fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.37 #188

2026-09-03T22:12:04Z

renovate commented

2026-09-03 22:12:04 +00:00

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/vektah/gqlparser/v2	`v2.5.36` → `v2.5.37`

Release Notes

vektah/gqlparser (github.com/vektah/gqlparser/v2)

`v2.5.37`

Compare Source

Changelog

Fix default values for inline variable fields by @surbhi-singh in #447
fix(validator): Reject non-null input cycles by @romshark in #456
validator: add opt-in source-aware validation errors by @virgil-king in #461
Update and pin by @StevenACoffman in #462
Add Go releaser and SBOM by @StevenACoffman in #463
build(deps): bump the actions-deps group in /validator/imported with 2 updates by @dependabot[bot] in #446
build(deps): bump brace-expansion from 5.0.6 to 5.0.9 in /validator/imported by @dependabot[bot] in #455
build(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 in the actions-deps group across 1 directory by @dependabot[bot] in #452
build(deps): bump actions/setup-go from 6 to 7 in the actions-deps group across 1 directory by @dependabot[bot] in #450
build(deps): bump the actions-deps group across 1 directory with 3 updates by @dependabot[bot] in #453
build(deps): bump js-yaml from 5.2.3 to 5.4.1 in /validator/imported in the actions-deps group across 1 directory by @dependabot[bot] in #458
build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 in the actions-deps group across 1 directory by @dependabot[bot] in #457

New Contributors

@surbhi-singh made their first contribution in #447
@romshark made their first contribution in #456
@virgil-king made their first contribution in #461

Full Changelog: https://github.com/vektah/gqlparser/compare/v2.5.36...v2.5.37

Verifying this release


# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.37' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.37_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.37_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/vektah/gqlparser/v2](https://github.com/vektah/gqlparser) | `v2.5.36` → `v2.5.37` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fvektah%2fgqlparser%2fv2/v2.5.37?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fvektah%2fgqlparser%2fv2/v2.5.36/v2.5.37?slim=true) | --- ### Release Notes <details> <summary>vektah/gqlparser (github.com/vektah/gqlparser/v2)</summary> ### [`v2.5.37`](https://github.com/vektah/gqlparser/releases/tag/v2.5.37) [Compare Source](https://github.com/vektah/gqlparser/compare/v2.5.36...v2.5.37) #### Changelog - Fix default values for inline variable fields by [@surbhi-singh](https://github.com/surbhi-singh) in [#447](https://github.com/vektah/gqlparser/pull/447) - fix(validator): Reject non-null input cycles by [@romshark](https://github.com/romshark) in [#456](https://github.com/vektah/gqlparser/pull/456) - validator: add opt-in source-aware validation errors by [@virgil-king](https://github.com/virgil-king) in [#461](https://github.com/vektah/gqlparser/pull/461) - Update and pin by [@StevenACoffman](https://github.com/StevenACoffman) in [#462](https://github.com/vektah/gqlparser/pull/462) - Add Go releaser and SBOM by [@StevenACoffman](https://github.com/StevenACoffman) in [#463](https://github.com/vektah/gqlparser/pull/463) - build(deps): bump the actions-deps group in /validator/imported with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#446](https://github.com/vektah/gqlparser/pull/446) - build(deps): bump brace-expansion from 5.0.6 to 5.0.9 in /validator/imported by [@dependabot](https://github.com/dependabot)\[bot] in [#455](https://github.com/vektah/gqlparser/pull/455) - build(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 in the actions-deps group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#452](https://github.com/vektah/gqlparser/pull/452) - build(deps): bump actions/setup-go from 6 to 7 in the actions-deps group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#450](https://github.com/vektah/gqlparser/pull/450) - build(deps): bump the actions-deps group across 1 directory with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#453](https://github.com/vektah/gqlparser/pull/453) - build(deps): bump js-yaml from 5.2.3 to 5.4.1 in /validator/imported in the actions-deps group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#458](https://github.com/vektah/gqlparser/pull/458) - build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 in the actions-deps group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#457](https://github.com/vektah/gqlparser/pull/457) #### New Contributors - [@surbhi-singh](https://github.com/surbhi-singh) made their first contribution in [#447](https://github.com/vektah/gqlparser/pull/447) - [@romshark](https://github.com/romshark) made their first contribution in [#456](https://github.com/vektah/gqlparser/pull/456) - [@virgil-king](https://github.com/virgil-king) made their first contribution in [#461](https://github.com/vektah/gqlparser/pull/461) **Full Changelog**: <https://github.com/vektah/gqlparser/compare/v2.5.36...v2.5.37> #### Verifying this release ```bash # 1. cosign signature over the checksum file (identity = the release workflow). cosign verify-blob \ --bundle checksums.txt.sigstore.json \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.37' \ checksums.txt # 2. source tarball + SBOM hash to the now-trusted checksums. shasum -a 256 -c checksums.txt # 3. GitHub build provenance. gh attestation verify gqlparser_2.5.37_source.tar.gz --repo StevenACoffman/gqlparser ``` The SBOM is `gqlparser_2.5.37_source.tar.gz.sbom.json` (SPDX-2.3). *** Released by [GoReleaser](https://github.com/goreleaser/goreleaser). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate added 1 commit 2026-09-03 22:12:06 +00:00

fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.37

presenter / test (push) Skipped

presenter / vulnerabilities (push) Skipped

pre-commit / pre-commit (push) Skipped

renovate/stability-days Updates have met minimum release age requirement

Details

presenter / test (pull_request) Successful in 53s

Details

presenter / vulnerabilities (pull_request) Successful in 1m6s

Details

pre-commit / pre-commit (pull_request) Successful in 3m20s

Details

992487f246

renovate scheduled this pull request to auto merge when all checks succeed 2026-09-03 22:12:09 +00:00

gitea-actions bot commented

2026-09-03 22:19:13 +00:00

Coverage Report

Total coverage: 100%

## Coverage Report Total coverage: **100%**

renovate merged commit a11abd1933 into main

2026-09-03 22:22:57 +00:00

renovate deleted branch renovate/github.com-vektah-gqlparser-v2-2.x

2026-09-03 22:22:58 +00:00

releaser referenced this pull request

2026-09-03 22:35:02 +00:00

chore(release): prepare for v0.3.8 #189

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: shiny/presenter#188