fix(deps): update dependency graphql to v17

This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [jsdom](https://github.com/jsdom/jsdom) | [`30.1.3` → `31.0.0`](https://renovatebot.com/diffs/npm/jsdom/30.1.3/31.0.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/jsdom/31.0.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/jsdom/30.1.3/31.0.0?slim=true) |

---

### Release Notes

<details>
<summary>jsdom/jsdom (jsdom)</summary>

### [`v31.0.0`](https://github.com/jsdom/jsdom/releases/tag/v31.0.0)

[Compare Source](https://github.com/jsdom/jsdom/compare/v30.1.3...v31.0.0)

#### Breaking changes

- Changed the optional canvas and image decoding backend from `canvas` to `@napi-rs/canvas`. Install `@napi-rs/canvas` v1.0.13 or later in the v1.x series alongside jsdom; installing `canvas` alone no longer enables this support. The new backend provides prebuilt Skia binaries on supported platforms, and rendering and encoded image bytes can differ. Projects using native canvas objects or custom font registration should follow the [canvas migration guidance](https://github.com/jsdom/jsdom/blob/v31.0.0/README.md#canvas-support). Added WebP serialization through `canvas.toDataURL()` and `canvas.toBlob()`. Fixed image loading to wait for decoding before firing `load`, discard obsolete source requests, avoid refetching when dimensions change, and prevent failed images from drawing stale contents. Fixed canvas context and serialization behavior, including unsupported context types, read-only `ctx.canvas`, image-drawing exceptions, MIME type and quality normalization, and asynchronous `null` results from `canvas.toBlob()` for empty canvases or encoding failures. ([@&#8203;Brooooooklyn](https://github.com/Brooooooklyn))
- Changed CSS parsing, selector matching, and computed styles to use a new integrated implementation, with substantially expanded support and faster selector queries and repeated style reads. This includes cascade layers, nesting, `@scope`, custom-property substitution and registration through `@property` and `CSS.registerProperty()`, typed `attr()`, conditional `if()`, shadow-tree styling with `:host`, `::slotted()`, and `::part()`, pseudo-element computed styles, and constructable stylesheets with `document.adoptedStyleSheets` and `shadowRoot.adoptedStyleSheets`. Fixed numerous cascade, shorthand, serialization, and default-style issues; computed declarations now stay live across DOM and stylesheet changes. CSS serialization and computed values can differ from previous releases.
- Changed HTML and XML parsing to pause at blocking scripts until their required resources are ready. The `JSDOM` constructor, `JSDOM.fromURL()`, and `JSDOM.fromFile()` can now return partially parsed documents. Wait for `DOMContentLoaded` for the finished tree, or the window's `load` event for load-delaying resources, checking `document.readyState` first in case the event has already fired. XML syntax errors encountered after asynchronous parsing resumes are reported through the virtual console as `"xml-parsing"` errors.

#### Other changes

- Added `window.reportError()`, which dispatches an `error` event and reports uncanceled errors to the virtual console. ([@&#8203;sarankumar1325](https://github.com/sarankumar1325))
- Added `element.ariaBrailleLabel` and `element.ariaBrailleRoleDescription`. ([@&#8203;Kjubikstronk](https://github.com/Kjubikstronk))
- Fixed page-completion `load` events to fire only on the window. Use `window.addEventListener("load", ...)` or `window.onload` instead of listening on the document.
- Fixed `document.open()`, including implicit calls from `document.write()`, to clear event listeners and handlers from the document, its descendants, and its window when replacing the input stream.
- Fixed `document.write()` to process successive writes through the parser's input stream, preserve insertion points across nested scripts, and make completed text immediately visible. Script-created input streams now remain open until `document.close()`.
- Fixed dynamically inserted scripts to respect `script.async = false` execution order, use their source text and document from preparation time, and avoid executing after adoption into another document. Scripts parsed through inert fragment APIs no longer execute when subsequently inserted.
- Fixed unrelated images, stylesheets, and frames being delayed behind scripts, and resource completion events firing before nested stylesheet imports finish. Cyclic imports no longer prevent completion, and `<style>` elements in shadow trees now fire `load` events.
- Fixed `window.stop()` to cancel pending subresource and `XMLHttpRequest` requests in descendant frames and suppress completion events for canceled loads, while allowing subsequent requests to proceed.
- Fixed repeated `document.close()` calls replaying readiness and load events, and incorrect iframe load events when reopening documents from event handlers.
- Fixed memory leaks where pending request interceptor promises retained closed windows, introduced in v28.0.0.
- Fixed focus remaining on elements that become non-focusable after DOM or style changes. Focus now moves asynchronously to the document's viewport, and `element.blur()` can release it immediately.
- Fixed `document.hasFocus()` returning false before an element is focused or during focus transitions within the document, including inside frames.
- Fixed `<template>` parsing and `template.innerHTML` serialization in XML documents, including templates with namespace prefixes. ([@&#8203;b84330808](https://github.com/b84330808))
- Fixed `rect.toJSON()` and `performance.toJSON()` to create their result objects in the method's realm instead of the host Node.js realm.

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xOTguMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE5OC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: https://gitea.unbound.se/unboundsoftware/schemas-app/pulls/429
Co-authored-by: Renovate Bot <renovate@unbound.se>

.pre-commit-config.yaml

@@ -28,7 +28,7 @@ repos:
     stages: [ commit-msg ]
     additional_dependencies: [ '@commitlint/config-conventional' ]
 - repo: https://github.com/pre-commit/mirrors-eslint
-  rev: v10.13.0
+  rev: v10.14.0
   hooks:
   - id: eslint
     types: [ file ]

Dockerfile

@@ -1,4 +1,4 @@
-FROM cypress/base:26.0.0@sha256:446be8fcb63e3cad2f9a4e14720e3d8e35993e12f36da541e09f5740a4c2477c as builder
+FROM cypress/base:26.13.0@sha256:5f5138fff456c4250cb327421f6a43e71c3feb50e46f95b3261c5bdc6f4b0531 as builder
 WORKDIR /build
 
 RUN npm install --global node-gyp && \

package.json

@@ -19,12 +19,12 @@
   },
   "dependencies": {
     "@apollo/client": "3.14.1",
-    "@auth0/auth0-vue": "2.12.0",
+    "@auth0/auth0-vue": "2.13.0",
     "@vue/apollo-composable": "4.2.2",
-    "graphql": "16.14.2",
+    "graphql": "17.1.0",
     "graphql-ws": "6.4.1",
-    "nuxt": "4.6.2",
-    "vue": "3.5.44",
+    "nuxt": "4.6.4",
+    "vue": "3.5.45",
     "vuetify-nuxt-module": "0.19.5"
   },
   "version": "1.0.0",
@@ -41,25 +41,25 @@
     "@graphql-codegen/typescript": "6.1.2",
     "@graphql-codegen/typescript-operations": "6.2.0",
     "@graphql-codegen/typescript-vue-apollo": "5.0.1",
-    "@nuxt/devtools": "3.4.4",
+    "@nuxt/devtools": "4.1.0",
     "@nuxt/eslint": "1.17.0",
     "@nuxtjs/stylelint-module": "5.2.1",
     "@stylistic/eslint-plugin": "5.10.0",
     "@vitejs/plugin-vue": "6.0.10",
-    "@vitest/coverage-v8": "5.0.5",
+    "@vitest/coverage-v8": "5.1.0",
     "@vue/test-utils": "2.5.1",
-    "eslint": "10.13.0",
+    "eslint": "10.14.0",
     "eslint-plugin-simple-import-sort": "14.0.0",
     "eslint-plugin-vue": "10.12.0",
-    "jsdom": "30.1.3",
+    "jsdom": "31.0.0",
     "postcss-html": "2.0.0",
     "stylelint": "17.16.0",
     "stylelint-config-recommended-vue": "2.0.0",
     "stylelint-config-standard": "40.0.0",
     "typescript": "6.0.3",
     "typescript-eslint": "8.72.1",
-    "vitest": "5.0.5",
-    "vue-eslint-parser": "10.4.1"
+    "vitest": "5.1.0",
+    "vue-eslint-parser": "10.4.2"
   },
   "overrides": {
     "@vue/server-renderer": "$vue"