sample-spring-boot-graphql
sample-spring-boot-graphql copied to clipboard
Update graphql.spring.version (major)
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| com.graphql-java-kickstart:graphql-spring-boot-starter-test | 7.2.0 -> 15.1.0 |
||||
| com.graphql-java-kickstart:graphiql-spring-boot-starter | 7.2.0 -> 11.1.0 |
||||
| com.graphql-java-kickstart:graphql-spring-boot-starter | 7.2.0 -> 15.1.0 |
[!WARNING] Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
graphql-java-kickstart/graphql-spring-boot (com.graphql-java-kickstart:graphql-spring-boot-starter-test)
v15.1.0: 15.1.0
✨ Features
- Check origin for websocket to secure against cross-site attacks by @oliemansm https://github.com/graphql-java-kickstart/graphql-spring-boot/pull/914
- Support CSRF on websockets to secure against cross-site attacks by @oliemansm https://github.com/graphql-java-kickstart/graphql-spring-boot/issues/943
- Added SpringValueCache for easy creation of data loader ValueCache objects that utilize Spring Caches under the hood by @bsara https://github.com/graphql-java-kickstart/graphql-spring-boot/pull/964
🐞 Fixes
- Remove field bean autowiring in favor of constructor injection by @eye-dee https://github.com/graphql-java-kickstart/graphql-spring-boot/pull/914
- MetricsInstrumentation does not implement updated API of TracingInstrumentation provided by graphql-java by @bsara https://github.com/graphql-java-kickstart/graphql-spring-boot/issues/950
📦 Dependencies
- Update jacoco to v0.8.8 by @renovate
- Update graphql-java to v20 by @renovate
- Update spring boot to v3.1.2 by @renovate
- Update sonarqube to v4 by @renovate
- Update gradle to v8 by @renovate
- Update graphql-java-extended-scalars to v21 by @renovate
Full Changelog: https://github.com/graphql-java-kickstart/graphql-spring-boot/compare/v15.0.0...v15.1.0
v15.0.0: 15.0.0
💥 Breaking changes
- Updated source and target Java to v17.
✨ Features
- Spring Boot 3.0.0 / Jakarta EE 9 (jakarta.* namespace) support #894
📦 Dependencies
- Update spring boot to v3.0.0
- Update graphql-java to v19.3
- Update gradle to v7.6
- Update graphql-java-servlet to v15.0.0
v14.1.0: 14.1.0
⭐ New features
- Made possible to use newer versions of altair over cdn #874
📦 Dependencies
- update org.sonarqube to v3.5.0.2730
- update graphql-java to v19.2
- update graphql-java-extended-scalars to v19.1
- update spring-boot to v2.7.5
- update graphql-java-tools to v13.0.2
- update commons-text to v1.10.0
- update jsoup to v1.15.3
v14.0.0: 14.0.0
If you're using Spring Boot to manage versions of dependencies then it could be that it's pulling in version 18.3 of graphql-java instead of version 19.1. To override this version you should add the following in your Gradle build file:
ext["graphql-java.version"] = 19.1
Breaking changes
- removed deprecated
asyncModeEnabledandasyncTimeoutproperties
📦 Dependencies
- upgrade graphql-java to v19.1
- upgrade graphql-java-servlet to v14.0.0
- upgrade graphql-java-tools to v13.0.0
v13.0.1: 13.0.1
Bugfixes
- For non-async servlet wait until GraphQL async operation finished https://github.com/graphql-java-kickstart/graphql-java-servlet/pull/470
v13.0.0: 13.0.0
Bug fixes
- disable async timeout by default #778
- graphiql config headers do not work in new release 12.0.0 #726
- CorsEnabled=false not working for Spring-Boot-Service-Configs #682
- memory leak due to ReactiveApolloSubscriptionSession not closing #740
- Cannot access AsyncServletProperties.Threads fields because it is a package private class #748
- Graphiql static resource loading fix #794
- quote regex input string #824
Features
- aliased scalars #659
- Function for GraphQLTestTemplate to upload files using Upload scalar #712
- added ability to use strings for GraphQl queries when using GraphQLTestTemplate #807
Dependencies
- update dependency com.graphql-java:graphql-java to v18.3 #846
- update lib_graphql_servlet_ver to v13.0.0 #848
- update dependency com.graphql-java-kickstart:graphql-java-tools to v12.1.0 #825
- update spring boot to v2.7.2 #845
- update Reflections to 0.10.2 #772
v12.0.0: 12.0.0
Bug fixes
- Altair Settings Pane Configuration #529
- GraphQLTestAutoConfiguration tries to autowire TestRestTemplate regardless of WebEnvironment #549
- Feat/voyager csrf header #627
- Wrong SecurityContext with async-mode-enabled: true results #632
- Memory leak when using reactive subscriptions with KeepAlive #642
- The asynccorepoolsize property of graphqlconfiguration is incorrectly set #651
- 'Invalid Syntax : offending token '<EOF>'' when using Apollo persisted queries #666
Features
- Starter reorganization #617
- Move milliseconds and seconds to duration #647
- Upgrade to Spring Boot 2.5.4
- Upgrade to graphql-java 17.3
v11.1.0: 11.1.0
⭐ New features
- Add Maven BOM for the project #552
- Integrate extended GraphQL scalars 16.0.1 #525
- Removing references to JCenter now that it's on the way out #575
🐞 Bug fixes
- Playground incompatible with Spring Webflux #487
- Voyager page title Spring Boot property missing #536
- Enable or disable async mode #540
- Only call GraphqlErrorBuilder with non-null data #568
- Test subscription not waiting the specified amount of time #570
- Extensions in custom error stripped when exception handlers are enabled #605
- GraphQLErrorFromExceptionHandler doesn't work for AbortExecutionException #612
- Can't disable GraphQLErrorFromExceptionHandler #611
- Return valid error even if request body is invalid for webflux #616
📔 Documentation
- Update README.md with required CORS properties #530
- Typo in README (paragraph "Enable GraphiQL") #574
- Adding details on how to add GraphQL Playground starter #576
- Fix GraphiQL documentation #582
- Voyager configuration options #600
- Updated contributions description about commitlint and google-java-format usage
🔨 Dependency upgrades
- Upgrade to GraphQL Java 16.2 #526
- Upgrade to GraphQL Java Servlet 11.1.1 release notes
- Upgrade to GraphQL Java Tools 11.0.1 release notes
- Upgrade to Spring Boot 2.4.5 #580
- Upgrade to Gradle 7.0.2 #626
- Upgrade to commons-text 1.9 #587
- Upgrade to voyager rc31 #598
❤️ Contributors
We'd like to thank all the contributors who worked on this release!
- @oliemansm
- @BlasiusSecundus
- @aoudiamoncef
- @beedaan
- @ryanjones71
- @jeskew-gov
- @setchy
- @donbeave
v11.0.0: 11.0.0
Library versions across all graphql-java-kickstart will be synchronized from now on. The major and minor version of compatible libraries will always match. The patch section of the version can differ as bugs are fixed.
It is still recommended to not specify transitive dependencies explicitly to ensure compatibility.
Major changes
- upgraded
graphql-javadependency to16.1. See release notes for breaking changes.
Refactored Altair and GraphiQL properties
Both Altair and GraphiQL contained a similar property for setting the base path: altair.static.base-path. This additional layer static doesn't really serve any purpose, so we removed it. From now on the properties are:
altair.base-path=/
graphiql.base-path=/
Only support public exception handler methods
We were using reflection to make exception handler methods accessible, which is bad practice. See also: CERT, SEC05-J. . Any methods currently annotated with @ExceptionHandler used to create GraphQLError require the public modifier from now on.
Minor changes
- Support Mono return type in Webflux resolvers
- Fixed weird characters in Playground IDE
- Don't include irrelevant types in generated schema using Annotations
- Set default CORS headers if missing
- Allow configuring an input prefix when using annotation starter
- Serve Voyager static resources if app context is not root
v8.1.1: 8.1.1
- Custom exception handler no longer working with #493
v8.1.0: 8.1.0
Disabled insecure default for CORS allowed origins
The default value opened up GraphQL server for javascript access from all origins with the wildcard operator. This has been disabled. Instead you need to specifically configure the allowed origins (comma separated to configure multiple domains). You could use the wildcard operator again if you really want to, but this is not recommended.
graphql.servet.cors.allowed-origins = http://some.domain.com
Allow graphql.GraphQL.Builder#doNotAddDefaultInstrumentations to be set
Instead of a specific property we've introduced an object that can be used to configure the GraphQL.Builder just before it's used to build the GraphQL insteance. This can be achieved by exposing a GraphQLBuilderConfigurer bean, e.g.
@​Component
class DisableDefaultInstrumentationsConfigurer implements GraphQLBuilderConfigurer {
@​Override
public void configure(GraphQL.Builder builder) {
builder.doNotAddDefaultInstrumentations();
}
}
Add support for GraphiQL header editor #441
GraphiQL now supports a header editor. We've upgraded the GraphiQL version to this one to add support for it. You can still use the header configuration through properties. Those will be combined and visible in the header editor once enabled:
graphiql:
props:
variables:
headerEditorEnabled: true
For all supported GraphiQL props see: https://github.com/graphql/graphiql/tree/main/packages/graphiql#options.
Other changes
- Update graphql-java-servlet to 10.1.0: https://github.com/graphql-java-kickstart/graphql-java-servlet/releases/tag/v10.1.0
- Update graphql-java-tools to 6.3.0: https://github.com/graphql-java-kickstart/graphql-java-tools/releases/tag/6.3.0
- Upgrade bundled playground to 1.7.26
- Can't cast to dataFetchingEnvironment.getContext() to graphql.kickstart.spring.GraphQLSpringServerWebExchangeContext #426
- Migrate all tests to JUnit 5 / AssertJ #480
- Upgraded to Gradle 6.7
- No location, path, extensions When graphql.servlet.exception-handlers-enabled Set to true #478
- GraphQLTestTemplate: post() Should Be Public #475
- Feature/fix test subscription reset #472
- Update GraphQLController to use ObjectMapper to map ExecutionResult #471
- Support Async Timeout Property in GraphQLServletProperties #469
- Failed to load subscription client when CDN is enabled #463
- Add fluent API support for test template and response #443
- Provided SubscriptionExecutionStrategy is not used #430
- Add graphQL endpoint template resolve as in graphiql controller. #412
- Deprecated introspectionEnabled but new property not accepted #402
- GraphQLResponseCache support
- tracing-enabled: metrics-only fails to start #392
- Subscription does not handle properly NonNullableFieldWasNullException #378
- Bug? instrumentExecutionContext not called for subscriptions #358
v8.0.0: 8.0.0
- Graphql-Java 15.0 support #457, see related release notes: https://github.com/graphql-java/graphql-java/releases/tag/v15.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
- [ ] If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.