[dependabot]

Bumps the npm_and_yarn group with 3 updates in the /substash directory: @graphql-tools/utils, http-cache-semantics and seroval.

Updates @graphql-tools/utils from 11.2.2 to 12.1.0

Changelog

Sourced from @​graphql-tools/utils's changelog.

12.1.0

Minor Changes

• #8445 82457d1 Thanks @​ardatan! - Fix: Preserve symbol-keyed GraphQL extensions when building, merging, or extracting schemas.

  GraphQL.js v17 allows string | symbol keys on schema/type/field extensions (via toObjMapWithSymbols). @graphql-tools was dropping those symbol keys in two places:

  1. mergeDeep only walked enumerable string keys (for...in), so symbol extensions were lost when applying schemaExtensions.
  2. extractExtensionsFromSchema did not copy non-enumerable own symbol keys (enumerable symbols already survive object rest/spread; the explicit loop covers the non-enumerable case).

  Example (bug)

  import { makeExecutableSchema } from '@graphql-tools/schema'
  const META = Symbol('META')
  const schema = makeExecutableSchema({
  typeDefs: /* GraphQL */ type Query { hello: String },
  schemaExtensions: {
  schemaExtensions: {
  [META]: { source: 'app' },
  tagged: true,
  },
  types: {},
  },
  })
  // Before: only string keys survived
  // schema.extensions === { tagged: true }
  // After: symbol keys are preserved
  // schema.extensions[META] === { source: 'app' }
  // schema.extensions.tagged === true

  Schema extension merge/extract and resolver merging always enable { enumerable: true, nonEnumerable: true } so symbol keys survive in tools' own merge/extract paths on every supported GraphQL.js major. (GraphQL.js itself may still drop symbol keys from field configs below v17 when rebuilding types.)

  mergeDeep API

  mergeDeep now accepts an options object. The old positional boolean arguments still work but are deprecated.

  import { mergeDeep } from '@graphql-tools/utils'

... (truncated)

Commits

• 3634233 chore(release): update monorepo packages versions (#8505)
• a75d725 fix(utils): keep argument types of defined directives in pruneSchema (#8493)
• 98673c3 fix(utils): coerce GraphQL 17 argument defaults in getArgumentValues (#8513)
• 82457d1 fix: preserve symbol-keyed schema extensions (#8445)
• 691cbd7 build(deps): bump the actions-deps group across 1 directory with 16 updates (...
• 28d08e8 chore(release): update monorepo packages versions (#8486)
• fd95dc9 fix(utils): skip empty descriptions in getDescriptionNode (#8499)
• a73dd1d build(deps-dev): bump the actions-deps group across 1 directory with 3 update...
• 944121e Upcoming Release Changes (#8483)
• 19f5b33 fix(utils): compare path keys to proto at the property access (#8482)
• Additional commits viewable in compare view

Updates http-cache-semantics from 4.2.0 to 4.3.0

Commits

• See full diff in compare view

Updates seroval from 1.5.6 to 1.6.12

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.