This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [graphql](https://redirect.github.com/graphql/graphql-js) | [`16.9.0`
-> `16.12.0`](https://renovatebot.com/diffs/npm/graphql/16.9.0/16.12.0)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/graphql/16.12.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/graphql/16.9.0/16.12.0?slim=true)
|

---

### Release Notes

<details>
<summary>graphql/graphql-js (graphql)</summary>

###
[`v16.12.0`](https://redirect.github.com/graphql/graphql-js/releases/tag/v16.12.0):
16.12.0

[Compare
Source](https://redirect.github.com/graphql/graphql-js/compare/v16.11.0...v16.12.0)

#### v16.12.0 (2025-11-01)

##### New Feature 🚀

-
[#&#8203;4482](https://redirect.github.com/graphql/graphql-js/pull/4482)
Implement changes for executable descriptions
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4493](https://redirect.github.com/graphql/graphql-js/pull/4493)
Backport schema coordinates
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))

##### Bug Fix 🐞

-
[#&#8203;4392](https://redirect.github.com/graphql/graphql-js/pull/4392)
Catch unhandled exception in abstract resolution
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))

##### Docs 📝

<details>
<summary> 28 PRs were merged </summary>

-
[#&#8203;4374](https://redirect.github.com/graphql/graphql-js/pull/4374)
docs: testing graphQL servers
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4376](https://redirect.github.com/graphql/graphql-js/pull/4376)
docs: type generation for graphql servers
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4380](https://redirect.github.com/graphql/graphql-js/pull/4380)
docs: add guides for custom scalars
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4381](https://redirect.github.com/graphql/graphql-js/pull/4381)
docs: anatomy of a resolver
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4382](https://redirect.github.com/graphql/graphql-js/pull/4382)
docs: understanding graphql errors
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4383](https://redirect.github.com/graphql/graphql-js/pull/4383)
docs: N+1 problem and DataLoader
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4391](https://redirect.github.com/graphql/graphql-js/pull/4391)
docs: cursor-based pagination guide
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4393](https://redirect.github.com/graphql/graphql-js/pull/4393)
docs: add page on abstract types
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4394](https://redirect.github.com/graphql/graphql-js/pull/4394)
docs: editorial on abstract types page
([@&#8203;benjie](https://redirect.github.com/benjie))
-
[#&#8203;4395](https://redirect.github.com/graphql/graphql-js/pull/4395)
docs: editorial for recent documentation updates
([@&#8203;benjie](https://redirect.github.com/benjie))
-
[#&#8203;4396](https://redirect.github.com/graphql/graphql-js/pull/4396)
docs: add page on authorization strategies
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4398](https://redirect.github.com/graphql/graphql-js/pull/4398)
docs: update "going to production" guide
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4399](https://redirect.github.com/graphql/graphql-js/pull/4399)
Update mutations-and-input-types.mdx
([@&#8203;roman-lakhnov](https://redirect.github.com/roman-lakhnov))
-
[#&#8203;4400](https://redirect.github.com/graphql/graphql-js/pull/4400)
Remove CJS from docs
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4401](https://redirect.github.com/graphql/graphql-js/pull/4401)
docs: add guide on directives
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4402](https://redirect.github.com/graphql/graphql-js/pull/4402)
docs: add guide for operation complexity controls
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4405](https://redirect.github.com/graphql/graphql-js/pull/4405)
docs: add guide on nullability
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4406](https://redirect.github.com/graphql/graphql-js/pull/4406)
docs: add guide on subscriptions
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4411](https://redirect.github.com/graphql/graphql-js/pull/4411)
docs: add guide on caching strategies
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4414](https://redirect.github.com/graphql/graphql-js/pull/4414)
docs: guide on scaling your API
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4416](https://redirect.github.com/graphql/graphql-js/pull/4416)
Editorial for
[#&#8203;4405](https://redirect.github.com/graphql/graphql-js/issues/4405)
(nullability) ([@&#8203;benjie](https://redirect.github.com/benjie))
-
[#&#8203;4417](https://redirect.github.com/graphql/graphql-js/pull/4417)
Indicate that field arguments should always be preferred over directives
([@&#8203;benjie](https://redirect.github.com/benjie))
-
[#&#8203;4418](https://redirect.github.com/graphql/graphql-js/pull/4418)
docs: trusted documents
([@&#8203;benjie](https://redirect.github.com/benjie))
-
[#&#8203;4419](https://redirect.github.com/graphql/graphql-js/pull/4419)
docs: cleanup and fixes
([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
-
[#&#8203;4436](https://redirect.github.com/graphql/graphql-js/pull/4436)
Suggestions for federation links
([@&#8203;Urigo](https://redirect.github.com/Urigo))
-
[#&#8203;4444](https://redirect.github.com/graphql/graphql-js/pull/4444)
Fix navigation
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4452](https://redirect.github.com/graphql/graphql-js/pull/4452)
fix(docs/mutations-and-input-types.mdx): root being inside of SDL
([@&#8203;alesculek](https://redirect.github.com/alesculek))
-
[#&#8203;4473](https://redirect.github.com/graphql/graphql-js/pull/4473)
docs: remove fourth permutation of the visit API
([@&#8203;janmeier](https://redirect.github.com/janmeier))

</details>

##### Polish 💅
*
[#&#8203;4453](https://redirect.github.com/graphql/graphql-js/pull/4453)
Remove oneof validation from values of correct type
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))

##### Internal 🏠
<details>
<summary> 3 PRs were merged </summary>

-
[#&#8203;4390](https://redirect.github.com/graphql/graphql-js/pull/4390)
Add the version support policy
([@&#8203;benjie](https://redirect.github.com/benjie))
-
[#&#8203;4412](https://redirect.github.com/graphql/graphql-js/pull/4412)
internal: use empty merge commit to clean up git diff from 16.x.x
([@&#8203;yaacovCR](https://redirect.github.com/yaacovCR))
-
[#&#8203;4479](https://redirect.github.com/graphql/graphql-js/pull/4479)
updated location of ModelSim gitignore file
([@&#8203;magicmark](https://redirect.github.com/magicmark))

</details>

##### Committers: 9
* Aleš Culek([@&#8203;alesculek](https://redirect.github.com/alesculek))
* Benjie([@&#8203;benjie](https://redirect.github.com/benjie))
* Jan Aagaard
Meier([@&#8203;janmeier](https://redirect.github.com/janmeier))
* Jovi De
Croock([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
* Mark Larah([@&#8203;magicmark](https://redirect.github.com/magicmark))
*
null([@&#8203;roman-lakhnov](https://redirect.github.com/roman-lakhnov))
* Sarah
Sanders([@&#8203;sarahxsanders](https://redirect.github.com/sarahxsanders))
* Uri Goldshtein([@&#8203;Urigo](https://redirect.github.com/Urigo))
* Yaacov Rydzinski
([@&#8203;yaacovCR](https://redirect.github.com/yaacovCR))

###
[`v16.11.0`](https://redirect.github.com/graphql/graphql-js/releases/tag/v16.11.0):
16.11.0

[Compare
Source](https://redirect.github.com/graphql/graphql-js/compare/v16.10.0...v16.11.0)

#### v16.11.0 (2025-04-26)

##### New Feature 🚀

-
[#&#8203;4363](https://redirect.github.com/graphql/graphql-js/pull/4363)
Ensure we validate for using nullable variables in oneOf input fields
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4366](https://redirect.github.com/graphql/graphql-js/pull/4366)
feat(execution): add max coercion errors option to execution context
([@&#8203;cristunaranjo](https://redirect.github.com/cristunaranjo))

##### Bug Fix 🐞

-
[#&#8203;4367](https://redirect.github.com/graphql/graphql-js/pull/4367)
fix(coerce-input-value): input object coercion rejects arrays
([@&#8203;cristunaranjo](https://redirect.github.com/cristunaranjo))

##### Docs 📝

<details>
<summary> 11 PRs were merged </summary>

-
[#&#8203;4310](https://redirect.github.com/graphql/graphql-js/pull/4310)
First draft for upgrade guide to v17
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4331](https://redirect.github.com/graphql/graphql-js/pull/4331)
fix sidebar for documentation and `/api-v16`
([@&#8203;dimaMachina](https://redirect.github.com/dimaMachina))
-
[#&#8203;4335](https://redirect.github.com/graphql/graphql-js/pull/4335)
Add cspell exception
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4340](https://redirect.github.com/graphql/graphql-js/pull/4340)
Improve flow of documentation around GraphiQL
([@&#8203;benjie](https://redirect.github.com/benjie))
-
[#&#8203;4343](https://redirect.github.com/graphql/graphql-js/pull/4343)
typofix: removes extra parenthesis from getting started code snippet
([@&#8203;rabahalishah](https://redirect.github.com/rabahalishah))
-
[#&#8203;4351](https://redirect.github.com/graphql/graphql-js/pull/4351)
fixed wrong variable name
([@&#8203;fto-dev](https://redirect.github.com/fto-dev))
-
[#&#8203;4352](https://redirect.github.com/graphql/graphql-js/pull/4352)
docs(getting-started): promises current links
([@&#8203;guspan-tanadi](https://redirect.github.com/guspan-tanadi))
-
[#&#8203;4368](https://redirect.github.com/graphql/graphql-js/pull/4368)
Update docs for execution options
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4369](https://redirect.github.com/graphql/graphql-js/pull/4369)
Correct some syntax
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4372](https://redirect.github.com/graphql/graphql-js/pull/4372)
Refactor every code-first example to leverage resolve
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4373](https://redirect.github.com/graphql/graphql-js/pull/4373)
docs: Update getting-started.mdx
([@&#8203;Shubhdeep12](https://redirect.github.com/Shubhdeep12))

</details>

##### Polish 💅
*
[#&#8203;4312](https://redirect.github.com/graphql/graphql-js/pull/4312)
Increase print/visit performance
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))

##### Internal 🏠
<details>
<summary> 4 PRs were merged </summary>

-
[#&#8203;4327](https://redirect.github.com/graphql/graphql-js/pull/4327)
Add redirect for /api
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4377](https://redirect.github.com/graphql/graphql-js/pull/4377)
Chore: bump setup-node
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4378](https://redirect.github.com/graphql/graphql-js/pull/4378)
Change to gqlConf 2025
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4379](https://redirect.github.com/graphql/graphql-js/pull/4379)
Add missing parenthesis
([@&#8203;benjie](https://redirect.github.com/benjie))

</details>

##### Committers: 8
* Benjie([@&#8203;benjie](https://redirect.github.com/benjie))
* Cris Naranjo
([@&#8203;cristunaranjo](https://redirect.github.com/cristunaranjo))
* Dimitri
POSTOLOV([@&#8203;dimaMachina](https://redirect.github.com/dimaMachina))
* Fatih Ozdemir([@&#8203;fto-dev](https://redirect.github.com/fto-dev))
* Guspan
Tanadi([@&#8203;guspan-tanadi](https://redirect.github.com/guspan-tanadi))
* Jovi De
Croock([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
* Rabah Ali
Shah([@&#8203;rabahalishah](https://redirect.github.com/rabahalishah))
* Shubhdeep
Chhabra([@&#8203;Shubhdeep12](https://redirect.github.com/Shubhdeep12))

###
[`v16.10.0`](https://redirect.github.com/graphql/graphql-js/releases/tag/v16.10.0):
16.10.0

[Compare
Source](https://redirect.github.com/graphql/graphql-js/compare/v16.9.0...v16.10.0)

#### v16.10.0 (2024-12-15)

##### New Feature 🚀

-
[#&#8203;4286](https://redirect.github.com/graphql/graphql-js/pull/4286)
fix: properly type `extensions` in GraphQLFormattedError
([@&#8203;tpoisseau](https://redirect.github.com/tpoisseau))
-
[#&#8203;4292](https://redirect.github.com/graphql/graphql-js/pull/4292)
Expose tokenCount on the DocumentNode
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))

##### Bug Fix 🐞

-
[#&#8203;4137](https://redirect.github.com/graphql/graphql-js/pull/4137)
backport(v16): Require non-empty directive locations
([#&#8203;4100](https://redirect.github.com/graphql/graphql-js/issues/4100))
([@&#8203;benjie](https://redirect.github.com/benjie))
-
[#&#8203;4168](https://redirect.github.com/graphql/graphql-js/pull/4168)
fix(validation): catch OverlappingFieldsCanBeMergedRule violations with
nested fragments
([@&#8203;sachindshinde](https://redirect.github.com/sachindshinde))
-
[#&#8203;4226](https://redirect.github.com/graphql/graphql-js/pull/4226)
Backport introspection type fix
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4291](https://redirect.github.com/graphql/graphql-js/pull/4291)
Address empty selection-set
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))

##### Docs 📝

<details>
<summary> 10 PRs were merged </summary>

-
[#&#8203;4240](https://redirect.github.com/graphql/graphql-js/pull/4240)
Convert from docusaurus to nextra
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4248](https://redirect.github.com/graphql/graphql-js/pull/4248)
Add content from
[graphql/graphql.github.io#1782](https://redirect.github.com/graphql/graphql.github.io/pull/1782)
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4249](https://redirect.github.com/graphql/graphql-js/pull/4249)
Styling fixes
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4256](https://redirect.github.com/graphql/graphql-js/pull/4256)
Various fixes to docs
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4279](https://redirect.github.com/graphql/graphql-js/pull/4279)
Solve some low hanging fruit in the documentation
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4283](https://redirect.github.com/graphql/graphql-js/pull/4283)
Add overview page and add stackblitz to tutorial
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4284](https://redirect.github.com/graphql/graphql-js/pull/4284)
Provide people with tabs so they can use classes as well
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4289](https://redirect.github.com/graphql/graphql-js/pull/4289)
Add note about defer/stream being v17
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4290](https://redirect.github.com/graphql/graphql-js/pull/4290)
Write about `@oneOf` in the graphql-js documentation
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
-
[#&#8203;4295](https://redirect.github.com/graphql/graphql-js/pull/4295)
Split up in v16 API documentation
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))

</details>

##### Internal 🏠
<details>
<summary> 4 PRs were merged </summary>

-
[#&#8203;4138](https://redirect.github.com/graphql/graphql-js/pull/4138)
Upgrade codecov action and pass token
([@&#8203;benjie](https://redirect.github.com/benjie))
-
[#&#8203;4139](https://redirect.github.com/graphql/graphql-js/pull/4139)
Fix codecov workflow
([@&#8203;benjie](https://redirect.github.com/benjie))
-
[#&#8203;4157](https://redirect.github.com/graphql/graphql-js/pull/4157)
Add GraphQLConf 2024 banner
([@&#8203;bignimbus](https://redirect.github.com/bignimbus))
-
[#&#8203;4193](https://redirect.github.com/graphql/graphql-js/pull/4193)
Upgrade deprecated actions
([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))

</details>

##### Committers: 5
* Benjie([@&#8203;benjie](https://redirect.github.com/benjie))
* Jeff
Auriemma([@&#8203;bignimbus](https://redirect.github.com/bignimbus))
* Jovi De
Croock([@&#8203;JoviDeCroock](https://redirect.github.com/JoviDeCroock))
* Sachin D.
Shinde([@&#8203;sachindshinde](https://redirect.github.com/sachindshinde))
* tpoisseau([@&#8203;tpoisseau](https://redirect.github.com/tpoisseau))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/cedarjs/cedar).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41OS4wIiwidXBkYXRlZEluVmVyIjoiNDIuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhbmdlc2V0cy1vayIsInJlbGVhc2U6ZGVwZW5kZW5jeSJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>