Repository navigation
Version Packages (rc) - #4666
Merged
Merged
Conversation
trevor-scheer
enabled auto-merge (squash)
October 23, 2026 11:44
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to graphiql-6, this PR will be updated.
graphiql-6is currently in pre mode so this branch has prereleases rather than normal releases. If you want to exit prereleases, runchangeset pre exitongraphiql-6.Releases
graphiql@6.0.0-rc.3
Patch Changes
#4665
c4a62afThanks @trevor-scheer! - Discover HTTP methods automatically whencreateTransportis called withoutsupportedMethods. Previous RCs treated an omittedsupportedMethodsas['POST']and exposed a method chip and switcher in the top bar. The transport now sends an OPTIONS request without a body before its first HTTP operation, readsAllow, and automatically selects QUERY, then POST, then GET for queries. The top bar method controls are removed. The response pane instead shows the actual request method from the optionalTransportResponse.methodfield alongside timing and size, including for HTTP error responses and incremental chunks. WebSocket events and custom transports without this metadata omit the method.Discovery uses the effective request headers, is shared by concurrent requests, and runs again when headers change. If OPTIONS fails, times out after two seconds, or returns no usable
Allowheader, execution falls back to POST (or the configuredmethodoverride). A valid advertisement containing no usable methods blocks HTTP execution. Mutations always require POST; GraphiQL delegates routing to the transport from Run, the operation dropdown, and the keyboard shortcut. An operation whose type cannot be determined also requires POST. If POST is unavailable, these operations fail without sending.Pass
method: 'GET'to override automatic query selection for testing. GET encodes queries, operation names, variables, and extensions in the URL without a body; mutations still require POST. An override that discovery excludes fails without silently choosing another method.transport.setMethod?.('GET')changes the override for subsequent queries, andtransport.setMethod?.()restores automatic selection. PasssupportedMethods: ['POST']to preserve the previous POST-only default and skip OPTIONS, or usemethod: 'GET', supportedMethods: ['GET', 'POST']to test GET queries and POST mutations without discovery. If discovery fails with a configured GET override and no explicit capabilities, only GET is assumed available.For cross-origin discovery, the server must permit OPTIONS and expose
AllowthroughAccess-Control-Expose-Headers. This discovers methods only, not QUERY request formats throughAccept-Query, and does not retry operations with another method. Custom transports own routing and must prevent mutations over GET and QUERY. GraphiQL reads metadata from each response without subscribing to transport capability changes.Updated dependencies [
c4a62af]:@graphiql/react@1.0.0-rc.4
Patch Changes
#4665
c4a62afThanks @trevor-scheer! - Discover HTTP methods automatically whencreateTransportis called withoutsupportedMethods. Previous RCs treated an omittedsupportedMethodsas['POST']and exposed a method chip and switcher in the top bar. The transport now sends an OPTIONS request without a body before its first HTTP operation, readsAllow, and automatically selects QUERY, then POST, then GET for queries. The top bar method controls are removed. The response pane instead shows the actual request method from the optionalTransportResponse.methodfield alongside timing and size, including for HTTP error responses and incremental chunks. WebSocket events and custom transports without this metadata omit the method.Discovery uses the effective request headers, is shared by concurrent requests, and runs again when headers change. If OPTIONS fails, times out after two seconds, or returns no usable
Allowheader, execution falls back to POST (or the configuredmethodoverride). A valid advertisement containing no usable methods blocks HTTP execution. Mutations always require POST; GraphiQL delegates routing to the transport from Run, the operation dropdown, and the keyboard shortcut. An operation whose type cannot be determined also requires POST. If POST is unavailable, these operations fail without sending.Pass
method: 'GET'to override automatic query selection for testing. GET encodes queries, operation names, variables, and extensions in the URL without a body; mutations still require POST. An override that discovery excludes fails without silently choosing another method.transport.setMethod?.('GET')changes the override for subsequent queries, andtransport.setMethod?.()restores automatic selection. PasssupportedMethods: ['POST']to preserve the previous POST-only default and skip OPTIONS, or usemethod: 'GET', supportedMethods: ['GET', 'POST']to test GET queries and POST mutations without discovery. If discovery fails with a configured GET override and no explicit capabilities, only GET is assumed available.For cross-origin discovery, the server must permit OPTIONS and expose
AllowthroughAccess-Control-Expose-Headers. This discovers methods only, not QUERY request formats throughAccept-Query, and does not retry operations with another method. Custom transports own routing and must prevent mutations over GET and QUERY. GraphiQL reads metadata from each response without subscribing to transport capability changes.Updated dependencies [
c4a62af]:@graphiql/toolkit@1.0.0-rc.1
Patch Changes
#4665
c4a62afThanks @trevor-scheer! - Discover HTTP methods automatically whencreateTransportis called withoutsupportedMethods. Previous RCs treated an omittedsupportedMethodsas['POST']and exposed a method chip and switcher in the top bar. The transport now sends an OPTIONS request without a body before its first HTTP operation, readsAllow, and automatically selects QUERY, then POST, then GET for queries. The top bar method controls are removed. The response pane instead shows the actual request method from the optionalTransportResponse.methodfield alongside timing and size, including for HTTP error responses and incremental chunks. WebSocket events and custom transports without this metadata omit the method.Discovery uses the effective request headers, is shared by concurrent requests, and runs again when headers change. If OPTIONS fails, times out after two seconds, or returns no usable
Allowheader, execution falls back to POST (or the configuredmethodoverride). A valid advertisement containing no usable methods blocks HTTP execution. Mutations always require POST; GraphiQL delegates routing to the transport from Run, the operation dropdown, and the keyboard shortcut. An operation whose type cannot be determined also requires POST. If POST is unavailable, these operations fail without sending.Pass
method: 'GET'to override automatic query selection for testing. GET encodes queries, operation names, variables, and extensions in the URL without a body; mutations still require POST. An override that discovery excludes fails without silently choosing another method.transport.setMethod?.('GET')changes the override for subsequent queries, andtransport.setMethod?.()restores automatic selection. PasssupportedMethods: ['POST']to preserve the previous POST-only default and skip OPTIONS, or usemethod: 'GET', supportedMethods: ['GET', 'POST']to test GET queries and POST mutations without discovery. If discovery fails with a configured GET override and no explicit capabilities, only GET is assumed available.For cross-origin discovery, the server must permit OPTIONS and expose
AllowthroughAccess-Control-Expose-Headers. This discovers methods only, not QUERY request formats throughAccept-Query, and does not retry operations with another method. Custom transports own routing and must prevent mutations over GET and QUERY. GraphiQL reads metadata from each response without subscribing to transport capability changes.