Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/graphql-hive/graphql-yoga). ## Deprecations / Replacements > [!WARNING] These dependencies are either deprecated or have replacements available: | Datasource | Name | Replacement PR? | |------------|------|--------------| | npm | `@aws-cdk/aws-apigateway` |  | | npm | `@aws-cdk/aws-lambda` |  | | npm | `@aws-cdk/core` |  | | npm | `subscriptions-transport-ws` |  | ## Rate-Limited The following updates are currently rate-limited. To force their creation now, click on a checkbox below. - [ ] fix(deps): update nextjs monorepo to v16.1.1 (`eslint-config-next`, `next`) - [ ] chore(deps): update dependency @google-cloud/functions-framework to v5 - [ ] chore(deps): update dependency @graphql-tools/delegate to v12 - [ ] chore(deps): update dependency firebase-tools to v15 - [ ] chore(deps): update prisma monorepo to v7 (major) (`@prisma/client`, `@prisma/internals`, `@prisma/migrate`, `prisma`) - [ ] chore(deps): update actions/setup-node digest to 395ad32 - [ ] chore(deps): update actions/cache action to v5 - [ ] chore(deps): update actions/checkout action to v6 - [ ] chore(deps): update dependency glob to v13 - [ ] chore(deps): update dependency jws to v4 - [x] **Create all rate-limited PRs at once** ## PR Edited (Blocked) The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below. - [x] [fix(deps): update all non-major dependencies](../pull/4286) (`@apollo/client`, `@apollo/gateway`, `@azure/functions`, `@cloudflare/workers-types`, `@escape.tech/graphql-armor`, `@faker-js/faker`, `@google-cloud/functions-framework`, `@graphql-codegen/cli`, `@graphql-tools/url-loader`, `@pothos/core`, `@prisma/client`, `@prisma/internals`, `@prisma/migrate`, `@pulumi/aws`, `@pulumi/aws-native`, `@pulumi/azure-native`, `@pulumi/docker`, `@pulumi/pulumi`, `@types/aws-lambda`, `@types/express`, `@types/node`, `@types/react`, `@types/react-dom`, `@vitejs/plugin-react`, `autoprefixer`, `aws-cdk`, `aws-cdk-lib`, `cookie`, `crypto-hash`, `egg`, `esbuild`, `eslint`, `express`, `fast-xml-parser`, `fastify`, `json-bigint-patch`, `lint-staged`, `node-forge`, `pino-pretty`, `pnpm`, `prettier`, `prettier-plugin-svelte`, `prisma`, `react`, `react-dom`, `rimraf`, `start-server-and-test`, `svelte`, `svelte-check`, `tailwindcss`, `ts-jest`, `tsx`, `validator`, `vite`, `webpack`, `wrangler`) ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] [fix(deps): update dependency @theguild/components to v9.11.3](../pull/4316) - [ ] [chore(deps): update dependency @changesets/changelog-github to v0.5.2](../pull/4317) - [ ] [chore(deps): update dependency @changesets/cli to v2.29.8](../pull/4318) - [x] [chore(deps): update graphql-codegen](../pull/4319) (`@graphql-codegen/typescript`, `@graphql-codegen/typescript-resolvers`) - [ ] [chore(deps): update dependency @eddeee888/gcg-typescript-resolver-files to v0.15.0](../pull/4322) - [x] [chore(deps): update typescript-eslint monorepo to v8.51.0](../pull/4323) (`@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`) - [x] [chore(deps): lock file maintenance](../pull/4290) - [x] **Click on this checkbox to rebase all open PRs at once** ## PR Closed (Blocked) The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below. - [ ] [chore(deps): update dependency tailwindcss to v4](../pull/3725) - [ ] [chore(deps): update dependency @changesets/assemble-release-plan to v5.2.4](../pull/3322) - [ ] [chore(deps): update dependency @changesets/assemble-release-plan to v6](../pull/3324) - [ ] [chore(deps): update dependency eslint-plugin-unicorn to v62](../pull/4244) - [ ] [fix(deps): update dependency @pulumi/cloudflare to v6](../pull/3993) - [ ] [fix(deps): update dependency lru-cache to v11](../pull/3380) ## Detected Dependencies docker-compose (2)

examples/apollo-federation-compatibility/docker-compose.yaml (1) - `node 24-slim` examples/nestjs-apollo-federation-compatibility/docker-compose.yaml (1) - `node 24-slim`

dockerfile (2)

examples/gcp-cloud-run/Dockerfile (1) - `node 24-slim` examples/issue-template/.codesandbox/Dockerfile (1) - `node 24-slim`

github-actions (7)

.github/actions/install-playwright-binaries/action.yml (2) - `actions/github-script v8@ed597411d8f924073f98dfc5c65a23a2325f34cd` - `actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830` → [Updates: `v5`] .github/workflows/benchmark.yml (2) - `actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd` → [Updates: `v6`] - `the-guild-org/shared-config v1` .github/workflows/ci.yml (30) - `actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd` → [Updates: `v6`] - `pnpm/action-setup v4.2.0@41ff72655975bd51cab0327fa583b6e92b6d3061` - `actions/setup-node v6@2028fbc5c25fe9cf00d9f06a71cc4710d4507903` → [Updates: `v6`] - `denoland/setup-deno v1` - `actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830` → [Updates: `v5`] - `actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd` → [Updates: `v6`] - `pnpm/action-setup v4.2.0@41ff72655975bd51cab0327fa583b6e92b6d3061` - `actions/setup-node v6@2028fbc5c25fe9cf00d9f06a71cc4710d4507903` → [Updates: `v6`] - `actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830` → [Updates: `v5`] - `nick-fields/retry v3@ce71cc2ab81d554ebbe88c79ab5975992d79ba08` - `nick-fields/retry v3@ce71cc2ab81d554ebbe88c79ab5975992d79ba08` - `actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd` → [Updates: `v6`] - `pnpm/action-setup v4.2.0@41ff72655975bd51cab0327fa583b6e92b6d3061` - `actions/setup-node v6@2028fbc5c25fe9cf00d9f06a71cc4710d4507903` → [Updates: `v6`] - `actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830` → [Updates: `v5`] - `nick-fields/retry v3@ce71cc2ab81d554ebbe88c79ab5975992d79ba08` - `nick-fields/retry v3@ce71cc2ab81d554ebbe88c79ab5975992d79ba08` - `actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd` → [Updates: `v6`] - `pnpm/action-setup v4.2.0@41ff72655975bd51cab0327fa583b6e92b6d3061` - `actions/setup-node v6@2028fbc5c25fe9cf00d9f06a71cc4710d4507903` → [Updates: `v6`] - `actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830` → [Updates: `v5`] - `apollographql/federation-subgraph-compatibility v2@b6981fd83d24450a7cbd2d7727196e0ba57614e0` - `actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd` → [Updates: `v6`] - `pnpm/action-setup v4.2.0@41ff72655975bd51cab0327fa583b6e92b6d3061` - `actions/setup-node v6@2028fbc5c25fe9cf00d9f06a71cc4710d4507903` → [Updates: `v6`] - `actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830` → [Updates: `v5`] - `pulumi/setup-pulumi v2@b374ceb6168550de27c6eba92e01c1a774040e11` - `nick-fields/retry v3@ce71cc2ab81d554ebbe88c79ab5975992d79ba08` - `the-guild-org/shared-config v1` - `deno 2.x` .github/workflows/pr.yml (3) - `the-guild-org/shared-config v1` - `the-guild-org/shared-config v1` - `the-guild-org/shared-config v1` .github/workflows/release.yml (1) - `the-guild-org/shared-config v1` .github/workflows/website-integrity.yml (3) - `actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd` → [Updates: `v6`] - `the-guild-org/shared-config v1` - `marocchino/sticky-pull-request-comment v2@773744901bac0e8cbb5a0dc842800d45e9b2b405` .github/workflows/website.yml (5) - `actions/checkout v5@93cb6efe18208431cddfb8368fd83d5badbf9bfd` → [Updates: `v6`] - `pnpm/action-setup v4.2.0@41ff72655975bd51cab0327fa583b6e92b6d3061` - `actions/setup-node v6@2028fbc5c25fe9cf00d9f06a71cc4710d4507903` → [Updates: `v6`] - `actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830` → [Updates: `v5`] - `the-guild-org/shared-config main`

mise (1)

.mise.toml (1) - `node 24`

nodenv (1)

.node-version (1) - `node v25`

npm (85)

benchmark/package.json (4) - `@envelop/graphql-jit 11.0.0` - `@faker-js/faker 10.1.0` → [Updates: `10.2.0`] - `graphql 16.12.0` - `start-server-and-test 2.1.2` → [Updates: `2.1.3`] e2e/package.json (9) - `@pulumi/aws 7.11.0` → [Updates: `7.15.0`] - `@pulumi/aws-native 1.38.0` → [Updates: `1.46.0`] - `@pulumi/azure-native 3.10.1` → [Updates: `3.12.0`] - `@pulumi/cloudflare 5.49.1` → [Updates: `6.12.0`] - `@pulumi/docker 4.9.0` → [Updates: `4.11.0`] - `@pulumi/pulumi 3.206.0` → [Updates: `3.214.1`] - `@types/node 24.10.0` → [Updates: `24.10.4`] - `tsx 4.20.6` → [Updates: `4.21.0`] - `typescript 5.9.3` examples/apollo-federation-compatibility/package.json (8) - `@apollo/subgraph ^2.4.0` - `graphql 16.12.0` - `graphql-tag 2.12.6` - `@graphql-codegen/cli 6.0.1` → [Updates: `6.1.0`] - `@graphql-codegen/typescript 5.0.5` → [Updates: `5.0.7`] - `@graphql-codegen/typescript-resolvers 5.1.3` → [Updates: `5.1.5`] - `@types/node 24.10.0` → [Updates: `24.10.4`] - `esbuild 0.25.12` → [Updates: `0.27.2`] examples/apollo-federation/gateway/package.json (3) - `@apollo/gateway 2.12.0` → [Updates: `2.12.2`] - `@envelop/apollo-federation 8.0.0` - `graphql 16.12.0` examples/apollo-federation/package.json (3) - `concurrently ^9.0.0` - `@apollo/gateway 2.12.0` → [Updates: `2.12.2`] - `@whatwg-node/fetch ^0.10.1` examples/apollo-federation/service/package.json (2) - `@apollo/subgraph ^2.4.0` - `graphql 16.12.0` examples/apollo-managed-federation/package.json (2) - `tsx 4.20.6` → [Updates: `4.21.0`] - `typescript 5.9.3` examples/aws-lambda/lambda/package.json (1) - `graphql 16.12.0` examples/aws-lambda/package.json (12) - `@aws-cdk/aws-apigateway 1.204.0` - `@aws-cdk/aws-lambda 1.204.0` - `@aws-cdk/core 1.204.0` - `source-map-support ^0.5.16` - `@aws-cdk/assert 2.68.0` - `@types/aws-lambda 8.10.157` → [Updates: `8.10.159`] - `@types/node 24.10.0` → [Updates: `24.10.4`] - `aws-cdk 2.1031.2` → [Updates: `2.1100.1`] - `aws-cdk-lib 2.222.0` → [Updates: `2.233.0`] - `esbuild 0.25.12` → [Updates: `0.27.2`] - `ts-node 10.9.2` - `typescript 5.9.3` examples/azure-function/package.json (5) - `@azure/functions 4.9.0` → [Updates: `4.10.0`] - `graphql 16.12.0` - `tslib 2.8.1` - `esbuild 0.25.12` → [Updates: `0.27.2`] - `typescript 5.9.3` examples/bun-pothos/package.json (6) - `@pothos/core ^4.5.1` - `@pothos/plugin-authz ^3.5.10` - `@whatwg-node/server-plugin-cookies ^1.0.5` - `bun ^1.2.7` - `bun-types ^1.2.7` - `graphql ^16.10.0` examples/bun-yoga-ws/package.json (6) - `bun ^1.1.42` - `bun-types ^1.0.0` - `graphql 16.12.0` - `graphql-ws ^6.0.0` - `@whatwg-node/fetch ^0.10.1` - `typescript ^5.4.5` examples/bun/package.json (6) - `bun ^1.1.42` - `bun-types ^1.1.42` - `graphql 16.12.0` - `@types/bun ^1.1.14` - `@whatwg-node/fetch ^0.10.1` - `typescript ^5.4.5` examples/cloudflare-advanced/package.json (6) - `@cloudflare/workers-types ^4.0.0` - `graphql 16.12.0` - `ts-loader 9.5.4` - `typescript 5.9.3` - `webpack 5.102.1` → [Updates: `5.104.1`] - `wrangler 4.46.0` → [Updates: `4.54.0`] examples/cloudflare-modules/package.json (5) - `graphql 16.12.0` - `@cloudflare/workers-types 4.20251106.1` → [Updates: `4.20260103.0`] - `@whatwg-node/fetch ^0.10.1` - `typescript 5.9.3` - `wrangler 4.46.0` → [Updates: `4.54.0`] examples/cookies/package.json (6) - `@whatwg-node/server-plugin-cookies ^1.0.3` - `graphql 16.12.0` - `@types/node 24.10.0` → [Updates: `24.10.4`] - `ts-node 10.9.2` - `ts-node-dev 2.0.0` - `typescript 5.9.3` examples/defer-stream/package.json (3) - `graphql 16.12.0` - `ts-node 10.9.2` - `typescript 5.9.3` examples/deno/package.json examples/egg/package.json (7) - `@graphql-tools/utils 10.11.0` - `egg 3.31.0` → [Updates: `3.32.0`] - `egg-cors 3.0.1` - `graphql 16.12.0` - `@eggjs/tsconfig 3.0.0` - `egg-bin 6.13.0` - `egg-mock 5.15.2` examples/error-handling/package.json (4) - `@whatwg-node/fetch ^0.10.1` - `graphql 16.12.0` - `ts-node 10.9.2` - `typescript 5.9.3` examples/express-helmet/package.json (5) - `@types/express 5.0.5` → [Updates: `5.0.6`] - `express 5.2.0` → [Updates: `5.2.1`] - `helmet 8.1.0` - `supertest 7.1.4` - `ts-node 10.9.2` examples/express/package.json (4) - `@types/express 5.0.5` → [Updates: `5.0.6`] - `express 5.2.0` → [Updates: `5.2.1`] - `supertest 7.1.4` - `ts-node 10.9.2` examples/fastify-modules/package.json (7) - `@envelop/graphql-modules 9.0.0` - `@graphql-tools/load-files 7.0.1` - `fastify 5.6.1` → [Updates: `5.6.2`] - `graphql-modules 3.0.0` - `reflect-metadata 0.2.2` - `@types/node 24.10.0` → [Updates: `24.10.4`] - `ts-node 10.9.2` examples/fastify/package.json (6) - `@whatwg-node/fetch ^0.10.1` - `fastify 5.6.1` → [Updates: `5.6.2`] - `pino-pretty 13.1.2` → [Updates: `13.1.3`] - `@graphql-tools/utils ^10.11.0` - `@types/node 24.10.0` → [Updates: `24.10.4`] - `ts-node 10.9.2` examples/file-upload-nextjs-pothos/package.json (10) - `@pothos/core 4.10.0` → [Updates: `4.12.0`] - `graphql 16.12.0` - `next 16.0.10` → [Updates: `16.1.1`] - `react 19.2.0` → [Updates: `19.2.3`] - `react-dom 19.2.0` → [Updates: `19.2.3`] - `@types/react ^19.0.0` - `@whatwg-node/fetch ^0.10.1` - `eslint 9.39.1` → [Updates: `9.39.2`] - `eslint-config-next 16.0.3` → [Updates: `16.1.1`] - `typescript 5.9.3` examples/file-upload-nexus/package.json (5) - `graphql 16.12.0` - `nexus ^1.3.0` - `@whatwg-node/fetch ^0.10.1` - `ts-node 10.9.2` - `typescript 5.9.3` examples/file-upload/package.json (3) - `graphql 16.12.0` - `ts-node 10.9.2` - `@whatwg-node/fetch ^0.10.1` examples/firebase/functions/package.json (7) - `firebase-admin ^13.0.0` - `firebase-functions ^7.0.0` - `graphql 16.12.0` - `concurrently 9.2.1` - `firebase-functions-test ^3.0.0` - `firebase-tools ^14.0.0` → [Updates: `^15.0.0`] - `typescript ^5.0.0` examples/gcp-cloud-run/package.json (1) - `graphql 16.12.0` examples/gcp-functions/package.json (4) - `graphql 16.12.0` - `@google-cloud/functions-framework 4.0.0` → [Updates: `4.0.1`, `5.0.0`] - `@types/node 24.10.0` → [Updates: `24.10.4`] - `typescript 5.9.3` examples/generic-auth/package.json (7) - `@envelop/generic-auth 11.0.0` - `graphql 16.12.0` - `@types/node 24.10.0` → [Updates: `24.10.4`] - `@whatwg-node/fetch 0.10.13` - `cross-env 10.1.0` - `tsx 4.20.6` → [Updates: `4.21.0`] - `typescript 5.9.3` examples/graphql-armor/package.json (7) - `@escape.tech/graphql-armor 3.1.7` → [Updates: `3.2.0`] - `graphql 16.12.0` - `@types/node 24.10.0` → [Updates: `24.10.4`] - `cross-env 10.1.0` - `ts-node 10.9.2` - `ts-node-dev 2.0.0` - `typescript 5.9.3` examples/graphql-sse/package.json (3) - `graphql 16.12.0` - `ts-node 10.9.2` - `typescript 5.9.3` examples/graphql-ws/package.json (8) - `graphql 16.12.0` - `graphql-ws 6.0.6` - `ws 8.18.3` - `@types/ws ^8.5.13` - `cross-env 10.1.0` - `ts-node 10.9.2` - `ts-node-dev 2.0.0` - `typescript 5.9.3` examples/hackernews/package.json (12) - `graphql 16.12.0` - `@eddeee888/gcg-typescript-resolver-files 0.14.1` → [Updates: `0.15.0`] - `@graphql-codegen/cli 6.0.1` → [Updates: `6.1.0`] - `@prisma/client 6.19.0` → [Updates: `6.19.1`, `7.2.0`] - `@prisma/internals 6.19.0` → [Updates: `6.19.1`, `7.2.0`] - `@prisma/migrate 6.19.0` → [Updates: `6.19.1`, `7.2.0`] - `@types/node 24.10.0` → [Updates: `24.10.4`] - `cross-env 10.1.0` - `prisma 6.19.0` → [Updates: `6.19.1`, `7.2.0`] - `ts-node 10.9.2` - `ts-node-dev 2.0.0` - `typescript 5.9.3` examples/hapi/package.json (5) - `@hapi/hapi 21.4.4` - `graphql 16.12.0` - `@whatwg-node/fetch ^0.10.1` - `ts-node 10.9.2` - `typescript 5.9.3` examples/hello-world/package.json (1) - `graphql 16.12.0` examples/issue-template/package.js