build(deps-dev): bump the actions-deps group with 2 updates by dependabot[bot] · Pull Request #8301 · ardatan/graphql-tools

dependabot · 2026-07-16T21:30:04Z

Bumps the actions-deps group with 2 updates: @vue/compiler-sfc and postcss.

Updates @vue/compiler-sfc from 3.5.39 to 3.5.40

Release notes

Sourced from @vue/compiler-sfc's releases.

v3.5.40

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from @vue/compiler-sfc's changelog.

3.5.40 (2026-07-16)

Bug Fixes

compiler-core: avoid leaking slot branch keys (#15051) (20c9d26), closes #15048

hydration: pass namespace when patching dynamic props (#15082) (e0d2723), closes #15081 #15050

reactivity: handle effect removal during scope stop (#15084) (378f978), closes #15083

runtime-core: skip lazy hydration for detached roots (#15092) (97f3525), closes #15091

runtime-core: unwind dangling blocks when slot content throws (#15071) (ddc132d), closes #15070

runtime-dom: respect current select model type (#15010) (eb89e93), closes #15009

server-renderer: handle errors in optimized component renders (#12601) (474907c), closes #12575

server-renderer: remove package dependency cycle (#15063) (4d35eca)

shared: prevent SSR comment escaping from creating closing delimiters (#15045) (bd962bb)

types: don't constrain component $el type to Element (#15040) (164460a)

Commits

fa2885d release: v3.5.40
40178dd chore(deps): update lint (#15075)
b06b3bb fix(deps): update dependency postcss to ^8.5.19 (#15047)
See full diff in compare view

Updates postcss from 8.5.14 to 8.5.19

Release notes

Sourced from postcss's releases.

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

8.5.15

Fixed declaration parsing performance (by @homanp).

Changelog

Sourced from postcss's changelog.

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

8.5.15

Fixed declaration parsing performance (by @homanp).

Commits

9543b22 Release 8.5.19 version
3d13bf9 Fix CI on Windows too
00d0dd2 Keep explicitly set raws.before when inserting nodes into root (#2111)
7a05b33 Temporary fix CI
4c0d194 Release 8.5.18 version
92b4e78 Update dependencies
95663d3 Limit where source map can be loaded for security reasons
74e25ae Release 8.5.17 version
d1518af Fix Maximum call stack size exceeded error
2421312 Fix linter
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions-deps group with 2 updates: [@vue/compiler-sfc](https://github.com/vuejs/core/tree/HEAD/packages/compiler-sfc) and [postcss](https://github.com/postcss/postcss). Updates `@vue/compiler-sfc` from 3.5.39 to 3.5.40 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](https://github.com/vuejs/core/commits/v3.5.40/packages/compiler-sfc) Updates `postcss` from 8.5.14 to 8.5.19 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.14...8.5.19) --- updated-dependencies: - dependency-name: "@vue/compiler-sfc" dependency-version: 3.5.40 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: postcss dependency-version: 8.5.19 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: actions-deps ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-07-16T21:30:11Z

⚠️ No Changeset found

Latest commit: 3b27535

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

github-actions · 2026-07-16T21:31:45Z

🚀 Snapshot Release (`alpha`)

The latest changes of this PR are available as alpha on npm (based on the declared changesets):

Package	Version	Info
`@graphql-tools/executor`	`1.5.6-alpha-20260716213128-3b275357f660327dee07f7e3fe80d9e4cb16f89e`	npm ↗︎ unpkg ↗︎
`@ardatan/relay-compiler`	`13.0.2-alpha-20260716213128-3b275357f660327dee07f7e3fe80d9e4cb16f89e`	npm ↗︎ unpkg ↗︎
`@graphql-tools/relay-operation-optimizer`	`7.1.7-alpha-20260716213128-3b275357f660327dee07f7e3fe80d9e4cb16f89e`	npm ↗︎ unpkg ↗︎

github-actions · 2026-07-16T21:33:50Z

💻 Website Preview

The latest changes are available as preview in: https://pr-8301.graphql-tools-8ja.pages.dev

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 16, 2026

github-actions Bot deployed to preview July 16, 2026 21:33 View deployment

ardatan merged commit 532bc71 into master Jul 16, 2026
39 checks passed

ardatan deleted the dependabot/npm_and_yarn/actions-deps-967b1eabcc branch July 16, 2026 23:36

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps-dev): bump the actions-deps group with 2 updates - #8301

build(deps-dev): bump the actions-deps group with 2 updates#8301
ardatan merged 1 commit into
masterfrom
dependabot/npm_and_yarn/actions-deps-967b1eabcc

dependabot Bot commented on behalf of github Jul 16, 2026

Uh oh!

changeset-bot Bot commented Jul 16, 2026

Uh oh!

github-actions Bot commented Jul 16, 2026

Uh oh!

github-actions Bot commented Jul 16, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 16, 2026

v3.5.40

3.5.40 (2026-07-16)

Bug Fixes

8.5.19

8.5.18

8.5.17

8.5.16

8.5.15

8.5.19

8.5.18

8.5.17

8.5.16

8.5.15

Uh oh!

changeset-bot Bot commented Jul 16, 2026

⚠️ No Changeset found

Uh oh!

github-actions Bot commented Jul 16, 2026

🚀 Snapshot Release (alpha)

Uh oh!

github-actions Bot commented Jul 16, 2026

💻 Website Preview

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

🚀 Snapshot Release (`alpha`)