Update dependency graphql to v16.13.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
graphql	16.9.0 → 16.13.1

---

Release Notes

graphql/graphql-js (graphql)

v16.13.1

Compare Source

v16.13.1 (2026-03-04)

Docs 📝

• #​4433 docs: move
  migrate from express graphql guide to graphqlJS docs
  (@​sarahxsanders)

Internal 🏠

• #​4608 internal:
  backport new release flow from 17.x.x
  (@​yaacovCR)

Committers: 2

• Sarah Sanders(@​sarahxsanders)
• Yaacov Rydzinski (@​yaacovCR)

v16.13.0

Compare Source

v16.12.0: 16.12.0

Compare Source

v16.12.0 (2025-11-01)

New Feature 🚀

• #​4482 Implement changes for executable descriptions (@​JoviDeCroock)
• #​4493 Backport schema coordinates (@​JoviDeCroock)

Bug Fix 🐞

• #​4392 Catch unhandled exception in abstract resolution (@​JoviDeCroock)

Docs 📝

28 PRs were merged

• #​4374 docs: testing graphQL servers (@​sarahxsanders)
• #​4376 docs: type generation for graphql servers (@​sarahxsanders)
• #​4380 docs: add guides for custom scalars (@​sarahxsanders)
• #​4381 docs: anatomy of a resolver (@​sarahxsanders)
• #​4382 docs: understanding graphql errors (@​sarahxsanders)
• #​4383 docs: N+1 problem and DataLoader (@​sarahxsanders)
• #​4391 docs: cursor-based pagination guide (@​sarahxsanders)
• #​4393 docs: add page on abstract types (@​sarahxsanders)
• #​4394 docs: editorial on abstract types page (@​benjie)
• #​4395 docs: editorial for recent documentation updates (@​benjie)
• #​4396 docs: add page on authorization strategies (@​sarahxsanders)
• #​4398 docs: update "going to production" guide (@​sarahxsanders)
• #​4399 Update mutations-and-input-types.mdx (@​roman-lakhnov)
• #​4400 Remove CJS from docs (@​JoviDeCroock)
• #​4401 docs: add guide on directives (@​sarahxsanders)
• #​4402 docs: add guide for operation complexity controls (@​sarahxsanders)
• #​4405 docs: add guide on nullability (@​sarahxsanders)
• #​4406 docs: add guide on subscriptions (@​sarahxsanders)
• #​4411 docs: add guide on caching strategies (@​sarahxsanders)
• #​4414 docs: guide on scaling your API (@​sarahxsanders)
• #​4416 Editorial for #​4405 (nullability) (@​benjie)
• #​4417 Indicate that field arguments should always be preferred over directives (@​benjie)
• #​4418 docs: trusted documents (@​benjie)
• #​4419 docs: cleanup and fixes (@​sarahxsanders)
• #​4436 Suggestions for federation links (@​Urigo)
• #​4444 Fix navigation (@​JoviDeCroock)
• #​4452 fix(docs/mutations-and-input-types.mdx): root being inside of SDL (@​alesculek)
• #​4473 docs: remove fourth permutation of the visit API (@​janmeier)

Polish 💅

• #​4453 Remove oneof validation from values of correct type (@​JoviDeCroock)

Internal 🏠

3 PRs were merged

• #​4390 Add the version support policy (@​benjie)
• #​4412 internal: use empty merge commit to clean up git diff from 16.x.x (@​yaacovCR)
• #​4479 updated location of ModelSim gitignore file (@​magicmark)

Committers: 9

• Aleš Culek(@​alesculek)
• Benjie(@​benjie)
• Jan Aagaard Meier(@​janmeier)
• Jovi De Croock(@​JoviDeCroock)
• Mark Larah(@​magicmark)
• null(@​roman-lakhnov)
• Sarah Sanders(@​sarahxsanders)
• Uri Goldshtein(@​Urigo)
• Yaacov Rydzinski (@​yaacovCR)

v16.11.0: 16.11.0

Compare Source

v16.11.0 (2025-04-26)

New Feature 🚀

• #​4363 Ensure we validate for using nullable variables in oneOf input fields (@​JoviDeCroock)
• #​4366 feat(execution): add max coercion errors option to execution context (@​cristunaranjo)

Bug Fix 🐞

• #​4367 fix(coerce-input-value): input object coercion rejects arrays (@​cristunaranjo)

Docs 📝

11 PRs were merged

• #​4310 First draft for upgrade guide to v17 (@​JoviDeCroock)
• #​4331 fix sidebar for documentation and /api-v16 (@​dimaMachina)
• #​4335 Add cspell exception (@​JoviDeCroock)
• #​4340 Improve flow of documentation around GraphiQL (@​benjie)
• #​4343 typofix: removes extra parenthesis from getting started code snippet (@​rabahalishah)
• #​4351 fixed wrong variable name (@​fto-dev)
• #​4352 docs(getting-started): promises current links (@​guspan-tanadi)
• #​4368 Update docs for execution options (@​JoviDeCroock)
• #​4369 Correct some syntax (@​JoviDeCroock)
• #​4372 Refactor every code-first example to leverage resolve (@​JoviDeCroock)
• #​4373 docs: Update getting-started.mdx (@​Shubhdeep12)

Polish 💅

• #​4312 Increase print/visit performance (@​JoviDeCroock)

Internal 🏠

4 PRs were merged

• #​4327 Add redirect for /api (@​JoviDeCroock)
• #​4377 Chore: bump setup-node (@​JoviDeCroock)
• #​4378 Change to gqlConf 2025 (@​JoviDeCroock)
• #​4379 Add missing parenthesis (@​benjie)

Committers: 8

• Benjie(@​benjie)
• Cris Naranjo (@​cristunaranjo)
• Dimitri POSTOLOV(@​dimaMachina)
• Fatih Ozdemir(@​fto-dev)
• Guspan Tanadi(@​guspan-tanadi)
• Jovi De Croock(@​JoviDeCroock)
• Rabah Ali Shah(@​rabahalishah)
• Shubhdeep Chhabra(@​Shubhdeep12)

v16.10.0: 16.10.0

Compare Source

v16.10.0 (2024-12-15)

New Feature 🚀

• #​4286 fix: properly type extensions in GraphQLFormattedError (@​tpoisseau)
• #​4292 Expose tokenCount on the DocumentNode (@​JoviDeCroock)

Bug Fix 🐞

• #​4137 backport(v16): Require non-empty directive locations (#​4100) (@​benjie)
• #​4168 fix(validation): catch OverlappingFieldsCanBeMergedRule violations with nested fragments (@​sachindshinde)
• #​4226 Backport introspection type fix (@​JoviDeCroock)
• #​4291 Address empty selection-set (@​JoviDeCroock)

Docs 📝

10 PRs were merged

• #​4240 Convert from docusaurus to nextra (@​JoviDeCroock)
• #​4248 Add content from graphql/graphql.github.io#1782 (@​JoviDeCroock)
• #​4249 Styling fixes (@​JoviDeCroock)
• #​4256 Various fixes to docs (@​JoviDeCroock)
• #​4279 Solve some low hanging fruit in the documentation (@​JoviDeCroock)
• #​4283 Add overview page and add stackblitz to tutorial (@​JoviDeCroock)
• #​4284 Provide people with tabs so they can use classes as well (@​JoviDeCroock)
• #​4289 Add note about defer/stream being v17 (@​JoviDeCroock)
• #​4290 Write about @oneOf in the graphql-js documentation (@​JoviDeCroock)
• #​4295 Split up in v16 API documentation (@​JoviDeCroock)

Internal 🏠

4 PRs were merged

• #​4138 Upgrade codecov action and pass token (@​benjie)
• #​4139 Fix codecov workflow (@​benjie)
• #​4157 Add GraphQLConf 2024 banner (@​bignimbus)
• #​4193 Upgrade deprecated actions (@​JoviDeCroock)

Committers: 5

• Benjie(@​benjie)
• Jeff Auriemma(@​bignimbus)
• Jovi De Croock(@​JoviDeCroock)
• Sachin D. Shinde(@​sachindshinde)
• tpoisseau(@​tpoisseau)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud