v1.17.0

🚀 Features

GraphOS Enterprise: Operation Limits

You can define operation limits in your router's configuration to reject potentially malicious requests. An operation that exceeds any specified limit is rejected.

You define operation limits in your router's YAML config file, like so:

preview_operation_limits:
  max_depth: 100
  max_height: 200
  max_aliases: 30
  max_root_fields: 20

See details in operation limits documentation for information on setting up this GraphOS Enterprise feature.

By @SimonSapin, @lrlna, and @StephenBarlow

🐛 Fixes

Ensure the compression state is flushed (Issue #3035)

In some cases, the "finish" call to flush the compression state at the end of a request did was not flushing the entire state and it has to be called multiple times.

This fixes a regression introduced in v1.16.0 by #2986 which resulted in larger responses being truncated after compression.

By @Geal in #3037

🛠 Maintenance

Make test_experimental_notice assertion more targeted (Pull #3036)

Previously this test relied on a full snapshot of the log message. This was likely to result in failures, either due to environmental reasons or other unrelated changes.

The test now relies on a more targeted assertion that is less likely to fail under various conditions.

By @BrynCooke in #3036