Skip to content

fix(deps): update dependency com.graphql-java:graphql-java to v24 #588

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix(deps): update dependency com.graphql-java:graphql-java to v24 #588

wants to merge 1 commit into from
+1 −1

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 7, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
com.graphql-java:graphql-java 22.3 -> 24.0 age adoption passing confidence

Release Notes

graphql-java/graphql-java (com.graphql-java:graphql-java)

v24.0: 24.0

24.0 is a breaking change

This release is an unexpected breaking change release. It was made to help propagate a fix in the DataLoader library

In DataLoader version 4.0.0 we introduced immutability into the DataLoaderOptions class, which was a good thing.

However it left the old mutative setXXX methods in place and made them immutable. This was a mistake. This leads to bugs at runtime for example

DataLoaderOptions options = DataLoaderOptions.newOptions();
if (maxBatchSize != BatchLoader.UNSET_BATCH_SIZE) {
  options.setMaxBatchSize(maxBatchSize);
}
return options.setCacheMap(cache);

The above code would continue to compile but the setMaxBatchSize() would never take affected at runtime with the immutable support.

So to help address this bug a DataLoader version 5.0.0 was released and it has removed the setXXX methods and requires the Builder methods to be used to ensure that code that relied on the old mutative methods now break at compile time and not at runtime.

In turn we have released this new version of graphql-java - we have designated it a breaking change because of this transitive DataLoader breaking change

We consider v23.x poisoned and we don't recommend you use it because of the latent bug above.

Small performance fixes

There are also a set of small performance oriented fixes that have gone out in this release.

What's Changed

Full Changelog: graphql-java/graphql-java@v23.1...v24.0

v23.1: 23.1

Do Not Use

Version 23.x is considered poisoned and we don't recommend you upgrade to it

See the release notes of v24 for more details on what this is the case.

Previous release notes

This reverts a bug in 23.0 introduced in https://github.com/graphql-java/graphql-java/pull/3871.

Please use 23.1, and not 23.0.

Update: we will shortly release 24.0, which replaces the 23 line of releases. Please do not use any v23 releases going forward.

v23.0: 23.0

Do Not Use

Version 23.x is considered poisoned and we don't recommend you upgrade to it

See the release notes of v24 for more details on what this is the case.

Update: we will shortly release 24.0, which replaces the 23 line of releases. Please do not use any v23 releases going forward.

Previous release notes

Notice: there is a bug with https://github.com/graphql-java/graphql-java/pull/3871/files, a new bugfix release is about to be released. Use 23.1 instead, not 23.0

Thanks to everyone for contributing to this release, through pull requests, issues, and discussions!

This is a major release which contains breaking changes.

Key changes

Performance improvements

See all performance improvements on GitHub: https://github.com/graphql-java/graphql-java/issues?q=is%3Amerged%20label%3A%22performance%22%20milestone%3A%2223.0%20breaking%20changes%22%20

Breaking changes

See all breaking changes on GitHub: https://github.com/graphql-java/graphql-java/issues?q=is%3Amerged%20label%3A%22breaking%20change%22%20milestone%3A%2223.0%20breaking%20changes%22

Security

We have become a CVE Numbering Authority (CNA) for GraphQL Java and related projects. For more information, see our Security page https://www.graphql-java.com/security.

What's Changed

New Contributors

Full Changelog: graphql-java/graphql-java@v22.3...v23.0

v22.4: 22.4

A very small release that backports an improvement to avoid wrapping materialized fieldValueObject in a CompletableFuture https://github.com/graphql-java/graphql-java/pull/3943

This change will shortly be released in the new 24.0 release. This is only a backport.

What's Changed

Full Changelog: graphql-java/graphql-java@v22.3...v22.4

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Apr 7, 2025
@renovate renovate bot force-pushed the renovate/major-lib_graphql_java_ver branch from 9eadcc5 to 9a2f68f Compare April 15, 2025 11:46
@sonarqubecloud SonarQubeCloud
Copy link

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@renovate renovate bot force-pushed the renovate/major-lib_graphql_java_ver branch from 9a2f68f to 41cf554 Compare May 16, 2025 06:50
@renovate renovate bot changed the title fix(deps): update dependency com.graphql-java:graphql-java to v23 fix(deps): update dependency com.graphql-java:graphql-java to v24 May 16, 2025
@sonarqubecloud SonarQubeCloud
Copy link

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants