Bump graphql-core from 3.2.6 to 3.2.8

[dependabot]

Bumps graphql-core from 3.2.6 to 3.2.8.

Release notes

Sourced from graphql-core's releases.

v3.2.8

Patch-release GraphQL-core v3.2.8, based on GraphQL.js v16.9.0.

This patch-release supports Python 3.7 to 3.14.

One change has been backported from the v3.3 branch:

• Require non-empty directive locations

Also, for backward compatibility, introspection.TypeResolvers is available again, as alias for TypeFields.

Thanks to all who are sponsoring me (@​Cito) for maintaining this project.

v3.2.7

Patch-release GraphQL-core v3.2.7, based on GraphQL.js v16.9.0.

This patch-release supports Python 3.7 to 3.14.

The following changes have been backported from the v3.3 branch:

• Keep extensions when sorting schemas
• Introduce "recommended" validation rules
• Implement OneOf Input Objects via @​oneOf directive
• Values can now be passed to GraphQLEnumType as a thunk
• Solved issues with pickled schemas

Thanks to all who are sponsoring me (@​Cito) for maintaining this project.

Commits

• a78b548 Bump version
• c026723 Update year of copyright
• a8c3348 Export TypeResolvers for backward compatibility
• b6fd7b2 Update dependencies
• 663d00d backport: Require non-empty directive locations
• 42328a6 backport: Solve issues with pickled schemas (#173)
• dd4d5a1 Bump JavaScript version
• ba6b6e4 backport: Enable passing values configuration to GraphQLEnumType as a thunk
• 6687245 backport: Add @​oneOf support to introspection query (#241)
• 18df18e backport: Implement OneOf Input Objects via @​oneOf directive
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[redreceipt]

Dependency-only patch update. Verified that GitHub checks are green and reran flake8, mypy, and unit tests locally against this bump alongside the other open patch/minor Dependabot updates.