Skip to content

chore(deps): bump the patch group across 2 directories with 11 updates #164

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump the patch group across 2 directories with 11 updates #164

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 17, 2025

Bumps the patch group with 11 updates in the / directory:

Package From To
@changesets/cli 2.27.9 2.29.4
turbo 2.2.3 2.5.4
@apollo/gateway 2.9.3 2.11.0
@apollo/server 4.11.0 4.12.2
node-mocks-http 1.16.1 1.17.2
tsup 8.3.0 8.5.0
typescript 5.8.2 5.8.3
fastify 5.3.3 5.4.0
@types/react 19.1.4 19.1.8
graphql-yoga 5.9.0 5.13.5
@typescript-eslint/eslint-plugin 8.32.1 8.34.1

Bumps the patch group with 1 update in the /packages/react directory: @types/react.

Updates @changesets/cli from 2.27.9 to 2.29.4

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.29.4

Patch Changes

  • #1668 65d6632 Thanks @​Andarist! - Fixed a crash in pre mode when trying to version private packages when tagging for private package is disabled

  • Updated dependencies [65d6632]:

    • @​changesets/assemble-release-plan@​6.0.8
    • @​changesets/get-release-plan@​4.0.12

@​changesets/cli@​2.29.3

Patch Changes

@​changesets/cli@​2.29.2

Patch Changes

  • #1636 f73f84a Thanks @​Netail! - Correctly resolve new changesets with since option when the .changeset directory is not directly in the git root

  • Updated dependencies [f73f84a]:

    • @​changesets/read@​0.6.5
    • @​changesets/git@​3.0.4
    • @​changesets/get-release-plan@​4.0.10
    • @​changesets/apply-release-plan@​7.0.12

@​changesets/cli@​2.29.1

Patch Changes

  • #1620 b15e629 Thanks @​Netail! - Correctly fetch new changesets with since if the git option diff.relative has been set to true

  • Updated dependencies [b15e629]:

    • @​changesets/git@​3.0.3
    • @​changesets/apply-release-plan@​7.0.11
    • @​changesets/read@​0.6.4
    • @​changesets/get-release-plan@​4.0.9

@​changesets/cli@​2.29.0

Minor Changes

@​changesets/cli@​2.28.1

Patch Changes

... (truncated)

Commits
  • b962929 Version Packages (#1669)
  • 65d6632 Fixed a crash in pre mode when trying to version private packages when taggin...
  • 5ca6271 Enable publishing with provenance (#1659)
  • d23598a Version Packages (#1641)
  • de8bebc Fixed a crash in prerelease mode when a package misses the version field in i...
  • f15b0d0 docs: adds spectrum css and spectrum web components (#1627)
  • c1e8a78 Support ../ in publishConfig.directory when publishing packages (#1619)
  • 6dcc237 docs: fix examples (#1630)
  • baa9d45 Version Packages (#1637)
  • f73f84a Correctly resolve new changesets with since option when the .changeset di...
  • Additional commits viewable in compare view

Updates turbo from 2.2.3 to 2.5.4

Release notes

Sourced from turbo's releases.

Turborepo v2.5.4

What's Changed

Docs

turbo-ignore

eslint

@​turbo/repository

Examples

Changelog

... (truncated)

Commits

Updates @apollo/gateway from 2.9.3 to 2.11.0

Release notes

Sourced from @​apollo/gateway's releases.

@​apollo/gateway@​2.11.0

Minor Changes

  • Adds connect spec v0.2, available for use with Apollo Router 2.3.0 or greater. (#3262)

Patch Changes

@​apollo/gateway@​2.11.0-preview.2

Patch Changes

@​apollo/gateway@​2.11.0-preview.1

Patch Changes

  • Corrects a set of denial-of-service (DOS) vulnerabilities that made it possible for an attacker to render gateway inoperable with certain simple query patterns due to uncontrolled resource consumption. All prior-released versions and configurations are vulnerable. (#3238)

    See the associated GitHub Advisories GHSA-q2f9-x4p4-7xmh and GHSA-p2q6-pwh5-m6jr for more information.

  • Updated dependencies [1462c91879d41884c0a7e60551d8dd0d67c832d3]:

    • @​apollo/query-planner@​2.11.0-preview.1
    • @​apollo/federation-internals@​2.11.0-preview.1
    • @​apollo/composition@​2.11.0-preview.1

@​apollo/gateway@​2.11.0-preview.0

Minor Changes

  • Add connect spec v0.2 (#3228)

Patch Changes

... (truncated)

Changelog

Sourced from @​apollo/gateway's changelog.

2.11.0

Minor Changes

  • Adds connect spec v0.2, available for use with Apollo Router 2.3.0 or greater. (#3262)

Patch Changes

2.11.0-preview.2

Patch Changes

2.11.0-preview.1

Patch Changes

  • Corrects a set of denial-of-service (DOS) vulnerabilities that made it possible for an attacker to render gateway inoperable with certain simple query patterns due to uncontrolled resource consumption. All prior-released versions and configurations are vulnerable. (#3238)

    See the associated GitHub Advisories GHSA-q2f9-x4p4-7xmh and GHSA-p2q6-pwh5-m6jr for more information.

  • Updated dependencies [1462c91879d41884c0a7e60551d8dd0d67c832d3]:

    • @​apollo/query-planner@​2.11.0-preview.1
    • @​apollo/federation-internals@​2.11.0-preview.1
    • @​apollo/composition@​2.11.0-preview.1

2.11.0-preview.0

Minor Changes

  • Add connect spec v0.2 (#3228)

Patch Changes

... (truncated)

Commits

Updates @apollo/server from 4.11.0 to 4.12.2

Release notes

Sourced from @​apollo/server's releases.

@​apollo/server-integration-testsuite@​4.12.2

Patch Changes

  • #8070 0dee3c9 Thanks @​glasser! - Provide dual-build CJS and ESM for @apollo/server-integration-testsuite.

    We previously provided only a CJS build of this package, unlike @apollo/server itself and the other helper packages that come with it. We may make all of Apollo Server ESM-only in AS5; this is a step in that direction. Specifically, only providing this package for CJS makes it challenging to run the tests in ts-jest in some ESM-only setups, because the copy of @apollo/server fetched directly in your ESM-based test may differ from the copy fetched indirectly via @apollo/server-integration-testsuite, causing the "lockstep versioning" test to fail.

  • Updated dependencies:

    • @​apollo/server@​4.12.2

@​apollo/server@​4.12.2

(No change; there is a change to the @apollo/server-integration-testsuite used to test integrations, and the two packages always have matching versions.)

@​apollo/server-integration-testsuite@​4.12.2-alpha.0

Patch Changes

  • #8070 0dee3c9 Thanks @​glasser! - Provide dual-build CJS and ESM for @apollo/server-integration-testsuite.

    We previously provided only a CJS build of this package, unlike @apollo/server itself and the other helper packages that come with it. We may make all of Apollo Server ESM-only in AS5; this is a step in that direction. Specifically, only providing this package for CJS makes it challenging to run the tests in ts-jest in some ESM-only setups, because the copy of @apollo/server fetched directly in your ESM-based test may differ from the copy fetched indirectly via @apollo/server-integration-testsuite, causing the "lockstep versioning" test to fail.

  • Updated dependencies []:

    • @​apollo/server@​4.12.2-alpha.0

@​apollo/server@​4.12.2-alpha.0

No release notes provided.

@​apollo/server-integration-testsuite@​4.12.1

Patch Changes

  • Updated dependencies [41f98d4]:
    • @​apollo/server@​4.12.1

@​apollo/server@​4.12.1

Patch Changes

  • #8064 41f98d4 Thanks @​glasser! - Update README.md to recommend Express v5 integration now that Express v5 is released.

... (truncated)

Changelog

Sourced from @​apollo/server's changelog.

4.12.2

(No change; there is a change to the @apollo/server-integration-testsuite used to test integrations, and the two packages always have matching versions.)

4.12.1

Patch Changes

  • #8064 41f98d4 Thanks @​glasser! - Update README.md to recommend Express v5 integration now that Express v5 is released.

4.12.0

Minor Changes

  • #8054 89e3f84 Thanks @​clenfest! - Adds a new graphql-js validation rule to reject operations that recursively request selections above a specified maximum, which is disabled by default. Use configuration option maxRecursiveSelections=true to enable with a maximum of 10,000,000, or maxRecursiveSelections=<number> for a custom maximum. Enabling this validation can help avoid performance issues with configured validation rules or plugins.

Patch Changes

4.11.3

Patch Changes

4.11.2

(No change; there is a change to the @apollo/server-integration-testsuite used to test integrations, and the two packages always have matching versions.)

4.11.1

Patch Changes

  • #7952 bb81b2c Thanks @​glasser! - Upgrade dependencies so that automated scans don't detect a vulnerability.

    @apollo/server depends on express which depends on cookie. Versions of express older than v4.21.1 depend on a version of cookie vulnerable to CVE-2024-47764. Users of older express versions who call res.cookie() or res.clearCookie() may be vulnerable to this issue.

    However, Apollo Server does not call this function directly, and it does not expose any object to user code that allows TypeScript users to call this function without an unsafe cast.

    The only way that this direct dependency can cause a vulnerability for users of Apollo Server is if you call startStandaloneServer with a context function that calls Express-specific methods such as res.cookie() or res.clearCookies() on the response object, which is a violation of the TypeScript types provided by startStandaloneServer (which only promise that the response object is a core Node.js http.ServerResponse rather than the Express-specific subclass). So this vulnerability can only affect Apollo Server users who use unsafe JavaScript or unsafe as typecasts in TypeScript.

    However, this upgrade will at least prevent vulnerability scanners from alerting you to this dependency, and we encourage all Express users to upgrade their project's own express dependency to v4.21.1 or newer.

Commits
  • 492a7b4 Version Packages (#8072)
  • b477de2 Version Packages (alpha) (#8071)
  • 079a973 Version Packages (#8065)
  • 41f98d4 docs: support Express v5, recommend new separate Express packages (#8064)
  • 047357a Switch from Volta to Mise for installing dependencies (#8058)
  • 8c6579e Version Packages (#8047)
  • 89e3f84 Add optional validation to reject operations with many recursive selections (...
  • 9dd92ee Merge pull request #8031 from slagiewka/migration_middleware_return
  • c25b78b Update @apollo-server README with 2025 Summit Dates (#8042)
  • b3712f7 docs(migration): return after sending 400
  • Additional commits viewable in compare view

Updates node-mocks-http from 1.16.1 to 1.17.2

Changelog

Sourced from node-mocks-http's changelog.

v 1.17.2

  • Fix request.get() when headers are set as an object [Issue #321]321.

v 1.17.1

  • Fix direct access to the headers [Issue #319]319.

v 1.17.0

  • Allow access request headers both in Express.js and Web Api (Next.js) manner [Issue #317]317.

v 1.16.2

  • Fix: writeHead() sets headersSent [Issue #313]313.
Commits

Updates tsup from 8.3.0 to 8.5.0

Release notes

Sourced from tsup's releases.

v8.5.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v8.4.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v8.3.6

   🐞 Bug Fixes

    View changes on GitHub

v8.3.5

   🐞 Bug Fixes

    View changes on GitHub

v8.3.4

No significant changes

    View changes on GitHub

v8.3.3

No significant changes

    View changes on GitHub

v8.3.1

   🚀 Features

... (truncated)

Commits

Updates typescript from 5.8.2 to 5.8.3

Release notes

Sourced from typescript's releases.

TypeScript 5.8.3

For release notes, check out the release announcement.

Downloads are available on:

Commits
  • 83dc0bb Convert release publishing inputs into parameters (#61523)
  • ba663f6 Exclude completions of binding pattern variable initializers (#52723)
  • 7205eda Bump github/codeql-action from 3.28.12 to 3.28.13 in the github-actions group...
  • 89c572c Fixed a symbol display crash on expando members write locations (#55478)
  • 7b26d2e Fix incorrect name in new release pipeline (#61514)
  • c7a559e Add new release publisher yaml (#61491)
  • 29e6d66 Fix lib.includes('dom') check in containerSeemsToBeEmptyDomElement (#61481)
  • 19b7772 Bump the github-actions group with 4 updates (#61474)
  • 4dc677b Fix errors on type assertions in erasableSyntaxOnly (#61452)
  • ee3dd72 fix(60908): Unexpected "'Type' is declared but its value is never read." erro...
  • Additional commits viewable in compare view

Updates fastify from 5.3.3 to 5.4.0

Release notes

Sourced from fastify's releases.

v5.4.0

What's Changed

@dependabot
chore(deps): bump the patch group across 2 directories with 11 updates
f2526b8 
Bumps the patch group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@changesets/cli](https://github.com/changesets/changesets) | `2.27.9` | `2.29.4` |
| [turbo](https://github.com/vercel/turborepo) | `2.2.3` | `2.5.4` |
| [@apollo/gateway](https://github.com/apollographql/federation/tree/HEAD/gateway-js) | `2.9.3` | `2.11.0` |
| [@apollo/server](https://github.com/apollographql/apollo-server/tree/HEAD/packages/server) | `4.11.0` | `4.12.2` |
| [node-mocks-http](https://github.com/eugef/node-mocks-http) | `1.16.1` | `1.17.2` |
| [tsup](https://github.com/egoist/tsup) | `8.3.0` | `8.5.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.8.2` | `5.8.3` |
| [fastify](https://github.com/fastify/fastify) | `5.3.3` | `5.4.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.1.4` | `19.1.8` |
| [graphql-yoga](https://github.com/graphql-hive/graphql-yoga/tree/HEAD/packages/graphql-yoga) | `5.9.0` | `5.13.5` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.32.1` | `8.34.1` |

Bumps the patch group with 1 update in the /packages/react directory: [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react).


Updates `@changesets/cli` from 2.27.9 to 2.29.4
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/docs/modifying-changelog-format.md)
- [Commits](https://github.com/changesets/changesets/compare/@changesets/[email protected]...@changesets/[email protected])

Updates `turbo` from 2.2.3 to 2.5.4
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/release.md)
- [Commits](vercel/turborepo@v2.2.3...v2.5.4)

Updates `@apollo/gateway` from 2.9.3 to 2.11.0
- [Release notes](https://github.com/apollographql/federation/releases)
- [Changelog](https://github.com/apollographql/federation/blob/main/gateway-js/CHANGELOG.md)
- [Commits](https://github.com/apollographql/federation/commits/@apollo/[email protected]/gateway-js)

Updates `@apollo/server` from 4.11.0 to 4.12.2
- [Release notes](https://github.com/apollographql/apollo-server/releases)
- [Changelog](https://github.com/apollographql/apollo-server/blob/main/packages/server/CHANGELOG.md)
- [Commits](https://github.com/apollographql/apollo-server/commits/@apollo/[email protected]/packages/server)

Updates `node-mocks-http` from 1.16.1 to 1.17.2
- [Release notes](https://github.com/eugef/node-mocks-http/releases)
- [Changelog](https://github.com/eugef/node-mocks-http/blob/master/HISTORY.md)
- [Commits](eugef/node-mocks-http@v1.16.1...v1.17.2)

Updates `tsup` from 8.3.0 to 8.5.0
- [Release notes](https://github.com/egoist/tsup/releases)
- [Commits](egoist/tsup@v8.3.0...v8.5.0)

Updates `typescript` from 5.8.2 to 5.8.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml)
- [Commits](microsoft/TypeScript@v5.8.2...v5.8.3)

Updates `fastify` from 5.3.3 to 5.4.0
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.3.3...v5.4.0)

Updates `@types/react` from 19.1.4 to 19.1.8
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `graphql-yoga` from 5.9.0 to 5.13.5
- [Release notes](https://github.com/graphql-hive/graphql-yoga/releases)
- [Changelog](https://github.com/graphql-hive/graphql-yoga/blob/main/packages/graphql-yoga/CHANGELOG.md)
- [Commits](https://github.com/graphql-hive/graphql-yoga/commits/[email protected]/packages/graphql-yoga)

Updates `@typescript-eslint/eslint-plugin` from 8.32.1 to 8.34.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.34.1/packages/eslint-plugin)

Updates `@types/react` from 19.1.4 to 19.1.8
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `node-mocks-http` from 1.16.1 to 1.17.2
- [Release notes](https://github.com/eugef/node-mocks-http/releases)
- [Changelog](https://github.com/eugef/node-mocks-http/blob/master/HISTORY.md)
- [Commits](eugef/node-mocks-http@v1.16.1...v1.17.2)

Updates `tsup` from 8.3.0 to 8.5.0
- [Release notes](https://github.com/egoist/tsup/releases)
- [Commits](egoist/tsup@v8.3.0...v8.5.0)

Updates `typescript` from 5.8.2 to 5.8.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml)
- [Commits](microsoft/TypeScript@v5.8.2...v5.8.3)

Updates `@types/react` from 19.1.4 to 19.1.8
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react` from 19.1.4 to 19.1.8
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 2.29.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch
- dependency-name: turbo
  dependency-version: 2.5.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch
- dependency-name: "@apollo/gateway"
  dependency-version: 2.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch
- dependency-name: "@apollo/server"
  dependency-version: 4.12.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch
- dependency-name: node-mocks-http
  dependency-version: 1.17.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch
- dependency-name: tsup
  dependency-version: 8.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch
- dependency-name: typescript
  dependency-version: 5.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: fastify
  dependency-version: 5.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch
- dependency-name: "@types/react"
  dependency-version: 19.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: graphql-yoga
  dependency-version: 5.13.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.34.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch
- dependency-name: "@types/react"
  dependency-version: 19.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: node-mocks-http
  dependency-version: 1.17.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch
- dependency-name: tsup
  dependency-version: 8.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch
- dependency-name: typescript
  dependency-version: 5.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: "@types/react"
  dependency-version: 19.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: "@types/react"
  dependency-version: 19.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 17, 2025
@changeset-bot changeset-bot
Copy link

changeset-bot bot commented Jun 17, 2025

⚠️ No Changeset found

Latest commit: f2526b8

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants