diff --git a/packages/api/package.json b/packages/api/package.json
index 3ef887c..566219d 100644
--- a/packages/api/package.json
+++ b/packages/api/package.json
@@ -41,7 +41,7 @@
     "@openfoundry/sync": "workspace:*",
     "cors": "^2.8.5",
     "express": "^4.21.0",
-    "graphql": "^16.10.0",
+    "graphql": "^17.0.2",
     "graphql-subscriptions": "^2.0.0",
     "graphql-ws": "^5.16.0",
     "helmet": "^8.3.0",
diff --git a/packages/odl/package.json b/packages/odl/package.json
index cf344f8..8185a21 100644
--- a/packages/odl/package.json
+++ b/packages/odl/package.json
@@ -26,7 +26,7 @@
   "license": "Apache-2.0",
   "dependencies": {
     "commander": "^14.0.3",
-    "graphql": "^16.10.0"
+    "graphql": "^17.0.2"
   },
   "devDependencies": {
     "@openfoundry/spi": "workspace:*",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 272c8b6..98d3ac4 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -133,13 +133,13 @@ importers:
     dependencies:
       '@apollo/server':
         specifier: ^5.5.1
-        version: 5.5.1(graphql@16.12.0)
+        version: 5.5.1(graphql@17.0.2)
       '@as-integrations/express4':
         specifier: ^1.1.2
-        version: 1.1.2(@apollo/server@5.5.1(graphql@16.12.0))(express@4.22.1)
+        version: 1.1.2(@apollo/server@5.5.1(graphql@17.0.2))(express@4.22.1)
       '@graphql-tools/schema':
         specifier: ^10.1.0
-        version: 10.1.0(graphql@16.12.0)
+        version: 10.1.0(graphql@17.0.2)
       '@openfga/sdk':
         specifier: ^0.9.7
         version: 0.9.7
@@ -177,14 +177,14 @@ importers:
         specifier: ^4.21.0
         version: 4.22.1
       graphql:
-        specifier: ^16.10.0
-        version: 16.12.0
+        specifier: ^17.0.2
+        version: 17.0.2
       graphql-subscriptions:
         specifier: ^2.0.0
-        version: 2.0.0(graphql@16.12.0)
+        version: 2.0.0(graphql@17.0.2)
       graphql-ws:
         specifier: ^5.16.0
-        version: 5.16.2(graphql@16.12.0)
+        version: 5.16.2(graphql@17.0.2)
       helmet:
         specifier: ^8.3.0
         version: 8.3.0
@@ -288,8 +288,8 @@ importers:
         specifier: ^14.0.3
         version: 14.0.3
       graphql:
-        specifier: ^16.10.0
-        version: 16.12.0
+        specifier: ^17.0.2
+        version: 17.0.2
     devDependencies:
       '@openfoundry/spi':
         specifier: workspace:*
@@ -1549,9 +1549,9 @@ packages:
     peerDependencies:
       graphql: '>=0.11 <=16'
 
-  graphql@16.12.0:
-    resolution: {integrity: sha512-DKKrynuQRne0PNpEbzuEdHlYOMksHSUI8Zc9Unei5gTsMNA2/vMpoMz/yKba50pejK56qj98qM0SjYxAKi13gQ==}
-    engines: {node: ^12.22.0 || ^14.16.0 || ^16.0.0 || >=17.0.0}
+  graphql@17.0.2:
+    resolution: {integrity: sha512-FRWbddMxfkjiB7z+aQDWIR+E34xo9I8c9mtK2RPv8PmMzKRvrdsreHL/Ui/TmwHJfhHChEtsFPyMHKI+xuarQQ==}
+    engines: {node: ^22.0.0 || ^24.0.0 || ^25.0.0 || >=26.0.0}
 
   has-property-descriptors@1.0.2:
     resolution: {integrity: sha512-55JNKuIW+vq4Ke1BjOTjM2YctQIvCT7GFzHwmfZPGo5wnrgkid0YQtnAleFSqumZm4az3n2BS+erby5ipJdgrg==}
@@ -1846,6 +1846,7 @@ packages:
   prom-client@15.1.3:
     resolution: {integrity: sha512-6ZiOBfCywsD4k1BN9IX0uZhF+tJkV8q8llP64G5Hajs4JOeVLPCwpPVcpXy3BwYiUGgyJzsJJQeOIv7+hDSq8g==}
     engines: {node: ^16 || ^18 || >=20}
+    deprecated: prom-client has been replaced by @prometheus-io/client
 
   protobufjs@7.6.4:
     resolution: {integrity: sha512-RJJPTTpvFfHcWLkIa2JFWK4XvtSzS0yEWDmunqHXli1h3JlkbcQZXDZdcWxv+JK3Xsl5/UFDPZ0iGm7DAengYw==}
@@ -2218,9 +2219,9 @@ packages:
 
 snapshots:
 
-  '@apollo/cache-control-types@1.0.3(graphql@16.12.0)':
+  '@apollo/cache-control-types@1.0.3(graphql@17.0.2)':
     dependencies:
-      graphql: 16.12.0
+      graphql: 17.0.2
 
   '@apollo/protobufjs@1.2.7':
     dependencies:
@@ -2237,33 +2238,33 @@ snapshots:
       '@types/long': 4.0.2
       long: 4.0.0
 
-  '@apollo/server-gateway-interface@2.0.0(graphql@16.12.0)':
+  '@apollo/server-gateway-interface@2.0.0(graphql@17.0.2)':
     dependencies:
       '@apollo/usage-reporting-protobuf': 4.1.1
       '@apollo/utils.fetcher': 3.1.0
       '@apollo/utils.keyvaluecache': 4.0.0
       '@apollo/utils.logger': 3.0.0
-      graphql: 16.12.0
+      graphql: 17.0.2
 
-  '@apollo/server@5.5.1(graphql@16.12.0)':
+  '@apollo/server@5.5.1(graphql@17.0.2)':
     dependencies:
-      '@apollo/cache-control-types': 1.0.3(graphql@16.12.0)
-      '@apollo/server-gateway-interface': 2.0.0(graphql@16.12.0)
+      '@apollo/cache-control-types': 1.0.3(graphql@17.0.2)
+      '@apollo/server-gateway-interface': 2.0.0(graphql@17.0.2)
       '@apollo/usage-reporting-protobuf': 4.1.1
       '@apollo/utils.createhash': 3.0.1
       '@apollo/utils.fetcher': 3.1.0
       '@apollo/utils.isnodelike': 3.0.0
       '@apollo/utils.keyvaluecache': 4.0.0
       '@apollo/utils.logger': 3.0.0
-      '@apollo/utils.usagereporting': 2.1.0(graphql@16.12.0)
+      '@apollo/utils.usagereporting': 2.1.0(graphql@17.0.2)
       '@apollo/utils.withrequired': 3.0.0
-      '@graphql-tools/schema': 10.1.0(graphql@16.12.0)
+      '@graphql-tools/schema': 10.1.0(graphql@17.0.2)
       async-retry: 1.3.3
       body-parser: 2.3.0
       content-type: 1.0.5
       cors: 2.8.6
       finalhandler: 2.1.1
-      graphql: 16.12.0
+      graphql: 17.0.2
       loglevel: 1.9.2
       lru-cache: 11.5.2
       negotiator: 1.1.0
@@ -2280,9 +2281,9 @@ snapshots:
       '@apollo/utils.isnodelike': 3.0.0
       sha.js: 2.4.12
 
-  '@apollo/utils.dropunuseddefinitions@2.0.1(graphql@16.12.0)':
+  '@apollo/utils.dropunuseddefinitions@2.0.1(graphql@17.0.2)':
     dependencies:
-      graphql: 16.12.0
+      graphql: 17.0.2
 
   '@apollo/utils.fetcher@3.1.0': {}
 
@@ -2295,38 +2296,38 @@ snapshots:
 
   '@apollo/utils.logger@3.0.0': {}
 
-  '@apollo/utils.printwithreducedwhitespace@2.0.1(graphql@16.12.0)':
+  '@apollo/utils.printwithreducedwhitespace@2.0.1(graphql@17.0.2)':
     dependencies:
-      graphql: 16.12.0
+      graphql: 17.0.2
 
-  '@apollo/utils.removealiases@2.0.1(graphql@16.12.0)':
+  '@apollo/utils.removealiases@2.0.1(graphql@17.0.2)':
     dependencies:
-      graphql: 16.12.0
+      graphql: 17.0.2
 
-  '@apollo/utils.sortast@2.0.1(graphql@16.12.0)':
+  '@apollo/utils.sortast@2.0.1(graphql@17.0.2)':
     dependencies:
-      graphql: 16.12.0
+      graphql: 17.0.2
       lodash.sortby: 4.7.0
 
-  '@apollo/utils.stripsensitiveliterals@2.0.1(graphql@16.12.0)':
+  '@apollo/utils.stripsensitiveliterals@2.0.1(graphql@17.0.2)':
     dependencies:
-      graphql: 16.12.0
+      graphql: 17.0.2
 
-  '@apollo/utils.usagereporting@2.1.0(graphql@16.12.0)':
+  '@apollo/utils.usagereporting@2.1.0(graphql@17.0.2)':
     dependencies:
       '@apollo/usage-reporting-protobuf': 4.1.1
-      '@apollo/utils.dropunuseddefinitions': 2.0.1(graphql@16.12.0)
-      '@apollo/utils.printwithreducedwhitespace': 2.0.1(graphql@16.12.0)
-      '@apollo/utils.removealiases': 2.0.1(graphql@16.12.0)
-      '@apollo/utils.sortast': 2.0.1(graphql@16.12.0)
-      '@apollo/utils.stripsensitiveliterals': 2.0.1(graphql@16.12.0)
-      graphql: 16.12.0
+      '@apollo/utils.dropunuseddefinitions': 2.0.1(graphql@17.0.2)
+      '@apollo/utils.printwithreducedwhitespace': 2.0.1(graphql@17.0.2)
+      '@apollo/utils.removealiases': 2.0.1(graphql@17.0.2)
+      '@apollo/utils.sortast': 2.0.1(graphql@17.0.2)
+      '@apollo/utils.stripsensitiveliterals': 2.0.1(graphql@17.0.2)
+      graphql: 17.0.2
 
   '@apollo/utils.withrequired@3.0.0': {}
 
-  '@as-integrations/express4@1.1.2(@apollo/server@5.5.1(graphql@16.12.0))(express@4.22.1)':
+  '@as-integrations/express4@1.1.2(@apollo/server@5.5.1(graphql@17.0.2))(express@4.22.1)':
     dependencies:
-      '@apollo/server': 5.5.1(graphql@16.12.0)
+      '@apollo/server': 5.5.1(graphql@17.0.2)
       express: 4.22.1
 
   '@esbuild/aix-ppc64@0.28.2':
@@ -2407,30 +2408,30 @@ snapshots:
   '@esbuild/win32-x64@0.28.2':
     optional: true
 
-  '@graphql-tools/merge@9.2.3(graphql@16.12.0)':
+  '@graphql-tools/merge@9.2.3(graphql@17.0.2)':
     dependencies:
-      '@graphql-tools/utils': 12.0.0(graphql@16.12.0)
-      graphql: 16.12.0
+      '@graphql-tools/utils': 12.0.0(graphql@17.0.2)
+      graphql: 17.0.2
       tslib: 2.8.1
 
-  '@graphql-tools/schema@10.1.0(graphql@16.12.0)':
+  '@graphql-tools/schema@10.1.0(graphql@17.0.2)':
     dependencies:
-      '@graphql-tools/merge': 9.2.3(graphql@16.12.0)
-      '@graphql-tools/utils': 12.0.0(graphql@16.12.0)
-      graphql: 16.12.0
+      '@graphql-tools/merge': 9.2.3(graphql@17.0.2)
+      '@graphql-tools/utils': 12.0.0(graphql@17.0.2)
+      graphql: 17.0.2
       tslib: 2.8.1
 
-  '@graphql-tools/utils@12.0.0(graphql@16.12.0)':
+  '@graphql-tools/utils@12.0.0(graphql@17.0.2)':
     dependencies:
-      '@graphql-typed-document-node/core': 3.2.0(graphql@16.12.0)
+      '@graphql-typed-document-node/core': 3.2.0(graphql@17.0.2)
       '@whatwg-node/promise-helpers': 1.3.2
       cross-inspect: 1.0.1
-      graphql: 16.12.0
+      graphql: 17.0.2
       tslib: 2.8.1
 
-  '@graphql-typed-document-node/core@3.2.0(graphql@16.12.0)':
+  '@graphql-typed-document-node/core@3.2.0(graphql@17.0.2)':
     dependencies:
-      graphql: 16.12.0
+      graphql: 17.0.2
 
   '@grpc/grpc-js@1.14.4':
     dependencies:
@@ -3309,16 +3310,16 @@ snapshots:
 
   gopd@1.2.0: {}
 
-  graphql-subscriptions@2.0.0(graphql@16.12.0):
+  graphql-subscriptions@2.0.0(graphql@17.0.2):
     dependencies:
-      graphql: 16.12.0
+      graphql: 17.0.2
       iterall: 1.3.0
 
-  graphql-ws@5.16.2(graphql@16.12.0):
+  graphql-ws@5.16.2(graphql@17.0.2):
     dependencies:
-      graphql: 16.12.0
+      graphql: 17.0.2
 
-  graphql@16.12.0: {}
+  graphql@17.0.2: {}
 
   has-property-descriptors@1.0.2:
     dependencies: