v0.40.0

🚀 Features

• Add rover schema search subcommand - @dotdat PR #3315

  Wires the new rover schema search FILE TERMS... subcommand on top of the ParsedSchema::search engine added in PR #3262. Accept SDL from a file (or from stdin when FILE is -), render results as text or JSON via the standard CliOutput plumbing, and support --limit/-n and --include-deprecated.

🐛 Fixes

• Preserve auth and other reqwest helpers in the retry tower layer - @SharkBaitDLS PR #3327 fixes #3326

  Rebuilds requests through reqwest::RequestBuilder inside the retry tower layer so the builder's helper logic (which extracts auth into headers, among other things) is preserved on retried requests. Previously the layer used reqwest::Request::try_from, which silently dropped those helpers. Also restricts retries to retriable HTTP status codes and skip gzip-decoding error responses so the underlying failure surfaces instead of manifesting as a hang.

• Rewrite graph introspect to use apollo-compiler - @SharkBaitDLS PR #3317 fixes #3312

  Moves graph introspect off the deprecated apollo-encoder crate and onto apollo-compiler to pick up upstream SDL-encoding fixes that Rover had been missing.

• Batch supergraph.yaml subgraph changes on hot reload - @SharkBaitDLS PR #3304

  Applies all subgraph additions and removals from a single supergraph.yaml edit as one batch before recomposing in rover dev. Previously each change was processed individually, so removing a subgraph whose fields were referenced via @external produced an intermediate composition failure that persisted as the final state without recovering.

• Preserve --graph-ref subgraphs across hot reloads - @SharkBaitDLS PR #3288

  Re-merges remote --graph-ref subgraphs on every supergraph.yaml reload when rover dev is run with both --graph-ref and a local supergraph file. Previously the watcher only re-read the YAML and dropped the graph-ref-only subgraphs that had been merged in at startup.

• Fix release tagging workflow - @SharkBaitDLS PR #3309

  Switches the release "refs exist" check to the exact-match GitHub tag API. Previously it used a fuzzy-matching API that incorrectly no-op'd when prior release-candidate tags existed. Also restores the original workflow names to preserve Marketplace URLs and SEO.

🛠 Maintenance

• Retry artifact uploads in CI - @dotdat PR #3325

  Adds retries to actions/upload-artifact so transient network failures during CI uploads no longer fail builds.

• Drop unused variant-name querying - @sirdodger PR #3320

  Removes the unused variants field from the graph query to improve performance for graphs with many variants.

• Run cargo +nightly fmt --all at the end of mise run prep - @dotdat PR #3311

📚 Documentation

• Add Docker image information to CI docs - @SharkBaitDLS PR #3318

  Documents the published Docker images in the CI/CD docs and aligns action names with the links already used on the docs site.

---

This release was automatically created by GitHub Actions.

If you would like to verify that the binary you have downloaded was built from the source code in this repository, you can compute a checksum of the zipped tarball and compare it to the checksums that are included as release artifacts.

Binaries built for MacOS are signed, notarized, and automatically verified with Gatekeeper.

v0.39.1

🚀 Features

• Add rover client extract command - @dotdat PR #3223, #3224,
  #3225

New rover client extract command pulls GraphQL operations out of
client code. Includes the core extraction logic, CLI wiring, and
integration tests.

• Add rover client check command - @dotdat PR #3120

New rover client check subcommand for validating client operations
against a schema.

• Add rover schema search - @dotdat PR #3262

  New subcommand under rover schema for searching schema contents.

• Add --check flag to rover graph publish - @joshuaoshields95 PR
  #3203

Runs graph check and graph publish as a single unit when --check
is passed.

• Add --use-example-schema flag to subgraph publish - @samaanghani
  PR #3218

Allows publishing a placeholder schema without needing to provide your
own schema file. This is useful for setting up your graph structure
before your actual schemas are ready. The placeholder schema is type Query { helloWorld: String } with a routing URL of
https://example.com/.

• Respect --insecure-accept-invalid-certs in rover init --mcp -
  @dotdat PR #3234

rover init --mcp now honors --insecure-accept-invalid-certs when
fetching templates.

🐛 Fixes

• Port axios no-proxy behavior - @SharkBaitDLS PR #3270

Restores no_proxy / NO_PROXY handling that was previously provided
by axios before its removal in 0.38.0.

• Fix path and formatting issues in client check/client extract -
  @dotdat PR #3285

• Use --root-dir in client check fixture tests for cross-platform
  compatibility - @samaanghani PR #3219

• Don't run the automated update check in Docker - @SharkBaitDLS PR
  #3245

Skips the rover version-update check when running inside a container so
Docker users don't see spurious update prompts.

• Workaround NPM 11 installation bug - @SharkBaitDLS PR #3230

🛠 Maintenance

• Add canonical GitHub Actions for install / subgraph / persisted
  queries - @SharkBaitDLS PR #3264, #3269, #3278, #3279, #3280

New companion actions under apollographql-gh-actions/* for installing
rover and wrapping common subgraph and persisted-queries subcommands.

• Bump apollo-language-server to 0.8.0 - PR #3251

---

This release was automatically created by GitHub Actions.

If you would like to verify that the binary you have downloaded was built from the source code in this repository, you can compute a checksum of the zipped tarball and compare it to the checksums that are included as release artifacts.

Binaries built for MacOS are signed, notarized, and automatically verified with Gatekeeper.

v0.39.1-rc.3

---

This release was automatically created by GitHub Actions.

If you would like to verify that the binary you have downloaded was built from the source code in this repository, you can compute a checksum of the zipped tarball and compare it to the checksums that are included as release artifacts.

Binaries built for MacOS are signed, notarized, and automatically verified with Gatekeeper.

v0.39.1-rc.2

---

This release was automatically created by GitHub Actions.

If you would like to verify that the binary you have downloaded was built from the source code in this repository, you can compute a checksum of the zipped tarball and compare it to the checksums that are included as release artifacts.

Binaries built for MacOS are signed, notarized, and automatically verified with Gatekeeper.

v0.39.1-rc.1

---

This release was automatically created by GitHub Actions.

If you would like to verify that the binary you have downloaded was built from the source code in this repository, you can compute a checksum of the zipped tarball and compare it to the checksums that are included as release artifacts.

Binaries built for MacOS are signed, notarized, and automatically verified with Gatekeeper.

v0.38.1

[0.38.1] - 2026-04-22

🐛 Fixes

• Restore retry-until-ready behavior for unavailable subgraphs - @DMallare PR #3187

  • Restores the behavior from v0.26.x where rover dev would continue polling unavailable subgraphs until they came online.

📚 Documentation

• Update links for API keys - PR #3194
• Clarify Node version strategy - PR #3186

---

This release was automatically created by CircleCI.

If you would like to verify that the binary you have downloaded was built from the source code in this repository, you can compute a checksum of the zipped tarball and compare it to the checksums that are included as release artifacts.

Binaries built for MacOS are signed, notarized, and automatically verified with Gatekeeper.

v0.38.0

[0.38.0] - 2026-04-03

🚀 Features

• Add rover schema describe command - @dotdat PR #3091

🐛 Fixes

• Enable non-compose supergraph commands on Alpine - @SharkBaitDLS PR #3062

🛠 Maintenance

• Remove dependencies from rover npm package - @phryneas, @claude, @SharkBaitDLS PR #3136
  • This drops the dependencies axios, axios-proxy-builder and console.table and introduces undici as a dependency. It also pins detect-libc to a fixed version with no further dependencies.

---

This release was automatically created by CircleCI.

If you would like to verify that the binary you have downloaded was built from the source code in this repository, you can compute a checksum of the zipped tarball and compare it to the checksums that are included as release artifacts.

Binaries built for MacOS are signed, notarized, and automatically verified with Gatekeeper.

v0.37.2

---

This release was automatically created by CircleCI.

If you would like to verify that the binary you have downloaded was built from the source code in this repository, you can compute a checksum of the zipped tarball and compare it to the checksums that are included as release artifacts.

Binaries built for MacOS are signed, notarized, and automatically verified with Gatekeeper.

v0.37.1

[0.37.1] - 2025-12-16

🐛 Fixes

• Allow rover dev --graph-ref to work without a local supergraph config - @DaleSeo, PR #2924
• Handle InvalidGraphRef error gracefully instead of panicking - @DaleSeo, PR #2927
• Add completions for bash and zsh - @smyrick , PR #2853

v0.37.0

[0.37.0] - 2025-12-01

🚀 Features

• Enable overriding MCP version in rover dev - @DaleSeo, PR #2784

🐛 Fixes

• Remove conditional header in VSCode file from MCP template processing - @gocamille, PR #2757
• Auto-configure MCP server endpoint with router's custom path- @DaleSeo, PR #2869

📚 Documentation

• change MCP's default port from 5000 to 8000 - @DaleSeo, PR #2749