Try out whatwg-node fetch using native Readable's listeners directly (#1338)

enisdenjo · github-actions[bot] · theguild-bot · web-flow · commit 7287ffa2ac0f · 2025-07-17T15:52:18.000+02:00
Co-authored-by: github-actions[bot] &lt;github-actions[bot]@users.noreply.github.com&gt;
Co-authored-by: theguild-bot &lt;bot@the-guild.dev&gt;
diff --git a/.changeset/@graphql-mesh_transport-http-callback-1338-dependencies.md b/.changeset/@graphql-mesh_transport-http-callback-1338-dependencies.md
@@ -0,0 +1,7 @@
+---
+'@graphql-mesh/transport-http-callback': patch
+---
+
+dependencies updates: 
+
+- Updated dependency [`@whatwg-node/fetch@^0.10.9` ↗︎](https://www.npmjs.com/package/@whatwg-node/fetch/v/0.10.9) (from `^0.10.8`, in `dependencies`)
diff --git a/.changeset/@graphql-tools_executor-http-1338-dependencies.md b/.changeset/@graphql-tools_executor-http-1338-dependencies.md
@@ -0,0 +1,7 @@
+---
+'@graphql-tools/executor-http': patch
+---
+
+dependencies updates: 
+
+- Updated dependency [`@whatwg-node/fetch@^0.10.9` ↗︎](https://www.npmjs.com/package/@whatwg-node/fetch/v/0.10.9) (from `^0.10.8`, in `dependencies`)
diff --git a/.changeset/@graphql-tools_federation-1338-dependencies.md b/.changeset/@graphql-tools_federation-1338-dependencies.md
@@ -0,0 +1,7 @@
+---
+'@graphql-tools/federation': patch
+---
+
+dependencies updates: 
+
+- Updated dependency [`@whatwg-node/fetch@^0.10.9` ↗︎](https://www.npmjs.com/package/@whatwg-node/fetch/v/0.10.9) (from `^0.10.8`, in `dependencies`)
diff --git a/e2e/federation-subscriptions-passthrough/package.json b/e2e/federation-subscriptions-passthrough/package.json
@@ -3,7 +3,7 @@
   "private": true,
   "dependencies": {
     "@graphql-mesh/transport-ws": "workspace:^",
-    "@whatwg-node/fetch": "^0.10.8",
+    "@whatwg-node/fetch": "^0.10.9",
     "graphql": "^16.9.0",
     "tslib": "^2.8.1"
   },
diff --git a/examples/federation-subscriptions-passthrough/example.tar.gz b/examples/federation-subscriptions-passthrough/example.tar.gz
diff --git a/examples/federation-subscriptions-passthrough/package-lock.json b/examples/federation-subscriptions-passthrough/package-lock.json
diff --git a/examples/federation-subscriptions-passthrough/package.json b/examples/federation-subscriptions-passthrough/package.json
@@ -3,7 +3,7 @@
   "private": true,
   "dependencies": {
     "@graphql-mesh/transport-ws": "^1.0.10",
-    "@whatwg-node/fetch": "^0.10.8",
+    "@whatwg-node/fetch": "^0.10.9",
     "graphql": "^16.9.0",
     "tslib": "^2.8.1",
     "@apollo/server": "^4.12.2",
diff --git a/internal/e2e/package.json b/internal/e2e/package.json
@@ -7,7 +7,7 @@
     "@types/dockerode": "^3.3.42",
     "@types/node": "^22.15.30",
     "@whatwg-node/disposablestack": "^0.0.6",
-    "@whatwg-node/fetch": "^0.10.8",
+    "@whatwg-node/fetch": "^0.10.9",
     "dockerode": "^4.0.7",
     "glob": "^11.0.3",
     "graphql": "^16.9.0",
diff --git a/internal/perf/src/memtest.ts b/internal/perf/src/memtest.ts
@@ -232,14 +232,6 @@ export function memtest(opts: MemtestOptions, setup: () => Promise<Server>) {
               frame.callstack.some(
                 (stack) => stack.name === 'handleMaybePromise',
               )
-            ) &&
-            !(
-              // allocates a lot but all is freed confirmed through heap snapshot
-              frame.callstack.some(
-                (frame) =>
-                  frame.file?.includes('@whatwg-node/node-fetch') &&
-                  frame.name.includes('wrapIncomingMessageWithPassthrough'),
-              )
             ),
         )
         .filter((frame) => {
diff --git a/internal/testing/package.json b/internal/testing/package.json
@@ -16,7 +16,7 @@
     "@graphql-tools/utils": "^10.7.2",
     "@types/node": "^22.15.30",
     "@whatwg-node/disposablestack": "^0.0.6",
-    "@whatwg-node/fetch": "^0.10.8",
+    "@whatwg-node/fetch": "^0.10.9",
     "@whatwg-node/promise-helpers": "^1.2.5",
     "graphql": "^16.10.0",
     "jest-leak-detector": "30.0.2",
diff --git a/packages/executors/http/package.json b/packages/executors/http/package.json
@@ -44,7 +44,7 @@
     "@graphql-tools/utils": "^10.8.1",
     "@repeaterjs/repeater": "^3.0.4",
     "@whatwg-node/disposablestack": "^0.0.6",
-    "@whatwg-node/fetch": "^0.10.8",
+    "@whatwg-node/fetch": "^0.10.9",
     "@whatwg-node/promise-helpers": "^1.3.0",
     "meros": "^1.3.1",
     "tslib": "^2.8.1"
diff --git a/packages/federation/package.json b/packages/federation/package.json
@@ -49,7 +49,7 @@
     "@graphql-yoga/typed-event-target": "^3.0.2",
     "@whatwg-node/disposablestack": "^0.0.6",
     "@whatwg-node/events": "^0.1.2",
-    "@whatwg-node/fetch": "^0.10.8",
+    "@whatwg-node/fetch": "^0.10.9",
     "@whatwg-node/promise-helpers": "^1.3.0",
     "tslib": "^2.8.1"
   },
diff --git a/packages/gateway/package.json b/packages/gateway/package.json
@@ -101,7 +101,7 @@
     "@types/adm-zip": "^0.5.5",
     "@types/bun": "1.2.18",
     "@types/ws": "^8.5.12",
-    "@whatwg-node/fetch": "^0.10.8",
+    "@whatwg-node/fetch": "^0.10.9",
     "adm-zip": "^0.5.15",
     "bun": "^1.2.18",
     "graphql": "^16.9.0",
diff --git a/packages/plugins/deduplicate-request/package.json b/packages/plugins/deduplicate-request/package.json
@@ -49,7 +49,7 @@
   "devDependencies": {
     "@graphql-hive/gateway-runtime": "workspace:*",
     "@graphql-mesh/types": "^0.104.5",
-    "@whatwg-node/fetch": "^0.10.8",
+    "@whatwg-node/fetch": "^0.10.9",
     "graphql": "^16.9.0",
     "pkgroll": "2.14.3"
   },
diff --git a/packages/runtime/package.json b/packages/runtime/package.json
@@ -85,7 +85,7 @@
     "@graphql-mesh/transport-rest": "^0.9.6",
     "@omnigraph/openapi": "^0.109.11",
     "@types/html-minifier-terser": "^7.0.2",
-    "@whatwg-node/fetch": "^0.10.8",
+    "@whatwg-node/fetch": "^0.10.9",
     "fets": "^0.8.4",
     "graphql": "^16.9.0",
     "graphql-sse": "^2.5.3",
diff --git a/packages/transports/http-callback/package.json b/packages/transports/http-callback/package.json
@@ -51,7 +51,7 @@
     "@graphql-tools/executor-common": "workspace:^",
     "@graphql-tools/utils": "^10.8.1",
     "@repeaterjs/repeater": "^3.0.6",
-    "@whatwg-node/fetch": "^0.10.8",
+    "@whatwg-node/fetch": "^0.10.9",
     "@whatwg-node/promise-helpers": "^1.3.0",
     "tslib": "^2.8.1"
   },
diff --git a/yarn.lock b/yarn.lock
@@ -3173,7 +3173,7 @@ __metadata:
     "@repeaterjs/repeater": "npm:^3.0.6"
     "@types/express": "npm:^5.0.3"
     "@types/ws": "npm:^8"
-    "@whatwg-node/fetch": "npm:^0.10.8"
+    "@whatwg-node/fetch": "npm:^0.10.9"
     express: "npm:^5.0.0"
     graphql: "npm:^16.9.0"
     graphql-sse: "npm:^2.5.3"
@@ -4226,7 +4226,7 @@ __metadata:
     "@types/html-minifier-terser": "npm:^7.0.2"
     "@types/node": "npm:^22.15.30"
     "@whatwg-node/disposablestack": "npm:^0.0.6"
-    "@whatwg-node/fetch": "npm:^0.10.8"
+    "@whatwg-node/fetch": "npm:^0.10.9"
     "@whatwg-node/promise-helpers": "npm:^1.3.0"
     "@whatwg-node/server": "npm:^0.10.10"
     "@whatwg-node/server-plugin-cookies": "npm:^1.0.5"
@@ -4293,7 +4293,7 @@ __metadata:
     "@types/adm-zip": "npm:^0.5.5"
     "@types/bun": "npm:1.2.18"
     "@types/ws": "npm:^8.5.12"
-    "@whatwg-node/fetch": "npm:^0.10.8"
+    "@whatwg-node/fetch": "npm:^0.10.9"
     adm-zip: "npm:^0.5.15"
     bun: "npm:^1.2.18"
     commander: "npm:^13.1.0"
@@ -4433,7 +4433,7 @@ __metadata:
     "@graphql-mesh/types": "npm:^0.104.5"
     "@graphql-mesh/utils": "npm:^0.104.5"
     "@graphql-tools/utils": "npm:^10.8.6"
-    "@whatwg-node/fetch": "npm:^0.10.8"
+    "@whatwg-node/fetch": "npm:^0.10.9"
     "@whatwg-node/promise-helpers": "npm:^1.3.1"
     graphql: "npm:^16.9.0"
     pkgroll: "npm:2.14.3"
@@ -4949,7 +4949,7 @@ __metadata:
     "@graphql-tools/executor-common": "workspace:^"
     "@graphql-tools/utils": "npm:^10.8.1"
     "@repeaterjs/repeater": "npm:^3.0.6"
-    "@whatwg-node/fetch": "npm:^0.10.8"
+    "@whatwg-node/fetch": "npm:^0.10.9"
     "@whatwg-node/promise-helpers": "npm:^1.3.0"
     graphql: "npm:^16.9.0"
     pkgroll: "npm:2.14.3"
@@ -5198,7 +5198,7 @@ __metadata:
     "@repeaterjs/repeater": "npm:^3.0.4"
     "@types/extract-files": "npm:13.0.1"
     "@whatwg-node/disposablestack": "npm:^0.0.6"
-    "@whatwg-node/fetch": "npm:^0.10.8"
+    "@whatwg-node/fetch": "npm:^0.10.9"
     "@whatwg-node/promise-helpers": "npm:^1.3.0"
     extract-files: "npm:13.0.0"
     graphql: "npm:^16.9.0"
@@ -5247,7 +5247,7 @@ __metadata:
     "@types/lodash": "npm:4.17.20"
     "@whatwg-node/disposablestack": "npm:^0.0.6"
     "@whatwg-node/events": "npm:^0.1.2"
-    "@whatwg-node/fetch": "npm:^0.10.8"
+    "@whatwg-node/fetch": "npm:^0.10.9"
     "@whatwg-node/promise-helpers": "npm:^1.3.0"
     graphql: "npm:^16.9.0"
     graphql-federation-gateway-audit: "the-guild-org/graphql-federation-gateway-audit#main"
@@ -5924,7 +5924,7 @@ __metadata:
     "@types/dockerode": "npm:^3.3.42"
     "@types/node": "npm:^22.15.30"
     "@whatwg-node/disposablestack": "npm:^0.0.6"
-    "@whatwg-node/fetch": "npm:^0.10.8"
+    "@whatwg-node/fetch": "npm:^0.10.9"
     dockerode: "npm:^4.0.7"
     glob: "npm:^11.0.3"
     graphql: "npm:^16.9.0"
@@ -5989,7 +5989,7 @@ __metadata:
     "@graphql-tools/utils": "npm:^10.7.2"
     "@types/node": "npm:^22.15.30"
     "@whatwg-node/disposablestack": "npm:^0.0.6"
-    "@whatwg-node/fetch": "npm:^0.10.8"
+    "@whatwg-node/fetch": "npm:^0.10.9"
     "@whatwg-node/promise-helpers": "npm:^1.2.5"
     graphql: "npm:^16.10.0"
     jest-leak-detector: "npm:30.0.2"
@@ -9452,25 +9452,25 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@whatwg-node/fetch@npm:^0.10.0, @whatwg-node/fetch@npm:^0.10.6, @whatwg-node/fetch@npm:^0.10.8":
-  version: 0.10.8
-  resolution: "@whatwg-node/fetch@npm:0.10.8"
+"@whatwg-node/fetch@npm:^0.10.0, @whatwg-node/fetch@npm:^0.10.6, @whatwg-node/fetch@npm:^0.10.8, @whatwg-node/fetch@npm:^0.10.9":
+  version: 0.10.9
+  resolution: "@whatwg-node/fetch@npm:0.10.9"
   dependencies:
-    "@whatwg-node/node-fetch": "npm:^0.7.21"
+    "@whatwg-node/node-fetch": "npm:^0.7.22"
     urlpattern-polyfill: "npm:^10.0.0"
-  checksum: 10c0/7dc3cad446ede6fe9df8d01b4484ace9a6bd2a22fcae90fdf970012f12c11dba21af92f071e2f4bfa1dd81b554e196b6ee6669dfb0fd5e2d1bd82db3f10968ca
+  checksum: 10c0/0765e8d4faf2caa4452a09ffbbad319a65c33034f6ddc95a9b751a925f767b9a2cc55d1182b3aadfd48b9d1bb796069f8e544fa2c12a7f01c0827d7451035c43
   languageName: node
   linkType: hard
 
-"@whatwg-node/node-fetch@npm:^0.7.21":
-  version: 0.7.21
-  resolution: "@whatwg-node/node-fetch@npm:0.7.21"
+"@whatwg-node/node-fetch@npm:^0.7.22":
+  version: 0.7.22
+  resolution: "@whatwg-node/node-fetch@npm:0.7.22"
   dependencies:
     "@fastify/busboy": "npm:^3.1.1"
     "@whatwg-node/disposablestack": "npm:^0.0.6"
     "@whatwg-node/promise-helpers": "npm:^1.3.2"
     tslib: "npm:^2.6.3"
-  checksum: 10c0/4aaed0511dc1b4cdfa060e5f3d0919d162c786d88bae93fd98a0dab6b55d8c09b6ecca17c96d3b29900e1e045db811a5fefc597614097e161a9b8b558102eb91
+  checksum: 10c0/270e0f3c290cfe813f8715a5c0997a591e89fa2f4334841e21171ab1ac4afc4f799c55b6a3f405156581f8f35acd23f92e5808f5d336baded0053d122d5ddecc
   languageName: node
   linkType: hard
 
