Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 22, 2026

Bumps graphql from 2.3.22 to 2.5.18.

Changelog

Sourced from graphql's changelog.

2.5.18 (22 Jan 2026)

  • GraphQL::Dashboard: properly require action_controller before using it #5510
  • GraphQL::Dashboard: don't use config.asset_host for Dashboard assets since they're handled by the dashboard itself #5511

2.5.17 (21 Jan 2026)

Bug fixes

  • GraphQL::Dashboard: fix routes compatibility with Devise #5505
  • GraphQL::Dashboard: fix HTML/erb lint issues #5497
  • Parser: improve check for invalid number followed by name #5492 #5492
  • GraphQL::Field: optimize boot memory by removing Field.from_options #5495
  • field, argument: improve API documentation for DSL methods #5491

2.5.16 (10 Dec 2025)

Bug fixes

  • fiber-storage: properly include dependency on Ruby < 3.2 #5484
  • Fix typo in legacy_invalid_empty_selections_on_union_with_type warning #5481

2.5.15 (9 Dec 2025)

New features

  • DetailedTrace: add separate spans for debug-only .inspect calls, support debug: false config #5477
  • required: validator: Raise a developer error when all one_of: options are hidden, support allow_all_hidden: true to allow this case #5474
  • GraphQL::Testing::MockActionCable: added to support testing ActionCableSubscriptions #5482
  • legacy_invalid_empty_selections_on_union_with_type: new method added for better metadata about legacy behavior #5480

Bug fixes

  • Fix typo in date encoding error #5447
  • Fix schema printer bug #5468
  • Ensure data exists for execution errors #5452
  • Improve SDL directive argument coercion #5469
  • Don't require fiber-storage on Ruby 3.2+ #5456
  • Visibility: default to preload: true when Rails.env.staging? #5409

2.5.14 (8 Oct 2025)

Bug fixes

  • Fix error when GraphQL-Batch is used (???) #5444

2.5.13 (22 Sep 2025)

New features

... (truncated)

Commits
  • 398efef 2.5.18
  • c81aa29 Merge pull request #5511 from rmosolgo/skip-asset-pipeline
  • 179a4e1 Fix system tests now that config.asset_host is set
  • 424a775 Merge pull request #5513 from duffuniverse/fix-docs-link-in-relay-subscriptio...
  • 4c5da18 Merge pull request #5510 from rafaelfranca/patch-1
  • 4150c5f Update internal link for compressed payloads section
  • 74c58f6 Don't use config.asset_host for GraphQL::Dashboard assets
  • e7e2e12 Require action_controller before using it
  • 53260f8 2.5.17
  • 8298e97 Merge pull request #5505 from rmosolgo/fix-engine-routes
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jan 22, 2026
@github-actions
Copy link

github-actions bot commented Jan 22, 2026

Docker image tag(s) pushed:

ghcr.io/conradwt/zero-to-graphql-using-ruby:gha-21310729115
ghcr.io/conradwt/zero-to-graphql-using-ruby:pr-345 

Labels added to images:

org.opencontainers.image.created=2026-01-24T06:32:49.312Z
org.opencontainers.image.description=The purpose of this example is to provide details as to how one would go about using GraphQL with the Ruby Language.
org.opencontainers.image.licenses=MIT
org.opencontainers.image.revision=97dd28e6ae7504f2dadc97ddfb2891227ce878be
org.opencontainers.image.source=https://github.com/conradwt/zero-to-graphql-using-ruby
org.opencontainers.image.title=zero-to-graphql-using-ruby
org.opencontainers.image.url=https://github.com/conradwt/zero-to-graphql-using-ruby
org.opencontainers.image.version=gha-21310729115

Bumps [graphql](https://github.com/rmosolgo/graphql-ruby) from 2.3.22 to 2.5.18.
- [Release notes](https://github.com/rmosolgo/graphql-ruby/releases)
- [Changelog](https://github.com/rmosolgo/graphql-ruby/blob/master/CHANGELOG.md)
- [Commits](rmosolgo/graphql-ruby@v2.3.22...v2.5.18)

---
updated-dependencies:
- dependency-name: graphql
  dependency-version: 2.5.18
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/bundler/graphql-2.5.18 branch from 27af869 to 63c7615 Compare January 24, 2026 06:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants