fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@apollo/gateway (source)	2.7.7 -> 2.7.8
@apollo/subgraph (source)	2.7.7 -> 2.7.8
@commander-js/extra-typings	12.0.1 -> 12.1.0
@graphql-codegen/typed-document-node (source)	5.0.6 -> 5.0.7
commander	12.0.0 -> 12.1.0
eslint (source)	9.2.0 -> 9.3.0
fast-xml-parser	4.3.6 -> 4.4.0
mongoose (source)	8.3.5 -> 8.4.0
sharp (source, changelog)	0.33.3 -> 0.33.4
tsx	4.10.3 -> 4.10.5
undici (source)	6.16.1 -> 6.18.0
wrangler (source)	3.56.0 -> 3.57.0

---

Release Notes

apollographql/federation (@​apollo/gateway)

v2.7.8

Compare Source

Patch Changes

• Triggering a clean 2.7.8 release now that harmonizer build has been fixed. (#​3010)

• Updated dependencies [2ad72802044310a528e8944f4538efe519424504]:

  • @​apollo/composition@​2.7.8
  • @​apollo/federation-internals@​2.7.8
  • @​apollo/query-planner@​2.7.8

apollographql/federation (@​apollo/subgraph)

v2.7.8

Compare Source

Patch Changes

• Triggering a clean 2.7.8 release now that harmonizer build has been fixed. (#​3010)

• Updated dependencies [2ad72802044310a528e8944f4538efe519424504]:

  • @​apollo/federation-internals@​2.7.8

commander-js/extra-typings (@​commander-js/extra-typings)

v12.1.0

Compare Source

Changed

• use ESLint for linting ([#​65])
• format source files with Prettier ([#​66])

Removed

• removed unimplemented Option.fullDescription from TypeScript definition ([#​70])

dotansimha/graphql-code-generator (@​graphql-codegen/typed-document-node)

v5.0.7

Compare Source

Patch Changes

• Updated dependencies [dfc5310, 156cc2b, dfc5310, b49457b]:
  • @​graphql-codegen/plugin-helpers@​5.0.4
  • @​graphql-codegen/visitor-plugin-common@​5.2.0

tj/commander.js (commander)

v12.1.0

Compare Source

Added

eslint/eslint (eslint)

v9.3.0

Compare Source

NaturalIntelligence/fast-xml-parser (fast-xml-parser)

v4.4.0

Compare Source

Automattic/mongoose (mongoose)

v8.4.0

Compare Source

==================

• feat: upgrade mongodb -> 6.6.2 #​14584
• feat: add transactionAsyncLocalStorage option to opt in to automatically setting session on all transactions #​14583 #​13889
• feat: handle initially null driver when instantiating Mongoose for Rollup support #​14577 #​12335
• feat(mongoose): export omitUndefined() helper #​14582 #​14569
• feat: add Model.listSearchIndexes() #​14519 #​14450
• feat(connection): add listDatabases() function #​14506 #​9048
• feat(schema): add schema-level readConcern option to apply default readConcern for all queries #​14579 #​14511
• fix(error): remove model property from CastError to avoid printing all model properties to console #​14568 #​14529
• fix(model): make bulkWrite() and insertMany() throw if throwOnValidationError set and all ops invalid #​14587 #​14572
• fix(document): ensure transform function passed to toObject() options applies to subdocs #​14600 #​14589
• types: add inferRawDocType helper #​13900 #​13772
• types(document): make document _id type default to unknown instead of any #​14541

lovell/sharp (sharp)

v0.33.4

Compare Source

privatenumber/tsx (tsx)

v4.10.5

Compare Source

Bug Fixes

• handle parsing variable of (86cf87c), closes #​556

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.10.4

Compare Source

nodejs/undici (undici)

v6.18.0

Compare Source

v6.17.0

Compare Source

What's Changed

• fetch: fix captureStackTrace by @​Uzlopak in https://github.com/nodejs/undici/pull/3227
• fetch: fix wpt test request-upload.any.js by @​Uzlopak in https://github.com/nodejs/undici/pull/3234
• websocket: don't clone buffer by @​tsctx in https://github.com/nodejs/undici/pull/3240
• Remove unecessary async from writeBuffer by @​DarkGL in https://github.com/nodejs/undici/pull/3245
• refactor websocket control frame handling by @​KhafraDev in https://github.com/nodejs/undici/pull/3241
• fix parsing continuation frames in websocket by @​KhafraDev in https://github.com/nodejs/undici/pull/3247
• ci: node nightly test should use node 23 by @​Uzlopak in https://github.com/nodejs/undici/pull/3248
• Add test to verify if the connection is correctly aborted on cancel by @​mcollina in https://github.com/nodejs/undici/pull/3219
• Autobahn suite by @​KhafraDev in https://github.com/nodejs/undici/pull/3251
• websocket: fix 6 autobahn tests by @​KhafraDev in https://github.com/nodejs/undici/pull/3254
• websocket: checkout correct commit in autobahn workflow by @​Uzlopak in https://github.com/nodejs/undici/pull/3258
• Cleanup websocket by @​KhafraDev in https://github.com/nodejs/undici/pull/3257
• websocket: autobahn workflow should fail on error by @​Uzlopak in https://github.com/nodejs/undici/pull/3259
• add bodymixin bytes by @​KhafraDev in https://github.com/nodejs/undici/pull/3262
• perf: avoid buffer cloning by @​tsctx in https://github.com/nodejs/undici/pull/3264
• feat: dump interceptor by @​metcoder95 in https://github.com/nodejs/undici/pull/3118
• use private properties in Headers by @​KhafraDev in https://github.com/nodejs/undici/pull/3269
• Revert "websocket: autobahn workflow should fail on error" by @​Uzlopak in https://github.com/nodejs/undici/pull/3270
• build(deps): bump node from 487dc5d to 9e8f45f in /build by @​dependabot in https://github.com/nodejs/undici/pull/3271

New Contributors

• @​DarkGL made their first contribution in https://github.com/nodejs/undici/pull/3245

Full Changelog: nodejs/undici@v6.16.1...v6.17.0

cloudflare/workers-sdk (wrangler)

v3.57.0

Compare Source

Minor Changes

• #​5696 7e97ba8 Thanks @​geelen! - feature: Improved d1 execute --file --remote performance & added support for much larger SQL files within a single transaction.

• #​5819 63f7acb Thanks @​CarmenPopoviciu! - fix: Show feedback on Pages project deployment failure

  Today, if uploading a Pages Function, or deploying a Pages project fails for whatever reason, there’s no feedback shown to the user. Worse yet, the shown message is misleading, saying the deployment was successful, when in fact it was not:

  ✨ Deployment complete!
  

  This commit ensures that we provide users with:

  • the correct feedback with respect to their Pages deployment
  • the appropriate messaging depending on the status of their project's deployment status
  • the appropriate logs in case of a deployment failure

• #​5814 2869e03 Thanks @​CarmenPopoviciu! - fix: Display correct global flags in wrangler pages --help

  Running wrangler pages --help will list, amongst others, the following global flags:

  -j, --experimental-json-config
  -c, --config
  -e, --env
  -h, --help
  -v, --version
  

  This is not accurate, since flags such as --config, --experimental-json-config, or env are not supported by Pages.

  This commit ensures we display the correct global flags that apply to Pages.

• #​5818 df2daf2 Thanks @​WalshyDev! - chore: Deprecate usage of the deployment object on the unsafe metadata binding in favor of the new version_metadata binding.

  If you're currently using the old binding, please move over to the new version_metadata binding by adding:

  [version_metadata]
  binding = "CF_VERSION_METADATA"

  and updating your usage accordingly. You can find the docs for the new binding here: https://developers.cloudflare.com/workers/runtime-apis/bindings/version-metadata

Patch Changes

• #​5838 609debd Thanks @​petebacondarwin! - fix: update undici to the latest version to avoid a potential vulnerability

• #​5832 86a6e09 Thanks @​petebacondarwin! - fix: do not allow non-string values in bulk secret uploads

  Prior to Wrangler 3.4.0 we displayed an error if the user tried to upload a
  JSON file that contained non-string secrets, since these are not supported
  by the Cloudflare backend.

  This change reintroduces that check to give the user a helpful error message
  rather than a cryptic workers.api.error.invalid_script_config error code.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

🚀 Snapshot Release (alpha)

The latest changes of this PR are available as alpha on npm (based on the declared changesets):

Package	Version	Info
@graphql-mesh/cli	0.90.6-alpha-20240520141541-324cdf231f9a8a66b857b242d9d578619db99cdf	npm ↗︎ unpkg ↗︎
@graphql-mesh/soap	0.99.0-alpha-20240520141541-324cdf231f9a8a66b857b242d9d578619db99cdf	npm ↗︎ unpkg ↗︎
@graphql-mesh/transform-extend	0.98.5-alpha-20240520141541-324cdf231f9a8a66b857b242d9d578619db99cdf	npm ↗︎ unpkg ↗︎
@omnigraph/soap	0.99.0-alpha-20240520141541-324cdf231f9a8a66b857b242d9d578619db99cdf	npm ↗︎ unpkg ↗︎

[github-actions]

💻 Website Preview

The latest changes are available as preview in: https://b31025cf.graphql-mesh.pages.dev