feat: restore patchedDependencies

[wilsonrivera]

Summary by CodeRabbit

• Chores
  • Internal reorganization of dependency patch configuration with no impact on end-users.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

Checklist

• I have discussed my proposed changes in an issue and have received approval to proceed.
• I have followed the coding standards of the project.
• Tests or benchmarks have been added or updated.
• Documentation has been updated on https://github.com/wundergraph/cosmo-docs.
• I have read the Contributors Guide.

[coderabbitai]

Important

Review skipped

Review was skipped as selected files did not have any reviewable changes.

💤 Files selected but had no reviewable changes (2)

• composition-go/index.global.js
• router/internal/graphiql/graphiql.html

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Walkthrough

The pull request reorganizes the pnpm configuration in package.json by relocating the patchedDependencies configuration from the top-level of the pnpm block into the nested pnpm.overrides section, while preserving the graphql@16.9.0 patch mapping.

Changes

Cohort / File(s)	Change Summary
PNPM Configuration package.json	Moved patchedDependencies configuration into pnpm.overrides section; relocated graphql@16.9.0 patch reference without modifying the mapping.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

• Single-file configuration restructuring with no logic changes
• Straightforward relocation of existing patch configuration

Possibly related PRs

• fix: prevent vulnerable peer dependencies #2195: Also modifies pnpm configuration structure, adding multiple pnpm.overrides entries while maintaining the GraphQL patch reference.

Pre-merge checks

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'feat: restore patchedDependencies' clearly describes the main change: restoring the patchedDependencies configuration in the pnpm setup, which aligns with the changeset moving patchedDependencies within pnpm configuration.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (main@d0e45f6). Learn more about missing BASE report.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2393   +/-   ##
=======================================
  Coverage        ?   31.18%           
=======================================
  Files           ?      340           
  Lines           ?    33931           
  Branches        ?      243           
=======================================
  Hits            ?    10583           
  Misses          ?    22425           
  Partials        ?      923           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

Router image scan passed

✅ No security vulnerabilities found in image:

ghcr.io/wundergraph/cosmo/router:sha-d9d1988a23924f36ce90b860a145fef049e6ad34