Skip to content

fix(deps)(deps): bump the dependencies group with 5 updates - #1907

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-904aad2a42
Oct 29, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-904aad2a42

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 5 updates:

Package From To
@graphql-tools/schema 11.0.6 11.0.7
react-native-qrcode-svg 6.3.27 6.3.32
@typescript-eslint/eslint-plugin 8.72.0 8.72.1
@typescript-eslint/parser 8.72.0 8.72.1
typescript-eslint 8.72.0 8.72.1

Updates @graphql-tools/schema from 11.0.6 to 11.0.7

Changelog

Sourced from @​graphql-tools/schema's changelog.

11.0.7

Patch Changes

  • #8601 902d870 Thanks @​ardatan! - mergeSchemas and makeExecutableSchema now accept onFieldTypeConflict, the same callback mergeTypeDefs already had.

    When two schemas define the same field with different types, default merge throws. When only nullability differs, it keeps the earlier type.

    # first schema
    type Post {
      id: ID!
      title: String!
      content: String!
      published: Boolean!
    }
    second schema
    type Post {
    id: ID!
    title: String
    content: Int
    fieldA: Int
    fieldB: String
    }

    content: String! vs content: Int throws. title: String! vs title: String keeps String!.

    mergeSchemas({
      schemas: [firstSchema, secondSchema],
      onFieldTypeConflict: (_existing, incoming) => incoming,
    });

    The merged Post takes title: String and content: Int from the second schema, keeps published from the first, and adds fieldA / fieldB. Types that exist on only one schema, such as User on the first, stay.

    The same callback applies to field arguments. Returning the incoming field uses the second schema's argument types and still keeps arguments that exist on only one side. Returning the existing field with reverseArguments: true keeps the first schema's argument types and still appends new arguments.

  • Updated dependencies [6da2904, 7770067, f956bfe]:

    • @​graphql-tools/utils@​13.2.0
    • @​graphql-tools/merge@​10.0.7
Commits
  • 1f47fd6 chore(release): update monorepo packages versions (#8599)
  • f956bfe fix(utils): coerce singleton list inputs, including empty string (#8608)
  • 902d870 feat(schema): expose onFieldTypeConflict on mergeSchemas (#8601)
  • See full diff in compare view

Updates react-native-qrcode-svg from 6.3.27 to 6.3.32

Commits
  • 8ffc7de Update package.json version to 6.3.32
  • fdba087 Update package-lock.json version to 6.3.32
  • c6934ef Merge pull request #277 from Expensify/claude-removeNodeForge
  • 643a9b2 Merge remote-tracking branch 'origin/main' into claude-removeNodeForge
  • f1ff05f Update package.json version to 6.3.31
  • 33a0416 Update package-lock.json version to 6.3.31
  • 560a757 Merge pull request #265 from Expensify/claude-braceExpansionVulnerabilities
  • 2620e4a Update package.json version to 6.3.30
  • d668945 Update package-lock.json version to 6.3.30
  • e318f06 Merge pull request #282 from Expensify/claude-bumpPicomatch
  • Additional commits viewable in compare view

Updates @typescript-eslint/eslint-plugin from 8.72.0 to 8.72.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 4ad6b75 chore(release): publish 8.72.1
  • 7757694 chore: cleanup typecheck & build and fix race condition (#13071)
  • 1166ba2 chore(type-utils): detect methods in isTypeReadonly without reading the inter...
  • 2f0343a fix(eslint-plugin): [no-unnecessary-type-assertion] bound recursive type trav...
  • c49d287 chore: [ci] test on oldest supported TS version (#13024)
  • 594fe28 fix(eslint-plugin): [no-unnecessary-condition] false positives on unresolved ...
  • See full diff in compare view

Updates @typescript-eslint/parser from 8.72.0 to 8.72.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.72.1 (2026-10-26)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates typescript-eslint from 8.72.0 to 8.72.1

Release notes

Sourced from typescript-eslint's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
  • eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
  • typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.72.1 (2026-10-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@graphql-tools/schema](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/schema) | `11.0.6` | `11.0.7` |
| [react-native-qrcode-svg](https://github.com/Expensify/react-native-qrcode-svg) | `6.3.27` | `6.3.32` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.72.0` | `8.72.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.72.0` | `8.72.1` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.72.0` | `8.72.1` |


Updates `@graphql-tools/schema` from 11.0.6 to 11.0.7
- [Release notes](https://github.com/ardatan/graphql-tools/releases)
- [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/schema/CHANGELOG.md)
- [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/schema@11.0.7/packages/schema)

Updates `react-native-qrcode-svg` from 6.3.27 to 6.3.32
- [Release notes](https://github.com/Expensify/react-native-qrcode-svg/releases)
- [Commits](Expensify/react-native-qrcode-svg@6.3.27...6.3.32)

Updates `@typescript-eslint/eslint-plugin` from 8.72.0 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.72.0 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/parser)

Updates `typescript-eslint` from 8.72.0 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@graphql-tools/schema"
  dependency-version: 11.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: react-native-qrcode-svg
  dependency-version: 6.3.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file security Security related issue labels Oct 29, 2026
@github-actions
github-actions Bot merged commit 8d55cab into main Oct 29, 2026
10 of 24 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file security Security related issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants