vektah/gqlparser v2.5.63 on GitHub

Changelog

0ffc5c6 build(deps): bump the actions-deps group (#497)
993d81b validator: accept integer JSON numbers for ID variables (#496)
591ef29 validator: reject repeated arguments on SDL directives (#494)
c54aeb7 validator: reject repeated input fields in schema values (#495)
d4ae1da validator: reject repeated root operation types (#493)
1116cbb validator: require root operation types to be object types (#498)

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.63' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.63_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.63_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.