Bump the npm_and_yarn group with 4 updates

[dependabot]

Bumps the npm_and_yarn group with 4 updates: graphql, nanoid, next and cookie.

Updates graphql from 16.8.2 to 16.9.0

Release notes

Sourced from graphql's releases.

v16.9.0 (2024-06-21)

New Feature 🚀

• #4119 backport[v16]: Introduce "recommended" validation rules (@​benjie)
• #4122 backport[v16]: Enable passing values configuration to GraphQLEnumType as a thunk (@​benjie)
• #4124 backport[v16]: Implement OneOf Input Objects via @oneOf directive (@​benjie)

Committers: 1

• Benjie(@​benjie)

Commits

• 556a01e 16.9.0
• 6a1614c backport[v16]: Enable passing values configuration to GraphQLEnumType as a th...
• 29144f7 backport[v16]: Implement OneOf Input Objects via @oneOf directive (#4124)
• c35130e Revert error extension symbol (#4123)
• 29c1bff feat: allow defining symbol error extensions (#3730)
• c985c27 backport[v16]: Introduce "recommended" validation rules (#4119)
• See full diff in compare view

Updates nanoid from 3.3.8 to 5.0.9

Release notes

Sourced from nanoid's releases.

5.0.9

• Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).

5.0.8

• Reduced customAlphabet size (by @​kirillgroshkov).

5.0.7

• Fixed Parcel support (by @​WilhelmYakunin).

5.0.6

• Fixed React Native support.

Changelog

Sourced from nanoid's changelog.

5.0.9

• Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).

5.0.8

• Reduced customAlphabet size (by @​kirillgroshkov).

5.0.7

• Fixed Parcel support (by @​WilhelmYakunin).

5.0.6

• Fixed React Native support.

5.0.5

• Make browser’s version faster by increasing size a little (by Samuel Elgozi).

5.0.4

• Fixed CLI docs (by @​ilyaboka).

5.0.3

• Fixed CLI docs (by Chris Schmich).

5.0.2

• Fixed webcrypto import (by Divyansh Singh).

5.0.1

• Fixed Node.js 18 support.

5.0

• Moved Node.js version to Web Crypto API.
• Removed async API since Web Crypto API has only sync version.
• Removed Node.js 14 and 16 support.

4.0.2

• Added link to Github Sponsors.

4.0.1

• Reduced npm package size (by @​HiChen404).

4.0

• Removed CommonJS support. Nano ID 4 will work only with ESM applications. We will support 3.x branch with CommonJS for users who can’t migrate to ESM.
• Removed Node.js 10 and Node.js 12 support.
• Reduced npm package size.

Commits

• 65a38ac Release 5.0.9 version
• b00d120 Merge after 3.3.8 release
• cdc3edc Update size limit
• 0daa00f Additional fixes and tests for #508 (#509)
• 313a14e Update dependencies
• eb2db95 Fix size limit and linting
• 9da8f60 Fix pool pollution, infinite loop (#508)
• 009b5f4 Bump cross-spawn from 7.0.3 to 7.0.6 (#506)
• 6f5b507 Bump @​eslint/plugin-kit from 0.2.1 to 0.2.3 (#505)
• 55cd90d Release 5.0.8 version
• Additional commits viewable in compare view

Updates next from 14.2.17 to 14.2.18

Release notes

Sourced from next's releases.

v14.2.18

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• Fix: (third-parties) sendGTMEvent not queueing events before GTM init (#68683) (#72111)
• Ignore error pages for cache revalidate (#72412) (#72484)

Credits

Huge thanks to @​huozhi and @​ijjk for helping!

Commits

• 0491c2a v14.2.18
• 515055a Fix: (third-parties) sendGTMEvent not queueing events before GTM init (#68683...
• 91cbf9d Ignore error pages for cache revalidate (#72412) (#72484)
• See full diff in compare view

Updates cookie from 0.7.1 to 0.7.2

Release notes

Sourced from cookie's releases.

v0.7.2

Fixed

• Fix object assignment of hasOwnProperty (#177) bc38ffd

jshttp/cookie@v0.7.1...v0.7.2

Commits

• d19eaa1 0.7.2
• bc38ffd Fix object assignment of hasOwnProperty (#177)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml