Skip to content

Bump graphql from 2.6.11 to 2.6.12 - #1077

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/graphql-2.6.12
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/graphql-2.6.12

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps graphql from 2.6.11 to 2.6.12.

Changelog

Sourced from graphql's changelog.

2.6.12 (14 Oct 2026)

Security: This version contains a patch for GHSA-965v-9v76-5hg2

Bug fixes

  • Visibility::Profile#preload: preload more type information #5748 #5758
  • Variables: use defaults for omitted non-null variables #5754
  • Visibility::Profile: freeze hashes when fully loaded #5750
  • Dataloader: give nested dataloader calls their own state #5760
  • RelationConnection: reject invalid cursors #5752
  • Legacy execution: Set current_field and current_arguments for list item dataloader fibers #5759
  • Propagate list errors through non-null items #5756
  • Fix error paths and performance on input objects in lists #5751
  • Execution::Next: Don't call .size on non-Array list results #5765
  • Subscriptions: reject multiple root selections and introspection root selections #5770
  • Parser: fix source locations after multibyte input #5771
  • RelationConnection: fix detection of AsyncDataloader to avoid duplicate queries #5773
Commits
  • 842ab4f v2.6.12
  • b49ee49 Merge commit from fork
  • c0d6048 Only skip auth for built-in node/nodes/edges fields in Execution::Next
  • 075a44e Add failing test for Execution::Next skipping auth on custom edge/connection ...
  • 536364a Merge pull request #5773 from drhops/fix-relation-connection-async-dataloader...
  • beba07b Fix RelationConnection's AsyncDataloader check so its single-flight lock engages
  • 61759ed Merge pull request #5771 from ydah/fix-parser-multibyte-locations
  • fe9974a Merge pull request #5770 from ydah/fix-subscription-root-validation
  • 0547b67 Merge pull request #5769 from rmosolgo/dependabot/github_actions/shogo82148/a...
  • c64bdfe Fix parser source locations after multibyte input
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [graphql](https://github.com/rmosolgo/graphql-ruby) from 2.6.11 to 2.6.12.
- [Release notes](https://github.com/rmosolgo/graphql-ruby/releases)
- [Changelog](https://github.com/rmosolgo/graphql-ruby/blob/master/CHANGELOG.md)
- [Commits](rmosolgo/graphql-ruby@v2.6.11...v2.6.12)

---
updated-dependencies:
- dependency-name: graphql
  dependency-version: 2.6.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Oct 26, 2026
@cla-bot cla-bot Bot added the cla-signed label Oct 26, 2026
@github-actions

Copy link
Copy Markdown

Test coverage

94.11% line coverage reported by SimpleCov.
Run: https://github.com/RaspberryPiFoundation/editor-api/actions/runs/40301521465

This branch was successfully deployed

1 active deployment
editor-api-p-dependabot-2n77er — fb973262 Deployed Oct 26, 2026 by raspberrypiherokubot
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla-signed dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant