Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Apr 7, 2025

This PR contains the following updates:

Package Change Age Confidence Type Update
@apollo/server (source) 4.11.3 -> 4.12.2 age confidence dependencies minor
@apollo/subgraph (source) 2.10.0 -> 2.12.1 age confidence dependencies minor
@graphql-hive/cli (source) 0.49.1 -> 0.56.0 age confidence dependencies minor
@graphql-hive/cli (source) ^0.49.0 -> ^0.56.0 age confidence devDependencies minor
@graphql-hive/gateway (source) 1.13.5 -> 1.16.5 age confidence dependencies minor
@graphql-mesh/hmac-upstream-signature (source) 1.2.26 -> 1.2.32 age confidence dependencies patch
@graphql-mesh/plugin-jwt-auth (source) 1.5.2 -> 1.5.10 age confidence dependencies patch
@theguild/federation-composition ^0.18.0 -> ^0.21.0 age confidence dependencies minor
@types/ioredis-mock (source) 8.2.5 -> 8.2.6 age confidence dependencies patch
@types/node (source) 22.14.0 -> 22.19.1 age confidence devDependencies minor
@whatwg-node/fetch (source) 0.10.5 -> 0.10.13 age confidence dependencies patch
@whatwg-node/server (source) 0.10.3 -> 0.10.17 age confidence dependencies patch
ghcr.io/graphql-hive/gateway 1.13.5 -> 1.16.5 age confidence minor
grafana/grafana 10.4.17 -> 10.4.19 age confidence patch
graphql 16.10.0 -> 16.12.0 age confidence dependencies minor
graphql 16.10.0 -> 16.12.0 age confidence devDependencies minor
graphql 16.10.0 -> 16.12.0 age confidence resolutions minor
graphql-yoga (source) 5.13.2 -> 5.17.1 age confidence dependencies minor
jaegertracing/all-in-one 1.68.0 -> 1.75.0 age confidence minor
node 22.14.0-slim -> 22.21.1-slim age confidence final minor
tsx (source) 4.19.3 -> 4.21.0 age confidence devDependencies minor
typescript (source) 5.8.3 -> 5.9.3 age confidence devDependencies minor

Release Notes

apollographql/apollo-server (@​apollo/server)

v4.12.2

Compare Source

(No change; there is a change to the @apollo/server-integration-testsuite used to test integrations, and the two packages always have matching versions.)

v4.12.1

Compare Source

Patch Changes

v4.12.0

Compare Source

Minor Changes
  • #​8054 89e3f84 Thanks @​clenfest! - Adds a new graphql-js validation rule to reject operations that recursively request selections above a specified maximum, which is disabled by default. Use configuration option maxRecursiveSelections=true to enable with a maximum of 10,000,000, or maxRecursiveSelections=<number> for a custom maximum. Enabling this validation can help avoid performance issues with configured validation rules or plugins.
Patch Changes
apollographql/federation (@​apollo/subgraph)

v2.12.1

Compare Source

Patch Changes

v2.12.0

Compare Source

Minor Changes
  • Federation 2.12 and Connect 0.3 (#​3276)
Patch Changes

v2.11.5

Compare Source

Patch Changes

v2.11.4

Compare Source

Patch Changes

v2.11.3

Compare Source

Patch Changes

v2.11.2

Compare Source

Patch Changes

v2.11.1

Compare Source

Patch Changes

v2.11.0

Compare Source

Minor Changes
  • Adds connect spec v0.2, available for use with Apollo Router 2.3.0 or greater. (#​3262)
Patch Changes

v2.10.4

Compare Source

Patch Changes

v2.10.3

Compare Source

Patch Changes

v2.10.2

Compare Source

Patch Changes

v2.10.1

Compare Source

Patch Changes
graphql-hive/platform (@​graphql-hive/cli)

v0.56.0

Minor Changes
  • #​7346
    f266368
    Thanks @​n1ru4l! - Upgrade graphql-inspector/core to v7 and update the
    models to be able to handle the new change objects. GraphQL Inspector now supports directive
    changes and improves the accuracy of the severity level for several change types. This will
    improve schema checks to make them more accurate and more complete. See graphql-inspector's
    changelog for details.
Patch Changes

v0.55.1

Patch Changes

v0.55.0

Minor Changes
  • #​7267
    114cd80
    Thanks @​jdolle! - Upgrade graphql-inspector/core to v7 and update the
    models to be able to handle the new change objects. GraphQL Inspector now supports directive
    changes and improves the accuracy of the severity level for several change types. This will
    improve schema checks to make them more accurate and more complete. See graphql-inspector's
    changelog for details.
Patch Changes

v0.54.0

Compare Source

Minor Changes
  • #​7306
    29de664
    Thanks @​kamilkisiela! - Updated federation-composition to
    v0.21.0

    • Enhanced auth directive validation: The federation-composition now enforces correct
      placement of auth directives (@authenticated, @requiresScopes, @policy) by rejecting
      attempts to place them on interfaces, interface fields, or interface objects with the new
      AUTH_REQUIREMENTS_APPLIED_ON_INTERFACE validation rule.
    • Transitive auth requirements checking: Added a new validation rule that ensures fields using
      @requires specify at least the auth requirements of the fields they select. If a field doesn't
      carry forward required auth directives, composition fails with a
      MISSING_TRANSITIVE_AUTH_REQUIREMENTS error.
    • Auth requirements inheritance: Interface types and fields now properly inherit
      @authenticated, @requiresScopes, and @policy directives from the object types that
      implement them.
    • @cost directive restrictions: The @cost directive can no longer be placed on interface
      types, their fields, or field arguments. Invalid placements now result in composition errors
      instead of being silently accepted.
    • Improved @listSize validation: The directive now validates that sizedFields point to
      actual list fields rather than integer counters. Additionally, slicingArguments validation has
      been added to ensure only arguments that exist in all subgraphs are retained.
    • Fixed EXTERNAL_MISSING_ON_BASE rule: Resolved false positives when handling
      @interfaceObject corner-cases, particularly for @external fields on object types provided by
      interface objects.

v0.53.5

Compare Source

Patch Changes

v0.53.4

Compare Source

Patch Changes

v0.53.3

Compare Source

Patch Changes

v0.53.2

Compare Source

Patch Changes

v0.53.1

Compare Source

Patch Changes

v0.53.0

Compare Source

Minor Changes
  • #​7206
    01963a0
    Thanks @​n1ru4l! - Improve output of the hive whoami command. It now
    also handles the new access token format.

v0.52.1

Compare Source

Patch Changes
  • #​7193
    543de17
    Thanks @​adambenhassen! - schema:check --forceSafe now
    properly approves breaking schema changes in Hive (requires write permission registry token)

v0.52.0

Compare Source

Minor Changes

v0.51.0

Compare Source

Minor Changes

v0.50.5

Compare Source

Patch Changes

v0.50.4

Compare Source

Patch Changes

v0.50.3

Compare Source

Patch Changes

v0.50.2

Compare Source

Patch Changes
  • #​6845
    114e7bc
    Thanks @​n1ru4l! - Update @theguild/federation-composition to
    0.19.0

    Increases federation composition compatibility.

    • Fix errors raised by @requires with union field selection set
    • Fix incorrectly raised IMPLEMENTED_BY_INACCESSIBLE error for inaccessible object fields where
      the object type is inaccessible.
    • Add support for @provides fragment selection sets on union type fields.
    • Fix issue where the satisfiability check raised an exception for fields that share different
      object type and interface definitions across subgraphs.
    • Fix issue where scalar type marked with @inaccessible does not fail the composition if all
      usages are not marked with @inaccessible.
    • Support composing executable directives from subgraphs into the supergraph

v0.50.1

Compare Source

Patch Changes

v0.50.0

Compare Source

Minor Changes
  • #​6658
    e6a970f
    Thanks @​n1ru4l! - Internal adjustments for using non-deprecated API
    fields.

  • #​6626
    2056307
    Thanks @​jdolle! - Show dangerous changes as a separate list in
    schema:check

  • #​6662
    2b220a5
    Thanks @​n1ru4l! - Support federation composition validation for
    IMPLEMENTED_BY_INACCESSIBLE.

  • #​6675
    ed66171
    Thanks @​kamilkisiela! - Updates the
    @theguild/federation-composition to v0.18.1 that includes the following changes:

    • Support progressive overrides (@override(label: "<value>"))
    • Allow to use @composeDirective on a built-in scalar (like @oneOf)
    • Performance improvements (lazy compute of errors), especially noticeable in large schemas (2s ->
      600ms)
    • Ensure nested key fields are marked as @shareable
    • Stop collecting paths when a leaf field was reached (performance improvement)
    • Avoid infinite loop when entity field returns itself
Patch Changes
graphql-hive/gateway (@​graphql-hive/gateway)

v1.16.5

Compare Source

Patch Changes

v1.16.4

Compare Source

Patch Changes

v1.16.3

Compare Source

Patch Changes

v1.16.2

Compare Source

Patch Changes

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Apr 7, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from b4dfba8 to a6a212c Compare April 15, 2025 19:02
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from d2fd601 to 3606b9b Compare April 29, 2025 07:04
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 7179506 to 7a6ea1b Compare May 7, 2025 00:01
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from a8a8ea1 to 0807c78 Compare May 14, 2025 08:44
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 0807c78 to 0029b7b Compare May 14, 2025 22:40
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 30634aa to a583de7 Compare October 22, 2025 17:48
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 7faeb00 to 0326007 Compare November 3, 2025 05:42
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 2f2cded to 2b59b67 Compare November 11, 2025 00:32
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 123ba68 to 153c626 Compare November 17, 2025 23:58
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from c47cd75 to ef92c16 Compare November 25, 2025 17:41
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 9ace905 to 5420fd3 Compare December 1, 2025 16:02
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 5420fd3 to 3db05a8 Compare December 2, 2025 02:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants