Skip to content

August 03, 2026

Choose a tag to compare

View all tags
@theguild-bot theguild-bot released this 03 Aug 08:28
release-1785745722579
5596745
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

@graphql-mesh/fusion-runtime@1.11.6

Patch Changes

@graphql-hive/gateway@2.11.0

Minor Changes

  • #2328 530eca8 Thanks @enisdenjo! - AWS IAM authentication for Redis cache

    IAM auth for ElastiCache/MemoryDB works by generating a short-lived SigV4 presigned URL (valid up to 15 minutes) and using it as the Redis AUTH password. The token is signed against the elasticache (or memorydb) service using the ambient AWS credentials resolved via the standard credential chain (env vars, ~/.aws/credentials, EC2 instance role, ECS task role, etc.).

    The @smithy/signature-v4 and @aws-sdk/credential-providers packages are dynamically imported
    only when iamAuth is configured, so gateways not using IAM auth pay zero cost.

    Usage

    Install the optional peer dependencies:

    yarn add @aws-crypto/sha256-js @aws-sdk/credential-providers @aws-sdk/util-format-url @smithy/protocol-http @smithy/signature-v4
    import { defineConfig } from '@graphql-hive/gateway';

export const gatewayConfig = defineConfig({
  cache: {
    type: 'redis',
    host: 'my-cluster.abc123.0001.use1.cache.amazonaws.com',
    port: '6379',
    username: 'iam-user-01',
    tls: true,
    iamAuth: {
      // AWS region where the cluster is deployed
      region: 'us-east-1',
      // cluster name used as the host in the SigV4 presigned URL
      clusterName: 'my-cluster',
      // IAM-enabled Redis username - must match the ElastiCache/MemoryDB user id exactly
      userId: 'iam-user-01',
      // AWS service to sign for - 'elasticache' (default) or 'memorydb'
      serviceName: 'elasticache',
      // token expiry in seconds - maximum 900 (15 minutes), defaults to 900
      tokenExpirySeconds: 900,
    },
  },
});

    https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/auth-iam.html

Patch Changes

@graphql-hive/nestjs@2.0.91

Patch Changes

@graphql-hive/plugin-aws-sigv4@2.0.60

Patch Changes

  • Updated dependencies [530eca8]:
    • @graphql-mesh/fusion-runtime@1.11.6

@graphql-mesh/hmac-upstream-signature@2.0.14

Patch Changes

@graphql-mesh/plugin-jwt-auth@2.0.13

Patch Changes

@graphql-hive/plugin-opentelemetry@1.4.42

Patch Changes

@graphql-mesh/plugin-prometheus@2.1.58

Patch Changes

@graphql-hive/router-runtime@1.4.22

Patch Changes

  • Updated dependencies [530eca8, 530eca8]:
    • @graphql-mesh/fusion-runtime@1.11.6
    • @graphql-mesh/transport-common@1.0.20

@graphql-hive/gateway-runtime@2.10.6

Patch Changes

@graphql-hive/gateway-testing@9.0.6

Patch Changes

  • Updated dependencies [530eca8]:
    • @graphql-hive/gateway-runtime@2.10.6

@graphql-mesh/transport-common@1.0.20

Patch Changes

@graphql-mesh/transport-http@1.1.4

Patch Changes

@graphql-mesh/transport-http-callback@1.0.24

Patch Changes

@graphql-mesh/transport-ws@2.0.24

Patch Changes

Assets 2
Loading