Releases: urql-graphql/urql
Releases · urql-graphql/urql
@urql/[email protected]
@urql/[email protected]
Patch Changes
⚠️ FixCVE-2024-24556
, addressing an XSS vulnerability, where@urql/next
failed to escape HTML characters in JSON payloads injected into RSC hydration bodies. When an attacker is able to manipulate strings in the JSON response in RSC payloads, this could cause HTML to be evaluated via a typical XSS vulnerability (SeeGHSA-qhjf-hm5j-335w
for details.)
Submitted by @JoviDeCroock (See4b7011b7
)
@urql/[email protected]
Minor Changes
- Bump peer-dependency of
@react-native-community/netinfo
to allow v11
Submitted by @albinhubsch (See #3485)
@urql/[email protected]
@urql/[email protected]
@urql/[email protected]
Patch Changes
- Add back our cache-outcome on the document-cache, this was behind a development flag however in our normalized cache we always add it already
Submitted by @JoviDeCroock (See #3464)
@urql/[email protected]
Patch Changes
⚠️ Fix the defaultcacheExchange
crashing oncache-only
request policies with cache misses due toundefined
results
Submitted by @JoviDeCroock (See #3459)
@urql/[email protected]
Patch Changes
⚠️ Fix incorrect JSON stringification of objects from different JS contexts. This could lead to invalid variables being generated in the Vercel Edge runtime specifically
Submitted by @SoraKumo001 (See #3453)
@urql/[email protected]
Patch Changes
- Warn about cached persisted-miss results in development, when a
persistedExchange()
sees a persisted-miss error for a result that's already seen a persisted-miss error (i.e. two misses). This shouldn't happen unless something is caching persisted errors and we should warn about this appropriately
Submitted by @kitten (See #3442)
@urql/[email protected]
Minor Changes
- Allow the user to debug cache-misses by means of the new
logger
interface on thecacheExchange
. A field miss will dispatch adebug
log when it's not marked with@_optional
or when it's non-nullable in theschema
Submitted by @JoviDeCroock (See #3446) - Add
onCacheHydrated
as an option for theStorageAdapter
Submitted by @JoviDeCroock (See #3428) - Add optional
logger
to the options, this allows you to filter out warnings or disable them all together
Submitted by @JoviDeCroock (See #3444)