Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upcoming Release Changes #508

Merged
merged 1 commit into from
Jan 29, 2025
Merged

Upcoming Release Changes #508

merged 1 commit into from
Jan 29, 2025

Conversation

theguild-bot
Copy link
Collaborator

@theguild-bot theguild-bot commented Jan 23, 2025

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@graphql-tools/[email protected]

Minor Changes

  • #444 b52c9ba Thanks @ardatan! - Now SupergraphSchemaManager can be used in ApolloServer as gateway;

    import { ApolloServer } from '@apollo/server';
    import { SupergraphSchemaManager } from '@graphql-tools/federation';
    
    const gateway = new SupergraphSchemaManager();
    const apolloServer = new ApolloServer({
      gateway,
    });

    And with the new onStitchedSchema option, you can manipulate the executable schema created from the supergraph.
    The following example demonstrates how to use onStitchedSchema with applyMiddleware from graphql-middleware:

    import { SupergraphSchemaManager } from '@graphql-tools/federation';
    import { applyMiddleware } from 'graphql-middleware';
    
    const logInput = async (resolve, root, args, context, info) => {
      console.log(`1. logInput: ${JSON.stringify(args)}`);
      const result = await resolve(root, args, context, info);
      console.log(`5. logInput`);
      return result;
    };
    
    const logResult = async (resolve, root, args, context, info) => {
      console.log(`2. logResult`);
      const result = await resolve(root, args, context, info);
      console.log(`4. logResult: ${JSON.stringify(result)}`);
      return result;
    };
    
    const gateway = new SupergraphSchemaManager({
      onStitchedSchema: async (schema) => {
        // Manipulate the schema
        return applyMiddleware(schema, logInput, logResult);
      },
    });

Patch Changes

@graphql-tools/[email protected]

Patch Changes

@graphql-tools/[email protected]

Patch Changes

  • #506 9144222 Thanks @ardatan! - Add isPrototypePollutingKey to prevent accidential prototype pollution, whenever object manipulation happens with the keys based on the user input, it is validated to prevent prototype pollution.

    For example, WrapQuery takes path which is used to manipulate the object returned to the client. If the user input is __proto__, it will throw an error from now on but previously it would have polluted the prototype.

@graphql-mesh/[email protected]

Patch Changes

@graphql-hive/[email protected]

Patch Changes

@graphql-mesh/[email protected]

Patch Changes

@graphql-mesh/[email protected]

Patch Changes

@graphql-hive/[email protected]

Patch Changes

@graphql-tools/[email protected]

Patch Changes

@graphql-tools/[email protected]

Patch Changes

@graphql-tools/[email protected]

Patch Changes

@theguild-bot
Copy link
Collaborator Author

theguild-bot commented Jan 23, 2025

🚀 Snapshot Release (rc)

The latest changes of this PR are available as rc on npm (based on the declared changesets):

Package Version Info
@graphql-tools/batch-delegate 9.0.29-rc-d125227b24a657e349cd87a8e67c40512c668884 npm ↗︎ unpkg ↗︎
@graphql-tools/delegate 10.2.11-rc-d125227b24a657e349cd87a8e67c40512c668884 npm ↗︎ unpkg ↗︎
@graphql-tools/federation 3.1.0-rc-d125227b24a657e349cd87a8e67c40512c668884 npm ↗︎ unpkg ↗︎
@graphql-mesh/fusion-runtime 0.10.31-rc-d125227b24a657e349cd87a8e67c40512c668884 npm ↗︎ unpkg ↗︎
@graphql-hive/gateway 1.8.1-rc-d125227b24a657e349cd87a8e67c40512c668884 npm ↗︎ unpkg ↗︎
@graphql-mesh/plugin-opentelemetry 1.3.38-rc-d125227b24a657e349cd87a8e67c40512c668884 npm ↗︎ unpkg ↗︎
@graphql-mesh/plugin-prometheus 1.3.26-rc-d125227b24a657e349cd87a8e67c40512c668884 npm ↗︎ unpkg ↗︎
@graphql-hive/gateway-runtime 1.4.10-rc-d125227b24a657e349cd87a8e67c40512c668884 npm ↗︎ unpkg ↗︎
@graphql-tools/stitch 9.4.16-rc-d125227b24a657e349cd87a8e67c40512c668884 npm ↗︎ unpkg ↗︎
@graphql-tools/stitching-directives 3.1.26-rc-d125227b24a657e349cd87a8e67c40512c668884 npm ↗︎ unpkg ↗︎
@graphql-tools/wrap 10.0.29-rc-d125227b24a657e349cd87a8e67c40512c668884 npm ↗︎ unpkg ↗︎

@theguild-bot
Copy link
Collaborator Author

theguild-bot commented Jan 23, 2025

🚀 Snapshot Release (Binary for macOS-ARM64)

The latest changes of this PR are available for download (based on the declared changesets).

Download

@theguild-bot
Copy link
Collaborator Author

theguild-bot commented Jan 23, 2025

🚀 Snapshot Release (Binary for Linux-X64)

The latest changes of this PR are available for download (based on the declared changesets).

Download

@theguild-bot
Copy link
Collaborator Author

theguild-bot commented Jan 23, 2025

🚀 Snapshot Release (Node Docker Image)

The latest changes of this PR are available as image on GitHub Container Registry (based on the declared changesets):

ghcr.io/graphql-hive/gateway:1.8.1-rc-d125227b24a657e349cd87a8e67c40512c668884

@theguild-bot
Copy link
Collaborator Author

theguild-bot commented Jan 23, 2025

🚀 Snapshot Release (Bun Docker Image)

The latest changes of this PR are available as image on GitHub Container Registry (based on the declared changesets):

ghcr.io/graphql-hive/gateway:1.8.1-rc-d125227b24a657e349cd87a8e67c40512c668884-bun

@theguild-bot
Copy link
Collaborator Author

theguild-bot commented Jan 23, 2025

🚀 Snapshot Release (Binary for macOS-X64)

The latest changes of this PR are available for download (based on the declared changesets).

Download

@theguild-bot
Copy link
Collaborator Author

theguild-bot commented Jan 23, 2025

🚀 Snapshot Release (Binary for Windows-X64)

The latest changes of this PR are available for download (based on the declared changesets).

Download

@theguild-bot theguild-bot force-pushed the changeset-release/main branch 23 times, most recently from 4c6a817 to f91a505 Compare January 28, 2025 17:50
@theguild-bot theguild-bot force-pushed the changeset-release/main branch 4 times, most recently from 1dc81f3 to cadca70 Compare January 29, 2025 14:23
@theguild-bot theguild-bot force-pushed the changeset-release/main branch from cadca70 to d125227 Compare January 29, 2025 14:42
@dotansimha dotansimha merged commit f695984 into main Jan 29, 2025
41 checks passed
@dotansimha dotansimha deleted the changeset-release/main branch January 29, 2025 15:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants