refactor: Bump linkify-it and graphiql

[dependabot]

Bumps linkify-it to 5.0.1 and updates ancestor dependency graphiql. These dependencies need to be updated together.

Updates linkify-it from 3.0.3 to 5.0.1

Changelog

Sourced from linkify-it's changelog.

5.0.1 / 2026-05-23

• Fixed DoS in fuzzy links/emails search.
• Reworked search logic - check each pattern separate, use g regexes instead of slice.
• Removed internal cache - useless overcomplication.

5.0.0 / 2023-12-01

• Rewrite to ESM.

4.0.1 / 2022-05-02

• Fix http:// incorrectly returned as a link by matchStart.

4.0.0 / 2022-04-22

• Add matchAtStart method to match full URLs at the start of the string.
• Fixed paired symbols ((), {}, "", etc.) after punctuation.
• --- option now affects parsing of emails (e.g. user@example.com---)

Commits

• 0b72d37 5.0.1 released
• 2dbe0e7 Add funding field to ackage.json
• 6be6d15 Fix fuzzy link/email scan perfomance
• 8e887d5 Update .github configs
• 5e79093 5.0.0 released
• b2a1179 Code cleanup
• d4eeb3a orphaned scripts cleanup
• 5826ab2 readme: require => import
• 50092f6 eslint: switch to standard base
• a7755db lint: fix indent
• Additional commits viewable in compare view

Updates graphiql from 2.0.8 to 5.2.4

Release notes

Sourced from graphiql's releases.

graphiql@5.2.4

Patch Changes

• #4346 0f5a2a0 Thanks @​trevor-scheer! - Release a patch version of the packages served from esm.sh in the GraphiQL CDN example to trigger a rebuild on esm.sh now that a longstanding esm.sh issue has been fixed.

• Updated dependencies [0f5a2a0]:

  • @​graphiql/react@​0.37.7

graphiql@5.2.4-alpha.0

Patch Changes

• Updated dependencies [5f44a27]:
  • @​graphiql/react@​0.37.6-alpha.0
  • @​graphiql/plugin-doc-explorer@​0.4.3-alpha.0
  • @​graphiql/plugin-history@​0.4.3-alpha.0

graphiql@5.2.3

Patch Changes

• #4181 f1a210e Thanks @​trevor-scheer! - Fix schema prop to skip introspection when IntrospectionQuery data is provided

  Previously, passing an IntrospectionQuery result as the schema prop would still trigger a network introspection request. The shouldIntrospect check only recognized GraphQLSchema instances (via isSchema), not raw introspection data. Now, when an IntrospectionQuery is passed, a schema is built from it directly using buildClientSchema and introspection is skipped.

• #4211 e7b30c1 Thanks @​davidjb! - Add *.css to sideEffects to allow import of CSS in Webpack Javascript

• Updated dependencies [f1a210e, 6f5d5d2, 40359eb, e7b30c1]:

  • @​graphiql/react@​0.37.4
  • @​graphiql/plugin-doc-explorer@​0.4.2
  • @​graphiql/plugin-history@​0.4.2

graphiql@5.2.2

Patch Changes

• #4133 1bc6568 Thanks @​dimaMachina! - to fix esm.sh example we should pin monaco-editor peer dependency to versions ≥ 0.20.0 and < 0.53, since monaco-editor@^0.53.0 isn't supported yet with monaco-graphql

• Updated dependencies [1bc6568]:

  • @​graphiql/react@​0.37.3

graphiql@5.2.1

Patch Changes

• #4124 d77abe6 Thanks @​dimaMachina! - pin monaco-editor to 0.52.2

• Updated dependencies [d77abe6]:

  • @​graphiql/react@​0.37.2

graphiql@5.2.0

Minor Changes

• #4081 4950dec Thanks @​dimaMachina! - feat: add loader for initial loading of operation editor

... (truncated)

Changelog

Sourced from graphiql's changelog.

5.2.4

Patch Changes

• #4346 0f5a2a0 Thanks @​trevor-scheer! - Release a patch version of the packages served from esm.sh in the GraphiQL CDN example to trigger a rebuild on esm.sh now that a longstanding esm.sh issue has been fixed.

• Updated dependencies [0f5a2a0]:

  • @​graphiql/react@​0.37.7

5.2.3

Patch Changes

• #4181 f1a210e Thanks @​trevor-scheer! - Fix schema prop to skip introspection when IntrospectionQuery data is provided

  Previously, passing an IntrospectionQuery result as the schema prop would still trigger a network introspection request. The shouldIntrospect check only recognized GraphQLSchema instances (via isSchema), not raw introspection data. Now, when an IntrospectionQuery is passed, a schema is built from it directly using buildClientSchema and introspection is skipped.

• #4211 e7b30c1 Thanks @​davidjb! - Add *.css to sideEffects to allow import of CSS in Webpack Javascript

• Updated dependencies [f1a210e, 6f5d5d2, 40359eb, e7b30c1]:

  • @​graphiql/react@​0.37.4
  • @​graphiql/plugin-doc-explorer@​0.4.2
  • @​graphiql/plugin-history@​0.4.2

5.2.2

Patch Changes

• #4133 1bc6568 Thanks @​dimaMachina! - to fix esm.sh example we should pin monaco-editor peer dependency to versions ≥ 0.20.0 and < 0.53, since monaco-editor@^0.53.0 isn't supported yet with monaco-graphql

• Updated dependencies [1bc6568]:

  • @​graphiql/react@​0.37.3

5.2.1

Patch Changes

• #4124 d77abe6 Thanks @​dimaMachina! - pin monaco-editor to 0.52.2

• Updated dependencies [d77abe6]:

  • @​graphiql/react@​0.37.2

5.2.0

Minor Changes

• #4081 4950dec Thanks @​dimaMachina! - feat: add loader for initial loading of operation editor fix: adjust command palette width, border and remove box-shadow feat: add short cut Cmd/Ctrl + , for opening GraphiQL settings dialog

... (truncated)

Commits

• 987eb5c Version Packages (#4343)
• f729cf6 Fix netlify GraphQL demo function (#4341)
• 2ae50c9 Bump ws from 8.17.1 to 8.20.1 (#4313)
• f57882a Add missing concurrently dev dependency (#4275)
• d23f3b1 Cut over from tsc to tsgo (#4274)
• 9274396 Also bump the waitFor timeout — testTimeout alone isn't enough (#4270)
• 1e608ea Give defaults to the built-in default query test a 20s timeout (#4268)
• 471da20 Bump Vitest to v4 to unblock @storybook/addon-vitest (#4260)
• a589ca2 Version Packages (#4247)
• f1a210e fix: skip introspection when IntrospectionQuery is passed as schema prop ...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for graphiql since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.