Skip to content

chore(deps-dev): bump graphql from 16.14.2 to 17.0.2 - #9328

Merged
tlhunter merged 2 commits into
masterfrom
dependabot/npm_and_yarn/graphql-17.0.2
Jul 22, 2026
Merged

chore(deps-dev): bump graphql from 16.14.2 to 17.0.2#9328
tlhunter merged 2 commits into
masterfrom
dependabot/npm_and_yarn/graphql-17.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 14, 2026

Copy link
Copy Markdown
Contributor

Bumps graphql from 16.14.2 to 17.0.2.

Release notes

Sourced from graphql's releases.

v17.0.2 (2026-07-03)

Bug Fix 🐞

Polish 💅

Committers: 2

v17.0.1 (2026-06-16)

Bug Fix 🐞

  • #4824 fix(diagnostics): emit asyncStart after promise settlement to match native tracePromise (@​logaretm)

Internal 🏠

Committers: 2

v17.0.0 (2026-06-15)

New Feature 🚀

Bug Fix 🐞

Docs 📝

... (truncated)

Commits
  • 71606d7 chore(release): v17.0.2
  • 101de34 fix: detect default-value changes on input object fields (#4832)
  • 82da713 fix(mapSchemaConfig): fix context for schema argument mapper (#4829)
  • 9617473 chore(release): v17.0.1
  • 851bd6a chore(release): protect latest release channels (#4825)
  • c471d36 fix(diagnostics): emit asyncStart after promise settlement to match native `t...
  • 3f3895f chore(npm): remove obsolete ESM-only package build (#4823)
  • c7e494a chore(release): v17.0.0
  • d977f66 docs: post 17.rc-0 update (#4817)
  • 39f865f docs: document @experimental_disableErrorPropagation (#4820)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependabot dependencies javascript Pull requests that update javascript code semver-patch labels Jul 14, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 14, 2026 12:43
@dependabot dependabot Bot added javascript Pull requests that update javascript code dependabot labels Jul 14, 2026
@dd-octo-sts

dd-octo-sts Bot commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

Overall package size

Self size: 7.49 MB
Deduped: 8.15 MB
No deduping: 8.15 MB

Dependency sizes | name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 3.3.2 | 124.41 kB | 440.65 kB | | opentracing | 0.14.7 | 194.81 kB | 194.81 kB | | dc-polyfill | 0.1.11 | 25.74 kB | 25.74 kB |

🤖 This report was automatically generated by heaviest-objects-in-the-universe

@datadog-datadog-prod-us1

datadog-datadog-prod-us1 Bot commented Jul 14, 2026

Copy link
Copy Markdown

Tests

🎉 All green!

🧪 All tests passed
❄️ No new flaky tests detected

🔄 Datadog retried 1 test - 1 passed on retry View in Datadog

🎯 Code Coverage (details)
Patch Coverage: 100.00%
Overall Coverage: 98.45% (+0.00%)

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 6241d3d | Docs | Datadog PR Page | Give us feedback!

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 18710b5c50

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread yarn.lock
Comment thread yarn.lock
@pr-commenter

pr-commenter Bot commented Jul 14, 2026

Copy link
Copy Markdown

Benchmarks

Benchmark execution time: 2026-07-22 22:25:07

Comparing candidate commit 6241d3d in PR branch dependabot/npm_and_yarn/graphql-17.0.2 with baseline commit 199f69c in branch master.

📊 Benchmarking dashboard

Found 1 performance improvements and 0 performance regressions! Performance is the same for 2323 metrics, 34 unstable metrics.

Explanation

This is an A/B test comparing a candidate commit's performance against that of a baseline commit. Performance changes are noted in the tables below as:

  • 🟩 = significantly better candidate vs. baseline
  • 🟥 = significantly worse candidate vs. baseline

We compute a confidence interval (CI) over the relative difference of means between metrics from the candidate and baseline commits, considering the baseline as the reference.

If the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD), the change is considered significant.

Feel free to reach out to #apm-benchmarking-platform on Slack if you have any questions.

More details about the CI and significant changes

You can imagine this CI as a range of values that is likely to contain the true difference of means between the candidate and baseline commits.

CIs of the difference of means are often centered around 0%, because often changes are not that big:

---------------------------------(------|---^--------)-------------------------------->
                              -0.6%    0%  0.3%     +1.2%
                                 |          |        |
         lower bound of the CI --'          |        |
sample mean (center of the CI) -------------'        |
         upper bound of the CI ----------------------'

As described above, a change is considered significant if the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD).

For instance, for an execution time metric, this confidence interval indicates a significantly worse performance:

----------------------------------------|---------|---(---------^---------)---------->
                                       0%        1%  1.3%      2.2%      3.1%
                                                  |   |         |         |
       significant impact threshold --------------'   |         |         |
                      lower bound of CI --------------'         |         |
       sample mean (center of the CI) --------------------------'         |
                      upper bound of CI ----------------------------------'

scenario:encoders-0.4-events-native-20

  • 🟩 max_rss_usage [-11.138MB; -3.236MB] or [-7.830%; -2.275%]

Unstable benchmarks

These benchmarks have a confidence interval too wide to call a change; treat them as noise rather than signal.

scenario:appsec-appsec-enabled-24

  • unstable execution_time [-206666.151µs; +206765.651µs] or [-7.750%; +7.754%]

scenario:appsec-appsec-enabled-26

  • unstable execution_time [-237.578ms; +241.248ms] or [-9.299%; +9.443%]

scenario:appsec-appsec-enabled-with-attacks-24

  • unstable execution_time [-170.397ms; +152.032ms] or [-5.504%; +4.911%]

scenario:appsec-appsec-enabled-with-attacks-26

  • unstable execution_time [-191.126ms; +181.820ms] or [-6.570%; +6.250%]

scenario:appsec-control-20

  • unstable execution_time [-104.075ms; +127.244ms] or [-6.407%; +7.833%]

scenario:appsec-control-24

  • unstable execution_time [-111230.618µs; +113001.318µs] or [-8.936%; +9.078%]

scenario:appsec-control-26

  • unstable execution_time [-128354.373µs; +127269.539µs] or [-10.295%; +10.208%]

scenario:appsec-iast-no-vulnerability-control-20

  • unstable execution_time [-12668.207µs; +13037.315µs] or [-5.055%; +5.202%]

scenario:appsec-iast-no-vulnerability-iast-enabled-default-config-20

  • unstable execution_time [-13.218ms; +17.503ms] or [-5.084%; +6.732%]

scenario:appsec-iast-with-vulnerability-iast-enabled-default-config-20

  • unstable execution_time [-26.567ms; +34.566ms] or [-4.860%; +6.323%]

scenario:child_process-shell-string-24

  • unstable execution_time [-20.547ms; +14.854ms] or [-6.307%; +4.560%]

scenario:debugger-line-probe-with-snapshot-default-26

  • unstable cpu_user_time [-3732.064ms; +3727.926ms] or [-36.208%; +36.168%]
  • unstable execution_time [-3902.876ms; +3956.810ms] or [-35.326%; +35.814%]
  • unstable instructions [-32615.0M instructions; +32553.7M instructions] or [-37.743%; +37.672%]
  • unstable max_rss_usage [-11852.951KB; +11646.551KB] or [-7.332%; +7.205%]
  • unstable throughput [-759.333op/s; +750.836op/s] or [-24.528%; +24.253%]

scenario:debugger-line-probe-with-snapshot-minimal-24

  • unstable cpu_user_time [-2753.964ms; +2811.968ms] or [-30.959%; +31.611%]
  • unstable execution_time [-2753.257ms; +2843.941ms] or [-28.609%; +29.551%]
  • unstable instructions [-23786.0M instructions; +23887.4M instructions] or [-32.683%; +32.823%]
  • unstable max_rss_usage [-11597.263KB; +10993.263KB] or [-7.261%; +6.882%]
  • unstable throughput [-759.219op/s; +720.139op/s] or [-21.739%; +20.620%]

scenario:debugger-line-probe-with-snapshot-minimal-26

  • unstable cpu_user_time [-2989.952ms; +3910.483ms] or [-30.385%; +39.740%]
  • unstable execution_time [-3126.331ms; +4045.996ms] or [-29.548%; +38.240%]
  • unstable instructions [-26.4G instructions; +34.6G instructions] or [-32.007%; +41.970%]
  • unstable max_rss_usage [-8.402MB; +12.759MB] or [-5.273%; +8.007%]
  • unstable throughput [-763.506op/s; +642.631op/s] or [-24.217%; +20.383%]

scenario:dogstatsd-with-tags-20

  • unstable cpu_user_time [-263.229ms; +351.857ms] or [-5.436%; +7.267%]
  • unstable execution_time [-264.484ms; +352.424ms] or [-5.374%; +7.161%]
  • unstable throughput [-125596.770op/s; +89970.015op/s] or [-7.368%; +5.278%]

scenario:plugin-graphql-long-with-depth-and-collapse-off-20

  • unstable max_rss_usage [-25.298MB; +44.743MB] or [-6.365%; +11.258%]

scenario:plugin-graphql-long-with-depth-off-20

  • unstable max_rss_usage [-7519.829KB; +5836.971KB] or [-5.825%; +4.522%]

scenario:plugin-graphql-long-with-depth-off-26

  • unstable max_rss_usage [-16.624MB; +33.015MB] or [-7.985%; +15.858%]

scenario:plugin-graphql-long-with-depth-on-max-20

  • unstable execution_time [-596.347ms; +575.544ms] or [-5.090%; +4.912%]
  • unstable throughput [-3.405op/s; +3.520op/s] or [-4.960%; +5.126%]

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/graphql-17.0.2 branch from 18710b5 to ad10975 Compare July 16, 2026 19:10
@tlhunter
tlhunter marked this pull request as draft July 22, 2026 21:37
@tlhunter tlhunter self-assigned this Jul 22, 2026
dependabot Bot and others added 2 commits July 22, 2026 15:10
Bumps [graphql](https://github.com/graphql/graphql-js) from 16.14.2 to 17.0.2.
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v16.14.2...v17.0.2)

---
updated-dependencies:
- dependency-name: graphql
  dependency-version: 17.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@tlhunter
tlhunter force-pushed the dependabot/npm_and_yarn/graphql-17.0.2 branch from 392f422 to 6241d3d Compare July 22, 2026 22:11
@tlhunter
tlhunter marked this pull request as ready for review July 22, 2026 22:27
@tlhunter
tlhunter requested a review from a team as a code owner July 22, 2026 22:27
@tlhunter
tlhunter requested review from tlhunter and removed request for a team July 22, 2026 22:27
@tlhunter
tlhunter enabled auto-merge (squash) July 22, 2026 22:27
@codecov

codecov Bot commented Jul 22, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.45%. Comparing base (199f69c) to head (6241d3d).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff            @@
##           master    #9328    +/-   ##
========================================
  Coverage   98.45%   98.45%            
========================================
  Files         943      943            
  Lines      127336   127336            
  Branches    10824    10948   +124     
========================================
  Hits       125365   125365            
  Misses       1971     1971            
Flag Coverage Δ
aiguard 57.88% <ø> (-0.03%) ⬇️
aiguard-integration 56.21% <ø> (ø)
apm-bucket-0 57.75% <ø> (-0.03%) ⬇️
apm-bucket-1 64.04% <ø> (-0.03%) ⬇️
apm-bucket-2 62.81% <ø> (-0.03%) ⬇️
apm-bucket-3 60.17% <ø> (-0.03%) ⬇️
apm-capabilities-tracing 64.50% <ø> (ø)
apm-integrations-aerospike 56.75% <ø> (-0.03%) ⬇️
apm-integrations-confluentinc-kafka-javascript 61.65% <ø> (-0.06%) ⬇️
apm-integrations-couchbase 57.19% <ø> (-0.03%) ⬇️
apm-integrations-http 62.82% <ø> (-0.03%) ⬇️
apm-integrations-kafkajs 62.24% <ø> (-0.03%) ⬇️
apm-integrations-next 59.29% <ø> (-0.03%) ⬇️
apm-integrations-prisma 58.76% <ø> (-0.03%) ⬇️
appsec 72.94% <ø> (-0.07%) ⬇️
appsec-express_fastify_graphql 70.44% <ø> (-0.02%) ⬇️
appsec-integration 51.43% <ø> (ø)
appsec-kafka_ldapjs_lodash 64.02% <ø> (-0.03%) ⬇️
appsec-mongodb-core_mongoose_mysql 67.74% <ø> (-0.02%) ⬇️
appsec-next 57.59% <ø> (-0.02%) ⬇️
appsec-node-serialize_passport_postgres 67.41% <ø> (-0.06%) ⬇️
appsec-sourcing_stripe_template 65.76% <ø> (-0.02%) ⬇️
debugger 64.94% <ø> (-0.03%) ⬇️
instrumentations-bucket-0 51.70% <ø> (-0.03%) ⬇️
instrumentations-bucket-1 60.28% <ø> (-0.03%) ⬇️
instrumentations-bucket-10 61.85% <ø> (-0.03%) ⬇️
instrumentations-bucket-11 56.77% <ø> (-0.03%) ⬇️
instrumentations-bucket-12 52.07% <ø> (-0.03%) ⬇️
instrumentations-bucket-13 52.09% <ø> (-0.03%) ⬇️
instrumentations-bucket-2 53.40% <ø> (-0.03%) ⬇️
instrumentations-bucket-3 53.69% <ø> (-0.03%) ⬇️
instrumentations-bucket-4 59.28% <ø> (-0.03%) ⬇️
instrumentations-bucket-5 50.11% <ø> (-0.03%) ⬇️
instrumentations-bucket-6 61.00% <ø> (-0.03%) ⬇️
instrumentations-bucket-7 58.44% <ø> (-0.03%) ⬇️
instrumentations-bucket-8 59.51% <ø> (-0.03%) ⬇️
instrumentations-bucket-9 52.09% <ø> (-0.03%) ⬇️
instrumentations-instrumentation-couchbase 51.15% <ø> (-0.03%) ⬇️
instrumentations-instrumentation-zlib 51.74% <ø> (-0.03%) ⬇️
instrumentations-integration-esbuild 34.14% <ø> (ø)
llmobs-ai_anthropic_bedrock 62.87% <ø> (-0.02%) ⬇️
llmobs-bucket-1 61.62% <ø> (-0.02%) ⬇️
llmobs-openai 62.79% <ø> (-0.03%) ⬇️
llmobs-sdk 66.25% <ø> (-0.03%) ⬇️
llmobs-vertex-ai 59.30% <ø> (-0.03%) ⬇️
master-coverage 98.45% <ø> (?)
openfeature 56.21% <ø> (ø)
openfeature-unit 53.51% <ø> (-0.03%) ⬇️
platform-core_esbuild_instrumentations-misc 40.46% <ø> (-0.02%) ⬇️
platform-integration 61.52% <ø> (ø)
platform-shimmer_unit-guardrails_webpack 39.15% <ø> (-0.02%) ⬇️
plugins-bucket-0 57.15% <ø> (-0.03%) ⬇️
plugins-bucket-1 54.46% <ø> (ø)
plugins-bucket-11 62.38% <ø> (-0.03%) ⬇️
plugins-bucket-18 62.07% <ø> (-0.03%) ⬇️
plugins-bucket-19 60.17% <ø> (-0.03%) ⬇️
plugins-bucket-20 62.17% <ø> (-0.03%) ⬇️
plugins-bucket-4 58.69% <ø> (-0.03%) ⬇️
plugins-bullmq_cassandra_cookie 61.86% <ø> (-0.03%) ⬇️
plugins-cookie-parser_crypto_dd-trace-api 56.85% <ø> (-0.03%) ⬇️
plugins-fetch_fs_generic-pool 58.89% <ø> (-0.03%) ⬇️
plugins-google-cloud-pubsub_grpc_handlebars 64.80% <ø> (-0.03%) ⬇️
plugins-hapi_hono_ioredis 60.34% <ø> (-0.03%) ⬇️
plugins-jest_knex_langgraph 55.71% <ø> (-0.03%) ⬇️
plugins-ldapjs_light-my-request_limitd-client 58.62% <ø> (-0.03%) ⬇️
plugins-lodash_mariadb_memcached 58.12% <ø> (-0.03%) ⬇️
plugins-moleculer_mongodb_mongodb-core 62.03% <ø> (-0.03%) ⬇️
plugins-mongoose_multer_mysql 59.13% <ø> (-0.03%) ⬇️
plugins-mysql2_nats_node-serialize 60.83% <ø> (-0.03%) ⬇️
plugins-opensearch_passport-http_pino 59.66% <ø> (-0.03%) ⬇️
plugins-postgres_process_pug 58.39% <ø> (-0.03%) ⬇️
plugins-redis_router_sequelize 62.16% <ø> (-0.03%) ⬇️
plugins-test-and-upstream-rhea_undici_url 61.74% <ø> (-0.03%) ⬇️
plugins-valkey_vm_winston 58.13% <ø> (-0.03%) ⬇️
plugins-ws 59.72% <ø> (-0.04%) ⬇️
profiling 62.25% <ø> (-0.03%) ⬇️
serverless-aws-sdk-aws-sdk 55.18% <ø> (-0.02%) ⬇️
serverless-aws-sdk-bedrockruntime 54.86% <ø> (-0.03%) ⬇️
serverless-aws-sdk-client 56.54% <ø> (-0.03%) ⬇️
serverless-aws-sdk-dynamodb 55.77% <ø> (-0.04%) ⬇️
serverless-aws-sdk-eventbridge 49.49% <ø> (-0.03%) ⬇️
serverless-aws-sdk-kinesis 59.45% <ø> (-0.03%) ⬇️
serverless-aws-sdk-lambda 57.50% <ø> (-0.03%) ⬇️
serverless-aws-sdk-s3 55.71% <ø> (-0.03%) ⬇️
serverless-aws-sdk-serverless-peer-service 59.85% <ø> (-0.03%) ⬇️
serverless-aws-sdk-sns 60.24% <ø> (-0.03%) ⬇️
serverless-aws-sdk-sqs 60.68% <ø> (-0.03%) ⬇️
serverless-aws-sdk-stepfunctions 55.69% <ø> (-0.03%) ⬇️
serverless-aws-sdk-util 51.59% <ø> (-0.03%) ⬇️
serverless-bucket-0 54.35% <ø> (-0.01%) ⬇️
serverless-bucket-1 59.37% <ø> (-0.03%) ⬇️
test-optimization-cucumber 71.87% <ø> (-0.07%) ⬇️
test-optimization-cypress 65.75% <ø> (+<0.01%) ⬆️
test-optimization-jest 73.33% <ø> (+<0.01%) ⬆️
test-optimization-mocha 73.51% <ø> (+0.04%) ⬆️
test-optimization-playwright-playwright-atr 60.40% <ø> (-0.02%) ⬇️
test-optimization-playwright-playwright-efd 60.74% <ø> (+0.14%) ⬆️
test-optimization-playwright-playwright-final-status 60.56% <ø> (-0.02%) ⬇️
test-optimization-playwright-playwright-impacted-tests 60.29% <ø> (+0.14%) ⬆️
test-optimization-playwright-playwright-reporting 61.57% <ø> (-0.13%) ⬇️
test-optimization-playwright-playwright-test-management 61.10% <ø> (-0.12%) ⬇️
test-optimization-playwright-playwright-test-span 60.50% <ø> (-0.09%) ⬇️
test-optimization-selenium 60.04% <ø> (-0.17%) ⬇️
test-optimization-testopt 58.49% <ø> (+0.08%) ⬆️
test-optimization-vitest 70.37% <ø> (+0.06%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@tlhunter
tlhunter merged commit 9dc0a53 into master Jul 22, 2026
754 of 756 checks passed
@tlhunter
tlhunter deleted the dependabot/npm_and_yarn/graphql-17.0.2 branch July 22, 2026 22:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot dependencies javascript Pull requests that update javascript code semver-patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants