Fix for code scanning alert no. 45: Incomplete string escaping or encoding (#7025)

* Potential fix for code scanning alert no. 45: Incomplete string escaping or encoding

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Changeset

---------

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: ardatan

.changeset/whole-hands-smell.md

@@ -0,0 +1,5 @@
+---
+'@graphql-tools/utils': patch
+---
+
+Better handling for field name handling in `buildOperationForField`

packages/utils/src/build-operation-for-field.ts

@@ -479,9 +479,9 @@ function resolveField({
   if (fieldTypeMap.has(fieldPathStr) && fieldTypeMap.get(fieldPathStr) !== field.type.toString()) {
     fieldName += (field.type as any)
       .toString()
-      .replace('!', 'NonNull')
-      .replace('[', 'List')
-      .replace(']', '');
+      .replace(/!/g, 'NonNull')
+      .replace(/\[/g, 'List')
+      .replace(/\]/g, '');
   }
   fieldTypeMap.set(fieldPathStr, field.type.toString());