: hard
+
+"@apollo/federation-internals@npm:^2.2.3":
   version: 2.6.2
   resolution: "@apollo/federation-internals@npm:2.6.2"
   dependencies:
@@ -387,31 +401,31 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@apollo/gateway@npm:2.2.3":
-  version: 2.2.3
-  resolution: "@apollo/gateway@npm:2.2.3"
+"@apollo/gateway@npm:2.8.5":
+  version: 2.8.5
+  resolution: "@apollo/gateway@npm:2.8.5"
   dependencies:
-    "@apollo/composition": "npm:^2.2.3"
-    "@apollo/federation-internals": "npm:^2.2.3"
-    "@apollo/query-planner": "npm:^2.2.3"
-    "@apollo/server-gateway-interface": "npm:^1.0.2"
-    "@apollo/usage-reporting-protobuf": "npm:^4.0.0"
-    "@apollo/utils.createhash": "npm:^1.1.0"
-    "@apollo/utils.fetcher": "npm:^1.1.0"
-    "@apollo/utils.isnodelike": "npm:^1.1.0"
-    "@apollo/utils.logger": "npm:^1.0.0"
+    "@apollo/composition": "npm:2.8.5"
+    "@apollo/federation-internals": "npm:2.8.5"
+    "@apollo/query-planner": "npm:2.8.5"
+    "@apollo/server-gateway-interface": "npm:^1.1.0"
+    "@apollo/usage-reporting-protobuf": "npm:^4.1.0"
+    "@apollo/utils.createhash": "npm:^2.0.0"
+    "@apollo/utils.fetcher": "npm:^2.0.0"
+    "@apollo/utils.isnodelike": "npm:^2.0.0"
+    "@apollo/utils.keyvaluecache": "npm:^2.1.0"
+    "@apollo/utils.logger": "npm:^2.0.0"
     "@josephg/resolvable": "npm:^1.0.1"
     "@opentelemetry/api": "npm:^1.0.1"
     "@types/node-fetch": "npm:^2.6.2"
     async-retry: "npm:^1.3.3"
     loglevel: "npm:^1.6.1"
-    lru-cache: "npm:^7.13.1"
     make-fetch-happen: "npm:^11.0.0"
     node-abort-controller: "npm:^3.0.1"
     node-fetch: "npm:^2.6.7"
   peerDependencies:
     graphql: ^16.5.0
-  checksum: 10/9d7af7d46f9ac1ebd4af8e013ec08c55f40b5359e7b1e9a8e9b21113bd9d2fc20102b9efe945dd2f315e3215a6035a3407cbfeb9357bd9d4fdc152df10b64bdd
+  checksum: 10/699d473a6f231fb5252b63e91e01aad18c9a54f5ffc1b233c2a6af4583ea672ed045b027d58cd54bd4273e3d5dd1d9ff9700499db6fc46c138791944004120d0
   languageName: node
   linkType: hard
 
@@ -462,37 +476,37 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@apollo/query-graphs@npm:2.6.2":
-  version: 2.6.2
-  resolution: "@apollo/query-graphs@npm:2.6.2"
+"@apollo/query-graphs@npm:2.8.5":
+  version: 2.8.5
+  resolution: "@apollo/query-graphs@npm:2.8.5"
   dependencies:
-    "@apollo/federation-internals": "npm:2.6.2"
+    "@apollo/federation-internals": "npm:2.8.5"
     deep-equal: "npm:^2.0.5"
     ts-graphviz: "npm:^1.5.4"
     uuid: "npm:^9.0.0"
   peerDependencies:
     graphql: ^16.5.0
-  checksum: 10/5692ea67730c56dbfc5fc8ae0c059be0423dcacfafdf831b857ae39a68e48a899e3742e348314f278bef62d7568518873bc123ed514e0e6567ad387ba696ced6
+  checksum: 10/458715ca12a3bce8fbb122af72dfda04e79722fd7d66f5b124fa5d77dde572a56f25b742971cbd4bf15d82403f7f773fe7e3739b3c70e2b9cb4743a83ae6da6c
   languageName: node
   linkType: hard
 
-"@apollo/query-planner@npm:^2.2.3":
-  version: 2.6.2
-  resolution: "@apollo/query-planner@npm:2.6.2"
+"@apollo/query-planner@npm:2.8.5":
+  version: 2.8.5
+  resolution: "@apollo/query-planner@npm:2.8.5"
   dependencies:
-    "@apollo/federation-internals": "npm:2.6.2"
-    "@apollo/query-graphs": "npm:2.6.2"
+    "@apollo/federation-internals": "npm:2.8.5"
+    "@apollo/query-graphs": "npm:2.8.5"
     "@apollo/utils.keyvaluecache": "npm:^2.1.0"
     chalk: "npm:^4.1.0"
     deep-equal: "npm:^2.0.5"
     pretty-format: "npm:^29.0.0"
   peerDependencies:
     graphql: ^16.5.0
-  checksum: 10/95b530ff2c2d3332fa133cffa83b7c19cf53e1a26890aeffc11aaf67ec238ba51e1b956909220a5770334166ce8c6bb5f0aa122e1a44232cb3fe3c856d275e50
+  checksum: 10/72e395651e8c365e892544704c6443f77f0acbaaa7c8457b7c9619cadac14b9c2ced65f1405c0029dec25e1bd009dc1c58884478a6fe2c5dd1fdf7c964e82e14
   languageName: node
   linkType: hard
 
-"@apollo/server-gateway-interface@npm:^1.0.2, @apollo/server-gateway-interface@npm:^1.1.1":
+"@apollo/server-gateway-interface@npm:^1.1.0, @apollo/server-gateway-interface@npm:^1.1.1":
   version: 1.1.1
   resolution: "@apollo/server-gateway-interface@npm:1.1.1"
   dependencies:
@@ -563,7 +577,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@apollo/usage-reporting-protobuf@npm:^4.0.0, @apollo/usage-reporting-protobuf@npm:^4.1.0, @apollo/usage-reporting-protobuf@npm:^4.1.1":
+"@apollo/usage-reporting-protobuf@npm:^4.1.0, @apollo/usage-reporting-protobuf@npm:^4.1.1":
   version: 4.1.1
   resolution: "@apollo/usage-reporting-protobuf@npm:4.1.1"
   dependencies:
@@ -572,16 +586,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@apollo/utils.createhash@npm:^1.1.0":
-  version: 1.1.0
-  resolution: "@apollo/utils.createhash@npm:1.1.0"
-  dependencies:
-    "@apollo/utils.isnodelike": "npm:^1.1.0"
-    sha.js: "npm:^2.4.11"
-  checksum: 10/cc2913ef19d968f1053d2dd7e6776d47dc17552468aaf32b1510bc7246e03a65f6596151184ad1656daca2824845250ad729b0f0986dd36010a88c1b04537b1a
-  languageName: node
-  linkType: hard
-
 "@apollo/utils.createhash@npm:^2.0.0":
   version: 2.0.1
   resolution: "@apollo/utils.createhash@npm:2.0.1"
@@ -601,27 +605,13 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@apollo/utils.fetcher@npm:^1.1.0":
-  version: 1.1.1
-  resolution: "@apollo/utils.fetcher@npm:1.1.1"
-  checksum: 10/fdecd57b8a397fbcbed37b0cd7d23a1e1bbcb6de91e7631bd7fc0abb2dbe7cb606c8a0414022f4b7ebd35e3aea907912bb9ce9b4f40cdfcd99815818fa314645
-  languageName: node
-  linkType: hard
-
 "@apollo/utils.fetcher@npm:^2.0.0":
   version: 2.0.1
   resolution: "@apollo/utils.fetcher@npm:2.0.1"
   checksum: 10/e173d215c3544dade7b4a08733234d5180973c79e8e738e9e2530f2067e8731a5faa7f15176f4ca91f3cc95a4c70166a686c7382a6c6100f56ad5befcd613f9f
   languageName: node
   linkType: hard
 
-"@apollo/utils.isnodelike@npm:^1.1.0":
-  version: 1.1.0
-  resolution: "@apollo/utils.isnodelike@npm:1.1.0"
-  checksum: 10/66d620b9db01a919858138e99e2227a793912aafa5deed3eedbaa3b29e1364b6e82c111562743951dd56f4574c331a34f83d864f0d648f5e32c9555653f121af
-  languageName: node
-  linkType: hard
-
 "@apollo/utils.isnodelike@npm:^2.0.0, @apollo/utils.isnodelike@npm:^2.0.1":
   version: 2.0.1
   resolution: "@apollo/utils.isnodelike@npm:2.0.1"
@@ -16461,7 +16451,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"lru-cache@npm:^7.10.1, lru-cache@npm:^7.13.1, lru-cache@npm:^7.14.1, lru-cache@npm:^7.7.1":
+"lru-cache@npm:^7.10.1, lru-cache@npm:^7.14.1, lru-cache@npm:^7.7.1":
   version: 7.18.3
   resolution: "lru-cache@npm:7.18.3"
   checksum: 10/6029ca5aba3aacb554e919d7ef804fffd4adfc4c83db00fac8248c7c78811fb6d4b6f70f7fd9d55032b3823446546a007edaa66ad1f2377ae833bd983fac5d98
@@ -18044,7 +18034,7 @@ __metadata:
   dependencies:
     "@actions/core": "npm:^1.10.1"
     "@apollo/federation": "npm:0.38.1"
-    "@apollo/gateway": "npm:2.8.4"
+    "@apollo/gateway": "npm:2.8.5"
     "@apollo/server": "npm:^4.11.0"
     "@apollo/subgraph": "npm:2.8.4"
     "@commitlint/cli": "npm:19.4.0"