fix(deps): update apollo graphql packages

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
apollo-boost	^0.4.3 → ^0.4.9
graphql-tag	^2.10.1 → ^2.12.6

---

Release Notes

apollographql/apollo-client (apollo-boost)

v0.4.9

Compare Source

v0.4.8

Compare Source

v0.4.7

Compare Source

• Replace GlobalFetch reference with WindowOrWorkerGlobalScope.
  
  @​abdonrd in #​5373

• Add assumeImmutableResults typing to apollo boost PresetConfig interface.
  
  @​bencoullie in #​5571

v0.4.6

Compare Source

v0.4.4

Compare Source

apollographql/graphql-tag (graphql-tag)

v2.12.6

Compare Source

• Update peer dependencies to allow graphql ^16.0.0.
  
  @​brainkim in #​530

v2.12.5

Compare Source

• Also publish src/ directory to npm, enabling source maps.
  
  @​maclockard in #​403

v2.12.4

Compare Source

• Allow fragments to be imported by name when using the webpack loader.
  
  @​dobesv in #​257

v2.12.3

Compare Source

• Update tslib dependency to version 2.1.0.
  
  @​benjamn in #​381

v2.12.2

Compare Source

• Avoid using Object.assign to attach extra properties to gql.
  
  @​benjamn in #​380

v2.12.1

Compare Source

• To accommodate older versions of TypeScript, usage of the import type ... syntax (introduced by #​325) has been removed, fixing issue #​345.
  
  @​benjamn in #​352

v2.12.0

Compare Source

• The graphql-tag repository has been converted to TypeScript, adding type safety and enabling both ECMAScript and CommonJS module exports. While these changes are intended to be as backwards-compatible as possible, we decided to bump the minor version to reflect the significant refactoring.
  
  @​PowerKiKi and @​benjamn in #​325

v2.11.0

Compare Source

• package.json sideEffects changes to clearly identify that graphql-tag doesn't have side effects.
  
  @​hwillson in #​313

v2.10.4

Compare Source

• Bump dev/peer deps to accommodate graphql 15.
  
  @​adriencohen in #​299

v2.10.3

Compare Source

• Further adjustments to the TS index.d.ts declaration file.
  
  @​Guillaumez in #​289

v2.10.2

Compare Source

• Update/fix the existing TS index.d.ts declaration file.
  
  @​hwillson in #​285

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock

error Couldn't find match for "feat/resolve_dts" in "refs/heads/deprecation,refs/heads/master,refs/pull/1/head,refs/pull/10/head,refs/pull/11/head,refs/pull/13/head,refs/pull/2/head,refs/pull/3/head,refs/pull/4/head,refs/pull/5/head,refs/pull/6/head,refs/pull/7/head,refs/pull/8/head,refs/pull/9/head,refs/tags/v0.2.0,refs/tags/v0.3.0,refs/tags/v0.4.0,refs/tags/v0.4.1,refs/tags/v0.4.2,refs/tags/v0.5.0,refs/tags/v1.0.0,refs/tags/v1.0.1,refs/tags/v1.0.2,refs/tags/v1.1.0,refs/tags/v1.1.0-rc.1,refs/tags/v1.1.1" for "https://github.com/JounQin/eslint-import-resolver-typescript.git".

[changeset-bot]

⚠️ No Changeset found

Latest commit: b7fe33b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock

(node:1323) [DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities.
(Use `node --trace-deprecation ...` to show where the warning was created)
error Couldn't find match for "feat/resolve_dts" in "refs/heads/deprecation,refs/heads/master,refs/pull/1/head,refs/pull/10/head,refs/pull/11/head,refs/pull/13/head,refs/pull/2/head,refs/pull/3/head,refs/pull/4/head,refs/pull/5/head,refs/pull/6/head,refs/pull/7/head,refs/pull/8/head,refs/pull/9/head,refs/tags/v0.2.0,refs/tags/v0.3.0,refs/tags/v0.4.0,refs/tags/v0.4.1,refs/tags/v0.4.2,refs/tags/v0.5.0,refs/tags/v1.0.0,refs/tags/v1.0.1,refs/tags/v1.0.2,refs/tags/v1.1.0,refs/tags/v1.1.0-rc.1,refs/tags/v1.1.1" for "https://github.com/JounQin/eslint-import-resolver-typescript.git".

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	zen-observable-ts@​0.8.19
	wrappy@​1.0.2
	which-module@​2.0.0
	xtend@​4.0.2
	wordwrap@​1.0.0
	wide-align@​1.1.3
	zen-observable@​0.8.14
	write@​1.0.3
	xml-name-validator@​3.0.0
	ws@​5.2.2
	y18n@​4.0.0
	yargs-parser@​10.1.0
	which@​1.3.1
	yn@​3.1.0
	write-file-atomic@​2.4.1
	wrap-ansi@​5.1.0
	yargs@​12.0.5

View full report