From 1d4dc759c5f83ddb0ccee38a189c0cb154de72dd Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 5 Feb 2026 19:19:30 +0000
Subject: [PATCH] chore: update dependency @apollo/server to ^4.13.0 [security]

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 extensions/graphql/package.json |  2 +-
 package-lock.json               | 10 ++++++----
 2 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/extensions/graphql/package.json b/extensions/graphql/package.json
index 5cffe8643bfb..ae23e1e42c92 100644
--- a/extensions/graphql/package.json
+++ b/extensions/graphql/package.json
@@ -44,7 +44,7 @@
     "@loopback/rest": "^15.0.1"
   },
   "dependencies": {
-    "@apollo/server": "^4.12.2",
+    "@apollo/server": "^4.13.0",
     "@graphql-tools/utils": "^11.0.0",
     "@loopback/http-server": "^7.0.8",
     "body-parser": "^2.2.2",
diff --git a/package-lock.json b/package-lock.json
index ecfd2095ca22..b687c8f904bd 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1419,7 +1419,7 @@
       "version": "0.12.9",
       "license": "MIT",
       "dependencies": {
-        "@apollo/server": "^4.12.2",
+        "@apollo/server": "^4.13.0",
         "@graphql-tools/utils": "^11.0.0",
         "@loopback/http-server": "^7.0.8",
         "body-parser": "^2.2.2",
@@ -1879,9 +1879,10 @@
       }
     },
     "node_modules/@apollo/server": {
-      "version": "4.12.2",
-      "resolved": "https://registry.npmjs.org/@apollo/server/-/server-4.12.2.tgz",
-      "integrity": "sha512-jKRlf+sBMMdKYrjMoiWKne42Eb6paBfDOr08KJnUaeaiyWFj+/040FjVPQI7YGLfdwnYIsl1NUUqS2UdgezJDg==",
+      "version": "4.13.0",
+      "resolved": "https://registry.npmjs.org/@apollo/server/-/server-4.13.0.tgz",
+      "integrity": "sha512-t4GzaRiYIcPwYy40db6QjZzgvTr9ztDKBddykUXmBb2SVjswMKXbkaJ5nPeHqmT3awr9PAaZdCZdZhRj55I/8A==",
+      "deprecated": "Apollo Server v4 is end-of-life since January 26, 2026. As long as you are already using a non-EOL version of Node.js, upgrading to v5 should take only a few minutes. See https://www.apollographql.com/docs/apollo-server/previous-versions for details.",
       "license": "MIT",
       "dependencies": {
         "@apollo/cache-control-types": "^1.0.3",
@@ -1899,6 +1900,7 @@
         "@types/express-serve-static-core": "^4.17.30",
         "@types/node-fetch": "^2.6.1",
         "async-retry": "^1.2.1",
+        "content-type": "^1.0.5",
         "cors": "^2.8.5",
         "express": "^4.21.1",
         "loglevel": "^1.6.8",