Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	apollo-server

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• fix(deps): update dependency protobuf to v4 [security]
• chore(deps): update python docker tag to v3.13
• chore(deps): update actions/checkout action to v4
• chore(deps): update gradle docker tag to v8
• chore(deps): update node.js to v22
• chore(deps): update plugin org.jetbrains.kotlin.jvm to v2
• chore(deps): update plugin org.jetbrains.kotlin.plugin.spring to v2
• chore(deps): update prom/prometheus docker tag to v3
• fix(deps): update apollo graphql packages (major) (apollo-router, ghcr.io/apollographql/router, com.apollographql.federation:federation-graphql-java-support)
• fix(deps): update dependency web-vitals to v5
• fix(deps): update react monorepo to v19 (major) (react, react-dom)
• fix(deps): update rust crate http to v1
• fix(deps): update rust crate schemars to v1
• fix(deps): update testing-library monorepo (major) (@testing-library/jest-dom, @testing-library/react)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

cargo

misc/advanced/router-dev/Cargo.toml

• anyhow 1.0.82
• async-trait 0.1.80
• futures 0.3.30
• http 0.2.12
• schemars 0.9.0
• serde 1.0.200
• serde_json 1.0.116
• tokio 1.37.0
• tower 0.5.0

supergraph/router-rust-plugin/Cargo.toml

• anyhow 1.0.82
• apollo-router 1.45.0
• async-trait 0.1.80
• futures 0.3.30
• http 0.2.12
• schemars 0.9.0
• serde 1.0.200
• serde_json 1.0.116
• tokio 1.37.0
• tower 0.5.0
• tracing 0.1.40

circleci

.circleci/config.yml

• secops 2.0.7

docker-compose

client/defer/apollo-client/docker-compose.yaml

docker-compose.yaml

misc/local/docker-compose.gateway.yaml

misc/local/docker-compose.router-no-code.yaml

• ghcr.io/apollographql/router v1.61.8

misc/local/docker-compose.router-no-otel.yaml

• ghcr.io/apollographql/router v1.61.8

misc/local/docker-compose.router-rhai.yaml

misc/local/docker-compose.router-rust-dev.yaml

misc/local/docker-compose.router-rust-plugin.yaml

misc/studio/docker-compose.gateway.yaml

misc/studio/docker-compose.router-no-code.yaml

• ghcr.io/apollographql/router v1.61.8

misc/studio/docker-compose.router-rhai.yaml

misc/studio/docker-compose.router-rust-dev.yaml

misc/studio/docker-compose.router-rust-plugin.yaml

opentelemetry/docker-compose.otel.yaml

• otel/opentelemetry-collector-contrib 0.128.0
• openzipkin/zipkin 3.5.1
• prom/prometheus v2.55.1

dockerfile

client/defer/apollo-client/Dockerfile

• node 18-bookworm-slim

misc/advanced/router-dev/Dockerfile

• rust 1.88

subgraphs/inventory/Dockerfile

• gradle 7.6.5-jdk17
• openjdk 22-slim-bookworm

subgraphs/pandas/Dockerfile

• node 18-bookworm-slim

subgraphs/products/Dockerfile

• node 18-bookworm-slim

subgraphs/reviews/Dockerfile

• python 3.11

subgraphs/users/Dockerfile

• node 18-bookworm-slim

supergraph/gateway/Dockerfile

• node 18-bookworm-slim

supergraph/router-rhai-script/Dockerfile

supergraph/router-rust-plugin/Dockerfile

• rust 1.88

github-actions

.github/workflows/local-gateway.yaml

• actions/checkout v3

.github/workflows/local-router-no-code.yaml

• actions/checkout v3

.github/workflows/local-router-rhai.yaml

• actions/checkout v3

.github/workflows/local-router-rust-dev.yaml

• actions/checkout v3

.github/workflows/local-router-rust-plugin.yaml

• actions/checkout v3

.github/workflows/studio-gateway.yaml

• actions/checkout v3

.github/workflows/studio-router-no-code.yaml

• actions/checkout v3

.github/workflows/studio-router-rust-dev.yaml

• actions/checkout v3

gradle

subgraphs/inventory/app/settings.gradle

subgraphs/inventory/app/build.gradle.kts

• org.springframework.boot 3.5.3
• org.jetbrains.kotlin.jvm 1.9.25
• org.jetbrains.kotlin.plugin.spring 1.9.25
• org.springframework.boot:spring-boot-dependencies 3.5.3
• com.apollographql.federation:federation-graphql-java-support 4.5.0

npm

client/defer/apollo-client/package.json

• @apollo/client 3.13.8
• @testing-library/jest-dom 5.17.0
• @testing-library/react 13.4.0
• @testing-library/user-event 14.6.1
• graphql 16.11.0
• react 18.3.1
• react-dom 18.3.1
• react-scripts 5.0.1
• web-vitals 2.1.4

subgraphs/pandas/package.json

• apollo-server 3.13.0
• graphql 16.11.0

subgraphs/products/package.json

• @apollo/subgraph 2.11.2
• apollo-server 3.13.0
• supergraph-demo-opentelemetry 0.2.4
• graphql 16.11.0

subgraphs/users/package.json

• @apollo/subgraph 2.11.2
• apollo-server 3.13.0
• supergraph-demo-opentelemetry 0.2.4
• graphql 16.11.0

supergraph/gateway/package.json

• @apollo/server 4.12.2
• @apollo/gateway 2.11.2
• supergraph-demo-opentelemetry 0.2.4
• graphql 16.11.0

pep621

subgraphs/reviews/pyproject.toml

• python >=3.10
• strawberry-graphql >=0.130.3
• uvicorn >=0.18.2
• starlette >=0.20.4
• opentelemetry-api >=1.11.1
• opentelemetry-sdk >=1.11.1
• opentelemetry-exporter-zipkin >=1.11.1
• opentelemetry-instrumentation-starlette >=0.30b1
• opentelemetry-exporter-otlp >=1.11.1
• protobuf ==3.20.3
• grpcio ==1.73.1
• pdm-pep517 >=1.0.0
• black >=22.6.0
• flake8 >=5.0.4
• mypy >=0.971

---

• Check this box to trigger a request for Renovate to run again on this repository