Skip to content

Bump strawberry-graphql from 0.220.0 to 0.243.0 in /grai-server/app #979

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 25, 2024

Bumps strawberry-graphql from 0.220.0 to 0.243.0.

Release notes

Sourced from strawberry-graphql's releases.

🍓 0.243.0

Starting with this release, multipart uploads are disabled by default and Strawberry Django view is no longer implicitly exempted from Django's CSRF protection. Both changes relieve users from implicit security implications inherited from the GraphQL multipart request specification which was enabled in Strawberry by default.

These are breaking changes if you are using multipart uploads OR the Strawberry Django view. Migrations guides including further information are available on the Strawberry website.

Releases contributed by @​DoctorJohn via #3645

🍓 0.242.0

Starting with this release, clients using the legacy graphql-ws subprotocol will receive an error when they try to send binary data frames. Before, binary data frames were silently ignored.

While vaguely defined in the protocol, the legacy graphql-ws subprotocol is generally understood to only support text data frames.

Releases contributed by @​DoctorJohn via #3633

🍓 0.241.0

You can now configure your schemas to provide a custom subclass of strawberry.types.Info to your types and queries.

import strawberry
from strawberry.schema.config import StrawberryConfig
from .models import ProductModel
class CustomInfo(strawberry.Info):
@​property
def selected_group_id(self) -> int | None:
"""Get the ID of the group you're logged in as."""
return self.context["request"].headers.get("Group-ID")
@​strawberry.type
class Group:
id: strawberry.ID
name: str
@​strawberry.type
class User:
id: strawberry.ID
name: str
group: Group
@​strawberry.type
class Query:
</tr></table>

... (truncated)

Changelog

Sourced from strawberry-graphql's changelog.

0.243.0 - 2024-09-25

Starting with this release, multipart uploads are disabled by default and Strawberry Django view is no longer implicitly exempted from Django's CSRF protection. Both changes relieve users from implicit security implications inherited from the GraphQL multipart request specification which was enabled in Strawberry by default.

These are breaking changes if you are using multipart uploads OR the Strawberry Django view. Migrations guides including further information are available on the Strawberry website.

Contributed by Jonathan Ehwald via [PR #3645](strawberry-graphql/strawberry#3645)

0.242.0 - 2024-09-19

Starting with this release, clients using the legacy graphql-ws subprotocol will receive an error when they try to send binary data frames. Before, binary data frames were silently ignored.

While vaguely defined in the protocol, the legacy graphql-ws subprotocol is generally understood to only support text data frames.

Contributed by Jonathan Ehwald via [PR #3633](strawberry-graphql/strawberry#3633)

0.241.0 - 2024-09-16

You can now configure your schemas to provide a custom subclass of strawberry.types.Info to your types and queries.

import strawberry
from strawberry.schema.config import StrawberryConfig
from .models import ProductModel
class CustomInfo(strawberry.Info):
@​property
def selected_group_id(self) -> int | None:
"""Get the ID of the group you're logged in as."""
return self.context["request"].headers.get("Group-ID")
@​strawberry.type
class Group:
id: strawberry.ID
name: str
@​strawberry.type
</tr></table>

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 25, 2024
Copy link

vercel bot commented Sep 25, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

1 Skipped Deployment
Name Status Preview Comments Updated (UTC)
docs ⬜️ Ignored (Inspect) Visit Preview Oct 17, 2024 9:54pm

Copy link
Contributor

github-actions bot commented Sep 25, 2024

Uffizzi Preview deployment-56629 was deleted.

@ieaves
Copy link
Contributor

ieaves commented Oct 17, 2024

@dependabot recreate

Bumps [strawberry-graphql](https://github.com/strawberry-graphql/strawberry) from 0.220.0 to 0.243.0.
- [Release notes](https://github.com/strawberry-graphql/strawberry/releases)
- [Changelog](https://github.com/strawberry-graphql/strawberry/blob/main/CHANGELOG.md)
- [Commits](strawberry-graphql/strawberry@0.220.0...0.243.0)

---
updated-dependencies:
- dependency-name: strawberry-graphql
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/grai-server/app/strawberry-graphql-0.243.0 branch from 89bf09b to 7ccedc8 Compare October 17, 2024 19:13
Copy link

codecov bot commented Oct 17, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 91.62%. Comparing base (823af4d) to head (d7866f9).
Report is 1 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #979   +/-   ##
=======================================
  Coverage   91.62%   91.62%           
=======================================
  Files         484      484           
  Lines        9426     9426           
  Branches     1103     1103           
=======================================
  Hits         8637     8637           
  Misses        786      786           
  Partials        3        3           
Flag Coverage Δ
grai-server 87.83% <100.00%> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@ieaves ieaves merged commit a689b08 into master Oct 18, 2024
50 checks passed
@ieaves ieaves deleted the dependabot/pip/grai-server/app/strawberry-graphql-0.243.0 branch October 18, 2024 00:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant