[dependabot]

Bumps graphql from 16.8.0 to 17.0.2.

Release notes

Sourced from graphql's releases.

v17.0.2 (2026-07-03)

Bug Fix 🐞

• #4832 fix: detect default-value changes on input object fields (@​spokodev)

Polish 💅

• #4829 fix(mapSchemaConfig): fix context for schema argument mapper (@​yaacovCR)

Committers: 2

• null(@​spokodev)
• Yaacov Rydzinski (@​yaacovCR)

v17.0.1 (2026-06-16)

Bug Fix 🐞

• #4824 fix(diagnostics): emit asyncStart after promise settlement to match native tracePromise (@​logaretm)

Internal 🏠

• #4823 chore(npm): remove obsolete ESM-only package build (@​yaacovCR)
• #4825 chore(release): protect latest release channels (@​yaacovCR)

Committers: 2

• Abdelrahman Awad(@​logaretm)
• Yaacov Rydzinski (@​yaacovCR)

v17.0.0 (2026-06-15)

New Feature 🚀

• #4819 feat: graduate directives on directives (@​yaacovCR)

Bug Fix 🐞

• #4799 fix: raise request error on invalid fragment variables (@​yaacovCR)
• #4800 fix: apply directives when SDL contains type definitions and extensions with directives (@​yaacovCR)
• #4564 OneOf Inhabitability (@​jbellenger)
• #4814 fix(KnownDirectivesRule): locations for input field arguments in extensions (@​yaacovCR)
• #4726 feat(validation): reject directive definition cycles (@​yaacovCR)
• #4815 Revert "feat(validation): reject directive definition cycles (#4726)" (@​yaacovCR)

Docs 📝

• #4790 docs: minor diagnostics doc comment improvements (@​yaacovCR)
• #4791 fix: docs: polish diagnostics comments further (@​yaacovCR)
• #4793 docs: further improve general execution and tracing docs (@​yaacovCR)
• #4802 docs: correct extension field comments - v17 (@​yaacovCR)

... (truncated)

Commits

• 71606d7 chore(release): v17.0.2
• 101de34 fix: detect default-value changes on input object fields (#4832)
• 82da713 fix(mapSchemaConfig): fix context for schema argument mapper (#4829)
• 9617473 chore(release): v17.0.1
• 851bd6a chore(release): protect latest release channels (#4825)
• c471d36 fix(diagnostics): emit asyncStart after promise settlement to match native `t...
• 3f3895f chore(npm): remove obsolete ESM-only package build (#4823)
• c7e494a chore(release): v17.0.0
• d977f66 docs: post 17.rc-0 update (#4817)
• 39f865f docs: document @experimental_disableErrorPropagation (#4820)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for graphql since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[stale]

This issue has been automatically marked as stale because it has not had recent activity. This means nobody has this issue or feature request (anymore) and/or we have no intention of implementing/fixing this ourselves. It will be closed if no further activity occurs within 30 days, so if this is still relevant, please let us know!
And if it is, consider submitting a PR, pretty please?

[stale]

This issue has had 60 days of no activity. Since we assume nobody has this issue or feature request (anymore) and/or we have no intention of implementing/fixing this ourselves we will close this issue now.
You may reopen this issue if it's still a thing to be looked at, but please also consider submitting a PR if you do!

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.