An open index of dependabot pull requests across open source projects.

chore(deps): bump github.com/graph-gophers/graphql-go from 1.5.0 to 1.7.2

Closed
Number: #16668
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 23
Created: September 04, 2025 at 01:21 AM UTC
(10 months ago)
Updated: September 29, 2025 at 02:47 PM UTC
(9 months ago)
Closed: September 29, 2025 at 02:47 PM UTC
(9 months ago)
Time to Close: 26 days
Labels:
dependencies ci-all-qa-tests area/central auto-merge auto-retest
Assignees:
janisz
Description:

Bumps github.com/graph-gophers/graphql-go from 1.5.0 to 1.7.2.

Release notes

Sourced from github.com/graph-gophers/graphql-go's releases.

v1.7.2

What's Changed

  • [BUGFIX] Fix checksum mismatch between direct git access and golang proxy for v1.7.1. This version contains identical functionality to v1.7.1 but with proper tag creation to ensure consistent checksums across all proxy configurations by @​pavelnikolov in graph-gophers/graphql-go#683

Full Changelog: https://github.com/graph-gophers/graphql-go/compare/v1.7.1...v1.7.2

v1.7.1

What's Changed

  • [BUGFIX] Reject object, interface, and input object type definitions that declare zero fields/input values (spec compliance) by @​pavelnikolov in graph-gophers/graphql-go#676
  • [IMPROVEMENT] Optimize overlapping field validation to avoid quadratic memory blowups on large sibling field lists by @​pavelnikolov in graph-gophers/graphql-go#678
  • [IMPROVEMENT] SelectedFieldNames now returns dot-delimited nested field paths (e.g. products, products.id, products.category, products.category.id). Intermediate container object/list paths are included so resolvers can check for both a branch (products.category) and its leaves (products.category.id). HasSelectedField and SortedSelectedFieldNames operate on these paths. This aligns behavior with typical resolver projection needs and fixes missing nested selections by @​pavelnikolov in graph-gophers/graphql-go#680

Full Changelog: https://github.com/graph-gophers/graphql-go/compare/v1.7.0...v1.7.1

v1.7.0

What's Changed

Important

The default branch of the repository is now main. The previous default branch (i.e. master) is still present but will not be updated anymore.

Full Changelog: https://github.com/graph-gophers/graphql-go/compare/v1.6.0...v1.7.0

v1.6.0

What's Changed

... (truncated)

Changelog

Sourced from github.com/graph-gophers/graphql-go's changelog.

CHANGELOG

v1.7.2 Release v1.7.2

  • [BUGFIX] Fix checksum mismatch between direct git access and golang proxy for v1.7.1. This version contains identical functionality to v1.7.1 but with proper tag creation to ensure consistent checksums across all proxy configurations.

v1.7.1 Release v1.7.1

  • [IMPROVEMENT] SelectedFieldNames now returns dot-delimited nested field paths (e.g. products, products.id, products.category, products.category.id). Intermediate container object/list paths are included so resolvers can check for both a branch (products.category) and its leaves (products.category.id). HasSelectedField and SortedSelectedFieldNames operate on these paths. This aligns behavior with typical resolver projection needs and fixes missing nested selections.
  • [BUGFIX] Reject object, interface, and input object type definitions that declare zero fields/input values (spec compliance).
  • [IMPROVEMENT] Optimize overlapping field validation to avoid quadratic memory blowups on large sibling field lists.
  • [FEATURE] Add configurable safety valve for overlapping field comparison count with OverlapValidationLimit(n) schema option (0 disables the cap). When exceeded validation aborts early with rule OverlapValidationLimitExceeded. Disabled by default.
  • [TEST] Add benchmarks & randomized overlap stress test for mixed field/fragment patterns.

v1.7.0 Release v1.7.0

  • [FEATURE] Add resolver field selection inspection helpers (SelectedFieldNames, HasSelectedField, SortedSelectedFieldNames). Helpers are available by default and compute results lazily only when called. An explicit opt-out (DisableFieldSelections() schema option) is provided for applications that want to remove even the minimal context insertion overhead when the helpers are never used.

v1.5.0 Release v1.5.0

  • [FEATURE] Add specifiedBy directive in #532
  • [IMPROVEMENT] In this release we improve validation for primitive values, directives, repeat directives, #515, #516, #525, #527
  • [IMPROVEMENT] Fix minor unreachable code caused by t.Fatalf #530
  • [BUG] Fix __type queries sometimes not returning data in #540
  • [BUG] Allow deprecated directive on arguments by @​pavelnikolov in #541
  • [DOCS] Add array input example #536

v1.4.0 Release v1.4.0

  • [FEATURE] Add basic first step for Apollo Federation. This does NOT include full subgraph specification. This PR adds support only for _service schema level field. This library is long way from supporting the full sub-graph spec and we do not plan to implement that any time soon.

v1.3.0 Release v1.3.0

  • [FEATURE] Support custom panic handler #468
  • [FEATURE] Support interfaces implementing interfaces #471
  • [BUG] Support parsing nanoseconds time properly #486
  • [BUG] Fix a bug in maxDepth fragment spread logic #492

v1.2.0 Release v1.2.0

  • [DOCS] Added examples of how to add JSON map as input scalar type. The goal of this change was to improve documentation #467

v1.1.0 Release v1.1.0

  • [FEATURE] Add types package #437
  • [FEATURE] Expose packer.Unmarshaler as decode.Unmarshaler to the public #450
  • [FEATURE] Add location fields to type definitions #454
  • [FEATURE] errors.Errorf preserves original error similar to fmt.Errorf #456
  • [BUGFIX] Fix duplicated __typename in response (fixes #369) #443

... (truncated)

Commits
  • 17f2cd7 Merge pull request #683 from graph-gophers/fix-v1-7-1-checksum
  • 15e1d67 fix: checksum mismatch
  • ae5f988 Merge pull request #680 from graph-gophers/selected-subfields
  • 1ade1ab test(selections): update selection example
  • 02ff008 Bump changelog ver to v1.7.1
  • d3e47f5 feat(selections): add nested selected paths
  • 754f8e9 Merge pull request #678 from graph-gophers/optimize-validation
  • 7f8ddb1 perf(validation): optimize field overlap check
  • 5ca91cb Merge pull request #676 from graph-gophers/disallow-empty-field-lists
  • 0c87ff7 fix: disallow empty field lists
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
github.com/graph-gophers/graphql-go [>= 1.4.a, < 1.5]

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @rhacs-bot.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Pull Request Statistics
Commits:
6
Files Changed:
6
Additions:
+59
Deletions:
-13
Review Comments: 1
Package Dependencies
Ecosystem:
go
Version Change:
1.5.0 → 1.7.2
Update Type:
Minor
Technical Details
ID: 6842640
UUID: 2797689813
Node ID: PR_kwDOGd6UEM6mwVvV
Host: GitHub
Repository: stackrox/stackrox
Mergeable: Yes
Merge State: Unstable