Skip to content

Bump graphql from 1.11.3 to 2.6.12 - #38

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/graphql-2.6.12
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/graphql-2.6.12

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown

Bumps graphql from 1.11.3 to 2.6.12.

Release notes

Sourced from graphql's releases.

v1.12.4

No release notes provided.

v1.12.3

No release notes provided.

v1.12.2

No release notes provided.

v1.12.1

No release notes provided.

v1.12.0

No release notes provided.

1.11.12

What's Changed

Full Changelog: rmosolgo/graphql-ruby@v1.11.10...v1.11.12

v1.11.7

No release notes provided.

v1.11.6

Breaking changes

  • FieldExtension: pass extended values instead of originals to after_resolve #3168

New features

  • Accept additional options in global_id_field macro #3196

Bug fixes

  • Use graphql_name in UnauthorizedError default message (fixes #3174) #3176
  • Improve error handling for base 64 decoding (in UniqueWithinType) #3179
  • Fix .valid_isolated_input? on parsed schemas (fixes #3181) #3182
  • Fix fields nullability in subscriptions documentation #3194
  • Update RangeAdd to use new connections when available #3195

v1.11.5

No release notes provided.

Version 1.11.4

No release notes provided.

Changelog

Sourced from graphql's changelog.

2.6.12 (14 Oct 2026)

Security: This version contains a patch for GHSA-965v-9v76-5hg2

Bug fixes

  • Visibility::Profile#preload: preload more type information #5748 #5758
  • Variables: use defaults for omitted non-null variables #5754
  • Visibility::Profile: freeze hashes when fully loaded #5750
  • Dataloader: give nested dataloader calls their own state #5760
  • RelationConnection: reject invalid cursors #5752
  • Legacy execution: Set current_field and current_arguments for list item dataloader fibers #5759
  • Propagate list errors through non-null items #5756
  • Fix error paths and performance on input objects in lists #5751
  • Execution::Next: Don't call .size on non-Array list results #5765
  • Subscriptions: reject multiple root selections and introspection root selections #5770
  • Parser: fix source locations after multibyte input #5771
  • RelationConnection: fix detection of AsyncDataloader to avoid duplicate queries #5773

2.6.11 (21 Sep 2026)

Bug fixes

  • AsyncDataloader: call fiber cleanup hooks after errors #5718
  • RelationConnection: support initialization without context #5716
  • CParser: support exponent-only floats #5719
  • CParser: fix compiler warnings #5721
  • ArrayConnection: reject cursors pointing to malformed, zero, or negative indexes
  • AsyncDataloader: prevent duplicate count queries #5717
  • Subscriptions: improve serializer #5722, #5723
  • Sentry: support data_collection configuration
  • Execution::Next: preserve multiplex results after setup errors #5728
  • Execution::Next: use it for Query#result when as_default: true #5742
  • Execution::Next: skip lazy? check when schema doesn't use resolve_lazy for Partials on scalars #5740
  • Execution::Next: treat unimplemented directive hooks as no-ops #5739
  • Schema::Visibility: improve profile preloading #5743
  • Execution::Next: fix Query#result_values when an error is raised #5744
  • loads:: correctly type-check loaded objects when loads: is a loads:-only Object type #5745

2.6.10 (27 Aug 2026)

New features

  • Execution::Next: Add dataload: { ..., method: } shorthand #5706

Bug fixes

  • AsyncDataloader: Avoid ClosedError race in old fibers #5702
  • AsyncDataloader: fix nested dataloader runs #5703
  • Validation: speed up FieldsWillMerge #5704

... (truncated)

Commits
  • 842ab4f v2.6.12
  • b49ee49 Merge commit from fork
  • c0d6048 Only skip auth for built-in node/nodes/edges fields in Execution::Next
  • 075a44e Add failing test for Execution::Next skipping auth on custom edge/connection ...
  • 536364a Merge pull request #5773 from drhops/fix-relation-connection-async-dataloader...
  • beba07b Fix RelationConnection's AsyncDataloader check so its single-flight lock engages
  • 61759ed Merge pull request #5771 from ydah/fix-parser-multibyte-locations
  • fe9974a Merge pull request #5770 from ydah/fix-subscription-root-validation
  • 0547b67 Merge pull request #5769 from rmosolgo/dependabot/github_actions/shogo82148/a...
  • c64bdfe Fix parser source locations after multibyte input
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [graphql](https://github.com/rmosolgo/graphql-ruby) from 1.11.3 to 2.6.12.
- [Release notes](https://github.com/rmosolgo/graphql-ruby/releases)
- [Changelog](https://github.com/rmosolgo/graphql-ruby/blob/master/CHANGELOG.md)
- [Commits](rmosolgo/graphql-ruby@v1.11.3...v2.6.12)

---
updated-dependencies:
- dependency-name: graphql
  dependency-version: 2.6.12
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Oct 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants