99designs/gqlgen v0.17.97 on GitHub

Changelog

e7121a7 ci: reject nested go.mod newer than the root (#4397)
055be41 pre-release v0.17.97
0a8ac89 v0.17.96 postrelease bump

What's Changed

chore(deps): bump anchore/sbom-action/download-syft from 0.24.0 to 0.24.2 by @dependabot[bot] in #4315
chore(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 by @dependabot[bot] in #4316
chore(deps-dev): bump @graphql-codegen/cli from 7.3.1 to 7.4.0 in /integration by @dependabot[bot] in #4318
chore(deps-dev): bump vitest from 4.1.11 to 5.0.0 in /integration by @dependabot[bot] in #4317
chore(deps-dev): bump vitest from 4.1.11 to 5.0.0 in /_examples/federation by @dependabot[bot] in #4319
_examples: run go generate in the nested example modules by @StevenACoffman in #4333
chore(deps-dev): bump @babel/core from 7.29.0 to 7.29.7 in /integration in the npm_and_yarn group across 1 directory by @dependabot[bot] in #4325
chore(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 in /_examples by @dependabot[bot] in #4332
chore(deps): bump golang.org/x/text from 0.41.0 to 0.42.0 in /_examples by @dependabot[bot] in #4331
chore(deps-dev): bump @graphql-codegen/cli from 7.4.0 to 7.4.1 in /integration by @dependabot[bot] in #4330
perf: build the "no child fields" error lazily, without a global var by @yuyangguo42 in #4293
graphql: index input unmarshalers by GraphQL input name by @StevenACoffman in #4334
chore(deps): bump github.com/vektah/gqlparser/v2 v2.5.37 github.com/urfave/cli/v3 v3.12.0 golang.org/x/net v0.59.0 golang.org/x/sync v0.23.0 by @dependabot[bot] in #4326
chore(deps-dev): bump @graphql-codegen/client-preset from 6.1.3 to 6.2.0 in /integration by @dependabot[bot] in #4338
chore(deps-dev): bump @apollo/client from 4.2.12 to 4.3.0 in /integration by @dependabot[bot] in #4335
chore(deps-dev): bump vitest from 5.0.0 to 5.0.1 in /integration by @dependabot[bot] in #4336
chore(deps-dev): bump graphql-ws from 6.2.1 to 6.2.2 in /integration by @dependabot[bot] in #4337
Update gqlparser to v2.5.58 by @StevenACoffman in #4342
chore(deps-dev): bump vitest from 5.0.1 to 5.0.2 in /integration by @dependabot[bot] in #4348
chore(deps-dev): bump graphql-ws from 6.2.2 to 6.3.0 in /integration by @dependabot[bot] in #4347
chore(deps): bump dawidd6/action-download-artifact from 24 to 25 by @dependabot[bot] in #4346
chore(deps-dev): bump @graphql-codegen/cli from 7.4.1 to 7.4.3 in /integration by @dependabot[bot] in #4345
chore(deps-dev): bump @apollo/client from 4.3.0 to 4.3.1 in /integration by @dependabot[bot] in #4344
chore(deps-dev): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in #4349
chore(deps): bump github.com/urfave/cli/v3 from 3.12.0 to 3.13.0 by @dependabot[bot] in #4343
Update gqlparser to v2.5.59 by @StevenACoffman in #4351
Add tests, benchmarks and a fuzz target for the request path by @StevenACoffman in #4352
refactor: move concurrent-field boilerplate into the graphql runtime by @korotin in #4341
Replace github.com/matryer/moq with github.com/vektra/mockery/v3 by @jeolted in #4353
Clean up actions by @StevenACoffman in #4356
chore(deps-dev): bump graphql-sse from 2.6.1 to 2.6.2 in /integration by @dependabot[bot] in #4354
Update gqlparser to v2.5.60 by @StevenACoffman in #4357
Add benchmarks, rename yml to yaml, fix zizmor and ghalint issues, yamlfmt by @StevenACoffman in #4358
graphql: report invalid nulls as a typed error by @StevenACoffman in #4359
chore(deps-dev): bump vitest from 5.0.2 to 5.0.3 in /integration by @dependabot[bot] in #4363
chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates by @dependabot[bot] in #4364
Update gqlparser to v2.5.62 by @StevenACoffman in #4365
fix(tools): bump golang.org/x/tools to v0.50.0 in bin/_tools for Go 1.27 export data by @markya0616 in #4374
chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #4382
chore(deps): bump golang.org/x/sync from 0.23.0 to 0.24.0 in /_examples by @dependabot[bot] in #4377
chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 by @dependabot[bot] in #4386
chore(deps): bump mikepenz/action-junit-report from 6.5.0 to 6.6.1 by @dependabot[bot] in #4385
fix(transport): skip websocket complete when the connection context is cancelled by @somaz94 in #4360
Update gqlparser to v2.5.63 by @StevenACoffman in #4390
optimization: Canonicalize key in Tracer.shouldTrace to avoid memory allocations by @jthlim in #4387
Update all Go deps to latest by @StevenACoffman in #4392
chore(deps): bump anchore/sbom-action/download-syft from 0.24.2 to 0.24.3 by @dependabot[bot] in #4384
chore(deps-dev): bump @apollo/client from 4.3.1 to 4.3.2 in /integration by @dependabot[bot] in #4379
Add gqlparser updater release notes fixer by @StevenACoffman in #4391
fix(federation): decode entity keys using resolver input types by @tigrkoshka in #4367
federation: name colliding resolvers from @gofield by @StevenACoffman in #4394
modelgen: reject clashing Go names and fix getters by @StevenACoffman in #4396
federation: add entity_resolver_per_entity for one resolver per entity by @StevenACoffman in #4395
graphql: null failed fields, list elements and @defer payloads correctly by @Mihir-Rabari in #4372

New Contributors

@yuyangguo42 made their first contribution in #4293
@somaz94 made their first contribution in #4360
@jthlim made their first contribution in #4387
@tigrkoshka made their first contribution in #4367
@Mihir-Rabari made their first contribution in #4372

Full Changelog: v0.17.95...v0.17.97

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/99designs/gqlgen/.github/workflows/release.yml@refs/tags/v0.17.97' \
  checksums.txt

# 2. hash every downloaded artifact against the now-trusted checksums.
shasum -a 256 --ignore-missing -c checksums.txt

# 3. GitHub build provenance (repeat --repo for whichever archive you pulled).
gh attestation verify gqlgen_Darwin_arm64.tar.gz --repo 99designs/gqlgen
gh attestation verify gqlgen_0.17.97_source.tar.gz --repo 99designs/gqlgen

Each archive ships an SBOM alongside it (<archive>.sbom.json, SPDX-2.3); the
source tree's is gqlgen_0.17.97_source.tar.gz.sbom.json.

Released by GoReleaser.