v1.1.0

v1.1.0 — Safer clients, clearer errors, stronger CI

This release strengthens goldsky-php across REST, GraphQL, and JSON-RPC, while making the package easier to adopt in PHP and Laravel applications.

Added

• Client::forData() for GraphQL and Edge RPC clients that do not need a REST project token.
• A configurable 16 MiB response-body limit to protect REST, GraphQL, and JSON-RPC requests.
• More validation for subgraphs, webhooks, Edge endpoints, GraphQL targets, JSON-RPC payloads, and deployment bundle filenames.
• Expanded, example-first README covering pipelines, subgraphs, webhooks, Edge, GraphQL, RPC, and Laravel integration.
• GitHub Actions for PHP 8.1–8.4 tests, coverage uploads, dependency review, CodeQL workflow scanning, and Semgrep PHP security scanning.

Fixed

• Edge RPC authentication now uses the X-ERPC-Secret-Token header instead of exposing the key in a URL query string.
• Empty, malformed, and oversized successful JSON responses now raise clear TransportExceptions.
• JSON-RPC now rejects invalid envelopes, mismatched response IDs, and duplicate or unknown batch response IDs.
• Pagination stops reliably on terminal pages and rejects non-advancing page tokens.
• Streaming multipart deployments are never retried.
• Pipeline state responses correctly preserve valid wrapped and raw JSON values.

Upgrade notes

No breaking API changes are intended. Update normally with:

composer update tigusigalpa/goldsky-php

v1.0.0

goldsky-php v1.0.0

We’re excited to announce the first stable release of goldsky-php, a PHP and Laravel SDK for the Goldsky REST control plane, Subgraph GraphQL endpoints, and Edge JSON-RPC.

Highlights

• Complete coverage of Goldsky REST API v1.2.0: 40 operations across Pipelines, Subgraphs, Webhooks, Edge, and Catalogs.
• GraphQL client for public and private Subgraph endpoints.
• Edge JSON-RPC client with single and batch request support.
• Secure webhook verification using constant-time secret comparison.
• Robust HTTP layer with Bearer authentication, retries, exponential backoff with jitter, Retry-After support, and credential redaction.
• RFC 9457 problem-details error parsing, including convenient error classification helpers.
• Pagination utilities and streaming multipart subgraph deployments.
• Laravel integration with a service provider, facade, and publishable configuration.
• Framework-agnostic support for any PHP 8.1+ application.

Quality and documentation

• 60 PHPUnit tests covering all REST operations and key edge cases.
• 8 runnable examples.
• API coverage, upgrade, and security documentation.
• GitHub Actions CI.

Install with Composer:

composer require tigusigalpa/goldsky-php