Skip to content

build(deps): bump the actions-deps group across 1 directory with 9 updates#8132

Merged
ardatan merged 1 commit intomasterfrom
dependabot/npm_and_yarn/actions-deps-a2762d9b34
Apr 15, 2026
Merged

build(deps): bump the actions-deps group across 1 directory with 9 updates#8132
ardatan merged 1 commit intomasterfrom
dependabot/npm_and_yarn/actions-deps-a2762d9b34

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 15, 2026

Bumps the actions-deps group with 8 updates in the / directory:

Package From To
@graphql-tools/delegate 12.0.13 12.0.14
prettier 3.8.2 3.8.3
svelte 5.55.3 5.55.4
@graphql-tools/stitch 10.1.17 10.1.18
puppeteer 24.40.0 24.41.0
webpack 5.106.1 5.106.2
postcss 8.5.9 8.5.10
wrangler 4.82.2 4.83.0

Updates @graphql-tools/delegate from 12.0.13 to 12.0.14

Changelog

Sourced from @​graphql-tools/delegate's changelog.

12.0.14

Patch Changes

  • #2243 dff525f Thanks @​qsona! - Fix redundant type merging calls when subschemas have no explicit name.

    The fallback name-based matching in resolveExternalValue (introduced in #1557) incorrectly matched unrelated subschemas when neither had an explicit name set, because undefined === undefined evaluated to true. This caused type merging to trigger even when fetching a type directly from its source subschema, resulting in a redundant second call.

Commits

Updates prettier from 3.8.2 to 3.8.3

Release notes

Sourced from prettier's releases.

3.8.3

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.3

diff

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
);
// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

Commits

Updates svelte from 5.55.3 to 5.55.4

Release notes

Sourced from svelte's releases.

svelte@5.55.4

Patch Changes

  • fix: never mark a child effect root as inert (#18111)

  • fix: reset context after waiting on blockers of @const expressions (#18100)

  • fix: keep flushing new eager effects (#18102)

Changelog

Sourced from svelte's changelog.

5.55.4

Patch Changes

  • fix: never mark a child effect root as inert (#18111)

  • fix: reset context after waiting on blockers of @const expressions (#18100)

  • fix: keep flushing new eager effects (#18102)

Commits

Updates @graphql-tools/stitch from 10.1.17 to 10.1.18

Changelog

Sourced from @​graphql-tools/stitch's changelog.

10.1.18

Patch Changes

  • Updated dependencies [dff525f]:
    • @​graphql-tools/delegate@​12.0.14
    • @​graphql-tools/batch-delegate@​10.0.20
    • @​graphql-tools/wrap@​11.1.14
Commits

Updates @graphql-tools/wrap from 11.1.13 to 11.1.14

Changelog

Sourced from @​graphql-tools/wrap's changelog.

11.1.14

Patch Changes

  • Updated dependencies [dff525f]:
    • @​graphql-tools/delegate@​12.0.14
Commits

Updates puppeteer from 24.40.0 to 24.41.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v24.41.0

24.41.0 (2026-04-15)

🎉 Features

🛠️ Fixes

📄 Documentation

puppeteer: v24.41.0

24.41.0 (2026-04-15)

🎉 Features

Dependencies

  • The following workspace dependencies were updated

... (truncated)

Changelog

Sourced from puppeteer's changelog.

24.41.0 (2026-04-15)

🎉 Features

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.40.0 to 24.41.0

🛠️ Fixes

📄 Documentation

Commits

Updates webpack from 5.106.1 to 5.106.2

Release notes

Sourced from webpack's releases.

v5.106.2

Patch Changes

  • CSS @​import now inherits the parent module's exportType, so a file configured as "text" correctly creates a style tag when @​imported by a "style" parent. (by @​xiaoxiaojx in #20838)

  • Make asset modules available in JS context when referenced from both CSS and a lazily compiled JS chunk. (by @​xiaoxiaojx in #20801)

  • Include missing generator options in hash to ensure persistent cache invalidation when configuration changes (CssGenerator exportsOnly, JsonGenerator JSONParse, WebAssemblyGenerator mangleImports). (by @​xiaoxiaojx in #20821)

  • Fix || default value handling in ProgressPlugin and ManifestPlugin that incorrectly overrode user-provided falsy values (e.g. modules: false, entries: false, entrypoints: false). (by @​xiaoxiaojx in #20823)

  • Migrate from mime-types to mime-db. (by @​alexander-akait in #20812)

  • Handle @charset at-rules in CSS modules. (by @​alexander-akait in #20831)

  • Marked all experimental options in types. (by @​alexander-akait in #20814)

Changelog

Sourced from webpack's changelog.

5.106.2

Patch Changes

  • CSS @​import now inherits the parent module's exportType, so a file configured as "text" correctly creates a style tag when @​imported by a "style" parent. (by @​xiaoxiaojx in #20838)

  • Make asset modules available in JS context when referenced from both CSS and a lazily compiled JS chunk. (by @​xiaoxiaojx in #20801)

  • Include missing generator options in hash to ensure persistent cache invalidation when configuration changes (CssGenerator exportsOnly, JsonGenerator JSONParse, WebAssemblyGenerator mangleImports). (by @​xiaoxiaojx in #20821)

  • Fix || default value handling in ProgressPlugin and ManifestPlugin that incorrectly overrode user-provided falsy values (e.g. modules: false, entries: false, entrypoints: false). (by @​xiaoxiaojx in #20823)

  • Migrate from mime-types to mime-db. (by @​alexander-akait in #20812)

  • Handle @charset at-rules in CSS modules. (by @​alexander-akait in #20831)

  • Marked all experimental options in types. (by @​alexander-akait in #20814)

Commits

Updates postcss from 8.5.9 to 8.5.10

Release notes

Sourced from postcss's releases.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).
Changelog

Sourced from postcss's changelog.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).
Commits

Updates wrangler from 4.82.2 to 4.83.0

Release notes

Sourced from wrangler's releases.

wrangler@4.83.0

Minor Changes

  • #13391 60565dd Thanks @​mikenomitch! - Mark wrangler containers commands as stable

    This changes the status of the Containers CLI from open beta to stable. Wrangler no longer shows [open beta] labels or beta warning text for wrangler containers commands, so the help output matches the feature's current availability.

  • #13311 6cbcdeb Thanks @​ryanking13! - JS files imported by the Python Workers runtime SDK are now handled as ESM modules.

    This is not a user-facing change, but Python Workers users should update their wrangler version to make sure to get Python workers SDK working properly.

Patch Changes

  • #13450 6f63eaa Thanks @​petebacondarwin! - Fix POST/PUT requests with non-2xx responses throwing "fetch failed"

    Previously, sending a POST or PUT request that received a non-2xx response (e.g. 401, 400, 403) would throw a TypeError: fetch failed error. This was caused by an undici bug where isTraversableNavigable() incorrectly returned true, causing the 401 credential-retry block to execute in Node.js and fail on stream-backed request bodies. This has been fixed upstream in undici v7.24.8, so we've bumped our dependency and removed the previous pnpm patch workaround.

  • #13447 aef9825 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260410.1 1.20260413.1

  • #13475 eaaa728 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260413.1 1.20260415.1

  • #13386 5e5bbc1 Thanks @​mksglu! - Make startup network requests non-blocking on slow connections

    Wrangler makes network requests during startup (npm update check, request.cf data fetch) that previously blocked the CLI indefinitely on slow or degraded connections (airplane wifi, trains), causing 10+ second delays.

    • Update check: The banner now races the update check against a 100ms grace period. On a cache hit (most runs) the result resolves in <1ms via the I/O poll phase; on a cache miss the banner prints immediately without blocking. A 3s safety-net timeout caps the update-check library's auth-retry path.
    • request.cf fetch: The fetch to workers.cloudflare.com/cf.json now uses AbortSignal.timeout(3000), falling back to cached/default data on timeout.

  • #13469 07a918c Thanks @​1000hz! - wrangler preview no longer warns on inheritable binding types being missing from previews config.

  • #13463 90aee27 Thanks @​roerohan! - Remove unnecessary flagship:read OAuth scope

    The flagship:read scope is not needed since flagship:write already implies read access. This reduces the OAuth permissions requested during login to only what is required.

  • Updated dependencies [854d66c, 6f63eaa, aef9825, eaaa728, 58292f6, 5e5bbc1, d5ff5a4, 89c7829]:

    • miniflare@4.20260415.0
Commits
  • 4af4d54 Version Packages (#13461)
  • 6cbcdeb Vendor JS files in python workers SDK as esm modules (#13311)
  • eaaa728 Bump the workerd-and-workers-types group with 2 updates (#13475)
  • 07a918c fix(wrangler): wrangler preview no longer warns about missing inheritable b...
  • 60565dd Remove containers "beta" (#13391)
  • aef9825 Bump the workerd-and-workers-types group with 2 updates (#13447)
  • 051db1f Make all properties in previews optional (#13468)
  • 5efac31 [wrangler] Add e2e test to validate default OAuth scopes (#13465)
  • 7d81a83 Revert "[wrangler] fix: prevent remote binding sessions expiring during long ...
  • 90aee27 [wrangler] remove unnecessary flagship:read OAuth scope (#13463)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the actions-deps group across 1 directory with 9 up…
4cae779 
…dates

Bumps the actions-deps group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@graphql-tools/delegate](https://github.com/graphql-hive/gateway/tree/HEAD/packages/delegate) | `12.0.13` | `12.0.14` |
| [prettier](https://github.com/prettier/prettier) | `3.8.2` | `3.8.3` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.55.3` | `5.55.4` |
| [@graphql-tools/stitch](https://github.com/graphql-hive/gateway/tree/HEAD/packages/stitch) | `10.1.17` | `10.1.18` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `24.40.0` | `24.41.0` |
| [webpack](https://github.com/webpack/webpack) | `5.106.1` | `5.106.2` |
| [postcss](https://github.com/postcss/postcss) | `8.5.9` | `8.5.10` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.82.2` | `4.83.0` |



Updates `@graphql-tools/delegate` from 12.0.13 to 12.0.14
- [Release notes](https://github.com/graphql-hive/gateway/releases)
- [Changelog](https://github.com/graphql-hive/gateway/blob/main/packages/delegate/CHANGELOG.md)
- [Commits](https://github.com/graphql-hive/gateway/commits/@graphql-tools/delegate@12.0.14/packages/delegate)

Updates `prettier` from 3.8.2 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.2...3.8.3)

Updates `svelte` from 5.55.3 to 5.55.4
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.55.4/packages/svelte)

Updates `@graphql-tools/stitch` from 10.1.17 to 10.1.18
- [Release notes](https://github.com/graphql-hive/gateway/releases)
- [Changelog](https://github.com/graphql-hive/gateway/blob/main/packages/stitch/CHANGELOG.md)
- [Commits](https://github.com/graphql-hive/gateway/commits/@graphql-tools/stitch@10.1.18/packages/stitch)

Updates `@graphql-tools/wrap` from 11.1.13 to 11.1.14
- [Release notes](https://github.com/graphql-hive/gateway/releases)
- [Changelog](https://github.com/graphql-hive/gateway/blob/main/packages/wrap/CHANGELOG.md)
- [Commits](https://github.com/graphql-hive/gateway/commits/@graphql-tools/wrap@11.1.14/packages/wrap)

Updates `puppeteer` from 24.40.0 to 24.41.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v24.40.0...puppeteer-v24.41.0)

Updates `webpack` from 5.106.1 to 5.106.2
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.106.1...v5.106.2)

Updates `postcss` from 8.5.9 to 8.5.10
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.9...8.5.10)

Updates `wrangler` from 4.82.2 to 4.83.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.83.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@graphql-tools/delegate"
  dependency-version: 12.0.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: svelte
  dependency-version: 5.55.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: "@graphql-tools/stitch"
  dependency-version: 10.1.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: "@graphql-tools/wrap"
  dependency-version: 11.1.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: puppeteer
  dependency-version: 24.41.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: webpack
  dependency-version: 5.106.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: postcss
  dependency-version: 8.5.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: wrangler
  dependency-version: 4.83.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 15, 2026
@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Apr 15, 2026

⚠️ No Changeset found

Latest commit: 4cae779

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@ardatan ardatan merged commit c097bc9 into master Apr 15, 2026
33 of 35 checks passed
@ardatan ardatan deleted the dependabot/npm_and_yarn/actions-deps-a2762d9b34 branch April 15, 2026 23:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ardatan