chore(backend)(deps): bump graphql-ws from 6.2.1 to 6.3.0 in /backend

[dependabot]

Bumps graphql-ws from 6.2.1 to 6.3.0.

Release notes

Sourced from graphql-ws's releases.

v6.3.0

Minor Changes

• #691 b5f53cd Thanks @​niukanen1! - Add onPing and onPong server callbacks to ServerOptions, similar to onConnect and onDisconnect. The callbacks receive the connection Context as the first argument and the ping/pong payload as the second, allowing apps to log or react to subprotocol-level pings with access to connection state. The automatic pong reply is preserved when using the server-level onPing callback; the low-level websocket onPing listener still disables the automatic reply for full manual control.

Patch Changes

• #693 c41433e Thanks @​smnbbrv! - fix the client leaking memory per operation on long-living connections

• #695 93c8ebf Thanks @​zerolxy612! - Allow operation IDs that match properties inherited from Object.prototype.

v6.2.2

Patch Changes

• #690 1029314 Thanks @​Haasini-kudala! - Support crossws 0.4 by selecting the GraphQL WebSocket subprotocol during the upgrade handshake. Preserve automatic protocol negotiation in the legacy crossws 0.3 Node and uWebSockets adapters.

• #686 536960e Thanks @​cpruijsen! - Fix the CrossWS adapter ignoring socket closes issued from server.opened

  makeHooks only registered the peer in the clients map after server.opened returned, while send/close no-op'd unless the peer was already in that map. A protocol-mismatch close (and any other close from inside opened) was therefore dropped, the WebSocket stayed open, and no ConnectionAck was ever sent because the message handler was never installed.

Changelog

Sourced from graphql-ws's changelog.

6.3.0

Minor Changes

• #691 b5f53cd Thanks @​niukanen1! - Add onPing and onPong server callbacks to ServerOptions, similar to onConnect and onDisconnect. The callbacks receive the connection Context as the first argument and the ping/pong payload as the second, allowing apps to log or react to subprotocol-level pings with access to connection state. The automatic pong reply is preserved when using the server-level onPing callback; the low-level websocket onPing listener still disables the automatic reply for full manual control.

Patch Changes

• #693 c41433e Thanks @​smnbbrv! - fix the client leaking memory per operation on long-living connections

• #695 93c8ebf Thanks @​zerolxy612! - Allow operation IDs that match properties inherited from Object.prototype.

6.2.2

Patch Changes

• #690 1029314 Thanks @​Haasini-kudala! - Support crossws 0.4 by selecting the GraphQL WebSocket subprotocol during the upgrade handshake. Preserve automatic protocol negotiation in the legacy crossws 0.3 Node and uWebSockets adapters.

• #686 536960e Thanks @​cpruijsen! - Fix the CrossWS adapter ignoring socket closes issued from server.opened

  makeHooks only registered the peer in the clients map after server.opened returned, while send/close no-op'd unless the peer was already in that map. A protocol-mismatch close (and any other close from inside opened) was therefore dropped, the WebSocket stayed open, and no ConnectionAck was ever sent because the message handler was never installed.

Commits

• 53f321e Upcoming Release Changes (#694)
• 93c8ebf fix: support Object prototype operation IDs (#695)
• b5f53cd feat(server): add onPing and onPong callbacks to ServerOptions (#691)
• c41433e Fix the client leaking memory per operation on long-living connections (#693)
• 0c1765e Upcoming Release Changes (#687)
• 1029314 fix(crossws): support version 0.4 protocol negotiation (#690)
• 34cddf6 Update example to remove AsyncGenerator (#654) (#655)
• 3649fab Update recipes.mdx abruptly closed example (#664)
• 536960e fix(crossws): close the socket even if server.opened closes immediately (#686)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
web3-student-lab	Error		Oct 7, 2026 6:09pm UTC