Changelog
- Fix default values for inline variable fields by @surbhi-singh in #447
- fix(validator): Reject non-null input cycles by @romshark in #456
- validator: add opt-in source-aware validation errors by @virgil-king in #461
- Update and pin by @StevenACoffman in #462
- Add Go releaser and SBOM by @StevenACoffman in #463
- build(deps): bump the actions-deps group in /validator/imported with 2 updates by @dependabot[bot] in #446
- build(deps): bump brace-expansion from 5.0.6 to 5.0.9 in /validator/imported by @dependabot[bot] in #455
- build(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 in the actions-deps group across 1 directory by @dependabot[bot] in #452
- build(deps): bump actions/setup-go from 6 to 7 in the actions-deps group across 1 directory by @dependabot[bot] in #450
- build(deps): bump the actions-deps group across 1 directory with 3 updates by @dependabot[bot] in #453
- build(deps): bump js-yaml from 5.2.3 to 5.4.1 in /validator/imported in the actions-deps group across 1 directory by @dependabot[bot] in #458
- build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 in the actions-deps group across 1 directory by @dependabot[bot] in #457
New Contributors
- @surbhi-singh made their first contribution in #447
- @romshark made their first contribution in #456
- @virgil-king made their first contribution in #461
Full Changelog: v2.5.36...v2.5.37
Verifying this release
# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
--bundle checksums.txt.sigstore.json \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.37' \
checksums.txt
# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt
# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.37_source.tar.gz --repo StevenACoffman/gqlparserThe SBOM is gqlparser_2.5.37_source.tar.gz.sbom.json (SPDX-2.3).
Released by GoReleaser.