Bump graphql from 1.9.18 to 1.10.2

[dependabot-preview[bot]]

Bumps graphql from 1.9.18 to 1.10.2.

Changelog

Sourced from graphql's changelog.

1.10.2 (31 Jan 2020)

Bug fixes

• Properly wrap nested input objects in instances #2710

1.10.1 (28 Jan 2020)

Bug fixes

• Include Interface-level orphan_types when building a schema #2705
• Properly re-enter selections in complexity analyzer #2595
• Fix input objects with null values #2690
• Fix default values of {} in .define-based schemas #2703
• Fix field extension presence check #2689
• Make new relation connections more efficient #2697
• Don't include fields @skip(if: true) or @include(if: false) in lookahead #2700

1.10.0 (20 Jan 2020)

Breaking Changes

• Class-based schemas using the new interpreter will now use definition classes at runtime. #2363 (Previously, .to_graphql methods were used to generate singletons which were used at runtime.) This means:
  • Methods that used to receive types at runtime will now receive classes instead of those singletons.
  • .name will now call Class#name, which will give the class name. Use .graphql_name to get the name of a GraphQL type. (Fields, arguments and directives have .graphql_name too, so you can use it everywhere.)
  • Some methods that return hashes are slow because they merge hashes according to class inheritance, for example MySchema.types and MyObjectType.fields. Instead:
    • If you only need one item out of the Hash, use .get_type(type_name) or .get_field(field_name) instead. Those methods find a match without performing Hash merges.
    • If you need the whole Hash, get a cached value from context.warden (an instance of GraphQL::Schema::Warden) at runtime. Those values reflect the types and fields which are permitted for the current query, and they're cached for life of the query. Check the API docs to see methods on the warden.
• Class-based schemas using the interpreter must add use GraphQL::Analysis::AST to their schema (and update their custom analyzers, see https://graphql-ruby.org/queries/ast_analysis.html) #2363
• ActiveSupport::Notifications events are correctly named in event.library format #2562
• Field and Argument #authorized? methods now accept three arguments (instead of 2). They now accept (obj, args, ctx), where args is the arguments (for a field) or the argument value (for an argument). #2536
• Double-null !! is disallowed by the parser #2397
• (Non-interpreter only) The return value of subscription fields is passed along to execute the subscription. Return nil to get the previous behavior. #2536
• Schema.from_definition builds a class-based schema from the definition string #2178
• Only integers are accepted for Int type #2404

Deprecations

• .define is deprecated; class-based schema definitions should be used instead. If you're having trouble or you can't find information about an upgrade path, please open an issue on GitHub!

New Features

• Add tracing events for .authorized? and .resolve_type calls #2660
• Schema.from_definition accepts using: for installing plugins (equivalent to use ... in class-based schemas) #2307
• Add $ to variable names in error messages #2531
• Add invalid value to argument error message #2531
• Input object arguments with loads: get the loaded object in their authorized? hook, as arg in authorized?(obj, args, ctx). #2536
• GraphQL::Pagination auto-pagination system #2143
• Schema.from_definition builds a class-based schema from the definition string #2178

... (truncated)

Commits

• bea0c18 1.10.2
• 9ec2eda Merge pull request #2710 from rmosolgo/fix-nested-objects
• 2ff5793 Fix tests
• a15e7cf Properly wrap nested objects coming in variables
• 3ce661d Update changelog
• 4b60c20 1.10.1
• 52f2220 Merge pull request #2705 from liang3404814/fix-interface-orphan-types
• fb5bd71 Merge pull request #2595 from chrisbutcher/complexity-analyzer-that-respects-...
• caeb230 Merge pull request #2690 from hueter/hueter-fix-nested-null-input
• 32dd3f9 Update comment
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

If all status checks pass Dependabot will automatically merge this pull request.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)

[dependabot-preview[bot]]

One of your CI runs failed on this pull request, so Dependabot won't merge it.

• ci/circleci

Dependabot will still automatically merge this pull request if you amend it and your tests pass.

[dependabot-preview[bot]]

Superseded by #1303.