16.7.3

What's Changed

• Reject selection sets on __typename for abstract parent types by @tobias-tengler in #10733
• Wait for started node and entity resolvers before completing nodes and _entities by @tobias-tengler in #10735
• Apply authorization to batch resolver fields by @tobias-tengler in #10737
• Limit the number of selections and selection sets of an operation by @tobias-tengler in #10729
• Keep the first occurrence of repeated input object properties in variables by @tobias-tengler in #10730
• Apply query type authorization to the node and nodes fields by @tobias-tengler in #10736
• Resolve union member types before applying type authorization by @tobias-tengler in #10734
• Fix DefaultHttpRequestParser accepting incomplete requests by @tobias-tengler in #10740
• Keep outgrown ResultDocument chunk tables rented until Dispose by @tobias-tengler in #10739
• [Mocha] Fix Postgres outbox reordering messages from one transaction by @alisan3 in #10699
• Apply descriptor attributes to source-generated node resolvers by @tobias-tengler in #10738
• Reject operations that exceed the fragment visit budget by @tobias-tengler in #10731
• Limit selection set depth across fragment spreads during validation by @tobias-tengler in #10732
• Fix document IDs not matching the hash of the sent document by @glen-84 in #10741
• Fix cursor key formatting reporting the wrong written length by @glen-84 in #10743

Full Changelog: 16.7.2...16.7.3