[dependabot]

Bumps the gomod-all group with 1 update in the / directory: github.com/99designs/gqlgen.

Updates github.com/99designs/gqlgen from 0.17.95 to 0.17.98

Release notes

Sourced from github.com/99designs/gqlgen's releases.

v0.17.98

Changelog

• 6640c4ed7a45fab617c5c48414976728a4a415de Update Go deps (#4412)
• 8e60939652c7627d76944b94f8a7ffa51129393d chore(deps): bump github.com/vektra/mockery/v3 in /bin/_tools (#4409)
• b5ec638a66b52fa7b1bdfed0a86bcd92aab1d9dc chore(deps): bump goreleaser/goreleaser-action from 7.2.3 to 7.3.0 (#4407)
• e86e3bf15781caab7f62fa3828c1e0464824ad3a chore(deps): bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1 (#4404)
• 5079c44de2ad9964a7bb9a2b8d73abcc32d164cf chore(deps-dev): bump vite from 8.3.1 to 8.3.4 in /integration in the npm_and_yarn group across 1 directory (#4399)
• 7d8b84d16ebe1e08c9690fbf23ced779914f103c codegen: take built-ins from the gqlparser prelude (#4411)
• 12954b5b61ffbe9335fc3ac764dea4c25bf6d28e federation: type MatchedKey with a constant per @​key (#4401)
• 19830bc7cf54b8c53a46d4d685b7a18f10d23be1 pre-release v0.17.98
• f75a5cfeecab94e69396b971d3de82a068a3a913 v0.17.97 postrelease bump

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/99designs/gqlgen/.github/workflows/release.yml@refs/tags/v0.17.98' \
  checksums.txt
2. hash every downloaded artifact against the now-trusted checksums.
shasum -a 256 --ignore-missing -c checksums.txt
3. GitHub build provenance (repeat --repo for whichever archive you pulled).
gh attestation verify gqlgen_Darwin_arm64.tar.gz --repo 99designs/gqlgen
gh attestation verify gqlgen_0.17.98_source.tar.gz --repo 99designs/gqlgen

Each archive ships an SBOM alongside it (<archive>.sbom.json, SPDX-2.3); the source tree's is gqlgen_0.17.98_source.tar.gz.sbom.json.

---

Released by GoReleaser.

v0.17.97

Changelog

• e7121a7063a6f35f798d8f2a51b1be8b66a14e12 ci: reject nested go.mod newer than the root (#4397)
• 055be411122e93ba38fe29e66a3fa6660de25935 pre-release v0.17.97
• 0a8ac89b7087171c43e349c320fc221cf0775a82 v0.17.96 postrelease bump

What's Changed

• chore(deps): bump anchore/sbom-action/download-syft from 0.24.0 to 0.24.2 by @​dependabot[bot] in 99designs/gqlgen#4315
• chore(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 by @​dependabot[bot] in 99designs/gqlgen#4316
• chore(deps-dev): bump @​graphql-codegen/cli from 7.3.1 to 7.4.0 in /integration by @​dependabot[bot] in 99designs/gqlgen#4318
• chore(deps-dev): bump vitest from 4.1.11 to 5.0.0 in /integration by @​dependabot[bot] in 99designs/gqlgen#4317
• chore(deps-dev): bump vitest from 4.1.11 to 5.0.0 in /_examples/federation by @​dependabot[bot] in 99designs/gqlgen#4319
• _examples: run go generate in the nested example modules by @​StevenACoffman in 99designs/gqlgen#4333
• chore(deps-dev): bump @​babel/core from 7.29.0 to 7.29.7 in /integration in the npm_and_yarn group across 1 directory by @​dependabot[bot] in 99designs/gqlgen#4325

... (truncated)

Commits

• 19830bc pre-release v0.17.98
• 8e60939 chore(deps): bump github.com/vektra/mockery/v3 in /bin/_tools (#4409)
• 6640c4e Update Go deps (#4412)
• e86e3bf chore(deps): bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1 (#4404)
• b5ec638 chore(deps): bump goreleaser/goreleaser-action from 7.2.3 to 7.3.0 (#4407)
• 7d8b84d codegen: take built-ins from the gqlparser prelude (#4411)
• 12954b5 federation: type MatchedKey with a constant per @​key (#4401)
• 5079c44 chore(deps-dev): bump vite from 8.3.1 to 8.3.4 in /integration in the npm_and...
• f75a5cf v0.17.97 postrelease bump
• 055be41 pre-release v0.17.97
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[bsv-blockchain-automerge]

✅ Auto-approving patch update (third-party production dependency): github.com/99designs/gqlgen (0.17.95 → 0.17.98)