chore(deps): bump the apollo-and-graphql group across 1 directory with 6 updates by dependabot[bot] · Pull Request #7005 · kiva/ui

dependabot · 2026-06-18T13:05:22Z

Bumps the apollo-and-graphql group with 5 updates in the / directory:

Package	From	To
@apollo/client	`3.10.4`	`4.2.5`
@graphql-tools/load	`7.7.0`	`8.1.11`
@graphql-tools/url-loader	`7.17.18`	`9.1.3`
apollo-server-express	`2.21.1`	`3.13.0`
graphql	`15.4.0`	`17.0.2`

Updates @apollo/client from 3.10.4 to 4.2.5

Release notes

Sourced from @apollo/client's releases.

@apollo/client@4.2.5

Patch Changes

#13302 bb75dd3 Thanks @tpict! - Export KeyArgsFunction and RelayFieldPolicy types from public entrypoints.

@apollo/client@4.2.4

Patch Changes

#13281 e4df809 Thanks @jerelmiller! - Fixes an issue where client.readFragment and client.readQuery ignored the optimistic option when passed in the options object.

@apollo/client@4.2.3

Patch Changes

#13254 66e9dfc Thanks @jerelmiller! - Add support for graphql v17 as a valid peer dependency.

@apollo/client@4.2.2

Patch Changes

#13184 c207b88 Thanks @audrius-savickas! - Preserve referential equality of masked data on refetch when the result is deeply equal to the previous result.

@apollo/client@4.2.1

Patch Changes

#13248 062ffe3 Thanks @jerelmiller! - Fixes an issue where useLazyQuery would not apply a changed pollInterval between renders.

@apollo/client@4.2.0

Minor Changes
#13132 f3ce805 Thanks @phryneas! - Introduce "classic" and "modern" method and hook signatures.

Apollo Client 4.2 introduces two signature styles for methods and hooks. All signatures previously present are now "classic" signatures, and a new set of "modern" signatures are added alongside them.

Classic signatures are the default and are identical to the signatures before Apollo Client 4.2, preserving backward compatibility. Classic signatures still work with manually specified TypeScript generics (e.g., useSuspenseQuery<MyData>(...)). However, manually specifying generics has been discouraged for a long time—instead, we recommend using TypedDocumentNode to automatically infer types, which provides more accurate results without any manual annotations.

Modern signatures automatically incorporate your declared defaultOptions into return types, providing more accurate types. Modern signatures infer types from the document node and do not support manually passing generic type arguments; TypeScript will produce a type error if you attempt to do so.

Methods and hooks automatically switch to modern signatures the moment any non-optional property is declared in DeclareDefaultOptions. The switch happens across all methods and hooks globally:
// apollo.d.ts
import "@apollo/client";
declare module "@apollo/client" {
  namespace ApolloClient {
    namespace DeclareDefaultOptions {
      interface WatchQuery {
        errorPolicy: "all"; // non-optional → modern signatures activated automatically
      }
    }
  }
}

... (truncated)

Changelog

Sourced from @apollo/client's changelog.

4.2.5

Patch Changes

#13302 bb75dd3 Thanks @tpict! - Export KeyArgsFunction and RelayFieldPolicy types from public entrypoints.

4.2.4

Patch Changes

#13281 e4df809 Thanks @jerelmiller! - Fixes an issue where client.readFragment and client.readQuery ignored the optimistic option when passed in the options object.

4.2.3

Patch Changes

#13254 66e9dfc Thanks @jerelmiller! - Add support for graphql v17 as a valid peer dependency.

4.2.2

Patch Changes

#13184 c207b88 Thanks @audrius-savickas! - Preserve referential equality of masked data on refetch when the result is deeply equal to the previous result.

4.2.1

Patch Changes

#13248 062ffe3 Thanks @jerelmiller! - Fixes an issue where useLazyQuery would not apply a changed pollInterval between renders.

4.2.0

Minor Changes
#13132 f3ce805 Thanks @phryneas! - Introduce "classic" and "modern" method and hook signatures.

Apollo Client 4.2 introduces two signature styles for methods and hooks. All signatures previously present are now "classic" signatures, and a new set of "modern" signatures are added alongside them.

Classic signatures are the default and are identical to the signatures before Apollo Client 4.2, preserving backward compatibility. Classic signatures still work with manually specified TypeScript generics (e.g., useSuspenseQuery<MyData>(...)). However, manually specifying generics has been discouraged for a long time—instead, we recommend using TypedDocumentNode to automatically infer types, which provides more accurate results without any manual annotations.

Modern signatures automatically incorporate your declared defaultOptions into return types, providing more accurate types. Modern signatures infer types from the document node and do not support manually passing generic type arguments; TypeScript will produce a type error if you attempt to do so.

Methods and hooks automatically switch to modern signatures the moment any non-optional property is declared in DeclareDefaultOptions. The switch happens across all methods and hooks globally:
// apollo.d.ts
import "@apollo/client";
declare module "@apollo/client" {
  namespace ApolloClient {
    namespace DeclareDefaultOptions {

... (truncated)

Commits

38de462 Version Packages (#13303)
bb75dd3 Expose KeyArgsFunction, RelayFieldPolicy types to consumers (#13302)
eee2c4d Fix graphql codegen test generation (#13300)
5d58ed0 Version Packages (#13298)
e4df809 Fix client.readFragment/client.readQuery when passing optimistic: true in o...
61b6c00 docs: add guidance on testing suspense hooks with MockedProvider (#13291)
60ac9fa Document refetchQueries caveat for skip vs skipToken (#13290)
42948e1 chore(deps): update dependency graphql to v17.0.1 (#13293)
6004933 [docs] Fix anchor link for useLazyQuery (#13288)
691aa3b chore(deps): update all dependencies - patch updates to v16.14.2 (#13283)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @apollo/client since your current version.

Updates @graphql-tools/load from 7.7.0 to 8.1.11

Changelog

Sourced from @graphql-tools/load's changelog.

8.1.11

Patch Changes

Updated dependencies [981d461]:

@graphql-tools/utils@11.1.1

@graphql-tools/schema@10.0.34

8.1.10

Patch Changes

Updated dependencies [a4b7dce]:

@graphql-tools/utils@11.1.0

@graphql-tools/schema@10.0.33

8.1.9

Patch Changes

Updated dependencies [ae36a0e]:

@graphql-tools/utils@11.0.1

@graphql-tools/schema@10.0.32

8.1.8

Patch Changes

Updated dependencies [6f3776c]:

@graphql-tools/utils@11.0.0

@graphql-tools/schema@10.0.31

8.1.7

Patch Changes

Updated dependencies [2118a80]:

@graphql-tools/utils@10.11.0

@graphql-tools/schema@10.0.30

8.1.6

Patch Changes

Updated dependencies

... (truncated)

Commits

c7f20ac chore(release): update monorepo packages versions (#8157)
4aa9156 chore(release): update monorepo packages versions (#8145)
14066f9 chore(release): update monorepo packages versions (#8118)
7417ceb chore(release): update monorepo packages versions (#7754)
7b17d1f chore(release): update monorepo packages versions (#7722)
8e2f481 chore(release): update monorepo packages versions (#7684)
53fdba6 chore(release): update monorepo packages versions (#7680)
5b26b6d chore(release): update monorepo packages versions (#7655)
823336c chore(release): update monorepo packages versions (#7514)
7563177 chore(release): update monorepo packages versions (#7300)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @graphql-tools/load since your current version.

Updates @graphql-tools/url-loader from 7.17.18 to 9.1.3

Changelog

Sourced from @graphql-tools/url-loader's changelog.

9.1.3

Patch Changes

Updated dependencies [981d461]:

@graphql-tools/utils@11.1.1

@graphql-tools/executor-legacy-ws@1.1.29

9.1.2

Patch Changes

Updated dependencies [a4b7dce]:

@graphql-tools/utils@11.1.0

@graphql-tools/executor-legacy-ws@1.1.28

9.1.1

Patch Changes

Updated dependencies [ae36a0e]:

@graphql-tools/utils@11.0.1

@graphql-tools/executor-legacy-ws@1.1.27

9.1.0

Minor Changes
#8103 db8cde4 Thanks @ardatan! - Bump HTTP Executor that introduces exposeHTTPDetailsInExtensions option
import { parse } from 'graphql'
import { UrlLoader } from '@graphql-tools/url-loader'
const loader = new UrlLoader()
const executor = loader.getExecutorAsync('http://localhost:4000/graphql', {
exposeHTTPDetailsInExtensions: true
})
const result = await executor({
document: parse(/* GraphQL */ `
query {
hello
}

... (truncated)

Commits

c7f20ac chore(release): update monorepo packages versions (#8157)
fc1e7c4 build(deps): bump the actions-deps group across 1 directory with 20 updates (...
1fb1076 build(deps): bump the actions-deps group across 1 directory with 15 updates (...
a69673e chore(deps): update dependency puppeteer to v25 (#8188)
81ee006 build(deps): bump the actions-deps group across 1 directory with 8 updates (#...
e6cf4c5 build(deps): bump the actions-deps group with 10 updates (#8174)
87da6d7 build(deps): bump the actions-deps group across 1 directory with 11 updates (...
f0caccf build(deps): bump the actions-deps group across 1 directory with 9 updates (#...
4aa9156 chore(release): update monorepo packages versions (#8145)
c097bc9 build(deps): bump the actions-deps group across 1 directory with 9 updates (#...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @graphql-tools/url-loader since your current version.

Updates apollo-server-express from 2.21.1 to 3.13.0

Commits

f93284e Release
ea2e2c3 Release
fac578a Release
6247d96 Release
538151b Release
69be2f7 Merge pull request from GHSA-8r69-3cvp-wxc3
f519e1d Release
985c079 Release
2bf7f66 chore(deps): update all non-major dependencies (main) (#6852)
f6c5c9f Release
Additional commits viewable in compare view

Updates graphql from 15.4.0 to 17.0.2

Release notes

Sourced from graphql's releases.

v17.0.2 (2026-07-03)

Bug Fix 🐞

#4832 fix: detect default-value changes on input object fields (@spokodev)

Polish 💅

#4829 fix(mapSchemaConfig): fix context for schema argument mapper (@yaacovCR)

Committers: 2

null(@spokodev)

Yaacov Rydzinski (@yaacovCR)

v17.0.1 (2026-06-16)

Bug Fix 🐞

#4824 fix(diagnostics): emit asyncStart after promise settlement to match native tracePromise (@logaretm)

Internal 🏠

#4823 chore(npm): remove obsolete ESM-only package build (@yaacovCR)

#4825 chore(release): protect latest release channels (@yaacovCR)

Committers: 2

Abdelrahman Awad(@logaretm)

Yaacov Rydzinski (@yaacovCR)

v17.0.0 (2026-06-15)

New Feature 🚀

#4819 feat: graduate directives on directives (@yaacovCR)

Bug Fix 🐞

#4799 fix: raise request error on invalid fragment variables (@yaacovCR)

#4800 fix: apply directives when SDL contains type definitions and extensions with directives (@yaacovCR)

#4564 OneOf Inhabitability (@jbellenger)

#4814 fix(KnownDirectivesRule): locations for input field arguments in extensions (@yaacovCR)

#4726 feat(validation): reject directive definition cycles (@yaacovCR)

#4815 Revert "feat(validation): reject directive definition cycles (#4726)" (@yaacovCR)

Docs 📝

#4790 docs: minor diagnostics doc comment improvements (@yaacovCR)

#4791 fix: docs: polish diagnostics comments further (@yaacovCR)

#4793 docs: further improve general execution and tracing docs (@yaacovCR)

#4802 docs: correct extension field comments - v17 (@yaacovCR)

... (truncated)

Commits

71606d7 chore(release): v17.0.2
101de34 fix: detect default-value changes on input object fields (#4832)
82da713 fix(mapSchemaConfig): fix context for schema argument mapper (#4829)
9617473 chore(release): v17.0.1
851bd6a chore(release): protect latest release channels (#4825)
c471d36 fix(diagnostics): emit asyncStart after promise settlement to match native `t...
3f3895f chore(npm): remove obsolete ESM-only package build (#4823)
c7e494a chore(release): v17.0.0
d977f66 docs: post 17.rc-0 update (#4817)
39f865f docs: document @experimental_disableErrorPropagation (#4820)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for graphql since your current version.

Updates graphql-tag from 2.12.6 to 2.12.7

Release notes

Sourced from graphql-tag's releases.

v2.12.7

Patch Changes

#823 bc285e5 Thanks @phryneas! - add support for graphql 17

#458 fd82f1c Thanks @kidroca! - loader: allow a space between # and import word in gql files.

Changelog

Sourced from graphql-tag's changelog.

2.12.7

Patch Changes

#823 bc285e5 Thanks @phryneas! - add support for graphql 17

#458 fd82f1c Thanks @kidroca! - loader: allow a space between # and import word in gql files.

Commits

60464f3 ensure npm >= 11.15.0
e9a2a55 adjust npm staged publishing shim
1d6ea01 Version Packages (#825)
2175303 add changesets for publishing (#824)
bc285e5 add support for graphql 17 (#823)
f463d87 Merge pull request #812 from apollographql/secops/202401/semgrep
ca0fb16 feat: add semgrep job
eeb670e Merge pull request #811 from apollographql/secops/202311/add-codeowners
27dbd7c add default CODEOWNERS
f287273 Merge pull request #809 from apollographql/secops/add-gitleaks
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for graphql-tag since your current version.

dependabot · 2026-06-26T20:47:55Z

Dependabot can't access a private package registry without explicit configuration. Because of this, Dependabot cannot update this pull request.

…h 6 updates Bumps the apollo-and-graphql group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@apollo/client](https://github.com/apollographql/apollo-client) | `3.10.4` | `4.2.5` | | [@graphql-tools/load](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/load) | `7.7.0` | `8.1.11` | | [@graphql-tools/url-loader](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/loaders/url) | `7.17.18` | `9.1.3` | | [apollo-server-express](https://github.com/apollographql/apollo-server/tree/HEAD/packages/apollo-server-express) | `2.21.1` | `3.13.0` | | [graphql](https://github.com/graphql/graphql-js) | `15.4.0` | `17.0.2` | Updates `@apollo/client` from 3.10.4 to 4.2.5 - [Release notes](https://github.com/apollographql/apollo-client/releases) - [Changelog](https://github.com/apollographql/apollo-client/blob/main/CHANGELOG.md) - [Commits](https://github.com/apollographql/apollo-client/compare/v3.10.4...@apollo/client@4.2.5) Updates `@graphql-tools/load` from 7.7.0 to 8.1.11 - [Release notes](https://github.com/ardatan/graphql-tools/releases) - [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/load/CHANGELOG.md) - [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/load@8.1.11/packages/load) Updates `@graphql-tools/url-loader` from 7.17.18 to 9.1.3 - [Release notes](https://github.com/ardatan/graphql-tools/releases) - [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/loaders/url/CHANGELOG.md) - [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/url-loader@9.1.3/packages/loaders/url) Updates `apollo-server-express` from 2.21.1 to 3.13.0 - [Release notes](https://github.com/apollographql/apollo-server/releases) - [Commits](https://github.com/apollographql/apollo-server/commits/apollo-server-express@3.13.0/packages/apollo-server-express) Updates `graphql` from 15.4.0 to 17.0.2 - [Release notes](https://github.com/graphql/graphql-js/releases) - [Commits](graphql/graphql-js@v15.4.0...v17.0.2) Updates `graphql-tag` from 2.12.6 to 2.12.7 - [Release notes](https://github.com/apollographql/graphql-tag/releases) - [Changelog](https://github.com/apollographql/graphql-tag/blob/main/CHANGELOG.md) - [Commits](apollographql/graphql-tag@v2.12.6...v2.12.7) --- updated-dependencies: - dependency-name: "@apollo/client" dependency-version: 4.2.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: apollo-and-graphql - dependency-name: "@graphql-tools/load" dependency-version: 8.1.10 dependency-type: direct:production update-type: version-update:semver-major dependency-group: apollo-and-graphql - dependency-name: "@graphql-tools/url-loader" dependency-version: 9.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: apollo-and-graphql - dependency-name: apollo-server-express dependency-version: 3.13.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: apollo-and-graphql - dependency-name: graphql dependency-version: 17.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: apollo-and-graphql - dependency-name: graphql-tag dependency-version: 2.12.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: apollo-and-graphql ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 18, 2026

github-actions Bot assigned mcstover, tiarascoleman, dyersituations and emuvente Jun 18, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 5 times, most recently from 8ebf399 to a9a2f84 Compare June 26, 2026 13:04

dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch 4 times, most recently from 540573d to 018ebe1 Compare July 2, 2026 13:04

dependabot Bot force-pushed the dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8 branch from 018ebe1 to 5c3ac46 Compare July 3, 2026 13:04

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the apollo-and-graphql group across 1 directory with 6 updates#7005

chore(deps): bump the apollo-and-graphql group across 1 directory with 6 updates#7005
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apollo-and-graphql-9fc6d72fb8

dependabot Bot commented on behalf of github Jun 18, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​apollo/client@​4.2.5

Patch Changes

@​apollo/client@​4.2.4

Patch Changes

@​apollo/client@​4.2.3

Patch Changes

@​apollo/client@​4.2.2

Patch Changes

@​apollo/client@​4.2.1

Patch Changes

@​apollo/client@​4.2.0

Minor Changes

4.2.5

Patch Changes

4.2.4

Patch Changes

4.2.3

Patch Changes

4.2.2

Patch Changes

4.2.1

Patch Changes

4.2.0

Minor Changes

8.1.11

Patch Changes

8.1.10

Patch Changes

8.1.9

Patch Changes

8.1.8

Patch Changes

8.1.7

Patch Changes

8.1.6

Patch Changes

9.1.3

Patch Changes

9.1.2

Patch Changes

9.1.1

Patch Changes

9.1.0

Minor Changes

v17.0.2 (2026-07-03)

Bug Fix 🐞

Polish 💅

Committers: 2

v17.0.1 (2026-06-16)

Bug Fix 🐞

Internal 🏠

Committers: 2

v17.0.0 (2026-06-15)

New Feature 🚀

Bug Fix 🐞

Docs 📝

v2.12.7

Patch Changes

2.12.7

Patch Changes

Uh oh!

dependabot Bot commented on behalf of github Jun 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

dependabot Bot commented on behalf of github Jun 18, 2026 •

edited

Loading

`@apollo/client@4`.2.5

`@apollo/client@4`.2.4

`@apollo/client@4`.2.3

`@apollo/client@4`.2.2

`@apollo/client@4`.2.1

`@apollo/client@4`.2.0