shiny/otelsetup
6
0 Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases 30 Activity

fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.62 #209

Merged
renovate merged 1 commits from renovate/github.com-vektah-gqlparser-v2-2.x into main 2026-10-17 00:44:35 +00:00
Conversation 1 Commits 1 Files Changed 2
+3 -3
renovate commented 2026-10-17 00:13:02 +00:00
Owner
Copy link
Copy source

This PR contains the following updates:

Package Change Age Confidence
github.com/vektah/gqlparser/v2 v2.5.37 → v2.5.62 age confidence

Release Notes

vektah/gqlparser (github.com/vektah/gqlparser/v2)

v2.5.62

Compare Source

Changelog

Verifying this release


# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.62' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.62_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.62_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

v2.5.61

Compare Source

Changelog

Verifying this release


# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.61' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.61_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.61_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

v2.5.60

Compare Source

Changelog

Verifying this release


# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.60' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.60_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.60_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

v2.5.59

Compare Source

Changelog

  • 7bd8ce2 Avoid iterator allocations in overlapping field validator (#​481)
  • 3ccd437 Benchmarks, a benchmark gate, property tests and mutation testing (#​482)
  • 6ddb710 Index fragments by name in the validator walker (#​472)
  • b312a14 build(deps): bump brace-expansion in /validator/imported (#​480)
  • dce6e66 build(deps-dev): bump prettier (#​473)
  • 3e25eab feat(validator): Add new validator.EmptyDefinitionError (#​474)
  • eaee109 lexer: combine surrogate pair escapes in string literals (#​476)
  • 1c204b4 validator: make MaxIntrospectionDepth linear in fragment spreads (#​471)
  • b99f91a validator: stop OverlappingFieldsCanBeMerged recursing forever on fragment cycles (revised #​477) (#​478)

Verifying this release


# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.59' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.59_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.59_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

v2.5.58

Compare Source

Changelog

  • 9a84c0a Compare composite argument values in sameValue (#​108) (#​459)
  • 42cda29 build(deps): bump browserslist in /validator/imported (#​464)
  • 991cd11 build(deps): bump the actions-deps group across 1 directory with 7 updates (#​467)
  • 5d4af16 build(deps): bump the actions-deps group with 2 updates (#​465)
  • dc52fbe validator: add OverlappingFieldsCanBeMerged spec cases

Verifying this release


# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.58' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.58_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.58_source.tar.gz.sbom.json (SPDX-2.3).

Released by GoReleaser.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/vektah/gqlparser/v2](https://github.com/vektah/gqlparser) | `v2.5.37` → `v2.5.62` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fvektah%2fgqlparser%2fv2/v2.5.62?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fvektah%2fgqlparser%2fv2/v2.5.37/v2.5.62?slim=true) | --- ### Release Notes <details> <summary>vektah/gqlparser (github.com/vektah/gqlparser/v2)</summary> ### [`v2.5.62`](https://github.com/vektah/gqlparser/releases/tag/v2.5.62) [Compare Source](https://github.com/vektah/gqlparser/compare/v2.5.61...v2.5.62) #### Changelog - [`4354676`](https://github.com/vektah/gqlparser/commit/4354676b377d1c6f4fdf4b83ee77986e0dc22555) gqlerror: merge an error tree's slog attributes ([#&#8203;492](https://github.com/vektah/gqlparser/issues/492)) - [`ca12c04`](https://github.com/vektah/gqlparser/commit/ca12c04f022bfeea47c7ffa9b736d2dab1f35cef) validator: reject duplicate argument definitions ([#&#8203;491](https://github.com/vektah/gqlparser/issues/491)) #### Verifying this release ```bash # 1. cosign signature over the checksum file (identity = the release workflow). cosign verify-blob \ --bundle checksums.txt.sigstore.json \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.62' \ checksums.txt # 2. source tarball + SBOM hash to the now-trusted checksums. shasum -a 256 -c checksums.txt # 3. GitHub build provenance. gh attestation verify gqlparser_2.5.62_source.tar.gz --repo StevenACoffman/gqlparser ``` The SBOM is `gqlparser_2.5.62_source.tar.gz.sbom.json` (SPDX-2.3). *** Released by [GoReleaser](https://github.com/goreleaser/goreleaser). ### [`v2.5.61`](https://github.com/vektah/gqlparser/releases/tag/v2.5.61) [Compare Source](https://github.com/vektah/gqlparser/compare/v2.5.60...v2.5.61) #### Changelog - [`9dfb589`](https://github.com/vektah/gqlparser/commit/9dfb5891deec5fda3a9c26ede5c3c777471b6e50) Clarify LICENSE file - [`a3e84db`](https://github.com/vektah/gqlparser/commit/a3e84dbfc63e622205352e86a6dfcd4168df6e5a) Update the stuff ([#&#8203;490](https://github.com/vektah/gqlparser/issues/490)) - [`1762d4d`](https://github.com/vektah/gqlparser/commit/1762d4d4ed1db5fefbf50e1af5e95dbaa51031e8) build(deps): bump anchore/sbom-action/download-syft ([#&#8203;488](https://github.com/vektah/gqlparser/issues/488)) - [`97768b1`](https://github.com/vektah/gqlparser/commit/97768b1013a8a3fa7a79fd36d48424afc3b4ab6a) build(deps): bump chai in /validator/imported in the actions-deps group ([#&#8203;487](https://github.com/vektah/gqlparser/issues/487)) - [`54938d2`](https://github.com/vektah/gqlparser/commit/54938d253c9b3696e6ca8d9b1238ec535ae18a9a) gqlerror: report an error's own fields as slog attributes ([#&#8203;489](https://github.com/vektah/gqlparser/issues/489)) #### Verifying this release ```bash # 1. cosign signature over the checksum file (identity = the release workflow). cosign verify-blob \ --bundle checksums.txt.sigstore.json \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.61' \ checksums.txt # 2. source tarball + SBOM hash to the now-trusted checksums. shasum -a 256 -c checksums.txt # 3. GitHub build provenance. gh attestation verify gqlparser_2.5.61_source.tar.gz --repo StevenACoffman/gqlparser ``` The SBOM is `gqlparser_2.5.61_source.tar.gz.sbom.json` (SPDX-2.3). *** Released by [GoReleaser](https://github.com/goreleaser/goreleaser). ### [`v2.5.60`](https://github.com/vektah/gqlparser/releases/tag/v2.5.60) [Compare Source](https://github.com/vektah/gqlparser/compare/v2.5.59...v2.5.60) #### Changelog - [`4e17d6e`](https://github.com/vektah/gqlparser/commit/4e17d6e4d0d9f752445aac098773adc68013ab8c) ast: cover the quoting cases mutants slipped through ([#&#8203;485](https://github.com/vektah/gqlparser/issues/485)) - [`1abdeea`](https://github.com/vektah/gqlparser/commit/1abdeea509a56ad40011da4077da85338d0aae53) ast: quote string values as GraphQL, not Go ([#&#8203;483](https://github.com/vektah/gqlparser/issues/483)) - [`cea8f64`](https://github.com/vektah/gqlparser/commit/cea8f64cfae7b5f9703561bc7d8a16926d248479) formatter: escape """ inside descriptions ([#&#8203;484](https://github.com/vektah/gqlparser/issues/484)) #### Verifying this release ```bash # 1. cosign signature over the checksum file (identity = the release workflow). cosign verify-blob \ --bundle checksums.txt.sigstore.json \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.60' \ checksums.txt # 2. source tarball + SBOM hash to the now-trusted checksums. shasum -a 256 -c checksums.txt # 3. GitHub build provenance. gh attestation verify gqlparser_2.5.60_source.tar.gz --repo StevenACoffman/gqlparser ``` The SBOM is `gqlparser_2.5.60_source.tar.gz.sbom.json` (SPDX-2.3). *** Released by [GoReleaser](https://github.com/goreleaser/goreleaser). ### [`v2.5.59`](https://github.com/vektah/gqlparser/releases/tag/v2.5.59) [Compare Source](https://github.com/vektah/gqlparser/compare/v2.5.58...v2.5.59) #### Changelog - [`7bd8ce2`](https://github.com/vektah/gqlparser/commit/7bd8ce26a9a91a93381ec130c4dd0005a64312f5) Avoid iterator allocations in overlapping field validator ([#&#8203;481](https://github.com/vektah/gqlparser/issues/481)) - [`3ccd437`](https://github.com/vektah/gqlparser/commit/3ccd437ff1ef32b6851a670f749d7bc2aca6b20b) Benchmarks, a benchmark gate, property tests and mutation testing ([#&#8203;482](https://github.com/vektah/gqlparser/issues/482)) - [`6ddb710`](https://github.com/vektah/gqlparser/commit/6ddb71072cb8e029586d5170ea73e85a0427f62c) Index fragments by name in the validator walker ([#&#8203;472](https://github.com/vektah/gqlparser/issues/472)) - [`b312a14`](https://github.com/vektah/gqlparser/commit/b312a14470809ce15efc7d4727eea4f080fcdebd) build(deps): bump brace-expansion in /validator/imported ([#&#8203;480](https://github.com/vektah/gqlparser/issues/480)) - [`dce6e66`](https://github.com/vektah/gqlparser/commit/dce6e6633aa43412964d77e10faa431d593f99ad) build(deps-dev): bump prettier ([#&#8203;473](https://github.com/vektah/gqlparser/issues/473)) - [`3e25eab`](https://github.com/vektah/gqlparser/commit/3e25eab8a762bdf95e1a69b91540c14354dbd324) feat(validator): Add new validator.EmptyDefinitionError ([#&#8203;474](https://github.com/vektah/gqlparser/issues/474)) - [`eaee109`](https://github.com/vektah/gqlparser/commit/eaee10953561f7943a8bbf46a56054aecf7c6e81) lexer: combine surrogate pair escapes in string literals ([#&#8203;476](https://github.com/vektah/gqlparser/issues/476)) - [`1c204b4`](https://github.com/vektah/gqlparser/commit/1c204b4b992ebdc7724634ad4be0f52f838b15bf) validator: make MaxIntrospectionDepth linear in fragment spreads ([#&#8203;471](https://github.com/vektah/gqlparser/issues/471)) - [`b99f91a`](https://github.com/vektah/gqlparser/commit/b99f91aec8211fe80208078b2d1991f10d1f7d57) validator: stop OverlappingFieldsCanBeMerged recursing forever on fragment cycles (revised [#&#8203;477](https://github.com/vektah/gqlparser/issues/477)) ([#&#8203;478](https://github.com/vektah/gqlparser/issues/478)) #### Verifying this release ```bash # 1. cosign signature over the checksum file (identity = the release workflow). cosign verify-blob \ --bundle checksums.txt.sigstore.json \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.59' \ checksums.txt # 2. source tarball + SBOM hash to the now-trusted checksums. shasum -a 256 -c checksums.txt # 3. GitHub build provenance. gh attestation verify gqlparser_2.5.59_source.tar.gz --repo StevenACoffman/gqlparser ``` The SBOM is `gqlparser_2.5.59_source.tar.gz.sbom.json` (SPDX-2.3). *** Released by [GoReleaser](https://github.com/goreleaser/goreleaser). ### [`v2.5.58`](https://github.com/vektah/gqlparser/releases/tag/v2.5.58) [Compare Source](https://github.com/vektah/gqlparser/compare/v2.5.37...v2.5.58) #### Changelog - [`9a84c0a`](https://github.com/vektah/gqlparser/commit/9a84c0a3b32c421cb7a41a113b5a5b97af621155) Compare composite argument values in `sameValue` ([#&#8203;108](https://github.com/vektah/gqlparser/issues/108)) ([#&#8203;459](https://github.com/vektah/gqlparser/issues/459)) - [`42cda29`](https://github.com/vektah/gqlparser/commit/42cda298bd76501f1b0527261a098c893be9aa60) build(deps): bump browserslist in /validator/imported ([#&#8203;464](https://github.com/vektah/gqlparser/issues/464)) - [`991cd11`](https://github.com/vektah/gqlparser/commit/991cd110b7c4d648a8392cae2f3cdfa659656fb0) build(deps): bump the actions-deps group across 1 directory with 7 updates ([#&#8203;467](https://github.com/vektah/gqlparser/issues/467)) - [`5d4af16`](https://github.com/vektah/gqlparser/commit/5d4af164a8588b065c5377f6ae8711edb2b6d110) build(deps): bump the actions-deps group with 2 updates ([#&#8203;465](https://github.com/vektah/gqlparser/issues/465)) - [`dc52fbe`](https://github.com/vektah/gqlparser/commit/dc52fbe5655626e8094bd21df11fa50768ad41cb) validator: add OverlappingFieldsCanBeMerged spec cases #### Verifying this release ```bash # 1. cosign signature over the checksum file (identity = the release workflow). cosign verify-blob \ --bundle checksums.txt.sigstore.json \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.58' \ checksums.txt # 2. source tarball + SBOM hash to the now-trusted checksums. shasum -a 256 -c checksums.txt # 3. GitHub build provenance. gh attestation verify gqlparser_2.5.58_source.tar.gz --repo StevenACoffman/gqlparser ``` The SBOM is `gqlparser_2.5.58_source.tar.gz.sbom.json` (SPDX-2.3). *** Released by [GoReleaser](https://github.com/goreleaser/goreleaser). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTUuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovate added 1 commit 2026-10-17 00:13:02 +00:00
fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.62
renovate/stability-days Updates have met minimum release age requirement
Details
otelsetup / vulnerabilities (pull_request) Successful in 36s
Details
pre-commit / pre-commit (pull_request) Successful in 1m17s
Details
otelsetup / test (pull_request) Successful in 3m40s
Details
f6e0d68cc6
renovate scheduled this pull request to auto merge when all checks succeed 2026-10-17 00:13:03 +00:00
gitea-actions Bot commented 2026-10-17 00:44:31 +00:00
Copy link
Copy source

Coverage Report

Total coverage: 37%

## Coverage Report Total coverage: **37%**
renovate merged commit d035ff1b6c into main 2026-10-17 00:44:35 +00:00
renovate deleted branch renovate/github.com-vektah-gqlparser-v2-2.x 2026-10-17 00:44:35 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Doing
To Do
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
acctest (Shiny Acctest) argoyle (Joakim Olsson) buildtools (Buildtools) kubernetes (Kubernetes) releaser (Unbound Releaser) renovate (Renovate Bot)
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: shiny/otelsetup#209