Update dependency subscriptions-transport-ws to v0.9.19

[mend-for-github-com]

This PR contains the following updates:

Package	Type	Update	Change
subscriptions-transport-ws	dependencies	patch	0.9.16 → 0.9.19

By merging this PR, the issue #101 will be automatically resolved and closed:

Severity	CVSS Score	Vulnerability	Reachability
High	7.5	CVE-2024-37890	Unreachable
Medium	5.3	CVE-2021-32640	Unreachable

---

Release Notes

apollostack/subscriptions-transport-ws (subscriptions-transport-ws)

v0.9.19

Compare Source

• Bump ws dependency to allow v6 and v7. Note that there are breaking changes in ws 6.0.0 and 7.0.0; for example, messages over 100MiB are rejected, and (in v7) the behavior of sending messages while the connection is starting or ending has changed. We are publishing this package to allow users of Apollo Server 2 to avoid seeing this CVE in their npm audit. However, note that (a) this CVE does not affect the subscriptions client, just the server and (b) Apollo Server 3 will remove its superficial integration with this package entirely. We encourage users of Apollo Server 2 to disable the integration with this unmaintained package via new ApolloServer({subscriptions: false}), and consider packages such as graphql-ws to power GraphQL subscriptions until such time as Apollo Server has more fully integrated subscriptions support.

v0.9.18

Compare Source

Bug Fixes

• Do not send GQL_STOP when unsubscribing after GQL_COMPLETE is received.
  
  @​onhate in #​775
• Clear WebSocket event listeners on close.
  
  @​tretne in #​615
• Fix MessageTypes TS import errors.
  
  @​sneko in #​412
• Ensure promisedParams errors are not handled twice.
  
  @​benjie in #​514
• Fix invalid formatResponse console error.
  
  @​renatorib in #​761
• Destructure the correct error object in MessageTypes.GQL_START.
  
  @​gregbty in #​588
• Inline source in sourcemap files to fix broken source lookups.
  
  @​alexkirsz in #​513

New Features

• Add minTimeout option for client.
  
  @​jedwards1211 in #​675
• Accept extra WebSocket client arguments.
  
  @​GingerBear in #​561
• Support server-defined payload in GQL_CONNECTION_ACK message.
  
  @​mattkrick in #​347

v0.9.17

Compare Source

• Bump graphql peer/dev deps.
  
  @​hwillson in #​778

---

• If you want to rebase/retry this PR, check this box