build(deps-dev): bump the graphql group across 2 directories with 3 updates
Bumps the graphql group with 3 updates in the / directory: @apollo/server, graphql and mercurius. Bumps the graphql group with 1 update in the /packages/core directory: @apollo/server.
Updates @apollo/server from 4.12.2 to 5.2.0
Release notes
Sourced from @apollo/server's releases.
@apollo/server-integration-testsuite@5.2.0Patch Changes
@apollo/server@5.2.0Minor Changes
#8161
51acbebThanks@jerelmiller! - Fix an issue where some bundlers would fail to build because of the dynamic import for the optional peer dependency on@yaacovcr/transformintroduced in@apollo/server5.1.0. To provide support for the legacy incremental format, you must now provide thelegacyExperimentalExecuteIncrementallyoption to theApolloServerconstructor.import { legacyExecuteIncrementally } from '@yaacovcr/transform';const server = new ApolloServer({ // ... legacyExperimentalExecuteIncrementally: legacyExecuteIncrementally, });
If the
legacyExperimentalExecuteIncrementallyoption is not provided and the client sends anAcceptheader with a value ofmultipart/mixed; deferSpec=20220824, an error is returned by the server.
@apollo/server-integration-testsuite@5.1.0Patch Changes
@apollo/server@5.1.0Minor Changes
#8148
80a1a1aThanks@jerelmiller! - Apollo Server now supports the incremental delivery protocol (@deferand@stream) that ships with[email protected]. To use the current protocol, clients must send theAcceptheader with a value ofmultipart/mixed; incrementalSpec=v0.2.Upgrading to 5.1 will depend on what version of
graphqlyou have installed and whether you already support the incremental delivery protocol.I use
graphql@16without incremental deliveryContinue using
graphqlv16 with no additional changes. Incremental delivery won't be available.I use
graphql@16but would like to add support for incremental deliveryInstall
[email protected]and follow the "Incremental delivery" guide to add the@deferand@streamdirectives to your schema. Clients should send theAcceptheader with a value ofmultipart/mixed; incrementalSpec=v0.2to get multipart responses.I use
[email protected]and use incremental deliveryYou must upgrade to
[email protected]to continue using incremental delivery. If you'd like to continue providing support for the legacy incremental protocol, install the@yaacovcr/transformpackage. Apollo Server will attempt to load this module when the client specifies anAcceptheader with a value ofmultipart/mixed; deferSpec=20220824. If this package is not installed, an error is returned by the server.Because Apollo Server now supports multiple versions of the incremental delivery types, the existing incremental delivery types have been renamed with an
Alpha2suffix. If you import these types in your code, you will need to add theAlpha2suffix.
... (truncated)
Changelog
Sourced from @apollo/server's changelog.
5.2.0
Minor Changes
#8161
51acbebThanks@jerelmiller! - Fix an issue where some bundlers would fail to build because of the dynamic import for the optional peer dependency on@yaacovcr/transformintroduced in@apollo/server5.1.0. To provide support for the legacy incremental format, you must now provide thelegacyExperimentalExecuteIncrementallyoption to theApolloServerconstructor.import { legacyExecuteIncrementally } from '@yaacovcr/transform';const server = new ApolloServer({ // ... legacyExperimentalExecuteIncrementally: legacyExecuteIncrementally, });
If the
legacyExperimentalExecuteIncrementallyoption is not provided and the client sends anAcceptheader with a value ofmultipart/mixed; deferSpec=20220824, an error is returned by the server.5.1.0
Minor Changes
#8148
80a1a1aThanks@jerelmiller! - Apollo Server now supports the incremental delivery protocol (@deferand@stream) that ships with[email protected]. To use the current protocol, clients must send theAcceptheader with a value ofmultipart/mixed; incrementalSpec=v0.2.Upgrading to 5.1 will depend on what version of
graphqlyou have installed and whether you already support the incremental delivery protocol.I use
graphql@16without incremental deliveryContinue using
graphqlv16 with no additional changes. Incremental delivery won't be available.I use
graphql@16but would like to add support for incremental deliveryInstall
[email protected]and follow the "Incremental delivery" guide to add the@deferand@streamdirectives to your schema. Clients should send theAcceptheader with a value ofmultipart/mixed; incrementalSpec=v0.2to get multipart responses.I use
[email protected]and use incremental deliveryYou must upgrade to
[email protected]to continue using incremental delivery. If you'd like to continue providing support for the legacy incremental protocol, install the@yaacovcr/transformpackage. Apollo Server will attempt to load this module when the client specifies anAcceptheader with a value ofmultipart/mixed; deferSpec=20220824. If this package is not installed, an error is returned by the server.Because Apollo Server now supports multiple versions of the incremental delivery types, the existing incremental delivery types have been renamed with an
Alpha2suffix. If you import these types in your code, you will need to add theAlpha2suffix.import type { - GraphQLExperimentalFormattedInitialIncrementalExecutionResult, + GraphQLExperimentalFormattedInitialIncrementalExecutionResultAlpha2,
- GraphQLExperimentalFormattedSubsequentIncrementalExecutionResult,
- GraphQLExperimentalFormattedSubsequentIncrementalExecutionResultAlpha2,
- GraphQLExperimentalFormattedIncrementalResult,
- GraphQLExperimentalFormattedIncrementalResultAlpha2,
... (truncated)
Commits
7be3686Version Packages (#8163)51acbebRequire legacy incremental execute as anApolloServeroption instead of a d...ae1be29Version Packages (#8155)c9738e2Version Packages (rc) (#8153)80a1a1aAdd support for newer incremental delivery format (#8148)6f54cbeVersion Packages (#8114)16b1288Version Packages (rc) (#8092)06d670fWrite a test for@cacheControlinteraction between type and interface (#7912)5b26558fix(promises): avoid unhandledRejection errors (#8076)f3cf1ffv5: actually drop Express from the main package's dependencies (#8094)- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by apollo-bot, a new releaser for @apollo/server since your current version.
Updates graphql from 16.11.0 to 16.12.0
Release notes
Sourced from graphql's releases.
16.12.0
v16.12.0 (2025-11-01)
New Feature 🚀
- #4482 Implement changes for executable descriptions (
@JoviDeCroock)- #4493 Backport schema coordinates (
@JoviDeCroock)Bug Fix 🐞
- #4392 Catch unhandled exception in abstract resolution (
@JoviDeCroock)Docs 📝
- #4374 docs: testing graphQL servers (
@sarahxsanders)- #4376 docs: type generation for graphql servers (
@sarahxsanders)- #4380 docs: add guides for custom scalars (
@sarahxsanders)- #4381 docs: anatomy of a resolver (
@sarahxsanders)- #4382 docs: understanding graphql errors (
@sarahxsanders)- #4383 docs: N+1 problem and DataLoader (
@sarahxsanders)- #4391 docs: cursor-based pagination guide (
@sarahxsanders)- #4393 docs: add page on abstract types (
@sarahxsanders)- #4394 docs: editorial on abstract types page (
@benjie)- #4395 docs: editorial for recent documentation updates (
@benjie)- #4396 docs: add page on authorization strategies (
@sarahxsanders)- #4398 docs: update "going to production" guide (
@sarahxsanders)- #4399 Update mutations-and-input-types.mdx (
@roman-lakhnov)- #4400 Remove CJS from docs (
@JoviDeCroock)- #4401 docs: add guide on directives (
@sarahxsanders)- #4402 docs: add guide for operation complexity controls (
@sarahxsanders)- #4405 docs: add guide on nullability (
@sarahxsanders)- #4406 docs: add guide on subscriptions (
@sarahxsanders)- #4411 docs: add guide on caching strategies (
@sarahxsanders)- #4414 docs: guide on scaling your API (
@sarahxsanders)- #4416 Editorial for #4405 (nullability) (
@benjie)- #4417 Indicate that field arguments should always be preferred over directives (
@benjie)- #4418 docs: trusted documents (
@benjie)- #4419 docs: cleanup and fixes (
@sarahxsanders)- #4436 Suggestions for federation links (
@Urigo)- #4444 Fix navigation (
@JoviDeCroock)- #4452 fix(docs/mutations-and-input-types.mdx): root being inside of SDL (
@alesculek)- #4473 docs: remove fourth permutation of the visit API (
@janmeier)Polish 💅
- #4453 Remove oneof validation from values of correct type (
@JoviDeCroock)Internal 🏠
... (truncated)
Commits
bf9ffff16.12.0e2457b3Backport schema coordinates (#4493)364f17fImplement changes for executable descriptions (#4482)60ae6c4updated location of ModelSim gitignore file (#4479)6808b16docs: remove fourth permutation of the visit API (#4473)d07c9c5Fix typo in readme8dc2955fix(docs/mutations-and-input-types.mdx): root being inside of SDL (#4452)7134cabRemove oneof validation from values of correct type (#4453)9032db1Fix navigation (#4444)ba4b411docs: testing graphQL servers (#4374)- Additional commits viewable in compare view
Updates mercurius from 16.2.0 to 16.6.0
Release notes
Sourced from mercurius's releases.
v16.6.0
What's Changed
- feat: add highwatermakr option to subscription queue by
@simone-sanfratelloin mercurius-js/mercurius#1197Full Changelog: https://github.com/mercurius-js/mercurius/compare/v16.5.0...v16.6.0
v16.5.0
What's Changed
- build(deps): bump actions/setup-node from 4.4.0 to 5.0.0 by
@dependabot[bot] in mercurius-js/mercurius#1188- feat: default subscription ws subprotocol by
@simone-sanfratelloin mercurius-js/mercurius#1189- chore: remove tap and others update by
@Tony133in mercurius-js/mercurius#1183- build(deps): bump secure-json-parse from 3.0.2 to 4.1.0 by
@dependabot[bot] in mercurius-js/mercurius#1190- feat: default ws subprotocol option by
@simone-sanfratelloin mercurius-js/mercurius#1191- feat: subscription hooks on connection close and error by
@simone-sanfratelloin mercurius-js/mercurius#1192- feat: message id in subscription hooks by
@simone-sanfratelloin mercurius-js/mercurius#1193Full Changelog: https://github.com/mercurius-js/mercurius/compare/v16.3.0...v16.5.0
v16.4.0
What's Changed
- feat: csrf prevention by
@simone-sanfratelloin mercurius-js/mercurius#1187Full Changelog: https://github.com/mercurius-js/mercurius/compare/v16.3.0...v16.4.0
v16.3.0
What's Changed
- fix: correct GraphiQL plugin variable names by
@prkombin mercurius-js/mercurius#1171- build(deps-dev): bump typescript from 5.8.3 to 5.9.2 by
@dependabot[bot] in mercurius-js/mercurius#1174- test: migrated hooks-runner.test.js from tap to node:test by
@Tony133in mercurius-js/mercurius#1181- test: migrated subscription-hooks.test.js from tap to node:test by
@Tony133in mercurius-js/mercurius#1178- test: migrated errors.test.js from tap to node:test by
@Tony133in mercurius-js/mercurius#1167- test: migrated hooks.test.js from tap to node:test by
@Tony133in mercurius-js/mercurius#1179- test: migrated batched.test.js from tap to node:test by
@Tony133in mercurius-js/mercurius#1176- test: migrated app-decorator.test.js from tap to node:test by
@Tony133in mercurius-js/mercurius#1177- test: migrated routes.test.js from tap to node:test by
@Tony133in mercurius-js/mercurius#1180- test: migrated subscription.test.js from tap to node:test by
@Tony133in mercurius-js/mercurius#1172- build(deps-dev): bump wait-on from 8.0.5 to 9.0.1 by
@dependabot[bot] in mercurius-js/mercurius#1184- build(deps-dev): bump
@sinonjs/fake-timersfrom 14.0.0 to 15.0.0 by@dependabot[bot] in mercurius-js/mercurius#1185- fix: subscription hook onSubscriptionEnd context by
@simone-sanfratelloin mercurius-js/mercurius#1186- build(deps): bump actions/checkout from 4 to 5 by
@dependabot[bot] in mercurius-js/mercurius#1182New Contributors
@prkombmade their first contribution in mercurius-js/mercurius#1171Full Changelog: https://github.com/mercurius-js/mercurius/compare/v16.2.0...v16.3.0
Commits
29b2255Bumped v16.6.0a5de20bfeat: add highwatermakr option to subscription queue (#1197)52d438cBumped v16.5.06976b79feat: message id in subscription hooks (#1193)8a62494feat: subscription hooks on connection close and error (#1192)928e13bfeat: default ws subprotocol option (#1191)ea9de13build(deps): bump secure-json-parse from 3.0.2 to 4.1.0 (#1190)c4507d3chore: remove tap and others update (#1183)2bf39f9feat: default subscription ws subprotocol (#1189)20ac3aabuild(deps): bump actions/setup-node from 4.4.0 to 5.0.0 (#1188)- Additional commits viewable in compare view
Updates @apollo/server from 4.12.2 to 5.2.0
Release notes
Sourced from @apollo/server's releases.
@apollo/server-integration-testsuite@5.2.0Patch Changes
@apollo/server@5.2.0Minor Changes
#8161
51acbebThanks@jerelmiller! - Fix an issue where some bundlers would fail to build because of the dynamic import for the optional peer dependency on@yaacovcr/transformintroduced in@apollo/server5.1.0. To provide support for the legacy incremental format, you must now provide thelegacyExperimentalExecuteIncrementallyoption to theApolloServerconstructor.import { legacyExecuteIncrementally } from '@yaacovcr/transform';const server = new ApolloServer({ // ... legacyExperimentalExecuteIncrementally: legacyExecuteIncrementally, });
If the
legacyExperimentalExecuteIncrementallyoption is not provided and the client sends anAcceptheader with a value ofmultipart/mixed; deferSpec=20220824, an error is returned by the server.
@apollo/server-integration-testsuite@5.1.0Patch Changes
@apollo/server@5.1.0Minor Changes
#8148
80a1a1aThanks@jerelmiller! - Apollo Server now supports the incremental delivery protocol (@deferand@stream) that ships with[email protected]. To use the current protocol, clients must send theAcceptheader with a value ofmultipart/mixed; incrementalSpec=v0.2.Upgrading to 5.1 will depend on what version of
graphqlyou have installed and whether you already support the incremental delivery protocol.I use
graphql@16without incremental deliveryContinue using
graphqlv16 with no additional changes. Incremental delivery won't be available.I use
graphql@16but would like to add support for incremental deliveryInstall
[email protected]and follow the "Incremental delivery" guide to add the@deferand@streamdirectives to your schema. Clients should send theAcceptheader with a value ofmultipart/mixed; incrementalSpec=v0.2to get multipart responses.I use
[email protected]and use incremental deliveryYou must upgrade to
[email protected]to continue using incremental delivery. If you'd like to continue providing support for the legacy incremental protocol, install the@yaacovcr/transformpackage. Apollo Server will attempt to load this module when the client specifies anAcceptheader with a value ofmultipart/mixed; deferSpec=20220824. If this package is not installed, an error is returned by the server.Because Apollo Server now supports multiple versions of the incremental delivery types, the existing incremental delivery types have been renamed with an
Alpha2suffix. If you import these types in your code, you will need to add theAlpha2suffix.
... (truncated)
Changelog
Sourced from @apollo/server's changelog.
5.2.0
Minor Changes
#8161
51acbebThanks@jerelmiller! - Fix an issue where some bundlers would fail to build because of the dynamic import for the optional peer dependency on@yaacovcr/transformintroduced in@apollo/server5.1.0. To provide support for the legacy incremental format, you must now provide thelegacyExperimentalExecuteIncrementallyoption to theApolloServerconstructor.import { legacyExecuteIncrementally } from '@yaacovcr/transform';const server = new ApolloServer({ // ... legacyExperimentalExecuteIncrementally: legacyExecuteIncrementally, });
If the
legacyExperimentalExecuteIncrementallyoption is not provided and the client sends anAcceptheader with a value ofmultipart/mixed; deferSpec=20220824, an error is returned by the server.5.1.0
Minor Changes
#8148
80a1a1aThanks@jerelmiller! - Apollo Server now supports the incremental delivery protocol (@deferand@stream) that ships with[email protected]. To use the current protocol, clients must send theAcceptheader with a value ofmultipart/mixed; incrementalSpec=v0.2.Upgrading to 5.1 will depend on what version of
graphqlyou have installed and whether you already support the incremental delivery protocol.I use
graphql@16without incremental deliveryContinue using
graphqlv16 with no additional changes. Incremental delivery won't be available.I use
graphql@16but would like to add support for incremental deliveryInstall
[email protected]and follow the "Incremental delivery" guide to add the@deferand@streamdirectives to your schema. Clients should send theAcceptheader with a value ofmultipart/mixed; incrementalSpec=v0.2to get multipart responses.I use
[email protected]and use incremental deliveryYou must upgrade to
[email protected]to continue using incremental delivery. If you'd like to continue providing support for the legacy incremental protocol, install the@yaacovcr/transformpackage. Apollo Server will attempt to load this module when the client specifies anAcceptheader with a value ofmultipart/mixed; deferSpec=20220824. If this package is not installed, an error is returned by the server.Because Apollo Server now supports multiple versions of the incremental delivery types, the existing incremental delivery types have been renamed with an
Alpha2suffix. If you import these types in your code, you will need to add theAlpha2suffix.import type { - GraphQLExperimentalFormattedInitialIncrementalExecutionResult, + GraphQLExperimentalFormattedInitialIncrementalExecutionResultAlpha2,
- GraphQLExperimentalFormattedSubsequentIncrementalExecutionResult,
- GraphQLExperimentalFormattedSubsequentIncrementalExecutionResultAlpha2,
- GraphQLExperimentalFormattedIncrementalResult,
- GraphQLExperimentalFormattedIncrementalResultAlpha2,
... (truncated)
Commits
7be3686Version Packages (#8163)51acbebRequire legacy incremental execute as anApolloServeroption instead of a d...ae1be29Version Packages (#8155)c9738e2Version Packages (rc) (#8153)80a1a1aAdd support for newer incremental delivery format (#8148)6f54cbeVersion Packages (#8114)16b1288Version Packages (rc) (#8092)06d670fWrite a test for@cacheControlinteraction between type and interface (#7912)5b26558fix(promises): avoid unhandledRejection errors (#8076)f3cf1ffv5: actually drop Express from the main package's dependencies (#8094)- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by apollo-bot, a new releaser for @apollo/server since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions