Repository navigation
fix(deps): update npm dependencies (patch) - #2079
renovate[bot] wants to merge 1 commit into
Conversation
|
|
There was a problem hiding this comment.
🟡 Changes recommended
Several Vitest importer snapshots still resolve jsdom 30.1.1, leaving the dependency update incomplete.
1 open finding
What changed in this PR
Updates four npm dependencies across the monorepo and refreshes their lockfile resolutions.
Changes:
- Updates React Query and Immer patch versions in affected apps.
- Updates jsdom across test-enabled workspaces.
- Updates vite-plugin-dts across library packages.
| File | Description |
|---|---|
pnpm-lock.yaml |
Refreshes dependency resolutions and transitive packages. |
packages/url-state-provider/package.json |
Updates jsdom and vite-plugin-dts. |
packages/ui-components/package.json |
Updates jsdom and vite-plugin-dts. |
packages/template/package.json |
Updates jsdom and vite-plugin-dts. |
packages/oauth/package.json |
Updates vite-plugin-dts. |
packages/messages-provider/package.json |
Updates vite-plugin-dts. |
packages/k8s-client/package.json |
Updates vite-plugin-dts. |
packages/greenhouse-auth-provider/package.json |
Updates vite-plugin-dts. |
packages/communicator/package.json |
Updates jsdom and vite-plugin-dts. |
apps/template/package.json |
Updates jsdom. |
apps/supernova/package.json |
Updates React Query, Immer, and jsdom. |
apps/heureka/package.json |
Updates React Query and jsdom. |
apps/greenhouse/package.json |
Updates React Query and Immer. |
apps/doop/package.json |
Updates React Query and jsdom. |
Files not reviewed (1)
- pnpm-lock.yaml: Generated file
🧠 Review effort: Balanced
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
|
checking!! |
b9b5679 to
f845172
Compare
f845172 to
aaaabd6
Compare
aaaabd6 to
eb60402
Compare
eb60402 to
867e414
Compare
867e414 to
6295818
Compare
1b7cff4 to
18adf95
Compare
18adf95 to
796521f
Compare
796521f to
9f6f0ed
Compare
9f6f0ed to
1756157
Compare
1756157 to
e0aed33
Compare
e0aed33 to
ebcc6c1
Compare
ebcc6c1 to
adae87b
Compare
adae87b to
05f1013
Compare
05f1013 to
59f6344
Compare
59f6344 to
63d76de
Compare

Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
4.3.1→4.3.46.43.13→6.43.147.4.3→7.4.66.1.0→6.1.26.1.9→6.1.1010.6.1→10.6.210.6.1→10.6.210.6.1→10.6.25.104.1→5.104.31.170.41→1.170.451.168.42→1.168.4714.6.7→14.6.824.19.1→24.19.25.5.6→5.5.710.6.1→10.6.25.4.2→5.4.330.1.2→30.1.33.9.9→3.9.1019.3.0→19.3.119.3.0→19.3.110.6.1→10.6.28.71.1→8.71.28.3.3→8.3.45.0.3→5.0.54.6.5→4.6.7Release Notes
apollographql/apollo-client (@apollo/client)
v4.3.4Compare Source
Patch Changes
#13497
41d604cThanks @jerelmiller! - Fix an issue where a list field selected more than once with different selection sets lost the fields that only one of the selections included while a@deferboundary elsewhere in the query was still pending when using theGraphQL17Alpha9Handler. The results of all selections of the list field are now merged.#13457
22746bbThanks @phryneas! - Fixed a bug wherestreamFieldInfomight not have been passed into custom merge functions for@streamdirectives that had an aliased field in the path.#13457
22746bbThanks @phryneas! - FixMissing fielderrors being logged when writing@deferresults where a parent field is selected both inside and outside of a deferred fragment. Fields whose@deferboundary has not been delivered from the network are no longer reported as missing.#13453
9bb3a41Thanks @wassim-k! - Unregister the watch when an immediatecache.watchbroadcast throws. Previously the watch was added to the cache before its first read, and a read that threw left the watch registered while the caller never received the unsubscribe function, so it could not be removed and every later broadcast ran into the same failing read.#13457
22746bbThanks @phryneas! -Defer20220824Handler: fix a situation wheredataStatewould show up ascompletedwith incremental errors instead of stayingstreaming.v4.3.3Compare Source
Patch Changes
0ab2579Thanks @phryneas! - Fix a memory leak inisDeferredFragment/isStreamFieldv4.3.2Compare Source
Patch Changes
7786771Thanks @SSpirate11! - Fix an unhandledAbortErrorpromise rejection that occurred when unsubscribing from a multipart HTTP subscription.dotansimha/graphql-code-generator (@graphql-codegen/cli)
v7.4.6Compare Source
Patch Changes
#10985
d8aa07fThanks @eddeee888! - Build with
strict: true, which changesthese emitted type declarations:
@graphql-codegen/cli:mkdirpreturnsPromise<string | undefined>, and therequire(-r)CLI option's
defaultis typednever[]instead ofany[].@graphql-codegen/visitor-plugin-common:BaseResolversVisitorandBaseTypesVisitorSchemaDefinition()/SchemaExtension()returnnullinstead ofany.@graphql-codegen/visitor-plugin-common:BaseSelectionSetProcessor.typeCacheis keyed byLocation | undefined.@graphql-codegen/visitor-plugin-common:SelectionSetToObject.buildSelectionSetreturnstypeInfoas{ name: string; type: string } | null.@graphql-codegen/visitor-plugin-common:getPossibleTypesacceptsnullas the type, whichgraphql 15's
schema.getType()can return.@graphql-codegen/visitor-plugin-common:removeDescriptionreturns nodes withdescription: undefinedinstead ofany.@graphql-codegen/typescript:TsIntrospectionVisitor's constructor takespluginConfigasTypeScriptPluginConfig | undefined,DirectiveDefinition()returnsnullandObjectTypeDefinition()returnsstring | null.@graphql-codegen/client-preset: the babel preset acceptsoptionsasClientBabelPresetOptions | null | undefined.@graphql-codegen/testing:mockGraphQLServerreturnsnock.Scope | null.@graphql-codegen/graphql-modules-preset: a schema withoutextensions(graphql 15) throws the"requires to use GraphQL SDL" error instead of a
TypeError.Generated output is unchanged.
Updated dependencies
[
d8aa07f]:v7.4.5Compare Source
Patch Changes
#11043
31761f9Thanks @eddeee888! - dependencies updates:
@graphql-tools/apollo-engine-loader@^8.0.38↗︎(from
^8.0.28, independencies)@graphql-tools/code-file-loader@^8.1.41↗︎(from
^8.1.39, independencies)@graphql-tools/git-loader@^8.0.44↗︎(from
^8.0.32, independencies)@graphql-tools/github-loader@^9.1.11↗︎(from
^9.0.6, independencies)@graphql-tools/graphql-file-loader@^8.1.22↗︎(from
^8.1.11, independencies)@graphql-tools/json-file-loader@^8.0.36↗︎(from
^8.0.26, independencies)@graphql-tools/load@^8.1.19↗︎(from
^8.1.8, independencies)@graphql-tools/merge@^9.2.6↗︎(from
^9.2.4, independencies)@graphql-tools/url-loader@^9.1.12↗︎(from
^9.0.6, independencies)@graphql-tools/utils@^12.0.3↗︎(from
^11.2.0, independencies)graphql-config@^5.1.8↗︎ (from^5.1.6, independencies)#11043
31761f9Thanks @eddeee888! - Update
@graphql-tools/utilsto v12, andother
@graphql-tools/*dependencies andgraphql-configto releases that use it, to pick up thefix for GHSA-7mx3-vvmw-hjmv (prototype
pollution in
mergeDeep,@graphql-tools/utils<= 12.0.0).@graphql-codegen/clinow unwraps theAggregateErrorthat newer@graphql-tools/loadversionsthrow, so schema and document syntax errors still print the native
GraphQLErrorwith its filelocation.
Updated dependencies
[
31761f9,31761f9,31761f9,31761f9]:v7.4.4Compare Source
Patch Changes
#11025
43d0f65Thanks @BuddhaBing! - Widen
Types.SchemaWithLoaderOptions['loader']to accept a custom loader function(
CustomSchemaLoaderFn) in addition to a path string.A per-entry
schemacustom loader ({ '<pointer>': { loader, ...options } }) is resolved by@graphql-tools/load'suseCustomLoader, which already accepts either a path string (resolvedvia
require()) or a function value at runtime (typeof loaderPointer === 'function'). Only theTypeScript type restricted
loadertostring, forcing consumers who pass an imported loaderfunction (or a class instance exposing a bound
loaderproperty) to cast theschemaarray tobypass the type error, even though it worked correctly at runtime.
This is additive and backward compatible —
loader: stringcontinues to type-check exactly asbefore.
Also fixes a schema-cache collision for function loaders in
@graphql-codegen/cli: the cache keyis
JSON.stringify(schemaPointerMap), andJSON.stringifydrops functions, so twogeneratestargets using different loader functions for the same pointer
(
{ 'schema.graphql': { loader: fnA } }vs{ loader: fnB }) both keyed as{"schema.graphql":{}}and the second silently reused the first's schema. Function values are nowkeyed by object identity (via the existing
getJsObjectId), so distinct loaders load separatelywhile one function reused across targets still loads once.
#11020
82ebbb5Thanks @eddeee888! - Fix type errors in
cliunderstrict: true:@graphql-codegen/cli:loadCodegenConfigreturnsPromise<LoadCodegenConfigResult | null>,matching the
nullit resolves to when no config file is found.YamlCliFlagsincludes thekebab-case
ignore-no-documents,emit-legacy-common-js-importsandimport-extensionflagsthat the CLI reads.
CodegenContext.filepathis optional, and watch mode only watches theconfig file when the context has a
filepath.CodegenContext.getConfig()without an argumentreturns
Types.Config, andgetConfig(extraConfig)returnsT & Types.Config.CodegenContext.checkModeStaleFilesis typed asstring[]. Adds@types/yargs,@types/babel__generatorand@types/babel__templateas dev dependencies.@graphql-codegen/plugin-helpers:normalizeInstanceOrArrayandnormalizeConfigacceptnullandundefined, returning[].Generated output is unchanged.
Updated dependencies
[
43d0f65,82ebbb5,e972b6d,eae0e62,1f7566f]:dotansimha/graphql-code-generator (@graphql-codegen/typescript)
v6.1.2Compare Source
Patch Changes
#10985
d8aa07fThanks @eddeee888! - Build with
strict: true, which changesthese emitted type declarations:
@graphql-codegen/cli:mkdirpreturnsPromise<string | undefined>, and therequire(-r)CLI option's
defaultis typednever[]instead ofany[].@graphql-codegen/visitor-plugin-common:BaseResolversVisitorandBaseTypesVisitorSchemaDefinition()/SchemaExtension()returnnullinstead ofany.@graphql-codegen/visitor-plugin-common:BaseSelectionSetProcessor.typeCacheis keyed byLocation | undefined.@graphql-codegen/visitor-plugin-common:SelectionSetToObject.buildSelectionSetreturnstypeInfoas{ name: string; type: string } | null.@graphql-codegen/visitor-plugin-common:getPossibleTypesacceptsnullas the type, whichgraphql 15's
schema.getType()can return.@graphql-codegen/visitor-plugin-common:removeDescriptionreturns nodes withdescription: undefinedinstead ofany.@graphql-codegen/typescript:TsIntrospectionVisitor's constructor takespluginConfigasTypeScriptPluginConfig | undefined,DirectiveDefinition()returnsnullandObjectTypeDefinition()returnsstring | null.@graphql-codegen/client-preset: the babel preset acceptsoptionsasClientBabelPresetOptions | null | undefined.@graphql-codegen/testing:mockGraphQLServerreturnsnock.Scope | null.@graphql-codegen/graphql-modules-preset: a schema withoutextensions(graphql 15) throws the"requires to use GraphQL SDL" error instead of a
TypeError.Generated output is unchanged.
Updated dependencies
[
d8aa07f,5078faf]:v6.1.1Compare Source
Patch Changes
#11019
eae0e62Thanks @eddeee888! - Fix type errors in
plugin-helpersunderstrict: true:@graphql-codegen/plugin-helpers:ProfilerEvent.catis optional, matching the Trace Eventformat and
Profiler.run's optionalcat.FederationMeta's reference selection sets aretyped recursively (
{ [field: string]: true | ReferenceSelectionSet }), matching the nestedselections
@key/@requires/@providesproduce.oldVisit'svisitorparam is typed asOldVisitor:enterandleavemaps keyed by AST node kind, whose callbacks receive the typednode plus graphql's
key,parent,pathandancestors. Federation directives missing theirfieldsargument, and operations whose root type is missing from the schema, throw adescriptive error.
@graphql-codegen/typescriptand@graphql-codegen/typescript-operations: theInputValueDefinitionvisitor methods takepathandancestorsas required params, since thevisitor always passes them.
Generated output is unchanged.
#11014
7a376efThanks @eddeee888! - Fix type errors in
typescriptunderstrict: trueby typing the shared visitor methods it overrides:@graphql-codegen/visitor-plugin-common: addsNormalizedDeclarationKindConfig(everydeclaration kind set), used by
normalizeDeclarationKind,DEFAULT_DECLARATION_KINDSandParsedTypesConfig.declarationKind.BaseTypesVisitor'sNamedType,ListType,FieldDefinition,InputValueDefinitionandUnionTypeDefinitionhave typed visitor params(
keyandparentare required, since the visitor always passes them), andObjectTypeDefinition,EnumTypeDefinitionandDirectiveDefinitionmay returnnull.@graphql-codegen/typescript: skips document files without adocumentwhen collectingintrospection types, types the
TsVisitorvisitor params, andTsVisitor.EnumTypeDefinitionmay return
nulllike the introspection visitor's override.Generated output is unchanged.
Updated dependencies
[
43d0f65,82ebbb5,eae0e62,1f7566f,7a376ef,3caccd3,ccc0d5c]:dotansimha/graphql-code-generator (@graphql-codegen/typescript-operations)
v6.1.10Compare Source
Patch Changes
#11019
eae0e62Thanks @eddeee888! - Fix type errors in
plugin-helpersunderstrict: true:@graphql-codegen/plugin-helpers:ProfilerEvent.catis optional, matching the Trace Eventformat and
Profiler.run's optionalcat.FederationMeta's reference selection sets aretyped recursively (
{ [field: string]: true | ReferenceSelectionSet }), matching the nestedselections
@key/@requires/@providesproduce.oldVisit'svisitorparam is typed asOldVisitor:enterandleavemaps keyed by AST node kind, whose callbacks receive the typednode plus graphql's
key,parent,pathandancestors. Federation directives missing theirfieldsargument, and operations whose root type is missing from the schema, throw adescriptive error.
@graphql-codegen/typescriptand@graphql-codegen/typescript-operations: theInputValueDefinitionvisitor methods takepathandancestorsas required params, since thevisitor always passes them.
Generated output is unchanged.
#11009
1f7566fThanks @eddeee888! - Fix type errors in
typescript-operationsunder
strict: trueby widening the shared types it calls into:@graphql-codegen/plugin-helpers:Types.ComplexPluginOutput'sprependandappendnowaccept
nullitems. Core already skipped them.@graphql-codegen/visitor-plugin-common:DeclarationBlock.withCommentacceptsundefined,parseEnumValues'smapOrStris optional (it already defaulted to{}),ImportSource.namespaceacceptsnull, andoptimizeOperations'sincludeFragmentsisoptional.
@graphql-codegen/typescript-operations: skips document files without adocument, and nolonger throws when called without the plugin info argument.
Generated output is unchanged.
Updated dependencies
[
43d0f65,82ebbb5,eae0e62,1f7566f,7a376ef,3caccd3,ccc0d5c]:storybookjs/storybook (@storybook/addon-docs)
v10.6.2Compare Source
TanStack/query (@tanstack/react-query)
v5.104.3Compare Source
Patch Changes
0f15bc9]:v5.104.2Compare Source
Patch Changes
03e8c39]:TanStack/router (@tanstack/react-router)
v1.170.45Compare Source
Patch Changes
18154b1]:v1.170.44Compare Source
Patch Changes
d6ba115]:v1.170.43Compare Source
Patch Changes
94d6d8e]:v1.170.42Compare Source
Patch Changes
#8594
2413cc0- reduce component nesting per route match#8602
efc2042- Links of a route that the pending navigation leaves skip deriving the destination location, and clicks and preloads follow the href a Link displays.buildLocationnow buildsmaskandrouteMaskslocations from the same_fromLocationas the destination.#8602
efc2042- Fixed Link destinations that resolve to a route mask are now reused across navigations instead of being rebuilt every time. A mounted Link now follows changes to itshrefandreloadDocumentprops, and React Links no longer each subscribe to a hydration flag.#8579
d35aab4- Cancel pending link preload timers when starting navigation to avoid redundant preloading while the destination is loading.Updated dependencies [
dfe3dea,dfe3dea,dfe3dea,efc2042,efc2042,dfe3dea,663282b]:TanStack/router (@tanstack/router-plugin)
v1.168.47Compare Source
Patch Changes
18154b1]:v1.168.46Compare Source
Patch Changes
923d98b]:v1.168.45Compare Source
Patch Changes
d6ba115]:v1.168.44Compare Source
Patch Changes
#8655
e66da18- Remove redundant string excludes from the reference code-splitter transform filter to avoid unnecessary glob compilation in unplugin bundler adapters.Updated dependencies [
57bd1a9,94d6d8e]:v1.168.43Compare Source
Patch Changes
dfe3dea,2413cc0,efc2042,efc2042,dfe3dea,d35aab4,663282b]:testing-library/user-event (@testing-library/user-event)
v14.6.8Compare Source
Bug Fixes
prettier/eslint-plugin-prettier (eslint-plugin-prettier)
v5.5.7Compare Source
Patch Changes
#796
7e53ecdThanks @OskarEichler! - Fix fallback diagnostic locations for all supported line endings.#805
1b7c433Thanks @JounQin! - Report a clear error when the sync worker fails to load, so a missingprettierdependency now fails fast withCannot find package 'prettier'instead of hanging ESLint indefinitely.nodeca/js-yaml (js-yaml)
v5.4.3Compare Source
Fixed
line, #802.
jsdom/jsdom (jsdom)
v30.1.3Compare Source
getComputedStyle()and computed CSS property reads, including with stylesheets containing attribute selectors. (@scttcper, @asamuzaK)XMLHttpRequestreusing credentials supplied toxhr.open()after cross-origin redirects, including in response to authentication challenges from the destination.XMLHttpRequestincorrectly sending and accepting cookies after cross-origin redirects back to the document's origin whenxhr.withCredentialsis false.calc(0px - @submenu_space), while parsing documents, stylesheets, and style declarations. (@rnavarro)getComputedStyle()ignoring style rules nested inside multiple@mediarules.getComputedStyle()returning unresolved or inconsistent shorthand values, including for 'background', 'border', 'flex', 'font', 'margin', and 'padding', and incorrect shorthand defaults and inheritance.color-mix()results, which regressed in v29.0.2.currentcolorborder colors incorrectly becoming transparent when 'color' useslight-dark()or relative color syntax.[data-a|=""]failing to match empty values and values beginning with-. (@asamuzaK)prettier/prettier (prettier)
v3.9.10Compare Source
diff
Markdown: Update
micromark-extension-gfm-tableto fix the table parse issue on performance (#20266 by @fisker)See micromark/micromark-extension-gfm-table@
4f43eadfor details.react/react (react)
v19.3.1: 19.3.1 (October 14th, 2026)Compare Source
React Server Components
typescript-eslint/typescript-eslint (typescript-eslint)
v8.71.2Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
vitejs/vite (vite)
v8.3.4Compare Source
Features
import.meta.hot.acceptExports(#23463) (bc0f21c)Bug Fixes
/@vite/clientand stub@vite/env(#23664) (5afc5a8)Configuration
📅 Schedule: (in timezone Europe/Berlin)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.