chore(deps): consolidate Dependabot updates (#1263)

* chore(deps): consolidate Dependabot updates

* fix(deps): bump typescript to 5.9 to repair the build

`.npmrc` sets `package-lock=false`, so `@types/node` floats and has drifted
to a version whose .d.ts files typescript@4.9.5 cannot parse:

    @types/node/ffi.d.ts(260,9): error TS1109: Expression expected.

These are syntax errors, so the existing `skipLibCheck: true` does not
suppress them, and `packages/graphql-hooks/tsconfig.json` sets no `types`
array so tsc auto-loads the drifted @types/node into the declaration emit.

Because `build:types` hangs off `postinstall` -> `build:packages`, this
failed `npm install` itself and took down ci, acceptance-tests and the
Netlify deploy preview together, on master as well as on every open PR.

Bumps typescript to ^5.9.0 at the root and in the three example workspaces
still on 4.x. `examples/persisted-queries/server` matters beyond tidiness:
its `ts-node-dev` type-checks at boot and it is the server the
acceptance-tests job starts.

Two pre-existing problems were masked behind the install failure and
surface once it is fixed:

- react-scripts@5.0.1 declares `peerOptional typescript@"^3.2.1 || ^4"`,
  which ERESOLVEs against TS 5. CRA is unmaintained, so relax it with an
  `overrides` entry.
- examples/typescript pinned `@types/react@^18` while using react@^19 and
  `@types/react-dom@^19`. The duplicate @types/react copies caused
  `TS2786: 'ClientContext.Provider' cannot be used as a JSX component`.
  Aligned to ^19, matching every other workspace.

Pins stay within the 5.x line: TypeScript 6 drops `moduleResolution: node`,
which `config/tsconfig.base.json` still uses.

Refs #1265

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Luis Villamarin <luis.villamarin@nearform.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: lv10

.github/workflows/acceptance-tests.yml

@@ -17,14 +17,14 @@ jobs:
       - name: Install root
         run: npm install
       - name: Cypress create-react-app
-        uses: cypress-io/github-action@v6
+        uses: cypress-io/github-action@v7
         with:
           browser: chrome
           install: false
           spec: cypress/e2e/create-react-app.cy.ts
           start: npm start --prefix ./examples/create-react-app
       - name: Cypress persisted-queries Mercurius
-        uses: cypress-io/github-action@v6
+        uses: cypress-io/github-action@v7
         with:
           browser: chrome
           install: false
@@ -36,7 +36,7 @@ jobs:
           PORT: 3002
           CYPRESS_CLIENT_PORT: 3002
       - name: Cypress persisted-queries Apollo Server
-        uses: cypress-io/github-action@v6
+        uses: cypress-io/github-action@v7
         with:
           install: false
           spec: cypress/e2e/persisted-queries.cy.ts

.github/workflows/ci.yml

@@ -13,7 +13,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       - name: Cache node modules
-        uses: actions/cache@v3
+        uses: actions/cache@v5
         with:
           path: ~/.npm
           key: npm-${{ hashFiles('**/package.json') }}

examples/fastify-ssr/package.json

@@ -35,7 +35,7 @@
     "prop-types": "^15.7.2",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
-    "react-router-dom": "^6.0.2"
+    "react-router-dom": "^7.9.6"
   },
   "devDependencies": {
     "@babel/cli": "^7.4.4",

examples/persisted-queries/client/package.json

@@ -12,7 +12,7 @@
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "react-scripts": "^5.0.0",
-    "typescript": "^4.1.2"
+    "typescript": "^5.9.0"
   },
   "scripts": {
     "start": "react-scripts start",

examples/persisted-queries/server/package.json

@@ -21,6 +21,6 @@
     "@tsconfig/node16": "^16.1.0",
     "@types/node": "^22.10.5",
     "ts-node-dev": "^2.0.0",
-    "typescript": "^4.7.4"
+    "typescript": "^5.9.0"
   }
 }

examples/subscription/package.json

@@ -24,7 +24,7 @@
     "graphql-hooks-memcache": "^3.2.0",
     "lowdb": "^7.0.1",
     "mercurius": "^14.0.0",
-    "mqemitter-redis": "^5.0.0",
+    "mqemitter-redis": "^7.2.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "subscriptions-transport-ws": "^0.11.0"

examples/typescript/package.json

@@ -5,7 +5,7 @@
   "dependencies": {
     "@types/jest": "^29.0.3",
     "@types/node": "^22.10.5",
-    "@types/react": "^18.0.0",
+    "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.2",
     "graphql-hooks": "^8.2.0",
     "graphql-hooks-memcache": "^3.2.0",
@@ -38,6 +38,6 @@
     "@graphql-codegen/client-preset": "^4.1.0",
     "graphql": "^16.8.1",
     "graphql-codegen-typescript-client": "0.18.2",
-    "typescript": "^4.9.5"
+    "typescript": "^5.9.0"
   }
 }

package.json

@@ -24,7 +24,7 @@
     "@babel/preset-env": "^7.14.1",
     "@babel/preset-react": "^7.13.13",
     "@babel/preset-typescript": "^7.18.6",
-    "@commitlint/cli": "^19.3.0",
+    "@commitlint/cli": "^20.2.0",
     "@commitlint/config-conventional": "^19.2.2",
     "@rollup/plugin-babel": "^6.0.4",
     "@rollup/plugin-commonjs": "^26.0.1",
@@ -54,7 +54,12 @@
     "rollup-plugin-replace": "^2.2.0",
     "rollup-plugin-size-snapshot": "^0.12.0",
     "ts-jest": "^29.0.1",
-    "typescript": "^4.9.5"
+    "typescript": "^5.9.0"
+  },
+  "overrides": {
+    "react-scripts": {
+      "typescript": "^5.9.0"
+    }
   },
   "lint-staged": {
     "**/*.js": [

packages/babel-plugin-extract-gql/package.json

@@ -31,7 +31,7 @@
   "dependencies": {
     "@fastify/cors": "^9.0.1",
     "fastify": "^4.2.0",
-    "pkg-dir": "^8.0.0"
+    "pkg-dir": "^9.0.0"
   },
   "repository": {
     "type": "git",