fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.64 by renovate[bot] · Pull Request #49 · stuttgart-things/vault-base-setup

renovate · 2026-07-22T10:26:30Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/vektah/gqlparser/v2	`v2.5.33` → `v2.5.64`

Release Notes

vektah/gqlparser (github.com/vektah/gqlparser/v2)

`v2.5.64`

Compare Source

Changelog

9cb3bcc Update Go deps to prepare for release (#519)
07488f8 build(deps): bump goreleaser/goreleaser-action (#501)
0103d1d build(deps): bump js-yaml (#500)
857fcf5 lexer: cap braced unicode escapes at eight digits (#511)
09a444d lexer: decode braced unicode escapes in strings (#507)
cb6ec58 parser, validator: accept directives on directive definitions (#515)
d0c057f parser: accept implements on an interface extension (#508)
b530514 parser: bound nesting depth to prevent stack-overflow DoS (#516)
56827e1 parser: read descriptions of operations, fragments and variables (#509)
16fd644 parser: reject empty descriptions on the query shorthand (#513)
2c59137 validator: align enum value name checks with graphql-js (#517)
ef1f846 validator: export the prelude for gqlgen (#518)
110c3f7 validator: fix list and leaf type conflict checks (#512)
23d1e0d validator: reject repeated and self-implemented interfaces (#499)
9b9fd70 validator: reject unions with no member types (#502)
a494eee validator: test repeated and self interfaces on interface extensions (#514)

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.64' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.64_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.64_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

`v2.5.63`

Compare Source

Changelog

0ffc5c6 build(deps): bump the actions-deps group (#497)
993d81b validator: accept integer JSON numbers for ID variables (#496)
591ef29 validator: reject repeated arguments on SDL directives (#494)
c54aeb7 validator: reject repeated input fields in schema values (#495)
d4ae1da validator: reject repeated root operation types (#493)
1116cbb validator: require root operation types to be object types (#498)

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.63' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.63_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.63_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

`v2.5.62`

Compare Source

Changelog

4354676 gqlerror: merge an error tree's slog attributes (#492)
ca12c04 validator: reject duplicate argument definitions (#491)

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.62' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.62_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.62_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

`v2.5.61`

Compare Source

Changelog

9dfb589 Clarify LICENSE file
a3e84db Update the stuff (#490)
1762d4d build(deps): bump anchore/sbom-action/download-syft (#488)
97768b1 build(deps): bump chai in /validator/imported in the actions-deps group (#487)
54938d2 gqlerror: report an error's own fields as slog attributes (#489)

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.61' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.61_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.61_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

`v2.5.60`

Compare Source

Changelog

4e17d6e ast: cover the quoting cases mutants slipped through (#485)
1abdeea ast: quote string values as GraphQL, not Go (#483)
cea8f64 formatter: escape """ inside descriptions (#484)

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.60' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.60_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.60_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

`v2.5.59`

Compare Source

Changelog

7bd8ce2 Avoid iterator allocations in overlapping field validator (#481)
3ccd437 Benchmarks, a benchmark gate, property tests and mutation testing (#482)
6ddb710 Index fragments by name in the validator walker (#472)
b312a14 build(deps): bump brace-expansion in /validator/imported (#480)
dce6e66 build(deps-dev): bump prettier (#473)
3e25eab feat(validator): Add new validator.EmptyDefinitionError (#474)
eaee109 lexer: combine surrogate pair escapes in string literals (#476)
1c204b4 validator: make MaxIntrospectionDepth linear in fragment spreads (#471)
b99f91a validator: stop OverlappingFieldsCanBeMerged recursing forever on fragment cycles (revised #477) (#478)

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.59' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.59_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.59_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

`v2.5.58`

Compare Source

Changelog

9a84c0a Compare composite argument values in sameValue (#108) (#459)
42cda29 build(deps): bump browserslist in /validator/imported (#464)
991cd11 build(deps): bump the actions-deps group across 1 directory with 7 updates (#467)
5d4af16 build(deps): bump the actions-deps group with 2 updates (#465)
dc52fbe validator: add OverlappingFieldsCanBeMerged spec cases

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.58' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.58_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.58_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

`v2.5.37`

Compare Source

Changelog

Fix default values for inline variable fields by @surbhi-singh in #447
fix(validator): Reject non-null input cycles by @romshark in #456
validator: add opt-in source-aware validation errors by @virgil-king in #461
Update and pin by @StevenACoffman in #462
Add Go releaser and SBOM by @StevenACoffman in #463
build(deps): bump the actions-deps group in /validator/imported with 2 updates by @dependabot[bot] in #446
build(deps): bump brace-expansion from 5.0.6 to 5.0.9 in /validator/imported by @dependabot[bot] in #455
build(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 in the actions-deps group across 1 directory by @dependabot[bot] in #452
build(deps): bump actions/setup-go from 6 to 7 in the actions-deps group across 1 directory by @dependabot[bot] in #450
build(deps): bump the actions-deps group across 1 directory with 3 updates by @dependabot[bot] in #453
build(deps): bump js-yaml from 5.2.3 to 5.4.1 in /validator/imported in the actions-deps group across 1 directory by @dependabot[bot] in #458
build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 in the actions-deps group across 1 directory by @dependabot[bot] in #457

New Contributors

@surbhi-singh made their first contribution in #447
@romshark made their first contribution in #456
@virgil-king made their first contribution in #461

Full Changelog: vektah/gqlparser@v2.5.36...v2.5.37

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.37' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.37_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.37_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

`v2.5.36`

Compare Source

What's Changed

Reject duplicate union member types by @greymoth-jp in #442
Improve duplicate union error message by @StevenACoffman in #443
lexer: render invalid-character codepoint as hex, not decimal by @c-tonneslan in #431
build(deps): bump actions/checkout from 6 to 7 in the actions-deps group by @dependabot[bot] in #440
build(deps): bump the actions-deps group in /validator/imported with 7 updates by @dependabot[bot] in #441
build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 in the actions-deps group by @dependabot[bot] in #445
build(deps): bump the actions-deps group in /validator/imported with 2 updates by @dependabot[bot] in #444

New Contributors

@greymoth-jp made their first contribution in #442
@c-tonneslan made their first contribution in #431

Full Changelog: vektah/gqlparser@v2.5.35...v2.5.36

`v2.5.35`

Compare Source

What's Changed

Migrate yaml dependency to go.yaml.in/yaml/v3 by @atzedus in #437
fix nullable nested list variable coercion by @jbellenger in #439
build(deps-dev): bump prettier from 3.8.3 to 3.8.4 in /validator/imported in the actions-deps group by @dependabot[bot] in #438

Full Changelog: vektah/gqlparser@v2.5.34...v2.5.35

`v2.5.34`

Compare Source

What's Changed

fix fragment definition directive variable handling by @jbellenger in #426
Remove github.com/andreyvit/diff dependency by @jeolted in #430
fix: reject duplicate enum values and repeated non-repeatable directives by @advoretsky in #436
build(deps): bump @babel/plugin-transform-modules-systemjs from 7.29.0 to 7.29.4 in /validator/imported by @dependabot[bot] in #428
build(deps): bump @babel/preset-env from 7.29.2 to 7.29.3 in /validator/imported in the actions-deps group by @dependabot[bot] in #427
build(deps): bump @babel/preset-env from 7.29.3 to 7.29.5 in /validator/imported in the actions-deps group by @dependabot[bot] in #429
build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 in the actions-deps group by @dependabot[bot] in #433
build(deps): bump the actions-deps group across 1 directory with 7 updates by @dependabot[bot] in #434

New Contributors

@jbellenger made their first contribution in #426
@jeolted made their first contribution in #430
@advoretsky made their first contribution in #436

Full Changelog: vektah/gqlparser@v2.5.33...v2.5.34

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot temporarily deployed to k8s July 22, 2026 10:26 Inactive

renovate Bot temporarily deployed to k8s July 22, 2026 10:30 Inactive

renovate Bot temporarily deployed to k8s July 22, 2026 10:33 Inactive

renovate Bot force-pushed the renovate/github.com-vektah-gqlparser-v2-2.x branch from c274f2c to 0fef07e Compare August 11, 2026 23:45

renovate Bot had a problem deploying to k8s August 11, 2026 23:45 Error

renovate Bot changed the title ~~fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.36~~ fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.36 - autoclosed Aug 29, 2026

renovate Bot closed this Aug 29, 2026

renovate Bot deleted the renovate/github.com-vektah-gqlparser-v2-2.x branch August 29, 2026 21:06

renovate Bot changed the title ~~fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.36 - autoclosed~~ fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.36 Aug 30, 2026

renovate Bot reopened this Aug 30, 2026

renovate Bot force-pushed the renovate/github.com-vektah-gqlparser-v2-2.x branch from 855052c to 0fef07e Compare August 30, 2026 01:52

renovate Bot temporarily deployed to k8s August 30, 2026 01:52 Inactive

renovate Bot force-pushed the renovate/github.com-vektah-gqlparser-v2-2.x branch from 0fef07e to 855052c Compare August 30, 2026 01:52

renovate Bot temporarily deployed to k8s August 30, 2026 01:52 Inactive

renovate Bot temporarily deployed to k8s August 31, 2026 22:33 Inactive

renovate Bot temporarily deployed to k8s August 31, 2026 22:35 Inactive

renovate Bot temporarily deployed to k8s August 31, 2026 22:37 Inactive

renovate Bot changed the title ~~fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.37~~ fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.37 - autoclosed Sep 3, 2026

renovate Bot closed this Sep 3, 2026

renovate Bot changed the title ~~fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.37 - autoclosed~~ fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.37 Sep 3, 2026

renovate Bot reopened this Sep 3, 2026

renovate Bot force-pushed the renovate/github.com-vektah-gqlparser-v2-2.x branch 2 times, most recently from 54828e8 to c6ecea8 Compare September 3, 2026 04:45

renovate Bot temporarily deployed to k8s September 3, 2026 04:45 Inactive

renovate Bot temporarily deployed to k8s September 3, 2026 04:48 Inactive

renovate Bot temporarily deployed to k8s September 3, 2026 04:49 Inactive

renovate Bot force-pushed the renovate/github.com-vektah-gqlparser-v2-2.x branch from c6ecea8 to 3a36947 Compare September 16, 2026 12:09

renovate Bot temporarily deployed to k8s September 16, 2026 12:09 Inactive

renovate Bot temporarily deployed to k8s September 16, 2026 12:11 Inactive

renovate Bot changed the title ~~fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.37~~ fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.58 Sep 24, 2026

renovate Bot force-pushed the renovate/github.com-vektah-gqlparser-v2-2.x branch from 3a36947 to a240982 Compare September 24, 2026 01:53

renovate Bot temporarily deployed to k8s September 24, 2026 01:53 Inactive

renovate Bot temporarily deployed to k8s September 24, 2026 01:54 Inactive

renovate Bot force-pushed the renovate/github.com-vektah-gqlparser-v2-2.x branch from a240982 to 1eb6106 Compare October 2, 2026 05:14

fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.64

e4fb8da

Navigation Menu

Repository navigation

fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.64 - #49

fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.64#49
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-vektah-gqlparser-v2-2.x

renovate Bot commented Jul 22, 2026 •

edited

Loading

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jul 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Changelog

Verifying this release

Changelog

Verifying this release

Changelog

Verifying this release

Changelog

Verifying this release

Changelog

Verifying this release

Changelog

Verifying this release

Changelog

Verifying this release

Changelog

New Contributors

Verifying this release

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

Configuration

Uh oh!

This branch was successfully deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 22, 2026 •

edited

Loading