Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2022

Bumps graphql-java from 17.0 to 19.2.

Release notes

Sourced from graphql-java's releases.

19.2

The 19.2 bug fix release has been created

What's Changed

Full Changelog: graphql-java/graphql-java@v19.1...v19.2

19.1

This bug fix release was made to address a specific NullPointerException problem if consumers are explicitly setting the ExecutionInput to null

See graphql-java/graphql-java#2908 for the code details.

The other fixes are included because they are... well... fixes and where ready at the time.

What's Changed

New Contributors

Full Changelog: graphql-java/graphql-java@v19.0...v19.1

19.0

This is release 19.0 of GraphQL Java. It contains one breaking change.

It contains one security related bugfix hardening GraphQL Java more against malicious requests: #2892

GraphQL Java now shades Antlr runtime to prevent any further dependency conflicts. Antlr is used internally for parsing and validating of GraphQL requests and SDL. #2854

It includes some performance improvements (#2786, #2769, #2839) and several bugfixes and general improvements.

Breaking change

#2769 is an improvement to reduce object allocation. It can contain a breaking change if you would implement your own ChainedInstrumentation.

Change in behaviour

#2878 introduces i18n for validation error messages, and by default will set locale to the JVM default locale

... (truncated)

Commits
  • db56490 Stable port of #2940 (#2947)
  • 9afe704 Stable port of Diff counts are the same (#2946)
  • cef3343 Stable port of Fix printing directives when they contain something like a for...
  • 355fbbf Stable port of Fix field visibility bug with enum with enum args (#2926) (#2944)
  • 919347c Stable fix for #2943 (#2943)
  • 9479cc0 Merge pull request #2911 from graphql-java/benchmark_enf
  • 9f8aaed Added test fore intersection
  • fb507ad Xuorig Fix PR - Edge case with GraphQLTypeReference and Schema Transforms (#2...
  • dbc0476 Merge branch 'master' into benchmark_enf
  • faf6337 Fix typo in description of skip directive (#2915)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [graphql-java](https://github.com/graphql-java/graphql-java) from 17.0 to 19.2.
- [Release notes](https://github.com/graphql-java/graphql-java/releases)
- [Commits](graphql-java/graphql-java@v17.0...v19.2)

---
updated-dependencies:
- dependency-name: com.graphql-java:graphql-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 1, 2022
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 1, 2023

Superseded by #251.

@dependabot dependabot bot closed this Jan 1, 2023
@dependabot dependabot bot deleted the dependabot/gradle/com.graphql-java-graphql-java-19.2 branch January 1, 2023 21:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants