fix(deps): update dependency graphql to v17 by renovate[bot] · Pull Request #11902 · opencollective/opencollective-api

renovate · 2026-06-19T13:00:33Z

This PR contains the following updates:

Package	Change	Age	Confidence
graphql	`16.14.1` → `17.0.1`

Release Notes

graphql/graphql-js (graphql)

`v17.0.1`

Compare Source

v17.0.1 (2026-06-16)

Bug Fix 🐞

#4824 fix(diagnostics): emit asyncStart after promise settlement to match native tracePromise (@logaretm)

Internal 🏠

2 PRs were merged

#4823 chore(npm): remove obsolete ESM-only package build (@yaacovCR)
#4825 chore(release): protect latest release channels (@yaacovCR)

Committers: 2

Abdelrahman Awad(@logaretm)
Yaacov Rydzinski (@yaacovCR)

`v17.0.0`

Compare Source

v17.0.0 (2026-06-15)

New Feature 🚀

#4819 feat: graduate directives on directives (@yaacovCR)

Bug Fix 🐞

#4799 fix: raise request error on invalid fragment variables (@yaacovCR)
#4800 fix: apply directives when SDL contains type definitions and extensions with directives (@yaacovCR)
#4564 OneOf Inhabitability (@jbellenger)
#4814 fix(KnownDirectivesRule): locations for input field arguments in extensions (@yaacovCR)
#4726 feat(validation): reject directive definition cycles (@yaacovCR)
#4815 Revert "feat(validation): reject directive definition cycles (#4726)" (@yaacovCR)

Docs 📝

11 PRs were merged

#4790 docs: minor diagnostics doc comment improvements (@yaacovCR)
#4791 fix: docs: polish diagnostics comments further (@yaacovCR)
#4793 docs: further improve general execution and tracing docs (@yaacovCR)
#4802 docs: correct extension field comments - v17 (@yaacovCR)
#4805 docs: publish fixed extensions comments (@yaacovCR)
#4807 docs: add prettier for jsdoc examples (@yaacovCR)
#4435 Subscriptions docs suggestions (@Urigo)
#4811 docs: fix a few indentations inside string literals (@yaacovCR)
#4813 internal: docs update (@yaacovCR)
#4820 docs: document @experimental_disableErrorPropagation (@yaacovCR)
#4817 docs: post 17.rc-0 update (@yaacovCR)

Polish 💅

2 PRs were merged

#4809 internal: use prettier for non-generated website files (@yaacovCR)
#4812 polish: fix stream test cases (@yaacovCR)

Internal 🏠

6 PRs were merged

#4795 chore: move website publishing from 16.x.x to 17.x.x (@yaacovCR)
#4796 internal: fix broken npm/deno deployments (@yaacovCR)
#4797 ci: update GitHub Actions versions (@yaacovCR)
#4806 internal: update frontmatter (@yaacovCR)
#4808 intenral: fix ci badge (@yaacovCR)
#4810 internal: add prettier:examples to lint-staged (@yaacovCR)

Committers: 3

James Bellenger(@jbellenger)
Uri Goldshtein(@Urigo)
Yaacov Rydzinski (@yaacovCR)

`v16.14.2`

Compare Source

v16.14.2 (2026-06-09)

Docs 📝

7 PRs were merged

#4782 docs: update API (@yaacovCR)
#4783 docs: website review (@yaacovCR)
#4788 docs: add Node.js tracing channels guide (@logaretm)
#4789 docs: overhaul index and update/add additional migration guides (@yaacovCR)
#4792 docs: remove extra asterisks from single line jsdoc comments (@yaacovCR)
#4794 docs: refresh website with broader execution/tracing update (@yaacovCR)
#4801 docs: correct extension field comments - v16 (@yaacovCR)

Polish 💅

#4787 docs: update documentation for v17 release candidate (@yaacovCR)

Committers: 2

Abdelrahman Awad(@logaretm)
Yaacov Rydzinski (@yaacovCR)

Configuration

📅 Schedule: (UTC)

Branch creation
- "every weekday after 2:00 am before 6:00 am,every weekend"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Betree · 2026-06-22T07:02:18Z

@cursor complete this update

cursor · 2026-06-22T07:02:26Z

Completed the GraphQL v17 upgrade on renovate/graphql-17.x. Here’s what was fixed:

Changes

Schema validation (Host.location) — GraphQL v17 enforces that if an interface field isn’t deprecated, implementation fields can’t be either. Removed location from the Host fields that were getting a deprecation reason, since Account.location is not deprecated. Updated schemaV2.graphql accordingly.
Input field defaults — GraphQL v17 requires the new GraphQLDefaultInput shape. Updated timezone defaults in:
- EventCreateInput.ts
- AccountUpdateInput.js
From default: 'UTC' → default: { value: 'UTC' }
Dependency deduplication — Added an npm override for graphql@17.0.1 so @escape.tech/graphql-armor no longer bundles graphql v16, which was causing ValidationRule type mismatches with Apollo Server in routes.ts.

Verification

npm run type:check passes
Changes committed and pushed to renovate/graphql-17.x (commit 45e9f670c)

CI should now pass the typescript and lint checks that were failing. The test / test-graphql jobs may still need a database environment to run fully.

GraphQL v17 enforces that interface fields cannot be non-deprecated when implementation fields are deprecated. Remove location from Host fields that receive a deprecation reason since Account.location is not deprecated. Update input field defaults to use the new GraphQLDefaultInput shape ({ value: ... }) required by graphql v17. Add an npm override to dedupe nested graphql@16 packages from @escape.tech/graphql-armor, fixing ValidationRule type mismatches with Apollo Server.

renovate · 2026-06-22T07:18:19Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

GraphQL v17 requires interface fields to be deprecated when implementation fields are. Add deprecation reasons to tiers, stats, and plan on the CollectiveInterface type to match CollectiveFields.

GraphQL v17 reports missing required variables as invalid values rather than using the previous "was not provided" message format.

GraphQL v17 uses "has invalid value" instead of "got invalid value" when reporting variable coercion failures.

GraphQL v17 requires argument defaults to use the default: { value } shape for VariablesInAllowedPositionRule to recognize them. This fixes E2E failures where nullable $limit/$offset variables were rejected against Int! collection arguments (e.g. DashboardVendors query).

Betree · 2026-06-23T09:45:40Z

Matching frontend PR: opencollective/opencollective-frontend#12271

renovate Bot assigned kewitz Jun 19, 2026

fix(deps): update dependency graphql to v17

c0a9a34

renovate Bot force-pushed the renovate/graphql-17.x branch from 992a561 to c0a9a34 Compare June 19, 2026 22:56

cursoragent added 4 commits June 22, 2026 07:52

fix(graphql): align CollectiveInterface deprecation with implementations

5c6fe2a

GraphQL v17 requires interface fields to be deprecated when implementation fields are. Add deprecation reasons to tiers, stats, and plan on the CollectiveInterface type to match CollectiveFields.

test(graphql): update missing variable error expectations for v17

eae66ec

GraphQL v17 reports missing required variables as invalid values rather than using the previous "was not provided" message format.

test(graphql): update invalid variable error expectations for v17

a4724de

GraphQL v17 uses "has invalid value" instead of "got invalid value" when reporting variable coercion failures.

Navigation Menu

Uh oh!

Uh oh!

fix(deps): update dependency graphql to v17 - #11902

fix(deps): update dependency graphql to v17#11902
renovate[bot] wants to merge 6 commits into
mainfrom
renovate/graphql-17.x

renovate Bot commented Jun 19, 2026 •

edited

Loading

Uh oh!

Betree commented Jun 22, 2026

Uh oh!

cursor Bot commented Jun 22, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Jun 22, 2026

Uh oh!

Betree commented Jun 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Uh oh!

Conversation

renovate Bot commented Jun 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v17.0.1

v17.0.1 (2026-06-16)

Bug Fix 🐞

Internal 🏠

Committers: 2

v17.0.0

v17.0.0 (2026-06-15)

New Feature 🚀

Bug Fix 🐞

Docs 📝

Polish 💅

Internal 🏠

Committers: 3

v16.14.2

v16.14.2 (2026-06-09)

Docs 📝

Polish 💅

Committers: 2

Configuration

Uh oh!

Betree commented Jun 22, 2026

Uh oh!

cursor Bot commented Jun 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Verification

Uh oh!

renovate Bot commented Jun 22, 2026

Edited/Blocked Notification

Uh oh!

Betree commented Jun 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

renovate Bot commented Jun 19, 2026 •

edited

Loading

`v17.0.1`

`v17.0.0`

`v16.14.2`

cursor Bot commented Jun 22, 2026 •

edited

Loading