Update graphql requirement from ~> 1.9.0 to >= 1.9, < 1.11

[dependabot-preview]

Updates the requirements on graphql to permit the latest version.

Changelog

Sourced from graphql's changelog.

1.10.0 (20 Jan 2020)

Breaking Changes

• Class-based schemas using the new interpreter will now use definition classes at runtime. #2363 (Previously, .to_graphql methods were used to generate singletons which were used at runtime.) This means:
  • Methods that used to receive types at runtime will now receive classes instead of those singletons.
  • .name will now call Class#name, which will give the class name. Use .graphql_name to get the name of a GraphQL type. (Fields, arguments and directives have .graphql_name too, so you can use it everywhere.)
  • Some methods that return hashes are slow because they merge hashes according to class inheritance, for example MySchema.types and MyObjectType.fields. Instead:
    • If you only need one item out of the Hash, use .get_type(type_name) or .get_field(field_name) instead. Those methods find a match without performing Hash merges.
    • If you need the whole Hash, get a cached value from context.warden (an instance of GraphQL::Schema::Warden) at runtime. Those values reflect the types and fields which are permitted for the current query, and they're cached for life of the query. Check the API docs to see methods on the warden.
• Class-based schemas using the interpreter must add use GraphQL::Analysis::AST to their schema (and update their custom analyzers, see https://graphql-ruby.org/queries/ast_analysis.html) #2363
• ActiveSupport::Notifications events are correctly named in event.library format #2562
• Field and Argument #authorized? methods now accept three arguments (instead of 2). They now accept (obj, args, ctx), where args is the arguments (for a field) or the argument value (for an argument). #2536
• Double-null !! is disallowed by the parser #2397
• (Non-interpreter only) The return value of subscription fields is passed along to execute the subscription. Return nil to get the previous behavior. #2536
• Schema.from_definition builds a class-based schema from the definition string #2178
• Only integers are accepted for Int type #2404

Deprecations

• .define is deprecated; class-based schema definitions should be used instead. If you're having trouble or you can't find information about an upgrade path, please open an issue on GitHub!

New Features

• Add tracing events for .authorized? and .resolve_type calls #2660
• Schema.from_definition accepts using: for installing plugins (equivalent to use ... in class-based schemas) #2307
• Add $ to variable names in error messages #2531
• Add invalid value to argument error message #2531
• Input object arguments with loads: get the loaded object in their authorized? hook, as arg in authorized?(obj, args, ctx). #2536
• GraphQL::Pagination auto-pagination system #2143
• Schema.from_definition builds a class-based schema from the definition string #2178

Bug Fixes

• Fix warnings on Ruby 2.7 #2668
• Fix Ruby keyword list to support Ruby 2.7 #2640
• Reduce memory of class-based schema #2636
• Improve runtime performance of interpreter #2630
• Big numbers (ie, greater than Ruby's Infinity) no longer 💥 when being reserialized #2320
• Fix hasNextPage/hasPrevious page when max_page_size limits the items returned #2608
• Return parse errors for empty documents and empty argument lists #2344
• Properly serialize defaultValue of input objects containing enum values #2439
• Don't crash when a query contains !!. #2397
• Resolver loads: assign the value to argument @loads #2364
• Only integers are accepted for Int type #2404

1.9.18 (15 Jan 2020)

New features

... (truncated)

Commits

• 80da07a 1.10.0
• c9fb9f2 pro-1.12.1
• e881fc3 Merge pull request #2680 from rmosolgo/1.10-dev
• ea4086d Try travis chrome addon
• f391aa6 pro-1.12.0
• 4e1f888 1.10.0.pre4
• f2c3617 Merge branch 'master' into 1.10-dev
• f2d9475 remove .define docs, mark classes as @api deprecated
• 2f23a6d 1.9.18
• ee7f441 Merge pull request #2672 from rmosolgo/fix-list-nil-coerce
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)