Update dependencies by renovate[bot] · Pull Request #193 · ExpediaGroup/graphql-kotlin-codegen

renovate · 2026-09-28T01:13:24Z

This PR contains the following updates:

Package	Change	Type	Update
@graphql-codegen/cli (source)	`7.4.2` → `7.4.6`	devDependencies	patch
@types/bun (source)	`1.4.2` → `1.4.4`	devDependencies	patch
bun (source)	`1.4.2` → `1.4.4`		patch
eslint (source)	`10.11.0` → `10.13.0`	devDependencies	minor
gradle (source)	`9.7.1` → `9.8.2`		minor
prettier (source)	`3.9.8` → `3.9.10`	devDependencies	patch
react (source)	`19.3.0` → `19.3.1`	devDependencies	patch
react-dom (source)	`19.3.0` → `19.3.1`	devDependencies	patch
tsdown (source)	`0.23.0` → `0.23.4`	devDependencies	patch
typescript-eslint (source)	`8.70.1` → `8.72.1`	devDependencies	minor
org.jetbrains.kotlin.jvm	`2.4.20` → `2.4.21`	plugin	patch

Release Notes

dotansimha/graphql-code-generator (@graphql-codegen/cli)

`v7.4.6`

Compare Source

Patch Changes

#10985
d8aa07f
Thanks @eddeee888! - Build with strict: true, which changes
these emitted type declarations:
- @graphql-codegen/cli: mkdirp returns Promise<string | undefined>, and the require (-r)
  CLI option's default is typed never[] instead of any[].
- @graphql-codegen/visitor-plugin-common: BaseResolversVisitor and BaseTypesVisitor
  SchemaDefinition()/SchemaExtension() return null instead of any.
- @graphql-codegen/visitor-plugin-common: BaseSelectionSetProcessor.typeCache is keyed by
  Location | undefined.
- @graphql-codegen/visitor-plugin-common: SelectionSetToObject.buildSelectionSet returns
  typeInfo as { name: string; type: string } | null.
- @graphql-codegen/visitor-plugin-common: getPossibleTypes accepts null as the type, which
  graphql 15's schema.getType() can return.
- @graphql-codegen/visitor-plugin-common: removeDescription returns nodes with
  description: undefined instead of any.
- @graphql-codegen/typescript: TsIntrospectionVisitor's constructor takes pluginConfig as
  TypeScriptPluginConfig | undefined, DirectiveDefinition() returns null and
  ObjectTypeDefinition() returns string | null.
- @graphql-codegen/client-preset: the babel preset accepts options as
  ClientBabelPresetOptions | null | undefined.
- @graphql-codegen/testing: mockGraphQLServer returns nock.Scope | null.
- @graphql-codegen/graphql-modules-preset: a schema without extensions (graphql 15) throws the
  "requires to use GraphQL SDL" error instead of a TypeError.
Generated output is unchanged.
Updated dependencies
[d8aa07f]:
- @graphql-codegen/client-preset@6.2.3

`v7.4.5`

Compare Source

Patch Changes

#11043
31761f9
Thanks @eddeee888! - dependencies updates:
- Updated dependency
  @graphql-tools/apollo-engine-loader@^8.0.38 ↗︎
  (from ^8.0.28, in dependencies)
- Updated dependency
  @graphql-tools/code-file-loader@^8.1.41 ↗︎
  (from ^8.1.39, in dependencies)
- Updated dependency
  @graphql-tools/git-loader@^8.0.44 ↗︎
  (from ^8.0.32, in dependencies)
- Updated dependency
  @graphql-tools/github-loader@^9.1.11 ↗︎
  (from ^9.0.6, in dependencies)
- Updated dependency
  @graphql-tools/graphql-file-loader@^8.1.22 ↗︎
  (from ^8.1.11, in dependencies)
- Updated dependency
  @graphql-tools/json-file-loader@^8.0.36 ↗︎
  (from ^8.0.26, in dependencies)
- Updated dependency
  @graphql-tools/load@^8.1.19 ↗︎
  (from ^8.1.8, in dependencies)
- Updated dependency
  @graphql-tools/merge@^9.2.6 ↗︎
  (from ^9.2.4, in dependencies)
- Updated dependency
  @graphql-tools/url-loader@^9.1.12 ↗︎
  (from ^9.0.6, in dependencies)
- Updated dependency
  @graphql-tools/utils@^12.0.3 ↗︎
  (from ^11.2.0, in dependencies)
- Updated dependency
  graphql-config@^5.1.8 ↗︎ (from
  ^5.1.6, in dependencies)
#11043
31761f9
Thanks @eddeee888! - Update @graphql-tools/utils to v12, and
other @graphql-tools/* dependencies and graphql-config to releases that use it, to pick up the
fix for GHSA-7mx3-vvmw-hjmv (prototype
pollution in mergeDeep, @graphql-tools/utils <= 12.0.0).

@graphql-codegen/cli now unwraps the AggregateError that newer @graphql-tools/load versions
throw, so schema and document syntax errors still print the native GraphQLError with its file
location.
Updated dependencies
[31761f9,
31761f9,
31761f9,
31761f9]:
- @graphql-codegen/client-preset@6.2.2
- @graphql-codegen/core@6.2.2
- @graphql-codegen/plugin-helpers@7.4.2

`v7.4.4`

Compare Source

Patch Changes

#11025
43d0f65
Thanks @BuddhaBing! - Widen
Types.SchemaWithLoaderOptions['loader'] to accept a custom loader function
(CustomSchemaLoaderFn) in addition to a path string.

A per-entry schema custom loader ({ '<pointer>': { loader, ...options } }) is resolved by
@graphql-tools/load's useCustomLoader, which already accepts either a path string (resolved
via require()) or a function value at runtime (typeof loaderPointer === 'function'). Only the
TypeScript type restricted loader to string, forcing consumers who pass an imported loader
function (or a class instance exposing a bound loader property) to cast the schema array to
bypass the type error, even though it worked correctly at runtime.

This is additive and backward compatible — loader: string continues to type-check exactly as
before.

Also fixes a schema-cache collision for function loaders in @graphql-codegen/cli: the cache key
is JSON.stringify(schemaPointerMap), and JSON.stringify drops functions, so two generates
targets using different loader functions for the same pointer
({ 'schema.graphql': { loader: fnA } } vs { loader: fnB }) both keyed as
{"schema.graphql":{}} and the second silently reused the first's schema. Function values are now
keyed by object identity (via the existing getJsObjectId), so distinct loaders load separately
while one function reused across targets still loads once.
#11020
82ebbb5
Thanks @eddeee888! - Fix type errors in cli under
strict: true:
- @graphql-codegen/cli: loadCodegenConfig returns Promise<LoadCodegenConfigResult | null>,
  matching the null it resolves to when no config file is found. YamlCliFlags includes the
  kebab-case ignore-no-documents, emit-legacy-common-js-imports and import-extension flags
  that the CLI reads. CodegenContext.filepath is optional, and watch mode only watches the
  config file when the context has a filepath. CodegenContext.getConfig() without an argument
  returns Types.Config, and getConfig(extraConfig) returns T & Types.Config.
  CodegenContext.checkModeStaleFiles is typed as string[]. Adds @types/yargs,
  @types/babel__generator and @types/babel__template as dev dependencies.
- @graphql-codegen/plugin-helpers: normalizeInstanceOrArray and normalizeConfig accept
  null and undefined, returning [].
Generated output is unchanged.
Updated dependencies
[43d0f65,
82ebbb5,
e972b6d,
eae0e62,
1f7566f]:
- @graphql-codegen/plugin-helpers@7.4.1
- @graphql-codegen/client-preset@6.2.1

`v7.4.3`

Compare Source

Patch Changes

#10983
8512e51
Thanks @eddeee888! - Add missing --check in CLI --help config

oven-sh/bun (bun)

`v1.4.4`: Bun v1.4.4

Compare Source

To install Bun v1.4.4

curl -fsSL https://bun.com/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.com/install.ps1|iex"

To upgrade to Bun v1.4.4:

bun upgrade

Read Bun v1.4.4's release notes on Bun's blog

Thanks to 39 contributors!

`v1.4.3`: Bun v1.4.3

Compare Source

To install Bun v1.4.3

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.4.3:

bun upgrade

Read Bun v1.4.3's release notes on Bun's blog

Thanks to 8 contributors!

eslint/eslint (eslint)

`v10.13.0`

Compare Source

Features

48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

4783a68 docs: Update README (GitHub Actions Bot)
43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
47b7063 chore: update dependency @eslint/json to ^2.1.1 (#21398) (renovate[bot])
e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

`v10.12.0`

Compare Source

Features

4618052 feat: handle astral letters in new-cap (#21357) (sary)
4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

67eb586 docs: Update README (GitHub Actions Bot)
5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
8816c1d docs: Update README (GitHub Actions Bot)
3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

gradle/gradle (gradle)

`v9.8.2`: 9.8.2

Compare Source

The Gradle team is excited to announce Gradle 9.8.2.

Here are the highlights of this release:

Java 27 support
Maven mirror settings reuse
Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aman Gautam,
Björn Kautler,
Eng Zer Jun,
Hashim Khan,
Julian Krannich,
KBS,
Labh R Jethe,
Mark Dodgson,
Maxim,
monkey,
nataphon-ktsystems,
Paul King,
Qiu Tian,
rg_sandesh,
Roberto Perez Alcolea,
Sean,
Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.2 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.2 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

`v9.8.1`: 9.8.1

Compare Source

This is a patch release for Gradle 9.8.0. We recommend using 9.8.1 instead of 9.8.0.

This release addresses three high rated vulnerabilities:

The following issues were resolved:

[Gradle 9.8.0 complains again about invalid Toolchains on Debian / Ubuntu packaged systems]- (#39358)
Gradle 9.8.0 removes root java.util.logging handlers installed by a custom LogManager (breaks Quarkus test log capture)
Dependency resolution regression

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aman Gautam,
Björn Kautler,
Eng Zer Jun,
Hashim Khan,
Julian Krannich,
KBS,
Labh R Jethe,
Mark Dodgson,
Maxim,
monkey,
nataphon-ktsystems,
Paul King,
Qiu Tian,
rg_sandesh,
Roberto Perez Alcolea,
Sean,
Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

`v9.8.0`: 9.8.0

Compare Source

The Gradle team is excited to announce Gradle 9.8.0.

Here are the highlights of this release:

Java 27 support
Maven mirror settings reuse
Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aman Gautam,
Björn Kautler,
Eng Zer Jun,
Hashim Khan,
Julian Krannich,
KBS,
Labh R Jethe,
Mark Dodgson,
Maxim,
monkey,
nataphon-ktsystems,
Paul King,
Qiu Tian,
rg_sandesh,
Roberto Perez Alcolea,
Sean,
Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

prettier/prettier (prettier)

`v3.9.10`

Compare Source

diff

Markdown: Update `micromark-extension-gfm-table` to fix the table parse issue on performance (#20266 by @fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

`v3.9.9`

Compare Source

diff

Markdown: Fix text with `$` been incorrectly parsed as math syntax (#20140 by @fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.

<!-- Prettier 3.9.8 -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR`from`c.sh`, before anything else runs here.

<!-- Prettier 3.9.9 -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.

react/react (react)

`v19.3.1`: 19.3.1 (October 14th, 2026)

Compare Source

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

rolldown/tsdown (tsdown)

`v0.23.4`

Compare Source

🚀 Features

cjs: Warn when platform is ignored for the CJS format - by @sxzz and @sxzzbot in #1111 (58003)
config: Support multiple env files - by @sxzz and @sxzzbot in #1110 (5d558)

🐞 Bug Fixes

attw: Apply profiles to file-based problems - by @sxzz and @sxzzbot in #1108 (a853d)
config: Ignore empty env file paths and scope env deps per watcher - by @sxzzbot (17bd0)
css: Inline ?inline CSS imported from dependencies - by @sxzz and @sxzzbot in #1109 (75a78)

🏎 Performance

Use tinyps in hooks - by @43081j in #1112 (f925e)

View changes on GitHub

`v0.23.3`

Compare Source

🐞 Bug Fixes

Downgrade rolldown-plugin-dts to 0.28 to restore TypeScript 7.0 support - by @sxzz and @sxzzbot in #1107 (0344c)

View changes on GitHub

`v0.23.2`

Compare Source

🚀 Features

Add JSON schema for config - by @Sandbye and @sxzz in #1074 (2410e)

🐞 Bug Fixes

css: Respect Lightning CSS modules options - by @sxzz in #1103 (490ec)

View changes on GitHub

`v0.23.1`

Compare Source

🐞 Bug Fixes

Preserve false tsconfig option - by @Masutayunikon in #1065 (407f8)
entry: Honor custom root for object entry - by @giaBaoJS in #1072 (17452)
pkg: Pack tarball inside npm publish --dry-run - by @giaBaoJS in #1076 (83f0c)