build(deps): bump @apollo/client from 3.3.6 to 4.0.2

[dependabot]

Bumps @apollo/client from 3.3.6 to 4.0.2.

Release notes

Sourced from @​apollo/client's releases.

@​apollo/client@​4.0.2

Patch Changes

• #12880 56fac52 Thanks @​phryneas! - restore getMemoryInternals access in dev builds

@​apollo/client@​4.0.1

Patch Changes

• #12876 b00f231 Thanks @​phryneas! - Fix CJS build output for invariantErrorCodes

• #12866 0d1614a Thanks @​jerelmiller! - Export isNetworkStatusInFlight from @apollo/client/utilities. Add isNetworkStatusSettled to @apollo/client/utilities and re-export it from @apollo/client with a deprecation.

@​apollo/client@​4.0.0

Apollo Client 4.0 Release Notes

Apollo Client 4.0 delivers a more modern, efficient, and type-safe GraphQL client experience through various architectural improvements and API refinements. This release focuses on developer experience, bundle size optimization, and framework flexibility.

Key Improvements

🎯 Framework-Agnostic Core

Apollo Client 4.0 separates React functionality from the core library, making @apollo/client truly framework-agnostic. React exports now live in @apollo/client/react, allowing developers to use Apollo Client with any JavaScript framework without React dependencies.

📦 Smaller Bundle Sizes

• Opt-in Local State Management: The @client directive functionality is now opt-in via the LocalState class, reducing bundle size when not using local state
• Modern Build Target: Transpiled to target since 2023, node >= 20, not dead, leveraging modern JavaScript features for better performance
• Improved Tree-Shaking: Proper exports field in package.json enables better dead code elimination

💥 Unified Error Handling

Apollo Client 4.0 completely reimagines error handling for better clarity and debugging:

• ApolloError removed in favor of specific error classes
• Unification of errors to a single error property
• Network errors now respect errorPolicy settings
• External errors passed through without wrapping
• New, more granular error classes with static .is() methods for robust type narrowing

🔧 Enhanced TypeScript Support

• Namespaced Types: Types are now colocated with their APIs (e.g., useQuery.Options instead of QueryHookOptions)
• Precise Return Types: Return types accurately reflect the options passed (e.g., returnPartialData makes data type DeepPartial<TData>)
• Stricter Type Safety: Required variables are now enforced more consistently throughout the client
• New dataState Property: Enables accurate type narrowing of query results
• Module Augmentation: Custom context types via declaration merging instead of fragile generics
• Customizable Type Implementations: Select types can now be customized to provide your own type implementation to seamlessly integrate with external tools such as GraphQL Codegen or gql.tada

⚡ Modern Observable Implementation

... (truncated)

Changelog

Sourced from @​apollo/client's changelog.

4.0.2

Patch Changes

• #12880 56fac52 Thanks @​phryneas! - restore getMemoryInternals access in dev builds

4.0.1

Patch Changes

• #12876 b00f231 Thanks @​phryneas! - Fix CJS build output for invariantErrorCodes

• #12866 0d1614a Thanks @​jerelmiller! - Export isNetworkStatusInFlight from @apollo/client/utilities. Add isNetworkStatusSettled to @apollo/client/utilities and re-export it from @apollo/client with a deprecation.

4.0.0

Apollo Client 4.0 Release Notes

Apollo Client 4.0 delivers a more modern, efficient, and type-safe GraphQL client experience through various architectural improvements and API refinements. This release focuses on developer experience, bundle size optimization, and framework flexibility.

Key Improvements

🎯 Framework-Agnostic Core

Apollo Client 4.0 separates React functionality from the core library, making @apollo/client truly framework-agnostic. React exports now live in @apollo/client/react, allowing developers to use Apollo Client with any JavaScript framework without React dependencies.

📦 Smaller Bundle Sizes

• Opt-in Local State Management: The @client directive functionality is now opt-in via the LocalState class, reducing bundle size when not using local state
• Modern Build Target: Transpiled to target since 2023, node >= 20, not dead, leveraging modern JavaScript features for better performance
• Improved Tree-Shaking: Proper exports field in package.json enables better dead code elimination

💥 Unified Error Handling

Apollo Client 4.0 completely reimagines error handling for better clarity and debugging:

• ApolloError removed in favor of specific error classes
• Unification of errors to a single error property
• Network errors now respect errorPolicy settings
• External errors passed through without wrapping
• New, more granular error classes with static .is() methods for robust type narrowing

🔧 Enhanced TypeScript Support

• Namespaced Types: Types are now colocated with their APIs (e.g., useQuery.Options instead of QueryHookOptions)
• Precise Return Types: Return types accurately reflect the options passed (e.g., returnPartialData makes data type DeepPartial<TData>)
• Stricter Type Safety: Required variables are now enforced more consistently throughout the client
• New dataState Property: Enables accurate type narrowing of query results
• Module Augmentation: Custom context types via declaration merging instead of fragile generics
• Customizable Type Implementations: Select types can now be customized to provide your own type implementation to seamlessly integrate with external tools such as GraphQL Codegen or gql.tada

... (truncated)

Commits

• 94ed29c Version Packages (#12881)
• 9a19700 Update release script (#12878)
• 56b2094 Fix an issue where networkStatus would not be moved into the correct packag...
• 64eb797 Remove polymer-apollo (#12869)
• 56fac52 restore getMemoryInternals access in dev builds (#12880)
• 42f7e80 Version Packages (#12877)
• 0d1614a Export isNetworkStatusInFlight (#12866)
• b00f231 fix cjs invariantErrorCodes (#12876)
• 100ce21 Fix npx codemod command for Apollo Client migration (#12873)
• c6ec3eb Version Packages (#12862)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/@apollo/client	4.0.3	🟢 5.5	Details Check Score Reason Code-Review 🟢 7 Found 14/20 approved changesets -- score normalized to 7 Maintained 🟢 10 30 commit(s) and 27 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions License 🟢 10 license file detected Binary-Artifacts 🟢 10 no binaries found in the repo Branch-Protection 🟢 8 branch protection is not maximal on development and all release branches Security-Policy 🟢 10 security policy file detected Signed-Releases ⚠️ -1 no releases found Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities ⚠️ 0 29 existing vulnerabilities detected

Scanned Files

• package.json

[rinatkhaziev]

@dependabot rebase

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dependabot]

Superseded by #2535.