fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.59 #988

2026-10-05T02:10:29Z

renovate commented

2026-10-05 02:10:29 +00:00

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/vektah/gqlparser/v2	`v2.5.58` → `v2.5.59`

Release Notes

vektah/gqlparser (github.com/vektah/gqlparser/v2)

`v2.5.59`

Compare Source

Changelog

7bd8ce2 Avoid iterator allocations in overlapping field validator (#481)
3ccd437 Benchmarks, a benchmark gate, property tests and mutation testing (#482)
6ddb710 Index fragments by name in the validator walker (#472)
b312a14 build(deps): bump brace-expansion in /validator/imported (#480)
dce6e66 build(deps-dev): bump prettier (#473)
3e25eab feat(validator): Add new validator.EmptyDefinitionError (#474)
eaee109 lexer: combine surrogate pair escapes in string literals (#476)
1c204b4 validator: make MaxIntrospectionDepth linear in fragment spreads (#471)
b99f91a validator: stop OverlappingFieldsCanBeMerged recursing forever on fragment cycles (revised #477) (#478)

Verifying this release


# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.59' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.59_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.59_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/vektah/gqlparser/v2](https://github.com/vektah/gqlparser) | `v2.5.58` → `v2.5.59` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fvektah%2fgqlparser%2fv2/v2.5.59?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fvektah%2fgqlparser%2fv2/v2.5.58/v2.5.59?slim=true) | --- ### Release Notes <details> <summary>vektah/gqlparser (github.com/vektah/gqlparser/v2)</summary> ### [`v2.5.59`](https://github.com/vektah/gqlparser/releases/tag/v2.5.59) [Compare Source](https://github.com/vektah/gqlparser/compare/v2.5.58...v2.5.59) #### Changelog - [`7bd8ce2`](https://github.com/vektah/gqlparser/commit/7bd8ce26a9a91a93381ec130c4dd0005a64312f5) Avoid iterator allocations in overlapping field validator ([#481](https://github.com/vektah/gqlparser/issues/481)) - [`3ccd437`](https://github.com/vektah/gqlparser/commit/3ccd437ff1ef32b6851a670f749d7bc2aca6b20b) Benchmarks, a benchmark gate, property tests and mutation testing ([#482](https://github.com/vektah/gqlparser/issues/482)) - [`6ddb710`](https://github.com/vektah/gqlparser/commit/6ddb71072cb8e029586d5170ea73e85a0427f62c) Index fragments by name in the validator walker ([#472](https://github.com/vektah/gqlparser/issues/472)) - [`b312a14`](https://github.com/vektah/gqlparser/commit/b312a14470809ce15efc7d4727eea4f080fcdebd) build(deps): bump brace-expansion in /validator/imported ([#480](https://github.com/vektah/gqlparser/issues/480)) - [`dce6e66`](https://github.com/vektah/gqlparser/commit/dce6e6633aa43412964d77e10faa431d593f99ad) build(deps-dev): bump prettier ([#473](https://github.com/vektah/gqlparser/issues/473)) - [`3e25eab`](https://github.com/vektah/gqlparser/commit/3e25eab8a762bdf95e1a69b91540c14354dbd324) feat(validator): Add new validator.EmptyDefinitionError ([#474](https://github.com/vektah/gqlparser/issues/474)) - [`eaee109`](https://github.com/vektah/gqlparser/commit/eaee10953561f7943a8bbf46a56054aecf7c6e81) lexer: combine surrogate pair escapes in string literals ([#476](https://github.com/vektah/gqlparser/issues/476)) - [`1c204b4`](https://github.com/vektah/gqlparser/commit/1c204b4b992ebdc7724634ad4be0f52f838b15bf) validator: make MaxIntrospectionDepth linear in fragment spreads ([#471](https://github.com/vektah/gqlparser/issues/471)) - [`b99f91a`](https://github.com/vektah/gqlparser/commit/b99f91aec8211fe80208078b2d1991f10d1f7d57) validator: stop OverlappingFieldsCanBeMerged recursing forever on fragment cycles (revised [#477](https://github.com/vektah/gqlparser/issues/477)) ([#478](https://github.com/vektah/gqlparser/issues/478)) #### Verifying this release ```bash # 1. cosign signature over the checksum file (identity = the release workflow). cosign verify-blob \ --bundle checksums.txt.sigstore.json \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.59' \ checksums.txt # 2. source tarball + SBOM hash to the now-trusted checksums. shasum -a 256 -c checksums.txt # 3. GitHub build provenance. gh attestation verify gqlparser_2.5.59_source.tar.gz --repo StevenACoffman/gqlparser ``` The SBOM is `gqlparser_2.5.59_source.tar.gz.sbom.json` (SPDX-2.3). *** Released by [GoReleaser](https://github.com/goreleaser/goreleaser). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate added 1 commit 2026-10-05 02:10:31 +00:00

fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.59

schemas / check (push) Skipped

schemas / vulnerabilities (push) Skipped

schemas / check-release (push) Skipped

schemas / build (push) Skipped

pre-commit / pre-commit (push) Skipped

renovate/stability-days Updates have met minimum release age requirement

Details

schemas / check-release (pull_request) Successful in 56s

Details

schemas / vulnerabilities (pull_request) Successful in 59s