Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upcoming Release Changes #866

Merged
merged 1 commit into from
Mar 20, 2025
Merged

Upcoming Release Changes #866

merged 1 commit into from
Mar 20, 2025

Conversation

theguild-bot
Copy link
Collaborator

@theguild-bot theguild-bot commented Mar 17, 2025 •
edited
Loading

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@graphql-hive/[email protected]

Minor Changes

  • #871 d8a7e9e Thanks @enisdenjo! - Introduce built-in armor security features

    The following built-in features are introduced:

    • maxTokens: Limit the number of tokens in a GraphQL document.
      Defaults to 1000 tokens.
    • maxDepth: Limit the depth of a GraphQL document.
      Defaults to 6 levels.
    • blockFieldSuggestions: Prevent returning field suggestions and leaking your schema to unauthorized actors.
      Defaults to true

    They are all disabled by default. You can enable or configure them individually. Only basic configuration options are allowed - security features needing more configuration should instead have the plugin installed and used manually.

    Disable all (default)

    import { defineConfig } from '@graphql-hive/gateway';

export const gatewayConfig = defineConfig();

    Enable all

    import { defineConfig } from '@graphql-hive/gateway';

export const gatewayConfig = defineConfig({
  maxTokens: true,
  maxDepth: true,
  blockFieldSuggestions: true,
});

    Configure

    import { defineConfig } from '@graphql-hive/gateway';

export const gatewayConfig = defineConfig({
  maxTokens: 3000,
  maxDepth: 10,
  blockFieldSuggestions: false,
});

    Advanced configuration

    npm i @escape.tech/graphql-armor-max-depth
    import { maxDepthRule } from '@escape.tech/graphql-armor-max-depth';
import { defineConfig } from '@graphql-hive/gateway';

export const gatewayConfig = defineConfig({
  // disable maxDepth feature by omitting it or setting it to false
  plugins: () => [
    maxDepthRule({
      ignoreIntrospection: false,
      flattenFragments: true,
    }),
  ],
});

Patch Changes

@graphql-hive/[email protected]

Minor Changes

  • #865 dc8c4ce Thanks @enisdenjo! - Respect NODE_PATH environment variable even when importing ESM modules

@graphql-tools/[email protected]

Patch Changes

@graphql-tools/[email protected]

Patch Changes

@graphql-tools/[email protected]

Patch Changes

@graphql-tools/[email protected]

Patch Changes

  • #862 278618a Thanks @ardatan! - Use signal.addEventListener instead of leaking registerAbortSignalListener helper

@graphql-tools/[email protected]

Patch Changes

@graphql-tools/[email protected]

Patch Changes

@graphql-mesh/[email protected]

Patch Changes

@graphql-hive/[email protected]

Patch Changes

@graphql-hive/[email protected]

Patch Changes

@graphql-mesh/[email protected]

Patch Changes

@graphql-mesh/[email protected]

Patch Changes

@graphql-mesh/[email protected]

Patch Changes

@graphql-hive/[email protected]

Patch Changes

@graphql-tools/[email protected]

Patch Changes

@graphql-tools/[email protected]

Patch Changes

@graphql-mesh/[email protected]

Patch Changes

@graphql-mesh/[email protected]

Patch Changes

@graphql-mesh/[email protected]

Patch Changes

@graphql-tools/[email protected]

Patch Changes

@theguild-bot
Copy link
Collaborator Author

theguild-bot commented Mar 17, 2025 •
edited
Loading

🚀 Snapshot Release (rc)

The latest changes of this PR are available as rc on npm (based on the declared changesets):

Package Version Info
@graphql-tools/batch-delegate 9.0.33-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-tools/batch-execute 9.0.14-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-tools/delegate 10.2.15-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-tools/executor-graphql-ws 2.0.5-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-tools/executor-http 1.3.1-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-tools/federation 3.1.6-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-mesh/fusion-runtime 0.11.5-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-hive/gateway 1.13.0-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-hive/importer 1.1.0-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-hive/nestjs 1.0.4-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-hive/plugin-aws-sigv4 1.0.2-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-mesh/hmac-upstream-signature 1.2.23-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-mesh/plugin-opentelemetry 1.3.48-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-mesh/plugin-prometheus 1.3.36-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-hive/gateway-runtime 1.6.2-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-tools/stitch 9.4.20-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-tools/stitching-directives 3.1.30-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-mesh/transport-http 0.6.36-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-mesh/transport-http-callback 0.5.23-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-mesh/transport-ws 1.0.6-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎
@graphql-tools/wrap 10.0.33-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3 npm ↗︎ unpkg ↗︎

@theguild-bot
Copy link
Collaborator Author

theguild-bot commented Mar 17, 2025 •
edited
Loading

🚀 Snapshot Release (Binary for macOS-ARM64)

The latest changes of this PR are available for download (based on the declared changesets).

Download

@theguild-bot
Copy link
Collaborator Author

theguild-bot commented Mar 17, 2025 •
edited
Loading

🚀 Snapshot Release (Binary for Linux-X64)

The latest changes of this PR are available for download (based on the declared changesets).

Download

@theguild-bot
Copy link
Collaborator Author

theguild-bot commented Mar 17, 2025 •
edited
Loading

🚀 Snapshot Release (Binary for Linux-ARM64)

The latest changes of this PR are available for download (based on the declared changesets).

Download

@theguild-bot
Copy link
Collaborator Author

theguild-bot commented Mar 17, 2025 •
edited
Loading

🚀 Snapshot Release (Node Docker Image)

The latest changes of this PR are available as image on GitHub Container Registry (based on the declared changesets):

ghcr.io/graphql-hive/gateway:1.13.0-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3

@theguild-bot
Copy link
Collaborator Author

theguild-bot commented Mar 17, 2025 •
edited
Loading

🚀 Snapshot Release (Bun Docker Image)

The latest changes of this PR are available as image on GitHub Container Registry (based on the declared changesets):

ghcr.io/graphql-hive/gateway:1.13.0-rc-f06829ef671325a8b1e9d177d7b729d8f0168df3-bun

@theguild-bot
Copy link
Collaborator Author

theguild-bot commented Mar 17, 2025 •
edited
Loading

🚀 Snapshot Release (Binary for macOS-X64)

The latest changes of this PR are available for download (based on the declared changesets).

Download

@theguild-bot
Copy link
Collaborator Author

theguild-bot commented Mar 17, 2025 •
edited
Loading

🚀 Snapshot Release (Binary for Windows-X64)

The latest changes of this PR are available for download (based on the declared changesets).

Download

@theguild-bot theguild-bot force-pushed the changeset-release/main branch 22 times, most recently from 8018b0e to 795d32e Compare March 20, 2025 10:13
@theguild-bot theguild-bot force-pushed the changeset-release/main branch from 795d32e to f06829e Compare March 20, 2025 10:28
@enisdenjo enisdenjo merged commit 8c68b6f into main Mar 20, 2025
44 checks passed
@enisdenjo enisdenjo deleted the changeset-release/main branch March 20, 2025 11:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@theguild-bot @enisdenjo