chore(deps): bump @apollo/rover from 0.6.0 to 0.18.1

[dependabot]

Bumps @apollo/rover from 0.6.0 to 0.18.1.

Release notes

Sourced from @​apollo/rover's releases.

v0.18.1

🚀 Features

• Adds support for APOLLO_ROVER_DOWNLOAD_HOST when downloading router and federation plugins - @​LongLiveCHIEF, #1713

  The default host for downloading the router and federation plugins is rover.apollo.dev - this can now be overridden via the APOLLO_ROVER_DOWNLOAD_HOST environment variable to enable downloads from binary mirrors.

• Relaxes requirements for --allow-invalid-routing-url flag for rover subgraph publish - @​EverlastingBugstopper, #1712

  rover subgraph publish now accepts the --allow-invalid-routing-url flag without requiring a --routing-url to be passed as well.

🐛 Fixes

• Improve error message for empty file - @​krachwal, #1724 fixes #1723

  When reading an empty file from disk, Rover now prints the path to that empty file rather than the (always empty) contents of that file.

🛠 Maintenance

• Install Volta via chocolatey in CI instead of the flaky MSI installer - @​EverlastingBugstopper, #1718

  CI jobs have been flaky on Windows due to Volta's MSI installer, the switch to installing via chocolatey should improve this.

• Updates dependencies - @​EverlastingBugstopper, #1709 and #1710

  apollo-parser: 0.5 -> 0.6 termimad: 0.23 -> 0.24 tokio: 1.29 -> 1.31 eslint: 8.46.0 -> 8.47.0 node: 18.17.0 -> 18.17.1

📚 Documentation

• Updates recommended suggested value for disabling telemetry - @​LongLiveCHIEF, #1715 fixes #1714

  Rover now recommends setting APOLLO_TELEMETRY_DISABLED=true instead of APOLLO_TELEMETRY_DISABLED=1 to match the behavior of the Router. APOLLO_TELEMETRY_DISABLED=1 will continue to work as expected.

• Document the API token roles that work with rover pq publish - @​glasser, #1720

---

This release was automatically created by CircleCI.

If you would like to verify that the binary you have downloaded was built from the source code in this repository, you can compute a checksum of the zipped tarball and compare it to the checksums that are included as release artifacts.

Binaries built for MacOS are signed, notarized, and automatically verified with Gatekeeper.

v0.18.0

Important: 1 potentially breaking change below, indicated by ❗ BREAKING ❗

❗ BREAKING ❗

... (truncated)

Changelog

Sourced from @​apollo/rover's changelog.

[0.18.1] - 2023-08-23

🚀 Features

• Adds support for APOLLO_ROVER_DOWNLOAD_HOST when downloading router and federation plugins - @​LongLiveCHIEF, #1713

  The default host for downloading the router and federation plugins is rover.apollo.dev - this can now be overridden via the APOLLO_ROVER_DOWNLOAD_HOST environment variable to enable downloads from binary mirrors.

• Relaxes requirements for --allow-invalid-routing-url flag for rover subgraph publish - @​EverlastingBugstopper, #1712

  rover subgraph publish now accepts the --allow-invalid-routing-url flag without requiring a --routing-url to be passed as well.

🐛 Fixes

• Improve error message for empty file - @​krachwal, #1724 fixes #1723

  When reading an empty file from disk, Rover now prints the path to that empty file rather than the (always empty) contents of that file.

🛠 Maintenance

• Install Volta via chocolatey in CI instead of the flaky MSI installer - @​EverlastingBugstopper, #1718

  CI jobs have been flaky on Windows due to Volta's MSI installer, the switch to installing via chocolatey should improve this.

• Updates dependencies - @​EverlastingBugstopper, #1709 and #1710

  apollo-parser: 0.5 -> 0.6 termimad: 0.23 -> 0.24 tokio: 1.29 -> 1.31 eslint: 8.46.0 -> 8.47.0 node: 18.17.0 -> 18.17.1

📚 Documentation

• Updates recommended suggested value for disabling telemetry - @​LongLiveCHIEF, #1715 fixes #1714

  Rover now recommends setting APOLLO_TELEMETRY_DISABLED=true instead of APOLLO_TELEMETRY_DISABLED=1 to match the behavior of the Router. APOLLO_TELEMETRY_DISABLED=1 will continue to work as expected.

• Document the API token roles that work with rover pq publish - @​glasser, #1720

[0.18.0] - 2023-08-10

Important: 1 potentially breaking change below, indicated by ❗ BREAKING ❗

❗ BREAKING ❗

• Prevent publishing unparsable routing URLs by default - @​EverlastingBugstopper, #1706 fixes #1689

  rover subgraph publish now validates the --routing-url argument with a full URL parse to prevent the router from failing to start up due to an invalid subgraph URL. This means that passing an invalid routing URL or publishing a subgraph schema update that contains an invalid routing URL in the GraphOS registry will return an error. This error can be ignored by passing the --allow-invalid-routing-url option.

... (truncated)

Commits

• e2ba8f1 release: v0.18.1 (#1726)
• cfc7c36 Fix: Print path for empty file rather than contents (#1724)
• 27e2531 docs(telemetry): update instructions for disabling telemetry (#1715)
• 9a39dde chore: install volta via chocolatey instead of flaky MSI installer (#1718)
• 52862c4 docs: document what roles work with rover pq publish (#1720)
• 29a60f0 fixup: re-add .npmrc note (#1719)
• fdfb598 docs: clearer docs for plugin download host configuration (#1716)
• 8a670b0 chore(deps): update all non-major packages >= 1.0 (#1709)
• baa19a4 chore(deps): update cargo pre-1.0 packages (minor) (#1710)
• 0d37eb3 feat(install): plugins support APOLLO_ROVER_DOWNLOAD_HOST (#1713)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)