15.1.0

✨ Features

• Check origin for websocket to secure against cross-site attacks by @oliemansm #914
• Support CSRF on websockets to secure against cross-site attacks by @oliemansm #943
• Added SpringValueCache for easy creation of data loader ValueCache objects that utilize Spring Caches under the hood by @bsara #964

🐞 Fixes

• Remove field bean autowiring in favor of constructor injection by @eye-dee #914
• MetricsInstrumentation does not implement updated API of TracingInstrumentation provided by graphql-java by @bsara #950

📦 Dependencies

• Update jacoco to v0.8.8 by @renovate
• Update graphql-java to v20 by @renovate
• Update spring boot to v3.1.2 by @renovate
• Update sonarqube to v4 by @renovate
• Update gradle to v8 by @renovate
• Update graphql-java-extended-scalars to v21 by @renovate

Full Changelog: v15.0.0...v15.1.0

15.0.0

💥 Breaking changes

• Updated source and target Java to v17.

✨ Features

• Spring Boot 3.0.0 / Jakarta EE 9 (jakarta.* namespace) support #894

📦 Dependencies

• Update spring boot to v3.0.0
• Update graphql-java to v19.3
• Update gradle to v7.6
• Update graphql-java-servlet to v15.0.0

14.1.0

⭐ New features

• Made possible to use newer versions of altair over cdn #874

📦 Dependencies

• update org.sonarqube to v3.5.0.2730
• update graphql-java to v19.2
• update graphql-java-extended-scalars to v19.1
• update spring-boot to v2.7.5
• update graphql-java-tools to v13.0.2
• update commons-text to v1.10.0
• update jsoup to v1.15.3

14.0.0

If you're using Spring Boot to manage versions of dependencies then it could be that it's pulling in version 18.3 of graphql-java instead of version 19.1. To override this version you should add the following in your Gradle build file:

ext["graphql-java.version"] = 19.1

Breaking changes

• removed deprecated asyncModeEnabled and asyncTimeout properties

📦 Dependencies

• upgrade graphql-java to v19.1
• upgrade graphql-java-servlet to v14.0.0
• upgrade graphql-java-tools to v13.0.0

13.0.1

Bugfixes

• For non-async servlet wait until GraphQL async operation finished graphql-java-kickstart/graphql-java-servlet#470

13.0.0

Bug fixes

• disable async timeout by default #778
• graphiql config headers do not work in new release 12.0.0 #726
• CorsEnabled=false not working for Spring-Boot-Service-Configs #682
• memory leak due to ReactiveApolloSubscriptionSession not closing #740
• Cannot access AsyncServletProperties.Threads fields because it is a package private class #748
• Graphiql static resource loading fix #794
• quote regex input string #824

Features

• aliased scalars #659
• Function for GraphQLTestTemplate to upload files using Upload scalar #712
• added ability to use strings for GraphQl queries when using GraphQLTestTemplate #807

Dependencies

• update dependency com.graphql-java:graphql-java to v18.3 #846
• update lib_graphql_servlet_ver to v13.0.0 #848
• update dependency com.graphql-java-kickstart:graphql-java-tools to v12.1.0 #825
• update spring boot to v2.7.2 #845
• update Reflections to 0.10.2 #772

12.0.0

Bug fixes

• Altair Settings Pane Configuration #529
• GraphQLTestAutoConfiguration tries to autowire TestRestTemplate regardless of WebEnvironment #549
• Feat/voyager csrf header #627
• Wrong SecurityContext with async-mode-enabled: true results #632
• Memory leak when using reactive subscriptions with KeepAlive #642
• The asynccorepoolsize property of graphqlconfiguration is incorrectly set #651
• 'Invalid Syntax : offending token ''' when using Apollo persisted queries #666

Features

• Starter reorganization #617
• Move milliseconds and seconds to duration #647
• Upgrade to Spring Boot 2.5.4
• Upgrade to graphql-java 17.3

11.1.0

⭐ New features

• Add Maven BOM for the project #552
• Integrate extended GraphQL scalars 16.0.1 #525
• Removing references to JCenter now that it's on the way out #575

🐞 Bug fixes

• Playground incompatible with Spring Webflux #487
• Voyager page title Spring Boot property missing #536
• Enable or disable async mode #540
• Only call GraphqlErrorBuilder with non-null data #568
• Test subscription not waiting the specified amount of time #570
• Extensions in custom error stripped when exception handlers are enabled #605
• GraphQLErrorFromExceptionHandler doesn't work for AbortExecutionException #612
• Can't disable GraphQLErrorFromExceptionHandler #611
• Return valid error even if request body is invalid for webflux #616

📔 Documentation

• Update README.md with required CORS properties #530
• Typo in README (paragraph "Enable GraphiQL") #574
• Adding details on how to add GraphQL Playground starter #576
• Fix GraphiQL documentation #582
• Voyager configuration options #600
• Updated contributions description about commitlint and google-java-format usage

🔨 Dependency upgrades

• Upgrade to GraphQL Java 16.2 #526
• Upgrade to GraphQL Java Servlet 11.1.1 release notes
• Upgrade to GraphQL Java Tools 11.0.1 release notes
• Upgrade to Spring Boot 2.4.5 #580
• Upgrade to Gradle 7.0.2 #626
• Upgrade to commons-text 1.9 #587
• Upgrade to voyager rc31 #598

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

• @oliemansm
• @BlasiusSecundus
• @aoudiamoncef
• @beedaan
• @ryanjones71
• @jeskew-gov
• @setchy
• @donbeave

11.0.0

Library versions across all graphql-java-kickstart will be synchronized from now on. The major and minor version of compatible libraries will always match. The patch section of the version can differ as bugs are fixed.

It is still recommended to not specify transitive dependencies explicitly to ensure compatibility.

Major changes

• upgraded graphql-java dependency to 16.1. See release notes for breaking changes.

Refactored Altair and GraphiQL properties

Both Altair and GraphiQL contained a similar property for setting the base path: altair.static.base-path. This additional layer static doesn't really serve any purpose, so we removed it. From now on the properties are:

altair.base-path=/
graphiql.base-path=/

Only support public exception handler methods

We were using reflection to make exception handler methods accessible, which is bad practice. See also: CERT, SEC05-J. . Any methods currently annotated with @ExceptionHandler used to create GraphQLError require the public modifier from now on.

Minor changes

• Support Mono return type in Webflux resolvers
• Fixed weird characters in Playground IDE
• Don't include irrelevant types in generated schema using Annotations
• Set default CORS headers if missing
• Allow configuring an input prefix when using annotation starter
• Serve Voyager static resources if app context is not root

8.1.1

• Custom exception handler no longer working with #493