Skip to content

build(deps): bump the actions-deps group across 1 directory with 12 updates - #8325

Merged
ardatan merged 2 commits into
masterfrom
dependabot/npm_and_yarn/actions-deps-d7b30de811
Jul 29, 2026
Merged

build(deps): bump the actions-deps group across 1 directory with 12 updates#8325
ardatan merged 2 commits into
masterfrom
dependabot/npm_and_yarn/actions-deps-d7b30de811

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the actions-deps group with 11 updates in the / directory:

Package From To
@apollo/client 4.2.7 4.2.8
@graphql-tools/delegate 12.1.0 12.1.1
concurrently 10.0.3 10.0.4
lint-staged 17.1.1 17.2.0
svelte 5.56.7 5.56.8
svelte2tsx 0.7.58 0.7.59
@graphql-tools/stitch 10.2.1 10.2.2
puppeteer 25.3.0 25.4.0
webpack 5.108.4 5.109.2
postcss 8.5.18 8.5.24
wrangler 4.113.0 4.115.0

Updates @apollo/client from 4.2.7 to 4.2.8

Release notes

Sourced from @​apollo/client's releases.

@​apollo/client@​4.2.8

Patch Changes

  • #13349 501a33b Thanks @​jerelmiller! - Prevent the setTimeout in connectToDevtools that shows the devtools suggestion from firing when the user agent does not match Chrome or Firefox. This check was previously done inside the setTimeout which meant the timer was scheduled for environments where we'd never show the message anyways. For test environments, this could cause flaky tests when that setTimeout outlived the tests and ran after any virtual DOM was torn down and removed.
Changelog

Sourced from @​apollo/client's changelog.

4.2.8

Patch Changes

  • #13349 501a33b Thanks @​jerelmiller! - Prevent the setTimeout in connectToDevtools that shows the devtools suggestion from firing when the user agent does not match Chrome or Firefox. This check was previously done inside the setTimeout which meant the timer was scheduled for environments where we'd never show the message anyways. For test environments, this could cause flaky tests when that setTimeout outlived the tests and ran after any virtual DOM was torn down and removed.
Commits

Updates @graphql-tools/delegate from 12.1.0 to 12.1.1

Changelog

Sourced from @​graphql-tools/delegate's changelog.

12.1.1

Patch Changes

  • #2498 9ff0daf Thanks @​enisdenjo! - Fix delegated argument serialization when fields are filtered or renamed

    Inline enum values now remain enum literals, and original variable definitions are preserved while still referenced by fragments, selections, directives, or other arguments.

Commits

Updates concurrently from 10.0.3 to 10.0.4

Release notes

Sourced from concurrently's releases.

v10.0.4

What's Changed

New Contributors

Full Changelog: open-cli-tools/concurrently@v10.0.3...v10.0.4

Commits

Updates lint-staged from 17.1.1 to 17.2.0

Release notes

Sourced from lint-staged's releases.

v17.2.0

Minor Changes

  • #1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

    /** @type {import('lint-staged').Configuration} */
export default {
  "*.ts": () => "tsc", // Run "tsc" when any TS file is changed (for entire project)
};

    Where the spawned command is literally "tsc" without any extra arguments. Previously, this was still chunked when a lot of files were staged. Now, it probably won't be chunked because the length of the command is just three letters.

    Also, native JavaScript/Node.js function tasks won't be chunked at all, when previously they were run multiple times when chunked:

    /** @type {import('lint-staged').Configuration} */
export default {
  "*.js": {
    title: "Log staged JS files to console",
    task: async (files) => {
      console.log("Staged JS files:", files);
    },
  },
};
Changelog

Sourced from lint-staged's changelog.

17.2.0

Minor Changes

  • #1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

    /** @type {import('lint-staged').Configuration} */
export default {
  "*.ts": () => "tsc", // Run "tsc" when any TS file is changed (for entire project)
};

    Where the spawned command is literally "tsc" without any extra arguments. Previously, this was still chunked when a lot of files were staged. Now, it probably won't be chunked because the length of the command is just three letters.

    Also, native JavaScript/Node.js function tasks won't be chunked at all, when previously they were run multiple times when chunked:

    /** @type {import('lint-staged').Configuration} */
export default {
  "*.js": {
    title: "Log staged JS files to console",
    task: async (files) => {
      console.log("Staged JS files:", files);
    },
  },
};
Commits
  • fb540fb Merge pull request #1824 from lint-staged/changeset-release/main
  • dc0a738 chore(changeset): release
  • 60cbb88 Merge pull request #1823 from lint-staged/reimplement-chunk-files
  • 2354dc4 build(deps): update dependencies
  • 0516e7f docs: adjust debug logs
  • e22f6ed style: run oxfmt on README.md
  • 37e8e1a fix: restore chunking of git add command after running tasks
  • 2c75f1d chore: remove unused file
  • ee156cc feat: add improved lazy-chunking of command strings
  • baa7c98 feat: remove current chunkFiles implementation
  • See full diff in compare view

Updates svelte from 5.56.7 to 5.56.8

Release notes

Sourced from svelte's releases.

svelte@5.56.8

Patch Changes

  • fix: call onerror and provide a working reset when hydrating a failed boundary (#18556)

  • fix: preserve select selection when spread attributes omit value (#18561)

Changelog

Sourced from svelte's changelog.

5.56.8

Patch Changes

  • fix: call onerror and provide a working reset when hydrating a failed boundary (#18556)

  • fix: preserve select selection when spread attributes omit value (#18561)

Commits

Updates svelte2tsx from 0.7.58 to 0.7.59

Commits

Updates @graphql-tools/stitch from 10.2.1 to 10.2.2

Changelog

Sourced from @​graphql-tools/stitch's changelog.

10.2.2

Patch Changes

  • Updated dependencies [9ff0daf]:
    • @​graphql-tools/delegate@​12.1.1
    • @​graphql-tools/batch-delegate@​10.0.29
    • @​graphql-tools/wrap@​11.1.21
Commits

Updates @graphql-tools/wrap from 11.1.20 to 11.1.21

Changelog

Sourced from @​graphql-tools/wrap's changelog.

11.1.21

Patch Changes

  • Updated dependencies [9ff0daf]:
    • @​graphql-tools/delegate@​12.1.1
Commits

Updates puppeteer from 25.3.0 to 25.4.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v25.4.0

25.4.0 (2026-07-27)

🎉 Features

🛠️ Fixes

puppeteer: v25.4.0

25.4.0 (2026-07-27)

🎉 Features

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 25.3.0 to 25.4.0
Changelog

Sourced from puppeteer's changelog.

25.4.0 (2026-07-27)

🎉 Features

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 25.3.0 to 25.4.0

🛠️ Fixes

Commits
  • f5b96c5 chore: release main (#15201)
  • 29a6e7c chore(webmcp): Update WebMCP to Chrome 151 implementation (#15146)
  • 4a48c8a feat: add browser-level PWA install/launch/uninstall APIs (#15235)
  • ffe1c91 chore(deps): bump the all group with 5 updates (#15262)
  • 06442ae feat: roll to Chrome 151.0.7922.47 (#15237)
  • 7c72827 chore(deps): bump svgo from 3.3.3 to 3.3.4 in /website (#15253)
  • 83b0e31 chore(deps): bump fast-uri from 3.1.2 to 3.1.4 in /website (#15254)
  • 0ebbd98 chore(deps): bump shell-quote from 1.8.4 to 1.10.0 in /website (#15255)
  • befa16f chore(deps): bump body-parser from 1.20.5 to 1.20.6 in /website (#15256)
  • 8af689d chore(deps): bump webpack-dev-server from 5.2.5 to 5.2.6 in /website (#15257)
  • Additional commits viewable in compare view

Updates webpack from 5.108.4 to 5.109.2

Release notes

Sourced from webpack's releases.

v5.109.2

Patch Changes

  • Resolve aliases pointing at a package directory whose name ends with .js again. (by @​alexander-akait in #21542)

  • Name CSS sources in source maps by their resource path, without the css prefix. (by @​bjohansebas in #21536)

  • Delete no longer referenced files from the filesystem cache directory after storing the cache, age them by recorded time so restored caches are cleaned too, and collect every fully expired pack in one store instead of one per build. (by @​bjohansebas in #21528)

  • Report "universal" as the loader context target for the universal target. (by @​alexander-akait in #21540)

  • Skip require().prop in dead branches gated by inlined imported constants. (by @​hai-x in #21517)

  • Annotate configuration options and public hooks in the generated types with the @since JSDoc tag. (by @​bjohansebas in #21473)

v5.109.1

Patch Changes

  • Fix stray semicolon emitted before an imported call following a parenthesized sequence element. (by @​alexander-akait in #21533)

  • Make require(esm) module.exports re-export analysis independent of module processing order. (by @​alexander-akait in #21521)

  • Ignore ERR_SERVER_NOT_RUNNING on lazy-compilation backend dispose so compiler.close() succeeds on Bun. (by @​alexander-akait in #21521)

  • Name the failing key when DefinePlugin fails to evaluate a typeof value. (by @​alexander-akait in #21503)

  • Improve Deno compatibility: guard setNoDelay and force-close connections on lazy-compilation backend dispose, and return a real ArrayBuffer from the Node async/sync wasm loader so WebAssembly.instantiate accepts it. (by @​alexander-akait in #21524)

  • Speed up the HTML parser and cut its peak memory: module-scope helpers/state and tokenizer callbacks, plus exact AST column pre-sizing. (by @​alexander-akait in #21492)

  • Track CommonJS build dependencies by parsing sources when require.cache children are unavailable (e.g. Bun). (by @​alexander-akait in #21531)

  • Cook common string-literal escapes on the JS parser fast path and own the tokenizer's cold-path readers. (by @​alexander-akait in #21500)

  • Build the CSS parseA* AST on the SoA store instead of node classes, cutting parse memory and time. (by @​alexander-akait in #21498)

  • Speed up and cut memory of the experimental CSS and HTML parsers: drop two derivable AST node columns, and scan long string, url, comment, and plaintext token bodies natively. (by @​alexander-akait in #21504)

  • Speed up non-modules CSS parsing: skip redundant token re-reads, drop selector-prelude tokens without materializing nodes, allocate rule preludes lazily, and fast-path empty list seals. (by @​alexander-akait in #21511)

  • Speed up stats generation and cut its peak memory: reuse cached sort comparators instead of thrashing the comparator caches on every sort, and drop redundant module-graph lookups and allocations in the extractors. (by @​alexander-akait in #21506)

  • Speed up CSS parsing: byte-range function-name checks, indexed sibling lookahead. (by @​bjohansebas in #21520)

  • Reduce allocations and redundant work across the code-generation, module-concatenation, exports/usage-analysis, hashing, and chunk-splitting hot paths. (by @​alexander-akait in #21516)

  • Enable the Node.js compile cache in the webpack CLI entry point. (by @​bjohansebas in #21523)

  • Encode the persistent cache with V8's value serializer. (by @​avivkeller in #21514)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.109.2

Patch Changes

  • Resolve aliases pointing at a package directory whose name ends with .js again. (by @​alexander-akait in #21542)

  • Name CSS sources in source maps by their resource path, without the css prefix. (by @​bjohansebas in #21536)

  • Delete no longer referenced files from the filesystem cache directory after storing the cache, age them by recorded time so restored caches are cleaned too, and collect every fully expired pack in one store instead of one per build. (by @​bjohansebas in #21528)

  • Report "universal" as the loader context target for the universal target. (by @​alexander-akait in #21540)

  • Skip require().prop in dead branches gated by inlined imported constants. (by @​hai-x in #21517)

  • Annotate configuration options and public hooks in the generated types with the @since JSDoc tag. (by @​bjohansebas in #21473)

5.109.1

Patch Changes

  • Fix stray semicolon emitted before an imported call following a parenthesized sequence element. (by @​alexander-akait in #21533)

  • Make require(esm) module.exports re-export analysis independent of module processing order. (by @​alexander-akait in #21521)

  • Ignore ERR_SERVER_NOT_RUNNING on lazy-compilation backend dispose so compiler.close() succeeds on Bun. (by @​alexander-akait in #21521)

  • Name the failing key when DefinePlugin fails to evaluate a typeof value. (by @​alexander-akait in #21503)

  • Improve Deno compatibility: guard setNoDelay and force-close connections on lazy-compilation backend dispose, and return a real ArrayBuffer from the Node async/sync wasm loader so WebAssembly.instantiate accepts it. (by @​alexander-akait in #21524)

  • Speed up the HTML parser and cut its peak memory: module-scope helpers/state and tokenizer callbacks, plus exact AST column pre-sizing. (by @​alexander-akait in #21492)

  • Track CommonJS build dependencies by parsing sources when require.cache children are unavailable (e.g. Bun). (by @​alexander-akait in #21531)

  • Cook common string-literal escapes on the JS parser fast path and own the tokenizer's cold-path readers. (by @​alexander-akait in #21500)

  • Build the CSS parseA* AST on the SoA store instead of node classes, cutting parse memory and time. (by @​alexander-akait in #21498)

  • Speed up and cut memory of the experimental CSS and HTML parsers: drop two derivable AST node columns, and scan long string, url, comment, and plaintext token bodies natively. (by @​alexander-akait in #21504)

  • Speed up non-modules CSS parsing: skip redundant token re-reads, drop selector-prelude tokens without materializing nodes, allocate rule preludes lazily, and fast-path empty list seals. (by @​alexander-akait in #21511)

  • Speed up stats generation and cut its peak memory: reuse cached sort comparators instead of thrashing the comparator caches on every sort, and drop redundant module-graph lookups and allocations in the extractors. (by @​alexander-akait in #21506)

  • Speed up CSS parsing: byte-range function-name checks, indexed sibling lookahead. (by @​bjohansebas in #21520)

  • Reduce allocations and redundant work across the code-generation, module-concatenation, exports/usage-analysis, hashing, and chunk-splitting hot paths. (by @​alexander-akait in #21516)

  • Enable the Node.js compile cache in the webpack CLI entry point. (by @​bjohansebas in #21523)

... (truncated)

Commits
  • 6a24bd6 chore(release): new release (#21534)
  • d1b5b6d fix: resolve aliases pointing at a package directory ending in .js (#21542)
  • 9cdcc57 fix(target): report "universal" as the loader target (#21540)
  • 774e7e4 feat: annotate schema options with added keywords (#21473)
  • ff07bdc fix(css): name CSS sources in source maps by their resource path (#21536)
  • d56d82d fix(cache): reclaim stale filesystem cache files reliably (#21539)
  • ae67e2a chore(readme): add codspeed (#21497)
  • 964bbfa fix: delete no longer referenced files from the filesystem cache directory (#...
  • 075d0cd feat: skip require().prop in dead branches (#21517)
  • ec39088 chore(release): new release (#21493)
  • Additional commits viewable in compare view

Updates postcss from 8.5.18 to 8.5.24

Release notes

Sourced from postcss's releases.

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).
Changelog

Sourced from postcss's changelog.

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).
Commits

Updates wrangler from 4.113.0 to 4.115.0

Release notes

Sourced from wrangler's releases.

wrangler@4.115.0

Minor Changes

  • #14807 4dfb96e Thanks @​oOPa! - Add hidden --jurisdiction option to wrangler kv namespace create for internal testing

    This option creates a KV namespace within a specific jurisdiction (for example us, eu, or fedramp), backing it with jurisdiction-scoped storage. It is experimental and currently gated to allow-listed accounts, so it is hidden from --help until the feature is generally available.

  • #14280 465c0fb Thanks @​tahmid-23! - Add experimental local_dev.experimental_s3_credentials to r2_buckets config

    When set, the R2 bucket is served over a local S3-compatible API at /cdn-cgi/local/r2/s3/<bucket-id> during local development, authenticated with the configured AWS SigV4 credentials. <bucket-id> is the bucket's bucket_name, or the binding name if bucket_name is not set:

    {
  "r2_buckets": [
    {
      "binding": "BUCKET",
      "bucket_name": "my-bucket",
      "local_dev": {
        "experimental_s3_credentials": {
          "accessKeyId": "local-access-key-id",
          "secretAccessKey": "local-secret-access-key"
        }
      }
    }
  ]
}

  • #14877 552bcfc Thanks @​jasoncabot! - Respect and surface the Retry-After header on Cloudflare API responses

    Previously, if a Wrangler command (e.g. wrangler versions upload, wrangler deploy) hit the Cloudflare API's rate limit, the resulting error gave no indication of how long to wait before trying again, and 429 responses weren't retried at all (only 5xx errors were, with a fixed linear backoff).

    Now:

    • 429 Too Many Requests responses are automatically retried, alongside the existing 5xx retry behaviour.
    • If a retried response includes a Retry-After header, Wrangler waits for that duration instead of the default backoff, and logs a message indicating how long it's waiting. To avoid blocking for an excessive amount of time, waits longer than 60 seconds fail fast instead — the surfaced Retry-After value lets the caller schedule its own retry.
    • If a retryable error is ultimately surfaced to the user (e.g. because retries were exhausted), the error message includes a note with the Retry-After duration, and the command-failed entry written to the Wrangler output file (WRANGLER_OUTPUT_FILE_PATH/WRANGLER_OUTPUT_FILE_DIRECTORY) gains a retry_after_ms field. This lets scripts and CI/CD pipelines calling Wrangler repeatedly (for example, wrangler versions upload on every commit) read the wait duration directly instead of regex-parsing stderr.

    APIError.isRetryable() is unchanged (still 5xx only); retryOnAPIFailure() separately retries 429s. retryAfterMs, when present, is honoured for any retried error, not just 429s.

    retryAfterMs is also now populated on APIErrors raised from direct R2 object requests, the Browser Rendering API, and errors surfaced from commands using the official cloudflare SDK client.

  • #14712 6e0bf6e Thanks @​mack-erel! - Support connect() on remote VPC Network and VPC Service bindings in local development

    Remote VPC Network and VPC Service bindings previously only supported HTTP and JSRPC, so calling binding.connect(address) against a private TCP service (for example a database) failed in local dev with Incoming CONNECT on a worker not supported. Raw TCP connections through remote VPC Network and VPC Service bindings now work in local development.

    This feature is experimental. Existing HTTP and JSRPC usage of remote VPC Network and VPC Service bindings is unaffected, and no new configuration is required.

Patch Changes

... (truncated)

Commits
  • 760a85b Version Packages (#14824)
  • ee4472a [wrangler] Remove jurisdiction field from kv_namespaces in wrangler config (#...
  • 552bcfc [wrangler] Respect and surface 429 errors from HTTP requests (#14877)
  • e353367 fix output comparisons for e2e tests (#14884)
  • 4dfb96e [wrangler] Support jurisdictions for KV namespaces (#14807)
  • 09b8a44 [wrangler] Split cloudchamber curl headers on the first colon only (#14815)
  • 465c0fb [miniflare] Expose R2 via an S3-compatible API locally (#14280)
  • b737676 [wrangler] Derive old log file age from filename timestamp (#14801)
  • 16b3d5a Version Packages (#14799)
  • 3203b5d [miniflare] Local dev observability: traces, spans & logs via a SQL query API...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@changeset-bot

changeset-bot Bot commented Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 03abb8f

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions

github-actions Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

💻 Website Preview

The latest changes are available as preview in: https://pr-8325.graphql-tools-8ja.pages.dev

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/actions-deps-d7b30de811 branch from 5706062 to 476b238 Compare July 29, 2026 11:43
@github-actions

github-actions Bot commented Jul 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

🚀 Snapshot Release (alpha)

The latest changes of this PR are available as alpha on npm (based on the declared changesets):

Package Version Info
@graphql-tools/links 10.0.13-alpha-20260729122505-03abb8f972b47ef06e2c846516317134c55fa04e npm ↗︎ unpkg ↗︎

@ardatan

ardatan commented Jul 29, 2026

Copy link
Copy Markdown
Owner

@dependabot recreate

@dependabot
build(deps): bump the actions-deps group across 1 directory with 12 u…
6281e74 
…pdates

Bumps the actions-deps group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@apollo/client](https://github.com/apollographql/apollo-client) | `4.2.7` | `4.2.8` |
| [@graphql-tools/delegate](https://github.com/graphql-hive/gateway/tree/HEAD/packages/delegate) | `12.1.0` | `12.1.1` |
| [concurrently](https://github.com/open-cli-tools/concurrently) | `10.0.3` | `10.0.4` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.1.1` | `17.2.0` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.7` | `5.56.8` |
| [svelte2tsx](https://github.com/sveltejs/language-tools) | `0.7.58` | `0.7.59` |
| [@graphql-tools/stitch](https://github.com/graphql-hive/gateway/tree/HEAD/packages/stitch) | `10.2.1` | `10.2.2` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `25.3.0` | `25.4.0` |
| [webpack](https://github.com/webpack/webpack) | `5.108.4` | `5.109.2` |
| [postcss](https://github.com/postcss/postcss) | `8.5.18` | `8.5.24` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.113.0` | `4.115.0` |



Updates `@apollo/client` from 4.2.7 to 4.2.8
- [Release notes](https://github.com/apollographql/apollo-client/releases)
- [Changelog](https://github.com/apollographql/apollo-client/blob/main/CHANGELOG.md)
- [Commits](https://github.com/apollographql/apollo-client/compare/@apollo/client@4.2.7...@apollo/client@4.2.8)

Updates `@graphql-tools/delegate` from 12.1.0 to 12.1.1
- [Release notes](https://github.com/graphql-hive/gateway/releases)
- [Changelog](https://github.com/graphql-hive/gateway/blob/main/packages/delegate/CHANGELOG.md)
- [Commits](https://github.com/graphql-hive/gateway/commits/@graphql-tools/delegate@12.1.1/packages/delegate)

Updates `concurrently` from 10.0.3 to 10.0.4
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](open-cli-tools/concurrently@v10.0.3...v10.0.4)

Updates `lint-staged` from 17.1.1 to 17.2.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.1.1...v17.2.0)

Updates `svelte` from 5.56.7 to 5.56.8
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.56.8/packages/svelte)

Updates `svelte2tsx` from 0.7.58 to 0.7.59
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte2tsx@0.7.58...svelte2tsx@0.7.59)

Updates `@graphql-tools/stitch` from 10.2.1 to 10.2.2
- [Release notes](https://github.com/graphql-hive/gateway/releases)
- [Changelog](https://github.com/graphql-hive/gateway/blob/main/packages/stitch/CHANGELOG.md)
- [Commits](https://github.com/graphql-hive/gateway/commits/@graphql-tools/stitch@10.2.2/packages/stitch)

Updates `@graphql-tools/wrap` from 11.1.20 to 11.1.21
- [Release notes](https://github.com/graphql-hive/gateway/releases)
- [Changelog](https://github.com/graphql-hive/gateway/blob/main/packages/wrap/CHANGELOG.md)
- [Commits](https://github.com/graphql-hive/gateway/commits/@graphql-tools/wrap@11.1.21/packages/wrap)

Updates `puppeteer` from 25.3.0 to 25.4.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v25.3.0...puppeteer-v25.4.0)

Updates `webpack` from 5.108.4 to 5.109.2
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.108.4...v5.109.2)

Updates `postcss` from 8.5.18 to 8.5.24
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.18...8.5.24)

Updates `wrangler` from 4.113.0 to 4.115.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.115.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@apollo/client"
  dependency-version: 4.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: "@graphql-tools/delegate"
  dependency-version: 12.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: "@graphql-tools/stitch"
  dependency-version: 10.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: "@graphql-tools/wrap"
  dependency-version: 11.1.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: concurrently
  dependency-version: 10.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: lint-staged
  dependency-version: 17.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: postcss
  dependency-version: 8.5.23
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: puppeteer
  dependency-version: 25.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: svelte
  dependency-version: 5.56.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: svelte2tsx
  dependency-version: 0.7.59
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: webpack
  dependency-version: 5.109.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: wrangler
  dependency-version: 4.114.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/actions-deps-d7b30de811 branch from 476b238 to 6281e74 Compare July 29, 2026 12:05
@ardatan
ardatan merged commit 14049e9 into master Jul 29, 2026
39 checks passed
@ardatan
ardatan deleted the dependabot/npm_and_yarn/actions-deps-d7b30de811 branch July 29, 2026 12:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ardatan