chore(deps): bump the patch group across 2 directories with 11 updates #215

dependabot · 2025-11-03T23:25:49Z

Bumps the patch group with 11 updates in the / directory:

Package	From	To
@biomejs/biome	`2.0.6`	`2.3.3`
turbo	`2.5.6`	`2.6.0`
@apollo/gateway	`2.11.2`	`2.11.3`
@apollo/server	`5.0.0`	`5.1.0`
@types/express	`5.0.3`	`5.0.5`
typescript	`5.9.2`	`5.9.3`
@types/node	`24.4.0`	`24.10.0`
fastify	`5.6.0`	`5.6.1`
@types/react	`19.1.13`	`19.2.2`
graphql-yoga	`5.15.2`	`5.16.0`
@typescript-eslint/eslint-plugin	`8.43.0`	`8.46.3`

Bumps the patch group with 4 updates in the /packages/yoga directory: @types/express, typescript, graphql-yoga and @typescript-eslint/eslint-plugin.

Updates @biomejs/biome from 2.0.6 to 2.3.3

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.3.3

2.3.3

Patch Changes
#7907 57bd662 Thanks @ematipico! - Fixed #7839. Now the Biome parser correctly parses the Astro frontmatter even when a triple fence is inside quotes.

#7934 a35c496 Thanks @alissonlauffer! - Fixed #7919: The HTML parser now correctly handles Unicode BOM (Byte Order Mark) characters at the beginning of HTML files, ensuring proper parsing and tokenization.

#7869 c80361d Thanks @matanshavit! - Fixed #7864: Biome now preserves component tag name casing in Svelte, Astro, and Vue files.
#7926 69cecec Thanks @matanshavit! - Added the rule noParametersOnlyUsedInRecursion.

This rule detects function parameters that are exclusively used in recursive calls and can be removed to simplify the function signature since they are effectively unused.
function factorial(n, acc) {
  if (n === 0) return 1;
  return factorial(n - 1, acc); // acc is only used here
}
Fixes #6484.
#7774 2509b91 Thanks @dibashthapa! - Fixed #7657: Added the new rule no-unknown-property from ESLint

#7918 7165d06 Thanks @dyc3! - Fixed #7913: The CSS parser, with tailwindDirectives enabled, will now correctly handle @slot.

#7959 ffae203 Thanks @siketyan! - Fixed the Biome Language Server so it no longer returns an internal error when the formatter is disabled in the configuration.
What's Changed

fix(html): parse frontmatter inside quotes by @ematipico in biomejs/biome#7907

fix(parse/css): add @slot tailwind at rule by @dyc3 in biomejs/biome#7918

fix(formatter): preserve component tag casing in Svelte/Astro/Vue files by @matanshavit in biomejs/biome#7869

feat(lint): new rule: no parameters only used in recursion by @matanshavit in biomejs/biome#7926

fix(html): correctly handle BOM in HTML-ish languages by @alissonlauffer in biomejs/biome#7934

feat(yaml_parser): parse document end token by @l0ngvh in biomejs/biome#7936

feat(parse/tailwind): parse negative candidates, other misc cleanup/refactors by @dyc3 in biomejs/biome#7937

feat(lint): implement no-unknown-property from eslint react by @dibashthapa in biomejs/biome#7774

chore: update Rust to v1.91.0 by @Gumichocopengin8 in biomejs/biome#7947

chore(deps): update github-actions by @renovate[bot] in biomejs/biome#7952

chore(deps): update dependency @types/node to v22.19.0 by @renovate[bot] in biomejs/biome#7953

chore(deps): update rust crate ignore to 0.4.25 by @renovate[bot] in biomejs/biome#7954

chore(deps): update dependency eslint to v9.39.0 - autoclosed by @renovate[bot] in biomejs/biome#7955

fix(console): escape backquotes in MDX context by @siketyan in biomejs/biome#7956

fix(lsp): do not return error if the formatter is disabled by @siketyan in biomejs/biome#7959

ci: release by @github-actions[bot] in biomejs/biome#7916

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.3.3

Patch Changes
#7907 57bd662 Thanks @ematipico! - Fixed #7839. Now the Biome parser correctly parses the Astro frontmatter even when a triple fence is inside quotes.

#7934 a35c496 Thanks @alissonlauffer! - Fixed #7919: The HTML parser now correctly handles Unicode BOM (Byte Order Mark) characters at the beginning of HTML files, ensuring proper parsing and tokenization.

#7869 c80361d Thanks @matanshavit! - Fixed #7864: Biome now preserves component tag name casing in Svelte, Astro, and Vue files.
#7926 69cecec Thanks @matanshavit! - Added the rule noParametersOnlyUsedInRecursion.

This rule detects function parameters that are exclusively used in recursive calls and can be removed to simplify the function signature since they are effectively unused.
function factorial(n, acc) {
  if (n === 0) return 1;
  return factorial(n - 1, acc); // acc is only used here
}
Fixes #6484.
#7774 2509b91 Thanks @dibashthapa! - Fixed #7657: Added the new rule no-unknown-property from ESLint

#7918 7165d06 Thanks @dyc3! - Fixed #7913: The CSS parser, with tailwindDirectives enabled, will now correctly handle @slot.

#7959 ffae203 Thanks @siketyan! - Fixed the Biome Language Server so it no longer returns an internal error when the formatter is disabled in the configuration.
2.3.2

Patch Changes
#7859 c600618 Thanks @Netail! - Added the nursery rule noIncrementDecrement, disallows the usage of the unary operators ++ and --.

#7901 0d17b05 Thanks @ematipico! - Fixed #7837, where Biome couldn't properly parse text expressions that contained nested curly brackets. This was breaking parsing in Astro and Svelte files.
#7874 e617d36 Thanks @Bertie690! - Fixed #7230: noUselessStringConcat no longer emits false positives for multi-line strings with leading + operators.

Previously, the rule did not check for leading newlines on the + operator, emitting false positives if one occurred at the start of a line.
Notably, formatting with operatorLinebreak="before" would move the + operators to the start of lines automatically, resulting in spurious errors whenever a multi-line string was used.

Now, the rule correctly detects and ignores multi-line concatenations with leading operators as well, working regardless of the setting of operatorLinebreak.

Example
// The following code used to error if the `+` operators were at the start of lines (as opposed to the end).
// Now, the rule correctly recognizes this as a stylistic concatenation and ignores it.
const reallyLongStringThatShouldNotError =

... (truncated)

Commits

fd282fc ci: release (#7916)
198a371 chore: update Rust to v1.91.0 (#7947)
2509b91 feat(lint): implement no-unknown-property from eslint react (#7774)
69cecec feat(lint): new rule: no parameters only used in recursion (#7926)
6d95a67 ci: release (#7887)
c600618 feat(lint): implement noIncrementDecrement (#7859)
be79a6b ci: release (#7842)
53ffa8b ci: release (#7824)
c9033de Merge remote-tracking branch 'origin/main' into next
59ecfb4 docs: fix typo in ignoreUnknown option description (#7829)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ematipico, a new releaser for @biomejs/biome since your current version.

Updates turbo from 2.5.6 to 2.6.0

Release notes

Sourced from turbo's releases.

Turborepo v2.6.0

What's Changed

Docs

docs: clarification on Transit Nodes docs by @maschwenk in vercel/turborepo#9181

docs: add GitHub Actions reusable workflow documentation for remote caching by @anthonyshew in vercel/turborepo#10923

docs: generate blog release OG images by @anthonyshew in vercel/turborepo#10936

docs: fix correct package name from eslint-config-turbo to eslint-plugin-turbo by @tetzng in vercel/turborepo#10954

docs: align tailwindcss 4 guide to the with-tailwind example by @esauri in vercel/turborepo#10963

docs: fix typos and formatting issues in Playwright guide by @yamcodes in vercel/turborepo#10980

docs: adjust compute hours saved component initial value by @anthonyshew in vercel/turborepo#10958

docs: clarify passthrough args comparison by @emilbjorklund in vercel/turborepo#10990

docs: fix profile images on home page by @anthonyshew in vercel/turborepo#10993

feat: microfrontends by @anthonyshew in vercel/turborepo#10982

docs: Clarify passtrhough args cache miss by @eug-vs in vercel/turborepo#11026

fix: path validation in microfrontends.json by @anthonyshew in vercel/turborepo#11006

feat(microfrontends): schema.json for microfrontends.json by @anthonyshew in vercel/turborepo#11008

create-turbo

feat: update create-turbo Bun prompt text by @anthonyshew in vercel/turborepo#10918

eslint

fix(eslint-config-turbo): use module.exports for ESLint v8 compatibility by @anthonyshew in vercel/turborepo#10902

perf: ~8.6x faster ESLint rule by @anthonyshew in vercel/turborepo#10943

Examples

Update package.json by @Satheeshsk369 in vercel/turborepo#10892

docs: fix JSDoc type for ESLint config in basic example by @victor-code19 in vercel/turborepo#10727

refactor(examples): enhance with-nestjs (#8131) by @Neosoulink in vercel/turborepo#10964

examples: Upgrade core-team-maintained examples to Next.js 16 by @anthonyshew in vercel/turborepo#11014

Changelog

chore: remove missing turbow.js references by @pauloZion1 in vercel/turborepo#10893

fix(turborepo-lockfiles): handle missing optional dependencies in Bun lockfiles by @anthonyshew in vercel/turborepo#10909

fix: update ui suggested value in error message for turbo.json by @hugomassing in vercel/turborepo#10896

chore: remove unused origin field from auth structs by @anthonyshew in vercel/turborepo#10910

feat: new OAuth flow for Turborepo CLI with Vercel by @anthonyshew in vercel/turborepo#10911

fix(lockfiles): include bundled dependencies in Bun lockfile subgraphs by @anthonyshew in vercel/turborepo#10915

test: increase coverage for lockfiles by @anthonyshew in vercel/turborepo#10633

fix: update remote cache OAuth refresh flow by @anthonyshew in vercel/turborepo#10916

feat(tui): task list search with / by @anthonyshew in vercel/turborepo#10908

fix: --graph=foo.dot should not require graphviz installed by @blast-hardcheese in vercel/turborepo#10942

chore: update devcontainer configuration by @anthonyshew in vercel/turborepo#10955

fix: injectWorkspacePackages for turbo prune with pnpm by @anthonyshew in vercel/turborepo#10945

fix: adjust binary call for microfrontends proxy on Windows by @mknichel in vercel/turborepo#10962

Add worktrees.json configuration to .cursor directory by @Copilot in vercel/turborepo#10986

fix: windows symlinking bug by @anthonyshew in vercel/turborepo#10992

fix: added Linux env vars to global passthroughs by @aviramha in vercel/turborepo#10984

fix: recursive transitive closure analysis in npm lockfile parser by @anthonyshew in vercel/turborepo#10988

ci(fix): dynamically set ports in proxy integration tests by @anthonyshew in vercel/turborepo#11009

feat: Add support for custom microfrontends.json naming by @kitfoster in vercel/turborepo#11022

New Contributors

... (truncated)

Commits

f601651 publish 2.6.0 to registry
0f63f6e release(turborepo): 2.5.9-canary.11 (#11030)
dc16ef4 feat: Add support for custom microfrontends.json naming (#11022)
f226417 feat(microfrontends): schema.json for microfrontends.json (#11008)
515c47d fix: path validation in microfrontends.json (#11006)
b74f3b1 ci(fix): dynamically set ports in proxy integration tests (#11009)
f3c735b docs: Clarify passtrhough args cache miss (#11026)
94adf33 examples: Upgrade core-team-maintained examples to Next.js 16 (#11014)
97668fe ci: conventional commits adjustment (#11015)
1cb78e2 release(turborepo): 2.5.9-canary.10 (#11001)
Additional commits viewable in compare view

Updates @apollo/gateway from 2.11.2 to 2.11.3

Release notes

Sourced from @apollo/gateway's releases.

@apollo/gateway@2.11.3

Patch Changes

Updated dependencies [4faa114215200daf7ad7518be8e50071fcde783c, 8c7a2cd655ad3060e9f5c3b106cfbdb59251701c]:

@apollo/query-planner@2.11.3

@apollo/federation-internals@2.11.3

@apollo/composition@2.11.3

Changelog

Sourced from @apollo/gateway's changelog.

2.11.3

Patch Changes

Updated dependencies [4faa114215200daf7ad7518be8e50071fcde783c, 8c7a2cd655ad3060e9f5c3b106cfbdb59251701c]:

@apollo/query-planner@2.11.3

@apollo/federation-internals@2.11.3

@apollo/composition@2.11.3

Commits

a96a04d release: on branch main (#3286)
See full diff in compare view

Updates @apollo/server from 5.0.0 to 5.1.0

Release notes

Sourced from @apollo/server's releases.

@apollo/server-integration-testsuite@5.1.0

Patch Changes

Updated dependencies [80a1a1a]:

@apollo/server@5.1.0

@apollo/server@5.1.0

Minor Changes
#8148 80a1a1a Thanks @jerelmiller! - Apollo Server now supports the incremental delivery protocol (@defer and @stream) that ships with graphql@17.0.0-alpha.9. To use the current protocol, clients must send the Accept header with a value of multipart/mixed; incrementalSpec=v0.2.

Upgrading to 5.1 will depend on what version of graphql you have installed and whether you already support the incremental delivery protocol.

I use graphql@16 without incremental delivery

Continue using graphql v16 with no additional changes. Incremental delivery won't be available.

I use graphql@16 but would like to add support for incremental delivery

Install graphql@17.0.0-alpha.9 and follow the "Incremental delivery" guide to add the @defer and @stream directives to your schema. Clients should send the Accept header with a value of multipart/mixed; incrementalSpec=v0.2 to get multipart responses.

I use graphql@17.0.0-alpha.2 and use incremental delivery

You must upgrade to graphql@17.0.0-alpha.9 to continue using incremental delivery. If you'd like to continue providing support for the legacy incremental protocol, install the @yaacovcr/transform package. Apollo Server will attempt to load this module when the client specifies an Accept header with a value of multipart/mixed; deferSpec=20220824. If this package is not installed, an error is returned by the server.

Because Apollo Server now supports multiple versions of the incremental delivery types, the existing incremental delivery types have been renamed with an Alpha2 suffix. If you import these types in your code, you will need to add the Alpha2 suffix.
import type {
- GraphQLExperimentalFormattedInitialIncrementalExecutionResult,
+ GraphQLExperimentalFormattedInitialIncrementalExecutionResultAlpha2,

GraphQLExperimentalFormattedSubsequentIncrementalExecutionResult,


GraphQLExperimentalFormattedSubsequentIncrementalExecutionResultAlpha2,


GraphQLExperimentalFormattedIncrementalResult,


GraphQLExperimentalFormattedIncrementalResultAlpha2,


GraphQLExperimentalFormattedIncrementalDeferResult,


GraphQLExperimentalFormattedIncrementalDeferResultAlpha2,


GraphQLExperimentalFormattedIncrementalStreamResult,


GraphQLExperimentalFormattedIncrementalStreamResultAlpha2,
} from '@apollo/server';
Incremental delivery types for the graphql@17.0.0-alpha.9 version are now available using the Alpha9 suffix:
import type {

... (truncated)

Changelog

Sourced from @apollo/server's changelog.

5.1.0

Minor Changes
#8148 80a1a1a Thanks @jerelmiller! - Apollo Server now supports the incremental delivery protocol (@defer and @stream) that ships with graphql@17.0.0-alpha.9. To use the current protocol, clients must send the Accept header with a value of multipart/mixed; incrementalSpec=v0.2.

Upgrading to 5.1 will depend on what version of graphql you have installed and whether you already support the incremental delivery protocol.

I use graphql@16 without incremental delivery

Continue using graphql v16 with no additional changes. Incremental delivery won't be available.

I use graphql@16 but would like to add support for incremental delivery

Install graphql@17.0.0-alpha.9 and follow the "Incremental delivery" guide to add the @defer and @stream directives to your schema. Clients should send the Accept header with a value of multipart/mixed; incrementalSpec=v0.2 to get multipart responses.

I use graphql@17.0.0-alpha.2 and use incremental delivery

You must upgrade to graphql@17.0.0-alpha.9 to continue using incremental delivery. If you'd like to continue providing support for the legacy incremental protocol, install the @yaacovcr/transform package. Apollo Server will attempt to load this module when the client specifies an Accept header with a value of multipart/mixed; deferSpec=20220824. If this package is not installed, an error is returned by the server.

Because Apollo Server now supports multiple versions of the incremental delivery types, the existing incremental delivery types have been renamed with an Alpha2 suffix. If you import these types in your code, you will need to add the Alpha2 suffix.
import type {
- GraphQLExperimentalFormattedInitialIncrementalExecutionResult,
+ GraphQLExperimentalFormattedInitialIncrementalExecutionResultAlpha2,

GraphQLExperimentalFormattedSubsequentIncrementalExecutionResult,


GraphQLExperimentalFormattedSubsequentIncrementalExecutionResultAlpha2,


GraphQLExperimentalFormattedIncrementalResult,


GraphQLExperimentalFormattedIncrementalResultAlpha2,


GraphQLExperimentalFormattedIncrementalDeferResult,


GraphQLExperimentalFormattedIncrementalDeferResultAlpha2,


GraphQLExperimentalFormattedIncrementalStreamResult,


GraphQLExperimentalFormattedIncrementalStreamResultAlpha2,
} from '@apollo/server';
Incremental delivery types for the graphql@17.0.0-alpha.9 version are now available using the Alpha9 suffix:
import type {
  GraphQLExperimentalFormattedInitialIncrementalExecutionResultAlpha9,
  GraphQLExperimentalFormattedSubsequentIncrementalExecutionResultAlpha9,
  GraphQLExperimentalFormattedIncrementalResultAlpha9,
  GraphQLExperimentalFormattedIncrementalDeferResultAlpha9,
  GraphQLExperimentalFormattedIncrementalStreamResultAlpha9,

... (truncated)

Commits

ae1be29 Version Packages (#8155)
c9738e2 Version Packages (rc) (#8153)
80a1a1a Add support for newer incremental delivery format (#8148)
See full diff in compare view

Updates @types/express from 5.0.3 to 5.0.5

Commits

See full diff in compare view

Updates typescript from 5.9.2 to 5.9.3

Release notes

Sourced from typescript's releases.

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

fixed issues query for Typescript 5.9.0 (Beta).

fixed issues query for Typescript 5.9.1 (RC).

No specific changes for TypeScript 5.9.2 (Stable)

fixed issues query for Typescript 5.9.3 (Stable).

Downloads are available on:

npm

Commits

c63de15 Bump version to 5.9.3 and LKG
8428ca4 🤖 Pick PR #62438 (Fix incorrectly ignored dts file fr...) into release-5.9 (#...
a131cac 🤖 Pick PR #62351 (Add missing Float16Array constructo...) into release-5.9 (#...
0424333 🤖 Pick PR #62423 (Revert PR 61928) into release-5.9 (#62425)
bdb641a 🤖 Pick PR #62311 (Fix parenthesizer rules for manuall...) into release-5.9 (#...
0d9b9b9 🤖 Pick PR #61978 (Restructure CI to prepare for requi...) into release-5.9 (#...
2dce0c5 Intentionally regress one buggy declaration output to an older version (#62163)
See full diff in compare view

Updates @types/node from 24.4.0 to 24.10.0

Commits

See full diff in compare view

Updates fastify from 5.6.0 to 5.6.1

Release notes

Sourced from fastify's releases.

v5.6.1

What's Changed

fix: fix typo of deprecation warning FSTDEP022 by @Uzlopak in fastify/fastify#6313

docs(decorators): fix TypeScript inconsistency by @emicovi in fastify/fastify#6224

chore: fix typos by @deining in fastify/fastify#6316

docs(security): add secondary contact/security escalation policy by @UlisesGascon in fastify/fastify#6315

chore(gha): remove benchmark github workflows by @Eomm in fastify/fastify#6322

chore(sponsor): add lambdatest by @Eomm in fastify/fastify#6324

fix: (types) allow FastifySchemaValidationError[] as an error by @gurgunday in fastify/fastify#6326

fix: correct session.close() context in http2 timeout handler by @David-van-der-Sluijs in fastify/fastify#6327

fix: close http2 sessions on close server by @kostyak127 in fastify/fastify#6137

New Contributors

@deining made their first contribution in fastify/fastify#6316

@UlisesGascon made their first contribution in fastify/fastify#6315

@David-van-der-Sluijs made their first contribution in fastify/fastify#6327

@kostyak127 made their first contribution in fastify/fastify#6137

Full Changelog: fastify/fastify@v5.6.0...v5.6.1

Commits

91414fe Bumped v5.6.1
36498f8 fix: close http2 sessions on close server (#6137)
4e5a363 fix: correct session.close() context in http2 timeout handler (#6327)
80ef70c fix: (types) allow FastifySchemaValidationError[] as an error (#6326)
9a67d3a chore(sponsor): add lambdatest (#6324)
39d2e10 chore(gha): remove benchmark github workflows (#6322)
a4fe041 docs(security): add security escalation policy (#6315)
d1af934 chore: fix typos (#6316)
ebf8730 docs(decorators): fix TypeScript inconsistency (#6224)
39f35f9 fix: fix typo of deprecation warning FSTDEP022 (#6313)
See full diff in compare view

Updates @types/react from 19.1.13 to 19.2.2

Commits

See full diff in compare view

Updates graphql-yoga from 5.15.2 to 5.16.0

Changelog

Sourced from graphql-yoga's changelog.

5.16.0

Minor Changes

#3188 a4e1c5f Thanks @EmrysMyrddin! - Add allowedHeaders option to allow filtering Response and Request headers

Patch Changes

#4191 0a7a635 Thanks @ardatan! - Fix workers' loading in online GraphiQL mode, so that Monaco features like autocomplete can work properly

Commits

de68acb chore(release): update monorepo packages versions (#4197)
c3d545d fix(deps): update dependency @types/node to v24.5.1 (#4201)
a4e1c5f Add allowedHeaders option to allow filtering Response and Request headers (...
0a7a635 fix(graphiql): load monaco workers properly in online mode (#4191)
7a0ec50 fix(deps): update all non-major dependencies (#4189)
c7ad9c8 Fix image source to work in NPM page (#4185)
042987d chore: update outdated links (#4179)
See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.43.0 to 8.46.3

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.46.3

8.46.3 (2025-11-03)

🩹 Fixes

eslint-plugin: [no-misused-promises] expand union type to retrieve target property (#11706)

eslint-plugin: [no-duplicate-enum-values] support signed numbers (#11722, #11723)

❤️ Thank You

Evgeny Stepanovych @undsoft

tao

You can read about our versioning strategy and releases on our website.

v8.46.2

8.46.2 (2025-10-20)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] skip optional chaining when it could change the result (#11702)

typescript-estree: forbid invalid modifiers in object methods (#11689)

❤️ Thank You

fisker Cheung @fisker

mdm317

You can read about our versioning strategy and releases on our website.

v8.46.1

8.46.1 (2025-10-13)

🩹 Fixes

ast-spec: cleanup TSLiteralType (#11624)

eslint-plugin: [prefer-optional-chain] include mixed "nullish comparison style" chains in checks (#11533)

eslint-plugin: [no-misused-promises] special-case .finally not to report when a promise returning function is provided as an argument (#11667)

❤️ Thank You

Abraham Guo

mdm317

Ronen Amiel

You can read about our versioning strategy and releases on our website.

v8.46.0

8.46.0 (2025-10-06)

... (truncated)

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.46.3 (2025-11-03)

🩹 Fixes

eslint-plugin: [no-duplicate-enum-values] support signed numbers (#11722, #11723)

eslint-plugin: [no-misused-promises] expand union type to retrieve target property (#11706)

❤️ Thank You

Evgeny Stepanovych @undsoft

tao

You can read about our versioning strategy and releases on our website.

8.46.2 (2025-10-20)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] skip optional chaining when it could change the result (#11702)

❤️ Thank You

mdm317

You can read about our versioning strategy and releases on our website.

8.46.1 (2025-10-13)

🩹 Fixes

eslint-plugin: [no-misused-promises] special-case .finally not to report when a promise returning function is provided as an argument (#11667)

eslint-plugin: [prefer-optional-chain] include mixed "nullish comparison style" chains in checks (#11533)

❤️ Thank You

mdm317

Ronen Amiel

You can read about our versioning strategy and releases on our website.

8.46.0 (2025-10-06)

🚀 Features

eslint-plugin: [no-unsafe-member-access] add allowOptionalChaining option (#11659)

rule-schema-to-typescript-types: clean up and make public (#11633)

🩹 Fixes

eslint-plugin: [prefer-readonly-parameter-types] ignore tagged primitives (#11660)

... (truncated)

Commits

d9f3497 chore(release): publish 8.46.3
26a9f94 fix(eslint-plugin): [no-duplicate-enum-values] support signed numbers (#11722...
b8219d1 fix(eslint-plugin): [no-misused-promises] expand union type to retrieve targe...
55ca033 chore(release): publish 8.46.2
698e7a8 fix(eslint-plugin): [prefer-optional-chain] skip optional chaining when it co...
3f5fbf6 chore(release): publish 8.46.1
a64b3cc fix(eslint-plugin): [no-misused-promises] special-case .finally not to repo...
73003bf fix(eslint-plugin): [prefer-optional-chain] include mixed "nullish comparison...
aec785e chore(release): publish 8.46.0
a974191 fix(eslint-plugin): [prefer-readonly-parameter-types] ignore tagged primitive...
Additional commits viewable in compare view

Updates graphql-yoga from 5.15.2 to 5.16.0

Changelog

Sourced from graphql-yoga's changelog.

Description has been truncated

Bumps the patch group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.0.6` | `2.3.3` | | [turbo](https://github.com/vercel/turborepo) | `2.5.6` | `2.6.0` | | [@apollo/gateway](https://github.com/apollographql/federation/tree/HEAD/gateway-js) | `2.11.2` | `2.11.3` | | [@apollo/server](https://github.com/apollographql/apollo-server/tree/HEAD/packages/server) | `5.0.0` | `5.1.0` | | [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express) | `5.0.3` | `5.0.5` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.2` | `5.9.3` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.4.0` | `24.10.0` | | [fastify](https://github.com/fastify/fastify) | `5.6.0` | `5.6.1` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.1.13` | `19.2.2` | | [graphql-yoga](https://github.com/graphql-hive/graphql-yoga/tree/HEAD/packages/graphql-yoga) | `5.15.2` | `5.16.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.43.0` | `8.46.3` | Bumps the patch group with 4 updates in the /packages/yoga directory: [@types/express](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express), [typescript](https://github.com/microsoft/TypeScript), [graphql-yoga](https://github.com/graphql-hive/graphql-yoga/tree/HEAD/packages/graphql-yoga) and [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin). Updates `@biomejs/biome` from 2.0.6 to 2.3.3 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.3/packages/@biomejs/biome) Updates `turbo` from 2.5.6 to 2.6.0 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/release.md) - [Commits](vercel/turborepo@v2.5.6...v2.6.0) Updates `@apollo/gateway` from 2.11.2 to 2.11.3 - [Release notes](https://github.com/apollographql/federation/releases) - [Changelog](https://github.com/apollographql/federation/blob/main/gateway-js/CHANGELOG.md) - [Commits](https://github.com/apollographql/federation/commits/@apollo/gateway@2.11.3/gateway-js) Updates `@apollo/server` from 5.0.0 to 5.1.0 - [Release notes](https://github.com/apollographql/apollo-server/releases) - [Changelog](https://github.com/apollographql/apollo-server/blob/main/packages/server/CHANGELOG.md) - [Commits](https://github.com/apollographql/apollo-server/commits/@apollo/server@5.1.0/packages/server) Updates `@types/express` from 5.0.3 to 5.0.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express) Updates `typescript` from 5.9.2 to 5.9.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml) - [Commits](microsoft/TypeScript@v5.9.2...v5.9.3) Updates `@types/node` from 24.4.0 to 24.10.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `fastify` from 5.6.0 to 5.6.1 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.6.0...v5.6.1) Updates `@types/react` from 19.1.13 to 19.2.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `graphql-yoga` from 5.15.2 to 5.16.0 - [Release notes](https://github.com/graphql-hive/graphql-yoga/releases) - [Changelog](https://github.com/graphql-hive/graphql-yoga/blob/main/packages/graphql-yoga/CHANGELOG.md) - [Commits](https://github.com/graphql-hive/graphql-yoga/commits/graphql-yoga@5.16.0/packages/graphql-yoga) Updates `@typescript-eslint/eslint-plugin` from 8.43.0 to 8.46.3 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.3/packages/eslint-plugin) Updates `graphql-yoga` from 5.15.2 to 5.16.0 - [Release notes](https://github.com/graphql-hive/graphql-yoga/releases) - [Changelog](https://github.com/graphql-hive/graphql-yoga/blob/main/packages/graphql-yoga/CHANGELOG.md) - [Commits](https://github.com/graphql-hive/graphql-yoga/commits/graphql-yoga@5.16.0/packages/graphql-yoga) Updates `@types/express` from 5.0.3 to 5.0.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express) Updates `@typescript-eslint/eslint-plugin` from 8.43.0 to 8.46.3 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.3/packages/eslint-plugin) Updates `typescript` from 5.9.2 to 5.9.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml) - [Commits](microsoft/TypeScript@v5.9.2...v5.9.3) Updates `@types/express` from 5.0.3 to 5.0.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express) Updates `typescript` from 5.9.2 to 5.9.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml) - [Commits](microsoft/TypeScript@v5.9.2...v5.9.3) Updates `graphql-yoga` from 5.15.2 to 5.16.0 - [Release notes](https://github.com/graphql-hive/graphql-yoga/releases) - [Changelog](https://github.com/graphql-hive/graphql-yoga/blob/main/packages/graphql-yoga/CHANGELOG.md) - [Commits](https://github.com/graphql-hive/graphql-yoga/commits/graphql-yoga@5.16.0/packages/graphql-yoga) Updates `@typescript-eslint/eslint-plugin` from 8.43.0 to 8.46.3 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.3/packages/eslint-plugin) Updates `graphql-yoga` from 5.15.2 to 5.16.0 - [Release notes](https://github.com/graphql-hive/graphql-yoga/releases) - [Changelog](https://github.com/graphql-hive/graphql-yoga/blob/main/packages/graphql-yoga/CHANGELOG.md) - [Commits](https://github.com/graphql-hive/graphql-yoga/commits/graphql-yoga@5.16.0/packages/graphql-yoga) Updates `@types/express` from 5.0.3 to 5.0.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express) Updates `@typescript-eslint/eslint-plugin` from 8.43.0 to 8.46.3 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.3/packages/eslint-plugin) Updates `typescript` from 5.9.2 to 5.9.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml) - [Commits](microsoft/TypeScript@v5.9.2...v5.9.3) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.3.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch - dependency-name: turbo dependency-version: 2.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch - dependency-name: "@apollo/gateway" dependency-version: 2.11.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@apollo/server" dependency-version: 5.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch - dependency-name: "@types/express" dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: typescript dependency-version: 5.9.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@types/node" dependency-version: 24.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: fastify dependency-version: 5.6.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@types/react" dependency-version: 19.2.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch - dependency-name: graphql-yoga dependency-version: 5.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.46.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch - dependency-name: graphql-yoga dependency-version: 5.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: "@types/express" dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.46.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch - dependency-name: typescript dependency-version: 5.9.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@types/express" dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: typescript dependency-version: 5.9.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: graphql-yoga dependency-version: 5.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.46.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch - dependency-name: graphql-yoga dependency-version: 5.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: "@types/express" dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.46.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch - dependency-name: typescript dependency-version: 5.9.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2025-11-03T23:25:54Z

⚠️ No Changeset found

Latest commit: 4a5142c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

dependabot · 2025-11-03T23:30:22Z

Superseded by #216.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 3, 2025

dependabot bot closed this Nov 3, 2025

dependabot bot deleted the dependabot/npm_and_yarn/patch-940a9a7a45 branch November 3, 2025 23:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the patch group across 2 directories with 11 updates #215

chore(deps): bump the patch group across 2 directories with 11 updates #215

Uh oh!

dependabot bot commented on behalf of github Nov 3, 2025

I use `graphql@16` without incremental delivery

I use `graphql@16` but would like to add support for incremental delivery

I use `graphql@17.0.0-alpha.2` and use incremental delivery

I use `graphql@16` without incremental delivery

I use `graphql@16` but would like to add support for incremental delivery

I use `graphql@17.0.0-alpha.2` and use incremental delivery

Uh oh!

changeset-bot bot commented Nov 3, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 3, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the patch group across 2 directories with 11 updates #215

chore(deps): bump the patch group across 2 directories with 11 updates #215

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 3, 2025

Biome CLI v2.3.3

2.3.3

Patch Changes

What's Changed

2.3.3

Patch Changes

2.3.2

Patch Changes

Turborepo v2.6.0

What's Changed

Docs

create-turbo

eslint

Examples

Changelog

New Contributors

@​apollo/gateway@​2.11.3

Patch Changes

2.11.3

Patch Changes

@​apollo/server-integration-testsuite@​5.1.0

Patch Changes

@​apollo/server@​5.1.0

Minor Changes

I use graphql@16 without incremental delivery

I use graphql@16 but would like to add support for incremental delivery

I use graphql@17.0.0-alpha.2 and use incremental delivery

5.1.0

Minor Changes

I use graphql@16 without incremental delivery

I use graphql@16 but would like to add support for incremental delivery

I use graphql@17.0.0-alpha.2 and use incremental delivery

TypeScript 5.9.3

v5.6.1

What's Changed

New Contributors

5.16.0

Minor Changes

Patch Changes

v8.46.3

8.46.3 (2025-11-03)

🩹 Fixes

❤️ Thank You

v8.46.2

8.46.2 (2025-10-20)

🩹 Fixes

❤️ Thank You

v8.46.1

8.46.1 (2025-10-13)

🩹 Fixes

❤️ Thank You

v8.46.0

8.46.0 (2025-10-06)

8.46.3 (2025-11-03)

🩹 Fixes

❤️ Thank You

8.46.2 (2025-10-20)

🩹 Fixes

❤️ Thank You

8.46.1 (2025-10-13)

🩹 Fixes

❤️ Thank You

8.46.0 (2025-10-06)

🚀 Features

🩹 Fixes

Uh oh!

changeset-bot bot commented Nov 3, 2025

⚠️ No Changeset found

Uh oh!

dependabot bot commented on behalf of github Nov 3, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

`@apollo/gateway@2`.11.3

`@apollo/server-integration-testsuite@5`.1.0

`@apollo/server@5`.1.0

I use `graphql@16` without incremental delivery

I use `graphql@16` but would like to add support for incremental delivery

I use `graphql@17.0.0-alpha.2` and use incremental delivery

I use `graphql@16` without incremental delivery

I use `graphql@16` but would like to add support for incremental delivery

I use `graphql@17.0.0-alpha.2` and use incremental delivery