fix(deps): replace dependency apollo-server-express with @apollo/server ^4.0.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
apollo-server-express (source) → @apollo/server	dependencies	replacement	^3.13.0 → ^4.0.0

This is a special PR that replaces apollo-server-express with the community suggested minimal stable replacement version.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cursor]

CI Root Cause

Status: third-party-failure

Failing checks:

• build (22.x, ubuntu-latest): pnpm install --frozen-lockfile exited with code 1

Evidence:

• sharp@0.30.7 attempted to download its prebuilt native binary: prebuild-install warn install Request timed out — the download from github.com/lovell/sharp-libvips timed out on the runner.
• The fallback from-source compilation then failed with: ../src/common.cc:24:10: fatal error: vips/vips8: No such file or directory — the GitHub Actions runner does not have libvips development headers installed.
• sharp@0.31.3 and sharp@0.34.3 both installed successfully in the same CI run (prebuilt binaries downloaded fine), confirming this was a transient network blip specific to sharp@0.30.7.
• This PR's changes (apollo-server-express → @apollo/server ^4.0.0) do not touch sharp at all. The sharp@0.30.7 package was already present in the lockfile on main before this PR.

Resolution steps:

• Re-run the failed CI job — the most likely fix, since this is a transient network timeout.
• If re-runs continue to fail, consider whether sharp@0.30.7 (a transitive dependency of an older package in the monorepo) can be deduplicated to a newer version that reliably provides prebuilt binaries for the current runner environment.

No code changes were made because this failure is not caused by the branch.

  

_{Sent by Cursor Automation: Flatbread - Fix CI}

[cursor]

Stale comment

Automated review skipped — dependency-only PR.

This PR only updates a dependency (apollo-server-express → @apollo/server ^4.0.0) and contains no source, test, or config changes. The code-review orchestrator is configured to skip dependency-only updates; no adversarial review was run.

  

_{Sent by Cursor Automation: Flatbread PR Review}

[cursor]

Automated review skipped — dependency-only update.

This PR is authored by renovate[bot] and contains only a package dependency replacement (apollo-server-express → @apollo/server ^4.0.0). The code-review orchestrator is configured to skip dependency-only updates immediately.

No adversarial review DAG was executed.

  

_{Sent by Cursor Automation: Flatbread PR Review}