github vektah/gqlparser v2.5.37

2 hours ago

Changelog

  • Fix default values for inline variable fields by @surbhi-singh in #447
  • fix(validator): Reject non-null input cycles by @romshark in #456
  • validator: add opt-in source-aware validation errors by @virgil-king in #461
  • Update and pin by @StevenACoffman in #462
  • Add Go releaser and SBOM by @StevenACoffman in #463
  • build(deps): bump the actions-deps group in /validator/imported with 2 updates by @dependabot[bot] in #446
  • build(deps): bump brace-expansion from 5.0.6 to 5.0.9 in /validator/imported by @dependabot[bot] in #455
  • build(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 in the actions-deps group across 1 directory by @dependabot[bot] in #452
  • build(deps): bump actions/setup-go from 6 to 7 in the actions-deps group across 1 directory by @dependabot[bot] in #450
  • build(deps): bump the actions-deps group across 1 directory with 3 updates by @dependabot[bot] in #453
  • build(deps): bump js-yaml from 5.2.3 to 5.4.1 in /validator/imported in the actions-deps group across 1 directory by @dependabot[bot] in #458
  • build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 in the actions-deps group across 1 directory by @dependabot[bot] in #457

New Contributors

Full Changelog: v2.5.36...v2.5.37

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.37' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.37_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.37_source.tar.gz.sbom.json (SPDX-2.3).


Released by GoReleaser.

Don't miss a new gqlparser release

NewReleases is sending notifications on new releases.