release: on branch main

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@apollo/composition@2.12.1

Patch Changes

• Fixed access control verification of transitive requirements (through @requires and/or @fromContext) to ensure it works with chains of transitive dependencies. (#3343)

• Allow interface object fields to specify access control (#3343)

  Update composition logic to allow specifying access control directives (@authenticated, @requiresScopes and @policy) on @interfaceObject fields. While we disallow access control on interface types and fields, we decided to support it on @interfaceObject as it is a useful pattern to define a single resolver (that may need access controls) for common interface fields. Alternative would require our users to explicitly define resolvers for all implementations which defeats the purpose of @interfaceObject.

  This PR refactors in how we propagate access control by providing additional merge sources when merging directives on interfaces, interface fields and object fields.

• Updated dependencies [09e596e6a0c753071ca822e84f525d73ada395cf, ac1ed2946c48e0fef4b413b192d8c5fbdb2370ae]:

  • @apollo/federation-internals@2.12.1
  • @apollo/query-graphs@2.12.1

@apollo/gateway@2.12.1

Patch Changes

• Updated dependencies [b19431e4a92206703e29aba859a5fc7574b9ef8b, 09e596e6a0c753071ca822e84f525d73ada395cf, ac1ed2946c48e0fef4b413b192d8c5fbdb2370ae]:
  • @apollo/composition@2.12.1
  • @apollo/federation-internals@2.12.1
  • @apollo/query-planner@2.12.1

@apollo/federation-internals@2.12.1

Patch Changes

• Allow interface object fields to specify access control (#3343)

  Update composition logic to allow specifying access control directives (@authenticated, @requiresScopes and @policy) on @interfaceObject fields. While we disallow access control on interface types and fields, we decided to support it on @interfaceObject as it is a useful pattern to define a single resolver (that may need access controls) for common interface fields. Alternative would require our users to explicitly define resolvers for all implementations which defeats the purpose of @interfaceObject.

  This PR refactors in how we propagate access control by providing additional merge sources when merging directives on interfaces, interface fields and object fields.

• Fixed demand control validations to unwrap non-nullable composite types and fields when performing validations. (#3343)

@apollo/query-graphs@2.12.1

Patch Changes

• Updated dependencies [09e596e6a0c753071ca822e84f525d73ada395cf, ac1ed2946c48e0fef4b413b192d8c5fbdb2370ae]:
  • @apollo/federation-internals@2.12.1

@apollo/query-planner@2.12.1

Patch Changes

• Updated dependencies [09e596e6a0c753071ca822e84f525d73ada395cf, ac1ed2946c48e0fef4b413b192d8c5fbdb2370ae]:
  • @apollo/federation-internals@2.12.1
  • @apollo/query-graphs@2.12.1

@apollo/subgraph@2.12.1

Patch Changes

• Updated dependencies [09e596e6a0c753071ca822e84f525d73ada395cf, ac1ed2946c48e0fef4b413b192d8c5fbdb2370ae]:
  • @apollo/federation-internals@2.12.1

apollo-federation-integration-testsuite@2.12.1

[codesandbox-ci]

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.