Releases: graphql-java/graphql-java
22.1
This is a bugfix release. There are no breaking changes in this release, however if you use Kotlin, please note some nullability changes were made with this release.
Key changes include:
- Fix to add field fetching method #3571
- Add validation rule for
@deprecated
on required arguments and input object fields #3591 - Nullability changes for DataFetchingEnvironment #3582. If you use Kotlin, this may be considered a breaking change for you. See discussion: #3630
Thanks to everyone who contributed to this release!
What's Changed
- Update readme badge by @dondonz in #3568
- Added a getBoolean onto GraphQLContext.java by @bbakerman in #3578
- getBoolean returns a boolean not a Boolean by @bbakerman in #3581
- Bump org.testng:testng from 7.10.1 to 7.10.2 by @dependabot in #3583
- Bump net.bytebuddy:byte-buddy from 1.14.13 to 1.14.14 by @dependabot in #3584
- Bump net.bytebuddy:byte-buddy-agent from 1.14.13 to 1.14.14 by @dependabot in #3585
- Bump com.fasterxml.jackson.core:jackson-databind from 2.17.0 to 2.17.1 by @dependabot in #3587
- Always include incremental props even if null by @gnawf in #3570
- Bump net.bytebuddy:byte-buddy-agent from 1.14.14 to 1.14.15 by @dependabot in #3595
- Bump net.bytebuddy:byte-buddy from 1.14.14 to 1.14.15 by @dependabot in #3596
- Ready: Add @deprecated validation for input object fields, field arguments, directive arguments by @dondonz in #3591
- Added field fetching method for Expedia by @bbakerman in #3571
- Update GitHub actions ahead of release by @dondonz in #3600
- Bump google-github-actions/auth from 2.1.2 to 2.1.3 by @dependabot in #3603
- Bump org.eclipse.jetty:jetty-server from 11.0.20 to 11.0.21 by @dependabot in #3602
- Bump com.google.code.gson:gson from 2.10.1 to 2.11.0 by @dependabot in #3601
- Add nullability annotations in DataFetchingEnvironment & sub-classes by @Salzian in #3582
- Now does not overwrite a types default data fetcher unless its nonnull by @bbakerman in #3579
- Add extend schema (AST print) to SchemaPrinter by @dondonz in #3471
New Contributors
Full Changelog: v22.0...v22.1
22.0
We are pleased to announce the release of graphql-java v22.0.
Thanks to everyone in the community who contributed to the release, whether that was code, helping to report issues, or participating in discussions.
This is a breaking change release.
The graphql-java team takes breaking changes very seriously but in the name of performance we have made some significant breaking changes in this release.
Major Performance Changes
Past releases have been very much performance focused and this one is no different. However, this release is aiming to reduce memory pressure more than reduce pure CPU usage. When the graphql-java engine is running, if it produces less objects it will ultimately run faster because of reduced memory pressure and less garbage to collect.
The engine has been changed in two major ways that reduce memory pressure.
ExecutionResult wrapping
The first was that all values that come back got wrapped internally into a ExecutionResult
object where the data
attribute was the value. This was a carry over from some very early GraphQL code but was unnecessary and hence has been removed. The follow on effect of this is that some graphql.execution.ExecutionStrategy
protected methods and graphql.execution.instrumentation.Instrumentation
methods used to receive and return ExecutionResult
values and no longer do, which is an API breaking change. We have made this breaking changes in the name of memory pressure performance.
CompletableFuture wrapping
The second major change is that the engine no longer exclusively uses java.util.concurrent.CompletableFuture
s when composing together results. Let us explain the past code first so we can discuss the new code.
CompletableFuture
is a fantastic construct because it represents a promise to a value and it can also hold an exceptional state inside itself. Async programming with CompletableFuture
is viral. If stage 1 of some compute process returns a CompletableFuture
then stage 2 and 3 and 4 are likely to as well to ensure everything is asynchronous.
We use to take values that were not asynchronous (such as DataFetcher that returned a simple in memory object) and wrap them in a CompletableFuture
so that all of the other code composed together using CompletableFuture
methods like .thenApply()
and .thenCompose
and so on. The code is cleaner if you use all CompletableFuture
code patterns.
However many objects in a GraphQL request are not asynchronous but rather materialised objects in memory. Scalars, enums and list are often just values immediately available to be used and allocating a CompletableFuture
makes the code easier to write but it has a memory pressure cost.
So we have sacrificed cleaner code for more memory performant code.
graphql-java engine graphql.execution.ExecutionStrategy
methods now just return Object
where that object might be either a CompletableFuture
or a materialised value.
private Object /*CompletableFuture<FetchedValue> | FetchedValue>*/
fetchField(GraphQLFieldDefinition fieldDef, ExecutionContext executionContext, ExecutionStrategyParameters parameters) {
Notice we have lost type safety here. In the past this would have only been CompletableFuture<FetchedValue>
and hence been both type safe and async composable.
Now the caller of that method has to handle the async case where it might be a CompletableFuture<FetchedValue>
AND the materialised value case where it might be a FetchedValue
but as most simple fields in GraphQL are in fact materialised values, this is worth the less clean code.
DataFetchers
can of course continue to return CompletableFuture
values and they will be handled in a polymorphic manner.
The upshot of all this work is that the graphql-java engine allocated way less CompletableFuture
values and hence reduces the amount of memory used.
Instrumentation Changes
The above changes now mean means that before graphql.execution.instrumentation.InstrumentationContext
used to be given a CompletableFuture
but now no longer does
void onDispatched(CompletableFuture<T> result);
is now
void onDispatched();
if you previously used the CompletableFuture
to know when something was completed, well InstrumentationContext
has the same semantics because it's completed method is similar in that it presents a value or an exception
void onCompleted(T result, Throwable t);
graphql.execution.instrumentation.Instrumentation
also had a lot of deprecated methods in place and these have been removed since the more performant shape of passing in graphql.execution.instrumentation.InstrumentationState
has been in place for quite a few releases.
Some of the methods that received ExecutionResult
wrapped values have also changed as mentioned above.
Instrumentation
is probably the area that needs the most attention in terms of breaking changes. If you have not moved off the deprecated methods, your custom Instrumentation
s will no longer compile or run.
Interning key strings
Our friends at Netflix provided a PR that interns certain key strings like "field names" so that we create less String instances when processing field names in queries that we know must be previously interned in the schema.
The full list of performance related changes
Major Changes
@defer Experimental Support
Support for the @defer
directive has been added in an experimental fashion. While @defer
is still not in the released GraphQL specification, we have judged it mature enough to support at this stage and the graphql-js
reference implementation has support for it.
https://github.com/graphql/graphql-wg/blob/main/rfcs/DeferStream.md
At this stage we have not yet supported @stream
but this is likely to be included in a future release.
Breaking Changes
There are quite a few API breaking changes in this release. In fact there are 22 PRs containing breaking API changes.
Stricter parseValue coercion: Aligning with JS reference implementation
We have made changes to String, Boolean, Float, and Int parseValue
coercion, to be consistent with the reference JS implementation. The key change is parseValue
is now stricter on accepted inputs.
- String
parseValue
now requires input of typeString
. For example, aNumber
input123
or aBoolean
inputtrue
will no longer be accepted. - Boolean
parseValue
now requires input of typeBoolean
. For example, aString
input"true"
will no longer be accepted. - Float
parseValue
now requires input of typeNumber
. For example, aString
input"3.14"
will no longer be accepted. - Int
parseValue
now requires input of typeNumber
. For example, aString
input"42"
will no longer be accepted.
This is a breaking change. To help you migrate, in version 21.0, we introduced the InputInterceptor #3188 (and an implementation LegacyCoercingInputInterceptor #3218) to provide a migration pathway. You can use this interceptor to monitor and modify values.
For more, see #3553
JS reference implementation: https://github.com/graphql/graphql-js/blob/main/src/type/scalars.ts
Removing deprecated methods
Many methods that have been deprecated for a long time, sometimes even up to 6 years, have finally been removed.
The CompletableFuture
unwrapping work mentioned above changed many methods in the graphql.execution.ExecutionStrategy
classes but we don't expect this affect many people since very few people write their own engines.
That CompletableFuture
unwrapping work also had knock on effects as mentioned above on graphql.execution.instrumentation.Instrumentation
and hence this is the most likely place for there to be compatibility challenges in existing code.
DataLoaderDispatcherInstrumentation has been removed and is now built into the engine
The code to dispatch org.dataloader.DataLoader
s used to be an instrumentation called DataLoadersDataLoaderDispatcherInstrumentation
and it was automatically added at runtime. This approach has been removed.
The equivalent code is now built into the graphql-java engine itself. DataLoader
s can now always be used without any special setup. This also allows the code to be more performant in how DataLoader
s are dispatched.
SL4J logging has been removed
Previously, the graphql-java engine would log at DEBUG level certain errors or when fields get fetched. This has not proven used for from a support point to the graphql-java team and also has a compliance cost in that user generated content (UGC) and personally identifying information (PII) could end up being logged, which may not be allowed under regimes like European General Data Protection Regulation (GDPR).
If you want to log now we suggest you invest in a Instrumentation
that logs key events and you can there for log what you want and in a compliant manner of your choosing.
The full list of API breaking changes
Other changes
- Optional strict mode for RuntimeWiring and TypeRuntimeWiring, to avoid accidentally having multiple datafetchers on the same element #3565
What's Changed
- OneOf validation not being applied to nested inputs by @felipe-gdr in #33...
21.5
20.9
19.11
21.4
This is a special release to help control introspection queries.
This release adds a default check for introspection queries, to check that they are sensible. This feature is a backport of #3526 and #3527.
This release also adds an optional maximum result nodes limit, which is a backport of #3525.
What's Changed
- 21.x Backport PR 3526 and PR 3527 by @dondonz in #3529
- 21.x backport 3525 max result nodes by @dondonz in #3528
Full Changelog: v21.3...v21.4
20.8
This is a special release to help control introspection queries.
This release adds a default check for introspection queries, to check that they are sensible. This feature is a backport of #3526 and #3527.
This release also adds an optional maximum result nodes limit, which is a backport of #3525.
What's Changed
- 20.x Backport of PR 3526 and PR 3527 by @dondonz in #3530
- 20.x Backport max result nodes PR 3525 by @dondonz in #3536
Full Changelog: v20.7...v20.8
19.10
This is a special release to help control introspection queries.
This release adds a default check for introspection queries, to check that they are sensible. This feature is a backport of #3526 and #3527.
This release also adds an optional maximum result nodes limit, which is a backport of #3525.
What's Changed
- 19.x Backport #3526 and PR #3527 by @dondonz in #3532
- 19.x Backport PR 3525 max result nodes by @dondonz in #3537
Full Changelog: v19.9...v19.10
21.3
A small bugfix release on top of 21.2, which includes correct unwrapping of non-null input types for @oneOf
.
What's Changed
- @OneOf handles non-null inputs by @felipe-gdr in #3353
Full Changelog: v21.2...v21.3