Bump the minor-updates group across 1 directory with 24 updates

[dependabot]

Bumps the minor-updates group with 24 updates in the / directory:

Package	From	To
lerna	8.1.3	8.1.9
prettier	3.3.0	3.4.2
ava	6.1.3	6.2.0
eslint-plugin-prettier	5.1.3	5.2.1
typescript	5.4.5	5.7.2
@types/jsonwebtoken	9.0.6	9.0.7
dataloader	2.2.2	2.2.3
graphql	16.8.1	16.9.0
graphql-relay	0.10.1	0.10.2
pg	8.11.5	8.13.1
@types/pg	8.11.6	8.11.10
@types/http-proxy	1.17.14	1.17.15
@types/node-fetch	2.6.11	2.6.12
@tanstack/react-query	5.40.0	5.62.3
html-webpack-plugin	5.6.0	5.6.3
eslint-plugin-react	7.34.2	7.37.2
@graphiql/react	0.22.0	0.27.0
@graphiql/toolkit	0.9.1	0.11.1
css-loader	7.1.1	7.1.2
graphiql	3.2.1	3.7.2
graphql-config	5.0.3	5.1.3
html-loader	5.0.0	5.1.0
mini-css-extract-plugin	2.9.0	2.9.2
webpack	5.94.0	5.97.1

Updates lerna from 8.1.3 to 8.1.9

Release notes

Sourced from lerna's releases.

v8.1.9

8.1.9 (2024-10-31)

Bug Fixes

• add extends property in schema (#4075) (28c8ef2)
• core: avoid reading empty .config.json, upgrade [email protected] (#4062) (960bdd9)
• update nx support to latest v20 (#4103) (cb37f19)
• version: enable changing commit message when using amend (#3954) (529e83f)

Features

• publish: support full file path for --summary-file (#4039) (cfd573a)

v8.1.8

8.1.8 (2024-08-05)

Bug Fixes

• publish: upgrade @​npmcli/arborist to 7.5.4 (#4058) (89de0eb)
• version: truncate release body based on maximum size allowed by VCS client (#4041) (3c2a3c9)

Features

• publish: enable throttling when publishing modules (#4013) (fccca12)

v8.1.7

8.1.7 (2024-07-21)

Bug Fixes

• set explicit strip-ansi dependency (#4045) (6e5cfbc)

v8.1.6

8.1.6 (2024-07-05)

Bug Fixes

• set explicit string-width dependency (#4038) (5f3603a)

v8.1.5

8.1.5 (2024-06-24)

... (truncated)

Changelog

Sourced from lerna's changelog.

8.1.9 (2024-10-31)

Bug Fixes

• add extends property in schema (#4075) (28c8ef2)
• core: avoid reading empty .config.json, upgrade [email protected] (#4062) (960bdd9)
• update nx support to latest v20 (#4103) (cb37f19)

8.1.8 (2024-08-05)

Bug Fixes

• publish: upgrade @​npmcli/arborist to 7.5.4 (#4058) (89de0eb)

8.1.7 (2024-07-21)

Bug Fixes

• set explicit strip-ansi dependency (#4045) (6e5cfbc)

8.1.6 (2024-07-05)

Bug Fixes

• set explicit string-width dependency (#4038) (5f3603a)

8.1.5 (2024-06-24)

Bug Fixes

• update npm utility dependencies and related packages (#4033) (bd1c2d8)

8.1.4 (2024-06-09)

Note: Version bump only for package lerna

Commits

• 7d1338d chore(misc): publish 8.1.9
• cb37f19 fix: update nx support to latest v20 (#4103)
• 28c8ef2 fix: add extends property in schema (#4075)
• 960bdd9 fix(core): avoid reading empty .config.json, upgrade [email protected] (#4062)
• 0343c31 chore(misc): publish 8.1.8
• 3cd9bc9 chore: update e2e-repair snapshots with new output (#4059)
• 89de0eb fix(publish): upgrade @​npmcli/arborist to 7.5.4 (#4058)
• 10fcb3a chore(misc): publish 8.1.7
• 6e5cfbc fix: set explicit strip-ansi dependency (#4045)
• 8d68f1d chore(misc): publish 8.1.6
• Additional commits viewable in compare view

Updates prettier from 3.3.0 to 3.4.2

Release notes

Sourced from prettier's releases.

3.4.2

🔗 Changelog

3.4.1

🔗 Changelog

3.4.0

diff

🔗 Release note

3.3.3

🔗 Changelog

3.3.2

🔗 Changelog

3.3.1

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.4.2

diff

Treat U+30A0 & U+30FB in Katakana Block as CJK (#16796 by @​tats-u)

Prettier doesn't treat U+30A0 & U+30FB as Japanese. U+30FB is commonly used in Japanese to represent the delimitation of first and last names of non-Japanese people or “and”. The following “C言語・C++・Go・Rust” means “C language & C++ & Go & Rust” in Japanese.

<!-- Input (--prose-wrap=never) -->
C言
語
・
C++
・
Go
・
Rust
<!-- Prettier 3.4.1 -->
C言語・ C++ ・ Go ・ Rust
<!-- Prettier 3.4.2 -->
C言語・C++・Go・Rust

U+30A0 can be used as the replacement of the - in non-Japanese names (e.g. “Saint-Saëns” (Charles Camille Saint-Saëns) can be represented as “サン゠サーンス” in Japanese), but substituted by ASCII hyphen (U+002D) or U+FF1D (full width hyphen) in many cases (e.g. “サン=サーンス” or “サン＝サーンス”).

Fix comments print on class methods with decorators (#16891 by @​fisker)

// Input
class A {
  @decorator
  /** 
   * The method description
   *
  */
  async method(foo: Foo, bar: Bar) {
    console.log(foo);
  }
}
// Prettier 3.4.1
class A {
@​decorator
async /**
</tr></table>

... (truncated)

Commits

• cca9461 Release 3.4.2
• 572bebe Fix comments on class methods with decorators (#16891)
• 359c4f0 chore(deps): update dependency @​angular/compiler to v19.0.1 (#16903)
• 6470996 chore(deps): update dependency @​glimmer/syntax to v0.93.1 (#16904)
• e13614f Correct fit() for fill() (#16899)
• 10db357 Remove check on TSImportType.isTypeOf (#16892)
• ac46a4f Treat U+30A0 & U+30FB in Katakana Block as CJK (#16796)
• d52e905 Add test for #16207 (#16890)
• a1e354d Clean changelog_unreleased
• 99875da Bump Prettier dependency to 3.4.1
• Additional commits viewable in compare view

Updates ava from 6.1.3 to 6.2.0

Release notes

Sourced from ava's releases.

v6.2.0

What's Changed

• Add filterNodeArgumentsForWorkerThreads option in avajs/ava#3336
• Add Node.js 23 to supported engines (and test matrix) in avajs/ava#3346

New Contributors

• @​thoughtsunificator made their first contribution in avajs/ava#3345

Full Changelog: avajs/ava@v6.1.3...v6.2.0

Commits

• 024de32 6.2.0
• 563fa5f Pre-release updates
• e5b355d Link to CLI options to clarify how to run tests in separate processes
• 86185b4 Add filterNodeArgumentsForWorkerThreads option
• b15df53 Update dependencies & other general maintenance
• See full diff in compare view

Updates eslint-plugin-prettier from 5.1.3 to 5.2.1

Release notes

Sourced from eslint-plugin-prettier's releases.

v5.2.1

Patch Changes

• #668 ac036cc Thanks @​OrlovAlexei! - build(deps): Bump synckit from 0.8.6 to 0.9.1

Changelog

Sourced from eslint-plugin-prettier's changelog.

5.2.1

Patch Changes

• #668 ac036cc Thanks @​OrlovAlexei! - build(deps): Bump synckit from 0.8.6 to 0.9.1

5.2.0

Minor Changes

• #652 f170011 Thanks @​Logicer16! - feat: support parsing html via @html-eslint/parser natively

Commits

• 51324d9 chore: fix CHANGELOG.md formatting issue
• 24288c7 chore: release eslint-plugin-prettier (#669)
• ac036cc build(deps): Bump synckit from 0.8.6 to 0.9.1 (#668)
• a1e6f4a build(deps): Bump braces from 3.0.2 to 3.0.3 (#665)
• de9751c build(deps): Bump pnpm/action-setup from 2 to 4 in the actions group (#661)
• 02c21a5 chore: release eslint-plugin-prettier (#653)
• f170011 feat: support parsing html via @html-eslint/parser natively (#652)
• See full diff in compare view

Updates typescript from 5.4.5 to 5.7.2

Release notes

Sourced from typescript's releases.

TypeScript 5.7

For release notes, check out the release announcement.

• fixed issues query for Typescript 5.7.0 (Beta).
• fixed issues query for Typescript 5.7.1 (RC).
• fixed issues query for Typescript 5.7.2 (Stable).

Downloads are available on:

• npm

TypeScript 5.7 RC

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

• fixed issues query for Typescript 5.7.0 (Beta).
• fixed issues query for Typescript 5.7.1 (RC).

Downloads are available on:

• npm

TypeScript 5.7 Beta

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

• fixed issues query for Typescript 5.7.0 (Beta).

Downloads are available on:

• npm

TypeScript 5.6.3

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

• fixed issues query for Typescript 5.6.0 (Beta).
• fixed issues query for Typescript 5.6.1 (RC).
• fixed issues query for Typescript 5.6.2 (Stable).
• fixed issues query for Typescript 5.6.3 (Stable).

Downloads are available on:

• npm
• NuGet package

... (truncated)

Commits

• d701d90 Bump version to 5.7.2 and LKG
• 0503a63 🤖 Pick PR #60450 (Move to file: fix detection of refe...) into release-5.7 (#...
• 3140dbb 🤖 Pick PR #60488 (Stub out copilotRelated command) into release-5.7 (#60495)
• c1216de Update LKG
• 3ee2b95 🤖 Pick PR #60415 (Fix false positive rewriteRelativeI...) into release-5.7 (#...
• 44bd3f2 Bump version to 5.7.1-rc and LKG
• 5925c81 Update LKG
• 84d58cf Merge remote-tracking branch 'origin/main' into release-5.7
• 0ec4d30 Fixing exception on unsaved file (#60362)
• 11b2930 Add compatible overloads that accept ArrayBuffer to BigInt64Array/BigUint64Ar...
• Additional commits viewable in compare view

Updates @types/jsonwebtoken from 9.0.6 to 9.0.7

Commits

• See full diff in compare view

Updates dataloader from 2.2.2 to 2.2.3

Release notes

Sourced from dataloader's releases.

v2.2.3

What's Changed

• refactor: replace var statements with const or let statements by @​shogo-nakano-desu in graphql/dataloader#337
• Fix correct path of function when click on mobile links by @​adamward459 in graphql/dataloader#351
• Update readme badge to use GitHub CI instead of unused Travis by @​andrew-demb in graphql/dataloader#352
• Synchronized linting in README.md by @​shevchenkonik in graphql/dataloader#358
• perf: call cacheKeyFn only when it is needed (if caching) by @​abendi in graphql/dataloader#342
• Update Green Donut link by @​glen-84 in graphql/dataloader#361

New Contributors

• @​shogo-nakano-desu made their first contribution in graphql/dataloader#337
• @​adamward459 made their first contribution in graphql/dataloader#351
• @​andrew-demb made their first contribution in graphql/dataloader#352
• @​shevchenkonik made their first contribution in graphql/dataloader#358
• @​abendi made their first contribution in graphql/dataloader#342
• @​glen-84 made their first contribution in graphql/dataloader#361

Full Changelog: graphql/dataloader@v2.2.2...v2.2.3

Changelog

Sourced from dataloader's changelog.

2.2.3

Patch Changes

• #342 38fedd4 Thanks @​abendi! - Ensure cacheKeyFn is not called when caching is disabled, since the key is not utilized in that case.

Commits

• 5e851ce chore: update release instructions
• 35729a6 ci: update codecov to use token (#370)
• f65532e ci: update node versions to run test on
• f8cfc4d Bump word-wrap from 1.2.3 to 1.2.4 (#345)
• 77c2cd7 Update Green Donut link (#361)
• 38fedd4 perf: call cacheKeyFn only when it is needed (if caching) (#342)
• 18da9f3 Synchronized linting in README.md (#358)
• 003c045 Update readme badge to use GitHub CI instead of unused Travis (#352)
• 55c33d4 Fix correct path of function when click on mobile links (#351)
• d336bd1 Bump minimatch from 3.0.4 to 3.1.2 (#324)
• Additional commits viewable in compare view

Updates graphql from 16.8.1 to 16.9.0

Release notes

Sourced from graphql's releases.

v16.9.0 (2024-06-21)

New Feature 🚀

• #4119 backport[v16]: Introduce "recommended" validation rules (@​benjie)
• #4122 backport[v16]: Enable passing values configuration to GraphQLEnumType as a thunk (@​benjie)
• #4124 backport[v16]: Implement OneOf Input Objects via @oneOf directive (@​benjie)

Committers: 1

• Benjie(@​benjie)

v16.8.2 (2024-06-12)

Bug Fix 🐞

• #4022 fix: remove globalThis check and align with what bundlers can accept (@​JoviDeCroock)

Internal 🏠

• #4104 Fix publish scripts (@​benjie)

Committers: 2

• Benjie(@​benjie)
• Jovi De Croock(@​JoviDeCroock)

Commits

• 556a01e 16.9.0
• 6a1614c backport[v16]: Enable passing values configuration to GraphQLEnumType as a th...
• 29144f7 backport[v16]: Implement OneOf Input Objects via @oneOf directive (#4124)
• c35130e Revert error extension symbol (#4123)
• 29c1bff feat: allow defining symbol error extensions (#3730)
• c985c27 backport[v16]: Introduce "recommended" validation rules (#4119)
• 08779a0 16.8.2
• c82609e Fix publish scripts (#4104)
• 0d12b06 fix: remove globalThis check and align with what bundlers can accept (#4022)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by benjie, a new releaser for graphql since your current version.

Updates graphql-relay from 0.10.1 to 0.10.2

Release notes

Sourced from graphql-relay's releases.

v0.10.2 (2024-07-11)

Bug Fix 🐞

• #394 fix: fix output type for mutate and get payload (@​Eckzzo)

Docs 📝

• #395 Add publish instructions (@​benjie)

Committers: 2

• Benjie(@​benjie)
• Ivan Levenhagen(@​Eckzzo)

Commits

• 6600e95 0.10.2
• f8291b0 Add publish instructions (#395)
• 1a9f5b0 fix: fix output type for mutate and get payload (#394)
• See full diff in compare view

Updates pg from 8.11.5 to 8.13.1

Changelog

Sourced from pg's changelog.

All major and minor releases are briefly explained below.

For richer information consult the commit log on github with referenced pull requests.

We do not include break-fix version release in this file.

[email protected]

• Add ability to specify query timeout on per-query basis.

[email protected]

• Add queryMode config option to force use of the extended query protocol on queries without any parameters.

[email protected]

• Emit release event when client is returned to the pool.

[email protected]

• Add support for stream factory.
• Better errors for SASL authentication.
• Use native crypto module for SASL authentication.

[email protected]

• Bump minimum required version of native bindings.
• Catch previously uncatchable errors thrown in pool.query.
• Prevent the pool from blocking the event loop if all clients are idle (and allowExitOnIdle is enabled).
• Support lock_timeout in client config.
• Fix errors thrown in callbacks from interfering with cleanup.

[email protected]

• Add connection lifetime limit config option.

[email protected]

• Add optional config to pool to allow process to exit if pool is idle.

[email protected]

• Convert to es6 class
• Add support for promises to cursor methods

[email protected]

• Better SASL error messages & more validation on bad configuration.
• Export DatabaseError.
• Add ParameterDescription support to protocol parsing.

... (truncated)

Commits

• 95d7e62 Publish
• 1af6321 fix: use existing Result types for new Result (#3310)
• 92cb640 Publish
• f73b22f Handle bad message ordering - make it catchable. Fixes 3174 (#3289)
• fb12280 Bump bluebird from 3.4.1 to 3.7.2 (#3303)
• 50c06f9 Remove test globals (#3264)
• f7e484e refactor: tighten up cloudflare detection (#3170)
• 3e4d545 Fix lint (#3262)
• 9baa56e feat: allow specifying a timeout on a per query base (#3074)
• 4f457e1 Remove unused file: list-db-types (#3249)
• Additional commits viewable in compare view

Updates @types/pg from 8.11.6 to 8.11.10

Commits

• See full diff in compare view

Updates @types/http-proxy from 1.17.14 to 1.17.15

Commits

• See full diff in compare view

Updates @types/node-fetch from 2.6.11 to 2.6.12

Commits

• See full diff in compare view

Updates @tanstack/react-query from 5.40.0 to 5.62.3

Release notes

Sourced from @​tanstack/react-query's releases.

v5.62.3

Version 5.62.3 - 12/6/24, 3:33 PM

Changes

Fix

• allow passing enabled:true when skipToken is present (#8407) (32d7189) by Dominik Dorfmeister

Docs

• angular-query: add auto-refetching example (#8371) (d6621a8) by @​MatanShushan
• useQuery to object syntax (#8387) (8ccc36c) by Max

Packages

• @​tanstack/query-core@​5.62.3
• @​tanstack/react-query@​5.62.3
• @​tanstack/query-broadcast-client-experimental@​5.62.3
• @​tanstack/query-persist-client-core@​5.62.3
• @​tanstack/query-sync-storage-persister@​5.62.3
• @​tanstack/react-query-devtools@​5.62.3
• @​tanstack/react-query-persist-client@​5.62.3
• @​tanstack/react-query-next-experimental@​5.62.3
• @​tanstack/solid-query@​5.62.3
• @​tanstack/solid-query-devtools@​5.62.3
• @​tanstack/solid-query-persist-client@​5.62.3
• @​tanstack/svelte-query@​5.62.3
• @​tanstack/svelte-query-devtools@​5.62.3
• @​tanstack/svelte-query-persist-client@​5.62.3
• @​tanstack/vue-query@​5.62.3
• @​tanstack/vue-query-devtools@​5.62.3
• @​tanstack/angular-query-experimental@​5.62.3
• @​tanstack/query-async-storage-persister@​5.62.3
• @​tanstack/angular-query-devtools-experimental@​5.62.3

v5.62.2

Version 5.62.2 - 12/3/24, 7:29 AM

Changes

Fix

• types: Fix type errors when using fully-typed inputs like QueryFilters, and test all QueryClient methods to detect similar issues (#8375) (175757a) by Nick Lucas

Packages

• @​tanstack/query-core@​5.62.2
• @​tanstack/query-broadcast-client-experimental@​5.62.2
• @​tanstack/query-persist-client-core@​5.62.2

... (truncated)

Commits

• d3073c8 release: v5.62.3
• 32d7189 fix: allow passing enabled:true when skipToken is present (#8407)
• 73ec525 release: v5.62.2
• ceb4094 release: v5.62.1
• f816480 release: v5.62.0
• dc4ae50 release: v5.61.5
• efdd204 release: v5.61.4
• ef0b7b2 chore: typescript 5.7 (#8327)
• c69f302 chore(deps): update react 19/next 15 (#8342)
• 5cd9611 chore(deps): move some deps from root to sub-packages (#8341)
• Additional commits viewable in compare view

Updates html-webpack-plugin from 5.6.0 to 5.6.3

Changelog

Sourced from html-webpack-plugin's changelog.

5.6.3 (2024-10-23)

Bug Fixes

• hooks file for old plugins (#1867) (0585a36)

5.6.2 (2024-10-17)

Bug Fixes

• allow bundle empty html (#1865) (f5b9140)

5.6.1 (2024-10-17)

Bug Fixes

• avoid importing all of lodash (#1864) (2caf5db)
• don't use initialize hooks to allow dynamic plugin injection (ae85878)
• handle childCompilation.errors being an iterator rather than array (#1863) (4c0c894)

Commits

• 7299866 chore(release): 5.6.3
• 0585a36 fix: hooks file for old plugins (#1867)
• 11a248e chore(release): 5.6.2
• f5b9140 fix: allow bundle empty html (#1865)
• 832e0f9 chore(release): 5.6.1
• 2caf5db fix: avoid importing all of lodash (#1864)
• 4c0c894 fix: handle childCompilation.errors being an iterator rather than array (#1...
• ae85878 fix: don't use initialize hooks to allow dynamic plugin injection
• 41f4a7b chore: update tooling
• 7d5b559 docs: update (#1841)
• Additional commits viewable in compare view

Updates eslint-plugin-react from 7.34.2 to 7.37.2

Release notes

Sourced from eslint-plugin-react's releases.

v7.37.2

Fixed

• [destructuring-assignment]: fix false negative when using typeof props.a (#3835[] @​golopot)

Changed

• [Refactor] [destructuring-assignment]: use getParentStatelessComponent (#3835[] @​golopot)

#3835: jsx-eslint/eslint-plugin-react#3835 [destructuring-assignment]: docs/rules/destructuring-assignment.md

v7.37.1

Fixed

• [meta] do not npmignore d.ts files (#3836[] @​ljharb)

Changed

• [readme] Fix shared settings link (#3834[] @​MgenGlder)

#3834: jsx-eslint/eslint-plugin-react#3834 #3836: jsx-eslint/eslint-plugin-react#3836

v7.37.0

Added

• add type generation (#3830[] @​voxpelli)
• [no-unescaped-entities]: add suggestions (#3831[] @​StyleShit)
• [forbid-component-props]: add allowedForPatterns/disallowedForPatterns options (#3805[] @​Efimenko)
• [no-unstable-nested-components]: add propNamePattern to support custom render prop naming conventions (#3826[] @​danreeves)

Changed

• [readme] flat config example for react 17+ (#3824[] @​GabenGar)

#3805: jsx-eslint/eslint-plugin-react#3805 #3824: jsx-eslint/eslint-plugin-react#3824 #3826: jsx-eslint/eslint-plugin-react#3826 #3830: jsx-eslint/eslint-plugin-react#3830 #3831: jsx-eslint/eslint-plugin-react#3831 [forbid-component-props]: docs/rules/forbid-component-props.md [no-unescaped-entities]: docs/rules/no-unescaped-entities.md [no-unstable-nested-components]: docs/rules/no-unstable-nested-components.md

v7.36.1

Fixed

• no-is-mounted: fix logic in method name check (#3821[] @​Mathias-S)
• jsx-no-literals: Avoid crashing on valueless boolean props (#3823[] @​reosarevok)

#3823: jsx-eslint/eslint-plugin-react#3823 #3821: jsx-eslint/eslint-plugin-react#3821

... (truncated)

Changelog

Sourced from eslint-plugin-react's changelog.

7.37.2 - 2024.10.22

Fixed

• [destructuring-assignment]: fix false negative when using typeof props.a (#3835[] @​golopot)

Changed

• [Refactor] [destructuring-assignment]: use getParentStatelessComponent (#3835[] @​golopot)

#3835: jsx-eslint/eslint-plugin-react#3835

7.37.1 - 2024.10.01

Fixed

• [meta] do not npmignore d.ts files (#3836[] @​ljharb)

Changed

• [readme] Fix shared settings link (#3834[] @​MgenGlder)

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ❌ 2 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.
• ⚠️ 20 packages with OpenSSF Scorecard issues.

View full job summary

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dependabot]

Superseded by #722.