Skip to content

Update all non-major dependencies #33

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 7, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@apollo/server (source) 4.11.3 -> 4.12.2 age adoption passing confidence dependencies minor
@apollo/subgraph (source) 2.10.0 -> 2.11.0 age adoption passing confidence dependencies minor
@graphql-hive/cli (source) 0.49.1 -> 0.50.1 age adoption passing confidence dependencies minor
@graphql-hive/cli (source) ^0.49.0 -> ^0.50.0 age adoption passing confidence devDependencies minor
@graphql-hive/gateway (source) 1.13.5 -> 1.15.0 age adoption passing confidence dependencies minor
@graphql-mesh/hmac-upstream-signature (source) 1.2.26 -> 1.2.27 age adoption passing confidence dependencies patch
@graphql-mesh/plugin-jwt-auth (source) 1.5.2 -> 1.5.5 age adoption passing confidence dependencies patch
@theguild/federation-composition 0.18.1 -> 0.18.3 age adoption passing confidence dependencies patch
@types/ioredis-mock (source) 8.2.5 -> 8.2.6 age adoption passing confidence dependencies patch
@types/node (source) 22.14.0 -> 22.15.29 age adoption passing confidence devDependencies minor
@whatwg-node/fetch (source) 0.10.5 -> 0.10.8 age adoption passing confidence dependencies patch
@whatwg-node/server (source) 0.10.3 -> 0.10.10 age adoption passing confidence dependencies patch
ghcr.io/graphql-hive/gateway 1.13.5 -> 1.15.0 age adoption passing confidence minor
grafana/grafana 10.4.17 -> 10.4.19 age adoption passing confidence patch
graphql 16.10.0 -> 16.11.0 age adoption passing confidence dependencies minor
graphql 16.10.0 -> 16.11.0 age adoption passing confidence devDependencies minor
graphql 16.10.0 -> 16.11.0 age adoption passing confidence resolutions minor
graphql-yoga (source) 5.13.2 -> 5.13.5 age adoption passing confidence dependencies patch
jaegertracing/all-in-one 1.68.0 -> 1.69.0 age adoption passing confidence minor
node 22.14.0-slim -> 22.16.0-slim age adoption passing confidence final minor
tsx (source) 4.19.3 -> 4.19.4 age adoption passing confidence devDependencies patch

Release Notes

apollographql/apollo-server (@​apollo/server)

v4.12.2

Compare Source

(No change; there is a change to the @apollo/server-integration-testsuite used to test integrations, and the two packages always have matching versions.)

v4.12.1

Compare Source

Patch Changes

v4.12.0

Compare Source

Minor Changes
  • #​8054 89e3f84 Thanks @​clenfest! - Adds a new graphql-js validation rule to reject operations that recursively request selections above a specified maximum, which is disabled by default. Use configuration option maxRecursiveSelections=true to enable with a maximum of 10,000,000, or maxRecursiveSelections=<number> for a custom maximum. Enabling this validation can help avoid performance issues with configured validation rules or plugins.
Patch Changes
apollographql/federation (@​apollo/subgraph)

v2.11.0

Compare Source

Minor Changes
  • Adds connect spec v0.2, available for use with Apollo Router 2.3.0 or greater. (#​3262)
Patch Changes

v2.10.2

Compare Source

Patch Changes

v2.10.1

Compare Source

Patch Changes
graphql-hive/platform (@​graphql-hive/cli)

v0.50.1

Compare Source

Patch Changes

v0.50.0

Compare Source

Minor Changes
  • #​6658
    e6a970f
    Thanks @​n1ru4l! - Internal adjustments for using non-deprecated API
    fields.

  • #​6626
    2056307
    Thanks @​jdolle! - Show dangerous changes as a separate list in
    schema:check

  • #​6662
    2b220a5
    Thanks @​n1ru4l! - Support federation composition validation for
    IMPLEMENTED_BY_INACCESSIBLE.

  • #​6675
    ed66171
    Thanks @​kamilkisiela! - Updates the
    @theguild/federation-composition to v0.18.1 that includes the following changes:

    • Support progressive overrides (@override(label: "<value>"))
    • Allow to use @composeDirective on a built-in scalar (like @oneOf)
    • Performance improvements (lazy compute of errors), especially noticeable in large schemas (2s ->
      600ms)
    • Ensure nested key fields are marked as @shareable
    • Stop collecting paths when a leaf field was reached (performance improvement)
    • Avoid infinite loop when entity field returns itself
Patch Changes
graphql-hive/gateway (@​graphql-hive/gateway)

v1.15.0

Compare Source

Minor Changes
Patch Changes

v1.14.2

Compare Source

Patch Changes

v1.14.1

Compare Source

Patch Changes

v1.14.0

Compare Source

Minor Changes
  • #​1083 695251a Thanks @​enisdenjo! - Support watching supergraph file out-of-box

    No extra dependency of @parcel/watcher is needed. After upgrading, you can uninstall it.

Patch Changes

v1.13.6

Compare Source

Patch Changes
graphql-hive/gateway (@​graphql-mesh/hmac-upstream-signature)

v1.2.27

Compare Source

Patch Changes
graphql-hive/gateway (@​graphql-mesh/plugin-jwt-auth)

v1.5.5

Compare Source

Patch Changes

v1.5.4

Compare Source

Patch Changes

v1.5.3

Compare Source

Patch Changes
graphql-hive/federation-composition (@​theguild/federation-composition)

v0.18.3

Compare Source

Patch Changes
  • #​143 bcea968 Thanks @​n1ru4l! - Do not throw an error when encountering invalid usage of @tag directive within subgraphs.

v0.18.2

Compare Source

Patch Changes
  • #​141 fdb491f Thanks @​ardatan! - Fixes the issue where the composition gives errors in case of the following:

    extend schema
      @&#8203;link(
        url: "https://specs.apollo.dev/federation/v2.7"
        import: ["@&#8203;key", "@&#8203;composeDirective"]
      )
      @&#8203;link(url: "https://myspecs.dev/myDirective/v1.0", import: ["@&#8203;myDirective"])
      @&#8203;composeDirective(name: "@&#8203;myDirective")
    
    directive @&#8203;myDirective(myarg: [MyEnum!]!) on OBJECT # A directive with a non-nullable list argument of non-nullable enums
    enum MyEnum {
      MY_ENUM_VALUE
    }
    type Query {
      myRootField: MyObject
    }
    
    type MyObject @&#8203;myDirective(myarg: []) {
      myField: String
    }
ardatan/whatwg-node (@​whatwg-node/fetch)

v0.10.8

Compare Source

Patch Changes
  • #​2424
    28c4ad9
    Thanks @​ardatan! - Performance optimizations

    • Avoid creating AbortController and AbortSignal if not needed with new Request because it
      is expensive
    • Avoid creating a map for Headers and try to re-use the init object for Headers for
      performance with a single-line writeHead.
    • Avoid creating Buffer for string bodies for performance
    • Use setHeaders which accepts Headers since Node 18 if needed to forward Headers to Node
  • Updated dependencies
    [28c4ad9]:

v0.10.7

Compare Source

Patch Changes
  • #​2383
    9527e8f
    Thanks @​ardatan! - Some implementations like compression npm
    package do not implement response.write(data, callback) signature, but whatwg-node/server waits
    for it to finish the response stream. Then it causes the response stream hangs when the
    compression package takes the stream over when the response data is larger than its threshold.

    It is actually a bug in compression package;
    expressjs/compression#46 But since it is a
    common mistake, we prefer to workaround this on our end.

    Now after calling response.write, it no longer uses callback but first it checks the result;

    if it is true, it means stream is drained and we can call response.end immediately. else if it
    is false, it means the stream is not drained yet, so we can wait for the drain event to call
    response.end.

  • Updated dependencies
    [9527e8f]:

v0.10.6

Compare Source

Patch Changes
ardatan/whatwg-node (@​whatwg-node/server)

v0.10.10

Compare Source

Patch Changes

v0.10.9

Compare Source

Patch Changes
  • #​2424
    28c4ad9
    Thanks @​ardatan! - Performance optimizations

    • Avoid creating AbortController and AbortSignal if not needed with new Request because it
      is expensive
    • Avoid creating a map for Headers and try to re-use the init object for Headers for
      performance with a single-line writeHead.
    • Avoid creating Buffer for string bodies for performance
    • Use setHeaders which accepts Headers since Node 18 if needed to forward Headers to Node
  • 1642a76
    Thanks @​ardatan! - Remove unnecessary workaround for Bun

  • Updated dependencies
    [28c4ad9]:

v0.10.8

Compare Source

Patch Changes
  • 8eb332c
    Thanks @​ardatan! - Workaround for the bug in Node 24 and Deno don't
    like bound disposal functions

v0.10.7

Compare Source

Patch Changes

v0.10.6

Compare Source

Patch Changes
  • #​2383
    9527e8f
    Thanks @​ardatan! - Some implementations like compression npm
    package do not implement response.write(data, callback) signature, but whatwg-node/server waits
    for it to finish the response stream. Then it causes the response stream hangs when the
    compression package takes the stream over when the response data is larger than its threshold.

    It is actually a bug in compression package;
    expressjs/compression#46 But since it is a
    common mistake, we prefer to workaround this on our end.

    Now after calling response.write, it no longer uses callback but first it checks the result;

    if it is true, it means stream is drained and we can call response.end immediately. else if it
    is false, it means the stream is not drained yet, so we can wait for the drain event to call
    response.end.

  • Updated dependencies
    [d86b4f3,
    9527e8f]:

v0.10.5

Compare Source

Patch Changes

v0.10.4

[Compare Source](https://redirect.github.com/ardatan/whatwg-node/compare/@whatwg-node/s


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Apr 7, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from b4dfba8 to a6a212c Compare April 15, 2025 19:02
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from d2fd601 to 3606b9b Compare April 29, 2025 07:04
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 7179506 to 7a6ea1b Compare May 7, 2025 00:01
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from a8a8ea1 to 0807c78 Compare May 14, 2025 08:44
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 0807c78 to 0029b7b Compare May 14, 2025 22:40
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from d782ff7 to 8955225 Compare May 22, 2025 03:55
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 2ffbd04 to b56f200 Compare May 28, 2025 19:57
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 21e1da2 to f0fae3f Compare June 3, 2025 18:13
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from f0fae3f to 10e70e3 Compare June 4, 2025 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants