Skip to content

Bump webonyx/graphql-php from 15.30.2 to 15.32.3#3712

Draft
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/webonyx/graphql-php-15.32.3
Draft

Bump webonyx/graphql-php from 15.30.2 to 15.32.3#3712
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/webonyx/graphql-php-15.32.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps webonyx/graphql-php from 15.30.2 to 15.32.3.

Release notes

Sourced from webonyx/graphql-php's releases.

v15.32.3

Fixed

  • Denial of Service via stack overflow from deeply nested queries in the parser GHSA-r7cg-qjjm-xhqq

v15.32.2

Fixed

  • Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validation through inline fragments GHSA-fc86-6rv6-2jpm

v15.32.1

Fix "Cannot traverse an already closed generator" in Schema::getTypeMap() webonyx/graphql-php#1903

v15.32.0

Added

v15.31.5

Fixed

  • Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validation GHSA-68jq-c3rv-pcrr

v15.31.4

Changed

v15.31.3

Fixed

v15.31.2

Changed

Fixed

v15.31.1

Fixed

v15.31.0

Added

... (truncated)

Changelog

Sourced from webonyx/graphql-php's changelog.

v15.32.3

Fixed

  • Denial of Service via stack overflow from deeply nested queries in the parser GHSA-r7cg-qjjm-xhqq

v15.32.2

Fixed

  • Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validation through inline fragments GHSA-fc86-6rv6-2jpm

v15.32.1

Fixed

v15.32.0

Added

v15.31.5

Fixed

  • Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validation GHSA-68jq-c3rv-pcrr

v15.31.4

Changed

v15.31.3

Fixed

v15.31.2

Changed

Fixed

... (truncated)

Commits
  • 993bf0b Release v15.32.3
  • 6c1d600 Address review findings
  • 7b7f208 Add recursion depth limit to prevent stack overflow
  • 8d0f1c5 Release v15.32.2
  • 996adcf Add comparison budget to OverlappingFieldsCanBeMerged
  • ff116ea Document security scope to reduce low-quality advisory submissions
  • 2711a1e Use v4 tag format for ramsey/composer-install action
  • 3874d60 Update ramsey/composer-install action to v4
  • 2340e43 Update dependency phpstan/phpstan to v2.1.51 (#1904)
  • 8405df9 Update dependency phpstan/phpstan to v2.1.50 (#1899)
  • Additional commits viewable in compare view

@williamjallen williamjallen added this pull request to the merge queue May 13, 2026
@github-merge-queue github-merge-queue Bot removed this pull request from the merge queue due to failed status checks May 13, 2026
@williamjallen williamjallen added this pull request to the merge queue May 13, 2026
@github-merge-queue github-merge-queue Bot removed this pull request from the merge queue due to failed status checks May 13, 2026
@williamjallen williamjallen added this pull request to the merge queue May 13, 2026
@github-merge-queue github-merge-queue Bot removed this pull request from the merge queue due to failed status checks May 13, 2026
@williamjallen williamjallen added this pull request to the merge queue May 13, 2026
@github-merge-queue github-merge-queue Bot removed this pull request from the merge queue due to failed status checks May 13, 2026
@williamjallen williamjallen added this pull request to the merge queue May 13, 2026
@github-merge-queue github-merge-queue Bot removed this pull request from the merge queue due to failed status checks May 13, 2026
@williamjallen williamjallen added this pull request to the merge queue May 13, 2026
@github-merge-queue github-merge-queue Bot removed this pull request from the merge queue due to failed status checks May 13, 2026
@williamjallen
Copy link
Copy Markdown
Collaborator

Converting to draft for further investigation.

@williamjallen williamjallen marked this pull request as draft May 13, 2026 15:55
@williamjallen
Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/composer/webonyx/graphql-php-15.32.3 branch from 3d1224b to 88c1f46 Compare May 14, 2026 14:48
@williamjallen
Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps [webonyx/graphql-php](https://github.com/webonyx/graphql-php) from 15.30.2 to 15.32.3.
- [Release notes](https://github.com/webonyx/graphql-php/releases)
- [Changelog](https://github.com/webonyx/graphql-php/blob/master/CHANGELOG.md)
- [Commits](webonyx/graphql-php@v15.30.2...v15.32.3)

---
updated-dependencies:
- dependency-name: webonyx/graphql-php
  dependency-version: 15.32.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/composer/webonyx/graphql-php-15.32.3 branch from 88c1f46 to f9cd447 Compare May 14, 2026 15:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant