Bump @graphql-codegen/plugin-helpers from 7.3.0 to 7.4.0 in the npm-minor group across 1 directory

[dependabot]

Bumps the npm-minor group with 1 update in the / directory: @graphql-codegen/plugin-helpers.

Updates @graphql-codegen/plugin-helpers from 7.3.0 to 7.4.0

Changelog

Sourced from @​graphql-codegen/plugin-helpers's changelog.

7.4.0

Minor Changes

• #10994 1d1153b Thanks @​eddeee888! - Type oldVisit's return value instead of returning any. For a DocumentNode, the result is now OldVisitDocumentResult, whose definitions are unknown[] because leave visitors can replace each definition with any value (usually a string), and definitions without a leave visitor stay as AST nodes. When a Document leave visitor returns its own value, pass its type as oldVisit<TResult>(...). For other roots, the result is unknown unless TResult is given.

  Code that used the result as any, for example const definitions: string[] = result.definitions, now needs to filter for strings, cast (result.definitions as string[]), or pass oldVisit<any>(...). Runtime behavior and generated output are unchanged.

Commits

• 4e8654d chore(release): update monorepo packages versions (#10987)
• 1d1153b [plugin-helpers] feat: type oldVisit's return value and fix typed-document-no...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

Note

Low Risk
Dependency-only bump with no runtime logic changes; minor risk is TypeScript compile failures if other oldVisit call sites assumed any.

Overview
Bumps @graphql-codegen/plugin-helpers from 7.3.0 to 7.4.0 in packages/graphql-codegen-plugin and packages/graphql, with the matching pnpm-lock.yaml resolution updates across the GraphQL Codegen dependency tree.

There are no application or plugin source changes in this diff—only version specifier and lockfile churn. The 7.4.0 release mainly tightens TypeScript types for oldVisit (return value is no longer implicitly any); local usage in documents-plugin.ts already treats definitions as unknown and filters for strings, so behavior should stay the same while builds may get stricter typing.

^{Reviewed by Cursor Bugbot for commit 5280871. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​graphql-codegen/​plugin-helpers@​7.3.0 ⏵ 7.4.0	+1		+1	+1

View full report