Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 2 updates - #46

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/production-dependencies-c9e5f11a4d
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/production-dependencies-c9e5f11a4d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 2 updates in the / directory: graphql and jose.

Updates graphql from 16.14.2 to 17.0.2

Release notes

Sourced from graphql's releases.

v17.0.2 (2026-07-03)

Bug Fix 🐞

Polish 💅

Committers: 2

v17.0.1 (2026-06-16)

Bug Fix 🐞

  • #4824 fix(diagnostics): emit asyncStart after promise settlement to match native tracePromise (@​logaretm)

Internal 🏠

Committers: 2

v17.0.0 (2026-06-15)

New Feature 🚀

Bug Fix 🐞

Docs 📝

... (truncated)

Commits
  • 71606d7 chore(release): v17.0.2
  • 101de34 fix: detect default-value changes on input object fields (#4832)
  • 82da713 fix(mapSchemaConfig): fix context for schema argument mapper (#4829)
  • 9617473 chore(release): v17.0.1
  • 851bd6a chore(release): protect latest release channels (#4825)
  • c471d36 fix(diagnostics): emit asyncStart after promise settlement to match native `t...
  • 3f3895f chore(npm): remove obsolete ESM-only package build (#4823)
  • c7e494a chore(release): v17.0.0
  • d977f66 docs: post 17.rc-0 update (#4817)
  • 39f865f docs: document @experimental_disableErrorPropagation (#4820)
  • Additional commits viewable in compare view

Updates jose from 6.2.12 to 6.2.13

Release notes

Sourced from jose's releases.

v6.2.13

Refactor

  • align terminology with JOSE specifications (bafcb74)
  • preserve underlying error causes (724ba24), closes #908
Changelog

Sourced from jose's changelog.

6.2.13 (2026-10-20)

Refactor

  • align terminology with JOSE specifications (bafcb74)
  • preserve underlying error causes (724ba24), closes #908
Commits
  • 316b7f2 chore(release): 6.2.13
  • 8106395 chore: bump packages
  • 724ba24 refactor: preserve underlying error causes
  • b112a5e chore: bump packages
  • 2a3a525 chore(deps-dev): bump workerd in /tap/workerd
  • 8f540d8 chore(deps): bump the actions group with 3 updates
  • 8d6c02b chore(deps-dev): bump electron from 44.0.0 to 44.4.5 in /tap/electron
  • 55c959f ci: use gh run rerun for retries
  • 5b00c64 ci: address zizmor findings and bump shared workflows
  • 1761d7f chore: bump packages
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 27, 2026
@greptile-apps

greptile-apps Bot commented Oct 27, 2026

Copy link
Copy Markdown

PR author is in the excluded authors list.

@socket-security

socket-security Bot commented Oct 27, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgraphql@​16.14.2 ⏵ 17.0.2100 +110010091100
Updatedjose@​6.2.12 ⏵ 6.2.15100100100 +194100

View full report

@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results
Complexity 0
Duplication 0

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@dependabot
dependabot Bot force-pushed the dependabot/bun/production-dependencies-c9e5f11a4d branch 2 times, most recently from e4fc591 to 30bf7e7 Compare October 28, 2026 01:14
…y with 2 updates

Bumps the production-dependencies group with 2 updates in the / directory: [graphql](https://github.com/graphql/graphql-js) and [jose](https://github.com/panva/jose).


Updates `graphql` from 16.14.2 to 17.0.2
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v16.14.2...v17.0.2)

Updates `jose` from 6.2.12 to 6.2.13
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.12...v6.2.13)

---
updated-dependencies:
- dependency-name: graphql
  dependency-version: 17.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: jose
  dependency-version: 6.2.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bun/production-dependencies-c9e5f11a4d branch from 30bf7e7 to 04047a0 Compare November 2, 2026 10:25
@dependabot @github

dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 9, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/production-dependencies-c9e5f11a4d branch November 9, 2026 10:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants