Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/apollographql/apollo-server). ## Repository Problems These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/apollographql/apollo-server). - ⚠️ WARN: Package lookup failures ## Deprecations / Replacements > [!WARNING] The following dependencies are either deprecated or have replacements available. | Datasource | Package | Replacement PR? | |------------|------|--------------| | npm | `@types/content-type` |  | ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] chore(deps): update changesets/action action to v2 - [ ] chore(deps): update dependency @changesets/changelog-github to v1 - [ ] chore(deps): update dependency @changesets/cli to v3 - [ ] chore(deps): update dependency @types/content-type to v2 - [ ] chore(deps): update dependency content-type to v3 - [ ] chore(deps): update dependency cspell to v10 - [ ] chore(deps): update dependency github:codecov/codecov-cli to v11 - [ ] chore(deps): update dependency graphql to v17 - [ ] chore(deps): update dependency jest-junit to v17 - [ ] chore(deps): update dependency make-fetch-happen to v16 - [ ] chore(deps): update dependency typescript to v7 - [ ] chore(deps): update dessant/lock-threads action to v6 - [ ] chore(deps): update jdx/mise-action action to v4 - [ ] **Create all rate-limited PRs at once** --- > [!WARNING] > Renovate failed to look up the following dependencies: `Could not determine new digest for update (github-tags package changesets/action)`. > > Files affected: `.github/workflows/release-pr.yml` --- ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [chore(deps): update dependency @apollo/gateway to v2.11.6 [security]](../pull/8193) - [ ] [chore(deps): update all non-major dependencies](../pull/8140) (`@apollo/client`, `@apollo/subgraph`, `@changesets/changelog-github`, `@changesets/cli`, `@graphql-tools/mock`, `@graphql-tools/schema`, `@rollup/plugin-commonjs`, `@rollup/plugin-node-resolve`, `@types/express`, `@types/express-serve-static-core`, `@types/negotiator`, `@types/node`, `@types/superagent`, `cors`, `cspell`, `eslint`, `graphql`, `graphql-tag`, `iconv-lite`, `jdx/mise`, `jest`, `jest-config`, `jest-mock`, `make-fetch-happen`, `nock`, `node`, `prettier`, `rollup`, `supertest`, `ts-jest`, `typescript-eslint`) - [ ] [chore(deps): update dependency graphql-http to v1.23.0](../pull/8228) - [ ] [chore(deps): update dependency typescript to v5.9.3](../pull/8127) - [ ] [chore(deps): update actions/checkout action to v7](../pull/8221) - [ ] [chore(deps): update dependency @apollo/client to v4](../pull/8138) - [ ] [chore(deps): update dependency @rollup/plugin-commonjs to v29](../pull/8156) - [ ] [chore(deps): update dependency @types/supertest to v7](../pull/8209) - [ ] [chore(deps): update dependency eslint to v10](../pull/8184) - [ ] [chore(deps): update dependency whatwg-mimetype to v5](../pull/8175) (`whatwg-mimetype`, `@types/whatwg-mimetype`) - [ ] [chore(deps): update graphqlcodegenerator monorepo (major)](../pull/8144) (`@graphql-codegen/cli`, `@graphql-codegen/typescript-operations`) - [ ] **Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies github-actions (2)

.github/workflows/lock.yml (1) - `dessant/lock-threads v4@be8aa5be94131386884a6da4189effda9b14aa21` → [Updates: `v6`] .github/workflows/release-pr.yml (3) - `actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262` → [Updates: `v7`] - `jdx/mise-action v2@c37c93293d6b742fc901e1406b8f764f6fb19dac` → [Updates: `v4`] - `changesets/action v1@63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b` → [Updates: `v2.1.2`]

mise (1)

.config/mise/config.toml (3) - `node 24.13.0` → [Updates: `24.21.0`] - `github:codecov/codecov-cli 10.4.0` → [Updates: `v11.3.1`] - `npm 11.15`

npm (22)

package.json (50) - `@apollo/client 3.14.0` → [Updates: `3.14.1`, `4.3.0`] - `@apollo/gateway 2.11.2` → [Updates: `2.11.6`] - `@apollo/subgraph 2.11.2` → [Updates: `2.15.1`] - `@apollo/utils.createhash 3.0.1` - `@changesets/changelog-github 0.5.1` → [Updates: `0.7.0`, `1.0.1`] - `@changesets/cli 2.29.6` → [Updates: `2.31.1`, `3.0.3`] - `@graphql-codegen/cli 5.0.7` → [Updates: `7.4.1`] - `@graphql-codegen/typescript-operations 4.6.1` → [Updates: `6.1.6`] - `@graphql-tools/mock 9.0.25` → [Updates: `9.1.14`] - `@graphql-tools/schema 10.0.25` → [Updates: `10.1.1`] - `@rollup/plugin-commonjs 28.0.6` → [Updates: `28.0.9`, `29.0.3`] - `@types/async-retry 1.4.9` - `@types/body-parser 1.19.6` - `@types/content-type 1.1.9` → [Updates: `2.0.0`] - `@types/cors 2.8.19` - `@types/express 5.0.3` → [Updates: `5.0.6`] - `@types/express-serve-static-core 5.0.7` → [Updates: `5.1.3`] - `@types/finalhandler 1.2.4` - `@types/lodash.sumby 4.6.9` - `@types/negotiator 0.6.4` → [Updates: `0.6.5`] - `@types/node 20.19.11` → [Updates: `20.19.43`] - `@types/superagent 8.1.9` → [Updates: `8.1.11`] - `@types/supertest 6.0.3` → [Updates: `7.2.1`] - `@types/whatwg-mimetype 3.0.2` → [Updates: `5.0.0`] - `awaiting 3.0.0` - `cors 2.8.5` → [Updates: `2.8.6`] - `cspell 9.2.0` → [Updates: `9.8.0`, `10.3.3`] - `eslint 9.34.0` → [Updates: `9.39.5`, `10.10.0`] - `eslint-plugin-import 2.32.0` - `graphql 16.11.0` → [Updates: `16.14.2`, `17.0.2`] - `graphql-subscriptions 3.0.0` - `graphql-tag 2.12.6` → [Updates: `2.12.7`] - `iconv-lite 0.7.2` → [Updates: `0.7.3`] - `jest 30.0.5` → [Updates: `30.5.1`] - `jest-config 30.0.5` → [Updates: `30.5.1`] - `jest-junit 16.0.0` → [Updates: `17.0.0`] - `jest-mock 30.0.5` → [Updates: `30.5.1`] - `jest-mock-random 1.1.1` - `jest-serializer-html 7.1.0` - `lodash.sumby 4.6.0` - `nock 14.0.10` → [Updates: `14.0.17`] - `prettier 3.6.2` → [Updates: `3.9.8`] - `requisition 1.7.0` - `rollup 4.59.0` → [Updates: `4.63.3`] - `supertest 7.1.4` → [Updates: `7.2.2`] - `ts-jest 29.4.1` → [Updates: `29.4.12`] - `typescript 5.8.3` → [Updates: `5.9.3`, `7.0.2`] - `typescript-eslint 8.40.0` → [Updates: `8.70.0`] - `node >=20` - `npm >=8.19.2` packages/cache-control-types/package.json (1) - `graphql 14.x || 15.x || 16.x` → [Updates: `14.x || 15.x || 16.x || 17.x`] packages/gateway-interface/package.json (4) - `@apollo/utils.fetcher ^3.0.0` - `@apollo/utils.logger ^3.0.0` - `@apollo/utils.keyvaluecache ^4.0.0` - `graphql 14.x || 15.x || 16.x` → [Updates: `14.x || 15.x || 16.x || 17.x`] packages/integration-testsuite/package.json (13) - `@apollo/client ^3.6.9` → [Updates: `^4.0.0`] - `@apollo/utils.createhash ^3.0.0` - `@apollo/utils.keyvaluecache ^4.0.0` - `express ^5.0.0` - `graphql-http 1.22.4` → [Updates: `1.23.0`] - `graphql-tag ^2.12.6` - `loglevel ^1.8.0` - `superagent ^10.0.0` - `supertest ^7.0.0` - `@jest/globals 29.x || 30.x` - `graphql ^16.11.0` → [Updates: `^16.11.0 || ^17.0.0`] - `jest 29.x || 30.x` - `node >=20` packages/plugin-response-cache/package.json (4) - `@apollo/utils.createhash ^3.0.0` - `@apollo/utils.keyvaluecache ^4.0.0` - `graphql ^16.11.0` → [Updates: `^16.11.0 || ^17.0.0`] - `node >=20` packages/server/errors/package.json packages/server/package.json (19) - `@apollo/utils.createhash ^3.0.0` - `@apollo/utils.fetcher ^3.0.0` - `@apollo/utils.isnodelike ^3.0.0` - `@apollo/utils.keyvaluecache ^4.0.0` - `@apollo/utils.logger ^3.0.0` - `@apollo/utils.usagereporting ^2.1.0` - `@apollo/utils.withrequired ^3.0.0` - `@graphql-tools/schema ^10.0.0` - `async-retry ^1.2.1` - `body-parser ^2.2.2` - `content-type ^1.0.5` → [Updates: `^3.0.0`] - `cors ^2.8.5` - `finalhandler ^2.1.0` - `loglevel ^1.6.8` - `lru-cache ^11.1.0` - `negotiator ^1.0.0` - `whatwg-mimetype ^4.0.0` → [Updates: `^5.0.0`] - `graphql ^16.11.0` → [Updates: `^16.11.0 || ^17.0.0`] - `node >=20` packages/server/plugin/cacheControl/package.json packages/server/plugin/disabled/package.json packages/server/plugin/disableSuggestions/package.json packages/server/plugin/drainHttpServer/package.json packages/server/plugin/inlineTrace/package.json packages/server/plugin/landingPage/default/package.json packages/server/plugin/schemaReporting/package.json packages/server/plugin/subscriptionCallback/package.json packages/server/plugin/usageReporting/package.json packages/server/standalone/package.json packages/usage-reporting-protobuf/generated/cjs/package.json packages/usage-reporting-protobuf/generated/esm/package.json packages/usage-reporting-protobuf/package.json (1) - `@apollo/protobufjs 1.2.8` smoke-test/nodenext/package.json smoke-test/package.json (7) - `graphql 16.11.0` → [Updates: `16.14.2`, `17.0.2`] - `make-fetch-happen 15.0.1` → [Updates: `15.0.6`, `16.0.1`] - `@rollup/plugin-commonjs 28.0.6` → [Updates: `28.0.9`, `29.0.3`] - `@rollup/plugin-json 6.1.0` - `@rollup/plugin-node-resolve 16.0.1` → [Updates: `16.0.3`] - `@types/make-fetch-happen 10.0.4` - `rollup 4.59.0` → [Updates: `4.63.3`]

regex (1)

.circleci/config.yml (1) - `jdx/mise v2026.5.5` → [Updates: `v2026.9.11`]

--- - [ ] Check this box to trigger a request for Renovate to run again on this repository