chore(deps): bump the apollo-and-graphql group across 1 directory with 6 updates by dependabot[bot] · Pull Request #7005 · kiva/ui

dependabot · 2026-06-18T13:05:22Z

Bumps the apollo-and-graphql group with 5 updates in the / directory:

Package	From	To
@apollo/client	`3.10.4`	`4.2.12`
@graphql-tools/load	`7.7.0`	`8.1.16`
@graphql-tools/url-loader	`7.17.18`	`9.1.7`
apollo-server-express	`2.21.1`	`3.13.0`
graphql	`15.4.0`	`17.0.2`

Updates @apollo/client from 3.10.4 to 4.2.12

Release notes

Sourced from @apollo/client's releases.

@apollo/client@4.2.12

Patch Changes

#13400 56ca81b Thanks @QiRaining! - Preserve multi-byte UTF-8 characters split across multipart response chunks.

@apollo/client@4.2.11

Patch Changes

#13398 3dd3e9a Thanks @phryneas! - Fix type signature of some DocumentationTypes to fix their display in our documentation.

#13392 d4f0771 Thanks @jerelmiller! - Add a development-only warning when a network result is written to the cache but reading the query back from the cache returns a partial result. This usually points at a merge or read function that did not repair missing fields in the cache, which prevents Apollo Client from applying the cache result to the data received by the network.

@apollo/client@4.2.10

Patch Changes

#13385 bfb674e Thanks @jerelmiller! - Fix accidental widening of the client.mutate return type when optimisticResponse was present.

#13382 365373e Thanks @jerelmiller! - Fix result types widened when a query's variables had constant types (e.g. TypedDocumentNode<Data, { type: "main" }>). This caused options such as returnPartialData or errorPolicy to be reported as their widened types (e.g. boolean, ErrorPolicy) instead of the value that was passed which returned the wrong data and dataState types.

#13382 365373e Thanks @jerelmiller! - Fix issue where unknown options were permitted by TypeScript when passed alongside a valid option to APIs with modern signatures.

#13383 5840f50 Thanks @jerelmiller! - Update the return type of refetch, fetchMore and useLazyQuery's execute function on the provided errorPolicy. Previously these APIs all used the default type which typed data as TData | undefined and error as ErrorLike | undefined.

@apollo/client@4.2.9

Patch Changes

#13364 2f383e7 Thanks @atharv-sys32! - Fix a bug where GraphQL variable default values were not applied during cache reads when variables with defaults were explicitly set to undefined. This caused @include/@skip directives to throw "Invalid variable referenced" errors when the variable was passed as undefined instead of being omitted entirely.

#13367 2b39cc8 Thanks @jerelmiller! - Fix an issue where some @export queries would not react to cache updates when the fields keyed by exported variables were updated.

@apollo/client@4.2.8

Patch Changes

#13349 501a33b Thanks @jerelmiller! - Prevent the setTimeout in connectToDevtools that shows the devtools suggestion from firing when the user agent does not match Chrome or Firefox. This check was previously done inside the setTimeout which meant the timer was scheduled for environments where we'd never show the message anyways. For test environments, this could cause flaky tests when that setTimeout outlived the tests and ran after any virtual DOM was torn down and removed.

@apollo/client@4.2.7

Patch Changes

#13320 538c906 Thanks @jerelmiller! - Cleanup some unused internals. Please file an issue if you notice anything change.

@apollo/client@4.2.6

Patch Changes

#13315 a406cc9 Thanks @fallintoplace! - Prevent relay multipart subscriptions from issuing a fetch request after serializing the request body fails.

#13307 abd0781 Thanks @wolfie! - Speed up cache writes by avoiding a full AST visit of every written field to detect @stream. The check now runs only when the result carries stream info, and only inspects the field node's own directives. As a result, fields that merely contain @stream on a nested field are no longer treated as streamed themselves and now overwrite existing lists like regular fields instead of merging chunk-wise.

@apollo/client@4.2.5

Patch Changes

... (truncated)

Changelog

Sourced from @apollo/client's changelog.

4.2.12

Patch Changes

#13400 56ca81b Thanks @QiRaining! - Preserve multi-byte UTF-8 characters split across multipart response chunks.

4.2.11

Patch Changes

#13398 3dd3e9a Thanks @phryneas! - Fix type signature of some DocumentationTypes to fix their display in our documentation.

#13392 d4f0771 Thanks @jerelmiller! - Add a development-only warning when a network result is written to the cache but reading the query back from the cache returns a partial result. This usually points at a merge or read function that did not repair missing fields in the cache, which prevents Apollo Client from applying the cache result to the data received by the network.

4.2.10

Patch Changes

#13385 bfb674e Thanks @jerelmiller! - Fix accidental widening of the client.mutate return type when optimisticResponse was present.

#13382 365373e Thanks @jerelmiller! - Fix result types widened when a query's variables had constant types (e.g. TypedDocumentNode<Data, { type: "main" }>). This caused options such as returnPartialData or errorPolicy to be reported as their widened types (e.g. boolean, ErrorPolicy) instead of the value that was passed which returned the wrong data and dataState types.

#13382 365373e Thanks @jerelmiller! - Fix issue where unknown options were permitted by TypeScript when passed alongside a valid option to APIs with modern signatures.

#13383 5840f50 Thanks @jerelmiller! - Update the return type of refetch, fetchMore and useLazyQuery's execute function on the provided errorPolicy. Previously these APIs all used the default type which typed data as TData | undefined and error as ErrorLike | undefined.

4.2.9

Patch Changes

#13364 2f383e7 Thanks @atharv-sys32! - Fix a bug where GraphQL variable default values were not applied during cache reads when variables with defaults were explicitly set to undefined. This caused @include/@skip directives to throw "Invalid variable referenced" errors when the variable was passed as undefined instead of being omitted entirely.

#13367 2b39cc8 Thanks @jerelmiller! - Fix an issue where some @export queries would not react to cache updates when the fields keyed by exported variables were updated.

4.2.8

Patch Changes

#13349 501a33b Thanks @jerelmiller! - Prevent the setTimeout in connectToDevtools that shows the devtools suggestion from firing when the user agent does not match Chrome or Firefox. This check was previously done inside the setTimeout which meant the timer was scheduled for environments where we'd never show the message anyways. For test environments, this could cause flaky tests when that setTimeout outlived the tests and ran after any virtual DOM was torn down and removed.

4.2.7

Patch Changes

#13320 538c906 Thanks @jerelmiller! - Cleanup some unused internals. Please file an issue if you notice anything change.

4.2.6

Patch Changes

... (truncated)

Commits

a4a170f Version Packages (#13411)
56ca81b Fix UTF-8 decoding across multipart chunks (#13400)
b124349 Speed up CI (#13410)
ba511be Version Packages (#13401)
d4f0771 Warn when rereading a partial cache result after a write (#13392)
3dd3e9a Fix type signature of some DocumentationTypes to fix their display in our d...
4947447 Version Packages (#13389)
bfb674e Fix client.mutate return type when optimisticResponse is provided (#13385)
5840f50 Update return types for refetch, fetchMore and useLazyQuery execute o...
365373e Fix widening of default options types when variables contain constant types (...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @apollo/client since your current version.

Updates @graphql-tools/load from 7.7.0 to 8.1.16

Changelog

Sourced from @graphql-tools/load's changelog.

8.1.16

Patch Changes

Updated dependencies [2273c21]:

@graphql-tools/schema@10.1.0

@graphql-tools/utils@12.0.0

8.1.15

Patch Changes

Updated dependencies [e90719b]:

@graphql-tools/utils@11.2.2

@graphql-tools/schema@10.0.38

8.1.14

Patch Changes

Updated dependencies [615c1a2]:

@graphql-tools/utils@11.2.1

@graphql-tools/schema@10.0.37

8.1.13

Patch Changes

Updated dependencies []:

@graphql-tools/schema@10.0.36

8.1.12

Patch Changes

Updated dependencies [2609c94]:

@graphql-tools/utils@11.2.0

@graphql-tools/schema@10.0.35

8.1.11

Patch Changes

Updated dependencies [981d461]:

@graphql-tools/utils@11.1.1

... (truncated)

Commits

9feabd9 chore(release): update monorepo packages versions (#8327)
11f0a21 chore(release): update monorepo packages versions (#8303)
3c27f9a chore(release): update monorepo packages versions (#8284)
16096f7 build(deps): bump the actions-deps group across 1 directory with 23 updates (...
76b54da chore(release): update monorepo packages versions (#8264)
062d229 chore(release): update monorepo packages versions (#8261)
c7f20ac chore(release): update monorepo packages versions (#8157)
4aa9156 chore(release): update monorepo packages versions (#8145)
14066f9 chore(release): update monorepo packages versions (#8118)
7417ceb chore(release): update monorepo packages versions (#7754)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @graphql-tools/load since your current version.

Updates @graphql-tools/url-loader from 7.17.18 to 9.1.7

Changelog

Sourced from @graphql-tools/url-loader's changelog.

9.1.7

Patch Changes

#8353 755d699 Thanks @dependabot! - dependencies updates:

Updated dependency ws@^8.21.2 ↗︎ (from ^8.21.1, in dependencies)

#8358 07cd760 Thanks @dependabot! - dependencies updates:

Updated dependency ws@^8.21.3 ↗︎ (from ^8.21.2, in dependencies)

Updated dependencies [755d699, 07cd760, 2273c21]:

@graphql-tools/executor-legacy-ws@1.1.33

@graphql-tools/utils@12.0.0

9.1.6

Patch Changes

Updated dependencies [e90719b]:

@graphql-tools/utils@11.2.2

@graphql-tools/executor-legacy-ws@1.1.32

9.1.5

Patch Changes

Updated dependencies [615c1a2]:

@graphql-tools/utils@11.2.1

@graphql-tools/executor-legacy-ws@1.1.31

9.1.4

Patch Changes

Updated dependencies [2609c94]:

@graphql-tools/utils@11.2.0

@graphql-tools/executor-legacy-ws@1.1.30

9.1.3

... (truncated)

Commits

9feabd9 chore(release): update monorepo packages versions (#8327)
07cd760 build(deps): bump the actions-deps group across 1 directory with 7 updates (#...
755d699 build(deps): bump the actions-deps group with 4 updates (#8353)
3a9c0f1 Update GraphQL Upload (#8350)
14049e9 build(deps): bump the actions-deps group across 1 directory with 12 updates (...
d3e9680 build(deps): bump the actions-deps group across 1 directory with 7 updates (#...
e9fc4f9 Fix type-checking
11f0a21 chore(release): update monorepo packages versions (#8303)
3c27f9a chore(release): update monorepo packages versions (#8284)
d246275 build(deps): bump the actions-deps group with 4 updates (#8293)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @graphql-tools/url-loader since your current version.

Updates apollo-server-express from 2.21.1 to 3.13.0

Commits

f93284e Release
ea2e2c3 Release
fac578a Release
6247d96 Release
538151b Release
69be2f7 Merge pull request from GHSA-8r69-3cvp-wxc3
f519e1d Release
985c079 Release
2bf7f66 chore(deps): update all non-major dependencies (main) (#6852)
f6c5c9f Release
Additional commits viewable in compare view

Updates graphql from 15.4.0 to 17.0.2

Release notes

Sourced from graphql's releases.

v17.0.2 (2026-07-03)

Bug Fix 🐞

#4832 fix: detect default-value changes on input object fields (@spokodev)

Polish 💅

#4829 fix(mapSchemaConfig): fix context for schema argument mapper (@yaacovCR)

Committers: 2

null(@spokodev)

Yaacov Rydzinski (@yaacovCR)

v17.0.1 (2026-06-16)

Bug Fix 🐞

#4824 fix(diagnostics): emit asyncStart after promise settlement to match native tracePromise (@logaretm)

Internal 🏠

#4823 chore(npm): remove obsolete ESM-only package build (@yaacovCR)

#4825 chore(release): protect latest release channels (@yaacovCR)

Committers: 2

Abdelrahman Awad(@logaretm)

Yaacov Rydzinski (@yaacovCR)

v17.0.0 (2026-06-15)

New Feature 🚀

#4819 feat: graduate directives on directives (@yaacovCR)

Bug Fix 🐞

#4799 fix: raise request error on invalid fragment variables (@yaacovCR)

#4800 fix: apply directives when SDL contains type definitions and extensions with directives (@yaacovCR)

#4564 OneOf Inhabitability (@jbellenger)

#4814 fix(KnownDirectivesRule): locations for input field arguments in extensions (@yaacovCR)

#4726 feat(validation): reject directive definition cycles (@yaacovCR)

#4815 Revert "feat(validation): reject directive definition cycles (#4726)" (@yaacovCR)

Docs 📝

#4790 docs: minor diagnostics doc comment improvements (@yaacovCR)

#4791 fix: docs: polish diagnostics comments further (@yaacovCR)

#4793 docs: further improve general execution and tracing docs (@yaacovCR)

#4802 docs: correct extension field comments - v17 (@yaacovCR)

... (truncated)

Commits

71606d7 chore(release): v17.0.2
101de34 fix: detect default-value changes on input object fields (#4832)
82da713 fix(mapSchemaConfig): fix context for schema argument mapper (#4829)
9617473 chore(release): v17.0.1
851bd6a chore(release): protect latest release channels (#4825)
c471d36 fix(diagnostics): emit asyncStart after promise settlement to match native `t...
3f3895f chore(npm): remove obsolete ESM-only package build (#4823)
c7e494a chore(release): v17.0.0
d977f66 docs: post 17.rc-0 update (#4817)
39f865f docs: document @experimental_disableErrorPropagation (#4820)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for graphql since your current version.

Updates graphql-tag from 2.12.6 to 2.12.7

Release notes

Sourced from graphql-tag's releases.

v2.12.7

Patch Changes

#823 bc285e5 Thanks @phryneas! - add support for graphql 17

#458 fd82f1c Thanks @kidroca! - loader: allow a space between # and import word in gql files.

Changelog

Sourced from graphql-tag's changelog.

2.12.7

Patch Changes

#823 bc285e5 Thanks @phryneas! - add support for graphql 17

#458 fd82f1c Thanks @kidroca! - loader: allow a space between # and import word in gql files.

Commits

60464f3 ensure npm >= 11.15.0
e9a2a55 adjust npm staged publishing shim
1d6ea01 Version Packages (#825)
2175303 add changesets for publishing (#824)
bc285e5 add support for graphql 17 (#823)
f463d87 Merge pull request #812 from apollographql/secops/202401/semgrep
ca0fb16 feat: add semgrep job
eeb670e Merge pull request #811 from apollographql/secops/202311/add-codeowners
27dbd7c add default CODEOWNERS
f287273 Merge pull request #809 from apollographql/secops/add-gitleaks
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for graphql-tag since your current version.

dependabot · 2026-06-26T20:47:55Z

Dependabot can't access a private package registry without explicit configuration. Because of this, Dependabot cannot update this pull request.

eddieferrer · 2026-07-24T18:44:16Z

This PR is currently unmergeable due to a peer dependency conflict: @kiva/kv-components@8.22.5 declares peer @apollo/client@"3.x", which is incompatible with the @apollo/client@4.2.8 this PR introduces. Apollo Client 4 cannot be adopted in this repo until @kiva/kv-components is updated to support it. Leaving open for tracking but no action can be taken here until the internal package is updated.

…h 6 updates Bumps the apollo-and-graphql group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@apollo/client](https://github.com/apollographql/apollo-client) | `3.10.4` | `4.2.12` | | [@graphql-tools/load](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/load) | `7.7.0` | `8.1.16` | | [@graphql-tools/url-loader](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/loaders/url) | `7.17.18` | `9.1.7` | | [apollo-server-express](https://github.com/apollographql/apollo-server/tree/HEAD/packages/apollo-server-express) | `2.21.1` | `3.13.0` | | [graphql](https://github.com/graphql/graphql-js) | `15.4.0` | `17.0.2` | Updates `@apollo/client` from 3.10.4 to 4.2.12 - [Release notes](https://github.com/apollographql/apollo-client/releases) - [Changelog](https://github.com/apollographql/apollo-client/blob/main/CHANGELOG.md) - [Commits](https://github.com/apollographql/apollo-client/compare/v3.10.4...@apollo/client@4.2.12) Updates `@graphql-tools/load` from 7.7.0 to 8.1.16 - [Release notes](https://github.com/ardatan/graphql-tools/releases) - [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/load/CHANGELOG.md) - [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/load@8.1.16/packages/load) Updates `@graphql-tools/url-loader` from 7.17.18 to 9.1.7 - [Release notes](https://github.com/ardatan/graphql-tools/releases) - [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/loaders/url/CHANGELOG.md) - [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/url-loader@9.1.7/packages/loaders/url) Updates `apollo-server-express` from 2.21.1 to 3.13.0 - [Release notes](https://github.com/apollographql/apollo-server/releases) - [Commits](https://github.com/apollographql/apollo-server/commits/apollo-server-express@3.13.0/packages/apollo-server-express) Updates `graphql` from 15.4.0 to 17.0.2 - [Release notes](https://github.com/graphql/graphql-js/releases) - [Commits](graphql/graphql-js@v15.4.0...v17.0.2) Updates `graphql-tag` from 2.12.6 to 2.12.7 - [Release notes](https://github.com/apollographql/graphql-tag/releases) - [Changelog](https://github.com/apollographql/graphql-tag/blob/main/CHANGELOG.md) - [Commits](apollographql/graphql-tag@v2.12.6...v2.12.7) --- updated-dependencies: - dependency-name: "@apollo/client" dependency-version: 4.2.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: apollo-and-graphql - dependency-name: "@graphql-tools/load" dependency-version: 8.1.10 dependency-type: direct:production update-type: version-update:semver-major dependency-group: apollo-and-graphql - dependency-name: "@graphql-tools/url-loader" dependency-version: 9.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: apollo-and-graphql - dependency-name: apollo-server-express dependency-version: 3.13.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: apollo-and-graphql - dependency-name: graphql dependency-version: 17.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: apollo-and-graphql - dependency-name: graphql-tag dependency-version: 2.12.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: apollo-and-graphql ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 18, 2026

github-actions Bot assigned mcstover, tiarascoleman, dyersituations and emuvente Jun 18, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 5 times, most recently from 8ebf399 to a9a2f84 Compare June 26, 2026 13:04

dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 5 times, most recently from 018ebe1 to 5c3ac46 Compare July 3, 2026 13:04

dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 7 times, most recently from bee74cd to 9f7790c Compare July 14, 2026 13:04

dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 4 times, most recently from e83feee to 51bfc9f Compare July 20, 2026 13:04

dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 5 times, most recently from 0d48e98 to 147ad4d Compare July 31, 2026 13:04

dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 6 times, most recently from 1a97e38 to 2507e7d Compare August 10, 2026 13:05

dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 5 times, most recently from a8b5658 to 63bc4a3 Compare August 17, 2026 13:04

dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 5 times, most recently from 950a643 to 3614ce5 Compare August 24, 2026 13:04

dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 5 times, most recently from 5187e05 to 4e444ef Compare September 1, 2026 13:04

dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch from 4e444ef to 644cc2c Compare September 2, 2026 13:04

dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch from 644cc2c to e647ff1 Compare September 3, 2026 13:04

Navigation Menu

Uh oh!

chore(deps): bump the apollo-and-graphql group across 1 directory with 6 updates - #7005

chore(deps): bump the apollo-and-graphql group across 1 directory with 6 updates#7005
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8

dependabot Bot commented on behalf of github Jun 18, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 26, 2026

Uh oh!

eddieferrer commented Jul 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​apollo/client@​4.2.12

Patch Changes

@​apollo/client@​4.2.11

Patch Changes

@​apollo/client@​4.2.10

Patch Changes

@​apollo/client@​4.2.9

Patch Changes

@​apollo/client@​4.2.8

Patch Changes

@​apollo/client@​4.2.7

Patch Changes

@​apollo/client@​4.2.6

Patch Changes

@​apollo/client@​4.2.5

Patch Changes

4.2.12

Patch Changes

4.2.11

Patch Changes

4.2.10

Patch Changes

4.2.9

Patch Changes

4.2.8

Patch Changes

4.2.7

Patch Changes

4.2.6

Patch Changes

8.1.16

Patch Changes

8.1.15

Patch Changes

8.1.14

Patch Changes

8.1.13

Patch Changes

8.1.12

Patch Changes

8.1.11

Patch Changes

9.1.7

Patch Changes

9.1.6

Patch Changes

9.1.5

Patch Changes

9.1.4

Patch Changes

9.1.3

v17.0.2 (2026-07-03)

Bug Fix 🐞

Polish 💅

Committers: 2

v17.0.1 (2026-06-16)

Bug Fix 🐞

Internal 🏠

Committers: 2

v17.0.0 (2026-06-15)

New Feature 🚀

Bug Fix 🐞

Docs 📝

v2.12.7

Patch Changes

2.12.7

Patch Changes

Uh oh!

dependabot Bot commented on behalf of github Jun 26, 2026

Uh oh!

eddieferrer commented Jul 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

dependabot Bot commented on behalf of github Jun 18, 2026 •

edited

Loading

`@apollo/client@4`.2.12

`@apollo/client@4`.2.11

`@apollo/client@4`.2.10

`@apollo/client@4`.2.9

`@apollo/client@4`.2.8

`@apollo/client@4`.2.7

`@apollo/client@4`.2.6

`@apollo/client@4`.2.5