Skip to content

chore(deps): bump the apollo-and-graphql group across 1 directory with 6 updates - #7005

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8
Open

chore(deps): bump the apollo-and-graphql group across 1 directory with 6 updates#7005
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the apollo-and-graphql group with 5 updates in the / directory:

Package From To
@apollo/client 3.10.4 4.2.10
@graphql-tools/load 7.7.0 8.1.15
@graphql-tools/url-loader 7.17.18 9.1.6
apollo-server-express 2.21.1 3.13.0
graphql 15.4.0 17.0.2

Updates @apollo/client from 3.10.4 to 4.2.10

Release notes

Sourced from @​apollo/client's releases.

@​apollo/client@​4.2.10

Patch Changes

  • #13385 bfb674e Thanks @​jerelmiller! - Fix accidental widening of the client.mutate return type when optimisticResponse was present.

  • #13382 365373e Thanks @​jerelmiller! - Fix result types widened when a query's variables had constant types (e.g. TypedDocumentNode<Data, { type: "main" }>). This caused options such as returnPartialData or errorPolicy to be reported as their widened types (e.g. boolean, ErrorPolicy) instead of the value that was passed which returned the wrong data and dataState types.

  • #13382 365373e Thanks @​jerelmiller! - Fix issue where unknown options were permitted by TypeScript when passed alongside a valid option to APIs with modern signatures.

  • #13383 5840f50 Thanks @​jerelmiller! - Update the return type of refetch, fetchMore and useLazyQuery's execute function on the provided errorPolicy. Previously these APIs all used the default type which typed data as TData | undefined and error as ErrorLike | undefined.

@​apollo/client@​4.2.9

Patch Changes

  • #13364 2f383e7 Thanks @​atharv-sys32! - Fix a bug where GraphQL variable default values were not applied during cache reads when variables with defaults were explicitly set to undefined. This caused @include/@skip directives to throw "Invalid variable referenced" errors when the variable was passed as undefined instead of being omitted entirely.

  • #13367 2b39cc8 Thanks @​jerelmiller! - Fix an issue where some @export queries would not react to cache updates when the fields keyed by exported variables were updated.

@​apollo/client@​4.2.8

Patch Changes

  • #13349 501a33b Thanks @​jerelmiller! - Prevent the setTimeout in connectToDevtools that shows the devtools suggestion from firing when the user agent does not match Chrome or Firefox. This check was previously done inside the setTimeout which meant the timer was scheduled for environments where we'd never show the message anyways. For test environments, this could cause flaky tests when that setTimeout outlived the tests and ran after any virtual DOM was torn down and removed.

@​apollo/client@​4.2.7

Patch Changes

@​apollo/client@​4.2.6

Patch Changes

  • #13315 a406cc9 Thanks @​fallintoplace! - Prevent relay multipart subscriptions from issuing a fetch request after serializing the request body fails.

  • #13307 abd0781 Thanks @​wolfie! - Speed up cache writes by avoiding a full AST visit of every written field to detect @stream. The check now runs only when the result carries stream info, and only inspects the field node's own directives. As a result, fields that merely contain @stream on a nested field are no longer treated as streamed themselves and now overwrite existing lists like regular fields instead of merging chunk-wise.

@​apollo/client@​4.2.5

Patch Changes

  • #13302 bb75dd3 Thanks @​tpict! - Export KeyArgsFunction and RelayFieldPolicy types from public entrypoints.

@​apollo/client@​4.2.4

Patch Changes

  • #13281 e4df809 Thanks @​jerelmiller! - Fixes an issue where client.readFragment and client.readQuery ignored the optimistic option when passed in the options object.

@​apollo/client@​4.2.3

Patch Changes

... (truncated)

Changelog

Sourced from @​apollo/client's changelog.

4.2.10

Patch Changes

  • #13385 bfb674e Thanks @​jerelmiller! - Fix accidental widening of the client.mutate return type when optimisticResponse was present.

  • #13382 365373e Thanks @​jerelmiller! - Fix result types widened when a query's variables had constant types (e.g. TypedDocumentNode<Data, { type: "main" }>). This caused options such as returnPartialData or errorPolicy to be reported as their widened types (e.g. boolean, ErrorPolicy) instead of the value that was passed which returned the wrong data and dataState types.

  • #13382 365373e Thanks @​jerelmiller! - Fix issue where unknown options were permitted by TypeScript when passed alongside a valid option to APIs with modern signatures.

  • #13383 5840f50 Thanks @​jerelmiller! - Update the return type of refetch, fetchMore and useLazyQuery's execute function on the provided errorPolicy. Previously these APIs all used the default type which typed data as TData | undefined and error as ErrorLike | undefined.

4.2.9

Patch Changes

  • #13364 2f383e7 Thanks @​atharv-sys32! - Fix a bug where GraphQL variable default values were not applied during cache reads when variables with defaults were explicitly set to undefined. This caused @include/@skip directives to throw "Invalid variable referenced" errors when the variable was passed as undefined instead of being omitted entirely.

  • #13367 2b39cc8 Thanks @​jerelmiller! - Fix an issue where some @export queries would not react to cache updates when the fields keyed by exported variables were updated.

4.2.8

Patch Changes

  • #13349 501a33b Thanks @​jerelmiller! - Prevent the setTimeout in connectToDevtools that shows the devtools suggestion from firing when the user agent does not match Chrome or Firefox. This check was previously done inside the setTimeout which meant the timer was scheduled for environments where we'd never show the message anyways. For test environments, this could cause flaky tests when that setTimeout outlived the tests and ran after any virtual DOM was torn down and removed.

4.2.7

Patch Changes

4.2.6

Patch Changes

  • #13315 a406cc9 Thanks @​fallintoplace! - Prevent relay multipart subscriptions from issuing a fetch request after serializing the request body fails.

  • #13307 abd0781 Thanks @​wolfie! - Speed up cache writes by avoiding a full AST visit of every written field to detect @stream. The check now runs only when the result carries stream info, and only inspects the field node's own directives. As a result, fields that merely contain @stream on a nested field are no longer treated as streamed themselves and now overwrite existing lists like regular fields instead of merging chunk-wise.

4.2.5

Patch Changes

  • #13302 bb75dd3 Thanks @​tpict! - Export KeyArgsFunction and RelayFieldPolicy types from public entrypoints.

4.2.4

Patch Changes

... (truncated)

Commits
  • 4947447 Version Packages (#13389)
  • bfb674e Fix client.mutate return type when optimisticResponse is provided (#13385)
  • 5840f50 Update return types for refetch, fetchMore and useLazyQuery execute o...
  • 365373e Fix widening of default options types when variables contain constant types (...
  • 359f3e6 Add unique-names anchor to fragments docs (#13365)
  • db42896 Add AI contribution guidelines (#13369)
  • e8b8ff0 Version Packages (#13370)
  • 2b39cc8 Fix issue where changes to @export fields did not trigger updates (#13367)
  • 2f383e7 fix: apply query variable defaults when undefined is passed explicitly (#13364)
  • 8518419 chore(deps): update zizmorcore/zizmor-action action to v0.6.0 (#13356)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​apollo/client since your current version.


Updates @graphql-tools/load from 7.7.0 to 8.1.15

Changelog

Sourced from @​graphql-tools/load's changelog.

8.1.15

Patch Changes

  • Updated dependencies [e90719b]:
    • @​graphql-tools/utils@​11.2.2
    • @​graphql-tools/schema@​10.0.38

8.1.14

Patch Changes

  • Updated dependencies [615c1a2]:
    • @​graphql-tools/utils@​11.2.1
    • @​graphql-tools/schema@​10.0.37

8.1.13

Patch Changes

  • Updated dependencies []:
    • @​graphql-tools/schema@​10.0.36

8.1.12

Patch Changes

  • Updated dependencies [2609c94]:
    • @​graphql-tools/utils@​11.2.0
    • @​graphql-tools/schema@​10.0.35

8.1.11

Patch Changes

  • Updated dependencies [981d461]:
    • @​graphql-tools/utils@​11.1.1
    • @​graphql-tools/schema@​10.0.34

8.1.10

Patch Changes

  • Updated dependencies [a4b7dce]:
    • @​graphql-tools/utils@​11.1.0

... (truncated)

Commits
  • 11f0a21 chore(release): update monorepo packages versions (#8303)
  • 3c27f9a chore(release): update monorepo packages versions (#8284)
  • 16096f7 build(deps): bump the actions-deps group across 1 directory with 23 updates (...
  • 76b54da chore(release): update monorepo packages versions (#8264)
  • 062d229 chore(release): update monorepo packages versions (#8261)
  • c7f20ac chore(release): update monorepo packages versions (#8157)
  • 4aa9156 chore(release): update monorepo packages versions (#8145)
  • 14066f9 chore(release): update monorepo packages versions (#8118)
  • 7417ceb chore(release): update monorepo packages versions (#7754)
  • 7b17d1f chore(release): update monorepo packages versions (#7722)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​graphql-tools/load since your current version.


Updates @graphql-tools/url-loader from 7.17.18 to 9.1.6

Changelog

Sourced from @​graphql-tools/url-loader's changelog.

9.1.6

Patch Changes

  • Updated dependencies [e90719b]:
    • @​graphql-tools/utils@​11.2.2
    • @​graphql-tools/executor-legacy-ws@​1.1.32

9.1.5

Patch Changes

  • Updated dependencies [615c1a2]:
    • @​graphql-tools/utils@​11.2.1
    • @​graphql-tools/executor-legacy-ws@​1.1.31

9.1.4

Patch Changes

  • Updated dependencies [2609c94]:
    • @​graphql-tools/utils@​11.2.0
    • @​graphql-tools/executor-legacy-ws@​1.1.30

9.1.3

Patch Changes

  • Updated dependencies [981d461]:
    • @​graphql-tools/utils@​11.1.1
    • @​graphql-tools/executor-legacy-ws@​1.1.29

9.1.2

Patch Changes

  • Updated dependencies [a4b7dce]:
    • @​graphql-tools/utils@​11.1.0
    • @​graphql-tools/executor-legacy-ws@​1.1.28

9.1.1

Patch Changes

  • Updated dependencies

... (truncated)

Commits
  • 11f0a21 chore(release): update monorepo packages versions (#8303)
  • 3c27f9a chore(release): update monorepo packages versions (#8284)
  • d246275 build(deps): bump the actions-deps group with 4 updates (#8293)
  • 16096f7 build(deps): bump the actions-deps group across 1 directory with 23 updates (...
  • 062d229 chore(release): update monorepo packages versions (#8261)
  • c7f20ac chore(release): update monorepo packages versions (#8157)
  • fc1e7c4 build(deps): bump the actions-deps group across 1 directory with 20 updates (...
  • 1fb1076 build(deps): bump the actions-deps group across 1 directory with 15 updates (...
  • a69673e chore(deps): update dependency puppeteer to v25 (#8188)
  • 81ee006 build(deps): bump the actions-deps group across 1 directory with 8 updates (#...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​graphql-tools/url-loader since your current version.


Updates apollo-server-express from 2.21.1 to 3.13.0

Commits

Updates graphql from 15.4.0 to 17.0.2

Release notes

Sourced from graphql's releases.

v17.0.2 (2026-07-03)

Bug Fix 🐞

Polish 💅

Committers: 2

v17.0.1 (2026-06-16)

Bug Fix 🐞

  • #4824 fix(diagnostics): emit asyncStart after promise settlement to match native tracePromise (@​logaretm)

Internal 🏠

Committers: 2

v17.0.0 (2026-06-15)

New Feature 🚀

Bug Fix 🐞

Docs 📝

... (truncated)

Commits
  • 71606d7 chore(release): v17.0.2
  • 101de34 fix: detect default-value changes on input object fields (#4832)
  • 82da713 fix(mapSchemaConfig): fix context for schema argument mapper (#4829)
  • 9617473 chore(release): v17.0.1
  • 851bd6a chore(release): protect latest release channels (#4825)
  • c471d36 fix(diagnostics): emit asyncStart after promise settlement to match native `t...
  • 3f3895f chore(npm): remove obsolete ESM-only package build (#4823)
  • c7e494a chore(release): v17.0.0
  • d977f66 docs: post 17.rc-0 update (#4817)
  • 39f865f docs: document @experimental_disableErrorPropagation (#4820)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for graphql since your current version.


Updates graphql-tag from 2.12.6 to 2.12.7

Release notes

Sourced from graphql-tag's releases.

v2.12.7

Patch Changes

Changelog

Sourced from graphql-tag's changelog.

2.12.7

Patch Changes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for graphql-tag since your current version.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 18, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 5 times, most recently from 8ebf399 to a9a2f84 Compare June 26, 2026 13:04
@dependabot @github

dependabot Bot commented on behalf of github Jun 26, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot can't access a private package registry without explicit configuration. Because of this, Dependabot cannot update this pull request.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 5 times, most recently from 018ebe1 to 5c3ac46 Compare July 3, 2026 13:04
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 7 times, most recently from bee74cd to 9f7790c Compare July 14, 2026 13:04
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 4 times, most recently from e83feee to 51bfc9f Compare July 20, 2026 13:04
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 4 times, most recently from 7a3ab81 to d52a295 Compare July 24, 2026 13:04
@eddieferrer

eddieferrer commented Jul 24, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch from d52a295 to 0b5fd65 Compare July 24, 2026 17:53
@eddieferrer

eddieferrer commented Jul 24, 2026

Copy link
Copy Markdown
Contributor

This PR is currently unmergeable due to a peer dependency conflict: @kiva/kv-components@8.22.5 declares peer @apollo/client@"3.x", which is incompatible with the @apollo/client@4.2.8 this PR introduces. Apollo Client 4 cannot be adopted in this repo until @kiva/kv-components is updated to support it. Leaving open for tracking but no action can be taken here until the internal package is updated.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 5 times, most recently from 0d48e98 to 147ad4d Compare July 31, 2026 13:04
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 6 times, most recently from 1a97e38 to 2507e7d Compare August 10, 2026 13:05
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch from 2507e7d to a91cc62 Compare August 11, 2026 13:04
@dependabot
chore(deps): bump the apollo-and-graphql group across 1 directory wit…
e12b0c8 
…h 6 updates

Bumps the apollo-and-graphql group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@apollo/client](https://github.com/apollographql/apollo-client) | `3.10.4` | `4.2.10` |
| [@graphql-tools/load](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/load) | `7.7.0` | `8.1.15` |
| [@graphql-tools/url-loader](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/loaders/url) | `7.17.18` | `9.1.6` |
| [apollo-server-express](https://github.com/apollographql/apollo-server/tree/HEAD/packages/apollo-server-express) | `2.21.1` | `3.13.0` |
| [graphql](https://github.com/graphql/graphql-js) | `15.4.0` | `17.0.2` |



Updates `@apollo/client` from 3.10.4 to 4.2.10
- [Release notes](https://github.com/apollographql/apollo-client/releases)
- [Changelog](https://github.com/apollographql/apollo-client/blob/main/CHANGELOG.md)
- [Commits](https://github.com/apollographql/apollo-client/compare/v3.10.4...@apollo/client@4.2.10)

Updates `@graphql-tools/load` from 7.7.0 to 8.1.15
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/load/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/load@8.1.15/packages/load)

Updates `@graphql-tools/url-loader` from 7.17.18 to 9.1.6
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/loaders/url/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/url-loader@9.1.6/packages/loaders/url)

Updates `apollo-server-express` from 2.21.1 to 3.13.0
- [Release notes](https://github.com/apollographql/apollo-server/releases)
- [Commits](https://github.com/apollographql/apollo-server/commits/apollo-server-express@3.13.0/packages/apollo-server-express)

Updates `graphql` from 15.4.0 to 17.0.2
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v15.4.0...v17.0.2)

Updates `graphql-tag` from 2.12.6 to 2.12.7
- [Release notes](https://github.com/apollographql/graphql-tag/releases)
- [Changelog](https://github.com/apollographql/graphql-tag/blob/main/CHANGELOG.md)
- [Commits](apollographql/graphql-tag@v2.12.6...v2.12.7)

---
updated-dependencies:
- dependency-name: "@apollo/client"
  dependency-version: 4.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: apollo-and-graphql
- dependency-name: "@graphql-tools/load"
  dependency-version: 8.1.10
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: apollo-and-graphql
- dependency-name: "@graphql-tools/url-loader"
  dependency-version: 9.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: apollo-and-graphql
- dependency-name: apollo-server-express
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: apollo-and-graphql
- dependency-name: graphql
  dependency-version: 17.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: apollo-and-graphql
- dependency-name: graphql-tag
  dependency-version: 2.12.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: apollo-and-graphql
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch from a91cc62 to e12b0c8 Compare August 12, 2026 13:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@mcstover mcstover

@emuvente emuvente

@dyersituations dyersituations

@tiarascoleman tiarascoleman

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@eddieferrer @mcstover @emuvente @dyersituations @tiarascoleman