What's Changed
- Reject selection sets on __typename for abstract parent types by @tobias-tengler in #10733
- Wait for started node and entity resolvers before completing nodes and _entities by @tobias-tengler in #10735
- Apply authorization to batch resolver fields by @tobias-tengler in #10737
- Limit the number of selections and selection sets of an operation by @tobias-tengler in #10729
- Keep the first occurrence of repeated input object properties in variables by @tobias-tengler in #10730
- Apply query type authorization to the node and nodes fields by @tobias-tengler in #10736
- Resolve union member types before applying type authorization by @tobias-tengler in #10734
- Fix DefaultHttpRequestParser accepting incomplete requests by @tobias-tengler in #10740
- Keep outgrown ResultDocument chunk tables rented until Dispose by @tobias-tengler in #10739
- [Mocha] Fix Postgres outbox reordering messages from one transaction by @alisan3 in #10699
- Apply descriptor attributes to source-generated node resolvers by @tobias-tengler in #10738
- Reject operations that exceed the fragment visit budget by @tobias-tengler in #10731
- Limit selection set depth across fragment spreads during validation by @tobias-tengler in #10732
- Fix document IDs not matching the hash of the sent document by @glen-84 in #10741
- Fix cursor key formatting reporting the wrong written length by @glen-84 in #10743
Full Changelog: 16.7.2...16.7.3