Skip to content

Bump webonyx/graphql-php from 15.30.2 to 15.34.0#3847

Merged
williamjallen merged 1 commit into
masterfrom
dependabot/composer/webonyx/graphql-php-15.34.0
Jul 16, 2026
Merged

Bump webonyx/graphql-php from 15.30.2 to 15.34.0#3847
williamjallen merged 1 commit into
masterfrom
dependabot/composer/webonyx/graphql-php-15.34.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 14, 2026

Copy link
Copy Markdown
Contributor

Bumps webonyx/graphql-php from 15.30.2 to 15.34.0.

Release notes

Sourced from webonyx/graphql-php's releases.

v15.34.0

Added

v15.33.1

Fixed

v15.33.0

Added

v15.32.3

Fixed

  • Denial of Service via stack overflow from deeply nested queries in the parser GHSA-r7cg-qjjm-xhqq

v15.32.2

Fixed

  • Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validation through inline fragments GHSA-fc86-6rv6-2jpm

v15.32.1

Fix "Cannot traverse an already closed generator" in Schema::getTypeMap() webonyx/graphql-php#1903

v15.32.0

Added

v15.31.5

Fixed

  • Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validation GHSA-68jq-c3rv-pcrr

v15.31.4

Changed

v15.31.3

Fixed

v15.31.2

... (truncated)

Changelog

Sourced from webonyx/graphql-php's changelog.

v15.34.0

Added

v15.33.1

Fixed

v15.33.0

Added

v15.32.3

Fixed

  • Denial of Service via stack overflow from deeply nested queries in the parser GHSA-r7cg-qjjm-xhqq

v15.32.2

Fixed

  • Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validation through inline fragments GHSA-fc86-6rv6-2jpm

v15.32.1

Fixed

v15.32.0

Added

v15.31.5

Fixed

  • Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validation GHSA-68jq-c3rv-pcrr

v15.31.4

... (truncated)

Commits
  • c72fd0f v15.34.0 changelog
  • e7ee6ad feat: Make promises generic over adopted type
  • 8fb0c13 Update dependency phpstan/phpstan to v2.2.5 (#1943)
  • 6a4e016 Update dependency phpstan/phpstan-phpunit to v2.0.18 (#1942)
  • 6554481 Apply PHP CS Fixer updates (#1940)
  • f085cc2 Update dependency phpstan/phpstan to v2.2.4 (#1939)
  • 2e9b151 Update actions/checkout action to v7 (#1933)
  • f67e085 Update dependency phpstan/phpstan-phpunit to v2.0.17 (#1938)
  • 86217a6 Update dependency phpstan/phpstan to v2.2.3 (#1937)
  • bcc321d Update dependency friendsofphp/php-cs-fixer to v3.95.11 (#1936)
  • Additional commits viewable in compare view

@williamjallen

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/composer/webonyx/graphql-php-15.34.0 branch from 6eb8277 to b90ca12 Compare July 16, 2026 14:15
@williamjallen

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps [webonyx/graphql-php](https://github.com/webonyx/graphql-php) from 15.30.2 to 15.34.0.
- [Release notes](https://github.com/webonyx/graphql-php/releases)
- [Changelog](https://github.com/webonyx/graphql-php/blob/master/CHANGELOG.md)
- [Commits](webonyx/graphql-php@v15.30.2...v15.34.0)

---
updated-dependencies:
- dependency-name: webonyx/graphql-php
  dependency-version: 15.34.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/composer/webonyx/graphql-php-15.34.0 branch from b90ca12 to a1aa619 Compare July 16, 2026 18:07
@williamjallen williamjallen marked this pull request as ready for review July 16, 2026 21:26
@williamjallen williamjallen added this pull request to the merge queue Jul 16, 2026
@github-merge-queue github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Jul 16, 2026
@williamjallen williamjallen added this pull request to the merge queue Jul 16, 2026
Merged via the queue into master with commit ab3010e Jul 16, 2026
14 checks passed
@dependabot dependabot Bot deleted the dependabot/composer/webonyx/graphql-php-15.34.0 branch July 16, 2026 22:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant