chore(gatsby): major dep bump for eslint-plugin-graphql

[pieh]

This fixes npm audit that currently is displayed when installing gatsby:

➜  gatsby npm audit

                       === npm audit security report ===

┌──────────────────────────────────────────────────────────────────────────────┐
│                                Manual Review                                 │
│            Some vulnerabilities require your attention to resolve            │
│                                                                              │
│         Visit https://go.npm.me/audit-guide for additional guidance          │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Low           │ Denial of Service                                            │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ node-fetch                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=2.6.1 <3.0.0-beta.1|| >= 3.0.0-beta.9                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ gatsby                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ gatsby > eslint-plugin-graphql > graphql-config >            │
│               │ graphql-request > cross-fetch > node-fetch                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/1556                            │
└───────────────┴──────────────────────────────────────────────────────────────┘
found 1 low severity vulnerability in 2011 scanned packages
  1 vulnerability requires manual review. See the full report for details.
➜  gatsby npm list eslint-plugin-graphql
[email protected] /Users/misiek/test/audit-tmp/gatsby
└─┬ [email protected]
  └── [email protected]

Changelog for eslint-plugin-graphql@4 - https://github.com/apollographql/eslint-plugin-graphql/blob/master/CHANGELOG.md#v400 Only breaking change listed is dropping Node 8 support and 10 being new minimum (which is fine for us)

[vladar]

I checked their Changelog and the only breaking thing is dropping Node 8 support. So we should be good to go!

Edit: oh, missed the note at the bottom of the PR :)

[pvdz]

More green than red ;(

[pieh]

graphql-config major bump (that's dep of eslint-plugin-graphql) added quite a bit of graphql-tools/* packages to the mix :(