Update graphql.spring.version (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
com.graphql-java-kickstart:graphql-spring-boot-starter-test	7.2.0 -> 15.1.0
com.graphql-java-kickstart:graphiql-spring-boot-starter	7.2.0 -> 11.1.0
com.graphql-java-kickstart:graphql-spring-boot-starter	7.2.0 -> 15.1.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

graphql-java-kickstart/graphql-spring-boot (com.graphql-java-kickstart:graphql-spring-boot-starter-test)

v15.1.0: 15.1.0

Compare Source

✨ Features

• Check origin for websocket to secure against cross-site attacks by @​oliemansm https://github.com/graphql-java-kickstart/graphql-spring-boot/pull/914
• Support CSRF on websockets to secure against cross-site attacks by @​oliemansm https://github.com/graphql-java-kickstart/graphql-spring-boot/issues/943
• Added SpringValueCache for easy creation of data loader ValueCache objects that utilize Spring Caches under the hood by @​bsara https://github.com/graphql-java-kickstart/graphql-spring-boot/pull/964

🐞 Fixes

• Remove field bean autowiring in favor of constructor injection by @​eye-dee https://github.com/graphql-java-kickstart/graphql-spring-boot/pull/914
• MetricsInstrumentation does not implement updated API of TracingInstrumentation provided by graphql-java by @​bsara https://github.com/graphql-java-kickstart/graphql-spring-boot/issues/950

📦 Dependencies

• Update jacoco to v0.8.8 by @​renovate
• Update graphql-java to v20 by @​renovate
• Update spring boot to v3.1.2 by @​renovate
• Update sonarqube to v4 by @​renovate
• Update gradle to v8 by @​renovate
• Update graphql-java-extended-scalars to v21 by @​renovate

Full Changelog: graphql-java-kickstart/graphql-spring-boot@v15.0.0...v15.1.0

v15.0.0: 15.0.0

Compare Source

💥 Breaking changes

• Updated source and target Java to v17.

✨ Features

• Spring Boot 3.0.0 / Jakarta EE 9 (jakarta.* namespace) support #​894

📦 Dependencies

• Update spring boot to v3.0.0
• Update graphql-java to v19.3
• Update gradle to v7.6
• Update graphql-java-servlet to v15.0.0

v14.1.0: 14.1.0

Compare Source

⭐ New features

• Made possible to use newer versions of altair over cdn #​874

📦 Dependencies

• update org.sonarqube to v3.5.0.2730
• update graphql-java to v19.2
• update graphql-java-extended-scalars to v19.1
• update spring-boot to v2.7.5
• update graphql-java-tools to v13.0.2
• update commons-text to v1.10.0
• update jsoup to v1.15.3

v14.0.0: 14.0.0

Compare Source

If you're using Spring Boot to manage versions of dependencies then it could be that it's pulling in version 18.3 of graphql-java instead of version 19.1. To override this version you should add the following in your Gradle build file:

ext["graphql-java.version"] = 19.1

Breaking changes

• removed deprecated asyncModeEnabled and asyncTimeout properties

📦 Dependencies

• upgrade graphql-java to v19.1
• upgrade graphql-java-servlet to v14.0.0
• upgrade graphql-java-tools to v13.0.0

v13.0.1: 13.0.1

Compare Source

Bugfixes

• For non-async servlet wait until GraphQL async operation finished https://github.com/graphql-java-kickstart/graphql-java-servlet/pull/470

v13.0.0: 13.0.0

Compare Source

Bug fixes

• disable async timeout by default #​778
• graphiql config headers do not work in new release 12.0.0 #​726
• CorsEnabled=false not working for Spring-Boot-Service-Configs #​682
• memory leak due to ReactiveApolloSubscriptionSession not closing #​740
• Cannot access AsyncServletProperties.Threads fields because it is a package private class #​748
• Graphiql static resource loading fix #​794
• quote regex input string #​824

Features

• aliased scalars #​659
• Function for GraphQLTestTemplate to upload files using Upload scalar #​712
• added ability to use strings for GraphQl queries when using GraphQLTestTemplate #​807

Dependencies

• update dependency com.graphql-java:graphql-java to v18.3 #​846
• update lib_graphql_servlet_ver to v13.0.0 #​848
• update dependency com.graphql-java-kickstart:graphql-java-tools to v12.1.0 #​825
• update spring boot to v2.7.2 #​845
• update Reflections to 0.10.2 #​772

v12.0.0: 12.0.0

Compare Source

Bug fixes

• Altair Settings Pane Configuration #​529
• GraphQLTestAutoConfiguration tries to autowire TestRestTemplate regardless of WebEnvironment #​549
• Feat/voyager csrf header #​627
• Wrong SecurityContext with async-mode-enabled: true results #​632
• Memory leak when using reactive subscriptions with KeepAlive #​642
• The asynccorepoolsize property of graphqlconfiguration is incorrectly set #​651
• 'Invalid Syntax : offending token ''' when using Apollo persisted queries #​666

Features

• Starter reorganization #​617
• Move milliseconds and seconds to duration #​647
• Upgrade to Spring Boot 2.5.4
• Upgrade to graphql-java 17.3

v11.1.0: 11.1.0

Compare Source

⭐ New features

• Add Maven BOM for the project #​552
• Integrate extended GraphQL scalars 16.0.1 #​525
• Removing references to JCenter now that it's on the way out #​575

🐞 Bug fixes

• Playground incompatible with Spring Webflux #​487
• Voyager page title Spring Boot property missing #​536
• Enable or disable async mode #​540
• Only call GraphqlErrorBuilder with non-null data #​568
• Test subscription not waiting the specified amount of time #​570
• Extensions in custom error stripped when exception handlers are enabled #​605
• GraphQLErrorFromExceptionHandler doesn't work for AbortExecutionException #​612
• Can't disable GraphQLErrorFromExceptionHandler #​611
• Return valid error even if request body is invalid for webflux #​616

📔 Documentation

• Update README.md with required CORS properties #​530
• Typo in README (paragraph "Enable GraphiQL") #​574
• Adding details on how to add GraphQL Playground starter #​576
• Fix GraphiQL documentation #​582
• Voyager configuration options #​600
• Updated contributions description about commitlint and google-java-format usage

🔨 Dependency upgrades

• Upgrade to GraphQL Java 16.2 #​526
• Upgrade to GraphQL Java Servlet 11.1.1 release notes
• Upgrade to GraphQL Java Tools 11.0.1 release notes
• Upgrade to Spring Boot 2.4.5 #​580
• Upgrade to Gradle 7.0.2 #​626
• Upgrade to commons-text 1.9 #​587
• Upgrade to voyager rc31 #​598

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

• @​oliemansm
• @​BlasiusSecundus
• @​aoudiamoncef
• @​beedaan
• @​ryanjones71
• @​jeskew-gov
• @​setchy
• @​donbeave

v11.0.0: 11.0.0

Compare Source

Library versions across all graphql-java-kickstart will be synchronized from now on. The major and minor version of compatible libraries will always match. The patch section of the version can differ as bugs are fixed.

It is still recommended to not specify transitive dependencies explicitly to ensure compatibility.

Major changes

• upgraded graphql-java dependency to 16.1. See release notes for breaking changes.

Refactored Altair and GraphiQL properties

Both Altair and GraphiQL contained a similar property for setting the base path: altair.static.base-path. This additional layer static doesn't really serve any purpose, so we removed it. From now on the properties are:

altair.base-path=/
graphiql.base-path=/

Only support public exception handler methods

We were using reflection to make exception handler methods accessible, which is bad practice. See also: CERT, SEC05-J. . Any methods currently annotated with @ExceptionHandler used to create GraphQLError require the public modifier from now on.

Minor changes

• Support Mono return type in Webflux resolvers
• Fixed weird characters in Playground IDE
• Don't include irrelevant types in generated schema using Annotations
• Set default CORS headers if missing
• Allow configuring an input prefix when using annotation starter
• Serve Voyager static resources if app context is not root

v8.1.1: 8.1.1

Compare Source

• Custom exception handler no longer working with #​493

v8.1.0: 8.1.0

Compare Source

Disabled insecure default for CORS allowed origins

The default value opened up GraphQL server for javascript access from all origins with the wildcard operator. This has been disabled. Instead you need to specifically configure the allowed origins (comma separated to configure multiple domains). You could use the wildcard operator again if you really want to, but this is not recommended.

graphql.servet.cors.allowed-origins = http://some.domain.com

Allow graphql.GraphQL.Builder#doNotAddDefaultInstrumentations to be set

Instead of a specific property we've introduced an object that can be used to configure the GraphQL.Builder just before it's used to build the GraphQL insteance. This can be achieved by exposing a GraphQLBuilderConfigurer bean, e.g.

@​Component
class DisableDefaultInstrumentationsConfigurer implements GraphQLBuilderConfigurer {
  @​Override
  public void configure(GraphQL.Builder builder) {
    builder.doNotAddDefaultInstrumentations();
  }
}

Add support for GraphiQL header editor #​441

GraphiQL now supports a header editor. We've upgraded the GraphiQL version to this one to add support for it. You can still use the header configuration through properties. Those will be combined and visible in the header editor once enabled:

graphiql:
  props:
    variables:
      headerEditorEnabled: true

For all supported GraphiQL props see: https://github.com/graphql/graphiql/tree/main/packages/graphiql#options.

Other changes

• Update graphql-java-servlet to 10.1.0: https://github.com/graphql-java-kickstart/graphql-java-servlet/releases/tag/v10.1.0
• Update graphql-java-tools to 6.3.0: https://github.com/graphql-java-kickstart/graphql-java-tools/releases/tag/6.3.0
• Upgrade bundled playground to 1.7.26
• Can't cast to dataFetchingEnvironment.getContext() to graphql.kickstart.spring.GraphQLSpringServerWebExchangeContext #​426
• Migrate all tests to JUnit 5 / AssertJ #​480
• Upgraded to Gradle 6.7
• No location, path, extensions When graphql.servlet.exception-handlers-enabled Set to true #​478
• GraphQLTestTemplate: post() Should Be Public #​475
• Feature/fix test subscription reset #​472
• Update GraphQLController to use ObjectMapper to map ExecutionResult #​471
• Support Async Timeout Property in GraphQLServletProperties #​469
• Failed to load subscription client when CDN is enabled #​463
• Add fluent API support for test template and response #​443
• Provided SubscriptionExecutionStrategy is not used #​430
• Add graphQL endpoint template resolve as in graphiql controller. #​412
• Deprecated introspectionEnabled but new property not accepted #​402
• GraphQLResponseCache support
• tracing-enabled: metrics-only fails to start #​392
• Subscription does not handle properly NonNullableFieldWasNullException #​378
• Bug? instrumentExecutionContext not called for subscriptions #​358

v8.0.0: 8.0.0

Compare Source

• Graphql-Java 15.0 support #​457, see related release notes: https://github.com/graphql-java/graphql-java/releases/tag/v15.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.