codeql/javascript/change-notes/2021-06-09-graphql.md

lgtm,codescanning

• The js/sql-injection query now recognizes graphql injections. Affected packages are @octokit/core, @octokit/rest, @octokit/graphql, @octokit/request, @actions/github, and graphql