Merge branch 'dev' into adding-transaction-timeout-option

Author: luffy1727

.github/workflows/lint-github-actions.yml

@@ -16,7 +16,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
-      - uses: reviewdog/action-actionlint@95395aac8c053577d0bc67eb7b74936c660c6f66 # v1.67.0
+      - uses: reviewdog/action-actionlint@f00ad0691526c10be4021a91b2510f0a769b14d0 # v1.68.0
         with:
           reporter: github-check
           fail_on_error: true

.github/workflows/changesets.yml .github/workflows/release.yml.github/workflows/changesets.yml renamed to .github/workflows/release.yml

@@ -1,4 +1,6 @@
-name: changesets
+# NOTE: This filename must be called release.yml. If changed, update the Trusted Publisher settings in npm
+
+name: Release
 
 on:
   push:
@@ -9,6 +11,9 @@ on:
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
+permissions:
+  id-token: write # Required for OIDC
+
 jobs:
   release:
     name: Release
@@ -33,8 +38,12 @@ jobs:
         uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
         with:
           node-version: lts/*
+          registry-url: https://registry.npmjs.org
           package-manager-cache: false
 
+      - name: Update npm # Need at least 11.5.1 for OIDC publishing
+        run: npm install -g npm@latest
+
       - name: Install Dependencies
         run: yarn
 
@@ -43,15 +52,6 @@ jobs:
           git config --global user.name 'Neo4j Team GraphQL'
           git config --global user.email 'team-graphql@neotechnology.com'
 
-      - name: Creating .npmrc
-        run: |
-          cat << EOF > "$HOME/.npmrc"
-            @neo4j:registry https://registry.npmjs.org
-            //registry.npmjs.org/:_authToken=$NPM_TOKEN
-          EOF
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-
       - name: Create release PR or release
         id: changesets
         uses: changesets/action@e0145edc7d9d8679003495b11f87bd8ef63c0cba # v1.5.3
@@ -63,16 +63,13 @@ jobs:
           setupGitUser: false
         env:
           GITHUB_TOKEN: ${{ secrets.NEO4J_TEAM_GRAPHQL_PERSONAL_ACCESS_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           YARN_ENABLE_IMMUTABLE_INSTALLS: false
           BRANCH: ${{ github.ref_name }}
 
   slack-notify:
     needs:
       - release
-
     if: ${{ needs.release.outputs.published == 'true' }}
-
     runs-on: ubuntu-latest
     strategy:
       matrix:

.github/workflows/reusable-codeql-analysis.yml

@@ -15,9 +15,9 @@ jobs:
           node-version: lts/*
           package-manager-cache: false
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@755f44910c12a3d7ca0d8c6e42c048b3362f7cec # v3
+        uses: github/codeql-action/init@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4
         with:
           config-file: ./.github/codeql/codeql-config.yml
           languages: javascript
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@755f44910c12a3d7ca0d8c6e42c048b3362f7cec # v3
+        uses: github/codeql-action/analyze@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4

package.json

@@ -25,8 +25,8 @@
     },
     "devDependencies": {
         "@tsconfig/node20": "20.1.6",
-        "@typescript-eslint/eslint-plugin": "8.46.0",
-        "@typescript-eslint/parser": "8.46.0",
+        "@typescript-eslint/eslint-plugin": "8.46.1",
+        "@typescript-eslint/parser": "8.46.1",
         "concurrently": "9.2.1",
         "dotenv": "17.2.3",
         "eslint": "8.57.1",
@@ -42,7 +42,7 @@
         "prettier": "3.6.2",
         "prettier-2": "npm:prettier@2.8.8",
         "set-tz": "0.2.0",
-        "ts-jest": "29.4.4",
+        "ts-jest": "29.4.5",
         "typescript": "5.9.3"
     },
     "packageManager": "yarn@4.10.3",

packages/graphql/package.json

@@ -47,7 +47,7 @@
         "@types/is-uuid": "1.0.2",
         "@types/jest": "30.0.0",
         "@types/jsonwebtoken": "9.0.10",
-        "@types/node": "22.18.9",
+        "@types/node": "22.18.10",
         "@types/pluralize": "0.0.33",
         "@types/randomstring": "1.3.0",
         "@types/semver": "7.7.1",
@@ -69,7 +69,7 @@
         "randomstring": "1.3.1",
         "rimraf": "6.0.1",
         "supertest": "7.1.4",
-        "ts-jest": "29.4.4",
+        "ts-jest": "29.4.5",
         "ts-node": "10.9.2",
         "typescript": "5.9.3",
         "ws": "8.18.3"
@@ -81,7 +81,7 @@
         "@graphql-tools/resolvers-composition": "^7.0.0",
         "@graphql-tools/schema": "^10.0.0",
         "@graphql-tools/utils": "10.9.1",
-        "@neo4j/cypher-builder": "2.8.0",
+        "@neo4j/cypher-builder": "2.8.1",
         "camelcase": "^6.3.0",
         "debug": "^4.3.4",
         "dot-prop": "^6.0.1",

packages/introspector/package.json

@@ -36,10 +36,10 @@
     "devDependencies": {
         "@neo4j/graphql": "^7.0.0",
         "@types/jest": "30.0.0",
-        "@types/node": "22.18.9",
+        "@types/node": "22.18.10",
         "@types/pluralize": "0.0.33",
         "jest": "30.2.0",
-        "ts-jest": "29.4.4",
+        "ts-jest": "29.4.5",
         "typescript": "5.9.3"
     },
     "dependencies": {