@depup/graphql-codegen__cli 7.4.1-depup.1 → 7.4.2-depup.0

package/README.md

@@ -13,8 +13,8 @@ npm install @depup/graphql-codegen__cli
 
 | Field | Value |
 |-------|-------|
-| Original | [@graphql-codegen/cli](https://www.npmjs.com/package/@graphql-codegen/cli) @ 7.4.1 |
-| Processed | 2026-09-13 |
+| Original | [@graphql-codegen/cli](https://www.npmjs.com/package/@graphql-codegen/cli) @ 7.4.2 |
+| Processed | 2026-09-20 |
 | Smoke test | passed |
 | Deps updated | 27 |
 
@@ -22,23 +22,23 @@ npm install @depup/graphql-codegen__cli
 
 | Dependency | From | To |
 |------------|------|-----|
-| @babel/generator | ^7.18.13 | ^8.0.5 |
+| @babel/generator | ^7.18.13 | ^8.0.6 |
 | @babel/template | ^7.18.10 | ^8.0.0 |
-| @babel/types | ^7.18.13 | ^8.0.5 |
-| @graphql-codegen/client-preset | ^6.1.3 | ^6.2.0 |
+| @babel/types | ^7.18.13 | ^8.0.6 |
 | @graphql-tools/apollo-engine-loader | ^8.0.28 | ^8.0.36 |
 | @graphql-tools/git-loader | ^8.0.32 | ^8.0.42 |
-| @graphql-tools/github-loader | ^9.0.6 | ^9.1.8 |
+| @graphql-tools/github-loader | ^9.0.6 | ^9.1.9 |
 | @graphql-tools/graphql-file-loader | ^8.1.11 | ^8.1.20 |
 | @graphql-tools/json-file-loader | ^8.0.26 | ^8.0.34 |
 | @graphql-tools/load | ^8.1.8 | ^8.1.17 |
-| @graphql-tools/url-loader | ^9.0.6 | ^9.1.9 |
+| @graphql-tools/url-loader | ^9.0.6 | ^9.1.10 |
 | @graphql-tools/utils | ^11.2.0 | ^12.0.1 |
 | @inquirer/prompts | ^8.3.2 | ^8.7.2 |
 | @whatwg-node/fetch | ^0.10.0 | ^0.10.13 |
 | chalk | ^5.6.0 | ^6.0.0 |
 | cosmiconfig | ^9.0.0 | ^10.0.1 |
 | detect-indent | ^7.0.0 | ^7.0.2 |
+| graphql-config | ^5.1.6 | ^5.1.7 |
 | is-glob | ^4.0.1 | ^4.0.3 |
 | jiti | ^2.3.0 | ^2.7.0 |
 | listr2 | ^10.2.1 | ^11.1.0 |

package/changes.json

@@ -2,7 +2,7 @@
   "bumped": {
     "@babel/generator": {
       "from": "^7.18.13",
-      "to": "^8.0.5"
+      "to": "^8.0.6"
     },
     "@babel/template": {
       "from": "^7.18.10",
@@ -10,11 +10,7 @@
     },
     "@babel/types": {
       "from": "^7.18.13",
-      "to": "^8.0.5"
-    },
-    "@graphql-codegen/client-preset": {
-      "from": "^6.1.3",
-      "to": "^6.2.0"
+      "to": "^8.0.6"
     },
     "@graphql-tools/apollo-engine-loader": {
       "from": "^8.0.28",
@@ -26,7 +22,7 @@
     },
     "@graphql-tools/github-loader": {
       "from": "^9.0.6",
-      "to": "^9.1.8"
+      "to": "^9.1.9"
     },
     "@graphql-tools/graphql-file-loader": {
       "from": "^8.1.11",
@@ -42,7 +38,7 @@
     },
     "@graphql-tools/url-loader": {
       "from": "^9.0.6",
-      "to": "^9.1.9"
+      "to": "^9.1.10"
     },
     "@graphql-tools/utils": {
       "from": "^11.2.0",
@@ -68,6 +64,10 @@
       "from": "^7.0.0",
       "to": "^7.0.2"
     },
+    "graphql-config": {
+      "from": "^5.1.6",
+      "to": "^5.1.7"
+    },
     "is-glob": {
       "from": "^4.0.1",
       "to": "^4.0.3"
@@ -109,6 +109,6 @@
       "to": "^18.1.0"
     }
   },
-  "timestamp": "2026-09-13T16:08:42.096Z",
+  "timestamp": "2026-09-20T08:11:36.942Z",
   "totalUpdated": 27
 }

package/cjs/codegen.js

@@ -6,6 +6,7 @@ const fs_1 = tslib_1.__importDefault(require("fs"));
 const module_1 = require("module");
 const os_1 = require("os");
 const path_1 = tslib_1.__importDefault(require("path"));
+const url_1 = require("url");
 const graphql_1 = require("graphql");
 const listr2_1 = require("listr2");
 const core_1 = require("@graphql-codegen/core");
@@ -24,16 +25,17 @@ const makeDefaultLoader = (from) => {
     }
     const relativeRequire = (0, module_1.createRequire)(from);
     return async (mod) => {
-        return Promise.resolve(`${isESMModule_js_1.isESMModule
-            ? /**
-               * For ESM we currently have no "resolve path" solution
-               * as import.meta is unavailable in a CommonJS context
-               * and furthermore unavailable in stable Node.js.
-               **/
-                // FIXME(pnpm-update): this causes dev-test devDeps to be brought into CLI's package.json, which is not ideal.
-                // Note that `relativeRequire.resolve(mod)` seems to work correctly for ESM as well.
-                mod
-            : relativeRequire.resolve(mod)}`).then(s => tslib_1.__importStar(require(s)));
+        const resolved = relativeRequire.resolve(mod);
+        /**
+         * `resolved` is always an absolute filesystem path. In the CJS build, TypeScript
+         * rewrites `import()` into `require()`, which accepts native OS paths as-is. In
+         * the ESM build, `import()` stays a real dynamic import, whose loader parses the
+         * specifier as a URL — a raw Windows path (e.g. `C:\...`) is misread as a `c:`
+         * protocol scheme and rejected with `ERR_UNSUPPORTED_ESM_URL_SCHEME` (see #10935,
+         * which hit the same issue in `@graphql-tools/code-file-loader`). Converting to a
+         * `file://` URL only for the real-ESM case avoids that.
+         */
+        return Promise.resolve(`${isESMModule_js_1.isESMModule ? (0, url_1.pathToFileURL)(resolved).href : resolved}`).then(s => tslib_1.__importStar(require(s)));
     };
 };
 function createCache() {
@@ -177,11 +179,21 @@ async function executeCodegen(input) {
                             const outputSpecificSchemas = (0, plugin_helpers_1.normalizeInstanceOrArray)(outputConfig.schema);
                             let outputSpecificDocuments = (0, plugin_helpers_1.normalizeInstanceOrArray)(outputConfig.documents);
                             let outputSpecificExternalDocuments = (0, plugin_helpers_1.normalizeInstanceOrArray)(outputConfig.externalDocuments);
-                            const preset = hasPreset
-                                ? typeof outputConfig.preset === 'string'
-                                    ? await (0, presets_js_1.getPresetByName)(outputConfig.preset, makeDefaultLoader(context.cwd))
-                                    : outputConfig.preset
-                                : null;
+                            let preset;
+                            try {
+                                preset = hasPreset
+                                    ? typeof outputConfig.preset === 'string'
+                                        ? await (0, presets_js_1.getPresetByName)(outputConfig.preset, makeDefaultLoader(context.cwd))
+                                        : outputConfig.preset
+                                    : null;
+                            }
+                            catch (error) {
+                                // ctx.errors is what determines CLI success/failure, so it must be pushed here
+                                // before rethrowing — otherwise the CLI reports success even though the
+                                // terminal printed this error.
+                                ctx.errors.push(error);
+                                throw error;
+                            }
                             if (preset?.prepareDocuments) {
                                 outputSpecificDocuments = await preset.prepareDocuments(filename, outputSpecificDocuments);
                                 outputSpecificExternalDocuments = await preset.prepareDocuments(filename, outputSpecificExternalDocuments);

package/cjs/hooks.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.lifecycleHooks = void 0;
 const child_process_1 = require("child_process");
+const os_1 = require("os");
 const path_1 = require("path");
 const shell_quote_1 = require("shell-quote");
 const debugging_js_1 = require("./utils/debugging.js");
@@ -15,6 +16,21 @@ const DEFAULT_HOOKS = {
     beforeOneFileWrite: [],
     beforeAllFileWrite: [],
 };
+// shell-quote's `quote()` always produces POSIX-style single-quoting, but
+// `execShellCommand` below runs through `cmd.exe` on Windows (Node's
+// `child_process.exec` default shell there), which doesn't understand single
+// quotes and leaves them in literally. Quote per-platform instead: cmd.exe's
+// own convention is double-quoting only the arguments that need it.
+function quoteShellArgs(args) {
+    if ((0, os_1.platform)() === 'win32') {
+        // Only wrap an argument that contains a character cmd.exe treats specially --
+        // whitespace, pipe/redirection, caret, or a literal quote. e.g.
+        // - `C:\Program Files\x.ts` becomes `"C:\Program Files\x.ts"`
+        // - `D:\a\x.ts` is left bare.
+        return args.map(arg => (/[\s&|<>^"]/.test(arg) ? `"${arg}"` : arg)).join(' ');
+    }
+    return (0, shell_quote_1.quote)(args);
+}
 function execShellCommand(cmd) {
     return new Promise((resolve, reject) => {
         (0, child_process_1.exec)(cmd, {
@@ -39,7 +55,7 @@ async function executeHooks(hookName, _scripts = [], args = [], initialState) {
     (0, debugging_js_1.debugLog)(`Running lifecycle hook "${hookName}" scripts...`);
     let state = initialState;
     const scripts = Array.isArray(_scripts) ? _scripts : [_scripts];
-    const quotedArgs = (0, shell_quote_1.quote)(args);
+    const quotedArgs = quoteShellArgs(args);
     for (const script of scripts) {
         if (typeof script === 'string') {
             (0, debugging_js_1.debugLog)(`Running lifecycle hook "${hookName}" script: ${script} with args: ${quotedArgs}...`);

package/cjs/version.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.version = void 0;
-exports.version = '7.4.1';
+exports.version = '7.4.2';

package/esm/codegen.js

@@ -2,6 +2,7 @@ import fs from 'fs';
 import { createRequire } from 'module';
 import { cpus } from 'os';
 import path from 'path';
+import { pathToFileURL } from 'url';
 import { buildASTSchema, GraphQLError, isSchema } from 'graphql';
 import { Listr } from 'listr2';
 import { codegen } from '@graphql-codegen/core';
@@ -20,16 +21,17 @@ const makeDefaultLoader = (from) => {
     }
     const relativeRequire = createRequire(from);
     return async (mod) => {
-        return import(isESMModule
-            ? /**
-               * For ESM we currently have no "resolve path" solution
-               * as import.meta is unavailable in a CommonJS context
-               * and furthermore unavailable in stable Node.js.
-               **/
-                // FIXME(pnpm-update): this causes dev-test devDeps to be brought into CLI's package.json, which is not ideal.
-                // Note that `relativeRequire.resolve(mod)` seems to work correctly for ESM as well.
-                mod
-            : relativeRequire.resolve(mod));
+        const resolved = relativeRequire.resolve(mod);
+        /**
+         * `resolved` is always an absolute filesystem path. In the CJS build, TypeScript
+         * rewrites `import()` into `require()`, which accepts native OS paths as-is. In
+         * the ESM build, `import()` stays a real dynamic import, whose loader parses the
+         * specifier as a URL — a raw Windows path (e.g. `C:\...`) is misread as a `c:`
+         * protocol scheme and rejected with `ERR_UNSUPPORTED_ESM_URL_SCHEME` (see #10935,
+         * which hit the same issue in `@graphql-tools/code-file-loader`). Converting to a
+         * `file://` URL only for the real-ESM case avoids that.
+         */
+        return import(isESMModule ? pathToFileURL(resolved).href : resolved);
     };
 };
 function createCache() {
@@ -173,11 +175,21 @@ export async function executeCodegen(input) {
                             const outputSpecificSchemas = normalizeInstanceOrArray(outputConfig.schema);
                             let outputSpecificDocuments = normalizeInstanceOrArray(outputConfig.documents);
                             let outputSpecificExternalDocuments = normalizeInstanceOrArray(outputConfig.externalDocuments);
-                            const preset = hasPreset
-                                ? typeof outputConfig.preset === 'string'
-                                    ? await getPresetByName(outputConfig.preset, makeDefaultLoader(context.cwd))
-                                    : outputConfig.preset
-                                : null;
+                            let preset;
+                            try {
+                                preset = hasPreset
+                                    ? typeof outputConfig.preset === 'string'
+                                        ? await getPresetByName(outputConfig.preset, makeDefaultLoader(context.cwd))
+                                        : outputConfig.preset
+                                    : null;
+                            }
+                            catch (error) {
+                                // ctx.errors is what determines CLI success/failure, so it must be pushed here
+                                // before rethrowing — otherwise the CLI reports success even though the
+                                // terminal printed this error.
+                                ctx.errors.push(error);
+                                throw error;
+                            }
                             if (preset?.prepareDocuments) {
                                 outputSpecificDocuments = await preset.prepareDocuments(filename, outputSpecificDocuments);
                                 outputSpecificExternalDocuments = await preset.prepareDocuments(filename, outputSpecificExternalDocuments);

package/esm/hooks.js

@@ -1,4 +1,5 @@
 import { exec } from 'child_process';
+import { platform } from 'os';
 import { delimiter, sep } from 'path';
 import { quote } from 'shell-quote';
 import { debugLog } from './utils/debugging.js';
@@ -12,6 +13,21 @@ const DEFAULT_HOOKS = {
     beforeOneFileWrite: [],
     beforeAllFileWrite: [],
 };
+// shell-quote's `quote()` always produces POSIX-style single-quoting, but
+// `execShellCommand` below runs through `cmd.exe` on Windows (Node's
+// `child_process.exec` default shell there), which doesn't understand single
+// quotes and leaves them in literally. Quote per-platform instead: cmd.exe's
+// own convention is double-quoting only the arguments that need it.
+function quoteShellArgs(args) {
+    if (platform() === 'win32') {
+        // Only wrap an argument that contains a character cmd.exe treats specially --
+        // whitespace, pipe/redirection, caret, or a literal quote. e.g.
+        // - `C:\Program Files\x.ts` becomes `"C:\Program Files\x.ts"`
+        // - `D:\a\x.ts` is left bare.
+        return args.map(arg => (/[\s&|<>^"]/.test(arg) ? `"${arg}"` : arg)).join(' ');
+    }
+    return quote(args);
+}
 function execShellCommand(cmd) {
     return new Promise((resolve, reject) => {
         exec(cmd, {
@@ -36,7 +52,7 @@ async function executeHooks(hookName, _scripts = [], args = [], initialState) {
     debugLog(`Running lifecycle hook "${hookName}" scripts...`);
     let state = initialState;
     const scripts = Array.isArray(_scripts) ? _scripts : [_scripts];
-    const quotedArgs = quote(args);
+    const quotedArgs = quoteShellArgs(args);
     for (const script of scripts) {
         if (typeof script === 'string') {
             debugLog(`Running lifecycle hook "${hookName}" script: ${script} with args: ${quotedArgs}...`);

package/esm/version.js

@@ -1 +1 @@
-export const version = '7.4.1';
+export const version = '7.4.2';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@depup/graphql-codegen__cli",
-  "version": "7.4.1-depup.1",
+  "version": "7.4.2-depup.0",
   "peerDependenciesMeta": {
     "@parcel/watcher": {
       "optional": true
@@ -11,21 +11,21 @@
     "graphql": "^0.8.0 || ^0.9.0 || ^0.10.0 || ^0.11.0 || ^0.12.0 || ^0.13.0 || ^14.0.0 || ^15.0.0 || ^16.0.0 || ^17.0.0"
   },
   "dependencies": {
-    "@babel/generator": "^8.0.5",
+    "@babel/generator": "^8.0.6",
     "@babel/template": "^8.0.0",
-    "@babel/types": "^8.0.5",
+    "@babel/types": "^8.0.6",
     "@graphql-codegen/client-preset": "^6.2.0",
     "@graphql-codegen/core": "^6.2.0",
     "@graphql-codegen/plugin-helpers": "^7.3.0",
     "@graphql-tools/apollo-engine-loader": "^8.0.36",
     "@graphql-tools/code-file-loader": "^8.1.39",
     "@graphql-tools/git-loader": "^8.0.42",
-    "@graphql-tools/github-loader": "^9.1.8",
+    "@graphql-tools/github-loader": "^9.1.9",
     "@graphql-tools/graphql-file-loader": "^8.1.20",
     "@graphql-tools/json-file-loader": "^8.0.34",
     "@graphql-tools/load": "^8.1.17",
     "@graphql-tools/merge": "^9.2.4",
-    "@graphql-tools/url-loader": "^9.1.9",
+    "@graphql-tools/url-loader": "^9.1.10",
     "@graphql-tools/utils": "^12.0.1",
     "@inquirer/prompts": "^8.7.2",
     "@whatwg-node/fetch": "^0.10.13",
@@ -33,7 +33,7 @@
     "cosmiconfig": "^10.0.1",
     "debounce": "^3.0.0",
     "detect-indent": "^7.0.2",
-    "graphql-config": "^5.1.6",
+    "graphql-config": "^5.1.7",
     "is-glob": "^4.0.3",
     "jiti": "^2.7.0",
     "json-to-pretty-yaml": "^1.2.2",
@@ -116,7 +116,7 @@
     "changes": {
       "@babel/generator": {
         "from": "^7.18.13",
-        "to": "^8.0.5"
+        "to": "^8.0.6"
       },
       "@babel/template": {
         "from": "^7.18.10",
@@ -124,11 +124,7 @@
       },
       "@babel/types": {
         "from": "^7.18.13",
-        "to": "^8.0.5"
-      },
-      "@graphql-codegen/client-preset": {
-        "from": "^6.1.3",
-        "to": "^6.2.0"
+        "to": "^8.0.6"
       },
       "@graphql-tools/apollo-engine-loader": {
         "from": "^8.0.28",
@@ -140,7 +136,7 @@
       },
       "@graphql-tools/github-loader": {
         "from": "^9.0.6",
-        "to": "^9.1.8"
+        "to": "^9.1.9"
       },
       "@graphql-tools/graphql-file-loader": {
         "from": "^8.1.11",
@@ -156,7 +152,7 @@
       },
       "@graphql-tools/url-loader": {
         "from": "^9.0.6",
-        "to": "^9.1.9"
+        "to": "^9.1.10"
       },
       "@graphql-tools/utils": {
         "from": "^11.2.0",
@@ -182,6 +178,10 @@
         "from": "^7.0.0",
         "to": "^7.0.2"
       },
+      "graphql-config": {
+        "from": "^5.1.6",
+        "to": "^5.1.7"
+      },
       "is-glob": {
         "from": "^4.0.1",
         "to": "^4.0.3"
@@ -225,8 +225,8 @@
     },
     "depsUpdated": 27,
     "originalPackage": "@graphql-codegen/cli",
-    "originalVersion": "7.4.1",
-    "processedAt": "2026-09-13T16:09:04.025Z",
+    "originalVersion": "7.4.2",
+    "processedAt": "2026-09-20T08:11:54.516Z",
     "smokeTest": "passed"
   }
 }