Changelog
- 9cb3bcc Update Go deps to prepare for release (#519)
- 07488f8 build(deps): bump goreleaser/goreleaser-action (#501)
- 0103d1d build(deps): bump js-yaml (#500)
- 857fcf5 lexer: cap braced unicode escapes at eight digits (#511)
- 09a444d lexer: decode braced unicode escapes in strings (#507)
- cb6ec58 parser, validator: accept directives on directive definitions (#515)
- d0c057f parser: accept implements on an interface extension (#508)
- b530514 parser: bound nesting depth to prevent stack-overflow DoS (#516)
- 56827e1 parser: read descriptions of operations, fragments and variables (#509)
- 16fd644 parser: reject empty descriptions on the query shorthand (#513)
- 2c59137 validator: align enum value name checks with graphql-js (#517)
- ef1f846 validator: export the prelude for gqlgen (#518)
- 110c3f7 validator: fix list and leaf type conflict checks (#512)
- 23d1e0d validator: reject repeated and self-implemented interfaces (#499)
- 9b9fd70 validator: reject unions with no member types (#502)
- a494eee validator: test repeated and self interfaces on interface extensions (#514)
Verifying this release
# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
--bundle checksums.txt.sigstore.json \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.64' \
checksums.txt
# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt
# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.64_source.tar.gz --repo StevenACoffman/gqlparserThe SBOM is gqlparser_2.5.64_source.tar.gz.sbom.json (SPDX-2.3).
Released by GoReleaser.