fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.64 #1053

Merged

renovate merged 1 commits from renovate/github.com-vektah-gqlparser-v2-2.x into main 2026-10-25 21:21:14 +00:00

Conversation 1 Commits 1 Files Changed 2

+6 -6

renovate commented 2026-10-25 21:16:17 +00:00

Owner

Copy link

Copy source

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/vektah/gqlparser/v2	v2.5.63 → v2.5.64

---

Release Notes

vektah/gqlparser (github.com/vektah/gqlparser/v2)

v2.5.64

Compare Source

Changelog

• 9cb3bcc Update Go deps to prepare for release (#​519)
• 07488f8 build(deps): bump goreleaser/goreleaser-action (#​501)
• 0103d1d build(deps): bump js-yaml (#​500)
• 857fcf5 lexer: cap braced unicode escapes at eight digits (#​511)
• 09a444d lexer: decode braced unicode escapes in strings (#​507)
• cb6ec58 parser, validator: accept directives on directive definitions (#​515)
• d0c057f parser: accept implements on an interface extension (#​508)
• b530514 parser: bound nesting depth to prevent stack-overflow DoS (#​516)
• 56827e1 parser: read descriptions of operations, fragments and variables (#​509)
• 16fd644 parser: reject empty descriptions on the query shorthand (#​513)
• 2c59137 validator: align enum value name checks with graphql-js (#​517)
• ef1f846 validator: export the prelude for gqlgen (#​518)
• 110c3f7 validator: fix list and leaf type conflict checks (#​512)
• 23d1e0d validator: reject repeated and self-implemented interfaces (#​499)
• 9b9fd70 validator: reject unions with no member types (#​502)
• a494eee validator: test repeated and self interfaces on interface extensions (#​514)

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.64' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.64_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.64_source.tar.gz.sbom.json (SPDX-2.3).

---

Released by GoReleaser.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/vektah/gqlparser/v2](https://github.com/vektah/gqlparser) | `v2.5.63` → `v2.5.64` |  |  | --- ### Release Notes <details> <summary>vektah/gqlparser (github.com/vektah/gqlparser/v2)</summary> ### [`v2.5.64`](https://github.com/vektah/gqlparser/releases/tag/v2.5.64) [Compare Source](https://github.com/vektah/gqlparser/compare/v2.5.63...v2.5.64) #### Changelog - [`9cb3bcc`](https://github.com/vektah/gqlparser/commit/9cb3bccd423fe07961a79a98bd92e2a6636df692) Update Go deps to prepare for release ([#&#8203;519](https://github.com/vektah/gqlparser/issues/519)) - [`07488f8`](https://github.com/vektah/gqlparser/commit/07488f82112bab5f4621427151d32fb059b47c1c) build(deps): bump goreleaser/goreleaser-action ([#&#8203;501](https://github.com/vektah/gqlparser/issues/501)) - [`0103d1d`](https://github.com/vektah/gqlparser/commit/0103d1d359bc2b3c518d0d59409ece09ec9dffd6) build(deps): bump js-yaml ([#&#8203;500](https://github.com/vektah/gqlparser/issues/500)) - [`857fcf5`](https://github.com/vektah/gqlparser/commit/857fcf5b77dbd5839db8cef45a8e6f51a5c8afe1) lexer: cap braced unicode escapes at eight digits ([#&#8203;511](https://github.com/vektah/gqlparser/issues/511)) - [`09a444d`](https://github.com/vektah/gqlparser/commit/09a444d40c0c68ef5755ae204d651cd78a3e0073) lexer: decode braced unicode escapes in strings ([#&#8203;507](https://github.com/vektah/gqlparser/issues/507)) - [`cb6ec58`](https://github.com/vektah/gqlparser/commit/cb6ec5801fea55bc7b2305e6a095b1a62f1ed706) parser, validator: accept directives on directive definitions ([#&#8203;515](https://github.com/vektah/gqlparser/issues/515)) - [`d0c057f`](https://github.com/vektah/gqlparser/commit/d0c057f4b7a054c665d95b326a9ad02139a9e058) parser: accept implements on an interface extension ([#&#8203;508](https://github.com/vektah/gqlparser/issues/508)) - [`b530514`](https://github.com/vektah/gqlparser/commit/b5305140513155d430ecc478b60e4489227aa51e) parser: bound nesting depth to prevent stack-overflow DoS ([#&#8203;516](https://github.com/vektah/gqlparser/issues/516)) - [`56827e1`](https://github.com/vektah/gqlparser/commit/56827e1b31273b4e621a3dc72679b91638faf4b9) parser: read descriptions of operations, fragments and variables ([#&#8203;509](https://github.com/vektah/gqlparser/issues/509)) - [`16fd644`](https://github.com/vektah/gqlparser/commit/16fd6444221d3c1a3e9fb6dc3bc11b2165d70f0b) parser: reject empty descriptions on the query shorthand ([#&#8203;513](https://github.com/vektah/gqlparser/issues/513)) - [`2c59137`](https://github.com/vektah/gqlparser/commit/2c5913775b824d572984e50e167510ae09c81989) validator: align enum value name checks with graphql-js ([#&#8203;517](https://github.com/vektah/gqlparser/issues/517)) - [`ef1f846`](https://github.com/vektah/gqlparser/commit/ef1f846a30f48ec3e0f8d9fee73d6253acd0b884) validator: export the prelude for gqlgen ([#&#8203;518](https://github.com/vektah/gqlparser/issues/518)) - [`110c3f7`](https://github.com/vektah/gqlparser/commit/110c3f7b29a3128dd9c14ea1121ec026c1b41389) validator: fix list and leaf type conflict checks ([#&#8203;512](https://github.com/vektah/gqlparser/issues/512)) - [`23d1e0d`](https://github.com/vektah/gqlparser/commit/23d1e0d811be250cf0e3b47e2a1829772aa88dec) validator: reject repeated and self-implemented interfaces ([#&#8203;499](https://github.com/vektah/gqlparser/issues/499)) - [`9b9fd70`](https://github.com/vektah/gqlparser/commit/9b9fd7087d8e072a9e2e12007c9fb3c335805094) validator: reject unions with no member types ([#&#8203;502](https://github.com/vektah/gqlparser/issues/502)) - [`a494eee`](https://github.com/vektah/gqlparser/commit/a494eeef216b9d347f133681fc4503ab9a199905) validator: test repeated and self interfaces on interface extensions ([#&#8203;514](https://github.com/vektah/gqlparser/issues/514)) #### Verifying this release ```bash # 1. cosign signature over the checksum file (identity = the release workflow). cosign verify-blob \ --bundle checksums.txt.sigstore.json \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.64' \ checksums.txt # 2. source tarball + SBOM hash to the now-trusted checksums. shasum -a 256 -c checksums.txt # 3. GitHub build provenance. gh attestation verify gqlparser_2.5.64_source.tar.gz --repo StevenACoffman/gqlparser ``` The SBOM is `gqlparser_2.5.64_source.tar.gz.sbom.json` (SPDX-2.3). *** Released by [GoReleaser](https://github.com/goreleaser/goreleaser). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjcuNSIsInVwZGF0ZWRJblZlciI6IjQ0LjE2Ny41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

renovate added 1 commit 2026-10-25 21:16:17 +00:00

fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.64 ed7da6e73f

renovate scheduled this pull request to auto merge when all checks succeed 2026-10-25 21:16:18 +00:00

renovate commented 2026-10-25 21:16:18 +00:00

Author

Owner

Copy link

Copy source

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package	Change
github.com/agnivade/levenshtein	v1.2.1 -> v1.2.2

### ℹ️ Artifact update notice ##### File name: go.mod In order to perform the update(s) described in the table above, Renovate ran the `go get` command, which resulted in the following additional change(s): - 1 additional dependency was updated Due to Go's usage of [Minimal Version Selection (MVS)](https://go.dev/ref/mod#minimal-version-selection), these packages have been updated to the minimum version available, so will still abide by `minimumReleaseAge=3 days` Details: | **Package** | **Change** | | :-------------------------------- | :------------------- | | `github.com/agnivade/levenshtein` | `v1.2.1` -> `v1.2.2` |

renovate merged commit e43d5b9a1f into main 2026-10-25 21:21:14 +00:00

renovate deleted branch renovate/github.com-vektah-gqlparser-v2-2.x 2026-10-25 21:21:14 +00:00

releaser referenced this pull request 2026-10-25 21:24:47 +00:00

chore(release): prepare for v0.10.1 #1054

releaser referenced this pull request 2026-10-25 22:50:40 +00:00

chore(release): prepare for v0.10.1 #1056

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

dependencies

Pull requests that update a dependency file

docker

go

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

acctest (Shiny Acctest) argoyle (Joakim Olsson) buildtools (Buildtools) kubernetes (Kubernetes) releaser (Unbound Releaser) renovate (Renovate Bot)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: unboundsoftware/schemas#1053