Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/apollographql/apollo-server).

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/apollographql/apollo-server).

- ⚠️ WARN: Package lookup failures

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | `@types/content-type` |  |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update changesets/action action to v2
- [ ] chore(deps): update dependency @changesets/changelog-github to v1
- [ ] chore(deps): update dependency @changesets/cli to v3
- [ ] chore(deps): update dependency @types/content-type to v2
- [ ] chore(deps): update dependency content-type to v3
- [ ] chore(deps): update dependency cspell to v10
- [ ] chore(deps): update dependency github:codecov/codecov-cli to v11
- [ ] chore(deps): update dependency graphql to v17
- [ ] chore(deps): update dependency jest-junit to v17
- [ ] chore(deps): update dependency make-fetch-happen to v16
- [ ] chore(deps): update dependency npm to v12
- [ ] chore(deps): update dependency typescript to v7
- [ ] chore(deps): update dessant/lock-threads action to v6
- [ ] chore(deps): update jdx/mise-action action to v4
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Could not determine new digest for update (github-tags package changesets/action)`.
>
> Files affected: `.github/workflows/release-pr.yml`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency @apollo/gateway to v2.11.6 [security]](../pull/8193)
- [ ] [chore(deps): update all non-major dependencies](../pull/8140) (`@apollo/client`, `@apollo/subgraph`, `@changesets/changelog-github`, `@changesets/cli`, `@graphql-tools/mock`, `@graphql-tools/schema`, `@rollup/plugin-commonjs`, `@rollup/plugin-node-resolve`, `@types/express`, `@types/express-serve-static-core`, `@types/negotiator`, `@types/node`, `@types/superagent`, `cors`, `cspell`, `eslint`, `graphql`, `graphql-tag`, `iconv-lite`, `jdx/mise`, `jest`, `jest-config`, `jest-mock`, `make-fetch-happen`, `nock`, `node`, `npm`, `prettier`, `rollup`, `supertest`, `ts-jest`, `typescript-eslint`)
- [ ] [chore(deps): update dependency graphql-http to v1.23.0](../pull/8228)
- [ ] [chore(deps): update dependency typescript to v5.9.3](../pull/8127)
- [ ] [chore(deps): update actions/checkout action to v7](../pull/8221)
- [ ] [chore(deps): update dependency @apollo/client to v4](../pull/8138)
- [ ] [chore(deps): update dependency @rollup/plugin-commonjs to v29](../pull/8156)
- [ ] [chore(deps): update dependency @types/supertest to v7](../pull/8209)
- [ ] [chore(deps): update dependency eslint to v10](../pull/8184)
- [ ] [chore(deps): update dependency whatwg-mimetype to v5](../pull/8175) (`whatwg-mimetype`, `@types/whatwg-mimetype`)
- [ ] [chore(deps): update graphqlcodegenerator monorepo (major)](../pull/8144) (`@graphql-codegen/cli`, `@graphql-codegen/typescript-operations`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

github-actions (2)

.github/workflows/lock.yml (1)

- `dessant/lock-threads v4@be8aa5be94131386884a6da4189effda9b14aa21` → [Updates: `v6`]

.github/workflows/release-pr.yml (3)

- `actions/checkout v4@11d5960a326750d5838078e36cf38b85af677262` → [Updates: `v7`]
- `jdx/mise-action v2@c37c93293d6b742fc901e1406b8f764f6fb19dac` → [Updates: `v4`]
- `changesets/action v1@63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b` → [Updates: `v2.1.2`]

mise (1)

.config/mise/config.toml (3)

- `node 24.13.0` → [Updates: `24.21.0`]
- `github:codecov/codecov-cli 10.4.0` → [Updates: `v11.3.1`]
- `npm 11.15` → [Updates: `11.19`, `12.0`]

npm (22)

package.json (50)

- `@apollo/client 3.14.0` → [Updates: `3.14.1`, `4.3.0`]
- `@apollo/gateway 2.11.2` → [Updates: `2.11.6`]
- `@apollo/subgraph 2.11.2` → [Updates: `2.15.0`]
- `@apollo/utils.createhash 3.0.1`
- `@changesets/changelog-github 0.5.1` → [Updates: `0.7.0`, `1.0.1`]
- `@changesets/cli 2.29.6` → [Updates: `2.31.1`, `3.0.2`]
- `@graphql-codegen/cli 5.0.7` → [Updates: `7.4.1`]
- `@graphql-codegen/typescript-operations 4.6.1` → [Updates: `6.1.6`]
- `@graphql-tools/mock 9.0.25` → [Updates: `9.1.14`]
- `@graphql-tools/schema 10.0.25` → [Updates: `10.1.1`]
- `@rollup/plugin-commonjs 28.0.6` → [Updates: `28.0.9`, `29.0.3`]
- `@types/async-retry 1.4.9`
- `@types/body-parser 1.19.6`
- `@types/content-type 1.1.9` → [Updates: `2.0.0`]
- `@types/cors 2.8.19`
- `@types/express 5.0.3` → [Updates: `5.0.6`]
- `@types/express-serve-static-core 5.0.7` → [Updates: `5.1.3`]
- `@types/finalhandler 1.2.4`
- `@types/lodash.sumby 4.6.9`
- `@types/negotiator 0.6.4` → [Updates: `0.6.5`]
- `@types/node 20.19.11` → [Updates: `20.19.43`]
- `@types/superagent 8.1.9` → [Updates: `8.1.11`]
- `@types/supertest 6.0.3` → [Updates: `7.2.1`]
- `@types/whatwg-mimetype 3.0.2` → [Updates: `5.0.0`]
- `awaiting 3.0.0`
- `cors 2.8.5` → [Updates: `2.8.6`]
- `cspell 9.2.0` → [Updates: `9.8.0`, `10.3.1`]
- `eslint 9.34.0` → [Updates: `9.39.5`, `10.10.0`]
- `eslint-plugin-import 2.32.0`
- `graphql 16.11.0` → [Updates: `16.14.2`, `17.0.2`]
- `graphql-subscriptions 3.0.0`
- `graphql-tag 2.12.6` → [Updates: `2.12.7`]
- `iconv-lite 0.7.2` → [Updates: `0.7.3`]
- `jest 30.0.5` → [Updates: `30.5.1`]
- `jest-config 30.0.5` → [Updates: `30.5.1`]
- `jest-junit 16.0.0` → [Updates: `17.0.0`]
- `jest-mock 30.0.5` → [Updates: `30.5.1`]
- `jest-mock-random 1.1.1`
- `jest-serializer-html 7.1.0`
- `lodash.sumby 4.6.0`
- `nock 14.0.10` → [Updates: `14.0.17`]
- `prettier 3.6.2` → [Updates: `3.9.6`]
- `requisition 1.7.0`
- `rollup 4.59.0` → [Updates: `4.63.2`]
- `supertest 7.1.4` → [Updates: `7.2.2`]
- `ts-jest 29.4.1` → [Updates: `29.4.12`]
- `typescript 5.8.3` → [Updates: `5.9.3`, `7.0.2`]
- `typescript-eslint 8.40.0` → [Updates: `8.70.0`]
- `node >=20`
- `npm >=8.19.2`

packages/cache-control-types/package.json (1)

- `graphql 14.x || 15.x || 16.x` → [Updates: `14.x || 15.x || 16.x || 17.x`]

packages/gateway-interface/package.json (4)

- `@apollo/utils.fetcher ^3.0.0`
- `@apollo/utils.logger ^3.0.0`
- `@apollo/utils.keyvaluecache ^4.0.0`
- `graphql 14.x || 15.x || 16.x` → [Updates: `14.x || 15.x || 16.x || 17.x`]

packages/integration-testsuite/package.json (13)

- `@apollo/client ^3.6.9` → [Updates: `^4.0.0`]
- `@apollo/utils.createhash ^3.0.0`
- `@apollo/utils.keyvaluecache ^4.0.0`
- `express ^5.0.0`
- `graphql-http 1.22.4` → [Updates: `1.23.0`]
- `graphql-tag ^2.12.6`
- `loglevel ^1.8.0`
- `superagent ^10.0.0`
- `supertest ^7.0.0`
- `@jest/globals 29.x || 30.x`
- `graphql ^16.11.0` → [Updates: `^16.11.0 || ^17.0.0`]
- `jest 29.x || 30.x`
- `node >=20`

packages/plugin-response-cache/package.json (4)

- `@apollo/utils.createhash ^3.0.0`
- `@apollo/utils.keyvaluecache ^4.0.0`
- `graphql ^16.11.0` → [Updates: `^16.11.0 || ^17.0.0`]
- `node >=20`

packages/server/errors/package.json

packages/server/package.json (19)

- `@apollo/utils.createhash ^3.0.0`
- `@apollo/utils.fetcher ^3.0.0`
- `@apollo/utils.isnodelike ^3.0.0`
- `@apollo/utils.keyvaluecache ^4.0.0`
- `@apollo/utils.logger ^3.0.0`
- `@apollo/utils.usagereporting ^2.1.0`
- `@apollo/utils.withrequired ^3.0.0`
- `@graphql-tools/schema ^10.0.0`
- `async-retry ^1.2.1`
- `body-parser ^2.2.2`
- `content-type ^1.0.5` → [Updates: `^3.0.0`]
- `cors ^2.8.5`
- `finalhandler ^2.1.0`
- `loglevel ^1.6.8`
- `lru-cache ^11.1.0`
- `negotiator ^1.0.0`
- `whatwg-mimetype ^4.0.0` → [Updates: `^5.0.0`]
- `graphql ^16.11.0` → [Updates: `^16.11.0 || ^17.0.0`]
- `node >=20`

packages/server/plugin/cacheControl/package.json

packages/server/plugin/disabled/package.json

packages/server/plugin/disableSuggestions/package.json

packages/server/plugin/drainHttpServer/package.json

packages/server/plugin/inlineTrace/package.json

packages/server/plugin/landingPage/default/package.json

packages/server/plugin/schemaReporting/package.json

packages/server/plugin/subscriptionCallback/package.json

packages/server/plugin/usageReporting/package.json

packages/server/standalone/package.json

packages/usage-reporting-protobuf/generated/cjs/package.json

packages/usage-reporting-protobuf/generated/esm/package.json

packages/usage-reporting-protobuf/package.json (1)

- `@apollo/protobufjs 1.2.8`

smoke-test/nodenext/package.json

smoke-test/package.json (7)

- `graphql 16.11.0` → [Updates: `16.14.2`, `17.0.2`]
- `make-fetch-happen 15.0.1` → [Updates: `15.0.6`, `16.0.1`]
- `@rollup/plugin-commonjs 28.0.6` → [Updates: `28.0.9`, `29.0.3`]
- `@rollup/plugin-json 6.1.0`
- `@rollup/plugin-node-resolve 16.0.1` → [Updates: `16.0.3`]
- `@types/make-fetch-happen 10.0.4`
- `rollup 4.59.0` → [Updates: `4.63.2`]

regex (1)

.circleci/config.yml (1)

- `jdx/mise v2026.5.5` → [Updates: `v2026.9.7`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

This is Renovate's dependency dashboard rather than a scoped change. Start with package.json, .config/mise/config.toml, and .github/workflows/release-pr.yml, then review the linked update PRs and the package lookup warning. Done would require deciding which listed updates are compatible and resolving or explicitly closing the remaining dashboard items.

Written by the indexing model from the issue text.