# What changed in @graphql-tools/utils

> 11 changes in @graphql-tools/utils 12 to 13 from its official release notes, upgrade guides and advisories: 1 security, 8 new APIs and options. Each one cited. Sources checked 2026-10-20. HTML: https://unstale.sh/npm/@graphql-tools/utils/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @graphql-tools/utils 13

### New APIs and options

- A helper for getting the default incremental delivery spec. (13.1.1) — [release notes](https://github.com/ardatan/graphql-tools/blob/fa0bb8e22c21e826b3332879b50f4da65274ccfb/packages/utils/CHANGELOG.md#1311)
- A helper for getting incremental spec parameter names. (13.1.1) — [release notes](https://github.com/ardatan/graphql-tools/blob/fa0bb8e22c21e826b3332879b50f4da65274ccfb/packages/utils/CHANGELOG.md#1311)
- A helper for getting the multipart content type. (13.1.1) — [release notes](https://github.com/ardatan/graphql-tools/blob/fa0bb8e22c21e826b3332879b50f4da65274ccfb/packages/utils/CHANGELOG.md#1311)
- Provides a shared HTTP contract mapping Accept and Content-Type parameters to executor payload IDs, so servers can look up spec strings instead of hardcoding them. (13.1.1) — [release notes](https://github.com/ardatan/graphql-tools/blob/fa0bb8e22c21e826b3332879b50f4da65274ccfb/packages/utils/CHANGELOG.md#1311)
- A helper for looking up an incremental delivery spec. (13.1.1) — [release notes](https://github.com/ardatan/graphql-tools/blob/fa0bb8e22c21e826b3332879b50f4da65274ccfb/packages/utils/CHANGELOG.md#1311)
- Pass incrementalSpec as 'v0.1' or 'v0.2' on execute, subscribe, normalizedExecutor, or ExecutionRequest to select the incremental delivery payload format; 'v0.1' remains the default. (13.1.0) — [release notes](https://github.com/ardatan/graphql-tools/blob/fa0bb8e22c21e826b3332879b50f4da65274ccfb/packages/utils/CHANGELOG.md#1310)
- Adds a helper for GraphQL 16/17 VariableValues compatibility when calling getArgumentValues. (13.0.2) — [release notes](https://github.com/ardatan/graphql-tools/blob/fa0bb8e22c21e826b3332879b50f4da65274ccfb/packages/utils/CHANGELOG.md#1302)
- Adds a helper to normalize getVariableValues results for GraphQL 16/17 VariableValues compatibility. (13.0.2) — [release notes](https://github.com/ardatan/graphql-tools/blob/fa0bb8e22c21e826b3332879b50f4da65274ccfb/packages/utils/CHANGELOG.md#1302)

### Behavior and default changes

- Supports merging v0.2 payloads by tracking pending ids, placing deferred data and streamed items, and folding completed errors into errors. (13.1.0) — [release notes](https://github.com/ardatan/graphql-tools/blob/fa0bb8e22c21e826b3332879b50f4da65274ccfb/packages/utils/CHANGELOG.md#1310)

### Fixes and other changes

- Flattens nested deferred patches so result visiting sees fields under a child @defer. (13.1.0) — [release notes](https://github.com/ardatan/graphql-tools/blob/fa0bb8e22c21e826b3332879b50f4da65274ccfb/packages/utils/CHANGELOG.md#1310)

## @graphql-tools/utils 12

### Security

- GraphQL Tools has prototype pollution in well-established utility function `mergeDeep` (12.0.1) — [security advisory](https://github.com/advisories/GHSA-7MX3-VVMW-HJMV)