diff --git a/package-lock.json b/package-lock.json
index 1f1ad6df..c2f1fd35 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,7 +9,7 @@
 			"version": "1.86.2",
 			"license": "AGPL-3.0",
 			"dependencies": {
-				"@apollo/server": "4.0.0",
+				"@apollo/server": "4.9.3",
 				"@apollo/subgraph": "2.5.2",
 				"@icgc-argo/ego-token-utils": "^8.2.0",
 				"@overturebio-stack/lectern-client": "1.4.0",
@@ -243,20 +243,20 @@
 			}
 		},
 		"node_modules/@apollo/server": {
-			"version": "4.0.0",
-			"resolved": "https://registry.npmjs.org/@apollo/server/-/server-4.0.0.tgz",
-			"integrity": "sha512-PcIyjVKGkbG3k2kjn/0o/kMfJrdZYma62r/c1YOB362UQwlX0GZNL53ZmRst+wTwi0x10rEnxcCUTnyLjumT9g==",
+			"version": "4.9.3",
+			"resolved": "https://registry.npmjs.org/@apollo/server/-/server-4.9.3.tgz",
+			"integrity": "sha512-U56Sx/UmzR3Es344hQ/Ptf2EJrH+kV4ZPoLmgGjWoiwf2wYQ/pRSvkSXgjOvoyE34wSa8Gh7f92ljfLfY+6q1w==",
 			"dependencies": {
-				"@apollo/cache-control-types": "^1.0.2",
-				"@apollo/server-gateway-interface": "^1.0.3",
-				"@apollo/usage-reporting-protobuf": "^4.0.0",
-				"@apollo/utils.createhash": "^1.1.0",
-				"@apollo/utils.fetcher": "^1.0.0",
-				"@apollo/utils.isnodelike": "^1.1.0",
-				"@apollo/utils.keyvaluecache": "^1.0.1",
-				"@apollo/utils.logger": "^1.0.0",
-				"@apollo/utils.usagereporting": "^1.0.0",
-				"@apollo/utils.withrequired": "^1.0.0",
+				"@apollo/cache-control-types": "^1.0.3",
+				"@apollo/server-gateway-interface": "^1.1.1",
+				"@apollo/usage-reporting-protobuf": "^4.1.1",
+				"@apollo/utils.createhash": "^2.0.0",
+				"@apollo/utils.fetcher": "^2.0.0",
+				"@apollo/utils.isnodelike": "^2.0.0",
+				"@apollo/utils.keyvaluecache": "^2.1.0",
+				"@apollo/utils.logger": "^2.0.0",
+				"@apollo/utils.usagereporting": "^2.1.0",
+				"@apollo/utils.withrequired": "^2.0.0",
 				"@graphql-tools/schema": "^9.0.0",
 				"@josephg/resolvable": "^1.0.0",
 				"@types/express": "^4.17.13",
@@ -269,12 +269,13 @@
 				"loglevel": "^1.6.8",
 				"lru-cache": "^7.10.1",
 				"negotiator": "^0.6.3",
+				"node-abort-controller": "^3.1.1",
 				"node-fetch": "^2.6.7",
 				"uuid": "^9.0.0",
 				"whatwg-mimetype": "^3.0.0"
 			},
 			"engines": {
-				"node": ">=12.0"
+				"node": ">=14.16.0"
 			},
 			"peerDependencies": {
 				"graphql": "^16.6.0"
@@ -294,14 +295,6 @@
 				"graphql": "14.x || 15.x || 16.x"
 			}
 		},
-		"node_modules/@apollo/server-gateway-interface/node_modules/@apollo/utils.fetcher": {
-			"version": "2.0.1",
-			"resolved": "https://registry.npmjs.org/@apollo/utils.fetcher/-/utils.fetcher-2.0.1.tgz",
-			"integrity": "sha512-jvvon885hEyWXd4H6zpWeN3tl88QcWnHp5gWF5OPF34uhvoR+DFqcNxs9vrRaBBSY3qda3Qe0bdud7tz2zGx1A==",
-			"engines": {
-				"node": ">=14"
-			}
-		},
 		"node_modules/@apollo/server-gateway-interface/node_modules/@apollo/utils.keyvaluecache": {
 			"version": "2.1.1",
 			"resolved": "https://registry.npmjs.org/@apollo/utils.keyvaluecache/-/utils.keyvaluecache-2.1.1.tgz",
@@ -330,6 +323,103 @@
 				"node": ">=12"
 			}
 		},
+		"node_modules/@apollo/server/node_modules/@apollo/utils.dropunuseddefinitions": {
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/@apollo/utils.dropunuseddefinitions/-/utils.dropunuseddefinitions-2.0.1.tgz",
+			"integrity": "sha512-EsPIBqsSt2BwDsv8Wu76LK5R1KtsVkNoO4b0M5aK0hx+dGg9xJXuqlr7Fo34Dl+y83jmzn+UvEW+t1/GP2melA==",
+			"engines": {
+				"node": ">=14"
+			},
+			"peerDependencies": {
+				"graphql": "14.x || 15.x || 16.x"
+			}
+		},
+		"node_modules/@apollo/server/node_modules/@apollo/utils.keyvaluecache": {
+			"version": "2.1.1",
+			"resolved": "https://registry.npmjs.org/@apollo/utils.keyvaluecache/-/utils.keyvaluecache-2.1.1.tgz",
+			"integrity": "sha512-qVo5PvUUMD8oB9oYvq4ViCjYAMWnZ5zZwEjNF37L2m1u528x5mueMlU+Cr1UinupCgdB78g+egA1G98rbJ03Vw==",
+			"dependencies": {
+				"@apollo/utils.logger": "^2.0.1",
+				"lru-cache": "^7.14.1"
+			},
+			"engines": {
+				"node": ">=14"
+			}
+		},
+		"node_modules/@apollo/server/node_modules/@apollo/utils.logger": {
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/@apollo/utils.logger/-/utils.logger-2.0.1.tgz",
+			"integrity": "sha512-YuplwLHaHf1oviidB7MxnCXAdHp3IqYV8n0momZ3JfLniae92eYqMIx+j5qJFX6WKJPs6q7bczmV4lXIsTu5Pg==",
+			"engines": {
+				"node": ">=14"
+			}
+		},
+		"node_modules/@apollo/server/node_modules/@apollo/utils.printwithreducedwhitespace": {
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/@apollo/utils.printwithreducedwhitespace/-/utils.printwithreducedwhitespace-2.0.1.tgz",
+			"integrity": "sha512-9M4LUXV/fQBh8vZWlLvb/HyyhjJ77/I5ZKu+NBWV/BmYGyRmoEP9EVAy7LCVoY3t8BDcyCAGfxJaLFCSuQkPUg==",
+			"engines": {
+				"node": ">=14"
+			},
+			"peerDependencies": {
+				"graphql": "14.x || 15.x || 16.x"
+			}
+		},
+		"node_modules/@apollo/server/node_modules/@apollo/utils.removealiases": {
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/@apollo/utils.removealiases/-/utils.removealiases-2.0.1.tgz",
+			"integrity": "sha512-0joRc2HBO4u594Op1nev+mUF6yRnxoUH64xw8x3bX7n8QBDYdeYgY4tF0vJReTy+zdn2xv6fMsquATSgC722FA==",
+			"engines": {
+				"node": ">=14"
+			},
+			"peerDependencies": {
+				"graphql": "14.x || 15.x || 16.x"
+			}
+		},
+		"node_modules/@apollo/server/node_modules/@apollo/utils.sortast": {
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/@apollo/utils.sortast/-/utils.sortast-2.0.1.tgz",
+			"integrity": "sha512-eciIavsWpJ09za1pn37wpsCGrQNXUhM0TktnZmHwO+Zy9O4fu/WdB4+5BvVhFiZYOXvfjzJUcc+hsIV8RUOtMw==",
+			"dependencies": {
+				"lodash.sortby": "^4.7.0"
+			},
+			"engines": {
+				"node": ">=14"
+			},
+			"peerDependencies": {
+				"graphql": "14.x || 15.x || 16.x"
+			}
+		},
+		"node_modules/@apollo/server/node_modules/@apollo/utils.stripsensitiveliterals": {
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/@apollo/utils.stripsensitiveliterals/-/utils.stripsensitiveliterals-2.0.1.tgz",
+			"integrity": "sha512-QJs7HtzXS/JIPMKWimFnUMK7VjkGQTzqD9bKD1h3iuPAqLsxd0mUNVbkYOPTsDhUKgcvUOfOqOJWYohAKMvcSA==",
+			"engines": {
+				"node": ">=14"
+			},
+			"peerDependencies": {
+				"graphql": "14.x || 15.x || 16.x"
+			}
+		},
+		"node_modules/@apollo/server/node_modules/@apollo/utils.usagereporting": {
+			"version": "2.1.0",
+			"resolved": "https://registry.npmjs.org/@apollo/utils.usagereporting/-/utils.usagereporting-2.1.0.tgz",
+			"integrity": "sha512-LPSlBrn+S17oBy5eWkrRSGb98sWmnEzo3DPTZgp8IQc8sJe0prDgDuppGq4NeQlpoqEHz0hQeYHAOA0Z3aQsxQ==",
+			"dependencies": {
+				"@apollo/usage-reporting-protobuf": "^4.1.0",
+				"@apollo/utils.dropunuseddefinitions": "^2.0.1",
+				"@apollo/utils.printwithreducedwhitespace": "^2.0.1",
+				"@apollo/utils.removealiases": "2.0.1",
+				"@apollo/utils.sortast": "^2.0.1",
+				"@apollo/utils.stripsensitiveliterals": "^2.0.1"
+			},
+			"engines": {
+				"node": ">=14"
+			},
+			"peerDependencies": {
+				"graphql": "14.x || 15.x || 16.x"
+			}
+		},
 		"node_modules/@apollo/server/node_modules/@types/express": {
 			"version": "4.17.17",
 			"resolved": "https://registry.npmjs.org/@types/express/-/express-4.17.17.tgz",
@@ -695,15 +785,15 @@
 			}
 		},
 		"node_modules/@apollo/utils.createhash": {
-			"version": "1.1.0",
-			"resolved": "https://registry.npmjs.org/@apollo/utils.createhash/-/utils.createhash-1.1.0.tgz",
-			"integrity": "sha512-5fT4ZiW75515OlikWpIQzaVDws1yy9VgYSoHoJCrvI2UH6/7YNKXQjbjT5qVYu6ytch2wBxFMfFfYWMn/2bSCQ==",
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/@apollo/utils.createhash/-/utils.createhash-2.0.1.tgz",
+			"integrity": "sha512-fQO4/ZOP8LcXWvMNhKiee+2KuKyqIcfHrICA+M4lj/h/Lh1H10ICcUtk6N/chnEo5HXu0yejg64wshdaiFitJg==",
 			"dependencies": {
-				"@apollo/utils.isnodelike": "^1.1.0",
+				"@apollo/utils.isnodelike": "^2.0.1",
 				"sha.js": "^2.4.11"
 			},
 			"engines": {
-				"node": ">=12.13.0"
+				"node": ">=14"
 			}
 		},
 		"node_modules/@apollo/utils.dropunuseddefinitions": {
@@ -718,16 +808,19 @@
 			}
 		},
 		"node_modules/@apollo/utils.fetcher": {
-			"version": "1.1.1",
-			"resolved": "https://registry.npmjs.org/@apollo/utils.fetcher/-/utils.fetcher-1.1.1.tgz",
-			"integrity": "sha512-0vXVznO7kw5VWwxyV5wsDvYEwjDpyZ7vYQAXCseLXqBn2eWEIDViM7qRzi/Hnv4zzAQ05phdimSED99K+lg+SQ=="
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/@apollo/utils.fetcher/-/utils.fetcher-2.0.1.tgz",
+			"integrity": "sha512-jvvon885hEyWXd4H6zpWeN3tl88QcWnHp5gWF5OPF34uhvoR+DFqcNxs9vrRaBBSY3qda3Qe0bdud7tz2zGx1A==",
+			"engines": {
+				"node": ">=14"
+			}
 		},
 		"node_modules/@apollo/utils.isnodelike": {
-			"version": "1.1.0",
-			"resolved": "https://registry.npmjs.org/@apollo/utils.isnodelike/-/utils.isnodelike-1.1.0.tgz",
-			"integrity": "sha512-q/Q82kBUSEcx1ED11JO1TYBY781mWluUnBD8NvhjHVsu1K1C5R9BZVUxShyK/V8XcePcRUB5fdWOcBMGwS0KOA==",
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/@apollo/utils.isnodelike/-/utils.isnodelike-2.0.1.tgz",
+			"integrity": "sha512-w41XyepR+jBEuVpoRM715N2ZD0xMD413UiJx8w5xnAZD2ZkSJnMJBoIzauK83kJpSgNuR6ywbV29jG9NmxjK0Q==",
 			"engines": {
-				"node": ">=12.13.0"
+				"node": ">=14"
 			}
 		},
 		"node_modules/@apollo/utils.keyvaluecache": {
@@ -819,9 +912,12 @@
 			}
 		},
 		"node_modules/@apollo/utils.withrequired": {
-			"version": "1.0.1",
-			"resolved": "https://registry.npmjs.org/@apollo/utils.withrequired/-/utils.withrequired-1.0.1.tgz",
-			"integrity": "sha512-5DYufeISXjz9UqtISIwte86F8ELjTrKVeXcPtdnUnV/PX+4EXUjqIp1FLJTYrCQ1a9OyFAMeCZ2QhUy1D8w7/A=="
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/@apollo/utils.withrequired/-/utils.withrequired-2.0.1.tgz",
+			"integrity": "sha512-YBDiuAX9i1lLc6GeTy1m7DGLFn/gMnvXqlalOIMjM7DeOgIacEjjfwPqb0M1CQ2v11HhR15d1NmxJoRCfrNqcA==",
+			"engines": {
+				"node": ">=14"
+			}
 		},
 		"node_modules/@apollographql/apollo-tools": {
 			"version": "0.5.4",
diff --git a/package.json b/package.json
index 546b81dd..24927ee5 100644
--- a/package.json
+++ b/package.json
@@ -99,7 +99,7 @@
 	"dependencies": {
 		"@apollo/subgraph": "2.5.2",
 		"apollo-server-core": "^3.12.0",
-		"@apollo/server": "4.0.0",
+		"@apollo/server": "4.9.3",
 		"@overturebio-stack/lectern-client": "1.4.0",
 		"@types/mongoose-paginate-v2": "^1.3.11",
 		"@icgc-argo/ego-token-utils": "^8.2.0",