Skip to content

Update dependency graphql to v2 - #7287

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/graphql-2.x
Open

Update dependency graphql to v2#7287
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/graphql-2.x

Conversation

@renovate

@renovate renovate Bot commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
graphql (source, changelog) "~> 1.13.19""~> 2.6.0" age confidence

Release Notes

rmosolgo/graphql-ruby (graphql)

v2.6.7

Compare Source

Bug fixes
  • SDL: Speed up parsing interfaces #​5678
  • Execution::Next: fix selection step enqueuing #​5679
  • AsyncDataloader: improve pending work accounting #​5675

v2.6.6

Compare Source

  • Security: This version includes a remediation for a security issue in Execution::Next (GHSA-j7xr-4g94-r9h3).
New features
  • Support pattern matching non-null and list type definitions #​5660
Bug fixes
  • SDL: properly apply directive argument default values #​5659
  • Dataloader: fix Ruby version compatibility check #​5662
  • Validation: apply query token limit in Schema.validate #​5668
  • Dataloader: Use a queue for more efficient Source resolution #​5666
  • Remove needless compat with Ruby 2.2 #​5670
  • Schema: fix union memberships lookup #​5663
  • Dataloader: unify lazy resolution code #​5669
  • AsyncDataloader: improve task scheduling to fix deadlocks #​5672

v2.6.5

Compare Source

New features
  • Execution::Next: improve non-null error propagation #​5644
  • Dataloader: optimize memory usage in Dataloader::Source #​5658
  • AsyncDataloader: fix concurrency errors #​5656
  • Generators: don't generate fields for filtered parameters #​5653

v2.6.3

Compare Source

Breaking changes
  • Schema::Visibility: must be attached after root type configurations to support preload: .... Move the configuration down if you encounter an error from this. #​5635
New features
  • Validators: accept procs for configuration options #​5641
Bug fixes
  • Execution::Next: don't crash when non-null propagation nullifies an object inside a fragment that has sibling selections #​5637
  • Execution::Next: Implement GraphQL::Current.field #​5640
  • Fix required: :nullable when combined with as: #​5636
  • Execution::Next: improve execute_query_lazy compatibility #​5634
  • Analysis: Fix when skip/include argument fails coercion #​5633

v2.6.2

Compare Source

New features
  • Use a better error message for end-of-file parse errors #​6513
Bug fixes
  • Execution::Next: Lots of compatibility improvements and bug fixes #​5625 #​5618
  • Directives: handle errors raised when checking .include? #​5612
  • Improve error message when a field definition is missing at runtime #​5615
  • JRuby: fix Dataloader#with #​5616
  • DetailedTrace: fix introspection with anonymous classes #​5624

v2.6.1

Compare Source

Bug fixes
  • Lexer: in the Ruby lexer, count comments against a schema's max_token_count configuration

v2.6.0

Compare Source

Breaking changes
  • SDL: previously, GraphQL-Ruby didn't require object types and interfaces to explicitly name all transitively implemented interfaces. For example if Interface A implements Interface B, and Object O implements Interface A, GraphQL-Ruby didn't require the SDL to include implements ... & B, But it should have, according to the spec. This misbehavior has been corrected, but may cause some previously-accepted SDL strings to be rejected with errors. #​5602
Bug fixes
  • SDL: require types to name all implemented interfaces #​5602
  • Execution::Next: call Resolver #ready? methods #​5611

v2.5.26

Compare Source

v2.5.25

Compare Source

Bug fixes
  • Field extensions: correctly return false through for fields with extensions that don't define after_resolve #​5610

v2.5.24

Compare Source

New features

v2.5.23

Compare Source

New features
Bug fixes
  • Fix Dataloader state on list items #​5597

v2.5.22

Compare Source

v2.5.21

Compare Source

New features
Bug fixes
  • Schema.from_definition: fix field calls when all arguments come from extras #​5557

v2.5.20

Compare Source

  • DetailedTrace: Handle inspecting instances of anonymous classes #​5530
  • Dashboard: move controllers to their own files, fix lazy loading #​5524
  • Dataloader: add dataload_all shortcut; add shortcuts to context #​5540
  • Add experimental new runtime code (not loaded by default) #​5509 #​5544 #​5547
  • Fix @defer on inline fragments when fields return Lazy values and Dataloader isn't used #​5550

v2.5.19

Compare Source

  • DetailedTrace: add ActiveRecord backend, generator #​5525
  • DetailedTrace: improve ActiveRecord backend, filter hashes before logging #​5527

v2.5.18

Compare Source

  • GraphQL::Dashboard: properly require action_controller before using it #​5510
  • GraphQL::Dashboard: don't use config.asset_host for Dashboard assets since they're handled by the dashboard itself #​5511

v2.5.17

Compare Source

Bug fixes
  • GraphQL::Dashboard: fix routes compatibility with Devise #​5505
  • GraphQL::Dashboard: fix HTML/erb lint issues #​5497
  • Parser: improve check for invalid number followed by name #​5492 #​5492
  • GraphQL::Field: optimize boot memory by removing Field.from_options #​5495
  • field, argument: improve API documentation for DSL methods #​5491

v2.5.16

Compare Source

Bug fixes
  • fiber-storage: properly include dependency on Ruby < 3.2 #​5484
  • Fix typo in legacy_invalid_empty_selections_on_union_with_type warning #​5481

v2.5.15

Compare Source

New features
  • DetailedTrace: add separate spans for debug-only .inspect calls, support debug: false config #​5477
  • required: validator: Raise a developer error when all one_of: options are hidden, support allow_all_hidden: true to allow this case #​5474
  • GraphQL::Testing::MockActionCable: added to support testing ActionCableSubscriptions #​5482
  • legacy_invalid_empty_selections_on_union_with_type: new method added for better metadata about legacy behavior #​5480
Bug fixes
  • Fix typo in date encoding error #​5447
  • Fix schema printer bug #​5468
  • Ensure data exists for execution errors #​5452
  • Improve SDL directive argument coercion #​5469
  • Don't require fiber-storage on Ruby 3.2+ #​5456
  • Visibility: default to preload: true when Rails.env.staging? #​5409

v2.5.14

Compare Source

Bug fixes
  • Fix error when GraphQL-Batch is used (???) #​5444

v2.5.13

Compare Source

New features
  • Testing helpers: support visibility_profile: ... #​5439
Bug fixes
  • Directives: correctly handle schema directive arguments which are lists of input objects #​5440

v2.5.12

Compare Source

New features
  • Runtime: add hooks for experimental custom runtimes #​5425, #​5429
  • Lazy handling and Dataloader have been merged under the hood #​5422
  • Doc: merk load_application_object_failed as public #​5426

v2.5.11

Compare Source

Bug fixes
  • Dataloader: improve compatibility when objects are loaded by GraphQL-Batch but .authorized? uses Dataloader #​5400

v2.5.10

Compare Source

New features
  • Schema: Add .freeze_schema for minimal Ractor support #​5370
Bug fixes
  • Schema: inherit validation configurations #​5382
  • Visibility: fix inheriting visibility with preload: true #​5386
  • Improve error messages with interfaces from SDL #​5372
  • Remove needless counter in execution code #​5392
  • Reduce execution overhead in schemas built from SDL #​5393
  • RequiredValidator: remove hidden definitions from error message #​5396
  • .possible_types: don't return interfaces in this list #​5395
  • dataload_association: fix loading associations with different scopes on the same object #​5398

v2.5.9

Compare Source

New features
  • Improve metadata on Scalar coercion errors #​5375
Bug fixes
  • Directives: fix validation of Ruby values on definition directive arguments #​5377
  • loads:: fix typechecking of Interface loads: values #​5379

v2.5.8

Compare Source

New features
  • Timeout: support disabling during a query #​5361
  • Query::Partial: support running a fragment in isolation #​5362
Bug fixes
  • Visibility: improve performance for loadable? #​5355
  • RequiredValidator: Fix typo #​5359
  • Scalar validation: remove redundant infinity handling #​5358
  • Directives: fix validation of schema definition directives #​5368

v2.5.7

Compare Source

Bug fixes
  • PerfettoTrace: Handle non-ascii strings #​5351
  • Partial: Add #selected_operation_name to support GraphQL::Current #​5353

v2.5.6

Compare Source

New features
  • Execution: Add Query#run_partials for running sub-trees of valid queries #​5183

v2.5.5

Compare Source

Bug fixes
  • Visibility: fix when ::Rails doesn't have .env #​5339
  • Compatibility: restore default (legacy) behavior when no setting is configured #​5343
  • ActiveSupport::Notifications: fix fiber resume without previous event #​5335
  • Simplify non-null input object argument handling #​5333
  • Fix compatibility with ruby-head #​5342

v2.5.4

Compare Source

Bug fixes
  • ActiveRecordSource: Support composite primary keys #​5330
  • ActiveRecordAssociationSource: Support has_many associations #​5331
  • Remove broken Context#path method (use #current_path instead) #​5332

v2.5.3

Compare Source

Deprecations
  • Validation: two non-spec behaviors are deprecated:
    • When a query includes two scalar fields of different types which may occur in the same place in the response, the query was previously allowed. The spec says it should be rejected. This version emits a warning in this case. See Schema.allow_legacy_invalid_return_type_conflicts for migration support. #​4351
    • When a query selects a field which returns a Union, but doesn't make any subselections on the Union, the spec says the query should be rejected as invalid but previous GraphQL-Ruby allowed it. It now emits a warning. See Schema.allow_legacy_invalid_empty_selections_on_union for migration support #​5322
  • Complexity: several bugs about merging complexity cost across branches of a query have been fixed but require opting in. They may produce higher complexity scores. See Schema.complexity_cost_calculation_mode for migration support. #​4843
New features
  • AlwaysVisible: improve speed (using Schema::Visibility) #​5326
  • Return more descriptive errors when non-nullable list elements are null #​5301
  • Visibility: improve performance on large schemas #​5325

v2.5.2

Compare Source

New features
  • Resolver: accept deprecation_reason #​5320
Bug fixes
  • Visibility: hide argument types whose uses are all hidden (to match Warden) #​5291
  • InputObject: fix validation for nested input object with prepare: method configs #​5321

v2.5.1

Compare Source

Bug fixes
  • Fix error when GraphQL-Batch is used (???) #​5444

v2.5.0

Compare Source

Breaking changes
  • Subscriptions: GraphQL-Ruby now implements the spec's requirement that a subscription has only one root selection #​5250
  • Datadog trace: the custom prepare_span hook now receives an execution-related object instead of a hash of keywords. #​5298
New features
  • Tracers: APM tracers have been updated to reflect Dataloader's fiber stops and starts #​5296 #​5298

v2.4.18

Compare Source

v2.4.17

Compare Source

v2.4.16

Compare Source

New features
Bug fixes
  • Parser: raise when variable definitions don't include a type name #​5305
  • PerfettoTrace: Don't create zombie ActiveSupport::Notifications subscribers #​5307

v2.4.15

Compare Source

New features
  • Schema.from_definition: support custom base type classes #​5282
  • Schema.from_definition: support type extensions #​5281
Bug fixes
  • Handle GraphQL::ExecutionError from resolve_type #​5274
  • Backtrace: handle inline fragments # 5274
  • run_graphql_field: fix when .authorized? calls Dataloader #​5289
  • InputObject: run validators even when custom def prepare is present #​5285
  • Multiplex: don't attempt to execute zero queries #​5278

v2.4.14

Compare Source

Bug fixes
  • New Relic tracing: fix dataloaded, skipped scalars #​5277

v2.4.13

Compare Source

v2.4.12

Compare Source

Breaking changes
  • Remove InvalidNullError#value which is always nil #​5256
New features
  • validate_timeout is 3 seconds by default #​5258
Bug fixes
  • New Relic: reimplement skipping scalars by default #​5271
  • Resolver: revert inheriting overridden graphql_name #​5260
  • Analysis: manually implement timeout to handle I/O better #​5263
  • Parser: properly handle extra token at the end of the query string #​5267
  • Validation: fix conflicting aliases inside fragment #​5268

v2.4.11

Compare Source

Breaking changes
  • Enums: enum value accessor methods have been switched to opt-in. Add value_methods(true) to your base enum class to opt back in. #​5255
New features
  • InvalidNullError: Improve default handling to add path and locations #​5257
  • DetailedTrace: Add a sampling profiler for creating detailed traces #​5244
Bug fixes
  • InvalidNullError: use GraphQL::Error as a base class #​5248
  • CI: test on Mongoid 8 and 9 #​5251

v2.4.10

Compare Source

New features
  • Dataloader: improve built-in Rails integration #​5213
Bug fixes
  • NewRelicTrace: don't double-count time waiting on Dataloader fibers
  • Fix possible type memberships inherited from superclass #​5236
  • Visibility: properly use configured contexts for visibility profiles #​5235
  • Enum: reduce needless value_method warnings #​5230 #​5220
  • Backtrace: fix error handling with rescue_from #​5227
  • Parser: return a proper error when variable type is missing #​5225

v2.4.9

Compare Source

New features
  • Enum: Enum types now have methods to access GraphQL-ready values directly #​5206 #​5218
Bug fixes
  • Validation: fix order dependency and mutual exclusion bug in required: { one_of: [ ... ] }
  • Backtrace: simplify trace setup and rendering code
  • Fix dependencies for Ruby 3.4 #​5199
  • Resolver: inherit description from superclass #​5195
  • Visibility: fix for when multiple implementations are all hidden #​5191

v2.4.8

Compare Source

New features
  • Subscriptions: support calling write_subscription within resolve #​5142
Bug fixes
  • Autoloading: improve autoloading of Tracing classes #​5190

v2.4.7

Compare Source

Bug fixes
  • Remove warning when code isn't eager-loaded #​5187
  • Add missing require "ostruct" in ActionCableSubscriptions #​5184

v2.4.6

Compare Source

Bug fixes
  • Autoloading: fix referencing built-in types #​5181
  • Autoloading: use Rails config.before_eager_load hook for better integration #​5182
  • loads:: Check possible types for loads:-only unions #​5180

v2.4.5

Compare Source

Breaking changes
  • In non-Rails production environments, GraphQL-Ruby will emit a warning about calling .eager_load! for better boot performance. #​5178
New features
  • Loading: GraphQL-Ruby now uses Ruby's autoload ... for many constants. #​5178
  • Input objects may be pattern matched (they implement #deconstruct_keys) #​5170
Bug fixes
  • Visibility: hide definition directives in SDL #​5175
  • Internals: use Fiber[...] for internal state instead of Thread.current #​5176
  • Dataloader: properly handle arrays of all falsey values #​5167 #​5169
  • Visibility: hide directives when their uses are all hidden #​5163
  • Require object types to have fields and require input objects to have arguments (to comply with the GraphQL spec) #​5137
  • Improve error message when a misplaced - is encountered #​5115

v2.4.4

Compare Source

  • Visibility: improve performance with sync #​5161

v2.4.3

Compare Source

Bug fixes
  • Lookahead: return an empty hash for .arguments when they raised a GraphQL::ExecutionError #​5155
  • Visibility: fix error when Mutation is lazy-loaded #​5158
  • Visibility: improve performance of Schema.types #​5157

v2.4.2

Compare Source

Bug fixes
  • Validation: fix error message when selections are made on an enum #​5144 #​5145
  • Visibility: fix preloading when no profiles are named #​5148

v2.4.1

Compare Source

New features
Bug fixes
  • Parser: raise when variable definitions don't include a type name #​5305
  • PerfettoTrace: Don't create zombie ActiveSupport::Notifications subscribers #​5307

v2.4.0

Compare Source

Deprecations
  • Visibility: Implementing visible? now requires use GraphQL::Schema::Visibility or use GraphQL::Schema::Warden in your schema definition #​5123
New features
  • Validation: Add "did you mean" to error messages when DidYouMean is available #​4966
  • Schema: types can be lazy-loaded when using GraphQL::Schema::Visibility #​4919

v2.3.23

Compare Source

v2.3.22

Compare Source

v2.3.21

Compare Source

v2.3.20

Compare Source

Bug fixes
  • Arguments: suppress warning for objectId arguments #​5124
  • Arguments: don't require input object arguments when a default value is configured

v2.3.19

Compare Source

New features
  • Dataloader: accept a fiber_limit: option #​5132
Bug fixes
  • Argument Validation: improve the one_of: error message #​5130
  • Lookahead: return a null lookahead from Query#lookahead when no operation is selected #​5129
  • Static Validation: speed up FieldsWillMerge when some fields are not defined #​5125

v2.3.18

Compare Source

Bug fixes
  • Properly use trace options when trace_with is used after trace_class #​5118

v2.3.17

Compare Source

Bug fixes
  • Fix InvalidNullError#inspect #​5103
  • Add server-side tests for ActionCableSubscriptions #​5108
  • RuboCop: Fix FieldTypeInBlock for list types and interface types #​5107 #​5112
  • Subscriptions: Fix triggering with nested input objects #​5117
  • Extensions: fix extensions which add other extensions #​5116

v2.3.16

Compare Source

Bug fixes
  • RuboCop: fix FieldTypeInBlock for single-line classes #​5098
  • Testing: Add context[:current_field] to testing helpers #​5096

v2.3.15

Compare Source

New features
  • Type definitions accept comment("...") for annotating SDL #​5067
  • Parser: add tokens_count method #​5066
  • Schema: allow validate_timeout to be reset #​5062
Bug fixes
  • Optimize Language.escape_single_quoted_newlines #​5095
  • Generators: Add # frozen_string_literal: true to base resolver #​5092
  • Parser: Properly handle minus followed by name #​5090
  • Migrate some attr_reader methods #​5080
  • Handle variable definition directives #​5072
  • Handle GraphQL::ExecutionError when loading arguments during analysis #​5071
  • NotificationsTrace: properly call super
  • Use symbols for namespaced_types generator option #​5068
  • Reduce memory usage in lazy resolution #​5061
  • Fix default trace inheritance #​5045

v2.3.14

Compare Source

Bug fixes
  • Subscriptions: fix subscriptions when subscription type is added after subscription plug-in #​5063

v2.3.13

Compare Source

New features
  • Authorization: Call EnumValue#authorized? during execution #​5058
  • Subset: support lazy-loading root types and field return types (not documented yet) #​5055, #​5054
Bug fixes
  • Validation: don't validate nil if null value is permitted for incoming lists #​5048
  • Multiplex: fix Mutation#ready? dataloader cache in multiplexes #​5059

v2.3.12

Compare Source

Bug fixes
  • Add fiber-storage dependency for Ruby < 3.2 support

v2.3.11

Compare Source

New features
  • GraphQL::Current offers globally-available methods for runtime metadata #​5034
  • Continue improving Schema::Subset (not production-ready yet, though) #​5018 #​5039
Bug fixes
  • Fix Node#line and Node#col when nodes are created by manually #​5047
  • Remove unused interpreter?, using_ast_analysis? and new_connections? flag methods #​5039
  • Clean up .compare_by_identity usages #​5037

v2.3.10

Compare Source

Bug fixes
  • Parser: fix parsing operation names that match keywords #​5033
  • Parser: support leading pipes in Union type definitions #​5027
  • Validation: remove rule that prohibits non-null variables from having default values #​5030
  • Dataloader: raise fresh error instances when sources return errors #​5021
  • Enum and Union: don't create nested error classes in anonymous classes (eg, when parsing SDL -- to improve bug tracker integration) #​5022

v2.3.9

Compare Source

Bug fixes
  • Subscriptions: fix subscriptionType in introspection #​5019

v2.3.8

Compare Source

New features
  • Input validation: Add all: { ... } validator #​5013
  • Visibility: Add Query#types for future type filtering improvements #​4998
  • Broadcast: Add default_broadcast(true) option for Connection and Edge types #​5012
Bug fixes
  • Remove unused InvalidTypeError #​5003
  • Parser: remove unused previous_token and Token #​5015

v2.3.7

Compare Source

Bug fixes
  • Properly merge field directives and resolver directives #​5001

v2.3.6

Compare Source

New features
  • Analysis classes are now in GraphQL::Analysis (GraphQL::Analysis::AST still works, too) #​4996
  • Resolvers and Mutations accept directive ... configurations #​4995
Bug fixes
  • AsyncDataloader: Copy Fiber-local variables into Async tasks #​4994
  • Dataloader: properly batch fetch calls with loads: arguments that call Dataloader sources during .authorized? #​4997

v2.3.5

Compare Source

Breaking changes
  • Remove default load_* implementations in arguments -- this could break calls to super if you have redefined this method in subclasses #​4978
  • Schema.possible_types and Schema.references_to now use type classes as keys instead of type names (Strings). You can create a new Hash with the old structure using .transform_keys(&:graphql_name). #​4986 #​4971
Bug fixes

v2.3.4

Compare Source

New features
  • Async Dataloader: document integration with Rails database connections #​4944 #​4964
Bug fixes
  • Query#fingerprint: handle nil query strings like "" #​4963
  • Language::Nodes: support marshalling parsed ASTs #​4959
  • Directives: fix directives in nested fragment spreads #​4958
  • Tracing: fix conflicts between Sentry and Prometheus traces #​4957

v2.3.3

Compare Source

New features
  • Max Complexity: add count_introspection: option #​4939
Bug fixes
  • Language: Fix regression in Nodes#line and Nodes#col #​4949
  • Runtime: Simplify runtime state management #​4935

v2.3.2

Compare Source

Bug fixes
  • Arguments: suppress warning for objectId arguments #​5124
  • Arguments: don't require input object arguments when a default value is configured

v2.3.1

[Compare Source](https:/

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovate Bot commented Aug 25, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Gemfile.lock
Writing lockfile to /tmp/renovate/repos/github/pulibrary/figgy/Gemfile.lock
Fetching gem metadata from https://gems.contribsys.com/..
Fetching gem metadata from https://rubygems.org/.......
Resolving dependencies...

Could not find compatible versions

Because rspec-graphql_matchers >= 1.4.0, < 2.0.0.pre.rc.0 depends on graphql >=
1.10.12, < 2.0
  and Gemfile depends on graphql ~> 2.6.0,
  rspec-graphql_matchers >= 1.4.0, < 2.0.0.pre.rc.0 cannot be used.
So, because Gemfile depends on rspec-graphql_matchers ~> 1.4.0,
  version solving has failed.

@renovate
renovate Bot force-pushed the renovate/graphql-2.x branch 2 times, most recently from 491dc3c to eff6f76 Compare August 25, 2026 15:39
@renovate
renovate Bot force-pushed the renovate/graphql-2.x branch from eff6f76 to 5081532 Compare August 25, 2026 17:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants