search

grafbase / grafbase

The GraphQL Federation platform
https://grafbase.com
Mozilla Public License 2.0
1.13k stars 53 forks source link

Dependency Dashboard #3001

Open grafbase-ci opened 1 month ago

grafbase-ci commented 1 month ago

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

Other Branches

These updates are pending. To force PRs open, click the checkbox below.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

Detected dependencies

asdf
crates/federation-audit-tests/.tool-versions - `node 22.14.0`
bun
crates/integration-tests/data/sse-subgraph/package.json - `graphql-http ^1.22.1` - `graphql-sse ^2.5.3`
examples/trusted-documents-urql/package.json - `@apollo/generate-persisted-query-manifest ^1.2.2` - `@urql/exchange-persisted ^4.3.1` - `urql ^4.2.2` - `@types/bun ^1.2.5` - `typescript ^5.8.2`
cargo
Cargo.toml - `anyhow 1` - `ascii 1` - `askama 0.13` - `assert_matches 1` - `async-graphql 7.0.16` - `async-graphql-axum 7.0.16` - `async-graphql-parser 7.0.16` - `async-graphql-value 7.0.16` - `async-nats 0.40.0` - `async-sse 5` - `async-trait 0.1.88` - `axum 0.8.3` - `axum-extra 0.10` - `axum-server 0.7` - `backtrace 0.3` - `base64 0.22.1` - `bitflags 2` - `bitvec 1` - `blake3 1.8.1` - `bytes 1.10.1` - `case 1` - `cfg-if 1` - `chrono 0.4.40` - `clap 4` - `clap_complete 4.5` - `cli-table 0.5` - `clickhouse 0.13` - `colored 3` - `const_format 0.2` - `convert_case 0.8` - `criterion 0.5` - `crossbeam 0.8` - `crossbeam-queue 0.3` - `crossterm 0.29` - `ctor 0.4.1` - `cynic 3.10` - `cynic-codegen 3.10` - `cynic-introspection 3.10` - `cynic-parser 0.9.1` - `cynic-parser-deser 0.9.1` - `dashmap 6.1` - `datatest-stable 0.3.2` - `deadpool 0.12.2` - `derive_more 2.0.1` - `dirs 6` - `duct 0.13` - `duration-str 0.17` - `ed25519-compact 2` - `either 1.13` - `elliptic-curve 0.13` - `enumflags2 0.7` - `expect-test 1.5` - `fixedbitset 0.5` - `flate2 1` - `fnv 1.0.7` - `form_urlencoded 1` - `fslock 0.2` - `futures 0.3.31` - `futures-channel 0.3.31` - `futures-lite 2` - `futures-util 0.3.30` - `fxhash 0.2` - `governor 0.10` - `graphql-ws-client 0.11.1` - `handlebars 6.3.2` - `hashbrown 0.15` - `headers 0.4` - `heck 0.5` - `hex 0.4.3` - `http 1.3.1` - `http-body 1` - `http-body-util 0.1` - `httpsig 0.0.18` - `httpsig-hyper 0.0.18` - `hyper 1.6.0` - `hyper-util 0.1.11` - `ignore 0.4` - `im 15` - `indexmap 2.9.0` - `indicatif 0.17` - `indoc 2` - `inquire 0.7` - `insta 1.42.2` - `internment 0.8` - `itertools 0.14.0` - `jsonwebtoken 9.3.1` - `jwt-compact 0.8` - `lambda_http 0.14.0` - `lasso2 0.8` - `libtest-mimic 0.8` - `log 0.4` - `mediatype 0.19` - `miette 7.4` - `mimalloc 0.1` - `mime 0.3` - `mini-moka 0.10` - `minicbor 0.26` - `minicbor-serde 0.4.1` - `multipart-stream 0.1.2` - `notify 8` - `notify-debouncer-full 0.5` - `num-traits 0.2.19` - `openidconnect 4.0.0` - `opentelemetry 0.29` - `opentelemetry-appender-tracing 0.29` - `opentelemetry-aws 0.17` - `opentelemetry-otlp 0.29` - `opentelemetry-stdout 0.29` - `opentelemetry_sdk 0.29` - `ordered-float 5` - `os_type 2` - `p256 0.13` - `p384 0.13` - `paste 1` - `percent-encoding 2` - `petgraph 0.8` - `postcard 1` - `pprof 0.14` - `pretty_assertions 1` - `priority-queue 2` - `proc-macro2 1` - `prost 0.13.5` - `prost-types 0.13.5` - `quote 1` - `rand 0.9` - `rapidhash 1` - `redis 0.29.5` - `regex 1.11.1` - `reqwest 0.12.15` - `reqwest-eventsource 0.6` - `rmp-serde 1.3.0` - `rstest 0.25` - `rust_decimal 1.37.1` - `rustls 0.23.25` - `rustls-pemfile 2.2.0` - `rustls-webpki 0.103.1` - `schemars 0.8` - `semver 1` - `serde 1.0.219` - `serde-toml-merge 0.3` - `serde-value 0.7` - `serde_derive 1` - `serde_json 1.0.140` - `serde_path_to_error 0.1` - `serde_regex 1` - `serde_urlencoded 0.7` - `serde_valid 1` - `serde_with 3.12.0` - `sha2 0.10.8` - `similar 2.5` - `similar-asserts 1.5` - `size 0.5.0` - `slugify 0.1` - `sonic-rs 0.4.1` - `sqlx 0.8.3` - `strum 0.27.1` - `strum_macros 0.27.1` - `syn 2` - `syntect 5` - `tantivy 0.22` - `tar 0.4.44` - `temp-env 0.3` - `tempfile 3.16` - `thiserror 2.0.12` - `time 0.3.41` - `tokio 1.44.2` - `tokio-rustls 0.26.2` - `tokio-stream 0.1` - `tokio-tungstenite 0.26.2` - `tokio-util 0.7` - `toml 0.8` - `tonic 0.12.0` - `tonic13 0.13.0` - `tower 0.5.2` - `tower-http 0.6.2` - `tower-service 0.3.3` - `tracing 0.1.41` - `tracing-futures 0.2.5` - `tracing-opentelemetry 0.30` - `tracing-subscriber 0.3.19` - `tungstenite 0.26.2` - `ulid 1.2.1` - `unicode-normalization 0.1.24` - `url 2.5.4` - `urlencoding 2.1` - `uuid 1.16.0` - `walkdir 2` - `wasmparser 0.228.0` - `wasmtime 30` - `wasmtime-wasi 30` - `wasmtime-wasi-http 30` - `webbrowser 1` - `which 7.0.2` - `wiremock 0.6.3` - `wit-bindgen 0.41.0` - `xshell 0.2` - `zerocopy 0.8.24` - `zstd 0.13`
cli/Cargo.toml
cli/tests/integration/data/Cargo.toml - `base64 0.22` - `serde 1` - `serde_json 1`
cli/tests/integration/data/echo_extension/Cargo.toml
crates/engine/Cargo.toml
crates/engine/auth/Cargo.toml
crates/engine/axum/Cargo.toml
crates/engine/codegen/Cargo.toml
crates/engine/error/Cargo.toml
crates/engine/id-derives/Cargo.toml
crates/engine/id-newtypes/Cargo.toml
crates/engine/operation/Cargo.toml
crates/engine/query-solver/Cargo.toml
crates/engine/schema/Cargo.toml
crates/engine/walker/Cargo.toml
crates/extension-catalog/Cargo.toml
crates/extension/Cargo.toml
crates/federated-server/Cargo.toml
crates/federation-audit-tests/Cargo.toml
crates/gateway-config/Cargo.toml
crates/gqlint/Cargo.toml
crates/grafbase-graphql-introspection/Cargo.toml
crates/grafbase-hooks/Cargo.toml
crates/grafbase-hooks/derive/Cargo.toml
crates/grafbase-sdk/Cargo.toml - `document-features 0.2` - `fxhash 0.2` - `http 1` - `minicbor-serde 0.4.1` - `postcard 1` - `serde 1` - `serde_json 1` - `serde_urlencoded 0.7` - `thiserror 2` - `url 2` - `jaq-core 2.1.1` - `jaq-json 1.1.1` - `jaq-std 2.1.0` - `graphql-composition 0.6.2` - `graphql-federated-graph 0.6.1`
crates/grafbase-sdk/derive/Cargo.toml
crates/grafbase-sdk/mock/Cargo.toml
crates/graph-ref/Cargo.toml
crates/graphql-composition/Cargo.toml
crates/graphql-federated-graph/Cargo.toml
crates/graphql-lint/Cargo.toml
crates/graphql-mocks/Cargo.toml
crates/graphql-schema-diff/Cargo.toml
crates/graphql-schema-validation/Cargo.toml
crates/graphql-wrapping-types/Cargo.toml
crates/integration-tests/Cargo.toml - `sse-stream 0.1.3`
crates/integration-tests/data/extensions/Cargo.toml - `base64 0.22` - `http 1.3` - `rkyv 0.8` - `serde 1` - `serde_json 1` - `serde_with 3`
crates/integration-tests/data/extensions/crates/auth-08/Cargo.toml - `indoc 2` - `insta 1.42.2` - `tokio 1`
crates/integration-tests/data/extensions/crates/auth-09/Cargo.toml
crates/integration-tests/data/extensions/crates/authenticated/Cargo.toml
crates/integration-tests/data/extensions/crates/authorization-010/Cargo.toml
crates/integration-tests/data/extensions/crates/placeholder/Cargo.toml
crates/integration-tests/data/extensions/crates/resolver-08/Cargo.toml
crates/integration-tests/data/extensions/crates/resolver-09/Cargo.toml
crates/integration-tests/data/extensions/crates/selection-set-resolver-014/Cargo.toml
crates/mcp/Cargo.toml
crates/operation-checks/Cargo.toml
crates/operation-normalizer/Cargo.toml
crates/protoc-gen-grafbase-subgraph/Cargo.toml
crates/rolling-logger/Cargo.toml
crates/runtime-local/Cargo.toml
crates/runtime/Cargo.toml
crates/serde-dynamic-string/Cargo.toml
crates/telemetry/Cargo.toml
crates/wasi-component-loader/Cargo.toml
crates/wasi-component-loader/examples/Cargo.toml - `base64 0.22` - `serde 1` - `serde_json 1`
crates/wasi-component-loader/examples/extensions/caching-auth/Cargo.toml
crates/wasi-component-loader/examples/hooks/authorization/Cargo.toml - `serde 1.0.219` - `serde_json 1.0.140`
crates/wasi-component-loader/examples/hooks/dir_access/Cargo.toml
crates/wasi-component-loader/examples/hooks/error/Cargo.toml
crates/wasi-component-loader/examples/hooks/gateway_request_no_op/Cargo.toml
crates/wasi-component-loader/examples/hooks/http_client/Cargo.toml
crates/wasi-component-loader/examples/hooks/missing_hook/Cargo.toml
crates/wasi-component-loader/examples/hooks/response-hooks/Cargo.toml - `postcard 1.1.1`
crates/wasi-component-loader/examples/hooks/simple/Cargo.toml
crates/wasi-component-loader/examples/hooks/subgraph_request/Cargo.toml
examples/access-logs/hooks/Cargo.toml - `grafbase-hooks 0.4.1` - `postcard 1.1.1` - `serde 1.0.219` - `serde_json 1.0.140`
examples/access-logs/subgraph/Cargo.toml - `anyhow 1.0.97` - `async-graphql 7.0.16` - `async-graphql-axum 7.0.16` - `axum 0.8.3` - `postcard 1.1.1` - `serde_json 1.0.140` - `tokio 1.44.2`
examples/authorization/auth-service/Cargo.toml - `anyhow 1` - `axum 0.8.3` - `serde 1` - `serde_json 1.0.140` - `tokio 1.44.1` - `tower-http 0.6` - `tracing 0.1` - `tracing-subscriber 0.3.19`
examples/authorization/extensions/Cargo.toml - `http 1` - `itertools 0.14` - `postcard 1` - `rkyv 0.8` - `serde 1` - `serde_json 1` - `serde_with 3`
examples/authorization/extensions/authentication/Cargo.toml
examples/authorization/extensions/authorization/Cargo.toml
examples/authorization/extensions/common/Cargo.toml
examples/authorization/subgraphs/users/Cargo.toml - `anyhow 1` - `async-graphql 7` - `async-graphql-axum 7` - `axum 0.8` - `serde_json 1` - `tokio 1` - `tracing 0.1` - `tracing-subscriber 0.3.19`
examples/gateway-hooks/auth-service/Cargo.toml - `anyhow 1` - `axum 0.8.3` - `serde 1` - `serde_json 1.0.140` - `tokio 1.44.2` - `tower-http 0.6` - `tracing 0.1` - `tracing-subscriber 0.3.19`
examples/gateway-hooks/hooks/Cargo.toml - `anyhow 1.0.97` - `grafbase-hooks 0.4.1` - `itertools 0.14` - `serde 1.0.219` - `serde_json 1.0.140` - `tracing 0.1.41` - `tracing-subscriber 0.3.19`
examples/gateway-hooks/subgraphs/pets/Cargo.toml - `anyhow 1` - `async-graphql 7` - `async-graphql-axum 7` - `axum 0.8` - `rand 0.9` - `serde_json 1` - `time 0.3` - `tokio 1`
examples/gateway-hooks/subgraphs/users/Cargo.toml - `anyhow 1` - `async-graphql 7` - `async-graphql-axum 7` - `axum 0.8` - `serde_json 1` - `tokio 1`
examples/grpc-extension/server/Cargo.toml - `async-stream 0.3.6` - `prost 0.13` - `serde 1` - `serde_json 1` - `tokio 1` - `tokio-stream 0.1` - `tonic 0.13` - `tonic-build 0.13.0`
examples/hooks-template/Cargo.toml - `grafbase-hooks 0.4.1`
examples/query-plan/subgraph/Cargo.toml - `anyhow 1.0.97` - `async-graphql 7.0.16` - `async-graphql-axum 7.0.16` - `axum 0.8.3` - `postcard 1.1.1` - `serde_json 1.0.140` - `tokio 1.44.2`
examples/request-hook/request-hook/Cargo.toml - `grafbase-hooks 0.4.1`
examples/request-hook/subgraph/Cargo.toml - `anyhow 1.0.97` - `async-graphql 7.0.16` - `async-graphql-axum 7.0.16` - `axum 0.8.3` - `postcard 1.1.1` - `serde_json 1.0.140` - `tokio 1.44.2`
gateway/Cargo.toml
docker-compose
crates/integration-tests/compose.yaml - `oryd/hydra v2.2.0` - `oryd/hydra v2.2.0` - `oryd/hydra v2.2.0` - `oryd/hydra v2.2.0`
examples/access-logs/compose.yaml - `ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector-contrib 0.124.1`
examples/authorization/compose.yaml
examples/gateway-hooks/compose.yaml
examples/grpc-extension/docker-compose.yaml
examples/tracing/compose.yaml - `otel/opentelemetry-collector 0.123.0` - `grafana/grafana 11.6.0`
gateway/docker-compose.yml - `ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector-contrib 0.124.1` - `clickhouse/clickhouse-server 25.3.3-alpine`
dockerfile
crates/integration-tests/data/gqlgen-subgraph/Dockerfile - `golang 1.24`
crates/integration-tests/data/sse-subgraph/Dockerfile - `oven/bun 1.2.10-alpine`
examples/authorization/Dockerfile.gateway - `rust 1.86.0-alpine3.20`
examples/authorization/Dockerfile.rust - `rust 1.86.0-alpine3.20` - `alpine 3.21`
examples/gateway-hooks/Dockerfile.rust - `rust 1.86.0-alpine3.20` - `alpine 3.21`
examples/grpc-extension/Dockerfile - `rust 1.86-slim-bookworm`
examples/grpc-extension/Dockerfile.gateway - `rust 1.86.0-alpine3.20`
gateway/Dockerfile - `rust 1.86-bookworm`
github-actions
.github/actions/init_rust_job/action.yml - `dtolnay/rust-toolchain master`
.github/actions/install-rust/action.yml - `dtolnay/rust-toolchain master`
.github/actions/lint/action.yml - `uncenter/setup-taplo v1`
.github/actions/test/action.yml - `mozilla-actions/sccache-action v0.0.9@7d986dd989559c6ecdb630a3fd2557667be217ad` - `actions/setup-node v4` - `pnpm/action-setup v4@a7487c7e89a18df4991f7f222e4898a00d66ddda` - `docker/login-action v3` - `cargo-bins/cargo-binstall v1.12.3@63aaa5c1932cebabc34eceda9d92a70215dcead6`
.github/workflows/binaries.yml - `actions/checkout v4` - `dorny/paths-filter v3` - `actions/checkout v4` - `actions/checkout v4` - `actions/checkout v4` - `mozilla-actions/sccache-action v0.0.9@7d986dd989559c6ecdb630a3fd2557667be217ad` - `actions/checkout v4` - `docker/login-action v3` - `docker/login-action v3` - `depot/build-push-action v1` - `depot/build-push-action v1` - `actions/checkout v4` - `mozilla-actions/sccache-action v0.0.9@7d986dd989559c6ecdb630a3fd2557667be217ad` - `actions/upload-artifact v4` - `actions/upload-artifact v4` - `actions/upload-artifact v4` - `actions/upload-artifact v4` - `actions/checkout v4` - `mozilla-actions/sccache-action v0.0.9@7d986dd989559c6ecdb630a3fd2557667be217ad` - `ilammy/setup-nasm v1` - `actions/upload-artifact v4` - `actions/upload-artifact v4` - `actions/checkout v4` - `mozilla-actions/sccache-action v0.0.9@7d986dd989559c6ecdb630a3fd2557667be217ad` - `actions/upload-artifact v4` - `actions/upload-artifact v4` - `actions/upload-artifact v4` - `ravsamhq/notify-slack-action v2`
.github/workflows/build-gateway-chart.yml - `actions/checkout v4` - `dorny/paths-filter v3` - `actions/checkout v4` - `azure/setup-helm v4.3.0`
.github/workflows/cargo-hakari.yml - `actions/checkout v4` - `dorny/paths-filter v3` - `actions/checkout v4` - `taiki-e/install-action v2`
.github/workflows/federation-audit.yml - `actions/checkout v4` - `grafbase/what-rust-changed v0.2.0` - `dorny/paths-filter v3` - `actions/checkout v4` - `mozilla-actions/sccache-action v0.0.9@7d986dd989559c6ecdb630a3fd2557667be217ad` - `taiki-e/install-action v2` - `actions/setup-node v4` - `JarvusInnovations/background-action v1` - `mikepenz/action-junit-report v5.0.0-a03`
.github/workflows/gateway-partial-release.yml - `ravsamhq/notify-slack-action v2` - `actions/checkout v4` - `actions/download-artifact v4` - `actions/download-artifact v4` - `actions/download-artifact v4` - `actions/download-artifact v4` - `actions/download-artifact v4` - `softprops/action-gh-release v2`
.github/workflows/grafbase-partial-release.yml - `ravsamhq/notify-slack-action v2` - `actions/checkout v4` - `mikefarah/yq master` - `actions/download-artifact v4` - `actions/download-artifact v4` - `actions/download-artifact v4` - `actions/download-artifact v4` - `softprops/action-gh-release v2`
.github/workflows/protoc-gen-grafbase-subgraph-release.yml - `actions/checkout v4` - `actions/upload-artifact v4` - `actions/upload-artifact v4` - `actions/checkout v4` - `actions/download-artifact v4` - `softprops/action-gh-release v2`
.github/workflows/rust-prs.yml - `actions/checkout v4` - `grafbase/what-rust-changed v0.2.1` - `dorny/paths-filter v3` - `actions/checkout v4` - `actions/checkout v4` - `uncenter/setup-taplo v1` - `actions/checkout v4` - `mozilla-actions/sccache-action v0.0.9@7d986dd989559c6ecdb630a3fd2557667be217ad` - `actions/checkout v4` - `cargo-bins/cargo-binstall v1.12.3@63aaa5c1932cebabc34eceda9d92a70215dcead6` - `mozilla-actions/sccache-action v0.0.9@7d986dd989559c6ecdb630a3fd2557667be217ad` - `actions/upload-artifact v4` - `actions/upload-artifact v4` - `actions/checkout v4` - `mozilla-actions/sccache-action v0.0.9@7d986dd989559c6ecdb630a3fd2557667be217ad` - `taiki-e/install-action v2` - `actions/setup-node v4` - `pnpm/action-setup v4@a7487c7e89a18df4991f7f222e4898a00d66ddda` - `actions/download-artifact v4` - `actions/download-artifact v4` - `ilammy/setup-nasm v1` - `docker/login-action v3` - `depot/setup-action v1` - `depot/bake-action v1` - `depot/bake-action v1` - `actions/checkout v4` - `docker/login-action v3` - `docker/login-action v3` - `depot/build-push-action v1` - `actions/checkout v4` - `docker/login-action v3` - `docker/login-action v3` - `gacts/install-hurl v1` - `depot/setup-action v1` - `depot/bake-action v1` - `actions/checkout v4` - `mozilla-actions/sccache-action v0.0.9@7d986dd989559c6ecdb630a3fd2557667be217ad` - `taiki-e/install-action v2` - `docker/login-action v3` - `actions/checkout v4` - `depot/setup-action v1` - `depot/bake-action v1` - `arduino/setup-protoc v3`
gomod
crates/integration-tests/data/gqlgen-subgraph/go.mod - `go 1.24` - `github.com/99designs/gqlgen v0.17.70` - `github.com/gorilla/websocket v1.5.3` - `github.com/vektah/gqlparser/v2 v2.5.25`
examples/gqlgen-federation/go.mod - `go 1.23.8` - `go 1.24.2` - `github.com/99designs/gqlgen v0.17.70` - `github.com/99designs/gqlgen/_examples v0.0.0-20250421121721-eadb1dbe9512@eadb1dbe9512` - `github.com/vektah/gqlparser/v2 v2.5.25`
helm-values
gateway/helm/values.yaml
npm
cli/npm/aarch64-apple-darwin/package.json
cli/npm/aarch64-unknown-linux-musl/package.json
cli/npm/cli/package.json - `jest 29.7.0` - `@grafbase/cli-aarch64-apple-darwin ^0.92.0` - `@grafbase/cli-x86_64-pc-windows-msvc ^0.92.0` - `@grafbase/cli-x86_64-unknown-linux-musl ^0.92.0` - `@grafbase/cli-aarch64-unknown-linux-musl ^0.92.0`
cli/npm/x86_64-apple-darwin/package.json
cli/npm/x86_64-pc-windows-msvc/package.json
cli/npm/x86_64-unknown-linux-musl/package.json
examples/gqlgen-federation/package.json - `@apollo/client ^3.9.4` - `cross-fetch ^4.0.0` - `jest ^29.7.0` - `node-fetch ^3.3.2`
renovate-config-presets
.github/renovate.json
linear[bot] commented 1 month ago

GB-8871 Dependency Dashboard