[dependabot]

Bumps github.com/vektah/gqlparser/v2 from 2.5.62 to 2.5.63.

Release notes

Sourced from github.com/vektah/gqlparser/v2's releases.

v2.5.63

Changelog

• 0ffc5c674208302cbefd3f3cf46f98c1589ff0ab build(deps): bump the actions-deps group (#497)
• 993d81b3d06c35a2394f6ccc65589fe09e8ea8e1 validator: accept integer JSON numbers for ID variables (#496)
• 591ef29145dde8eb55268d848756c77c66df2825 validator: reject repeated arguments on SDL directives (#494)
• c54aeb736c13a956d716b70f4488a302ba499381 validator: reject repeated input fields in schema values (#495)
• d4ae1da86b71c33dabf15cbb64fed3539752f764 validator: reject repeated root operation types (#493)
• 1116cbb06dc14a00da9e0daeb696819fa426c03a validator: require root operation types to be object types (#498)

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.63' \
  checksums.txt
2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt
3. GitHub build provenance.
gh attestation verify gqlparser_2.5.63_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.63_source.tar.gz.sbom.json (SPDX-2.3).

---

Released by GoReleaser.

Commits

• 1116cbb validator: require root operation types to be object types (#498)
• 993d81b validator: accept integer JSON numbers for ID variables (#496)
• c54aeb7 validator: reject repeated input fields in schema values (#495)
• 591ef29 validator: reject repeated arguments on SDL directives (#494)
• 0ffc5c6 build(deps): bump the actions-deps group (#497)
• d4ae1da validator: reject repeated root operation types (#493)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)