Skip to content

Bump webonyx/graphql-php from 15.29.3 to 15.37.1 - #200

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/webonyx/graphql-php-15.37.1
Open

Bump webonyx/graphql-php from 15.29.3 to 15.37.1#200
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/webonyx/graphql-php-15.37.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor

Bumps webonyx/graphql-php from 15.29.3 to 15.37.1.

Release notes

Sourced from webonyx/graphql-php's releases.

v15.37.1

Fixed

  • Revert reading properties of objects that implement \ArrayAccess because it exposed internal object state as field values webonyx/graphql-php#1958

v15.37.0

Added

v15.36.1

Fixed

v15.36.0

Changed

  • Optimize Lexer::readString() to bulk-scan ordinary bytes with strcspn() instead of decoding one UTF-8 character at a time webonyx/graphql-php#1948

v15.35.0

Added

  • Allow setting per-schema built-in scalar overrides explicitly via SchemaConfig option scalarOverrides, avoiding the resolution of lazily provided types on built-in scalar lookups webonyx/graphql-php#1927

v15.34.1

Fixed

  • Preserve deprecationReason when rebuilding input values from introspection in BuildClientSchema webonyx/graphql-php#1945

v15.34.0

Added

v15.33.1

Fixed

v15.33.0

Added

v15.32.3

Fixed

  • Denial of Service via stack overflow from deeply nested queries in the parser GHSA-r7cg-qjjm-xhqq

... (truncated)

Changelog

Sourced from webonyx/graphql-php's changelog.

v15.37.1

Fixed

  • Revert reading properties of objects that implement \ArrayAccess because it exposed internal object state as field values webonyx/graphql-php#1958

v15.37.0

Added

v15.36.1

Fixed

v15.36.0

Changed

  • Optimize Lexer::readString() to bulk-scan ordinary bytes with strcspn() instead of decoding one UTF-8 character at a time webonyx/graphql-php#1948

v15.35.0

Added

  • Allow setting per-schema built-in scalar overrides explicitly via SchemaConfig option scalarOverrides, avoiding the resolution of lazily provided types on built-in scalar lookups webonyx/graphql-php#1927

v15.34.1

Fixed

  • Preserve deprecationReason when rebuilding input values from introspection in BuildClientSchema webonyx/graphql-php#1945

v15.34.0

Added

v15.33.1

Fixed

v15.33.0

... (truncated)

Commits
  • 8c62045 Release v15.37.1
  • a40a24e Revert "If an object implements \ArrayAccess, check both array value and prop...
  • 1ef0e90 Release v15.37.0
  • f16453c Merge pull request #1531 from shish/patch-1
  • 230ad90 Release v15.36.1
  • ba67e12 Merge pull request #1954 from simPod/perf/avoid-fiber-per-amp-continuation
  • 9e74f24 Merge branch 'master' into pr-1531-shish
  • 8b8eaad Merge branch 'master' into pr-1954-simPod
  • be55406 Release v15.36.0
  • 47ded87 Merge pull request #1948 from OpaqueRock/optimize-input-processing
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [webonyx/graphql-php](https://github.com/webonyx/graphql-php) from 15.29.3 to 15.37.1.
- [Release notes](https://github.com/webonyx/graphql-php/releases)
- [Changelog](https://github.com/webonyx/graphql-php/blob/master/CHANGELOG.md)
- [Commits](webonyx/graphql-php@v15.29.3...v15.37.1)

---
updated-dependencies:
- dependency-name: webonyx/graphql-php
  dependency-version: 15.37.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Aug 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants