Bump the minor-updates group across 1 directory with 25 updates

[dependabot]

Bumps the minor-updates group with 25 updates in the / directory:

Package	From	To
lerna	8.1.3	8.1.9
prettier	3.3.0	3.3.3
ava	6.1.3	6.2.0
eslint-plugin-prettier	5.1.3	5.2.1
typescript	5.4.5	5.7.2
@types/jsonwebtoken	9.0.6	9.0.7
graphql	16.8.1	16.9.0
graphql-relay	0.10.1	0.10.2
pg	8.11.5	8.13.1
@types/pg	8.11.6	8.11.10
@types/http-proxy	1.17.14	1.17.15
@types/node-fetch	2.6.11	2.6.12
@tanstack/react-query	5.40.0	5.61.3
@types/react	18.3.3	18.3.12
@types/react-dom	18.3.0	18.3.1
html-webpack-plugin	5.6.0	5.6.3
eslint-plugin-react	7.34.2	7.37.2
@graphiql/react	0.22.0	0.27.0
@graphiql/toolkit	0.9.1	0.11.1
css-loader	7.1.1	7.1.2
graphiql	3.2.1	3.7.2
graphql-config	5.0.3	5.1.3
html-loader	5.0.0	5.1.0
mini-css-extract-plugin	2.9.0	2.9.2
webpack	5.94.0	5.96.1

Updates lerna from 8.1.3 to 8.1.9

Release notes

Sourced from lerna's releases.

v8.1.9

8.1.9 (2024-10-31)

Bug Fixes

• add extends property in schema (#4075) (28c8ef2)
• core: avoid reading empty .config.json, upgrade [email protected] (#4062) (960bdd9)
• update nx support to latest v20 (#4103) (cb37f19)
• version: enable changing commit message when using amend (#3954) (529e83f)

Features

• publish: support full file path for --summary-file (#4039) (cfd573a)

v8.1.8

8.1.8 (2024-08-05)

Bug Fixes

• publish: upgrade @​npmcli/arborist to 7.5.4 (#4058) (89de0eb)
• version: truncate release body based on maximum size allowed by VCS client (#4041) (3c2a3c9)

Features

• publish: enable throttling when publishing modules (#4013) (fccca12)

v8.1.7

8.1.7 (2024-07-21)

Bug Fixes

• set explicit strip-ansi dependency (#4045) (6e5cfbc)

v8.1.6

8.1.6 (2024-07-05)

Bug Fixes

• set explicit string-width dependency (#4038) (5f3603a)

v8.1.5

8.1.5 (2024-06-24)

... (truncated)

Changelog

Sourced from lerna's changelog.

8.1.9 (2024-10-31)

Bug Fixes

• add extends property in schema (#4075) (28c8ef2)
• core: avoid reading empty .config.json, upgrade [email protected] (#4062) (960bdd9)
• update nx support to latest v20 (#4103) (cb37f19)

8.1.8 (2024-08-05)

Bug Fixes

• publish: upgrade @​npmcli/arborist to 7.5.4 (#4058) (89de0eb)

8.1.7 (2024-07-21)

Bug Fixes

• set explicit strip-ansi dependency (#4045) (6e5cfbc)

8.1.6 (2024-07-05)

Bug Fixes

• set explicit string-width dependency (#4038) (5f3603a)

8.1.5 (2024-06-24)

Bug Fixes

• update npm utility dependencies and related packages (#4033) (bd1c2d8)

8.1.4 (2024-06-09)

Note: Version bump only for package lerna

Commits

• 7d1338d chore(misc): publish 8.1.9
• cb37f19 fix: update nx support to latest v20 (#4103)
• 28c8ef2 fix: add extends property in schema (#4075)
• 960bdd9 fix(core): avoid reading empty .config.json, upgrade [email protected] (#4062)
• 0343c31 chore(misc): publish 8.1.8
• 3cd9bc9 chore: update e2e-repair snapshots with new output (#4059)
• 89de0eb fix(publish): upgrade @​npmcli/arborist to 7.5.4 (#4058)
• 10fcb3a chore(misc): publish 8.1.7
• 6e5cfbc fix: set explicit strip-ansi dependency (#4045)
• 8d68f1d chore(misc): publish 8.1.6
• Additional commits viewable in compare view

Updates prettier from 3.3.0 to 3.3.3

Release notes

Sourced from prettier's releases.

3.3.3

🔗 Changelog

3.3.2

🔗 Changelog

3.3.1

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.3.3

diff

Add parentheses for nullish coalescing in ternary (#16391 by @​cdignam-segment)

This change adds clarity to operator precedence.

// Input
foo ? bar ?? foo : baz;
foo ?? bar ? a : b;
a ? b : foo ?? bar;
// Prettier 3.3.2
foo ? bar ?? foo : baz;
foo ?? bar ? a : b;
a ? b : foo ?? bar;
// Prettier 3.3.3
foo ? (bar ?? foo) : baz;
(foo ?? bar) ? a : b;
a ? b : (foo ?? bar);

Add parentheses for decorator expressions (#16458 by @​y-schneider)

Prevent parentheses around member expressions or tagged template literals from being removed to follow the stricter parsing rules of TypeScript 5.5.

// Input
@(foo`tagged template`)
class X {}
// Prettier 3.3.2
@​footagged template
class X {}
// Prettier 3.3.3
@(footagged template)
class X {}

Support @let declaration syntax (#16474 by @​sosukesuzuki)

Adds support for Angular v18 @let declaration syntax.

Please see the following code example. The @let declaration allows you to define local variables within the template:

... (truncated)

Commits

• 5282938 Release 3.3.3
• 9102b73 Add parentheses for decorator expressions (#16458)
• 6bbd461 chore(deps): update eslint related dependencies (#16478)
• 04b560f chore(deps): update dependency browserslist to v4.23.2 (#16475)
• 614f070 chore(deps): update typescript-eslint to v8.0.0-alpha.41 (#16477)
• d59a15d chore(deps): update dependency npm-run-all2 to v6.2.2 (#16476)
• 5ca2fc9 Support Angular @let declaration syntax (#16474)
• bfcfdcc chore(deps): update babel to v7.24.8 (#16472)
• 977c161 chore(deps): update dependency acorn to v8.12.1 (#16464)
• 550606e chore(deps): update babel to v7.24.8 (#16470)
• Additional commits viewable in compare view

Updates ava from 6.1.3 to 6.2.0

Release notes

Sourced from ava's releases.

v6.2.0

What's Changed

• Add filterNodeArgumentsForWorkerThreads option in avajs/ava#3336
• Add Node.js 23 to supported engines (and test matrix) in avajs/ava#3346

New Contributors

• @​thoughtsunificator made their first contribution in avajs/ava#3345

Full Changelog: avajs/ava@v6.1.3...v6.2.0

Commits

• 024de32 6.2.0
• 563fa5f Pre-release updates
• e5b355d Link to CLI options to clarify how to run tests in separate processes
• 86185b4 Add filterNodeArgumentsForWorkerThreads option
• b15df53 Update dependencies & other general maintenance
• See full diff in compare view

Updates eslint-plugin-prettier from 5.1.3 to 5.2.1

Release notes

Sourced from eslint-plugin-prettier's releases.

v5.2.1

Patch Changes

• #668 ac036cc Thanks @​OrlovAlexei! - build(deps): Bump synckit from 0.8.6 to 0.9.1

Changelog

Sourced from eslint-plugin-prettier's changelog.

5.2.1

Patch Changes

• #668 ac036cc Thanks @​OrlovAlexei! - build(deps): Bump synckit from 0.8.6 to 0.9.1

5.2.0

Minor Changes

• #652 f170011 Thanks @​Logicer16! - feat: support parsing html via @html-eslint/parser natively

Commits

• 51324d9 chore: fix CHANGELOG.md formatting issue
• 24288c7 chore: release eslint-plugin-prettier (#669)
• ac036cc build(deps): Bump synckit from 0.8.6 to 0.9.1 (#668)
• a1e6f4a build(deps): Bump braces from 3.0.2 to 3.0.3 (#665)
• de9751c build(deps): Bump pnpm/action-setup from 2 to 4 in the actions group (#661)
• 02c21a5 chore: release eslint-plugin-prettier (#653)
• f170011 feat: support parsing html via @html-eslint/parser natively (#652)
• See full diff in compare view

Updates typescript from 5.4.5 to 5.7.2

Release notes

Sourced from typescript's releases.

TypeScript 5.7

For release notes, check out the release announcement.

• fixed issues query for Typescript 5.7.0 (Beta).
• fixed issues query for Typescript 5.7.1 (RC).
• fixed issues query for Typescript 5.7.2 (Stable).

Downloads are available on:

• npm

TypeScript 5.7 RC

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

• fixed issues query for Typescript 5.7.0 (Beta).
• fixed issues query for Typescript 5.7.1 (RC).

Downloads are available on:

• npm

TypeScript 5.7 Beta

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

• fixed issues query for Typescript 5.7.0 (Beta).

Downloads are available on:

• npm

TypeScript 5.6.3

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

• fixed issues query for Typescript 5.6.0 (Beta).
• fixed issues query for Typescript 5.6.1 (RC).
• fixed issues query for Typescript 5.6.2 (Stable).
• fixed issues query for Typescript 5.6.3 (Stable).

Downloads are available on:

• npm
• NuGet package

... (truncated)

Commits

• d701d90 Bump version to 5.7.2 and LKG
• 0503a63 🤖 Pick PR #60450 (Move to file: fix detection of refe...) into release-5.7 (#...
• 3140dbb 🤖 Pick PR #60488 (Stub out copilotRelated command) into release-5.7 (#60495)
• c1216de Update LKG
• 3ee2b95 🤖 Pick PR #60415 (Fix false positive rewriteRelativeI...) into release-5.7 (#...
• 44bd3f2 Bump version to 5.7.1-rc and LKG
• 5925c81 Update LKG
• 84d58cf Merge remote-tracking branch 'origin/main' into release-5.7
• 0ec4d30 Fixing exception on unsaved file (#60362)
• 11b2930 Add compatible overloads that accept ArrayBuffer to BigInt64Array/BigUint64Ar...
• Additional commits viewable in compare view

Updates @types/jsonwebtoken from 9.0.6 to 9.0.7

Commits

• See full diff in compare view

Updates graphql from 16.8.1 to 16.9.0

Release notes

Sourced from graphql's releases.

v16.9.0 (2024-06-21)

New Feature 🚀

• #4119 backport[v16]: Introduce "recommended" validation rules (@​benjie)
• #4122 backport[v16]: Enable passing values configuration to GraphQLEnumType as a thunk (@​benjie)
• #4124 backport[v16]: Implement OneOf Input Objects via @oneOf directive (@​benjie)

Committers: 1

• Benjie(@​benjie)

v16.8.2 (2024-06-12)

Bug Fix 🐞

• #4022 fix: remove globalThis check and align with what bundlers can accept (@​JoviDeCroock)

Internal 🏠

• #4104 Fix publish scripts (@​benjie)

Committers: 2

• Benjie(@​benjie)
• Jovi De Croock(@​JoviDeCroock)

Commits

• 556a01e 16.9.0
• 6a1614c backport[v16]: Enable passing values configuration to GraphQLEnumType as a th...
• 29144f7 backport[v16]: Implement OneOf Input Objects via @oneOf directive (#4124)
• c35130e Revert error extension symbol (#4123)
• 29c1bff feat: allow defining symbol error extensions (#3730)
• c985c27 backport[v16]: Introduce "recommended" validation rules (#4119)
• 08779a0 16.8.2
• c82609e Fix publish scripts (#4104)
• 0d12b06 fix: remove globalThis check and align with what bundlers can accept (#4022)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by benjie, a new releaser for graphql since your current version.

Updates graphql-relay from 0.10.1 to 0.10.2

Release notes

Sourced from graphql-relay's releases.

v0.10.2 (2024-07-11)

Bug Fix 🐞

• #394 fix: fix output type for mutate and get payload (@​Eckzzo)

Docs 📝

• #395 Add publish instructions (@​benjie)

Committers: 2

• Benjie(@​benjie)
• Ivan Levenhagen(@​Eckzzo)

Commits

• 6600e95 0.10.2
• f8291b0 Add publish instructions (#395)
• 1a9f5b0 fix: fix output type for mutate and get payload (#394)
• See full diff in compare view

Updates pg from 8.11.5 to 8.13.1

Changelog

Sourced from pg's changelog.

All major and minor releases are briefly explained below.

For richer information consult the commit log on github with referenced pull requests.

We do not include break-fix version release in this file.

[email protected]

• Add ability to specify query timeout on per-query basis.

[email protected]

• Add queryMode config option to force use of the extended query protocol on queries without any parameters.

[email protected]

• Emit release event when client is returned to the pool.

[email protected]

• Add support for stream factory.
• Better errors for SASL authentication.
• Use native crypto module for SASL authentication.

[email protected]

• Bump minimum required version of native bindings.
• Catch previously uncatchable errors thrown in pool.query.
• Prevent the pool from blocking the event loop if all clients are idle (and allowExitOnIdle is enabled).
• Support lock_timeout in client config.
• Fix errors thrown in callbacks from interfering with cleanup.

[email protected]

• Add connection lifetime limit config option.

[email protected]

• Add optional config to pool to allow process to exit if pool is idle.

[email protected]

• Convert to es6 class
• Add support for promises to cursor methods

[email protected]

• Better SASL error messages & more validation on bad configuration.
• Export DatabaseError.
• Add ParameterDescription support to protocol parsing.

... (truncated)

Commits

• 95d7e62 Publish
• 1af6321 fix: use existing Result types for new Result (#3310)
• 92cb640 Publish
• f73b22f Handle bad message ordering - make it catchable. Fixes 3174 (#3289)
• fb12280 Bump bluebird from 3.4.1 to 3.7.2 (#3303)
• 50c06f9 Remove test globals (#3264)
• f7e484e refactor: tighten up cloudflare detection (#3170)
• 3e4d545 Fix lint (#3262)
• 9baa56e feat: allow specifying a timeout on a per query base (#3074)
• 4f457e1 Remove unused file: list-db-types (#3249)
• Additional commits viewable in compare view

Updates @types/pg from 8.11.6 to 8.11.10

Commits

• See full diff in compare view

Updates @types/http-proxy from 1.17.14 to 1.17.15

Commits

• See full diff in compare view

Updates @types/node-fetch from 2.6.11 to 2.6.12

Commits

• See full diff in compare view

Updates @tanstack/react-query from 5.40.0 to 5.61.3

Release notes

Sourced from @​tanstack/react-query's releases.

v5.61.3

Version 5.61.3 - 11/24/24, 3:24 AM

Changes

Fix

• eslint-plugin: fix no-unstable-deps with ts-eslint >=8.10.0 (#8340) (bdafc84) by Lachlan Collins

Chore

• deps: more manual package updates (#8339) (9972595) by Lachlan Collins
• deps: update expo, next, astro, nx (#8337) (99b5354) by Lachlan Collins
• deps: update dependency astro to v4.16.1 [security] (#8181) (bbd3821) by renovate[bot]
• deps: update dependency next to v14.2.10 [security] (#8128) (22b89c9) by renovate[bot]

Test

• integrations: switch react-scripts to webpack (#8329) (b846c53) by Lachlan Collins

Docs

• angular-query: fix angular examples (#8335) (2588a08) by Arnoud

Packages

• @​tanstack/eslint-plugin-query@​5.61.3
• @​tanstack/query-devtools@​5.61.3
• @​tanstack/react-query@​5.61.3
• @​tanstack/react-query-devtools@​5.61.3
• @​tanstack/react-query-persist-client@​5.61.3
• @​tanstack/react-query-next-experimental@​5.61.3
• @​tanstack/svelte-query@​5.61.3
• @​tanstack/svelte-query-devtools@​5.61.3
• @​tanstack/svelte-query-persist-client@​5.61.3
• @​tanstack/vue-query@​5.61.3
• @​tanstack/angular-query-devtools-experimental@​5.61.3
• @​tanstack/angular-query-experimental@​5.61.3
• @​tanstack/solid-query-devtools@​5.61.3
• @​tanstack/vue-query-devtools@​5.61.3

v5.61.2

Version 5.61.2 - 11/23/24, 10:43 PM

Changes

Fix

• angular-query: subscribe to observer outside the Angular zone (#8331) (228382f) by Arnoud
• eslint-plugin-query: improve external reference relevance (#8334) (80a49ff) by Eliya Cohen

... (truncated)

Commits

• 68dee7e release: v5.61.3
• 9972595 chore(deps): more manual package updates (#8339)
• 8a25b4e release: v5.61.0
• 3fa4b7c fix(types): make sure queryOptions are passable to UseQueryOptions (#8317)
• fa77f32 release: v5.60.6
• 3fc2fce release: v5.60.5
• 4a2e838 fix(useQueries): make sure we don't lose property tracking (#8295)
• 8786495 release: v5.60.4
• 6c2a055 refactor(*): unify & use noop (#8294)
• 7615661 release: v5.60.2
• Additional commits viewable in compare view

Updates @types/react from 18.3.3 to 18.3.12

Commits

• See full diff in compare view

Updates @types/react-dom from 18.3.0 to 18.3.1

Commits

• See full diff in compare view

Updates html-webpack-plugin from 5.6.0 to 5.6.3

Changelog

Sourced from html-webpack-plugin's changelog.

5.6.3 (2024-10-23)

Bug Fixes

• hooks file for old plugins (#1867) (0585a36)

5.6.2 (2024-10-17)

Bug Fixes

• allow bundle empty html (#1865) (f5b9140)

5.6.1 (2024-10-17)

Bug Fixes

• avoid importing all of lodash (#1864) (2caf5db)
• don't use initialize hooks to allow dynamic plugin injection (ae85878)
• handle childCompilation.errors being an iterator rather than array (#1863) (4c0c894)

Commits

• 7299866 chore(release): 5.6.3
• 0585a36 fix: hooks file for old plugins (#1867)
• 11a248e chore(release): 5.6.2
• f5b9140 fix: allow bundle empty html (#1865)
• 832e0f9 chore(release): 5.6.1
• 2caf5db fix: avoid importing all of lodash (#1864)
• 4c0c894 fix: handle childCompilation.errors being an iterator rather than array (#1...
• ae85878 fix: don't use initialize hooks to allow dynamic plugin injection
• 41f4a7b chore: update tooling
• 7d5b559 docs: update (#1841)
• Additional commits viewable in compare view

Updates eslint-plugin-react from 7.34.2 to 7.37.2

Release notes

Sourced from eslint-plugin-react's releases.

v7.37.2

Fixed

• [destructuring-assignment]: fix false negative when using typeof props.a (#3835[] @​golopot)

Changed

• [Refactor] [destructuring-assignment]: use getParentStatelessComponent (#3835[] @​golopot)

#3835: jsx-eslint/eslint-plugin-react#3835 [destructuring-assignment]: docs/rules/destructuring-assignment.md

v7.37.1

Fixed

• [meta] do not npmignore d.ts files (#3836[] @​ljharb)

Changed

• [readme] Fix shared settings link (#3834[] @​MgenGlder)

#3834: jsx-eslint/eslint-plugin-react#3834 #3836: jsx-eslint/eslint-plugin-react#3836

v7.37.0

Added

• add type generation (#3830[] @​voxpelli)
• [no-unescaped-entities]: add suggestions (#3831[] @​StyleShit)
• [forbid-component-props]: add allowedForPatterns/disallowedForPatterns options (#3805[] @​Efimenko)
• [no-unstable-nested-components]: add propNamePattern to support custom render prop naming conventions (#3826[] @​danreeves)

Changed

• [readme] flat config example for react 17+ (#3824[] @​GabenGar)

#3805: jsx-eslint/eslint-plugin-react#3805 #3824: jsx-eslint/eslint-plugin-react#3824 #3826: jsx-eslint/eslint-plugin-react#3826 #3830: jsx-eslint/eslint-plugin-react#3830 #3831: jsx-eslint/eslint-plugin-react#3831 [forbid-component-props]: docs/rules/forbid-component-props.md [no-unescaped-entities]: docs/rules/no-unescaped-entities.md [no-unstable-nested-components]: docs/rules/no-unstable-nested-components.md

v7.36.1

Fixed

• no-is-mounted: fix logic in method name check (#3821[] @​Mathias-S)
• jsx-no-literals: Avoid crashing on valueless boolean props (#3823[] @​reosarevok)

#3823: jsx-eslint/eslint-plugin-react#3823 #3821: jsx-eslint/eslint-plugin-react#3821

... (truncated)

Changelog

Sourced from eslint-plugin-react's changelog.

7.37.2 - 2024.10.22

Fixed

• [destructuring-assignment]: fix false negative when using typeof props.a (#3835[] @​golopot)

Changed

• [Refactor] [destructuring-assignment]: use getParentStatelessComponent (#3835[] @​golopot)

#3835: jsx-eslint/eslint-plugin-react#3835

7.37.1 - 2024.10.01

Fixed

• [meta] do not npmignore d.ts files (#3836[] @​ljharb)

Changed

• [readme] Fix shared settings link (#3834[] @​MgenGlder)

#3836: jsx-eslint/eslint-plugin-react#3836 #3834: jsx-eslint/eslint-plugin-react#3834

7.37.0 - 2024.09.26

Added

• add type generation (#3830[] @​voxpelli)
• [no-unescaped-entities]: add suggestions (#3831[] @​StyleShit)
• [forbid-component-props]: add allowedForPatterns/disallowedForPatterns options (#3805[] @​Efimenko)
• [no-unstable-nested-components]: add propNamePattern to support custom render prop naming conventions (#3826[] @​danreeves)

Changed

• [readme] flat config example for react 17+ (#3824[] @​GabenGar)

#3831: jsx-eslint/eslint-plugin-react#3831 #3830: jsx-eslint/eslint-plugin-react#3830 #3826: jsx-eslint/eslint-plugin-react#3826 #3824: jsx-eslint/eslint-plugin-react#3824 #3805: jsx-eslint/eslint-plugin-react#3805

7.36.1 - 2024.09.12

Fixed

• [no-is-mounted]: fix logic in method name check (#3821[] @​Mathias-S)
• [jsx-no-literals]: Avoid crashing on valueless boolean props (#3823[] @​reosarevok)

#3823: jsx-eslint/eslint-plugin-react#3823 #3821: jsx-eslint/eslint-plugin-react#3821

... (truncated)

Commits

• 256cf74 Update CHANGELOG and bump version
• 33db656 [Deps] update es-iterator-helpers
• 5696f99 [Dev Deps] update @babel/core, @babel/eslint-parser, `@babel/plugin-synta...
• 5c23573 [Dev Deps] update @babel/core, @​babel/eslint-parser, @​babel/plugin-syntax...
• c47fa56 [types] [Fix] ensure the index types are generated
• 63aceff [Fix] destructuring-assignment: fix false negative when using typeof props.a
• 96d46d5 [Refactor] destructuring-assignment: use getParentStatelessComponent
• ae6fb8d Update CHANGELOG and bump version
• 63e0b49 [meta] do not npmignore d.ts files
Description has been truncated

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ❌ 2 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.
• ⚠️ 5 packages with OpenSSF Scorecard issues.

View full job summary

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dependabot]

Superseded by #719.