Bump the all-minor-patch group with 20 updates #1740

dependabot · 2025-11-28T13:33:16Z

Bumps the all-minor-patch group with 20 updates:

Package	From	To
@graphql-tools/utils	`10.10.3`	`10.11.0`
@graphql-tools/schema	`10.0.29`	`10.0.30`
pkgroll	`2.21.3`	`2.21.4`
@graphql-tools/executor	`1.4.13`	`1.5.0`
@graphql-tools/merge	`9.1.5`	`9.1.6`
graphql-yoga	`5.16.2`	`5.17.0`
@graphql-tools/code-file-loader	`8.1.26`	`8.1.27`
@graphql-tools/graphql-file-loader	`8.1.7`	`8.1.8`
@graphql-tools/load	`8.1.6`	`8.1.7`
@graphql-yoga/render-graphiql	`5.16.2`	`5.17.0`
@logtape/logtape	`1.2.0`	`1.2.1`
@graphql-hive/router-query-planner	`0.0.4`	`0.0.6`
@graphql-yoga/plugin-apollo-usage-report	`0.11.2`	`0.12.0`
@graphql-yoga/plugin-csrf-prevention	`3.16.2`	`3.17.0`
@graphql-yoga/plugin-defer-stream	`3.16.2`	`3.17.0`
@graphql-yoga/plugin-persisted-operations	`3.16.2`	`3.17.0`
@graphql-tools/mock	`9.1.3`	`9.1.4`
@graphql-yoga/plugin-jwt	`3.10.2`	`3.11.0`
@graphql-yoga/plugin-prometheus	`6.11.3`	`6.12.0`
@cloudflare/workers-types	`4.20251127.0`	`4.20251128.0`

Updates @graphql-tools/utils from 10.10.3 to 10.11.0

Changelog

Sourced from @graphql-tools/utils's changelog.

10.11.0

Minor Changes
#7588 2118a80 Thanks @EmrysMyrddin! - Add optional schema coordinate in error extensions. This extension allows to precisely identify the source of the error by automated tools like tracing or monitoring.

This new feature is opt-in, you have to enable it using schemaCoordinateInErrors executor option.

Caution: This feature, when enabled, will expose information about your schema. If you need to keep your schema private and secret, you should strip this attribute at serialization time before sending errors to the client.
import { parse } from 'graphql'
import { normalizedExecutor } from '@graphql-tools/executor'
import { getSchemaCoordinate } from '@graphql-tools/utils'
import schema from './schema'
const result = await normalizedExecutor({
schema,
document: parse(...),
schemaCoordinateInErrors: true // enable adding schema coordinate to graphql errors
})
if (result.errors) {
for (const error of result.errors) {
console.log('Error in resolver ', error.coordinate, ':', error.message)
// or with getSchemaCoordinate util, to workaround types if needed
console.log('Error in resolver', getSchemaCoordinate(error), ':', error.message)
}
}

Commits

7b17d1f chore(release): update monorepo packages versions (#7722)
2118a80 feat(executor): add schema coordinate to graphql errors (#7588)
See full diff in compare view

Updates @graphql-tools/schema from 10.0.29 to 10.0.30

Changelog

Sourced from @graphql-tools/schema's changelog.

10.0.30

Patch Changes

Updated dependencies [2118a80]:

@graphql-tools/utils@10.11.0

@graphql-tools/merge@9.1.6

Commits

7b17d1f chore(release): update monorepo packages versions (#7722)
See full diff in compare view

Updates pkgroll from 2.21.3 to 2.21.4

Release notes

Sourced from pkgroll's releases.

v2.21.4

2.21.4 (2025-11-28)

Bug Fixes

dont resolve .js to .ts in external dependency (03c7283), closes #141

Commits

03c7283 fix: dont resolve .js to .ts in external dependency
See full diff in compare view

Updates @graphql-tools/executor from 1.4.13 to 1.5.0

Changelog

Sourced from @graphql-tools/executor's changelog.

1.5.0

Minor Changes
#7588 2118a80 Thanks @EmrysMyrddin! - Add optional schema coordinate in error extensions. This extension allows to precisely identify the source of the error by automated tools like tracing or monitoring.

This new feature is opt-in, you have to enable it using schemaCoordinateInErrors executor option.

Caution: This feature, when enabled, will expose information about your schema. If you need to keep your schema private and secret, you should strip this attribute at serialization time before sending errors to the client.
import { parse } from 'graphql'
import { normalizedExecutor } from '@graphql-tools/executor'
import { getSchemaCoordinate } from '@graphql-tools/utils'
import schema from './schema'
const result = await normalizedExecutor({
schema,
document: parse(...),
schemaCoordinateInErrors: true // enable adding schema coordinate to graphql errors
})
if (result.errors) {
for (const error of result.errors) {
console.log('Error in resolver ', error.coordinate, ':', error.message)
// or with getSchemaCoordinate util, to workaround types if needed
console.log('Error in resolver', getSchemaCoordinate(error), ':', error.message)
}
}
Patch Changes

Updated dependencies [2118a80]:

@graphql-tools/utils@10.11.0

Commits

7b17d1f chore(release): update monorepo packages versions (#7722)
2118a80 feat(executor): add schema coordinate to graphql errors (#7588)
See full diff in compare view

Updates @graphql-tools/merge from 9.1.5 to 9.1.6

Changelog

Sourced from @graphql-tools/merge's changelog.

9.1.6

Patch Changes

Updated dependencies [2118a80]:

@graphql-tools/utils@10.11.0

Commits

7b17d1f chore(release): update monorepo packages versions (#7722)
See full diff in compare view

Updates graphql-yoga from 5.16.2 to 5.17.0

Changelog

Sourced from graphql-yoga's changelog.

5.17.0

Minor Changes
#4288 66c370c Thanks @EmrysMyrddin! - Add experimental support for coordinate error attribute proposal.

The coordinate attribute indicates the coordinate in the schema of the resolver which experienced the errors. It allows for an easier error source identification than with the path which can be difficult to walk, or even lead to unsolvable ambiguities when using Union or Interface types.

Usage

Since this is experimental, it has to be explicitly enabled by adding the appropriate plugin to the Yoga instance:
import { createYoga, useErrorCoordinate } from 'graphql-yoga'
import { schema } from './schema'
export const yoga = createYoga({
schema,
plugins: [useErrorCoordinate()]
})
Once enabled, located errors will gain the coordinate attribute:
const myPlugin = {
  onExecutionResult({ result }) {
    if (result.errors) {
      for (const error of result.errors) {
        console.log('Error at', error.coordinate, ':', error.message)
      }
    }
  }
}
Security concerns

Adding a schema coordinate to errors exposes information about the schema, which can be an attack vector if you rely on the fact your schema is private and secret.

This is why the coordinate attribute is not serialized by default, and will not be exposed to clients.

... (truncated)

Commits

e1079f6 chore(release): update monorepo packages versions (#4300)
66c370c feat(graphql-yoga): add support for experimental error coordinate (#4288)
0517886 chore(deps): update dependency globby to v16 (#4289)
See full diff in compare view

Updates @graphql-tools/code-file-loader from 8.1.26 to 8.1.27

Changelog

Sourced from @graphql-tools/code-file-loader's changelog.

8.1.27

Patch Changes

Updated dependencies [2118a80]:

@graphql-tools/utils@10.11.0

@graphql-tools/graphql-tag-pluck@8.3.26

Commits

7b17d1f chore(release): update monorepo packages versions (#7722)
See full diff in compare view

Updates @graphql-tools/graphql-file-loader from 8.1.7 to 8.1.8

Changelog

Sourced from @graphql-tools/graphql-file-loader's changelog.

8.1.8

Patch Changes

#7588 2118a80 Thanks @EmrysMyrddin! - dependencies updates:

Updated dependency @graphql-tools/[email protected] ↗︎ (from 7.1.6, in dependencies)

Updated dependencies [2118a80, 92f1622, 2118a80]:

@graphql-tools/import@7.1.8

@graphql-tools/utils@10.11.0

Commits

7b17d1f chore(release): update monorepo packages versions (#7722)
See full diff in compare view

Updates @graphql-tools/load from 8.1.6 to 8.1.7

Changelog

Sourced from @graphql-tools/load's changelog.

8.1.7

Patch Changes

Updated dependencies [2118a80]:

@graphql-tools/utils@10.11.0

@graphql-tools/schema@10.0.30

Commits

7b17d1f chore(release): update monorepo packages versions (#7722)
See full diff in compare view

Updates @graphql-yoga/render-graphiql from 5.16.2 to 5.17.0

Changelog

Sourced from @graphql-yoga/render-graphiql's changelog.

5.17.0

Patch Changes

Updated dependencies [66c370c, 66c370c]:

[email protected]

Commits

e1079f6 chore(release): update monorepo packages versions (#4300)
See full diff in compare view

Updates @logtape/logtape from 1.2.0 to 1.2.1

Changelog

Sourced from @logtape/logtape's changelog.

Version 1.2.1

Released on November 28, 2025.

@logtape/redaction

Fixed redactByField() to also redact sensitive values in the message array, not just in properties. Previously, sensitive field values were exposed in the log message even when the corresponding property was redacted. [#99]

Commits

132ac80 Version bump
See full diff in compare view

Updates @graphql-hive/router-query-planner from 0.0.4 to 0.0.6

Release notes

Sourced from @graphql-hive/router-query-planner's releases.

hive-router-v0.0.6

Fixed

(hive-router) fix docker image issues (#394)

hive-router-config-v0.0.6

Added

(router) Advanced Header Management (#438)

node-addon 0.0.6 (2025-11-28)

Fixes

make supergraph.{path,key,endpoint} optional (#593)

hive-router-v0.0.5

Other

update Cargo.lock dependencies

hive-router-config-v0.0.5

Other

(deps) update actions-rust-lang/setup-rust-toolchain digest to 1780873 (#466)

node-addon 0.0.5 (2025-11-28)

Fixes

support @include and @skip in initial fetch node (#591)

Fixed an issue where @skip and @include directives were incorrectly removed from the initial Fetch of the Query Plan.

Changelog

Sourced from @graphql-hive/router-query-planner's changelog.

0.0.6 (2025-11-28)

Fixes

make supergraph.{path,key,endpoint} optional (#593)

0.0.5 (2025-11-28)

Fixes

support @include and @skip in initial fetch node (#591)

Fixed an issue where @skip and @include directives were incorrectly removed from the initial Fetch of the Query Plan.

Commits

95e2d9e chore(release): router crates and artifacts (#592)
5a19ac5 chore(release): router crates and artifacts (#588)
See full diff in compare view

Updates @graphql-yoga/plugin-apollo-usage-report from 0.11.2 to 0.12.0

Changelog

Sourced from @graphql-yoga/plugin-apollo-usage-report's changelog.

0.12.0

Patch Changes

#4288 66c370c Thanks @EmrysMyrddin! - dependencies updates:

Updated dependency @graphql-tools/utils@^10.11.0 ↗︎ (from ^10.9.1, in dependencies)

Updated dependencies [66c370c, 66c370c]:

[email protected]

@graphql-yoga/plugin-apollo-inline-trace@3.17.0

Commits

e1079f6 chore(release): update monorepo packages versions (#4300)
66c370c feat(graphql-yoga): add support for experimental error coordinate (#4288)
See full diff in compare view

Updates @graphql-yoga/plugin-csrf-prevention from 3.16.2 to 3.17.0

Changelog

Sourced from @graphql-yoga/plugin-csrf-prevention's changelog.

3.17.0

Patch Changes

Updated dependencies [66c370c, 66c370c]:

[email protected]

Commits

e1079f6 chore(release): update monorepo packages versions (#4300)
See full diff in compare view

Updates @graphql-yoga/plugin-defer-stream from 3.16.2 to 3.17.0

Commits

See full diff in compare view

Updates @graphql-yoga/plugin-persisted-operations from 3.16.2 to 3.17.0

Changelog

Sourced from @graphql-yoga/plugin-persisted-operations's changelog.

3.17.0

Patch Changes

Updated dependencies [66c370c, 66c370c]:

[email protected]

Commits

e1079f6 chore(release): update monorepo packages versions (#4300)
See full diff in compare view

Updates @graphql-tools/mock from 9.1.3 to 9.1.4

Changelog

Sourced from @graphql-tools/mock's changelog.

9.1.4

Patch Changes

Updated dependencies [2118a80]:

@graphql-tools/utils@10.11.0

@graphql-tools/schema@10.0.30

Commits

7b17d1f chore(release): update monorepo packages versions (#7722)
See full diff in compare view

Updates @graphql-yoga/plugin-jwt from 3.10.2 to 3.11.0

Changelog

Sourced from @graphql-yoga/plugin-jwt's changelog.

3.11.0

Patch Changes

Updated dependencies [66c370c, 66c370c]:

[email protected]

Commits

e1079f6 chore(release): update monorepo packages versions (#4300)
See full diff in compare view

Updates @graphql-yoga/plugin-prometheus from 6.11.3 to 6.12.0

Changelog

Sourced from @graphql-yoga/plugin-prometheus's changelog.

6.12.0

Patch Changes

Updated dependencies [66c370c, 66c370c]:

[email protected]

Commits

e1079f6 chore(release): update monorepo packages versions (#4300)
See full diff in compare view

Updates @cloudflare/workers-types from 4.20251127.0 to 4.20251128.0

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

theguild-bot · 2025-11-28T13:36:40Z

🚀 Snapshot Release (`alpha`)

The latest changes of this PR are available as alpha on npm (based on the declared changesets):

Package	Version	Info
`@graphql-tools/batch-delegate`	`10.0.6-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4`	npm ↗︎ unpkg ↗︎
`@graphql-tools/delegate`	`12.0.0-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4`	npm ↗︎ unpkg ↗︎
`@graphql-tools/federation`	`4.2.4-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4`	npm ↗︎ unpkg ↗︎
`@graphql-mesh/fusion-runtime`	`1.6.0-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4`	npm ↗︎ unpkg ↗︎
`@graphql-hive/gateway`	`2.1.20-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4`	npm ↗︎ unpkg ↗︎
`@graphql-hive/nestjs`	`2.0.25-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4`	npm ↗︎ unpkg ↗︎
`@graphql-hive/plugin-aws-sigv4`	`2.0.18-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4`	npm ↗︎ unpkg ↗︎
`@graphql-hive/plugin-opentelemetry`	`1.2.2-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4`	npm ↗︎ unpkg ↗︎
`@graphql-mesh/plugin-prometheus`	`2.1.6-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4`	npm ↗︎ unpkg ↗︎
`@graphql-hive/router-runtime`	`1.1.0-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4`	npm ↗︎ unpkg ↗︎
`@graphql-hive/gateway-runtime`	`2.3.6-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4`	npm ↗︎ unpkg ↗︎
`@graphql-tools/stitch`	`10.1.4-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4`	npm ↗︎ unpkg ↗︎
`@graphql-tools/stitching-directives`	`4.0.6-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4`	npm ↗︎ unpkg ↗︎
`@graphql-hive/gateway-testing`	`2.0.6-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4`	npm ↗︎ unpkg ↗︎
`@graphql-tools/wrap`	`11.1.0-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4`	npm ↗︎ unpkg ↗︎

theguild-bot · 2025-11-28T13:40:12Z

🚀 Snapshot Release (Binary for `Linux-ARM64`)

The latest changes of this PR are available for download (based on the declared changesets).

theguild-bot · 2025-11-28T13:40:36Z

🚀 Snapshot Release (Binary for `Linux-X64`)

The latest changes of this PR are available for download (based on the declared changesets).

theguild-bot · 2025-11-28T13:42:55Z

🚀 Snapshot Release (Binary for `macOS-ARM64`)

The latest changes of this PR are available for download (based on the declared changesets).

theguild-bot · 2025-11-28T13:46:17Z

🚀 Snapshot Release (Binary for `macOS-X64`)

The latest changes of this PR are available for download (based on the declared changesets).

theguild-bot · 2025-11-28T13:47:03Z

🚀 Snapshot Release (Bun Docker Image)

The latest changes of this PR are available as image on GitHub Container Registry (based on the declared changesets):

ghcr.io/graphql-hive/gateway:2.1.20-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4-bun

theguild-bot · 2025-11-28T13:47:38Z

🚀 Snapshot Release (Node Docker Image)

The latest changes of this PR are available as image on GitHub Container Registry (based on the declared changesets):

ghcr.io/graphql-hive/gateway:2.1.20-alpha-a69b74c48c6a7d8294831613ec05d8c8e3e927f4

theguild-bot · 2025-11-28T13:48:33Z

🚀 Snapshot Release (Binary for `Windows-X64`)

The latest changes of this PR are available for download (based on the declared changesets).

dependabot bot added dependencies javascript Pull requests that update javascript code labels Nov 28, 2025

github-actions bot and others added 2 commits November 28, 2025 13:33

chore(dependencies): updated changesets for modified dependencies

b033c78

docs(examples): converted from e2es

a69b74c

ardatan merged commit 9cfe2a5 into main Nov 28, 2025
60 checks passed

ardatan deleted the dependabot/npm_and_yarn/all-minor-patch-f7dd557a8d branch November 28, 2025 17:06

theguild-bot mentioned this pull request Nov 28, 2025

Upcoming Release Changes #1728

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the all-minor-patch group with 20 updates #1740

Bump the all-minor-patch group with 20 updates #1740

Uh oh!

dependabot bot commented on behalf of github Nov 28, 2025

Usage

Security concerns

Uh oh!

theguild-bot commented Nov 28, 2025 •

edited

Loading

Uh oh!

theguild-bot commented Nov 28, 2025 •

edited

Loading

Uh oh!

theguild-bot commented Nov 28, 2025 •

edited

Loading

Uh oh!

theguild-bot commented Nov 28, 2025 •

edited

Loading

Uh oh!

theguild-bot commented Nov 28, 2025 •

edited

Loading

Uh oh!

theguild-bot commented Nov 28, 2025 •

edited

Loading

Uh oh!

theguild-bot commented Nov 28, 2025 •

edited

Loading

Uh oh!

theguild-bot commented Nov 28, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump the all-minor-patch group with 20 updates #1740

Bump the all-minor-patch group with 20 updates #1740

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 28, 2025

10.11.0

Minor Changes

10.0.30

Patch Changes

v2.21.4

2.21.4 (2025-11-28)

Bug Fixes

1.5.0

Minor Changes

Patch Changes

9.1.6

Patch Changes

5.17.0

Minor Changes

Usage

Security concerns

8.1.27

Patch Changes

8.1.8

Patch Changes

8.1.7

Patch Changes

5.17.0

Patch Changes

Version 1.2.1

@​logtape/redaction

hive-router-v0.0.6

Fixed

hive-router-config-v0.0.6

Added

node-addon 0.0.6 (2025-11-28)

Fixes

hive-router-v0.0.5

Other

hive-router-config-v0.0.5

Other

node-addon 0.0.5 (2025-11-28)

Fixes

0.0.6 (2025-11-28)

Fixes

0.0.5 (2025-11-28)

Fixes

0.12.0

Patch Changes

3.17.0

Patch Changes

3.17.0

Patch Changes

9.1.4

Patch Changes

3.11.0

Patch Changes

6.12.0

Patch Changes

Uh oh!

theguild-bot commented Nov 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🚀 Snapshot Release (alpha)

Uh oh!

theguild-bot commented Nov 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🚀 Snapshot Release (Binary for Linux-ARM64)

Uh oh!

theguild-bot commented Nov 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🚀 Snapshot Release (Binary for Linux-X64)

Uh oh!

theguild-bot commented Nov 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🚀 Snapshot Release (Binary for macOS-ARM64)

Uh oh!

theguild-bot commented Nov 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🚀 Snapshot Release (Binary for macOS-X64)

Uh oh!

`@logtape/redaction`

theguild-bot commented Nov 28, 2025 •

edited

Loading

🚀 Snapshot Release (`alpha`)

theguild-bot commented Nov 28, 2025 •

edited

Loading

🚀 Snapshot Release (Binary for `Linux-ARM64`)

theguild-bot commented Nov 28, 2025 •

edited

Loading

🚀 Snapshot Release (Binary for `Linux-X64`)

theguild-bot commented Nov 28, 2025 •

edited

Loading

🚀 Snapshot Release (Binary for `macOS-ARM64`)

theguild-bot commented Nov 28, 2025 •

edited

Loading

🚀 Snapshot Release (Binary for `macOS-X64`)

theguild-bot commented Nov 28, 2025 •

edited

Loading

theguild-bot commented Nov 28, 2025 •

edited

Loading

theguild-bot commented Nov 28, 2025 •

edited

Loading

🚀 Snapshot Release (Binary for `Windows-X64`)