Skip to content

chore: update dependencies (minor+patch) 2026-07-06#1035

Open
svidgen wants to merge 1 commit into
mainfrom
chore/dep-update-2026-07-06
Open

chore: update dependencies (minor+patch) 2026-07-06#1035
svidgen wants to merge 1 commit into
mainfrom
chore/dep-update-2026-07-06

Conversation

@svidgen

@svidgen svidgen commented Jul 7, 2026

Copy link
Copy Markdown
Member

Summary

Minor and patch dependency updates across the monorepo.

Key updates

  • @aws-sdk/*: 3.996.0 → 3.1080.0
  • graphql: 15.5.0 → 15.10.2
  • semver: 7.3.5 → 7.8.5
  • core-js: 3.6.4 → 3.49.0
  • ajv: 8.12.0 → 8.20.0
  • eslint plugins: various minor bumps
  • @commitlint/*: 17.0.x → 17.8.1
  • @microsoft/api-extractor: 7.33.5 → 7.58.9
  • ws: 8.14.2 → 8.21.0
  • tar: 7.5.8 → 7.5.19
  • Various @types/* patch updates

Intentionally skipped

Package Reason
uuid Kept at 9.x — v14 is ESM-only and breaks Jest
@babel/generator, @babel/types Pinned at 7.0.0-beta.4 for compatibility
java-ast 0.4 is breaking for 0.x semver
TypeScript Kept at 4.7.4 — 4.9.5 exposes type errors in node_modules
@graphql-codegen/*, @graphql-tools/* Newer versions have incompatible transitive deps

Resolutions added

  • @graphql-tools/apollo-engine-loader pinned to 8.0.0
  • @graphql-tools/apollo-engine-loader/@graphql-tools/utils pinned to 10.0.11
    • Reason: newer versions use AsyncDisposable which requires TS 5.2+

Relationship to #1032

Supersedes dependabot PR #1032 (Jun 8 batch) which included the problematic uuid v14 bump.

Testing

  • yarn build
  • yarn test ✅ (all 5 packages pass)

Updates include:
- @aws-sdk/* packages: 3.996.0 → 3.1080.0
- graphql: 15.5.0 → 15.10.2
- semver: 7.3.5 → 7.8.5
- core-js: 3.6.4 → 3.49.0
- ajv: 8.12.0 → 8.20.0
- eslint plugins: various minor bumps
- @commitlint/*: 17.0.x → 17.8.1
- @microsoft/api-extractor: 7.33.5 → 7.58.9
- ws: 8.14.2 → 8.21.0
- tar: 7.5.8 → 7.5.19
- Various @types/* patch updates

Skipped:
- uuid: kept at 9.x (v14 is ESM-only, breaks Jest)
- @babel/generator, @babel/types: kept at 7.0.0-beta.4 (pinned)
- java-ast: kept at 0.3.x (0.4 is breaking for 0.x)
- TypeScript: kept at 4.7.4 (4.9.5 causes type errors)
- @graphql-codegen/*, @graphql-tools/*: kept at current ranges
  (newer versions have incompatible transitive type deps)

Added resolutions:
- @graphql-tools/apollo-engine-loader pinned to 8.0.0
- @graphql-tools/apollo-engine-loader/@graphql-tools/utils pinned to 10.0.11
  (newer versions use AsyncDisposable which requires TS 5.2+)

Supersedes dependabot PR #1032 (which included uuid v14 bump).
@svidgen svidgen requested a review from a team as a code owner July 7, 2026 02:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant