[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@graphql-yoga/plugin-apq (source)	3.24.6 → 4.0.1

---

Release Notes

graphql-hive/graphql-yoga (@​graphql-yoga/plugin-apq)

v4.0.1

Compare Source

Patch Changes

• Updated dependencies
  [d73f61c]:
  • graphql-yoga@​6.0.1

v4.0.0

Compare Source

Major Changes

• #​4574
  79b0e8b
  Thanks @​egoodwinx! - ### Breaking Changes
  • Node: minimum supported version is now Node 22. Node 18 and 20 are no longer supported.
    Future releases will only support Node >=22.
  • GraphQL: minimum supported version is now GraphQL 16. GraphQL 14 and 15 are no longer
    supported.
  • Request body parsing: Yoga now limits request bodies to 25,000,000 bytes by default.
    Enforcing this limit streams the body through a byte counter, making POST body parsing
    asynchronous even for an in-memory body. As a result, yoga.fetch() can return a Promise where
    it previously returned a synchronous Response, even when all resolvers and plugins are
    synchronous.

Migration

• If you're on Node 18/20, upgrade to Node 22 or later before upgrading this package.
• If you're on graphql 14/15, upgrade to graphql 16 or 17 first.
• Await yoga.fetch() and response body parsing instead of relying on synchronous results. Set
  maxRequestBodySize: false in createYoga to disable the body-size limit and preserve
  synchronous parsing for in-memory bodies, but only if you enforce an appropriate request-body
  limit elsewhere.

Patch Changes

• Updated dependencies
  [862447a,
  79b0e8b,
  be89d05,
  5334079,
  79b0e8b]:
  • graphql-yoga@​6.0.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: server/package-lock.json

npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: merlin-server@0.1.0
npm error Found: graphql-yoga@5.24.6
npm error node_modules/graphql-yoga
npm error   graphql-yoga@"5.24.6" from the root project
npm error
npm error Could not resolve dependency:
npm error peer graphql-yoga@"^6.0.1" from @graphql-yoga/plugin-apq@4.0.1
npm error node_modules/@graphql-yoga/plugin-apq
npm error   @graphql-yoga/plugin-apq@"4.0.1" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-11-05T23_46_40_755Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-11-05T23_46_40_755Z-debug-0.log