🚀 Features Add max_reconnect_attempts and reconnect_delay configuration for subscription WebSocket reconnection Adds two new fields to the subscription configuration block that allow the router to automatically reconnect a dropped WebSocket subscription to a subgraph. max_reconnect_attempts — how many times to retry a dropped connection (default: 0, no reconnection) reconnect_delay — how long to w…
🚀 Features Response caching for Apollo Connectors Response caching now applies to Apollo Connectors, not just GraphQL subgraph fetches. Connector (REST/HTTP) responses can be cached in Redis and reused across requests, driven by the same Cache-Control semantics as the existing subgraph feature. Configure it under a new response_cache.connector block, keyed by connector source (subgraph_name.source…
🐛 Fixes Cache debugger and private queries gauge report what the response cache did (PR #10436) The cache debugger now reports shouldStore: false when the response cache did not store the data: requests for a query the router has marked as private when no private_id is configured, because those requests skip the cache; responses and entities with GraphQL errors, and root-field responses with no da…
No content.
No content.
No content.
No content.
perf(composition): index upgrader types without cloning subgraph meta…
perf(query-graph): cache root followups and reduce memory (backport #…
🐛 Fixes Accept @defer labels reused via fragment spreads (PR #10193) The duplicate @defer(label:) check from the GHSA-gr6h-4wpf-xp52 fix ran after fragment expansion, rejecting valid operations where a fragment containing a labeled @defer is spread more than once. The incremental delivery specification defines label uniqueness over the document as written, where such a label occurs only once; clie…
No content.
No content.
🐛 Fixes Fix custom attributes on the apollo.router.operations.subscriptions.terminated.client subscription metric (PR #9605) The telemetry for configuration apollo.router.operations.subscriptions.terminated.client accepts the same router selector syntax as other router instruments, but selector-based attributes were not actually applied at runtime. You can now configure the default attributes (rea…
3.0.0-alpha.3
No content.
🐛 Fixes Prevent connector composition failures for chained ->filter/->find selections A connect/v0.4 connector selection that places one of the iterative array methods after another array-producing method — for example $.items->filter(@.a->eq("x"))->filter(@.b->gt(0)) { id name } or $.items->filter(@.a->eq("x"))->find(@.b->gt(0)) { id name } — could fail to compose with a SATISFIABILITY_ERROR. ->f…
🚀 Features response_cache can now emit a Cache-Tag header for CDN-side purging (Issue #9481) If you cache router responses at a CDN or reverse proxy in front of the router, the CDN previously had no way to know what to purge when your underlying data changed — Cache-Control only governs freshness (TTL), not invalidation. A new opt-in response_cache.cdn_invalidation block closes that gap: the route…
No content.
No content.
No content.
3.0.0-alpha.1
3.0.0-alpha.0
No content.
🐛 Fixes Fix input-object and enum variable coercion to respect the API schema Variable coercion validated input-object fields and enum values against the internal supergraph schema rather than the client-facing API schema, so a variable could reference an @inaccessible field or enum value even though the same reference would be rejected in the operation document itself. Variable coercion now valid…
🐛 Fixes Fix input-object and enum variable coercion to respect the API schema When a client sent an operation with an unknown field on an input-object variable, the router's VALIDATION_INVALID_TYPE_VARIABLE error message embedded the full composed input type definition, including federation directives (@join__type, @tag, etc.) and internal subgraph names, regardless of the introspection or redact_…
🚀 Features Add header masking for sensitive data in logs and telemetry (PR #9155) Adds header masking configuration to automatically mask sensitive header values in router logs, telemetry events, and coprocessor communications. This prevents accidental exposure of credentials, API keys, session tokens, and other sensitive information in observability data. Key Features: Automatic masking of common…
No content.
No content.
🐛 Fixes Fix Redis replica routing failure caused by lazy connections with even replica counts (Issue/PR #9589) When a Redis cluster had an even number of replicas, the router's use of lazy_connections = true could trigger a bug in fred's round-robin replica selection logic. Fred increments its round-robin counter when searching for a routable replica, and increments it again when it can't find one…
🐛 Fixes Preserve null propagation when multiple fragments select the same non-null field (PR #9032) When a query uses multiple fragment spreads on the same parent type and a subgraph response is missing a required non-null field on a union member, the router now correctly returns null for the affected field rather than a partial object like {"__typename": "A"}. The GraphQL specification requires t…