chore(deps): bump @apollo/client from 3.13.8 to 4.2.10

[dependabot]

Bumps @apollo/client from 3.13.8 to 4.2.10.

Release notes

Sourced from @​apollo/client's releases.

@​apollo/client@​4.2.10

Patch Changes

• #13385 bfb674e Thanks @​jerelmiller! - Fix accidental widening of the client.mutate return type when optimisticResponse was present.

• #13382 365373e Thanks @​jerelmiller! - Fix result types widened when a query's variables had constant types (e.g. TypedDocumentNode<Data, { type: "main" }>). This caused options such as returnPartialData or errorPolicy to be reported as their widened types (e.g. boolean, ErrorPolicy) instead of the value that was passed which returned the wrong data and dataState types.

• #13382 365373e Thanks @​jerelmiller! - Fix issue where unknown options were permitted by TypeScript when passed alongside a valid option to APIs with modern signatures.

• #13383 5840f50 Thanks @​jerelmiller! - Update the return type of refetch, fetchMore and useLazyQuery's execute function on the provided errorPolicy. Previously these APIs all used the default type which typed data as TData | undefined and error as ErrorLike | undefined.

@​apollo/client@​4.2.9

Patch Changes

• #13364 2f383e7 Thanks @​atharv-sys32! - Fix a bug where GraphQL variable default values were not applied during cache reads when variables with defaults were explicitly set to undefined. This caused @include/@skip directives to throw "Invalid variable referenced" errors when the variable was passed as undefined instead of being omitted entirely.

• #13367 2b39cc8 Thanks @​jerelmiller! - Fix an issue where some @export queries would not react to cache updates when the fields keyed by exported variables were updated.

@​apollo/client@​4.2.8

Patch Changes

• #13349 501a33b Thanks @​jerelmiller! - Prevent the setTimeout in connectToDevtools that shows the devtools suggestion from firing when the user agent does not match Chrome or Firefox. This check was previously done inside the setTimeout which meant the timer was scheduled for environments where we'd never show the message anyways. For test environments, this could cause flaky tests when that setTimeout outlived the tests and ran after any virtual DOM was torn down and removed.

@​apollo/client@​4.2.7

Patch Changes

• #13320 538c906 Thanks @​jerelmiller! - Cleanup some unused internals. Please file an issue if you notice anything change.

@​apollo/client@​4.2.6

Patch Changes

• #13315 a406cc9 Thanks @​fallintoplace! - Prevent relay multipart subscriptions from issuing a fetch request after serializing the request body fails.

• #13307 abd0781 Thanks @​wolfie! - Speed up cache writes by avoiding a full AST visit of every written field to detect @stream. The check now runs only when the result carries stream info, and only inspects the field node's own directives. As a result, fields that merely contain @stream on a nested field are no longer treated as streamed themselves and now overwrite existing lists like regular fields instead of merging chunk-wise.

@​apollo/client@​4.2.5

Patch Changes

• #13302 bb75dd3 Thanks @​tpict! - Export KeyArgsFunction and RelayFieldPolicy types from public entrypoints.

@​apollo/client@​4.2.4

Patch Changes

• #13281 e4df809 Thanks @​jerelmiller! - Fixes an issue where client.readFragment and client.readQuery ignored the optimistic option when passed in the options object.

@​apollo/client@​4.2.3

Patch Changes

• #13254 66e9dfc Thanks @​jerelmiller! - Add support for graphql v17 as a valid peer dependency.

... (truncated)

Changelog

Sourced from @​apollo/client's changelog.

4.2.10

Patch Changes

• #13385 bfb674e Thanks @​jerelmiller! - Fix accidental widening of the client.mutate return type when optimisticResponse was present.

• #13382 365373e Thanks @​jerelmiller! - Fix result types widened when a query's variables had constant types (e.g. TypedDocumentNode<Data, { type: "main" }>). This caused options such as returnPartialData or errorPolicy to be reported as their widened types (e.g. boolean, ErrorPolicy) instead of the value that was passed which returned the wrong data and dataState types.

• #13382 365373e Thanks @​jerelmiller! - Fix issue where unknown options were permitted by TypeScript when passed alongside a valid option to APIs with modern signatures.

• #13383 5840f50 Thanks @​jerelmiller! - Update the return type of refetch, fetchMore and useLazyQuery's execute function on the provided errorPolicy. Previously these APIs all used the default type which typed data as TData | undefined and error as ErrorLike | undefined.

4.2.9

Patch Changes

• #13364 2f383e7 Thanks @​atharv-sys32! - Fix a bug where GraphQL variable default values were not applied during cache reads when variables with defaults were explicitly set to undefined. This caused @include/@skip directives to throw "Invalid variable referenced" errors when the variable was passed as undefined instead of being omitted entirely.

• #13367 2b39cc8 Thanks @​jerelmiller! - Fix an issue where some @export queries would not react to cache updates when the fields keyed by exported variables were updated.

4.2.8

Patch Changes

• #13349 501a33b Thanks @​jerelmiller! - Prevent the setTimeout in connectToDevtools that shows the devtools suggestion from firing when the user agent does not match Chrome or Firefox. This check was previously done inside the setTimeout which meant the timer was scheduled for environments where we'd never show the message anyways. For test environments, this could cause flaky tests when that setTimeout outlived the tests and ran after any virtual DOM was torn down and removed.

4.2.7

Patch Changes

• #13320 538c906 Thanks @​jerelmiller! - Cleanup some unused internals. Please file an issue if you notice anything change.

4.2.6

Patch Changes

• #13315 a406cc9 Thanks @​fallintoplace! - Prevent relay multipart subscriptions from issuing a fetch request after serializing the request body fails.

• #13307 abd0781 Thanks @​wolfie! - Speed up cache writes by avoiding a full AST visit of every written field to detect @stream. The check now runs only when the result carries stream info, and only inspects the field node's own directives. As a result, fields that merely contain @stream on a nested field are no longer treated as streamed themselves and now overwrite existing lists like regular fields instead of merging chunk-wise.

4.2.5

Patch Changes

• #13302 bb75dd3 Thanks @​tpict! - Export KeyArgsFunction and RelayFieldPolicy types from public entrypoints.

4.2.4

Patch Changes

... (truncated)

Commits

• 4947447 Version Packages (#13389)
• bfb674e Fix client.mutate return type when optimisticResponse is provided (#13385)
• 5840f50 Update return types for refetch, fetchMore and useLazyQuery execute o...
• 365373e Fix widening of default options types when variables contain constant types (...
• 359f3e6 Add unique-names anchor to fragments docs (#13365)
• db42896 Add AI contribution guidelines (#13369)
• e8b8ff0 Version Packages (#13370)
• 2b39cc8 Fix issue where changes to @export fields did not trigger updates (#13367)
• 2f383e7 fix: apply query variable defaults when undefined is passed explicitly (#13364)
• 8518419 chore(deps): update zizmorcore/zizmor-action action to v0.6.0 (#13356)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​apollo/client since your current version.

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
@apollo/client	[>= 3.8.a, < 3.9]

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[mozilla-blender]

Reviewing this major version bump. Workflow run

[mozilla-blender]

Note: This PR has failing CircleCI checks.
BLEnder cannot access CircleCI log output, so it
may not be able to diagnose or fix the failure.
Consider migrating CI to GitHub Actions so BLEnder
can read failure logs directly.

[mozilla-blender]

BLEnder picked up this PR. Workflow run

[mozilla-blender]

BLEnder could not fix this PR automatically. Workflow run

[mozilla-blender]

NEEDS_REVIEW: this major version bump needs code-owner review

Confidence: medium
Reason: CI is failing on this PR (ci/circleci: Build (PR), Build Storybooks, and test_pull_request all failed) and the failures are not explained by anything unrelated to this bump, so it cannot be auto-merged. Apollo usage in the repo is very small (only libs/shared/cms, 9 files) because GraphQL was removed from fxa-settings (docs/adr/0047), but the remaining usage imports getOperationName from the '@apollo/client/utilities' subpath, and v4 reorganized entry points/export surfaces. That is a runtime (non-type) import in 5 files, so a resolution change fails at load, not just typecheck. Given failing CI plus a subpath import into a reorganized entry point, this needs a human to confirm resolution and fix the build.

Breaking changes: Major 3.x -> 4.x: entry point / subpath reorganization (e.g. '@apollo/client/utilities', '@apollo/client/react', '@apollo/client/link/*'); export surface of utility helpers changed; v4 removes/reshapes the ApolloError class in favor of ErrorLike-based error types; v4 removes useQuery onCompleted/onError callbacks and reworks hook result/status types; v4 reworks the testing entry point (MockedProvider / addTypename semantics); 4.2.x patch releases changed result and option typing: refetch/fetchMore/useLazyQuery execute return types now depend on errorPolicy; unknown options are now rejected by TypeScript; client.mutate return type narrowed when optimisticResponse is present; graphql v17 added as a valid peer dependency (peer range changed); Cache write behavior changed for @stream: fields containing @stream on a nested field now overwrite lists instead of merging chunk-wise
Affected code: libs/shared/cms/src/lib/default-configuration.manager.ts - getOperationName from @apollo/client/utilities; libs/shared/cms/src/lib/legal-terms-configuration.manager.ts - getOperationName from @apollo/client/utilities; libs/shared/cms/src/lib/metering-configuration.manager.ts - getOperationName from @apollo/client/utilities; libs/shared/cms/src/lib/product-configuration.manager.ts - getOperationName from @apollo/client/utilities; libs/shared/cms/src/lib/relying-party-configuration.manager.ts - getOperationName from @apollo/client/utilities; libs/shared/cms/src/lib/strapi.client.ts - type-only OperationVariables from @apollo/client; libs/shared/cms/src/lib/util.ts - type-only OperationVariables and TypedDocumentNode from @apollo/client; libs/shared/cms/src/lib/metering-configuration.manager.spec.ts - jest.mock('@apollo/client/utilities'); libs/shared/cms/src/lib/relying-party-configuration.manager.spec.ts - jest.mock('@apollo/client/utilities')
Test coverage: Thin and partly blind. The only Apollo-exercising tests are the two libs/shared/cms specs, and both jest.mock('@apollo/client/utilities') with a stub getOperationName - so they would still pass even if the real subpath export moved or disappeared in v4. The three non-mocked manager files (default-, legal-terms-, product-configuration.manager.ts) rely on the real import resolving. No MockedProvider, no Apollo hooks, no client instances anywhere in the repo; fxa-settings uses a local makeVar/useReactiveVar shim (packages/fxa-settings/src/lib/reactive-var.ts) rather than Apollo. Net: the blast radius is small, but the existing tests cannot confirm the v4 import surface, and CI build/test jobs are currently red.

[dependabot]

Dependabot can't resolve your JavaScript dependency files. Because of this, Dependabot cannot update this pull request.

[dependabot]

Dependabot can't resolve your JavaScript dependency files. Because of this, Dependabot cannot update this pull request.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.