Changelog
- 9a84c0a Compare composite argument values in
sameValue(#108) (#459) - 42cda29 build(deps): bump browserslist in /validator/imported (#464)
- 991cd11 build(deps): bump the actions-deps group across 1 directory with 7 updates (#467)
- 5d4af16 build(deps): bump the actions-deps group with 2 updates (#465)
- dc52fbe validator: add OverlappingFieldsCanBeMerged spec cases
Verifying this release
# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
--bundle checksums.txt.sigstore.json \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.58' \
checksums.txt
# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt
# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.58_source.tar.gz --repo StevenACoffman/gqlparserThe SBOM is gqlparser_2.5.58_source.tar.gz.sbom.json (SPDX-2.3).
Released by GoReleaser.