chore(deps): bump apollo from 2.5.9 to 2.5.14#5437
Conversation
Bumps `apollo` from 2.5.9 to 2.5.14. Updates `com.apollographql.apollo:apollo-coroutines-support` from 2.5.9 to 2.5.14 - [Release notes](https://github.com/apollographql/apollo-android/releases) - [Changelog](https://github.com/apollographql/apollo-kotlin/blob/main/CHANGELOG.md) - [Commits](apollographql/apollo-kotlin@v2.5.9...v2.5.14) Updates `com.apollographql.apollo:apollo-runtime` from 2.5.9 to 2.5.14 - [Release notes](https://github.com/apollographql/apollo-android/releases) - [Changelog](https://github.com/apollographql/apollo-kotlin/blob/main/CHANGELOG.md) - [Commits](apollographql/apollo-kotlin@v2.5.9...v2.5.14) --- updated-dependencies: - dependency-name: com.apollographql.apollo:apollo-coroutines-support dependency-version: 2.5.14 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: com.apollographql.apollo:apollo-runtime dependency-version: 2.5.14 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 3fc9088. Configure here.
| apollo2-runtime = { module = "com.apollographql.apollo:apollo-runtime", version.ref = "apollo" } | ||
| apollo3-kotlin = { module = "com.apollographql.apollo3:apollo-runtime", version = "3.8.2" } | ||
| apollo4-kotlin = { module = "com.apollographql.apollo:apollo-runtime", version = "4.1.1" } | ||
| apollo4-kotlin = { module = "com.apollographql.apollo:apollo-runtime", version = "2.5.14" } |
There was a problem hiding this comment.
Apollo 4 dependency accidentally downgraded to version 2.5.14
High Severity
Dependabot incorrectly changed apollo4-kotlin version from 4.1.1 to 2.5.14. Both apollo2-runtime and apollo4-kotlin share the same Maven coordinate (com.apollographql.apollo:apollo-runtime), so Dependabot treated them as the same dependency. The sentry-apollo-4 module imports Apollo 4-specific APIs (e.g., com.apollographql.apollo.network.http.HttpInterceptor, ApolloInterceptorChain) that don't exist in 2.x, so this change will break compilation of that module entirely.
Reviewed by Cursor Bugbot for commit 3fc9088. Configure here.


Bumps
apollofrom 2.5.9 to 2.5.14.Updates
com.apollographql.apollo:apollo-coroutines-supportfrom 2.5.9 to 2.5.14Release notes
Sourced from com.apollographql.apollo:apollo-coroutines-support's releases.
... (truncated)
Changelog
Sourced from com.apollographql.apollo:apollo-coroutines-support's changelog.
... (truncated)
Commits
0f30a14release 2.5.1453305e9removes safelisting doc from v2 branchdeee859update terminate and responseCallback methods to return Optional.absent() in ...a711e8fDoc: Fixed title in schema download instructions (#4473)b65d282version is now 2.5.14-SNAPSHOTb711ef9release 2.5.13461c5f7Fix #2818 (#4358)66cd446[release-2.x] fix converting introspection to SDL (#4316)b6defa3Update v2 docs now that v3 is available (#4296)89de9a6version is now 2.5.13-SNAPSHOTUpdates
com.apollographql.apollo:apollo-runtimefrom 2.5.9 to 2.5.14Release notes
Sourced from com.apollographql.apollo:apollo-runtime's releases.
... (truncated)
Changelog
Sourced from com.apollographql.apollo:apollo-runtime's changelog.
... (truncated)
Commits
0f30a14release 2.5.1453305e9removes safelisting doc from v2 branchdeee859update terminate and responseCallback methods to return Optional.absent() in ...a711e8fDoc: Fixed title in schema download instructions (#4473)b65d282version is now 2.5.14-SNAPSHOTb711ef9release 2.5.13461c5f7Fix #2818 (#4358)66cd446[release-2.x] fix converting introspection to SDL (#4316)b6defa3Update v2 docs now that v3 is available (#4296)89de9a6version is now 2.5.13-SNAPSHOTDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)