fix(deps): update dependency graphql to v17

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
graphql	^16.9.0 → ^17.0.0

---

Release Notes

graphql/graphql-js (graphql)

v17.0.0

Compare Source

v17.0.0 (2026-06-15)

New Feature 🚀

• #​4819 feat: graduate directives on directives (@​yaacovCR)

Bug Fix 🐞

• #​4799 fix: raise request error on invalid fragment variables (@​yaacovCR)
• #​4800 fix: apply directives when SDL contains type definitions and extensions with directives (@​yaacovCR)
• #​4564 OneOf Inhabitability (@​jbellenger)
• #​4814 fix(KnownDirectivesRule): locations for input field arguments in extensions (@​yaacovCR)
• #​4726 feat(validation): reject directive definition cycles (@​yaacovCR)
• #​4815 Revert "feat(validation): reject directive definition cycles (#​4726)" (@​yaacovCR)

Docs 📝

11 PRs were merged

• #​4790 docs: minor diagnostics doc comment improvements (@​yaacovCR)
• #​4791 fix: docs: polish diagnostics comments further (@​yaacovCR)
• #​4793 docs: further improve general execution and tracing docs (@​yaacovCR)
• #​4802 docs: correct extension field comments - v17 (@​yaacovCR)
• #​4805 docs: publish fixed extensions comments (@​yaacovCR)
• #​4807 docs: add prettier for jsdoc examples (@​yaacovCR)
• #​4435 Subscriptions docs suggestions (@​Urigo)
• #​4811 docs: fix a few indentations inside string literals (@​yaacovCR)
• #​4813 internal: docs update (@​yaacovCR)
• #​4820 docs: document @experimental_disableErrorPropagation (@​yaacovCR)
• #​4817 docs: post 17.rc-0 update (@​yaacovCR)

Polish 💅

2 PRs were merged

• #​4809 internal: use prettier for non-generated website files (@​yaacovCR)
• #​4812 polish: fix stream test cases (@​yaacovCR)

Internal 🏠

6 PRs were merged

• #​4795 chore: move website publishing from 16.x.x to 17.x.x (@​yaacovCR)
• #​4796 internal: fix broken npm/deno deployments (@​yaacovCR)
• #​4797 ci: update GitHub Actions versions (@​yaacovCR)
• #​4806 internal: update frontmatter (@​yaacovCR)
• #​4808 intenral: fix ci badge (@​yaacovCR)
• #​4810 internal: add prettier:examples to lint-staged (@​yaacovCR)

Committers: 3

• James Bellenger(@​jbellenger)
• Uri Goldshtein(@​Urigo)
• Yaacov Rydzinski (@​yaacovCR)

v16.14.2

Compare Source

v16.14.2 (2026-06-09)

Docs 📝

7 PRs were merged

• #​4782 docs: update API (@​yaacovCR)
• #​4783 docs: website review (@​yaacovCR)
• #​4788 docs: add Node.js tracing channels guide (@​logaretm)
• #​4789 docs: overhaul index and update/add additional migration guides (@​yaacovCR)
• #​4792 docs: remove extra asterisks from single line jsdoc comments (@​yaacovCR)
• #​4794 docs: refresh website with broader execution/tracing update (@​yaacovCR)
• #​4801 docs: correct extension field comments - v16 (@​yaacovCR)

Polish 💅

• #​4787 docs: update documentation for v17 release candidate (@​yaacovCR)

Committers: 2

• Abdelrahman Awad(@​logaretm)
• Yaacov Rydzinski (@​yaacovCR)

v16.14.1

Compare Source

v16.14.1 (2026-06-02)

Docs 📝

9 PRs were merged

• #​4737 docs: refresh upgrade guide and v17 topics (@​yaacovCR)
• #​4741 docs: add v16 API docs lint coverage (@​yaacovCR)
• #​4748 docs: update banner (@​yaacovCR)
• #​4750 docs: use api docs generated from inline jsdoc comments (@​yaacovCR)
• #​4754 docs: update website caniuse-lite data (@​yaacovCR)
• #​4755 docs: hide internal type member __validationErrors (@​yaacovCR)
• #​4757 docs: fix inline examples, deprecation descriptions, type category (@​yaacovCR)
• #​4759 docs: fix static export redirect config (@​yaacovCR)
• #​4767 docs: fix Post_body example variable (@​fallintoplace)

Polish 💅

• #​4738 chore(tests): add test for directive extensions without flag enabled (@​yaacovCR)

Internal 🏠

• #​4778 fix: generated version documentation (@​yaacovCR)

Committers: 2

• Minh Vu(@​fallintoplace)
• Yaacov Rydzinski (@​yaacovCR)

v16.14.0

Compare Source

v16.14.0 (2026-05-03)

New Feature 🚀

• #​4317 Allow configuration of the ofType introspection depth (@​Nols1000)
• #​4521 Add experimental support for directives on directive definitions (@​BoD)

Bug Fix 🐞

• #​4652 Fix valueFromAST variable own-property checks
  (@​abishekgiri)

Docs 📝

• #​4706 Fix mistake in GraphQLError guidance (@​benjie)

Committers: 4

• Abishek Kumar Giri(@​abishekgiri)
• Benjie(@​benjie)
• Benoit 'BoD' Lubek(@​BoD)
• Nils-Börge Margotti(@​Nols1000)

v16.13.2

Compare Source

v16.13.1

Compare Source

v16.13.0

Compare Source

v16.12.0

Compare Source

v16.11.0

Compare Source

v16.10.0: 16.10.0

Compare Source

v16.10.0 (2024-12-15)

New Feature 🚀

• #​4286 fix: properly type extensions in GraphQLFormattedError (@​tpoisseau)
• #​4292 Expose tokenCount on the DocumentNode (@​JoviDeCroock)

Bug Fix 🐞

• #​4137 backport(v16): Require non-empty directive locations (#​4100) (@​benjie)
• #​4168 fix(validation): catch OverlappingFieldsCanBeMergedRule violations with nested fragments (@​sachindshinde)
• #​4226 Backport introspection type fix (@​JoviDeCroock)
• #​4291 Address empty selection-set (@​JoviDeCroock)

Docs 📝

10 PRs were merged

• #​4240 Convert from docusaurus to nextra (@​JoviDeCroock)
• #​4248 Add content from graphql/graphql.github.io#1782 (@​JoviDeCroock)
• #​4249 Styling fixes (@​JoviDeCroock)
• #​4256 Various fixes to docs (@​JoviDeCroock)
• #​4279 Solve some low hanging fruit in the documentation (@​JoviDeCroock)
• #​4283 Add overview page and add stackblitz to tutorial (@​JoviDeCroock)
• #​4284 Provide people with tabs so they can use classes as well (@​JoviDeCroock)
• #​4289 Add note about defer/stream being v17 (@​JoviDeCroock)
• #​4290 Write about @oneOf in the graphql-js documentation (@​JoviDeCroock)
• #​4295 Split up in v16 API documentation (@​JoviDeCroock)

Internal 🏠

4 PRs were merged

• #​4138 Upgrade codecov action and pass token (@​benjie)
• #​4139 Fix codecov workflow (@​benjie)
• #​4157 Add GraphQLConf 2024 banner (@​bignimbus)
• #​4193 Upgrade deprecated actions (@​JoviDeCroock)

Committers: 5

• Benjie(@​benjie)
• Jeff Auriemma(@​bignimbus)
• Jovi De Croock(@​JoviDeCroock)
• Sachin D. Shinde(@​sachindshinde)
• tpoisseau(@​tpoisseau)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: challenges/apollo/package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm warn ERESOLVE overriding peer dependency
npm warn While resolving: @apollo/cache-control-types@1.0.3
npm warn Found: graphql@17.0.1
npm warn node_modules/graphql
npm warn   graphql@"^17.0.0" from the root project
npm warn   4 more (@graphql-tools/merge, @graphql-tools/schema, ...)
npm warn
npm warn Could not resolve dependency:
npm warn peer graphql@"14.x || 15.x || 16.x" from @apollo/cache-control-types@1.0.3
npm warn node_modules/@apollo/cache-control-types
npm warn   @apollo/cache-control-types@"^1.0.3" from @apollo/server@4.11.0
npm warn   node_modules/@apollo/server
npm warn
npm warn Conflicting peer dependency: graphql@16.14.2
npm warn node_modules/graphql
npm warn   peer graphql@"14.x || 15.x || 16.x" from @apollo/cache-control-types@1.0.3
npm warn   node_modules/@apollo/cache-control-types
npm warn     @apollo/cache-control-types@"^1.0.3" from @apollo/server@4.11.0
npm warn     node_modules/@apollo/server
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: @apollo/server@4.11.0
npm error Found: graphql@17.0.1
npm error node_modules/graphql
npm error   graphql@"^17.0.0" from the root project
npm error   peer graphql@"^14.0.0 || ^15.0.0 || ^16.0.0 || ^17.0.0" from @graphql-tools/merge@8.4.2
npm error   node_modules/@graphql-tools/merge
npm error     @graphql-tools/merge@"^8.4.1" from @graphql-tools/schema@9.0.19
npm error     node_modules/@graphql-tools/schema
npm error       @graphql-tools/schema@"^9.0.0" from @apollo/server@4.11.0
npm error       node_modules/@apollo/server
npm error         @apollo/server@"^4.11.0" from the root project
npm error   3 more (@graphql-tools/schema, @graphql-tools/utils, @graphql-typed-document-node/core)
npm error
npm error Could not resolve dependency:
npm error peer graphql@"^16.6.0" from @apollo/server@4.11.0
npm error node_modules/@apollo/server
npm error   @apollo/server@"^4.11.0" from the root project
npm error
npm error Conflicting peer dependency: graphql@16.14.2
npm error node_modules/graphql
npm error   peer graphql@"^16.6.0" from @apollo/server@4.11.0
npm error   node_modules/@apollo/server
npm error     @apollo/server@"^4.11.0" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-06-16T23_55_47_712Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-06-16T23_55_47_712Z-debug-0.log