[dependabot]

Bumps @graphql-tools/utils to 12.1.0 and updates ancestor dependencies @graphql-tools/utils, mockrtc and mockttp. These dependencies need to be updated together.

Updates @graphql-tools/utils from 11.1.0 to 12.1.0

Changelog

Sourced from @​graphql-tools/utils's changelog.

12.1.0

Minor Changes

• #8445 82457d1 Thanks @​ardatan! - Fix: Preserve symbol-keyed GraphQL extensions when building, merging, or extracting schemas.

  GraphQL.js v17 allows string | symbol keys on schema/type/field extensions (via toObjMapWithSymbols). @graphql-tools was dropping those symbol keys in two places:

  1. mergeDeep only walked enumerable string keys (for...in), so symbol extensions were lost when applying schemaExtensions.
  2. extractExtensionsFromSchema did not copy non-enumerable own symbol keys (enumerable symbols already survive object rest/spread; the explicit loop covers the non-enumerable case).

  Example (bug)

  import { makeExecutableSchema } from '@graphql-tools/schema'
  const META = Symbol('META')
  const schema = makeExecutableSchema({
  typeDefs: /* GraphQL */ type Query { hello: String },
  schemaExtensions: {
  schemaExtensions: {
  [META]: { source: 'app' },
  tagged: true,
  },
  types: {},
  },
  })
  // Before: only string keys survived
  // schema.extensions === { tagged: true }
  // After: symbol keys are preserved
  // schema.extensions[META] === { source: 'app' }
  // schema.extensions.tagged === true

  Schema extension merge/extract and resolver merging always enable { enumerable: true, nonEnumerable: true } so symbol keys survive in tools' own merge/extract paths on every supported GraphQL.js major. (GraphQL.js itself may still drop symbol keys from field configs below v17 when rebuilding types.)

  mergeDeep API

  mergeDeep now accepts an options object. The old positional boolean arguments still work but are deprecated.

  import { mergeDeep } from '@graphql-tools/utils'

... (truncated)

Commits

• 3634233 chore(release): update monorepo packages versions (#8505)
• a75d725 fix(utils): keep argument types of defined directives in pruneSchema (#8493)
• 98673c3 fix(utils): coerce GraphQL 17 argument defaults in getArgumentValues (#8513)
• 82457d1 fix: preserve symbol-keyed schema extensions (#8445)
• 691cbd7 build(deps): bump the actions-deps group across 1 directory with 16 updates (...
• 28d08e8 chore(release): update monorepo packages versions (#8486)
• fd95dc9 fix(utils): skip empty descriptions in getDescriptionNode (#8499)
• a73dd1d build(deps-dev): bump the actions-deps group across 1 directory with 3 update...
• 944121e Upcoming Release Changes (#8483)
• 19f5b33 fix(utils): compare path keys to proto at the property access (#8482)
• Additional commits viewable in compare view

Updates mockrtc from 0.5.0 to 0.5.2

Commits

• 2afa16e 0.5.2
• 1c152a9 Fix release workflow
• 904c00b Fix flake in events tests
• e7b6aa3 Don't throw for already-closed connections during setup
• 108a7a8 Fix flaky behaviour caused by libdatachannel shutdown race
• b5fee32 Work around flaky behaviour caused by a libdatachannel channel race
• f0639b1 Bump assorted outdated devdeps
• 38ad980 Update graphql-tools to latest to dedupe with Mockttp
• c26c23b 0.5.1
• 2d7673a Update GHA steps
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mockrtc since your current version.

Updates mockttp from 4.6.1 to 4.6.5

Commits

• 10be585 4.6.5
• 72dfe16 Add workaround for TLS socket bug
• 7a5a46c Update node to match server on latest 24
• 621c77e Update typescript to fix asn1 build error
• cdb9fee 4.6.4
• fee19d1 Update TLS impersonate for latest Chrome/BoringSSL matching
• 6c29c41 Merge pull request #216 from theluckystrike/fix/mockttp-getjson-type
• 35a7138 Type getJson() for every JSON value, with an optional type argument
• d3ba3db Bump @​graphql-tools/utils to v12
• e352313 Merge pull request #215 from theluckystrike/fix/mockttp-payer-proof
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	mockrtc@​0.5.0 ⏵ 0.5.2	+1			+6
	mockttp@​4.6.1 ⏵ 4.6.5

View full report