Skip to content

chore: dependency upgrades (pg, graphql, @types/pg, aws-sdk, etc.)#774

Merged
pyramation merged 3 commits intomainfrom
upgrades/mar-3
Mar 4, 2026
Merged

chore: dependency upgrades (pg, graphql, @types/pg, aws-sdk, etc.)#774
pyramation merged 3 commits intomainfrom
upgrades/mar-3

Conversation

@pyramation
Copy link
Contributor

@pyramation pyramation commented Mar 4, 2026

Summary

Bulk dependency upgrades across the monorepo. Key version bumps:

Package From To
pg 8.17.1 8.19.0
@types/pg 8.16.0 8.18.0
graphql ^16.9.0 / 15.10.1 / 16.12.0 16.13.0
@aws-sdk/client-s3 / lib-storage 3.958–3.971 3.1001.0
@tanstack/react-query 5.90.19–20 5.90.21
react / react-dom 19.2.3 19.2.4
oxfmt 0.26.0 0.36.0
@babel/generator / types 7.28.6 7.29.x
inflekt 0.3.0–0.3.1 0.3.3

Build fixes

  • Added "graphql": "16.13.0" to pnpm.overrides: The lockfile was resolving graphql to both 16.12.0 and 16.13.0 across workspace packages, creating two separate @dataplan/pg instances with incompatible PgExecutor private types. This caused the graphile-misc-plugins build to fail with TS2345.
  • Updated connectPromise type in pgsql-client: @types/pg@8.18.0 corrected Client.connect() return type from Promise<void> to Promise<Client> (matching what the runtime always returned). Updated the field type accordingly — no behavioral change, only the type annotation.

Review & Testing Checklist for Human

  • Verify pnpm.overrides graphql pin is acceptable: It's pinned to "16.13.0" (exact), not a range. Future upgrades will need to update this override. Consider whether "^16.13.0" would be more appropriate (though it may re-introduce duplication).
  • Verify oxfmt 0.26 → 0.36 compatibility: This is a large major version jump for a code formatting tool used in graphql/codegen. Spot-check that codegen output is still correct.
  • Verify @aws-sdk 3.971 → 3.1001 compatibility: Large version jump for S3 uploads. Confirm upload functionality still works.
  • Smoke test pgsql-client connection behavior: The connectPromise type change is type-only, but worth a quick manual check that DB connections work as expected.
  • Verify graphql 15.10.1 → 16.13.0 in introspectron and codegen-integration: These packages jumped a major version of graphql. Check for any schema introspection or codegen behavioral differences.

Notes

  • CI passes (41/41 checks green).
  • The examples/codegen-integration package changed graphql from 15.10.1 to 16.13.0 — this is a major version jump worth extra scrutiny.

Requested by: @pyramation
Link to Devin Session

…n type

- Add graphql@16.13.0 to pnpm.overrides to force single version resolution
  (was resolving to both 16.12.0 and 16.13.0, causing duplicate @dataplan/pg
  instances with incompatible PgExecutor private types)
- Fix pgsql-client connectPromise type: pg@8.19.0 changed Client.connect()
  return type from Promise<void> to Promise<Client>
…=> {})

Updated the type annotation to match @types/pg@8.18.0 where Client.connect()
now correctly returns Promise<Client> (was incorrectly typed as Promise<void>
in @types/pg@8.16.0). No behavioral change — the runtime always returned
Promise<Client>.
@devin-ai-integration devin-ai-integration bot changed the title upgrades chore: dependency upgrades (pg, graphql, @types/pg, aws-sdk, etc.) Mar 4, 2026
@pyramation pyramation merged commit 7a57152 into main Mar 4, 2026
43 checks passed
@pyramation pyramation deleted the upgrades/mar-3 branch March 4, 2026 07:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant