Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/apollographql/client-router-e2e-tests).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/apollographql/client-router-e2e-tests).

- ⚠️ WARN: Using npm packages for Renovate presets is now deprecated. Please migrate to repository-based presets instead.

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update dependency graphql to v16.14.2
- [ ] chore(deps): update ghcr.io/apollographql/router docker tag to v1.61.13
- [ ] chore(deps): update actions/checkout action to v7
- [ ] chore(deps): update cypress-io/github-action action to v7
- [ ] chore(deps): update dependency @vitejs/plugin-react to v6
- [ ] chore(deps): update dependency express to v5
- [ ] chore(deps): update dependency express-rate-limit to v8
- [ ] chore(deps): update dependency graphql to v17
- [ ] chore(deps): update dependency graphql-ws to v6
- [ ] chore(deps): update dependency react to v19
- [ ] chore(deps): update dependency react-dom to v19
- [ ] chore(deps): update dependency react-router-dom to v7
- [ ] chore(deps): update ghcr.io/apollographql/router docker tag to v2
- [ ] chore(deps): update node docker tag to v26
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update dependency ws to v8.21.0 [security]](../pull/445)
- [ ] [chore(deps): update dependency @apollo/server to v5 [security]](../pull/444)
- [ ] [chore(deps): update dependency @faker-js/faker to v10 [security]](../pull/447)
- [ ] [chore(deps): update dependency uuid to v11 [security]](../pull/446)
- [ ] [chore(deps): update dependency vite to v6 [security]](../pull/434)
- [ ] [chore(deps): update all dependencies - patch updates](../pull/426) (`@types/react`, `@types/react-dom`, `cors`, `graphql-tag`, `graphql-ws`, `nodemon`)
- [ ] [chore(deps): update all devdependencies](../pull/425) (`@testing-library/cypress`, `@types/node`, `concurrently`, `cypress`, `eslint-plugin-cypress`, `start-server-and-test`, `typescript`)
- [ ] [chore(deps): update dependency @apollo/client to v3.14.1](../pull/430)
- [ ] [chore(deps): update dependency @apollo/subgraph to v2.15.0](../pull/442)
- [ ] [chore(deps): update dependency @vitejs/plugin-react to v4.7.0](../pull/449)
- [ ] [chore(deps): update dependency express to v4.22.3](../pull/450)
- [ ] [chore(deps): update dependency express-rate-limit to v7.5.1](../pull/433)
- [ ] [chore(deps): update dependency react-router-dom to v6.30.6](../pull/427)
- [ ] [chore(deps): update all devdependencies (major)](../pull/431) (`@types/node`, `@types/react`, `@types/react-dom`, `concurrently`, `cypress`, `eslint-plugin-cypress`, `start-server-and-test`, `typescript`, `web-vitals`)
- [ ] [chore(deps): update dependency @apollo/client to v4](../pull/437)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

docker-compose (1)

scripts/docker-compose.router.yml (1)

- `ghcr.io/apollographql/router v1.56.0` → [Updates: `v1.61.13`, `v2.17.0`]

dockerfile (2)

scripts/subgraphs/products/Dockerfile (1)

- `node 22-bullseye` → [Updates: `26-bullseye`]

scripts/subgraphs/users/Dockerfile (1)

- `node 22-bullseye` → [Updates: `26-bullseye`]

github-actions (1)

.github/workflows/router-e2e-defer-tests.yml (2)

- `actions/checkout v4` → [Updates: `v7`]
- `cypress-io/github-action v4` → [Updates: `v7.4.3`]

npm (3)

demo/package.json (18)

- `@apollo/client 3.11.8` → [Updates: `3.14.1`, `4.3.0`]
- `@vitejs/plugin-react 4.3.3` → [Updates: `4.7.0`, `6.1.1`]
- `graphql 16.9.0` → [Updates: `16.14.2`, `17.0.2`]
- `react 18.3.1` → [Updates: `19.3.0`]
- `react-dom 18.3.1` → [Updates: `19.3.0`]
- `react-router-dom 6.27.0` → [Updates: `6.30.6`, `7.18.3`]
- `vite 5.4.10` → [Updates: `6.4.3`]
- `@testing-library/cypress 10.0.2` → [Updates: `10.1.3`]
- `@types/node 22.7.6` → [Updates: `22.20.2`, `26.5.1`]
- `@types/react 18.3.12` → [Updates: `18.3.31`, `19.3.0`]
- `@types/react-dom 18.3.1` → [Updates: `18.3.7`, `19.3.0`]
- `concurrently 9.0.1` → [Updates: `9.2.4`, `10.0.5`]
- `cypress 13.15.1` → [Updates: `13.17.0`, `16.0.0`]
- `eslint-plugin-cypress 4.0.0` → [Updates: `4.3.0`, `7.0.2`]
- `nodemon 3.1.7` → [Updates: `3.1.14`]
- `start-server-and-test 2.0.8` → [Updates: `2.1.5`, `3.0.12`]
- `typescript 5.6.3` → [Updates: `5.9.3`, `7.0.2`]
- `web-vitals 4.2.4` → [Updates: `6.2.1`]

scripts/subgraphs/products/package.json (11)

- `@apollo/server 4.11.2` → [Updates: `5.5.0`]
- `@apollo/subgraph 2.9.3` → [Updates: `2.15.0`]
- `cors 2.8.5` → [Updates: `2.8.6`]
- `express 4.21.1` → [Updates: `4.22.3`, `5.2.1`]
- `express-rate-limit 7.4.1` → [Updates: `7.5.1`, `8.7.0`]
- `graphql 16.9.0` → [Updates: `16.14.2`, `17.0.2`]
- `graphql-tag 2.12.6` → [Updates: `2.12.7`]
- `graphql-ws 5.16.0` → [Updates: `5.16.2`, `6.2.1`]
- `supergraph-demo-opentelemetry 0.2.4`
- `uuid 10.0.0` → [Updates: `11.1.1`]
- `ws 8.18.0` → [Updates: `8.21.0`]

scripts/subgraphs/users/package.json (12)

- `@apollo/server 4.11.2` → [Updates: `5.5.0`]
- `@apollo/subgraph 2.9.3` → [Updates: `2.15.0`]
- `@faker-js/faker 8.4.1` → [Updates: `10.5.0`]
- `cors 2.8.5` → [Updates: `2.8.6`]
- `express 4.21.1` → [Updates: `4.22.3`, `5.2.1`]
- `express-rate-limit 7.4.1` → [Updates: `7.5.1`, `8.7.0`]
- `graphql 16.9.0` → [Updates: `16.14.2`, `17.0.2`]
- `graphql-tag 2.12.6` → [Updates: `2.12.7`]
- `graphql-ws 5.16.0` → [Updates: `5.16.2`, `6.2.1`]
- `supergraph-demo-opentelemetry 0.2.4`
- `uuid 10.0.0` → [Updates: `11.1.1`]
- `ws 8.18.0` → [Updates: `8.21.0`]

renovate-config (1)

renovate.json

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Review renovate.json and the listed dependency manifests, Dockerfiles, and .github/workflows/router-e2e-defer-tests.yml to understand the automated update scope. Most updates already have linked pull requests, so there is no discrete newcomer task; completion would require resolving the dashboard's migration or dependency updates and validating the repository.

Written by the indexing model from the issue text.