Bump com.graphql-java:graphql-java from 20.2 to 21.5 in /plugins/maven/graphql-java-codegen-maven-plugin

[dependabot]

Bumps com.graphql-java:graphql-java from 20.2 to 21.5.

Release notes

Sourced from com.graphql-java:graphql-java's releases.

21.5

This is a special release to add further limits to introspection queries.

This release contains a backport of PR #3539.

What's Changed

• 21.x backport of #3539 ENF restriction for introspection by @​dondonz in graphql-java/graphql-java#3540

Full Changelog: graphql-java/graphql-java@v21.4...v21.5

21.4

This is a special release to help control introspection queries.

This release adds a default check for introspection queries, to check that they are sensible. This feature is a backport of graphql-java/graphql-java#3526 and graphql-java/graphql-java#3527.

This release also adds an optional maximum result nodes limit, which is a backport of graphql-java/graphql-java#3525.

What's Changed

• 21.x Backport PR 3526 and PR 3527 by @​dondonz in graphql-java/graphql-java#3529
• 21.x backport 3525 max result nodes by @​dondonz in graphql-java/graphql-java#3528

Full Changelog: graphql-java/graphql-java@v21.3...v21.4

21.3

A small bugfix release on top of 21.2, which includes correct unwrapping of non-null input types for @oneOf.

What's Changed

• @​oneOf handles non-null inputs by @​felipe-gdr in graphql-java/graphql-java#3353

Full Changelog: graphql-java/graphql-java@v21.2...v21.3

21.2

This is a release with new features and bugfixes. There are no breaking changes.

Thanks to everyone who contributed to this release. Thanks for your code contributions, for reporting issues, and contributing to discussions.

@oneOf directive

We've implemented the @oneOf directive for input objects. From the RFC:

OneOf Input Objects are a special variant of Input Objects where the type system asserts that exactly one of the fields must be set and non-null, all others being omitted

This will soon be a new built-in directive in the GraphQL specification.

The directive is currently labelled as experimental inside graphql-java while we wait for the RFC to be formally approved. The final step before the RFC is approved is your feedback! If you're using @oneOf, please share your thoughts on the RFC on the GraphQL Working Group repository.

DataLoader version 3.2.1 released

We've released a new version of java-dataloader including a new ticker mode and predicates per dataloader. See the release notes for more details.

What's Changed

• Add max depth option to ExecutableNormalizedOperationFactory by @​gnawf in graphql-java/graphql-java#3268

... (truncated)

Commits

• 25667a1 Merge pull request #3540 from graphql-java/21.x-backport-enf-introspection
• aadb3a4 Fix typo (backport PR #3544)
• b440729 Making tests consistent with approach in v19 and v20 backports
• 7efac41 Remove references to defer
• fc6f304 Cherry pick ENF introspection and make ExecutableNormalizedOperationFactory c...
• 5876cc8 Merge pull request #3538 from graphql-java/21.x-pull-in-21.3-commits
• a79bebf Merge commit '42efd9b23ef9ae7ba862d9affefe04a03a9b99cb' into 21.x-pull-in-21....
• ddc53be Merge pull request #3528 from graphql-java/21.x-backport-3525-max-result-nodes
• 990ee73 Merge pull request #3529 from graphql-java/21.x-backport-3526-disable-introsp...
• bfd6478 Fix hanging test - must return completed ExecutionResult, not null
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #1502.