fix(deps): replace dependency apollo-server-core with @apollo/server ^4.0.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
apollo-server-core (source) → @apollo/server	dependencies	replacement	^3.13.0 → ^4.0.0

This is a special PR that replaces apollo-server-core with the community suggested minimal stable replacement version.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cursor]

Stale comment

Requesting changes because this update does not just remove apollo-server-core: it leaves packages/flatbread/package.json with two @apollo/server entries, and JSON's last-key-wins behavior means Flatbread now resolves to Apollo Server 4. The regenerated lockfile confirms the downgrade and even records Apollo Server 4 as deprecated/EOL, so this PR changes the shipped server version in the wrong direction.

  

_{Sent by Cursor Automation: Flatbread PR Review}

[cursor]

package.json already has @apollo/server: "5.0.0" earlier in this object. Adding a second @apollo/server key here means the manifest parses with last-key-wins semantics (require('./packages/flatbread/package.json').dependencies['@apollo/server'] now resolves to ^4.0.0), so this PR silently downgrades Flatbread from Apollo Server 5 to 4 instead of simply removing apollo-server-core. The updated lockfile confirms that downgrade and also pulls in Apollo Server 4's deprecation/EOL notice. Please keep a single @apollo/server entry at the intended version and remove only the obsolete apollo-server-core dependency.

[cursor]

Stale comment

Automated review skipped — dependency-only update

This PR is a pure dependency substitution authored by renovate[bot] (apollo-server-core → @apollo/server ^4.0.0). The code-review orchestrator is configured to skip dependency-only updates. No source, test, config, or doc files are modified.

No action required from the review automation.

  

_{Sent by Cursor Automation: Flatbread PR Review}

[cursor]

Stale comment

Code Review Orchestrator — skipped

This PR is a dependency-only update (Renovate bot replacing apollo-server-core with @apollo/server ^4.0.0). Adversarial review is not run for pure dependency updates.

  

_{Sent by Cursor Automation: Flatbread PR Review}

[cursor]

Code-review orchestrator — skipped (dependency-only update)

This PR is a Renovate dependency replacement (apollo-server-core → @apollo/server ^4.0.0) with no application source changes. The adversarial review DAG is not run for dependency-only updates.

  

_{Sent by Cursor Automation: Flatbread PR Review}