Skip to content
This repository was archived by the owner on Nov 9, 2021. It is now read-only.

Conversation

@suhyeonh
Copy link
Contributor

@suhyeonh suhyeonh commented Oct 29, 2019

graphql 8.x-4.0-alpha3

Release notes

This is the third alpha release of graphql module for Drupal, code name "Cold Amsterdam Winter"!

This release is mostly a security update where access handling of entities was improved in the entity-related data producers. All users are encouraged to upgrade! We also added new data producers to load entity revisions, loading taxonomy term trees and providing the currently logged-in user.

Full list of changes since 4.0-alpha2: drupal-graphql/graphql@8.x-4.0-alpha2...8.x-4...

Warning: the 4.x branch is under development and unstable. Future alpha releases can break API compatibility, so please do extensive testing when upgrading this module.

The documentation on how to use and implement graphql 4.x for your project is work in progress and can be found here: https://github.com/drupal-graphql/graphql/blob/8.x-4.x/doc/SUMMARY.md

graphql 8.x-3.0

Release notes

First stable release of GraphQL 3.x for Drupal!

Apart from a couple of bug fixes since RC 3 this release contains one breaking change. Due to security reasons the entity query support (nodeQuery, userQuery etc.) had to be marked as insecure. As result, these fields will not work out of the box for anonymous users any more. You have four options to deal with this issue:

Use persisted queries and make sure that nobody can send arbitrary filter conditions against userQuery and friends.
Implement specialized subclasses of the entity query field plugin that apply restricted filters, but don't allow to access them arbitrarily.
Replace your usage of entity query fields with views fields, since they allow you to achieve the same results.
Give anonymous users permissions to bypass field security if your environment is secure already. For example if the GraphQL endpoint is only accessible by a static site builder (Gatsby use case).

graphql 8.x-3.0-rc3

Release notes

Smaller consistency fixes and most notably basic auth support.

@suhyeonh suhyeonh changed the title update graphql module [GOVCMSD8-456] update graphql module Nov 12, 2019
ruwanl
ruwanl previously approved these changes Nov 14, 2019
@suhyeonh
Copy link
Contributor Author

requires php >=7.2, the current PHP version (7.1.11) does not satisfy that requirement.

@suhyeonh
Copy link
Contributor Author

suhyeonh commented Oct 2, 2020

new PR #553

@suhyeonh suhyeonh closed this Oct 2, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants