Changelog
- 6640c4e Update Go deps (#4412)
- 8e60939 chore(deps): bump github.com/vektra/mockery/v3 in /bin/_tools (#4409)
- b5ec638 chore(deps): bump goreleaser/goreleaser-action from 7.2.3 to 7.3.0 (#4407)
- e86e3bf chore(deps): bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1 (#4404)
- 5079c44 chore(deps-dev): bump vite from 8.3.1 to 8.3.4 in /integration in the npm_and_yarn group across 1 directory (#4399)
- 7d8b84d codegen: take built-ins from the gqlparser prelude (#4411)
- 12954b5 federation: type MatchedKey with a constant per @key (#4401)
- 19830bc pre-release v0.17.98
- f75a5cf v0.17.97 postrelease bump
Verifying this release
# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
--bundle checksums.txt.sigstore.json \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity 'https://github.com/99designs/gqlgen/.github/workflows/release.yml@refs/tags/v0.17.98' \
checksums.txt
# 2. hash every downloaded artifact against the now-trusted checksums.
shasum -a 256 --ignore-missing -c checksums.txt
# 3. GitHub build provenance (repeat --repo for whichever archive you pulled).
gh attestation verify gqlgen_Darwin_arm64.tar.gz --repo 99designs/gqlgen
gh attestation verify gqlgen_0.17.98_source.tar.gz --repo 99designs/gqlgenEach archive ships an SBOM alongside it (<archive>.sbom.json, SPDX-2.3); the
source tree's is gqlgen_0.17.98_source.tar.gz.sbom.json.
Released by GoReleaser.