build(deps): bump the all-minor-patch group across 1 directory with 11 updates by dependabot[bot] · Pull Request #9408 · ardatan/graphql-mesh

dependabot · 2026-04-10T19:00:18Z

Bumps the all-minor-patch group with 11 updates in the / directory:

Package	From	To
@types/node	`25.5.2`	`25.6.0`
prettier	`3.8.1`	`3.8.2`
react	`19.2.4`	`19.2.5`
react-dom	`19.2.4`	`19.2.5`
eslint-config-next	`16.2.2`	`16.2.3`
postcss	`8.5.8`	`8.5.9`
@cloudflare/workers-types	`4.20260408.1`	`4.20260410.1`
wrangler	`4.81.0`	`4.81.1`
vite	`8.0.7`	`8.0.8`
qs	`6.15.0`	`6.15.1`
fast-xml-parser	`5.5.10`	`5.5.11`

Updates @types/node from 25.5.2 to 25.6.0

Commits

See full diff in compare view

Updates prettier from 3.8.1 to 3.8.2

Release notes

Sourced from prettier's releases.

3.8.2

Support Angular v21.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.2

diff

Angular: Support Angular v21.2 (#18722, #19034 by `@fisker`)

Exhaustive typechecking with @default never;

<!-- Input -->
@switch (foo) {
  @case (1) {}
  @default never;
}
<!-- Prettier 3.8.1 -->
SyntaxError: Incomplete block "default never". If you meant to write the @ character, you should use the "&#64;" HTML entity instead. (3:3)
<!-- Prettier 3.8.2 -->
@switch (foo) {
@case (1) {}
@default never;
}

arrow function and instanceof expressions.

<!-- Input -->
@let fn = (a) =>        a?    1:2;
{{ fn ( a         instanceof b)}}
<!-- Prettier 3.8.1 -->
@let fn = (a) =>        a?    1:2;
{{ fn ( a         instanceof b)}}
<!-- Prettier 3.8.2 -->
@let fn = (a) => (a ? 1 : 2);
{{ fn(a instanceof b) }}

Commits

b31557c Release 3.8.2
96bbaed Support Angular v21.2 (#18722)
881360b Support default never in Angular v21.2 (#19034)
07d6724 Bump Prettier dependency to 3.8.1
8b4a53a Clean changelog_unreleased
See full diff in compare view

Updates react from 19.2.4 to 19.2.5

Release notes

Sourced from react's releases.

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

Commits

23f4f9f 19.2.5
See full diff in compare view

Updates react-dom from 19.2.4 to 19.2.5

Release notes

Sourced from react-dom's releases.

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

Commits

23f4f9f 19.2.5
See full diff in compare view

Updates eslint-config-next from 16.2.2 to 16.2.3

Release notes

Sourced from eslint-config-next's releases.

v16.2.3

[!NOTE] This release is backporting security and bug fixes. For more information about the fixed security vulnerability, please see https://vercel.com/changelog/summary-of-cve-2026-23869. The release does not include all pending features/changes on canary.

Core Changes

Ensure app-page reports stale ISR revalidation errors via onRequestError (#92282)

Fix [Bug]: manifest.ts breaks HMR in Next.js 16.2 (#91981 through #92273)

Deduplicate output assets and detect content conflicts on emit (#92292)

Fix styled-jsx race condition: styles lost due to concurrent rendering (#92459)

turbo-tasks-backend: stability fixes for task cancellation and error handling (#92254)

Credits

Huge thanks to @icyJoseph, @sokra, @wbinnssmith, @eps1lon and @ztanner for helping!

Commits

d5f649b v16.2.3
See full diff in compare view

Updates postcss from 8.5.8 to 8.5.9

Release notes

Sourced from postcss's releases.

8.5.9

Speed up source map encoding paring in case of the error.

Changelog

Sourced from postcss's changelog.

8.5.9

Speed up source map encoding paring in case of the error.

Commits

fe88ac2 Release 8.5.9 version
c551632 Avoid RegExp when we can use simple JS
89a6b74 Move SECURITY.txt for docs folder to keep GitHub page cleaner
6ceb8a4 Create SECURITY.md
02ccae6 Another way to fix CI with .ts ext in tests on old Node.js
2c36658 Another way to fix CI with TS on old Node.js
b906003 Another way to fix CI with old Node.js
04d32cd Fix another issue with Node.js 10 on CI
df86cdf Try to fix Node.js 10 on CI
82bec0d Move to oxfmt
Additional commits viewable in compare view

Updates @cloudflare/workers-types from 4.20260408.1 to 4.20260410.1

Commits

See full diff in compare view

Updates wrangler from 4.81.0 to 4.81.1

Release notes

Sourced from wrangler's releases.

wrangler@4.81.1

Patch Changes

#13337 c510494 Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

workerd 1.20260405.1 1.20260408.1

#13362 8b71eca Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

workerd 1.20260408.1 1.20260409.1

#13329 7ca6f6e Thanks @G4brym! - fix: Treat AI Search bindings as always-remote in local dev

AI Search namespace (ai_search_namespaces) and instance (ai_search) bindings are always-remote (they have no local simulation), but pickRemoteBindings() did not include them in its always-remote type list. This caused the remote proxy session to exclude these bindings when remote: true was not explicitly set in the config, resulting in broken AI Search bindings during wrangler dev.

Additionally, removeRemoteConfigFieldFromBindings() in the deploy config-diff logic was not stripping the remote field from AI Search bindings, which could cause false config diffs during deployment.

Updated dependencies [42c7ef0, c510494, 8b71eca, a42e0e8]:

miniflare@4.20260409.0

Commits

aad0341 Version Packages (#13355)
8b71eca Bump the workerd-and-workers-types group with 2 updates (#13362)
c510494 Bump the workerd-and-workers-types group with 2 updates (#13337)
ad6faef Remove some more no-restricted-imports lint disabling comments from wrangle...
7ca6f6e [wrangler] Fix AI Search bindings not working in local dev without explicit r...
See full diff in compare view

Updates vite from 8.0.7 to 8.0.8

Release notes

Sourced from vite's releases.

v8.0.8

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.0.8 (2026-04-09)

Features

update rolldown to 1.0.0-rc.15 (#22201) (6baf587)

Bug Fixes

avoid dns.getDefaultResultOrder temporary (#22202) (15f1c15)

ssr: class property keys hoisting matching imports (#22199) (e137601)

Commits

6e585dc release: v8.0.8
e137601 fix(ssr): class property keys hoisting matching imports (#22199)
15f1c15 fix: avoid dns.getDefaultResultOrder temporary (#22202)
6baf587 feat: update rolldown to 1.0.0-rc.15 (#22201)
See full diff in compare view

Updates qs from 6.15.0 to 6.15.1

Changelog

Sourced from qs's changelog.

6.15.1

[Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters

[Deps] update @ljharb/eslint-config

[Dev Deps] update @ljharb/eslint-config, iconv-lite

[Tests] increase coverage

Commits

3f5e1c5 v6.15.1
c85b67f [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true s...
4dfa0f0 [Deps] update @ljharb/eslint-config
dbb05d7 [Dev Deps] update @ljharb/eslint-config, iconv-lite
b0cfe7c [Tests] increase coverage
See full diff in compare view

Updates fast-xml-parser from 5.5.10 to 5.5.11

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.5.11 / 2026-04-08

Performance Improvement

integrate ExpressionSet for stopNodes

5.5.10 / 2026-04-03

increase default entity explansion limit as many projects demand for that

performance improvement

reduce calls to toString

early return when entities are not present

prepare rawAttrsForMatcher only if user sets jPath: false

5.5.9 / 2026-03-23

combine typing files

4.5.5 / 2026-03-22

apply fixes from v5 (legacy maintenance branch v4-maintenance)

support maxEntityCount

support onDangerousProperty

support maxNestedTags

handle prototype pollution

fix incorrect entity name replacement

fix incorrect condition for entity expansion

5.5.8 / 2026-03-20

pass read only matcher in callback

5.5.7 / 2026-03-19

fix: entity expansion limits

update strnum package to 2.2.0

5.5.6 / 2026-03-16

update builder dependency

fix incorrect regex to replace . in entity name

fix check for entitiy expansion for lastEntities and html entities too

5.5.5 / 2026-03-13

sanitize dangerous tag or attribute name

error on critical property name

support onDangerousProperty option

5.5.4 / 2026-03-13

declare Matcher & Expression as unknown so user is not forced to install path-expression-matcher

... (truncated)

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…1 updates Bumps the all-minor-patch group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.5.2` | `25.6.0` | | [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.2` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.5` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.5` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.2.2` | `16.2.3` | | [postcss](https://github.com/postcss/postcss) | `8.5.8` | `8.5.9` | | [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `4.20260408.1` | `4.20260410.1` | | [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.81.0` | `4.81.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.7` | `8.0.8` | | [qs](https://github.com/ljharb/qs) | `6.15.0` | `6.15.1` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.5.10` | `5.5.11` | Updates `@types/node` from 25.5.2 to 25.6.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `prettier` from 3.8.1 to 3.8.2 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.1...3.8.2) Updates `react` from 19.2.4 to 19.2.5 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react) Updates `react-dom` from 19.2.4 to 19.2.5 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react-dom) Updates `eslint-config-next` from 16.2.2 to 16.2.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.2.3/packages/eslint-config-next) Updates `postcss` from 8.5.8 to 8.5.9 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.8...8.5.9) Updates `@cloudflare/workers-types` from 4.20260408.1 to 4.20260410.1 - [Release notes](https://github.com/cloudflare/workerd/releases) - [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md) - [Commits](https://github.com/cloudflare/workerd/commits) Updates `wrangler` from 4.81.0 to 4.81.1 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.81.1/packages/wrangler) Updates `vite` from 8.0.7 to 8.0.8 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.0.8/packages/vite) Updates `qs` from 6.15.0 to 6.15.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.15.0...v6.15.1) Updates `fast-xml-parser` from 5.5.10 to 5.5.11 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/commits) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 25.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-minor-patch - dependency-name: prettier dependency-version: 3.8.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-minor-patch - dependency-name: react dependency-version: 19.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-minor-patch - dependency-name: react-dom dependency-version: 19.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-minor-patch - dependency-name: eslint-config-next dependency-version: 16.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-minor-patch - dependency-name: postcss dependency-version: 8.5.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-minor-patch - dependency-name: "@cloudflare/workers-types" dependency-version: 4.20260410.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-minor-patch - dependency-name: wrangler dependency-version: 4.81.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-minor-patch - dependency-name: vite dependency-version: 8.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-minor-patch - dependency-name: qs dependency-version: 6.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-minor-patch - dependency-name: fast-xml-parser dependency-version: 5.5.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-04-10T19:04:48Z

Apollo Federation Subgraph Compatibility Results

Federation 1 Support Federation 2 Support

`_service`	🟢
`@key (single)`	🟢
`@key (multi)`	🟢
`@key (composite)`	🟢
`repeatable @key`	🟢
`@requires`	🟢
`@provides`	🟢
`federated tracing`	🟢

`@link`	🟢
`@shareable`	🟢
`@tag`	🟢
`@override`	🟢
`@inaccessible`	🟢
`@composeDirective`	🟢
`@interfaceObject`	🟢

Learn more:

theguild-bot · 2026-04-10T19:05:05Z

🚀 Snapshot Release (`alpha`)

The latest changes of this PR are available as alpha on npm (based on the declared changesets):

Package	Version	Info
`@graphql-mesh/json-schema`	`0.109.40-alpha-20260410190354-6eb200340a727d4624f9ee12d14ad9107809d322`	npm ↗︎ unpkg ↗︎
`@graphql-mesh/openapi`	`0.109.50-alpha-20260410190354-6eb200340a727d4624f9ee12d14ad9107809d322`	npm ↗︎ unpkg ↗︎
`@graphql-mesh/raml`	`0.109.40-alpha-20260410190354-6eb200340a727d4624f9ee12d14ad9107809d322`	npm ↗︎ unpkg ↗︎
`@graphql-mesh/migrate-config-cli`	`1.7.37-alpha-20260410190354-6eb200340a727d4624f9ee12d14ad9107809d322`	npm ↗︎ unpkg ↗︎
`@omnigraph/json-schema`	`0.109.39-alpha-20260410190354-6eb200340a727d4624f9ee12d14ad9107809d322`	npm ↗︎ unpkg ↗︎
`@omnigraph/openapi`	`0.109.49-alpha-20260410190354-6eb200340a727d4624f9ee12d14ad9107809d322`	npm ↗︎ unpkg ↗︎
`@omnigraph/raml`	`0.109.39-alpha-20260410190354-6eb200340a727d4624f9ee12d14ad9107809d322`	npm ↗︎ unpkg ↗︎
`@graphql-mesh/transport-rest`	`0.9.38-alpha-20260410190354-6eb200340a727d4624f9ee12d14ad9107809d322`	npm ↗︎ unpkg ↗︎

github-actions · 2026-04-10T19:06:13Z

💻 Website Preview

The latest changes are available as preview in: https://d98d99e8.graphql-mesh.pages.dev

dependabot bot added dependencies javascript Pull requests that update javascript code labels Apr 10, 2026

chore(dependencies): updated changesets for modified dependencies

6eb2003

github-actions bot deployed to preview April 10, 2026 19:06 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the all-minor-patch group across 1 directory with 11 updates#9408

build(deps): bump the all-minor-patch group across 1 directory with 11 updates#9408
dependabot[bot] wants to merge 2 commits intomasterfrom
dependabot/npm_and_yarn/all-minor-patch-194de59248

dependabot bot commented on behalf of github Apr 10, 2026

Uh oh!

github-actions bot commented Apr 10, 2026

Uh oh!

theguild-bot commented Apr 10, 2026

Uh oh!

github-actions bot commented Apr 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Apr 10, 2026

3.8.2

3.8.2

Angular: Support Angular v21.2 (#18722, #19034 by @​fisker)

19.2.5 (April 8th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

v16.2.3

Core Changes

Credits

8.5.9

8.5.9

wrangler@4.81.1

Patch Changes

v8.0.8

8.0.8 (2026-04-09)

Features

Bug Fixes

6.15.1

Uh oh!

github-actions bot commented Apr 10, 2026

Apollo Federation Subgraph Compatibility Results

Uh oh!

theguild-bot commented Apr 10, 2026

🚀 Snapshot Release (alpha)

Uh oh!

github-actions bot commented Apr 10, 2026

💻 Website Preview

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Angular: Support Angular v21.2 (#18722, #19034 by `@fisker`)

🚀 Snapshot Release (`alpha`)