github 99designs/gqlgen v0.17.98

4 hours ago

Changelog

  • 6640c4e Update Go deps (#4412)
  • 8e60939 chore(deps): bump github.com/vektra/mockery/v3 in /bin/_tools (#4409)
  • b5ec638 chore(deps): bump goreleaser/goreleaser-action from 7.2.3 to 7.3.0 (#4407)
  • e86e3bf chore(deps): bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1 (#4404)
  • 5079c44 chore(deps-dev): bump vite from 8.3.1 to 8.3.4 in /integration in the npm_and_yarn group across 1 directory (#4399)
  • 7d8b84d codegen: take built-ins from the gqlparser prelude (#4411)
  • 12954b5 federation: type MatchedKey with a constant per @key (#4401)
  • 19830bc pre-release v0.17.98
  • f75a5cf v0.17.97 postrelease bump

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/99designs/gqlgen/.github/workflows/release.yml@refs/tags/v0.17.98' \
  checksums.txt

# 2. hash every downloaded artifact against the now-trusted checksums.
shasum -a 256 --ignore-missing -c checksums.txt

# 3. GitHub build provenance (repeat --repo for whichever archive you pulled).
gh attestation verify gqlgen_Darwin_arm64.tar.gz --repo 99designs/gqlgen
gh attestation verify gqlgen_0.17.98_source.tar.gz --repo 99designs/gqlgen

Each archive ships an SBOM alongside it (<archive>.sbom.json, SPDX-2.3); the
source tree's is gqlgen_0.17.98_source.tar.gz.sbom.json.


Released by GoReleaser.

Don't miss a new gqlgen release

NewReleases is sending notifications on new releases.