Update minor-and-patch (dev)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
@apollo/gateway (source)	2.14.0 → 2.14.4			devDependencies	patch
@apollo/subgraph	2.14.3 → 2.15.1			dependencies	minor
@babel/core (source)	7.29.6 → 7.29.7			devDependencies	patch
@babel/node (source)	7.29.0 → 7.29.7			devDependencies	patch
@babel/preset-env (source)	7.29.5 → 7.29.7			devDependencies	patch
@changesets/cli (source)	2.31.0 → 2.31.1			dependencies	patch
@eslint-community/eslint-plugin-eslint-comments	3.2.0 → 3.2.1			devDependencies	patch
@graphql-tools/merge (source)	9.2.2 → 9.2.4			dependencies	patch
@graphql-tools/resolvers-composition (source)	7.0.35 → 7.0.37			dependencies	patch
@graphql-tools/schema (source)	10.0.38 → 10.1.1			dependencies	minor
@graphql-tools/wrap (source)	11.1.21 → 11.2.0			dependencies	minor
@neo4j/cypher-builder (source)	3.2.2 → 3.3.0			dependencies	minor
@tsconfig/node24 (source)	24.0.4 → 24.0.5			devDependencies	patch
@types/node (source)	22.19.18 → 22.20.4			devDependencies	minor
@types/semver (source)	7.7.1 → 7.8.0			devDependencies	minor
@types/supertest (source)	7.2.0 → 7.2.1			devDependencies	patch
@typescript-eslint/eslint-plugin (source)	8.59.2 → 8.70.1			devDependencies	minor	8.71.0
@typescript-eslint/parser (source)	8.59.2 → 8.70.1			devDependencies	minor	8.71.0
changesets/action	v1.8.0 → v1.9.0			action	minor
concurrently	9.2.1 → 9.2.4			devDependencies	patch
dorny/paths-filter	v4.0.1 → v4.0.3			action	patch
eslint-import-resolver-typescript	4.4.4 → 4.4.5			devDependencies	patch
eslint-plugin-jest	29.15.2 → 29.16.6			devDependencies	minor
graphql	16.14.0 → 16.14.2			dependencies	patch
graphql	16.14.0 → 16.14.2			devDependencies	patch
graphql-compose	9.1.0 → 9.2.2			dependencies	minor
graphql-relay	^0.10.0 → ^0.11.0			dependencies	minor
graphql-tag	2.12.6 → 2.12.7			devDependencies	patch
jest (source)	30.4.1 → 30.5.2			devDependencies	minor
knip (source)	6.12.1 → 6.38.0			devDependencies	minor
koa (source)	3.2.0 → 3.2.1			devDependencies	patch
marocchino/sticky-pull-request-comment	v3.0.4 → v3.0.5			action	patch
msw (source)	2.8.4 → 2.15.0			resolutions	minor
neo4j-driver	6.0.1 → 6.2.0			devDependencies	minor
npm (source)	11.19.0 → 11.20.0				minor
prettier (source)	3.8.3 → 3.9.9			devDependencies	minor
reviewdog/action-actionlint	v1.72.0 → v1.77.0			action	minor
reviewdog/action-eslint	v1.34.0 → v1.36.0			action	minor
slackapi/slack-github-action	v3.0.3 → v3.0.5			action	patch
supertest	7.2.2 → 7.3.0			devDependencies	minor
ts-jest (source)	29.4.9 → 29.4.14			devDependencies	patch
ts-loader	9.5.7 → 9.6.2			devDependencies	minor
webpack	5.106.2 → 5.111.1			devDependencies	minor
ws	8.21.0 → 8.21.3			devDependencies	patch	8.22.0
yarn (source)	4.14.1 → 4.18.1			packageManager	minor

---

Release Notes

apollographql/federation (@​apollo/gateway)

v2.14.4

Compare Source

Patch Changes

• Fix fleet-awareness telemetry exporting metrics to the bare usage-reporting endpoint instead of the OTLP /v1/metrics route (#​3465)

  The opt-out anonymous telemetry pipeline introduced in #​3289 configured the OTLP metric exporter with a bare https://usage-reporting.api.apollographql.com URL. Because the URL is supplied programmatically (rather than via OTEL_EXPORTER_OTLP_ENDPOINT), the @opentelemetry/exporter-metrics-otlp-http package does not append the /v1/metrics signal path automatically, so every export POSTed to / instead of /v1/metrics. The exporter now targets the full OTLP metrics route.

• Updated dependencies []:

  • @​apollo/composition@2.14.4
  • @​apollo/federation-internals@2.14.4
  • @​apollo/query-planner@2.14.4

v2.14.3

Compare Source

Patch Changes

• Updated dependencies [7c0a8ba4cf061cf0e2a6537803ed828c36234bed]:
  • @​apollo/composition@2.14.3
  • @​apollo/federation-internals@2.14.3
  • @​apollo/query-planner@2.14.3

v2.14.2

Compare Source

Patch Changes

• Filter cloud resource detection to only the anonymous data we process (#​3450)

  The opt-out telemetry introduced in #​3289 ran OpenTelemetry cloud resource detectors (AWS, GCP, Azure, Alibaba Cloud) whose attributes could include infrastructure-identifying values such as account IDs, instance IDs, ARNs, hostnames, function names, and log group/stream names. These attributes are now stripped before export, retaining only the non-identifying cloud.provider and cloud.platform attributes that Apollo processes on the ingestion side.

• Updated dependencies []:

  • @​apollo/composition@2.14.2
  • @​apollo/federation-internals@2.14.2
  • @​apollo/query-planner@2.14.2

v2.14.1

Compare Source

Patch Changes

• Pass instrumentation scope version as a separate argument when creating the OpenTelemetry meter for telemetry. Fixes #​3436. (#​3439)

• Updated dependencies [278eb0fc2bc0ef13ba371407df04cfe50fa2887d, 8bb88f9c7b90addd5ef29f9e4a3f9c027e6cf690, 621568719382df6592749168893e0e533a648ba5]:

  • @​apollo/federation-internals@2.14.1
  • @​apollo/composition@2.14.1
  • @​apollo/query-planner@2.14.1

apollographql/subgraph-js (@​apollo/subgraph)

v2.15.1

Compare Source

Patch Changes

• #​17 de906c3 Thanks @​marklai1998! - Restore Node.js 22 support. engines.node was set to >=24.0.0 during the graphql-js rewrite without a documented Node 24 runtime requirement, which silently dropped the current Node 22 LTS. CI now tests Node 22 alongside 24 and latest.

v2.15.0

Compare Source

This release is a generic reimplementation of @apollo/subgraph
that can be used with any graphql-js compatible subgraphs. Unless
otherwise noted, behavior is intended to stay compatible with the
previous implementation.

Changed

• Use graphql-js functionality over custom logic. All logic is now
  re-implemented using graphql-js functionality. @apollo/federation-internals is no
  longer a dependency.
• printSubgraphSchema now prints the complete schema, federation
  directives, types, and root fields included. NOTE: It is just a thin wrapper around
  @graphql-tools/utils's printSchemaWithDirectives.

Removed

• LegacySchemaModule input shape. buildSubgraphSchema no longer accepts
  Apollo Server's old { typeDefs, resolvers } object shape. Pass an array of
  { typeDefs, resolvers } modules (or a bare DocumentNode) instead:

  - buildSubgraphSchema({ typeDefs, resolvers })
  + buildSubgraphSchema([{ typeDefs, resolvers }])

v2.14.4

Compare Source

babel/babel (@​babel/core)

v7.29.7

Compare Source

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

changesets/changesets (@​changesets/cli)

v2.31.1

Compare Source

Patch Changes

• #​2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.

eslint-community/eslint-plugin-eslint-comments (@​eslint-community/eslint-plugin-eslint-comments)

v3.2.1

Compare Source

Bug Fixes

• update package name (#​1) (d930dcc)

ardatan/graphql-tools (@​graphql-tools/merge)

v9.2.4

Compare Source

Patch Changes

• #​8367 2262087 Thanks @​ardatan! - Preserve multiple applications of the same directive when extending a type even if the repeatable directive definition is not present in the merge inputs.

• #​8394 5523c4b Thanks @​bengry! - Write the synthesized default operation types back onto the schema definition node, so merging a schema extension that has no operation block (federation SDL, for example) still produces a query root on graphql@17.

• Updated dependencies [60db079, 57e316d, 1c1c5a0, 1c1c5a0, 0b9529f]:

  • @​graphql-tools/utils@12.0.1

v9.2.3

Compare Source

Patch Changes

• #​8349
  7fe0319
  Thanks @​aarne! - Pass the collected directive definitions to
  mergeSchemaDefs so repeatable directives on schema definitions and extend schema extensions
  (e.g. a repeatable @link) are kept as separate instances instead of being collapsed and having
  their arguments merged.

• Updated dependencies
  [2273c21]:

  • @​graphql-tools/utils@12.0.0

ardatan/graphql-tools (@​graphql-tools/resolvers-composition)

v7.0.37

Compare Source

Patch Changes

• Updated dependencies [60db079, 57e316d, 1c1c5a0, 1c1c5a0, 0b9529f]:
  • @​graphql-tools/utils@12.0.1

v7.0.36

Compare Source

Patch Changes

• Updated dependencies
  [2273c21]:
  • @​graphql-tools/utils@12.0.0

ardatan/graphql-tools (@​graphql-tools/schema)

v10.1.1

Compare Source

Patch Changes

• Updated dependencies [2262087, 5523c4b, 60db079, 57e316d, 1c1c5a0, 1c1c5a0, 0b9529f]:
  • @​graphql-tools/merge@9.2.4
  • @​graphql-tools/utils@12.0.1

v10.1.0

Compare Source

Minor Changes

• #​8346
  2273c21
  Thanks @​ardatan! - This release adds GraphQL v17 support and aligns
  the existing executor implementation with the latest GraphQL v17 API changes. The following
  changes are included:

  • getAsyncHelpers is now available on GraphQLResolveInfo. Its track method is used whenever
    waitUntil is available, as in Yoga's
    Explicit Resource Management
  • getAbortSignal is now available on GraphQLResolveInfo, matching behavior that was already
    available in this executor implementation, as in Yoga's
    Execution Cancellation
  • GraphQLResolveInfo automatically aligns variableValues according to the GraphQL version for
    better compatibility. In GraphQL v17 and above, variableValues follows the wrapped shape
    ({ coerced, sources }) expected by GraphQL APIs. In GraphQL v16 and below, variableValues
    remains a flat map as in previous versions.
  • If your custom scalar resolvers define __serialize and __parseValue, they are automatically
    mapped to coerceOutputValue and coerceInputValue in GraphQL v17.
  • BREAKING: @graphql-tools/executor's getVariableValues now returns { variableValues }
    on success, where variableValues is a VariableValues object ({ coerced, sources }). On
    failure, it returns { errors }.
  • BREAKING: collectFields, shouldIncludeNode, getDeferValues, and collectSubFields now
    need a VariableValues object instead of Record<string, any> for the variableValues
    argument.
  • visitResult now internally normalizes ExecutionRequest.variables into a
    VariableValues-compatible shape ({ coerced, sources }) before traversing selections.

Patch Changes

• Updated dependencies
  [2273c21,
  7fe0319]:
  • @​graphql-tools/utils@12.0.0
  • @​graphql-tools/merge@9.2.3

graphql-hive/gateway (@​graphql-tools/wrap)

v11.2.0

Compare Source

Minor Changes

• #​2604 ee4cc07 Thanks @​enisdenjo! - Support GraphQL 16 with @​graphql-tools/utils v12

  Preserves GraphQL 16 compatibility while upgrading to @graphql-tools/utils v12, @graphql-tools/executor v2, and the compatible @graphql-tools/schema and @graphql-tools/merge releases. Consumers now receive consistent resolver and execution request types without conflicts between different GraphQL Tools versions.

  Stitched and delegated operations handle the new executor variable result shape correctly, including variables used by directives. Resolver execution also supports the executor's cancellation and asynchronous work helpers while remaining compatible with the GraphQL 16 GraphQLResolveInfo API.

Patch Changes

• #​2604 ee4cc07 Thanks @​enisdenjo! - dependencies updates:

  • Updated dependency @graphql-tools/schema@^10.1.1 ↗︎ (from ^10.0.29, in dependencies)
  • Updated dependency @graphql-tools/utils@^12.0.1 ↗︎ (from ^11.0.0, in dependencies)

• Updated dependencies [ee4cc07, ee4cc07]:

  • @​graphql-tools/delegate@12.2.0

v11.1.24

Compare Source

v11.1.23

Compare Source

Patch Changes

• Updated dependencies [eb6569b]:
  • @​graphql-tools/delegate@12.1.3

v11.1.22

Compare Source

Patch Changes

• Updated dependencies [af2cccb]:
  • @​graphql-tools/delegate@12.1.2

neo4j/cypher-builder (@​neo4j/cypher-builder)

v3.3.0

Compare Source

Minor Changes

• #​865 4c1051d Thanks @​angrykoala! - Add support for NEXT clause using the method next()

  const query = new Cypher.Match(new Cypher.Pattern(customerNode, { labels: ["Customer"] }))
      .return([customerNode, customer])
      .next()
      .match(new Cypher.Pattern(productNode, { labels: ["Product"] }))
      .return(productNode);

  MATCH (this0:Customer)
  RETURN this0 AS var1
  NEXT
  MATCH (this2:Product)
  RETURN this2

tsconfig/bases (@​tsconfig/node24)

v24.0.5

Compare Source

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.70.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#​12904)
• eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#​12826)
• eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#​12747)
• eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#​12845)
• eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#​12880)
• eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#​12716)
• eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#​12873)
• eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#​12869)
• eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#​12850)
• eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#​12854)
• eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#​12818)
• eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#​12637)
• eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#​12768)

❤️ Thank You

• Brad Zacher @​bradzacher
• Diptajoy Mistry @​diptomistry
• Grit @​Grit03
• Hugo @​hugop95
• Michael Naumov @​mnaoumov
• Mikhail Baev @​baevm
• Om Rawat
• Sanath @​sansynx
• Shinji
• Vinccool96
• 김채영 @​cchaeyoung
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.70.0

Compare Source

🚀 Features

• eslint-plugin: [no-generated-empty-object-type] add rule (#​12730)

🩹 Fixes

• eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#​12780)
• eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#​12728)
• eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#​12729)

❤️ Thank You

• Josh Goldberg ✨ @​JoshuaKGoldberg
• Ulrich Stark @​ulrichstark

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.69.0

Compare Source

🚀 Features

• eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#​12603)

🩹 Fixes

• eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#​12727)
• eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#​12741)
• eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#​12731)

❤️ Thank You

• Abdu Alim Arlikhozhaev @​Arlikhozhaev
• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• wonbeanie @​wonbeanie

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.68.0

Compare Source

🚀 Features

• eslint-plugin: [strict-void-return] add fix suggestions (#​12086)

🩹 Fixes

• eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#​12739)
• eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#​12646)
• eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#​12711)
• eslint-plugin: [unified-signatures] report identical signatures (#​12678)
• eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#​12707)
• eslint-plugin: [unified-signatures] deduplicate types in report (#​12656)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Hugo @​hugop95
• Niki @​phaux
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.67.0

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

Compare Source

🩹 Fixes

• eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#​12617)
• eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#​12588)
• eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#​12607)
• eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#​12591)
• eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#​12590)

❤️ Thank You

• Evyatar Daud @​StyleShit
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.65.0

Compare Source

🚀 Features

• eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#​12578)
• add warning when TS 7 is detected (#​12529)
• eslint-plugin: [no-restricted-imports] deprecate extension rule (#​12527, #​19562, #​11889)

🩹 Fixes

• eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#​12568)
• eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#​12448)
• eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#​12515)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

Compare Source

🚀 Features

• eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#​12500)
• typescript-estree: throw for invalid definite assignment in class properties (#​12543)

🩹 Fixes

• eslint-plugin: [require-array-sort-compare] handle constrained arrays (#​12512)

❤️ Thank You

• Evyatar Daud @​StyleShit
• 송재욱

See GitHub Releases for more information.

You can read about our [versioning strategy](https://typescript-eslint.io/users/

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • Between 12:00 AM and 04:59 AM, on day 1 and 15 of the month (* 0-4 1,15 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 949ee7c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock

➤ YN0000: · Yarn 4.18.1
➤ YN0000: ┌ Resolution step
➤ YN0016: │ ts-jest@npm:29.4.14: All versions satisfying "29.4.14" are quarantined
➤ YN0000: └ Completed in 15s 757ms
➤ YN0000: · Failed with errors in 15s 775ms