Skip to content

Releases: graphql-java/graphql-java

23.1

15 Apr 07:08
@dondonz dondonz
v23.1
6ff6f7d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
23.1 Latest
Latest

This reverts a bug in 23.0 introduced in #3871.

Please use 23.1, and not 23.0.

Assets 2
Loading

23.0

07 Apr 01:54
@dondonz dondonz
v23.0
27b9def
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
23.0

Notice: there is a bug with https://github.com/graphql-java/graphql-java/pull/3871/files, a new bugfix release is about to be released. Use 23.1 instead, not 23.0

Thanks to everyone for contributing to this release, through pull requests, issues, and discussions!

This is a major release which contains breaking changes.

Key changes

Performance improvements

See all performance improvements on GitHub: https://github.com/graphql-java/graphql-java/issues?q=is%3Amerged%20label%3A%22performance%22%20milestone%3A%2223.0%20breaking%20changes%22%20

Breaking changes

  • Strict runtime wiring redefinition checks now on by default. We now have stricter runtime wiring redefinition checks by default to catch invalid cases. For example, a field that already had a DataFetcher registered must not have a second DataFetcher registered. This can be toggled off. #3824

  • Removed an unused protected method in ExecutionStrategy. #3881

  • A small breaking change to AstPrinter to enable re-use of StringBuilders #3853

  • Improvement in a few directive and applied directive builders to address a bug where all elements were cleared. #3825

  • Breaking change for a new specification requirement, to prevent @include and @skip directives on subscription root fields #3871

See all breaking changes on GitHub: https://github.com/graphql-java/graphql-java/issues?q=is%3Amerged%20label%3A%22breaking%20change%22%20milestone%3A%2223.0%20breaking%20changes%22

Security

We have become a CVE Numbering Authority (CNA) for GraphQL Java and related projects. For more information, see our Security page https://www.graphql-java.com/security.

What's Changed

Read more

Contributors

include, defer, and 14 other contributors
Loading

22.3

05 Sep 03:15
@dondonz dondonz
v22.3
d6dbf61
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
22.3

This is a bugfix release focusing on the @defer directive implementation. There are no breaking changes in this release.

Thanks to the community for continuing to report issues and build improvements, which helps make graphql-java better! Kudos to @felipe-gdr and @jbellenger for contributing @defer improvements in this release.

Key Changes

  • @defer and DataLoader integration in #3639
  • Transformable IncrementalExecutionResult in #3693

What's Changed

Full Changelog: v22.2...v22.3

Contributors

jbellenger, felipe-gdr, and dependabot
Loading

22.2

12 Aug 00:22
@dondonz dondonz
v22.2
9cc3538
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
22.2

This is a bugfix release. There are no breaking changes in this release.

Thanks to everyone in the community for reporting issues and contributing bugfixes for this release! And happy birthday to GraphQL Java, who recently turned 9!

Key changes:

  • Bugfix for DataLoader dispatching which caused subscriptions to hang #3673. First reported to Spring for GraphQL spring-projects/spring-graphql#1019
  • Improved @oneOf validation to run sooner in the validation phase #3577 #3580
  • MultiSourceReader bugfix to handle different new line behaviour in Java 16+, thanks @gummybug #3670

What's Changed

New Contributors

Full Changelog: v22.1...v22.2

Contributors

gummybug, jbellenger, and 10 other contributors
Loading

22.1

21 May 05:59
@dondonz dondonz
v22.1
f93fdac
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
22.1

This is a bugfix release. There are no breaking changes in this release, however if you use Kotlin, please note some nullability changes were made with this release.

Key changes include:

  • Fix to add field fetching method #3571
  • Add validation rule for @deprecated on required arguments and input object fields #3591
  • Nullability changes for DataFetchingEnvironment #3582. If you use Kotlin, this may be considered a breaking change for you. See discussion: #3630

Thanks to everyone who contributed to this release!

What's Changed

  • Update readme badge by @dondonz in #3568
  • Added a getBoolean onto GraphQLContext.java by @bbakerman in #3578
  • getBoolean returns a boolean not a Boolean by @bbakerman in #3581
  • Bump org.testng:testng from 7.10.1 to 7.10.2 by @dependabot in #3583
  • Bump net.bytebuddy:byte-buddy from 1.14.13 to 1.14.14 by @dependabot in #3584
  • Bump net.bytebuddy:byte-buddy-agent from 1.14.13 to 1.14.14 by @dependabot in #3585
  • Bump com.fasterxml.jackson.core:jackson-databind from 2.17.0 to 2.17.1 by @dependabot in #3587
  • Always include incremental props even if null by @gnawf in #3570
  • Bump net.bytebuddy:byte-buddy-agent from 1.14.14 to 1.14.15 by @dependabot in #3595
  • Bump net.bytebuddy:byte-buddy from 1.14.14 to 1.14.15 by @dependabot in #3596
  • Ready: Add @deprecated validation for input object fields, field arguments, directive arguments by @dondonz in #3591
  • Added field fetching method for Expedia by @bbakerman in #3571
  • Update GitHub actions ahead of release by @dondonz in #3600
  • Bump google-github-actions/auth from 2.1.2 to 2.1.3 by @dependabot in #3603
  • Bump org.eclipse.jetty:jetty-server from 11.0.20 to 11.0.21 by @dependabot in #3602
  • Bump com.google.code.gson:gson from 2.10.1 to 2.11.0 by @dependabot in #3601
  • Add nullability annotations in DataFetchingEnvironment & sub-classes by @Salzian in #3582
  • Now does not overwrite a types default data fetcher unless its nonnull by @bbakerman in #3579
  • Add extend schema (AST print) to SchemaPrinter by @dondonz in #3471

New Contributors

Full Changelog: v22.0...v22.1

Contributors

bbakerman, deprecated, and 4 other contributors
Loading

22.0

16 Apr 05:06
@bbakerman bbakerman
v22.0
0eec91e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
22.0

We are pleased to announce the release of graphql-java v22.0.

Thanks to everyone in the community who contributed to the release, whether that was code, helping to report issues, or participating in discussions.

This is a breaking change release.

The graphql-java team takes breaking changes very seriously but in the name of performance we have made some significant breaking changes in this release.

Major Performance Changes

Past releases have been very much performance focused and this one is no different. However, this release is aiming to reduce memory pressure more than reduce pure CPU usage. When the graphql-java engine is running, if it produces less objects it will ultimately run faster because of reduced memory pressure and less garbage to collect.

The engine has been changed in two major ways that reduce memory pressure.

ExecutionResult wrapping

The first was that all values that come back got wrapped internally into a ExecutionResult object where the data attribute was the value. This was a carry over from some very early GraphQL code but was unnecessary and hence has been removed. The follow on effect of this is that some graphql.execution.ExecutionStrategy protected methods and graphql.execution.instrumentation.Instrumentation methods used to receive and return ExecutionResult values and no longer do, which is an API breaking change. We have made this breaking changes in the name of memory pressure performance.

CompletableFuture wrapping

The second major change is that the engine no longer exclusively uses java.util.concurrent.CompletableFutures when composing together results. Let us explain the past code first so we can discuss the new code.

CompletableFuture is a fantastic construct because it represents a promise to a value and it can also hold an exceptional state inside itself. Async programming with CompletableFuture is viral. If stage 1 of some compute process returns a CompletableFuture then stage 2 and 3 and 4 are likely to as well to ensure everything is asynchronous.

We use to take values that were not asynchronous (such as DataFetcher that returned a simple in memory object) and wrap them in a CompletableFuture so that all of the other code composed together using CompletableFuture methods like .thenApply() and .thenCompose and so on. The code is cleaner if you use all CompletableFuture code patterns.

However many objects in a GraphQL request are not asynchronous but rather materialised objects in memory. Scalars, enums and list are often just values immediately available to be used and allocating a CompletableFuture makes the code easier to write but it has a memory pressure cost.

So we have sacrificed cleaner code for more memory performant code.

graphql-java engine graphql.execution.ExecutionStrategy methods now just return Object where that object might be either a CompletableFuture or a materialised value.

    private Object /*CompletableFuture<FetchedValue> | FetchedValue>*/
       fetchField(GraphQLFieldDefinition fieldDef, ExecutionContext executionContext, ExecutionStrategyParameters parameters) {

Notice we have lost type safety here. In the past this would have only been CompletableFuture<FetchedValue> and hence been both type safe and async composable.

Now the caller of that method has to handle the async case where it might be a CompletableFuture<FetchedValue> AND the materialised value case where it might be a FetchedValue but as most simple fields in GraphQL are in fact materialised values, this is worth the less clean code.

DataFetchers can of course continue to return CompletableFuture values and they will be handled in a polymorphic manner.

The upshot of all this work is that the graphql-java engine allocated way less CompletableFuture values and hence reduces the amount of memory used.

Instrumentation Changes

The above changes now mean means that before graphql.execution.instrumentation.InstrumentationContext used to be given a CompletableFuture but now no longer does

    void onDispatched(CompletableFuture<T> result);

is now

    void onDispatched();

if you previously used the CompletableFuture to know when something was completed, well InstrumentationContext has the same semantics because it's completed method is similar in that it presents a value or an exception

    void onCompleted(T result, Throwable t);

graphql.execution.instrumentation.Instrumentation also had a lot of deprecated methods in place and these have been removed since the more performant shape of passing in graphql.execution.instrumentation.InstrumentationState has been in place for quite a few releases.

Some of the methods that received ExecutionResult wrapped values have also changed as mentioned above.

Instrumentation is probably the area that needs the most attention in terms of breaking changes. If you have not moved off the deprecated methods, your custom Instrumentations will no longer compile or run.

Interning key strings

Our friends at Netflix provided a PR that interns certain key strings like "field names" so that we create less String instances when processing field names in queries that we know must be previously interned in the schema.

#3504

The full list of performance related changes

https://github.com/graphql-java/graphql-java/pulls?q=is%3Apr+milestone%3A%2222.0%22+label%3Aperformance

Major Changes

@defer Experimental Support

Support for the @defer directive has been added in an experimental fashion. While @defer is still not in the released GraphQL specification, we have judged it mature enough to support at this stage and the graphql-js reference implementation has support for it.

https://github.com/graphql/graphql-wg/blob/main/rfcs/DeferStream.md

At this stage we have not yet supported @stream but this is likely to be included in a future release.

Breaking Changes

There are quite a few API breaking changes in this release. In fact there are 22 PRs containing breaking API changes.

Stricter parseValue coercion: Aligning with JS reference implementation

We have made changes to String, Boolean, Float, and Int parseValue coercion, to be consistent with the reference JS implementation. The key change is parseValue is now stricter on accepted inputs.

  • String parseValue now requires input of type String. For example, a Number input 123 or a Boolean input true will no longer be accepted.
  • Boolean parseValue now requires input of type Boolean. For example, a String input "true" will no longer be accepted.
  • Float parseValue now requires input of type Number. For example, a String input "3.14" will no longer be accepted.
  • Int parseValue now requires input of type Number. For example, a String input "42" will no longer be accepted.

This is a breaking change. To help you migrate, in version 21.0, we introduced the InputInterceptor #3188 (and an implementation LegacyCoercingInputInterceptor #3218) to provide a migration pathway. You can use this interceptor to monitor and modify values.

Please take a look at our documentation page for more information and examples: https://www.graphql-java.com/documentation/upgrade-notes

For more, see #3553
JS reference implementation: https://github.com/graphql/graphql-js/blob/main/src/type/scalars.ts

Removing deprecated methods

Many methods that have been deprecated for a long time, sometimes even up to 6 years, have finally been removed.

The CompletableFuture unwrapping work mentioned above changed many methods in the graphql.execution.ExecutionStrategy classes but we don't expect this affect many people since very few people write their own engines.

That CompletableFuture unwrapping work also had knock on effects as mentioned above on graphql.execution.instrumentation.Instrumentation and hence this is the most likely place for there to be compatibility challenges in existing code.

DataLoaderDispatcherInstrumentation has been removed and is now built into the engine

The code to dispatch org.dataloader.DataLoaders used to be an instrumentation called DataLoadersDataLoaderDispatcherInstrumentation and it was automatically added at runtime. This approach has been removed.

The equivalent code is now built into the graphql-java engine itself. DataLoaders can now always be used without any special setup. This also allows the code to be more performant in how DataLoaders are dispatched.

SL4J logging has been removed

Previously, the graphql-java engine would log at DEBUG level certain errors or when fields get fetched. This has not proven used for from a support point to the graphql-java team and also has a compliance cost in that user generated content (UGC) and personally identifying information (PII) could end up being logged, which may not be allowed under regimes like European General Data Protection Regulation (GDPR).

If you want to log now we suggest you invest in a Instrumentation that logs key events and you can there for log what you want and in a compliant manner of your choosing.

#3403

The full list of API breaking changes

https://github.com/graphql-java/graphql-java/pulls?q=is%3Apr+milestone%3A%2222.0%22+label%3A%22breaking+change%22

Other changes

  • Optional strict mode for RuntimeWiring and TypeRuntimeWiring, to avoid accidentally having multiple datafetchers on the same element #3565

...

Read more

Contributors

defer, kilink, and 15 other contributors
Loading

21.5

26 Mar 05:23
@dondonz dondonz
v21.5
25667a1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
21.5

This is a special release to add further limits to introspection queries.

This release contains a backport of PR #3539.

What's Changed

Full Changelog: v21.4...v21.5

Contributors

dondonz
Loading

20.9

26 Mar 05:22
@dondonz dondonz
v20.9
d3a8540
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
20.9

This is a special release to add further limits to introspection queries.

This release contains a backport of PR #3539.

What's Changed

Full Changelog: v20.8...v20.9

Contributors

dondonz
Loading

19.11

26 Mar 05:21
@dondonz dondonz
v19.11
16c1591
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
19.11

This is a special release to add further limits to introspection queries.

This release contains a backport of PR #3539.

What's Changed

Full Changelog: v19.10...v19.11

Contributors

dondonz
Loading

21.4

19 Mar 06:20
@dondonz dondonz
v21.4
5876cc8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
21.4

This is a special release to help control introspection queries.

This release adds a default check for introspection queries, to check that they are sensible. This feature is a backport of #3526 and #3527.

This release also adds an optional maximum result nodes limit, which is a backport of #3525.

What's Changed

Full Changelog: v21.3...v21.4

Contributors

dondonz
Loading