fix(deps): update dependency @theguild/federation-composition to ^0.20.0

[renovate]

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Change	Age	Confidence
@theguild/federation-composition	^0.19.0 -> ^0.20.0

---

Release Notes

graphql-hive/federation-composition (@​theguild/federation-composition)

v0.20.0

Compare Source

Minor Changes

• #​180 a208f1c Thanks @​n1ru4l! - Add composeSchemaContract function for composing schema contracts.

  Running the following script:

  import { composeSchemaContract } from "@​theguild/federation-composition";
  import { parse } from "graphql";
  
  const result = composeSchemaContract(
    [
      {
        name: "a",
        typeDefs: parse(/* GraphQL */ `
          type Query {
            a: String @​tag(name: "public")
          }
        `),
        url: "a.localhost",
      },
      {
        name: "b",
        typeDefs: parse(/* GraphQL */ `
          type Query {
            b: String
          }
        `),
        url: "b.localhost",
      },
    ],
    /** Tags to include and exclude */
    {
      include: new Set(["public"]),
      exclude: new Set(),
    },
    /** Exclude unreachable types */
    true,
  );
  
  console.log(result.publicSdl);

  Will result in the output containing only the fields tagged with public:

  type Query {
    a: String!
  }

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock

➤ YN0000: · Yarn 4.9.2
➤ YN0000: ┌ Project validation
➤ YN0057: │ @examples/neo4j-example: Resolutions field will be ignored
➤ YN0057: │ @examples/postgres-geodb: Resolutions field will be ignored
➤ YN0057: │ @examples/sqlite-chinook: Resolutions field will be ignored
➤ YN0000: └ Completed
➤ YN0000: ┌ Resolution step
➤ YN0085: │ + @apollo/client@npm:3.14.0, @babel/core@npm:7.28.4, @babel/preset-env@npm:7.28.3, @cloudflare/workers-types@npm:4.20250910.0, @envelop/core@npm:5.3.1, and 53 more.
➤ YN0085: │ - @cloudflare/unenv-preset@npm:2.6.0, @cloudflare/workerd-darwin-64@npm:1.20250803.0, @cloudflare/workerd-darwin-arm64@npm:1.20250803.0, and 25 more.
➤ YN0000: └ Completed in 1s 449ms
➤ YN0000: ┌ Post-resolution validation
➤ YN0060: │ @apollo/client is listed by your project with version 3.14.0 (p0bf2b), which doesn't satisfy what apollo-upload-client requests (^4.0.0).
➤ YN0060: │ @theguild/tailwind-config is listed by your project with version 0.6.3 (p1bc79), which doesn't satisfy what @theguild/components requests (0.6.2).
➤ YN0060: │ @types/express is listed by your project with version 5.0.3 (p81338), which doesn't satisfy what @creditkarma/thrift-server-express requests (>=4.0.0 <5.0.0).
➤ YN0060: │ @types/express is listed by your project with version 5.0.3 (pddaf5), which doesn't satisfy what @creditkarma/thrift-server-express requests (>=4.0.0 <5.0.0).
➤ YN0060: │ eslint is listed by your project with version 9.35.0 (p0fed3), which doesn't satisfy what eslint-config-standard and other dependencies request (^8.57.0).
➤ YN0060: │ eslint-plugin-n is listed by your project with version 17.21.3 (p3cd4d), which doesn't satisfy what eslint-config-standard requests (^15.0.0 || ^16.0.0).
➤ YN0060: │ eslint-plugin-promise is listed by your project with version 7.2.1 (pe7241), which doesn't satisfy what eslint-config-standard requests (^6.0.0).
➤ YN0060: │ express is listed by your project with version 5.1.0 (p29de1), which doesn't satisfy what @creditkarma/thrift-server-express requests (>=4.0.0 <5.0.0).
➤ YN0060: │ express is listed by your project with version 5.1.0 (pe21cc), which doesn't satisfy what @creditkarma/thrift-server-express requests (>=4.0.0 <5.0.0).
➤ YN0060: │ graphql is listed by your project with version 16.11.0 (p02d86), which doesn't satisfy what postgraphile-core and other dependencies request (but they have non-overlapping ranges!).
➤ YN0060: │ graphql is listed by your project with version 16.11.0 (p43235), which doesn't satisfy what postgraphile-core (via @graphql-mesh/postgraphile) and other dependencies request (but they have non-overlapping ranges!).
➤ YN0060: │ graphql is listed by your project with version 16.11.0 (pfa106), which doesn't satisfy what @graphql-tools/graphql-file-loader (via @ardatan/graphql-to-config-schema) and other dependencies request (^14.0.0 || ^15.0.0).
➤ YN0060: │ graphql-yoga is listed by your project with version 5.15.1 (p49a46), which doesn't satisfy what @graphql-yoga/plugin-apollo-inline-trace requests (^5.15.2).
➤ YN0060: │ graphql-yoga is listed by your project with version 5.15.1 (p4a90b), which doesn't satisfy what @graphql-yoga/plugin-sofa requests (^5.15.2).
➤ YN0060: │ graphql-yoga is listed by your project with version 5.15.1 (pebca1), which doesn't satisfy what @graphql-yoga/plugin-sofa requests (^5.15.2).
➤ YN0060: │ micro is listed by your project with version 10.0.1 (p223d2), which doesn't satisfy what apollo-server-micro requests (^9.3.4).
➤ YN0060: │ micro is listed by your project with version 10.0.1 (p5467c), which doesn't satisfy what apollo-server-micro requests (^9.3.4).
➤ YN0060: │ react is listed by your project with version 19.1.1 (p4e5f9), which doesn't satisfy what @theguild/components and other dependencies request (but they have non-overlapping ranges!).
➤ YN0060: │ react-dom is listed by your project with version 19.1.1 (pbbe00), which doesn't satisfy what @theguild/components and other dependencies request (^18.2.0).
➤ YN0060: │ typescript is listed by your project with version 5.8.3 (p6c182), which doesn't satisfy what react-scripts and other dependencies request (^3.2.1 || ^3.2.1 || ^3.3.0-dev || ^3.4.0-dev || ^3.5.0-dev || ^3.6.0-beta || ^3.7.0-beta || ^4.0.0 || ^4.0.0 || ^4.0.0 || ^4.0.0 || ^4.0.0 || ^4.0.0 || ^4.0.0).
➤ YN0002: │ @e2e/union-error-handling@workspace:e2e/union-error-handling doesn't provide graphql (pf19c3), requested by @graphql-mesh/compose-cli.
➤ YN0002: │ @examples/graphql-file-upload-example-frontend@workspace:examples/graphql-file-upload-example/frontend doesn't provide rxjs (p0f5ae), requested by apollo-upload-client.
➤ YN0086: │ Some peer dependencies are incorrectly met by your project; run yarn explain peer-requirements <hash> for details, where <hash> is the six-letter p-prefixed code.
➤ YN0086: │ Some peer dependencies are incorrectly met by dependencies; run yarn explain peer-requirements for details.
➤ YN0000: └ Completed
➤ YN0000: ┌ Fetch step
➤ YN0066: │ lru-cache@patch:lru-cache@npm%3A11.2.1#~/.yarn/patches/lru-cache-npm-11.0.2-72e1eedbe6.patch::version=11.2.1&hash=823f4d: lru-cache@patch:lru-cache@npm%3A11.2.1#~/.yarn/patches/lru-cache-npm-11.0.2-72e1eedbe6.patch::version=11.2.1&hash=823f4d: Cannot apply hunk #1 (set enableInlineHunks for details)
➤ YN0000: └ Completed in 0s 463ms
➤ YN0000: · Failed with errors in 1s 926ms

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.