chore(deps): update all dependencies - patch updates

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@graphql-codegen/typescript (source)	^5.0.0 → ^5.0.4					devDependencies	patch
@graphql-tools/schema (source)	10.0.4 → 10.0.33					devDependencies	patch
@testing-library/dom	10.4.0 → 10.4.1					devDependencies	patch
@types/bytes (source)	3.1.4 → 3.1.5					devDependencies	patch
@types/lodash (source)	4.17.7 → 4.17.24					devDependencies	patch
@types/react (source)	19.2.7 → 19.2.15					devDependencies	patch
graphql-17-alpha2	17.0.0-alpha.2 → 17.0.0-beta.1					devDependencies	patch
graphql-17-alpha9	17.0.0-alpha.9 → 17.0.0-beta.1					devDependencies	patch
graphql-ws (source)	6.0.3 → 6.0.8					devDependencies	patch
patch-package	8.0.0 → 8.0.1					devDependencies	patch
pkg-pr-new (source)	0.0.24 → 0.0.75					devDependencies	patch
react (source)	19.2.3 → 19.2.6					devDependencies	patch
react-dom (source)	19.2.3 → 19.2.6					devDependencies	patch
recast	0.23.9 → 0.23.11					devDependencies	patch
rimraf	5.0.9 → 5.0.10					devDependencies	patch
rxjs (source)	7.8.1 → 7.8.2					devDependencies	patch
ts-jest (source)	29.4.5 → 29.4.11					devDependencies	patch
zizmorcore/zizmor-action	v0.5.3 → v0.5.6					action	patch

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

dotansimha/graphql-code-generator (@​graphql-codegen/typescript)

v5.0.10

Compare Source

Patch Changes

• #​10103
  9a66574
  Thanks @​renovate! - dependencies updates:
  • Updated dependency tslib@^2.8.0 ↗︎ (from
    ~2.6.0, in dependencies)
• Updated dependencies
  [9a66574,
  9a66574,
  9a66574,
  e65d303]:
  • @​graphql-codegen/plugin-helpers@​6.3.0
  • @​graphql-codegen/schema-ast@​5.0.2
  • @​graphql-codegen/visitor-plugin-common@​6.3.0

v5.0.9

Compare Source

Patch Changes

• #​10619 cdf5dc5 Thanks @​ardatan! - dependencies updates:
  • Updated dependency @graphql-codegen/visitor-plugin-common@^6.2.3 ↗︎ (from 6.2.3, in dependencies)
• Updated dependencies [cdf5dc5, cdf5dc5, cdf5dc5]:
  • @​graphql-codegen/plugin-helpers@​6.1.1
  • @​graphql-codegen/schema-ast@​5.0.1
  • @​graphql-codegen/visitor-plugin-common@​6.2.4

v5.0.8

Compare Source

Patch Changes

• Updated dependencies [6038634]:
  • @​graphql-codegen/visitor-plugin-common@​6.2.3

v5.0.7

Compare Source

Patch Changes

• Updated dependencies [f588d91]:
  • @​graphql-codegen/visitor-plugin-common@​6.2.2

v5.0.6

Compare Source

Patch Changes

• Updated dependencies [b995ed1]:
  • @​graphql-codegen/visitor-plugin-common@​6.2.1

v5.0.5

Compare Source

Patch Changes

• Updated dependencies [f821e8a, 9e70bcb]:
  • @​graphql-codegen/visitor-plugin-common@​6.2.0
  • @​graphql-codegen/plugin-helpers@​6.1.0

ardatan/graphql-tools (@​graphql-tools/schema)

v10.0.33

Compare Source

Patch Changes

• Updated dependencies
  [a4b7dce]:
  • @​graphql-tools/utils@​11.1.0
  • @​graphql-tools/merge@​9.1.9

v10.0.32

Compare Source

Patch Changes

• Updated dependencies
  [ae36a0e]:
  • @​graphql-tools/utils@​11.0.1
  • @​graphql-tools/merge@​9.1.8

v10.0.31

Compare Source

Patch Changes

• Updated dependencies
  [6f3776c]:
  • @​graphql-tools/utils@​11.0.0
  • @​graphql-tools/merge@​9.1.7

v10.0.30

Compare Source

Patch Changes

• Updated dependencies
  [2118a80]:
  • @​graphql-tools/utils@​10.11.0
  • @​graphql-tools/merge@​9.1.6

v10.0.29

Compare Source

Patch Changes

• Updated dependencies
  [2fe123a]:
  • @​graphql-tools/utils@​10.10.3
  • @​graphql-tools/merge@​9.1.5

v10.0.28

Compare Source

Patch Changes

• Updated dependencies
  [dddc5f6]:
  • @​graphql-tools/utils@​10.10.2
  • @​graphql-tools/merge@​9.1.4

v10.0.27

Compare Source

Patch Changes

• Updated dependencies
  [fbb58b5]:
  • @​graphql-tools/utils@​10.10.1
  • @​graphql-tools/merge@​9.1.3

v10.0.26

Compare Source

Patch Changes

• Updated dependencies
  [fd105f4,
  fded91e,
  3b99a9b]:
  • @​graphql-tools/utils@​10.10.0
  • @​graphql-tools/merge@​9.1.2

v10.0.25

Compare Source

Patch Changes

• Updated dependencies
  [984d542,
  984d542,
  32d0457]:
  • @​graphql-tools/merge@​9.1.1
  • @​graphql-tools/utils@​10.9.1

v10.0.24

Compare Source

Patch Changes

• Updated dependencies
  [e5f98c2,
  3c21496,
  e5f98c2,
  22af985,
  53db005]:
  • @​graphql-tools/merge@​9.1.0
  • @​graphql-tools/utils@​10.9.0

v10.0.23

Compare Source

Patch Changes

• Updated dependencies
  [d123e26]:
  • @​graphql-tools/utils@​10.8.6
  • @​graphql-tools/merge@​9.0.24

v10.0.22

Compare Source

Patch Changes

• Updated dependencies
  [4899c62,
  90a717e,
  26518de]:
  • @​graphql-tools/merge@​9.0.23
  • @​graphql-tools/utils@​10.8.5

v10.0.21

Compare Source

Patch Changes

• Updated dependencies
  [155944b]:
  • @​graphql-tools/utils@​10.8.4
  • @​graphql-tools/merge@​9.0.22

v10.0.20

Compare Source

Patch Changes

• Updated dependencies
  [4a2eb14]:
  • @​graphql-tools/utils@​10.8.3
  • @​graphql-tools/merge@​9.0.21

v10.0.19

Compare Source

Patch Changes

• Updated dependencies
  [3547bba]:
  • @​graphql-tools/utils@​10.8.2
  • @​graphql-tools/merge@​9.0.20

v10.0.18

Compare Source

Patch Changes

• Updated dependencies
  [651a5dc]:
  • @​graphql-tools/utils@​10.8.1
  • @​graphql-tools/merge@​9.0.19

v10.0.17

Compare Source

Patch Changes

• #​6921
  357b2ee
  Thanks @​renovate! - dependencies updates:
  • Removed dependency
    value-or-promise@^1.0.12 ↗︎ (from
    dependencies)
• Updated dependencies
  [0a3e193,
  357b2ee]:
  • @​graphql-tools/utils@​10.8.0
  • @​graphql-tools/merge@​9.0.18

v10.0.16

Compare Source

Patch Changes

• Updated dependencies
  [53bb601,
  53bb601]:
  • @​graphql-tools/utils@​10.7.2
  • @​graphql-tools/merge@​9.0.17

v10.0.15

Compare Source

Patch Changes

• Updated dependencies
  [4912f19]:
  • @​graphql-tools/utils@​10.7.1
  • @​graphql-tools/merge@​9.0.16

v10.0.14

Compare Source

Patch Changes

• Updated dependencies
  [2c70d27]:
  • @​graphql-tools/utils@​10.7.0
  • @​graphql-tools/merge@​9.0.15

v10.0.13

Compare Source

Patch Changes

• Updated dependencies
  [6a8123b]:
  • @​graphql-tools/utils@​10.6.4
  • @​graphql-tools/merge@​9.0.14

v10.0.12

Compare Source

Patch Changes

• 020b9e4
  Thanks @​ardatan! - `AbortSignal` in `GraphQLResolveInfo`, and
  `AbortSignal` in `ExecutionRequest`

• Updated dependencies
  [020b9e4]:

  • @​graphql-tools/utils@​10.6.3
  • @​graphql-tools/merge@​9.0.13

v10.0.11

Compare Source

Patch Changes

• #​6662
  696a0d5
  Thanks @​renovate! - dependencies updates:
  • Updated dependency
    @graphql-tools/merge@^9.0.11 ↗︎
    (from ^9.0.10, in dependencies)
  • Updated dependency
    @graphql-tools/utils@^10.6.1 ↗︎
    (from ^10.6.0, in dependencies)
• Updated dependencies
  [696a0d5,
  1b24656]:
  • @​graphql-tools/merge@​9.0.12
  • @​graphql-tools/utils@​10.6.2

v10.0.10

Compare Source

Patch Changes

• Updated dependencies
  [1e02935]:
  • @​graphql-tools/utils@​10.6.1
  • @​graphql-tools/merge@​9.0.11

v10.0.9

Compare Source

Patch Changes

• Updated dependencies
  [414e404]:
  • @​graphql-tools/utils@​10.6.0
  • @​graphql-tools/merge@​9.0.10

v10.0.8

Compare Source

Patch Changes

• Updated dependencies
  [dc5043b]:
  • @​graphql-tools/utils@​10.5.6
  • @​graphql-tools/merge@​9.0.9

v10.0.7

Compare Source

Patch Changes

• Updated dependencies
  [cf2ce5e]:
  • @​graphql-tools/utils@​10.5.5
  • @​graphql-tools/merge@​9.0.8

v10.0.6

Compare Source

Patch Changes

• 0286437
  Thanks @​ardatan! - Improve directive extraction

• Updated dependencies
  [0286437]:

  • @​graphql-tools/merge@​9.0.6
  • @​graphql-tools/utils@​10.5.4

v10.0.5

Compare Source

Patch Changes

• b8bf584
  Thanks @​ardatan! - Introduce `getDirectiveExtensions` and refactor
  directive handling in the extensions

• Updated dependencies
  [b8bf584]:

  • @​graphql-tools/utils@​10.4.0
  • @​graphql-tools/merge@​9.0.5

testing-library/dom-testing-library (@​testing-library/dom)

v10.4.1

Compare Source

Bug Fixes

• deps: replace chalk with picocolors (#​1341) (225a3e4)

graphql/graphql-js (graphql-17-alpha2)

v17.0.0-beta.1

Compare Source

v17.0.0-beta.1 (2026-05-10)

Breaking Change 💥

• #​4729 subscribe: replace perEventExecutor with mapSourceToResponseEvent (@​yaacovCR)
• #​4730 chore(engines): drop Node 20 support (@​yaacovCR)
• #​4731 refactor(execution): extract buildResolveInfo helper (@​yaacovCR)

New Feature 🚀

• #​4733 feat: support node v26 (@​yaacovCR)

Bug Fix 🐞

• #​4725 chore: forward-port directives on directive definitions (#​4521) (@​yaacovCR)
• #​4727 chore: forward-port configuration of the ofType introspection depth (#​4317) (@​yaacovCR)

Polish 💅

• #​4728 polish: group FRAGMENT_VARIABLE_DEFINITION with executable defs (@​yaacovCR)

Internal 🏠

3 PRs were merged

• #​4460 internal: use node experimental-strip-types instead of ts-node (@​yaacovCR)
• #​4732 internal: use node test instead of mocha + c8 (@​yaacovCR)
• #​4734 internal: add comment re: rewriteRelativeImportExtensions (@​yaacovCR)

Committers: 1

• Yaacov Rydzinski (@​yaacovCR)

v17.0.0-beta.0

Compare Source

v17.0.0-beta.0 (2026-05-07)

Breaking Change 💥

• #​4634 Use Object.create(null) over {} to avoid prototype issues (@​benjie)
• #​4700 Demote createSourceEventStream to helper taking ValidatedExecutionArgs (@​yaacovCR)
• #​4703 rename executeQueryOrMutationOrSubscriptionEvent to executeRootSelectionSet (@​yaacovCR)
• #​4708 fix(variables): treat undefined as absent with respect to variables (@​yaacovCR)
• #​4710 fix: ignore undefined-valued unknown fields in input objects (@​yaacovCR)

New Feature 🚀

• #​4658 feat(execution): expose asyncWorkFinished execution hook (@​yaacovCR)
• #​4674 feat(execution): expose partial result on abort errors (@​yaacovCR)
• #​4701 export validateExecutionArgs helper (@​yaacovCR)
• #​4702 feat: add ValidatedSubscriptionArgs and validateSubscriptionArgs (@​yaacovCR)

Bug Fix 🐞

• #​4637 refactor(queue): replace stopped promise with onStop handlers (@​yaacovCR)
• #​4641 refactor(incremental): close stream iterator only on abnormal stop (@​yaacovCR)
• #​4642 fix(incremental): await async incremental cleanup (@​yaacovCR)
• #​4644 fix(withConcurrentAbruptClose): do not close unnecessarily (@​yaacovCR)
• #​4645 fix(cancellablePromise): handle rejection when cancelling already-aborted promise (@​yaacovCR)
• #​4643 fix(execute): handle list promise rejections (@​yaacovCR)
• #​4646 fix(execute): handle defaultTypeResolver promise rejections (@​yaacovCR)
• #​4648 refactor(executor): separate finish/abort orchestration (@​yaacovCR)
• #​4655 fix(execution): finish executors before publishing responses (@​yaacovCR)
• #​4661 fix: bubbling sync errors need not become async (@​yaacovCR)
• #​4663 fix(executor): let aborted async paths reach finish (@​yaacovCR)
• #​4657 refactor(execution): track pending work (@​yaacovCR)
• #​4664 fix(perf): hoist error creation (@​yaacovCR)
• #​4665 execution: reduce parent executor retention in incremental callbacks (@​yaacovCR)
• #​4671 fix(valueFromAST): forward port #​4652 (@​yaacovCR)
• #​4672 fix(execution): convert all promise-like results to promises (@​yaacovCR)
• #​4518 Fix TypeInfo.getInputType() for custom scalar list literals. (@​yuchenshi)
• #​4692 fix incremental label null validation (@​jbellenger)
• #​4711 fix(coerceInputLiteral): null variable input object fields should override defaults (@​yaacovCR)
• #​4712 fix: name fragment variables as such in execution errors (@​yaacovCR)
• #​4714 fix: enhance runtime invalid default value error messages (@​yaacovCR)
• #​4715 unify OneOf non-null and count error messages (@​yaacovCR)
• #​4716 fix(OneOf): fail coercion when two fields are provided "pre-coercion-only" (@​yaacovCR)
• #​4717 fix(valueFromAST): reject unknown input object fields (@​yaacovCR)
• #​4718 fix(OneOf): count only known fields for one-of validation (@​yaacovCR)
• #​4719 fix(OneOf): fail coercion for OneOf is the single field is invalidly provided by a default (@​yaacovCR)

Polish 💅

19 PRs were merged

• #​4635 polish: remove a few superfluous awaits (@​yaacovCR)
• #​4636 allow forwarding of cancellation reasons within computations/queues (@​yaacovCR)
• #​4638 test(queue): cover async onStop cleanup (@​yaacovCR)
• #​4639 refactor(computation): rename cancel to abort (@​yaacovCR)
• #​4640 refactor(workqueue): propagate async computation abort cleanup (@​yaacovCR)
• #​4647 refactor(executor): rename finished state to aborted (@​yaacovCR)
• #​4649 refactor(cancellablePromise): extract withCancellation (@​yaacovCR)
• #​4650 refactor(executor): replace internal abort signal with lightweight version (@​yaacovCR)
• #​4656 refactor(execution): introduce shared execution context (@​yaacovCR)
• #​4653 fix: avoid prototype-colliding names in execution values (@​abishekgiri)
• #​4673 refactor(execution): separate response construction from finish checks (@​yaacovCR)
• #​4675 polish(execution): remove obsolete abort async checks (@​yaacovCR)
• #​4686 refactor(benchmark): extract shared mean stats helper (@​yaacovCR)
• #​4687 polish(benchmark): handle theoretical stats errors (@​yaacovCR)
• #​4693 polish: add expectToThrow test helper (@​yaacovCR)
• #​4694 polish: add expectPromise.toReject helper (@​yaacovCR)
• #​4695 polish: clean up stream tests (@​yaacovCR)
• #​4696 polish: introduce spy test helper (@​yaacovCR)
• #​4704 refactor: add executionMode/serially argument to executeRootSelectionSet (@​yaacovCR)

Internal 🏠

17 PRs were merged

• #​4676 chore(deps): upgrade to ts v6 (@​yaacovCR)
• #​4677 internal: refactor benchmark runner structure (@​yaacovCR)
• #​4678 internal: run benchmarks through worker files (@​yaacovCR)
• #​4679 internal: read benchmark names through dedicated worker (@​yaacovCR)
• #​4680 internal: separate benchmark timing and memory sampling (@​yaacovCR)
• #​4681 fix(benchmark): use node flags only for memory sampling (@​yaacovCR)
• #​4682 internal: use mitata for benchmark timing (@​yaacovCR)
• #​4683 refactor(benchmark): integrate run + sampling files (@​yaacovCR)
• #​4684 benchmark: perform timing tests in rounds to reduce variance (@​yaacovCR)
• #​4685 benchmark: stop timing after stable pairwise comparisons (@​yaacovCR)
• #​4688 benchmark: cache revision archives (@​yaacovCR)
• #​4689 benchmark: report paired benchmark comparisons (@​yaacovCR)
• #​4690 benchmark: add async object field benchmark (@​yaacovCR)
• #​4697 internal: add runtime option to benchmark (@​yaacovCR)
• #​4713 benchmark: add benchmark for schema validation (@​yaacovCR)
• #​4722 internal: npm release:prepare should set publishTag (@​yaacovCR)
• #​4723 fix(changelog): ignore open associated PRs (@​yaacovCR)

Committers: 5

• Abishek Kumar Giri(@​abishekgiri)
• Benjie(@​benjie)
• James Bellenger(@​jbellenger)
• Yaacov Rydzinski (@​yaacovCR)
• Yuchen Shi(@​yuchenshi)

v17.0.0-alpha.14

Compare Source

v17.0.0-alpha.14 (2026-03-11)

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: bb720fd

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[pkg-pr-new]

npm i https://pkg.pr.new/apollographql/apollo-client/@apollo/client-graphql-codegen@13145

npm i https://pkg.pr.new/apollographql/apollo-client/@apollo/client@13145

commit: e059721

[apollo-librarian]

✅ Docs preview has no changes

The preview was not built because there were no changes.

Build ID: b3e5c43c71b0b2aab50aa9e1
Build Logs: View logs

---

✅ AI Style Review — No Changes Detected

No MDX files were changed in this pull request.

Review Log: View detailed log

This review is AI-generated. Please use common sense when accepting these suggestions, as they may not always be accurate or appropriate for your specific context.