Skip to content

chore(deps): bump @graphql-tools/wrap to 11.2.1 and delegate to 12.2.1 - #11052

Merged
eddeee888 merged 1 commit into
masterfrom
claude/funny-ramanujan-uhs5ov
Oct 9, 2026
Merged

eddeee888 merged 1 commit into
masterfrom
claude/funny-ramanujan-uhs5ov

Conversation

@eddeee888

Copy link
Copy Markdown
Collaborator

Description

@graphql-tools/delegate@12.2.0 imports OperationTypeNode from graphql as a runtime value. GraphQL 15 only has it as a type, so loading the CLI as ESM on GraphQL 15 fails. #11043 worked around this by keeping the lockfile on wrap@11.1.15 / delegate@12.0.16.

delegate@12.2.1 fixes it upstream: it now compares against the strings 'mutation' / 'subscription' (graphql-hive/gateway#2644). This PR moves the lockfile to wrap@11.2.1 / delegate@12.2.1 and drops the #11043 pin.

  • Only pnpm-lock.yaml changes. The new delegate also pulls in batch-execute@10.2.0, executor@2.0.3 and @repeaterjs/repeater@3.1.0.
  • wrap and delegate now use @graphql-tools/utils@12.0.3, which has the GHSA-7mx3-vvmw-hjmv fix.
  • No changeset: no published package changes. Users get the fix on a fresh install, because @graphql-tools/url-loader@^9's wrap@^11.1.1 range now resolves to 11.2.1. Users whose lockfile already holds delegate@12.2.0 need to update it.

Related #11044

Type of change

  • Bug fix (non-breaking change which fixes an issue)

How Has This Been Tested?

  • pnpm install --frozen-lockfile with the updated lockfile
  • pnpm types:check
  • pnpm build, then the @graphql-codegen/cli vitest suite: 177 passed, 5 failed. The 5 failures are init prompt snapshots that differ only in the menu arrow (❯ vs >) in the local terminal. They fail the same way without this change.
  • GraphQL 15 CI job: not run locally, because the workspace overrides graphql to 17.0.2

Test Environment:

  • OS: Linux
  • @graphql-codegen/cli: workspace master
  • NodeJS: 22.22.0

Further comments

Not in this PR: bumping @graphql-tools/url-loader's wrap range to ^11.2.1 in graphql-tools, so already-locked installs can't keep delegate@12.2.0. Also not in this PR: an ESM import check under GraphQL 15 in CI.

🤖 Generated with Claude Code

https://claude.ai/code/session_01F5BZTuSQZvUNWqyn9FvgUo


Generated by Claude Code

delegate@12.2.0 used the graphql 16+ runtime enum `OperationTypeNode`,
which breaks ESM loading on graphql 15. #11043 kept the lockfile on
wrap@11.1.15 / delegate@12.0.16 to avoid it. delegate@12.2.1 fixes the
enum usage (graphql-hive/gateway#2644), so move the lockfile to the
fixed versions, which also run on @graphql-tools/utils@12.

Refs #11044

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01F5BZTuSQZvUNWqyn9FvgUo
@changeset-bot

changeset-bot Bot commented Oct 9, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 4f20f18

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@eddeee888
eddeee888 merged commit b6cc957 into master Oct 9, 2026
22 checks passed
@eddeee888
eddeee888 deleted the claude/funny-ramanujan-uhs5ov branch October 9, 2026 21:24
opensource-fork-sync Bot pushed a commit to cla7aye15I4nd/opensource-dotansimha__graphql-code-generator that referenced this pull request Oct 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants