Skip to content

chore(deps): bump @graphql-tools/utils, @graphql-codegen/cli, @graphql-codegen/plugin-helpers, @graphql-codegen/schema-ast, @graphql-codegen/visitor-plugin-common, @graphql-tools/schema and @graphql-tools/mock - #362

Merged
bennypowers merged 4 commits into
mainfrom
dependabot/npm_and_yarn/multi-453845faaf
Oct 28, 2026
Merged

chore(deps): bump @graphql-tools/utils, @graphql-codegen/cli, @graphql-codegen/plugin-helpers, @graphql-codegen/schema-ast, @graphql-codegen/visitor-plugin-common, @graphql-tools/schema and @graphql-tools/mock#362
bennypowers merged 4 commits into
mainfrom
dependabot/npm_and_yarn/multi-453845faaf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps @graphql-tools/utils to 12.0.3 and updates ancestor dependencies @graphql-tools/utils, @graphql-codegen/cli, @graphql-codegen/plugin-helpers, @graphql-codegen/schema-ast, @graphql-codegen/visitor-plugin-common, @graphql-tools/schema and @graphql-tools/mock. These dependencies need to be updated together.

Updates @graphql-tools/utils from 11.1.0 to 12.0.3

Changelog

Sourced from @​graphql-tools/utils's changelog.

12.0.3

Patch Changes

  • #8482 19f5b33 Thanks @​ardatan! - Compare incremental path keys to __proto__ at the property access in setObjectKeyPath, in addition to the existing isSafeObjectKey check.

12.0.2

Patch Changes

  • #8456 b1fbba2 Thanks @​renovate! - dependencies updates:

  • #8467 20d36a5 Thanks @​ardatan! - Fix prototype pollution in mergeIncrementalResult

    Path segments are now rejected unless they are primitive strings or numbers, and keys named __proto__, constructor or prototype are still blocked. Previously a non-primitive segment such as ["__proto__"] bypassed the string equality guard and was coerced into a write on Object.prototype.

    Also exports shared isSafeObjectKey / isDangerousObjectKey helpers used by this path walker and other package call sites. @graphql-tools/merge and @graphql-tools/mock are patched so they ship with the new imports; updateInternalDependencies raises their utils floor when 12.0.2 is versioned.

12.0.1

Patch Changes

  • #8368 60db079 Thanks @​ardatan! - Omit mutation/subscription from printSchemaWithDirectives when those root types are no longer present on the schema (e.g. after pruneSchema).

  • #8366 57e316d Thanks @​ardatan! - Allow % in paths checked by isValidPath (e.g. directories from URL-encoded repo names).

  • #8370 1c1c5a0 Thanks @​ardatan! - Clean up observableToAsyncIterable queues and unsubscribe when the observable completes, so iterators do not retain references after done. Fixes leak detection flakes related to #8057.

  • #8370 1c1c5a0 Thanks @​ardatan! - Prefer runtime description values over stale astNode descriptions in printSchemaWithDirectives / getDescriptionNode. Fixes #5508.

  • #8423 0b9529f Thanks @​enisdenjo! - Fix prototype pollution in mergeDeep

    Source keys named __proto__, constructor or prototype are now skipped at every recursion level, and the check for an existing key uses hasOwnProperty instead of in, so inherited properties are never used as merge targets.

    Previously, merging untrusted data such as JSON.parse('{"constructor":{"__proto__":{"call":"x"}}}') could reach and overwrite properties on Object.prototype or Function.prototype.

12.0.0

Major Changes

  • #8346 2273c21 Thanks @​ardatan! - This release adds GraphQL v17 support and aligns the existing executor implementation with the latest GraphQL v17 API changes. The following changes are included:

    • getAsyncHelpers is now available on GraphQLResolveInfo. Its track method is used whenever waitUntil is available, as in Yoga's Explicit Resource Management

... (truncated)

Commits
  • 944121e Upcoming Release Changes (#8483)
  • 19f5b33 fix(utils): compare path keys to proto at the property access (#8482)
  • 3a43b4b Upcoming Release Changes (#8460)
  • 20d36a5 fix(utils): block prototype pollution in mergeIncrementalResult paths
  • b1fbba2 fix(deps): update dependency @​whatwg-node/promise-helpers to v2 (#8456)
  • 77bbaec build(deps): bump the actions-deps group with 7 updates (#8434)
  • 861011f build(deps): bump the actions-deps group with 6 updates (#8432)
  • 8b9b7df chore(release): update monorepo packages versions (#8365)
  • 0b9529f Fix prototype pollution in mergeDeep (#8423)
  • 23ca392 chore(deps): update dependency graphql-scalars to v2 (#8385)
  • Additional commits viewable in compare view

Updates @graphql-codegen/cli from 7.1.2 to 7.4.6

Changelog

Sourced from @​graphql-codegen/cli's changelog.

7.4.6

Patch Changes

  • #10985 d8aa07f Thanks @​eddeee888! - Build with strict: true, which changes these emitted type declarations:

    • @graphql-codegen/cli: mkdirp returns Promise<string | undefined>, and the require (-r) CLI option's default is typed never[] instead of any[].
    • @graphql-codegen/visitor-plugin-common: BaseResolversVisitor and BaseTypesVisitor SchemaDefinition()/SchemaExtension() return null instead of any.
    • @graphql-codegen/visitor-plugin-common: BaseSelectionSetProcessor.typeCache is keyed by Location | undefined.
    • @graphql-codegen/visitor-plugin-common: SelectionSetToObject.buildSelectionSet returns typeInfo as { name: string; type: string } | null.
    • @graphql-codegen/visitor-plugin-common: getPossibleTypes accepts null as the type, which graphql 15's schema.getType() can return.
    • @graphql-codegen/visitor-plugin-common: removeDescription returns nodes with description: undefined instead of any.
    • @graphql-codegen/typescript: TsIntrospectionVisitor's constructor takes pluginConfig as TypeScriptPluginConfig | undefined, DirectiveDefinition() returns null and ObjectTypeDefinition() returns string | null.
    • @graphql-codegen/client-preset: the babel preset accepts options as ClientBabelPresetOptions | null | undefined.
    • @graphql-codegen/testing: mockGraphQLServer returns nock.Scope | null.
    • @graphql-codegen/graphql-modules-preset: a schema without extensions (graphql 15) throws the "requires to use GraphQL SDL" error instead of a TypeError.

    Generated output is unchanged.

  • Updated dependencies [d8aa07f]:

    • @​graphql-codegen/client-preset@​6.2.3

7.4.5

Patch Changes

... (truncated)

Commits
  • 68a2ef2 chore(release): update monorepo packages versions (#11049)
  • e9081df chore(release): update monorepo packages versions (#11038)
  • 31761f9 chore(deps): bump @​graphql-tools/utils to v12 for GHSA-7mx3-vvmw-hjmv (#11043)
  • 1b0edd8 chore(release): update monorepo packages versions (#11008)
  • 43d0f65 Widen SchemaWithLoaderOptions.loader to accept a custom loader function (#11025)
  • ccc0d5c [visitor-plugin-common] fix: satisfy strict mode in base-resolvers-visitor (#...
  • 82ebbb5 [cli] fix: satisfy strict mode in cli (#4683) (#11020)
  • 7088be0 chore(deps): bump the security group across 1 directory with 4 updates (#11015)
  • bec802b chore(release): update monorepo packages versions (#10984)
  • 5e06d7f feat: add description for --check flag to build options (#10225)
  • Additional commits viewable in compare view

Updates @graphql-codegen/plugin-helpers from 7.0.1 to 7.4.2

Changelog

Sourced from @​graphql-codegen/plugin-helpers's changelog.

7.4.2

Patch Changes

  • #11043 31761f9 Thanks @​eddeee888! - dependencies updates:

  • #11043 31761f9 Thanks @​eddeee888! - Update @graphql-tools/utils to v12, and other @graphql-tools/* dependencies and graphql-config to releases that use it, to pick up the fix for GHSA-7mx3-vvmw-hjmv (prototype pollution in mergeDeep, @graphql-tools/utils <= 12.0.0).

    @graphql-codegen/cli now unwraps the AggregateError that newer @graphql-tools/load versions throw, so schema and document syntax errors still print the native GraphQLError with its file location.

7.4.1

Patch Changes

  • #11025 43d0f65 Thanks @​BuddhaBing! - Widen Types.SchemaWithLoaderOptions['loader'] to accept a custom loader function (CustomSchemaLoaderFn) in addition to a path string.

    A per-entry schema custom loader ({ '<pointer>': { loader, ...options } }) is resolved by @graphql-tools/load's useCustomLoader, which already accepts either a path string (resolved via require()) or a function value at runtime (typeof loaderPointer === 'function'). Only the TypeScript type restricted loader to string, forcing consumers who pass an imported loader function (or a class instance exposing a bound loader property) to cast the schema array to bypass the type error, even though it worked correctly at runtime.

    This is additive and backward compatible — loader: string continues to type-check exactly as before.

    Also fixes a schema-cache collision for function loaders in @graphql-codegen/cli: the cache key is JSON.stringify(schemaPointerMap), and JSON.stringify drops functions, so two generates targets using different loader functions for the same pointer ({ 'schema.graphql': { loader: fnA } } vs { loader: fnB }) both keyed as {"schema.graphql":{}} and the second silently reused the first's schema. Function values are now keyed by object identity (via the existing getJsObjectId), so distinct loaders load separately while one function reused across targets still loads once.

... (truncated)

Commits
  • e9081df chore(release): update monorepo packages versions (#11038)
  • 31761f9 chore(deps): bump @​graphql-tools/utils to v12 for GHSA-7mx3-vvmw-hjmv (#11043)
  • 1b0edd8 chore(release): update monorepo packages versions (#11008)
  • 43d0f65 Widen SchemaWithLoaderOptions.loader to accept a custom loader function (#11025)
  • 82ebbb5 [cli] fix: satisfy strict mode in cli (#4683) (#11020)
  • eae0e62 [plugin-helpers] fix: satisfy strict mode in plugin-helpers (#4683) (#11019)
  • 1f7566f [typescript-operations] fix: satisfy strict mode in typescript-operations (#4...
  • 4e8654d chore(release): update monorepo packages versions (#10987)
  • 1d1153b [plugin-helpers] feat: type oldVisit's return value and fix typed-document-no...
  • 3216e72 chore(release): update monorepo packages versions (#10929)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​graphql-codegen/plugin-helpers since your current version.


Updates @graphql-codegen/schema-ast from 6.0.1 to 6.1.1

Changelog

Sourced from @​graphql-codegen/schema-ast's changelog.

6.1.1

Patch Changes

  • #11043 31761f9 Thanks @​eddeee888! - dependencies updates:

  • #11043 31761f9 Thanks @​eddeee888! - Update @graphql-tools/utils to v12, and other @graphql-tools/* dependencies and graphql-config to releases that use it, to pick up the fix for GHSA-7mx3-vvmw-hjmv (prototype pollution in mergeDeep, @graphql-tools/utils <= 12.0.0).

    @graphql-codegen/cli now unwraps the AggregateError that newer @graphql-tools/load versions throw, so schema and document syntax errors still print the native GraphQLError with its file location.

  • Updated dependencies [31761f9, 31761f9]:

    • @​graphql-codegen/plugin-helpers@​7.4.2

6.1.0

Minor Changes

Patch Changes

  • Updated dependencies [959915f]:
    • @​graphql-codegen/plugin-helpers@​7.1.0
Commits

Updates @graphql-codegen/visitor-plugin-common from 7.1.0 to 7.2.10

Changelog

Sourced from @​graphql-codegen/visitor-plugin-common's changelog.

7.2.10

Patch Changes

  • #10985 d8aa07f Thanks @​eddeee888! - Build with strict: true, which changes these emitted type declarations:

    • @graphql-codegen/cli: mkdirp returns Promise<string | undefined>, and the require (-r) CLI option's default is typed never[] instead of any[].
    • @graphql-codegen/visitor-plugin-common: BaseResolversVisitor and BaseTypesVisitor SchemaDefinition()/SchemaExtension() return null instead of any.
    • @graphql-codegen/visitor-plugin-common: BaseSelectionSetProcessor.typeCache is keyed by Location | undefined.
    • @graphql-codegen/visitor-plugin-common: SelectionSetToObject.buildSelectionSet returns typeInfo as { name: string; type: string } | null.
    • @graphql-codegen/visitor-plugin-common: getPossibleTypes accepts null as the type, which graphql 15's schema.getType() can return.
    • @graphql-codegen/visitor-plugin-common: removeDescription returns nodes with description: undefined instead of any.
    • @graphql-codegen/typescript: TsIntrospectionVisitor's constructor takes pluginConfig as TypeScriptPluginConfig | undefined, DirectiveDefinition() returns null and ObjectTypeDefinition() returns string | null.
    • @graphql-codegen/client-preset: the babel preset accepts options as ClientBabelPresetOptions | null | undefined.
    • @graphql-codegen/testing: mockGraphQLServer returns nock.Scope | null.
    • @graphql-codegen/graphql-modules-preset: a schema without extensions (graphql 15) throws the "requires to use GraphQL SDL" error instead of a TypeError.

    Generated output is unchanged.

  • #11039 5078faf Thanks @​eddeee888! - Fix type errors in visitor-plugin-common (utils, imports, naming, mappers, types, variables-to-object, convert-schema-enum-to-declaration-block-string, selection-set-processor/base and optimize-operations) under strict: true:

    • transformComment accepts undefined and null, which it already handles by returning an empty string.
    • block declares its param as string[] | null | undefined, which it already handles by returning an empty string.
    • DeclarationBlock's fields are typed as string | null (_name as string | NameNode | null), and withBlock accepts null, which renders the same as no block.
    • DeclarationBlock falls back to returning the block unchanged when blockTransformer is passed as undefined, instead of throwing.
    • buildScalars accepts an undefined scalars mapping, which it already handles by using only the defaults and the schema.
    • buildTypeImport accepts a nullish identifier and source, and throws a descriptive error when either is missing.
    • ParsedEnumValuesMap's mappedValues, sourceIdentifier, sourceFile and importIdentifier

... (truncated)

Commits
  • 68a2ef2 chore(release): update monorepo packages versions (#11049)
  • d8aa07f chore: enable strict: true in root tsconfig (#4683) (#10985)
  • 5078faf [visitor-plugin-common] fix: satisfy strict mode in utils and the remaining f...
  • e9081df chore(release): update monorepo packages versions (#11038)
  • 31761f9 chore(deps): bump @​graphql-tools/utils to v12 for GHSA-7mx3-vvmw-hjmv (#11043)
  • 463e6ef [visitor-plugin-common] fix: satisfy strict mode in base-types-visitor (#4683...
  • 1b0edd8 chore(release): update monorepo packages versions (#11008)
  • 3caccd3 [visitor-plugin-common] fix: satisfy strict mode in selection-set-to-object, ...
  • ccc0d5c [visitor-plugin-common] fix: satisfy strict mode in base-resolvers-visitor (#...
  • 7a376ef [typescript] fix: satisfy strict mode in typescript (#4683) (#11014)
  • Additional commits viewable in compare view

Updates @graphql-tools/schema from 10.0.33 to 10.1.3

Changelog

Sourced from @​graphql-tools/schema's changelog.

10.1.3

Patch Changes

  • Updated dependencies [19f5b33]:
    • @​graphql-tools/utils@​12.0.3
    • @​graphql-tools/merge@​9.2.6

10.1.2

Patch Changes

10.1.1

Patch Changes

10.1.0

Minor Changes

  • #8346 2273c21 Thanks @​ardatan! - This release adds GraphQL v17 support and aligns the existing executor implementation with the latest GraphQL v17 API changes. The following changes are included:

    • getAsyncHelpers is now available on GraphQLResolveInfo. Its track method is used whenever waitUntil is available, as in Yoga's Explicit Resource Management
    • getAbortSignal is now available on GraphQLResolveInfo, matching behavior that was already available in this executor implementation, as in Yoga's Execution Cancellation
    • GraphQLResolveInfo automatically aligns variableValues according to the GraphQL version for better compatibility. In GraphQL v17 and above, variableValues follows the wrapped shape ({ coerced, sources }) expected by GraphQL APIs. In GraphQL v16 and below, variableValues remains a flat map as in previous versions.
    • If your custom scalar resolvers define __serialize and __parseValue, they are automatically mapped to coerceOutputValue and coerceInputValue in GraphQL v17.
    • BREAKING: @graphql-tools/executor's getVariableValues now returns { variableValues } on success, where variableValues is a VariableValues object ({ coerced, sources }). On failure, it returns { errors }.
    • BREAKING: collectFields, shouldIncludeNode, getDeferValues, and collectSubFields now

... (truncated)

Commits

Updates @graphql-tools/mock from 9.1.7 to 9.1.16

Changelog

Sourced from @​graphql-tools/mock's changelog.

9.1.16

Patch Changes

  • Updated dependencies [19f5b33]:
    • @​graphql-tools/utils@​12.0.3
    • @​graphql-tools/schema@​10.1.3

9.1.15

Patch Changes

  • #8467 20d36a5 Thanks @​ardatan! - Fix prototype pollution in mergeIncrementalResult

    Path segments are now rejected unless they are primitive strings or numbers, and keys named __proto__, constructor or prototype are still blocked. Previously a non-primitive segment such as ["__proto__"] bypassed the string equality guard and was coerced into a write on Object.prototype.

    Also exports shared isSafeObjectKey / isDangerousObjectKey helpers used by this path walker and other package call sites. @graphql-tools/merge and @graphql-tools/mock are patched so they ship with the new imports; updateInternalDependencies raises their utils floor when 12.0.2 is versioned.

  • Updated dependencies [b1fbba2, 20d36a5]:

    • @​graphql-tools/utils@​12.0.2
    • @​graphql-tools/schema@​10.1.2

9.1.14

Patch Changes

9.1.13

Patch Changes

  • Updated dependencies [2273c21]:
    • @​graphql-tools/schema@​10.1.0
    • @​graphql-tools/utils@​12.0.0

9.1.12

Patch Changes

  • Updated dependencies [e90719b]:
    • @​graphql-tools/utils@​11.2.2
    • @​graphql-tools/schema@​10.0.38

9.1.11

... (truncated)

Commits
  • 944121e Upcoming Release Changes (#8483)
  • 3a43b4b Upcoming Release Changes (#8460)
  • 20d36a5 fix(utils): block prototype pollution in mergeIncrementalResult paths
  • 8b9b7df chore(release): update monorepo packages versions (#8365)
  • 0f00a44 chore: use HTTPS git URLs for package repository metadata (#8376)
  • 57e316d fix: optimize descriptions, isValidPath %, and mock resolverValidationOptions...
  • 9feabd9 chore(release): update monorepo packages versions (#8327)
  • 11f0a21 chore(release): update monorepo packages versions (#8303)
  • 3c27f9a chore(release): update monorepo packages versions (#8284)
  • 16096f7 build(deps): bump the actions-deps group across 1 directory with 23 updates (...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 10, 2026
@changeset-bot

changeset-bot Bot commented Oct 10, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 3bab679

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@netlify

netlify Bot commented Oct 10, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for apollo-elements ready!

Name Link
🔨 Latest commit 3bab679
🔍 Latest deploy log https://app.netlify.com/projects/apollo-elements/deploys/6ae23f0d216c7a7350e40eda
😎 Deploy Preview https://deploy-preview-362--apollo-elements.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@dependabot
chore(deps): bump @graphql-tools/utils, @graphql-codegen/cli, @graphq…
14efba7 
…l-codegen/plugin-helpers, @graphql-codegen/schema-ast, @graphql-codegen/visitor-plugin-common, @graphql-tools/schema and @graphql-tools/mock

Bumps [@graphql-tools/utils](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/utils) to 12.0.3 and updates ancestor dependencies [@graphql-tools/utils](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/utils), [@graphql-codegen/cli](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/graphql-codegen-cli), [@graphql-codegen/plugin-helpers](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/utils/plugins-helpers), [@graphql-codegen/schema-ast](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/plugins/other/schema-ast), [@graphql-codegen/visitor-plugin-common](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/plugins/other/visitor-plugin-common), [@graphql-tools/schema](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/schema) and [@graphql-tools/mock](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/mock). These dependencies need to be updated together.


Updates `@graphql-tools/utils` from 11.1.0 to 12.0.3
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/utils/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/[email protected]/packages/utils)

Updates `@graphql-codegen/cli` from 7.1.2 to 7.4.6
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/graphql-codegen-cli/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/[email protected]/packages/graphql-codegen-cli)

Updates `@graphql-codegen/plugin-helpers` from 7.0.1 to 7.4.2
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/utils/plugins-helpers/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/[email protected]/packages/utils/plugins-helpers)

Updates `@graphql-codegen/schema-ast` from 6.0.1 to 6.1.1
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/plugins/other/schema-ast/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/[email protected]/packages/plugins/other/schema-ast)

Updates `@graphql-codegen/visitor-plugin-common` from 7.1.0 to 7.2.10
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/plugins/other/visitor-plugin-common/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/[email protected]/packages/plugins/other/visitor-plugin-common)

Updates `@graphql-tools/schema` from 10.0.33 to 10.1.3
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/schema/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/[email protected]/packages/schema)

Updates `@graphql-tools/mock` from 9.1.7 to 9.1.16
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/mock/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/[email protected]/packages/mock)

---
updated-dependencies:
- dependency-name: "@graphql-codegen/cli"
  dependency-version: 7.4.6
  dependency-type: direct:production
- dependency-name: "@graphql-codegen/plugin-helpers"
  dependency-version: 7.4.2
  dependency-type: indirect
- dependency-name: "@graphql-codegen/schema-ast"
  dependency-version: 6.1.1
  dependency-type: indirect
- dependency-name: "@graphql-codegen/visitor-plugin-common"
  dependency-version: 7.2.10
  dependency-type: indirect
- dependency-name: "@graphql-tools/mock"
  dependency-version: 9.1.16
  dependency-type: direct:development
- dependency-name: "@graphql-tools/schema"
  dependency-version: 10.1.3
  dependency-type: direct:production
- dependency-name: "@graphql-tools/utils"
  dependency-version: 12.0.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-453845faaf branch from 020c169 to 14efba7 Compare October 10, 2026 17:44
@bennypowers
bennypowers enabled auto-merge (rebase) October 10, 2026 17:50
@bennypowers
test(atomico): deflake
9a21de5
@bennypowers
chore(deps): bump playwright to 1.64.1
faec604 
GitHub's ubuntu-latest runners now identify as ubuntu26.04-x64.
Playwright 1.55.1 has no browser build for that platform, so
`playwright install --with-deps` fails before tests run.
Playwright 1.64.1 supports ubuntu 26.04.

Assisted-By: Claude Code <[email protected]>
@bennypowers
test(atomico): scope polling tests to their own controller
3bab679 
The polling tests captured controller methods in shared module
variables assigned from useEffect. A previous fixture's poll timer
keeps running after teardown, and when its effect re-ran it clobbered
those variables, so stopPolling cleared the wrong timer and refetch
counts kept climbing.

Expose the controller on the element instead and assert against that
controller. Wait for refetch counts with a deadline rather than fixed
timeouts.

Assisted-By: Claude Code <[email protected]>
@bennypowers
bennypowers merged commit f26e86d into main Oct 28, 2026
8 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-453845faaf branch October 28, 2026 18:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bennypowers bennypowers bennypowers approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

See More

Successfully merging this pull request may close these issues.

1 participant

@bennypowers