Skip to content

chore(deps): bump graphql from 16.14.2 to 17.0.0#532

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/graphql-17.0.0
Open

chore(deps): bump graphql from 16.14.2 to 17.0.0#532
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/graphql-17.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown

Bumps graphql from 16.14.2 to 17.0.0.

Release notes

Sourced from graphql's releases.

v17.0.0 (2026-06-15)

New Feature 🚀

Bug Fix 🐞

Docs 📝

Polish 💅

Internal 🏠

... (truncated)

Commits
  • c7e494a chore(release): v17.0.0
  • d977f66 docs: post 17.rc-0 update (#4817)
  • 39f865f docs: document @experimental_disableErrorPropagation (#4820)
  • 61db552 feat: graduate directives on directives (#4819)
  • e8e5d64 Revert "feat(validation): reject directive definition cycles (#4726)" (#4815)
  • f8ffad3 feat(validation): reject directive definition cycles (#4726)
  • 6618357 polish(KnownDirectivesRule): cover field argument directives in extensions
  • 242c99e fix(KnownDirectivesRule): directive locations for input obj extensions
  • 83dc508 internal: upgrade website prettier
  • a98dc3e internal: support local api doc generation
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [graphql](https://github.com/graphql/graphql-js) from 16.14.2 to 17.0.0.
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v16.14.2...v17.0.0)

---
updated-dependencies:
- dependency-name: graphql
  dependency-version: 17.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 16, 2026
@sonarqubecloud

Copy link
Copy Markdown

@github-actions

Copy link
Copy Markdown

Test Coverage Report

Overall Coverage: 96.84%

Metric Percentage
Statements 96.2%
Branches 87.97%
Functions 94.83%
Lines 96.84%

View detailed coverage report

@greptile-apps

greptile-apps Bot commented Jun 16, 2026

Copy link
Copy Markdown

Greptile Summary

  • Updates packages/gitlab-mcp to depend on graphql@^17.0.0.
  • Updates yarn.lock so the workspace resolves graphql@17.0.0.
  • Leaves the rest of the GraphQL-related dependency set unchanged.

Confidence Score: 4/5

The dependency bump is not merge-safe until the GraphQL peer dependency mismatch is resolved.

The changed dependency set was narrow and the install-time incompatibility was confirmed with real package-manager output.

packages/gitlab-mcp/package.json needs graphql and graphql-tag brought back into a compatible peer range.

Reviews (1): Last reviewed commit: "chore(deps): bump graphql from 16.14.2 t..." | Re-trigger Greptile

"@modelcontextprotocol/sdk": "^1.29.0",
"express": "^5.2.1",
"graphql": "^16.14.2",
"graphql": "^17.0.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Unsupported peer combination

Bumping graphql to ^17.0.0 leaves this package on graphql-tag@2.12.6, whose peer range only accepts GraphQL through ^16.0.0. A fresh install now reports YN0060 / YN0086 for the workspace-provided graphql@17.0.0, so CI or downstream install steps that enforce peer requirements can fail before the package is usable. Keep GraphQL on 16, or update/remove graphql-tag at the same time with a version/path that supports GraphQL 17.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants