Skip to content

chore(deps): bump github.com/graph-gophers/graphql-go from 1.5.0 to 1.9.0#19207

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/github.com/graph-gophers/graphql-go-1.9.0
Open

chore(deps): bump github.com/graph-gophers/graphql-go from 1.5.0 to 1.9.0#19207
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/github.com/graph-gophers/graphql-go-1.9.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 26, 2026

Bumps github.com/graph-gophers/graphql-go from 1.5.0 to 1.9.0.

Release notes

Sourced from github.com/graph-gophers/graphql-go's releases.

v1.9.0

What's Changed

Full Changelog: graph-gophers/graphql-go@v1.8.0...v1.9.0

If this release helps you, please, consider becoming a sponsor ❤️

v1.8.0

What's Changed

  • Add DecodeSelectedFieldArgs to decode argument values for any nested selected field path directly from a resolver context. Enables reflection-free multi-level prefetching / batching (e.g. Category → Products → Reviews) that only loads requested branches, mitigating N+1 query problem even with pagination & filters by @​pavelnikolov in graph-gophers/graphql-go#684
  • Updated Go version in the go.mod file to 1.24 to be one minor version less than the latest Go release.

Full Changelog: graph-gophers/graphql-go@v1.7.2...v1.8.0

If this release helps you, please, consider becoming a sponsor ❤️

v1.7.2

What's Changed

  • [BUGFIX] Fix checksum mismatch between direct git access and golang proxy for v1.7.1. This version contains identical functionality to v1.7.1 but with proper tag creation to ensure consistent checksums across all proxy configurations by @​pavelnikolov in graph-gophers/graphql-go#683

Full Changelog: graph-gophers/graphql-go@v1.7.1...v1.7.2

v1.7.1

What's Changed

  • [BUGFIX] Reject object, interface, and input object type definitions that declare zero fields/input values (spec compliance) by @​pavelnikolov in graph-gophers/graphql-go#676
  • [IMPROVEMENT] Optimize overlapping field validation to avoid quadratic memory blowups on large sibling field lists by @​pavelnikolov in graph-gophers/graphql-go#678
  • [IMPROVEMENT] SelectedFieldNames now returns dot-delimited nested field paths (e.g. products, products.id, products.category, products.category.id). Intermediate container object/list paths are included so resolvers can check for both a branch (products.category) and its leaves (products.category.id). HasSelectedField and SortedSelectedFieldNames operate on these paths. This aligns behavior with typical resolver projection needs and fixes missing nested selections by @​pavelnikolov in graph-gophers/graphql-go#680

Full Changelog: graph-gophers/graphql-go@v1.7.0...v1.7.1

v1.7.0

What's Changed

Important

The default branch of the repository is now main. The previous default branch (i.e. master) is still present but will not be updated anymore.

... (truncated)

Changelog

Sourced from github.com/graph-gophers/graphql-go's changelog.

CHANGELOG

v1.9.0 Release v1.9.0

  • [IMPROVEMENT] Reduce query execution allocations by reusing internal temporary buffers in the execution hot path. Add DisableMemoryPooling() schema option to opt out and enable pooled vs non-pooled benchmark comparison. Added a MaxPooledBufferCap(n) method to set the maximum buffer capacity (in bytes) that can be returned to the internal memory pool. The default limit is 16KB.
  • [FEATURE] Allow schema cloning and applying a resolver to a schema without one. See Clone, MustClone and ApplyResolver schema methods for more details.
  • [CHORE] Applied go fix ./...-style modernization across the repo to align the code with newer Go idioms and standard library helpers.
  • [CHORE] Bump Go version in go.mod file to v1.25 to be one minor version less than the latest stable Go release.

v1.8.0 Release v1.8.0

  • [FEATURE] Added DecodeSelectedFieldArgs helper function to decode argument values for any (nested) selected field path directly from a resolver context, enabling efficient multi-level prefetching without per-resolver argument reflection. This enables selective, multi‑level batching (Category → Products → Reviews) by loading only requested fields, mitigating N+1 issues despite complex filters or pagination.
  • [CHORE] Bump Go version in go.mod file to v1.24 to be one minor version less than the latest stable Go release.

v1.7.2 Release v1.7.2

  • [BUGFIX] Fix checksum mismatch between direct git access and golang proxy for v1.7.1. This version contains identical functionality to v1.7.1 but with proper tag creation to ensure consistent checksums across all proxy configurations.

v1.7.1 Release v1.7.1

  • [IMPROVEMENT] SelectedFieldNames now returns dot-delimited nested field paths (e.g. products, products.id, products.category, products.category.id). Intermediate container object/list paths are included so resolvers can check for both a branch (products.category) and its leaves (products.category.id). HasSelectedField and SortedSelectedFieldNames operate on these paths. This aligns behavior with typical resolver projection needs and fixes missing nested selections.
  • [BUGFIX] Reject object, interface, and input object type definitions that declare zero fields/input values (spec compliance).
  • [IMPROVEMENT] Optimize overlapping field validation to avoid quadratic memory blowups on large sibling field lists.
  • [FEATURE] Add configurable safety valve for overlapping field comparison count with OverlapValidationLimit(n) schema option (0 disables the cap). When exceeded validation aborts early with rule OverlapValidationLimitExceeded. Disabled by default.
  • [TEST] Add benchmarks & randomized overlap stress test for mixed field/fragment patterns.

v1.7.0 Release v1.7.0

  • [FEATURE] Add resolver field selection inspection helpers (SelectedFieldNames, HasSelectedField, SortedSelectedFieldNames). Helpers are available by default and compute results lazily only when called. An explicit opt-out (DisableFieldSelections() schema option) is provided for applications that want to remove even the minimal context insertion overhead when the helpers are never used.

v1.5.0 Release v1.5.0

  • [FEATURE] Add specifiedBy directive in #532
  • [IMPROVEMENT] In this release we improve validation for primitive values, directives, repeat directives, #515, #516, #525, #527
  • [IMPROVEMENT] Fix minor unreachable code caused by t.Fatalf #530
  • [BUG] Fix __type queries sometimes not returning data in #540
  • [BUG] Allow deprecated directive on arguments by @​pavelnikolov in #541
  • [DOCS] Add array input example #536

v1.4.0 Release v1.4.0

  • [FEATURE] Add basic first step for Apollo Federation. This does NOT include full subgraph specification. This PR adds support only for _service schema level field. This library is long way from supporting the full sub-graph spec and we do not plan to implement that any time soon.

v1.3.0 Release v1.3.0

  • [FEATURE] Support custom panic handler #468
  • [FEATURE] Support interfaces implementing interfaces #471
  • [BUG] Support parsing nanoseconds time properly #486
  • [BUG] Fix a bug in maxDepth fragment spread logic #492

... (truncated)

Commits
  • a1d9dca chore: update changelog
  • 8d8c6eb chore: modernize go code (#703)
  • c4dfc8e feat: use mem pool to reduce allocs (#702)
  • 0b3c753 feat: clone schema (#697)
  • 73f66d5 chore(deps): bump tar and make-fetch-happen (#701)
  • 75b81a0 chore(deps): bump minimatch and @​apollo/gateway (#700)
  • 1c79be4 Bump qs from 6.14.1 to 6.14.2 in /example/federation/integration/gateway (#699)
  • 79248ab Bump @​apollo/server in /example/federation/integration/gateway (#698)
  • a6cb0d0 Bump qs and body-parser in /example/federation/integration/gateway (#696)
  • 77852c0 Bump qs and express in /example/federation/integration/gateway (#695)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
github.com/graph-gophers/graphql-go [>= 1.4.a, < 1.5]

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/graph-gophers/graphql-go](https://github.com/graph-gophers/graphql-go) from 1.5.0 to 1.9.0.
- [Release notes](https://github.com/graph-gophers/graphql-go/releases)
- [Changelog](https://github.com/graph-gophers/graphql-go/blob/main/CHANGELOG.md)
- [Commits](graph-gophers/graphql-go@v1.5.0...v1.9.0)

---
updated-dependencies:
- dependency-name: github.com/graph-gophers/graphql-go
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added auto-merge Auto-merge minor and patch version bumps auto-retest PRs with this label will be automatically retested if prow checks fails ci-all-qa-tests Tells CI to run all API tests (not just BAT). dependencies Pull requests that update a dependency file labels Feb 26, 2026
@dependabot dependabot bot requested a review from a team as a code owner February 26, 2026 05:53
@dependabot dependabot bot added ci-all-qa-tests Tells CI to run all API tests (not just BAT). auto-merge Auto-merge minor and patch version bumps auto-retest PRs with this label will be automatically retested if prow checks fails labels Feb 26, 2026
@rhacs-bot
Copy link
Contributor

Images are ready for the commit at 8726675.

To use with deploy scripts, first export MAIN_IMAGE_TAG=4.11.x-185-g872667584a.

@rhacs-bot
Copy link
Contributor

/retest

3 similar comments
@rhacs-bot
Copy link
Contributor

/retest

@rhacs-bot
Copy link
Contributor

/retest

@rhacs-bot
Copy link
Contributor

/retest

@openshift-ci
Copy link

openshift-ci bot commented Feb 26, 2026

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/gke-nongroovy-e2e-tests 8726675 link true /test gke-nongroovy-e2e-tests
ci/prow/gke-ui-e2e-tests 8726675 link true /test gke-ui-e2e-tests
ci/prow/gke-qa-e2e-tests 8726675 link false /test gke-qa-e2e-tests
ci/prow/gke-upgrade-tests 8726675 link false /test gke-upgrade-tests
ci/prow/ocp-4-12-nongroovy-e2e-tests 8726675 link false /test ocp-4-12-nongroovy-e2e-tests
ci/prow/ocp-4-20-nongroovy-e2e-tests 8726675 link false /test ocp-4-20-nongroovy-e2e-tests

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge Auto-merge minor and patch version bumps auto-retest PRs with this label will be automatically retested if prow checks fails ci-all-qa-tests Tells CI to run all API tests (not just BAT). dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant