Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Aug 10, 2025

This PR contains the following updates:

Package Change Age Confidence
@apollo/client (source) 3.13.9 -> 3.14.0 age confidence
@babel/core (source) 7.28.0 -> 7.28.3 age confidence
@babel/preset-env (source) 7.28.0 -> 7.28.3 age confidence
@cloudflare/workers-types 4.20250807.0 -> 4.20250826.0 age confidence
@escape.tech/graphql-armor (source) 3.1.6 -> 3.1.7 age confidence
@hapi/hapi (source) 21.4.2 -> 21.4.3 age confidence
@ianvs/prettier-plugin-sort-imports 4.6.0 -> 4.6.3 age confidence
@pothos/core (source) 4.8.1 -> 4.9.0 age confidence
@prisma/client (source) 6.13.0 -> 6.15.0 age confidence
@prisma/internals (source) 6.13.0 -> 6.15.0 age confidence
@prisma/migrate (source) 6.13.0 -> 6.15.0 age confidence
@pulumi/aws (source) 7.3.1 -> 7.6.0 age confidence
@pulumi/aws-native (source) 1.31.0 -> 1.32.0 age confidence
@pulumi/azure-native (source) 3.6.1 -> 3.7.1 age confidence
@pulumi/docker (source) 4.8.0 -> 4.8.2 age confidence
@pulumi/pulumi (source) 3.188.0 -> 3.191.0 age confidence
@sveltejs/adapter-auto (source) 6.0.2 -> 6.1.0 age confidence
@sveltejs/vite-plugin-svelte (source) 6.1.1 -> 6.1.3 age confidence
@types/node (source) 24.2.0 -> 24.3.0 age confidence
@types/react (source) 19.1.9 -> 19.1.12 age confidence
@types/react-dom (source) 19.1.7 -> 19.1.8 age confidence
aws-cdk (source) 2.1024.0 -> 2.1027.0 age confidence
aws-cdk-lib (source) 2.210.0 -> 2.212.0 age confidence
concurrently 9.2.0 -> 9.2.1 age confidence
esbuild 0.25.8 -> 0.25.9 age confidence
eslint (source) 9.32.0 -> 9.34.0 age confidence
fastify (source) 5.4.0 -> 5.5.0 age confidence
jest (source) 30.0.5 -> 30.1.1 age confidence
lint-staged 16.1.4 -> 16.1.5 age confidence
pnpm (source) 10.14.0 -> 10.15.0 age confidence
prisma (source) 6.13.0 -> 6.15.0 age confidence
svelte (source) 5.38.0 -> 5.38.6 age confidence
ts-loader 9.5.2 -> 9.5.4 age confidence
tsx (source) 4.20.3 -> 4.20.5 age confidence
vite (source) 7.1.1 -> 7.1.3 age confidence
webpack 5.101.0 -> 5.101.3 age confidence
wrangler (source) 4.28.1 -> 4.33.0 age confidence

Release Notes

apollographql/apollo-client (@​apollo/client)

v3.14.0

Compare Source

Minor Changes
Patch Changes
babel/babel (@​babel/core)

v7.28.3

Compare Source

👓 Spec Compliance
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env
🐛 Bug Fix
💅 Polish
  • babel-plugin-transform-regenerator, babel-plugin-transform-runtime
📝 Documentation
🏠 Internal
🔬 Output optimization
  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions
cloudflare/workerd (@​cloudflare/workers-types)

v4.20250826.0

Compare Source

v4.20250823.0

Compare Source

v4.20250822.0

Compare Source

v4.20250821.0

Compare Source

v4.20250820.0

Compare Source

v4.20250819.0

Compare Source

v4.20250816.0

Compare Source

v4.20250813.0

Compare Source

v4.20250812.0

Compare Source

v4.20250810.0

Compare Source

v4.20250809.0

Compare Source

Escape-Technologies/graphql-armor (@​escape.tech/graphql-armor)

v3.1.7

Compare Source

Patch Changes
hapijs/hapi (@​hapi/hapi)

v21.4.3

Compare Source

ianvs/prettier-plugin-sort-imports (@​ianvs/prettier-plugin-sort-imports)

v4.6.3

Compare Source

What's Changed

  • Revert "fix: conditionally register ember and oxc parsers when depend… by @​IanVS in IanVS#237

Full Changelog: IanVS/prettier-plugin-sort-imports@4.6.2...v4.6.3

v4.6.2

Compare Source

What's Changed

  • fix: conditionally register ember and oxc parsers when dependencies available by @​jahands in IanVS#234

New Contributors

Full Changelog: IanVS/prettier-plugin-sort-imports@v4.6.1...4.6.2

v4.6.1

Compare Source

What's Changed

Full Changelog: IanVS/prettier-plugin-sort-imports@v4.6.0...v4.6.1

hayes/pothos (@​pothos/core)

v4.9.0

Compare Source

Minor Changes
  • 689accd: Fix arg mapping for nested lists
prisma/prisma (@​prisma/client)

v6.15.0

Compare Source

Today, we are excited to share the 6.15.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights
AI safety guardrails for destructive commands

Prisma ORM now includes built-in safety checks that protect against destructive commands when triggered by AI coding assistants. The CLI can recognize when it is being executed by popular AI agents such as Claude Code, Gemini CLI, Qwen Code, Cursor, Aider and Replit.

If a command like prisma migrate reset --force is attempted, Prisma ORM will prompt for explicit confirmation before proceeding.

Cursor AI guardrail

This feature ensures that irreversible operations which drop and recreate the database are not executed automatically by an AI tool. Prisma ORM is the first ORM to provide this level of protection, making it safer to use AI-assisted development while working with your databases.

📚 Learn more in the docs.

prisma-client: runtime improvements and schema flexibility

We simplified Prisma ORM by making the runtime options for the Prisma Client more consistent and easier to understand. Previously there were several overlapping aliases which created confusion. With this release we simplified the inputs while keeping support for all the major environments you might be targeting.

Changes include:

  • node has been removed, use runtime = "nodejs" instead
  • deno-deploy has been removed, use runtime = "deno" instead
  • vercel has been replaced by the new runtime = "vercel-edge"
  • edge-light is now just an alias for vercel-edge
  • nodejs, deno, and bun now share the same internal code path, while still keeping their separate input values for clarity
  • The VS Code extension has been updated to reflect these changes

The updated list of supported runtimes is now:

nodejs, deno, bun, workerd (alias cloudflare), vercel-edge (alias edge-light), and react-native.

In addition, we fixed an issue where running prisma generate would fail if your schema contained no models. This is now supported with the new prisma-client generator, just like it already worked with the older prisma-client-js generator.

For example, the following schema will now generate a client without errors:

generator client {
  provider = "prisma-client"
  output   = "../generated/client"
}

datasource db {
  provider = "postgresql"
  url      = env("DATABASE_URL")
}

Running prisma generate with this schema will succeed and create the client in ./generated/client.

📚 Learn more in the docs.

Using Prisma ORM with Vercel Fluid

Fluid compute is a new compute model from Vercel that combines the flexibility of serverless with the stability of servers, making it ideal for dynamic workloads such as streaming data and AI APIs.

A common challenge in traditional serverless platforms is that when functions are suspended, database connection pools can’t close idle connections. This leads to leaked connections that stay open until the database times them out, which can exhaust the pool.

Vercel provides the attachDatabasePool utility to solve this problem. It ensures idle connections in the pool are properly released before a function is suspended, preventing connection leaks.

You can use this utility together with Prisma’s driver adapters to safely manage database connections in Fluid Compute:

import { Pool } from "pg";
import { attachDatabasePool } from "@​vercel/functions";
import { PrismaPg } from "@​prisma/adapter-pg";
import { PrismaClient } from "./generated/prisma/client";

const pool = new Pool({ connectionString: process.env.POSTGRES_URL });
attachDatabasePool(pool);

const prisma = new PrismaClient({
  adapter: new PrismaPg(pool),
});

📚 Learn more in the docs.

Other news
Prisma Postgres Management API is Generally Available

The Prisma Postgres Management API allows you to programmatically provision and manage Prisma Postgres instances. It’s the perfect way to spin up a database in your CI/CD workflow, see our GitHub Action examples for creating and deleting if you’re curious about this use case.

It also enables developers to offer databases to their own users! For example, did you know that Co.dev (YC23), a popular “low-code AI app builder” is using the Management API to provision Prisma Postgres instances to people building apps with their platform?

We’re excited to share that the Management API is now fully ready for production. With it moving into GA, we also added another piece of functionality where you can now create new projects without a default database.

We’re looking forward to see what you’re going to build with it!

📚 Learn more in the docs.

Prisma Postgres is now available on Pipedream

Prisma Postgres can now be used directly in your Pipedream workflows 🎉

With this integration, you can connect Prisma Postgres to over 2,800+ apps supported on Pipedream, enabling powerful automations and data workflows. For example, you can:

  • Automatically spin up a new Prisma Postgres database when a customer signs up in Stripe.
  • Connect Prisma Postgres with Slack, Notion, Airtable, or any other app in the Pipedream ecosystem

This makes it easier than ever to use Prisma Postgres in your automation pipelines, without needing to manage custom scripts or infrastructure.

📚 Learn more on the Pipedream integration page.

Screenshot 2025-08-26 at 3 15 19 PM
New --json flag for npx create-db

The npx create-db command lets you spin up a temporary, production-ready Prisma Postgres database that you can later claim for continued use. With this release, you can now add the --json flag to return the database details in JSON format.

This makes it straightforward to programmatically use the connection details, whether you are building custom APIs or integrating database provisioning into your workflows.

📚 Learn more in the docs.

npx create-db --json command

Direct connections to Prisma Postgres are coming close to GA

Direct connections enable you to connect to your database using any ORM library or tool of your choice (e.g. Drizzle ORM, Kysely but also database GUIs like Postico or TablePlus).

In this release, we’ve improved the robustness of direct TCP connections and are close to bringing it to General Availability.

📚 Learn more in the docs.

Enterprise support

Thousands of teams use Prisma and many of them already tap into our Enterprise & Agency Support Program for hands-on help with everything from schema integrations and performance tuning to security and compliance.

With this program you also get priority issue triage and bug fixes, expert scalability advice, and custom training so that your Prisma-powered apps stay rock-solid at any scale. Learn more or join: https://prisma.io/enterprise.

v6.14.0

Compare Source

Today, we are excited to share the 6.14.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights
@unique attributes for SQL views (Preview)

Last release, we improved the robustness of SQL views defined in the Prisma schema. Views are virtual tables that don't allows for defining unique constraints, indexes or foreign keys in the underlying database.

However, as an application developer, it can be convenient to also define relationships involving views or paginate them using cursors. We've received this feedback from several people who had been using views in that way with Prisma ORM, so in this release we're re-introducing the @unique attribute for views. This attribute enables:

  • relationships involving views
  • findUnique queries, cursor-based pagination & implicit ordering for views

Here's an example schema using @unique and defining a relationship from a model to a view:

model User {
  id        Int            @​id @​default(autoincrement())
  email     String         @​unique
  posts     Post[]
  stats     UserPostStats? @​relation(fields: [email], references: [userEmail])
}

model Post {
  id        Int      @​id @​default(autoincrement())
  title     String
  published Boolean  @​default(false)
  createdAt DateTime @​default(now())
  authorId  Int?
  author    User?    @​relation(fields: [authorId], references: [id])
}

view UserPostStats {
  userEmail        String    @​unique
  totalPosts       BigInt?
  publishedPosts   BigInt?
  unpublishedPosts BigInt?
  latestPostDate   DateTime? @​db.Timestamp(6)
  user             User?
}
Expand to view the SQL code for this view
CREATE OR REPLACE VIEW "UserPostStats" AS
SELECT 
    u.email AS "userEmail",
    u.name AS "userName",
    COUNT(p.id) AS "totalPosts",
    COUNT(CASE WHEN p.published = true THEN 1 END) AS "publishedPosts",
    COUNT(CASE WHEN p.published = false THEN 1 END) AS "unpublishedPosts",
    MAX(p."createdAt") AS "latestPostDate"
FROM "User" u
LEFT JOIN "Post" p ON u.id = p."authorId"
GROUP BY u.id, u.email, u.name;

You can now query this view and its relationship using include:

const userPostStats = await prisma.userPostStats.findMany({
  include: {
    user: true,
  }
})

📚 Learn more in the docs.

Various fixes & stability improvements
  • Fixed several issues related to new prisma-client generator and the queryCompiler Preview feature (aka “Prisma Client without Rust engines”). Both will become the default in the upcoming Prisma 7 release and we're working hard on bringing these features into General Availability. You can try them out with your favorite stack with our ready-to-run examples.
  • Fixed several regressions, e.g. related to Prisma Config
  • Removed middleware from Prisma Client (i.e. the prisma.$use method), which was deprecated since v4.16.0. Use Prisma Client extensions instead.
  • Deprecated metrics Preview feature (which will be removed in Prisma 7)
Improved type performance

In this release, we also addressed some type performance issues that led to slower editors and lagging auto-complete. If you're curious about the details, you can check the description and changes in this PR.

Other news
Increased robustness of Management API (Early Access)

We recently released an API for programmatically managing Prisma Postgres instances that's perfect for CI/CD workflows and scripting.

In this release, we made it more robust and are bringing it closer to its General Availability release.

Revoke OAuth tokens in Prisma Console

If you use OAuth to authorize third-party applications to act on your behalf in the Prisma Console, you can now revoke any app's access at any time. The Prisma Console shows a list of your authorized (connected) apps, and you can easily remove one to immediately block further access.

Big fixes in Prisma Console
  • Fixed a 500 HTTP error happening after session expiration
  • Fixed a bug around updating notification settings
  • Fixed a bug where some settings pages didn't show the aside menu
ICYMI

Last release was huge, so just in case you missed it, here's the TLDR of what we put out last time:

  • Prisma ORM
    • Prisma Config file (prisma.config.ts) is Generally Available – Native way to configure schema paths, migrations, seeds, and more; no need for earlyAccess flag anymore.
    • Multi-schema support is Generally Available – Allows assigning models to different database schemas in Postgres and SQL Server using @@​schema.
    • Improved SQL views support (still in Preview) – Adds guardrails for views by disabling unsupported features.
    • Externally managed tables – Lets you exclude specific tables from Prisma Migrate while still querying them via Prisma Client.
  • Prisma Postgres
    • Extension support for Prisma Postgres – Prisma Postgres now supports pgvectorpg_searchpg_stat_statementscitextpg_trgmfuzzystrmatch, and unaccent. If you don't see the extension you need, you can request it here. Extensions only work on new instances, if you want to use any of them on your existing instance, reach out to us.
    • Management API for Prisma Postgres – REST API to provision, delete, and manage Prisma Postgres instances programmatically, perfect for CI/CD and scripting workflows.
    • GitHub Actions for Prisma Postgres – Actions for creating and deleting databases in CI/CD workflows, available on GitHub Marketplace.
    • New CLI: npx create-db – Instantly spin up a new Postgres database—no authentication required.
pulumi/pulumi-aws (@​pulumi/aws)

v7.6.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.5.0...v7.6.0

v7.5.0

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.4.0...v7.5.0

v7.4.0

Compare Source

Does the PR have any schema changes?

Looking good! No breaking changes found.

New resources:
  • networkfirewall/vpcEndpointAssociation.VpcEndpointAssociation
  • quicksight/customPermissions.CustomPermissions
  • quicksight/roleCustomPermission.RoleCustomPermission
  • quicksight/userCustomPermission.UserCustomPermission
  • wafv2/webAclRuleGroupAssociation.WebAclRuleGroupAssociation

What's Changed

Full Changelog: pulumi/pulumi-aws@v7.3.1...v7.4.0

pulumi/pulumi-aws-native (@​pulumi/aws-native)

v1.32.0

Compare Source

pulumi/pulumi-azure-native (@​pulumi/azure-native)

v3.7.1

Compare Source

Does the PR have any schema changes?

Found 5 breaking changes:

Types
  • 🟢 "azure-native:app:BlobStorageTokenStore": required: "sasUrlSettingName" property is no longer Required
  • 🟢 "azure-native:app:BlobStorageTokenStoreResponse": required: "sasUrlSettingName" property is no longer Required
  • 🟢 "azure-native:app:CertificateResponseProperties": required: "deploymentErrors" property has changed to Required
  • "azure-native:app:ConnectedEnvironmentStorageResponseProperties": required:
    • 🟢 "deploymentErrors" property has changed to Required
    • 🟢 "provisioningState" property has changed to Required
      No new resources/functions.

What's Changed

Full Changelog: pulumi/pulumi-azure-native@v3.7.0...v3.7.1

v3.7.0

Compare Source

Does the PR have any schema changes?

Found 3 breaking changes:

Resources
  • 🟢 "azure-native:botservice:Bot": required: "location" property is no longer Required
  • 🟢 "azure-native:botservice:Channel": required: "location" property is no longer Required
  • 🟢 "azure-native:maintenance:MaintenanceConfiguration": required: "location" property is no longer Required
New resources:
  • containerservice.IdentityBinding
  • fileshares.FileShare
  • mission.Approval
  • mission.Community
  • mission.CommunityEndpoint
  • mission.EnclaveConnection
  • mission.EnclaveEndpoint
  • mission.TransitHub
  • mission.VirtualEnclave
  • mission.Workload
  • security.PrivateEndpointConnection
  • security.PrivateLink
New functions:
  • containerservice.getIdentityBinding
  • fileshares.getFileShare
  • fileshares.getFileShareLimits
  • fileshares.getFileShareProvisioningRecommendation
  • fileshares.getFileShareUsageData
  • mission.getApproval
  • mission.getCommunity
  • mission.getCommunityEndpoint
  • mission.getEnclaveConnection
  • mission.getEnclaveEndpoint
  • mission.getTransitHub
  • mission.getVirtualEnclave
  • mission.getWorkload
  • security.getPrivateEndpointConnection
  • security.getPrivateLink

What's Changed

New Contributors

Full Changelog: pulumi/pulumi-azure-native@v3.6.1...v3.7.0

pulumi/pulumi-docker (@​pulumi/docker)

v4.8.2

Compare Source

What's Changed

Full Changelog: pulumi/pulumi-docker@v4.8.1...v4.8.2

v4.8.1

Compare Source

What's Changed


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Aug 10, 2025
Copy link

codesandbox bot commented Aug 10, 2025

Review or Edit in CodeSandbox

Open the branch in Web EditorVS CodeInsiders

Open Preview

Copy link
Contributor

github-actions bot commented Aug 10, 2025

🚀 Snapshot Release (alpha)

The latest changes of this PR are available as alpha on npm (based on the declared changesets):

Package Version Info
@graphql-yoga/graphiql 4.4.1-alpha-20250828022208-da9dca3780469c7631eee5484a02d306bab2f110 npm ↗︎ unpkg ↗︎
@graphql-yoga/plugin-apollo-usage-report 0.10.2-alpha-20250828022208-da9dca3780469c7631eee5484a02d306bab2f110 npm ↗︎ unpkg ↗︎

Copy link
Contributor

github-actions bot commented Aug 10, 2025

Apollo Federation Subgraph Compatibility Results

Federation 1 Support Federation 2 Support
_service🟢
@key (single)🟢
@key (multi)🟢
@key (composite)🟢
repeatable @key🟢
@requires🟢
@provides🟢
federated tracing🟢
@link🟢
@shareable🟢
@tag🟢
@override🟢
@inaccessible🟢
@composeDirective🟢
@interfaceObject🟢

Learn more:

Copy link
Contributor

github-actions bot commented Aug 10, 2025

💻 Website Preview

The latest changes are available as preview in: https://pr-4150.graphql-yoga.pages.dev

Copy link
Contributor

github-actions bot commented Aug 10, 2025

✅ Benchmark Results

     ✓ no_errors{mode:graphql}
     ✓ expected_result{mode:graphql}
     ✓ no_errors{mode:graphql-jit}
     ✓ expected_result{mode:graphql-jit}
     ✓ no_errors{mode:graphql-response-cache}
     ✓ expected_result{mode:graphql-response-cache}
     ✓ no_errors{mode:graphql-no-parse-validate-cache}
     ✓ expected_result{mode:graphql-no-parse-validate-cache}
     ✓ no_errors{mode:uws}
     ✓ expected_result{mode:uws}

     checks.......................................: 100.00% ✓ 491582      ✗ 0     
     data_received................................: 2.0 GB  13 MB/s
     data_sent....................................: 99 MB   659 kB/s
     http_req_blocked.............................: avg=1.62µs   min=1.02µs   med=1.38µs   max=260.49µs p(90)=2.13µs   p(95)=2.37µs  
     http_req_connecting..........................: avg=2ns      min=0s       med=0s       max=142.08µs p(90)=0s       p(95)=0s      
     http_req_duration............................: avg=381.87µs min=222.79µs med=350.09µs max=19.45ms  p(90)=489.45µs p(95)=515.31µs
       { expected_response:true }.................: avg=381.87µs min=222.79µs med=350.09µs max=19.45ms  p(90)=489.45µs p(95)=515.31µs
     ✓ { mode:graphql-jit }.......................: avg=304.26µs min=222.79µs med=283.18µs max=19.45ms  p(90)=320.54µs p(95)=341.03µs
     ✓ { mode:graphql-no-parse-validate-cache }...: avg=514.78µs min=422.84µs med=490.24µs max=6.54ms   p(90)=540.57µs p(95)=606.83µs
     ✓ { mode:graphql-response-cache }............: avg=366.95µs min=283.33µs med=348.41µs max=10.81ms  p(90)=385.73µs p(95)=402.12µs
     ✓ { mode:graphql }...........................: avg=382.4µs  min=284.09µs med=354.1µs  max=15.45ms  p(90)=406.73µs p(95)=449.54µs
     ✓ { mode:uws }...............................: avg=377.42µs min=289.79µs med=355.46µs max=6.68ms   p(90)=397.12µs p(95)=425.7µs 
     http_req_failed..............................: 0.00%   ✓ 0           ✗ 245791
     http_req_receiving...........................: avg=35.46µs  min=17.31µs  med=34.14µs  max=2.94ms   p(90)=42.24µs  p(95)=46.38µs 
     http_req_sending.............................: avg=9.38µs   min=6.09µs   med=8.49µs   max=297.35µs p(90)=12.11µs  p(95)=13.35µs 
     http_req_tls_handshaking.....................: avg=0s       min=0s       med=0s       max=0s       p(90)=0s       p(95)=0s      
     http_req_waiting.............................: avg=337.02µs min=191.37µs med=306.61µs max=19.31ms  p(90)=444.25µs p(95)=468.22µs
     http_reqs....................................: 245791  1638.584911/s
     iteration_duration...........................: avg=605.07µs min=400.02µs med=570.07µs max=20.04ms  p(90)=716.63µs p(95)=747.26µs
     iterations...................................: 245791  1638.584911/s
     vus..........................................: 1       min=1         max=1   
     vus_max......................................: 2       min=2         max=2   

Copy link
Contributor Author

renovate bot commented Aug 28, 2025

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@ardatan ardatan merged commit 28da0d5 into main Aug 28, 2025
25 checks passed
@ardatan ardatan deleted the renovate/all-minor-patch branch August 28, 2025 23:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant