Skip to content

chore(deps): bump github.com/vektah/gqlparser/v2 from 2.5.58 to 2.5.59 - #237

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/go_modules/github.com/vektah/gqlparser/v2-2.5.59
Oct 5, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/go_modules/github.com/vektah/gqlparser/v2-2.5.59

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/vektah/gqlparser/v2 from 2.5.58 to 2.5.59.

Release notes

Sourced from github.com/vektah/gqlparser/v2's releases.

v2.5.59

Changelog

  • 7bd8ce26a9a91a93381ec130c4dd0005a64312f5 Avoid iterator allocations in overlapping field validator (#481)
  • 3ccd437ff1ef32b6851a670f749d7bc2aca6b20b Benchmarks, a benchmark gate, property tests and mutation testing (#482)
  • 6ddb71072cb8e029586d5170ea73e85a0427f62c Index fragments by name in the validator walker (#472)
  • b312a14470809ce15efc7d4727eea4f080fcdebd build(deps): bump brace-expansion in /validator/imported (#480)
  • dce6e6633aa43412964d77e10faa431d593f99ad build(deps-dev): bump prettier (#473)
  • 3e25eab8a762bdf95e1a69b91540c14354dbd324 feat(validator): Add new validator.EmptyDefinitionError (#474)
  • eaee10953561f7943a8bbf46a56054aecf7c6e81 lexer: combine surrogate pair escapes in string literals (#476)
  • 1c204b4b992ebdc7724634ad4be0f52f838b15bf validator: make MaxIntrospectionDepth linear in fragment spreads (#471)
  • b99f91aec8211fe80208078b2d1991f10d1f7d57 validator: stop OverlappingFieldsCanBeMerged recursing forever on fragment cycles (revised #477) (#478)

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.59' \
  checksums.txt
2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt
3. GitHub build provenance.
gh attestation verify gqlparser_2.5.59_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.59_source.tar.gz.sbom.json (SPDX-2.3).


Released by GoReleaser.

Commits
  • 7bd8ce2 Avoid iterator allocations in overlapping field validator (#481)
  • 3ccd437 Benchmarks, a benchmark gate, property tests and mutation testing (#482)
  • 1c204b4 validator: make MaxIntrospectionDepth linear in fragment spreads (#471)
  • dce6e66 build(deps-dev): bump prettier (#473)
  • b312a14 build(deps): bump brace-expansion in /validator/imported (#480)
  • b99f91a validator: stop OverlappingFieldsCanBeMerged recursing forever on fragment cy...
  • 6ddb710 Index fragments by name in the validator walker (#472)
  • 3e25eab feat(validator): Add new validator.EmptyDefinitionError (#474)
  • eaee109 lexer: combine surrogate pair escapes in string literals (#476)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/vektah/gqlparser/v2](https://github.com/vektah/gqlparser) from 2.5.58 to 2.5.59.
- [Release notes](https://github.com/vektah/gqlparser/releases)
- [Commits](vektah/gqlparser@v2.5.58...v2.5.59)

---
updated-dependencies:
- dependency-name: github.com/vektah/gqlparser/v2
  dependency-version: 2.5.59
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@github-actions
github-actions Bot merged commit fb7a9ad into main Oct 5, 2026
5 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/vektah/gqlparser/v2-2.5.59 branch October 5, 2026 09:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants