build(deps): bump @apollo/client from 4.2.5 to 4.2.6 in the graphql group across 1 directory

[dependabot]

Bumps the graphql group with 1 update in the / directory: @apollo/client.

Updates @apollo/client from 4.2.5 to 4.2.6

Release notes

Sourced from @​apollo/client's releases.

@​apollo/client@​4.2.6

Patch Changes

• #13315 a406cc9 Thanks @​fallintoplace! - Prevent relay multipart subscriptions from issuing a fetch request after serializing the request body fails.

• #13307 abd0781 Thanks @​wolfie! - Speed up cache writes by avoiding a full AST visit of every written field to detect @stream. The check now runs only when the result carries stream info, and only inspects the field node's own directives. As a result, fields that merely contain @stream on a nested field are no longer treated as streamed themselves and now overwrite existing lists like regular fields instead of merging chunk-wise.

Changelog

Sourced from @​apollo/client's changelog.

4.2.6

Patch Changes

• #13315 a406cc9 Thanks @​fallintoplace! - Prevent relay multipart subscriptions from issuing a fetch request after serializing the request body fails.

• #13307 abd0781 Thanks @​wolfie! - Speed up cache writes by avoiding a full AST visit of every written field to detect @stream. The check now runs only when the result carries stream info, and only inspects the field node's own directives. As a result, fields that merely contain @stream on a nested field are no longer treated as streamed themselves and now overwrite existing lists like regular fields instead of merging chunk-wise.

Commits

• f934b60 Version Packages (#13316)
• 06b696c chore(deps): update actions/checkout action to v7 (#13294)
• 0b914cc chore(deps): update actions/cache action to v6 (#13312)
• a406cc9 Guard relay multipart fetch after stringify failure (#13315)
• abd0781 Only check the field's own directives for @​stream during cache writes (#13307)
• efc2b7d chore(deps): update dependency @​graphql-tools/schema to v10.0.34 (#13314)
• 4aba2f6 chore(deps): update all dependencies - patch updates (#13311)
• 8408a6d Version Packages (#13309)
• 9e2c668 Add back prepack script (#13308)
• 02eafde Version Packages (#13306)
• Additional commits viewable in compare view

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/@apollo/client	4.2.6	🟢 6.8	Details Check Score Reason Code-Review 🟢 3 Found 7/22 approved changesets -- score normalized to 3 Maintained 🟢 10 30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions 🟢 6 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 License 🟢 10 license file detected Branch-Protection 🟢 3 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected Fuzzing ⚠️ 0 project is not fuzzed SAST 🟢 8 SAST tool is not run on all commits -- score normalized to 8

Scanned Files

• package.json

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud