GraphQL Yoga

Several @graphql-yoga and @envelop packages have been updated to support graphql-js 17. This release includes dependency bumps, typing fixes, and improved subscription compatibility.

This release patches a prototype pollution vulnerability in the multipart parser for graphql-yoga. Several related packages have also been updated to reflect this change.

The @envelop/rate-limiter package introduces template string support for field identifiers and enhances the per-field identifyFn to receive argument values.

This release primarily consists of patch updates across various graphql-yoga packages, fixing an issue with provenance attestations when publishing with pnpm in the core graphql-yoga package.

This release updates dependencies across the GraphQL Yoga ecosystem and includes important fixes related to symbol usage in middleware and header consistency for HTTP caching in the response-cache plugin.

GraphQL Yoga v5.21.0 introduces the ability to short-circuit request processing within the `onRequestParse` hook. Numerous related packages were updated to depend on this new core version.

The core graphql-yoga package (v5.20.0) now allows dynamic modification of the `graphqlEndpoint`. Numerous related packages were updated to depend on this new core version.

The main update across packages involves upgrading TypeScript to version 6 in graphql-yoga@5.19.0 and removing AsyncIterable typings for ReadableStream.

This release primarily focuses on dependency updates across various packages and introduces a critical bug fix in graphql-yoga@5.18.1 to ensure better error isolation during batched GraphQL operations.

graphql-yoga 5.18.0 introduces the exported `GraphiQLRenderer` type and several enhancements to the Apollo Sandbox renderer, while plugin-persisted-operations now supports batching. Minor bug fixes and dependency updates accompany the release.

Patch release that updates @whatwg-node/promise-helpers to fix the missing unfakePromise export across all graphql-yoga packages.

graphql-yoga@5.17.0 introduces experimental support for the `coordinate` error attribute via the `useErrorCoordinate` plugin and updates core dependencies to @graphql-tools/executor@^1.5.0 and @graphql-tools/utils@^10.11.0.

Patch release 6.11.3 adds handling for parsing errors in the Prometheus plugin, fixing crashes caused by unexpected error inputs.

graphql-yoga 5.16.2 and related packages receive patch updates, fixing an error‑masking bug, adding better error codes, and allowing the Prometheus endpoint to be disabled, along with several dependency upgrades.

graphql-yoga 5.16.1 and related packages receive dependency updates, removal of the unused `graphqlEndpoint` option, and the `dset` dependency, requiring minor migration steps.

graphql-yoga 5.16.0 adds an `allowedHeaders` option and fixes GraphiQL worker loading, while plugin-response-cache improves TypeScript typings and render-apollo-sandbox introduces a new Apollo Sandbox renderer.

Version 5.0.0 of the Apollo Link and Urql Exchange packages upgrades runtime and peer dependencies, dropping Node 18 support and older client versions, while fixing a GraphiQL URL loader error.

Patch release 5.15.1 fixes error handling by not adding GraphQL error extensions when wrapping internal server errors.

graphql-yoga 5.15.0 introduces configurable GraphiQL branding and exports new GraphiQL configuration types, while all related @graphql-yoga packages are updated to depend on this version.

graphql-yoga 5.14.0 introduces the `withState` utility for shared plugin state, improves error handling inheritance, and upgrades several dependencies, while the Apollo Usage Report plugin becomes production ready with new reporting features.

The release bumps major versions of @graphql-yoga/apollo-link and @graphql-yoga/urql-exchange to 4.0.0, updates @graphql-tools/executor-http to ^2.0.0, and removes an extra error handling plugin from graphql-yoga@5.13.5.

Patch release that updates whatwg-node packages across the @graphql-yoga monorepo and bumps graphql-yoga to 5.13.4 (subscription to 5.0.5); no breaking changes.

graphql-yoga 5.13.3 patches fix error handling and bump @whatwg-node/server.

graphql-yoga@5.13.2 introduces a re-export of `AsyncIterableIteratorOrValue` and includes the request in the operation instrument payload, with all packages updated to depend on this version.

Patch release 5.13.1 updates graphql-yoga and bumps several @envelop dependencies (core, whatwg-node/server, instrumentation, apollo-federation, on-resolve, prometheus, response-cache) while removing @envelop/instruments.