Skip to content

chore(deps): bump @graphql-tools/utils and graphql-yoga - #1127

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-b202685878
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-b202685878

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @graphql-tools/utils to 12.1.0 and updates ancestor dependency graphql-yoga. These dependencies need to be updated together.

Updates @graphql-tools/utils from 11.2.2 to 12.1.0

Changelog

Sourced from @​graphql-tools/utils's changelog.

12.1.0

Minor Changes

  • #8445 82457d1 Thanks @​ardatan! - Fix: Preserve symbol-keyed GraphQL extensions when building, merging, or extracting schemas.

    GraphQL.js v17 allows string | symbol keys on schema/type/field extensions (via toObjMapWithSymbols). @graphql-tools was dropping those symbol keys in two places:

    1. mergeDeep only walked enumerable string keys (for...in), so symbol extensions were lost when applying schemaExtensions.
    2. extractExtensionsFromSchema did not copy non-enumerable own symbol keys (enumerable symbols already survive object rest/spread; the explicit loop covers the non-enumerable case).

    Example (bug)

    import { makeExecutableSchema } from '@graphql-tools/schema'
    const META = Symbol('META')
    const schema = makeExecutableSchema({
    typeDefs: /* GraphQL */ type Query { hello: String },
    schemaExtensions: {
    schemaExtensions: {
    [META]: { source: 'app' },
    tagged: true,
    },
    types: {},
    },
    })
    // Before: only string keys survived
    // schema.extensions === { tagged: true }
    // After: symbol keys are preserved
    // schema.extensions[META] === { source: 'app' }
    // schema.extensions.tagged === true

    Schema extension merge/extract and resolver merging always enable { enumerable: true, nonEnumerable: true } so symbol keys survive in tools' own merge/extract paths on every supported GraphQL.js major. (GraphQL.js itself may still drop symbol keys from field configs below v17 when rebuilding types.)

    mergeDeep API

    mergeDeep now accepts an options object. The old positional boolean arguments still work but are deprecated.

    import { mergeDeep } from '@graphql-tools/utils'

... (truncated)

Commits
  • 3634233 chore(release): update monorepo packages versions (#8505)
  • a75d725 fix(utils): keep argument types of defined directives in pruneSchema (#8493)
  • 98673c3 fix(utils): coerce GraphQL 17 argument defaults in getArgumentValues (#8513)
  • 82457d1 fix: preserve symbol-keyed schema extensions (#8445)
  • 691cbd7 build(deps): bump the actions-deps group across 1 directory with 16 updates (...
  • 28d08e8 chore(release): update monorepo packages versions (#8486)
  • fd95dc9 fix(utils): skip empty descriptions in getDescriptionNode (#8499)
  • a73dd1d build(deps-dev): bump the actions-deps group across 1 directory with 3 update...
  • 944121e Upcoming Release Changes (#8483)
  • 19f5b33 fix(utils): compare path keys to proto at the property access (#8482)
  • Additional commits viewable in compare view

Updates graphql-yoga from 5.22.0 to 5.24.6

Changelog

Sourced from graphql-yoga's changelog.

5.24.6

Patch Changes

5.24.5

5.24.4

Patch Changes

5.24.3

Patch Changes

5.24.2

Patch Changes

  • #4589 c08efde Thanks @​egoodwinx! - Remove the built-in subscriptions driver option and its graphql-ws / subscriptions-transport-ws wiring (previously implemented via @nestjs/graphql's GqlSubscriptionService).

    Fix open handle leak in multipart tests.

... (truncated)

Commits

@dependabot
dependabot Bot requested a review from lane711 as a code owner October 22, 2026 16:33
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 22, 2026
Bumps [@graphql-tools/utils](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/utils) to 12.1.0 and updates ancestor dependency [graphql-yoga](https://github.com/graphql-hive/graphql-yoga/tree/HEAD/packages/graphql-yoga). These dependencies need to be updated together.


Updates `@graphql-tools/utils` from 11.2.2 to 12.1.0
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/utils/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/utils@12.1.0/packages/utils)

Updates `graphql-yoga` from 5.22.0 to 5.24.6
- [Release notes](https://github.com/graphql-hive/graphql-yoga/releases)
- [Changelog](https://github.com/graphql-hive/graphql-yoga/blob/main/packages/graphql-yoga/CHANGELOG.md)
- [Commits](https://github.com/graphql-hive/graphql-yoga/commits/graphql-yoga@5.24.6/packages/graphql-yoga)

---
updated-dependencies:
- dependency-name: "@graphql-tools/utils"
  dependency-version: 12.1.0
  dependency-type: indirect
- dependency-name: graphql-yoga
  dependency-version: 5.24.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-b202685878 branch from 7bb06be to 5382ce6 Compare October 23, 2026 16:19
@dependabot
dependabot Bot deployed to internal October 23, 2026 16:19 Active
@coderabbitai

coderabbitai Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 89c257ef-9c96-4cdf-994d-aa2dc558be57
📥 Commits

Reviewing files that changed from the base of the PR and between b015c41 and 5382ce6.

⛔ Files ignored due to path filters: 1
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing: 1
  • packages/core/package.json

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

📝 Summary

Summary by CodeRabbit

  • Maintenance
    • Updated the underlying GraphQL integration to a newer version. Existing public APIs remain unchanged, and this update does not add user-facing features. No other user-visible changes are included in this release.

The core package manifest updates the graphql-yoga dependency range from ^5.21.2 to ^5.24.6.

Changes: GraphQL Yoga Dependency Update

Layer / File(s) Summary
Update dependency range
packages/core/package.json
The graphql-yoga dependency range changes from ^5.21.2 to ^5.24.6.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 5382c

The dependency update is mergeable after normal checks. Workspace installs use the consistent root lockfile; the nested lockfile does not block that workflow.

Architecture risk: 🔵 Low · up to 5382c

The change affects 1 system.

Changed systems: packages/core

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

  • observed — packages/core (library) was modified; 1 changed file maps to changed impact.

Before / after behavior

  • observed — Modified behavior in packages/core/package.json: The graphql-yoga dependency range changed from ^5.21.2 to ^5.24.6.
Pre-merge checks: Passed 4 · Failed 1

Failed Failed checks: 1 warning

Check name Status Explanation Resolution
Description check Warning The description explains the dependency updates and includes relevant changelog details, but it does not follow the repository template. It omits the required Description, Changes, Testing, Screenshot… Update the description to use the repository template. Add a brief description, issue reference or explicit confirmation if none exists, a list of changes, testing results, UI impact information, and completed checklist items.
Passed Passed checks: 4 passed
Check name Status Explanation
Title check Passed The title clearly identifies the dependency updates described in the pull request, including @graphql-tools/utils and graphql-yoga.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: Description check

Explanation

The description explains the dependency updates and includes relevant changelog details, but it does not follow the repository template. It omits the required Description, Changes, Testing, Screenshots/Videos, and Checklist sections.

Resolution

Update the description to use the repository template. Add a brief description, issue reference or explicit confirmation if none exists, a list of changes, testing results, UI impact information, and completed checklist items.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot added area: api Issue concerns api priority: P2 Normal: actionable defects, reliability, documentation and core enhancements labels Oct 23, 2026

This branch was successfully deployed

1 active deployment
internal — 5382ce63 Deployed Oct 23, 2026 by dependabot[bot] via authorize #1742
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: api Issue concerns api dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code priority: P2 Normal: actionable defects, reliability, documentation and core enhancements

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant