A weekly newsletter of the best news, articles and projects about GraphQL

Hive Console now supports user and group provisioning via SCIM 🔐 Teams can now manage users, groups, and access directly from their existing identity provider, reducing the manual work involved in onboarding, role changes, and offboarding.

Hive Router now multiplexes subscriptions over shared, pooled WebSocket connections to subgraphs instead of opening one connection per subscription, and can optionally route queries and mutations over that same pool.

The Guild appreciates Michelle Song's work, for the thoughtful collaboration, ownership, and high-quality contributions. The entire contribution process was superb: she first opened an issue to discuss the scope and implementation with us, then split the work into several focused and easy-to-review pull requests.

Every GraphQL query is a subset, so the response type belongs to the operation, not the schema....

Built with C# and .NET, Fusion 16.5 is the only gateway supporting both federation standards, achieves 100% Apollo Federation compliance, and leads in real-world performance.

Generate GraphQL queries directly from decorated Zod schemas — no code generation, no duplicate types. Annotate your Zod schemas with GraphQL metadata (variables, arguments, aliases, fragments, and more) and let the library derive fully-formed queries at runtime, keeping your schema as the single source of truth. - mattiasahlsen/zodql

Watch traffic, error rate, and latency on any target and get paged in Slack, MS Teams, or a webhook the moment a threshold breaches.

Hive Router now emits a single structured summary per request, correlates every log line with a request ID and trace ID, and lets you filter or mute individual subsystems.

graphql-lean is a GraphQL formalization in Lean, based on the GraphQL September 2025 Edition.

A GraphQL executable document fingerprint hasher and API proxy to compare queries without formatting diffs, comments, variables and input values - romshark/gqlhash

GraphQL directives can now be applied to directive definitions themselves in Hot Chocolate 16.4, so you can finally deprecate a directive and attach metadata to your schema's own extension points.

Hive Router now masks subgraph errors by default, preventing internal details from leaking to clients while keeping the original errors in your logs and traces.

2.5 years of work are finally out! v2 is Houdini's biggest release in the almost 5 years! Rewrote the entire compiler from the ground up using #golang and #sqlite with incredible speed improvements.

It's here: GraphQL Codegen now supports graphql v17. The CLI, and all official plugins and presets. Just update, re-run Codegen, enjoy.

Hive adds `@oneOf` directive support added natively to Hive schema composition. No `@composeDirective` required!

When you put an MCP server in front of an existing API, the natural (lazy xd) first idea is to map every endpoint to a tool. That was my plan too. I recently started building an MCP server for the Open Collective GraphQL API, as part of my Open Source Europe explorations.

Apollo GraphOS Schema Proposals adds diff navigation, inline conflict resolution, clearer revisions, enriched webhooks, and Slack notifications. Built for how platform teams ship schema changes.

Hive Router can now forward the `extensions` returned by your subgraphs to the final client response, with control over which keys propagate and how values from multiple subgraphs are merged.

Constellation is a new open-source GraphQL engine written in Go. Constellation turns a relational database into a role-based GraphQL API, and it's designed to be a near drop-in replacement for Hasura Community Edition. It reads the same metadata, generates a Hasura-compatible schema, and serves the same query, mutation, and subscription surface, including remote schemas and cross-source relationships.

The open-source maintainers and contributors of GraphQL.js are excited to announce the availability of GraphQL.js v17!

Hive Router now protects your federated graph from expensive operations with cost-based demand control, enforcing per-operation and per-subgraph budgets before execution.

The new OpenAPI adapter for Hot Chocolate and Fusion turns GraphQL operations into REST endpoints with shared auth, telemetry, and Swagger docs. No second API.

Hive Console now supports schema version promotions and rollbacks through a new CLI command, enabling safer multi-environment workflows, fast production rollbacks, and improved visibility into subgraph-level changes.

Hot Chocolate 16 brings a new type system, better scalar contracts, safer defaults, improved batching, semantic introspection, and a new GraphQL error mode.

Discover Apollo Client 4.2's type-safe default options and event-based refetching. Eliminate type mismatches and automatically refetch on window focus.

Hive Router can now load the supergraph schema and the persisted documents manifest directly from Amazon S3 or any S3-compatible service (Cloudflare R2, MinIO, LocalStack, and more).

Unified API key management for GraphQL teams. Create, rotate, and revoke SCIM, subgraph, and operator keys in GraphOS Studio without disrupting workflows.

Viaduct is Airbnb’s open-source GraphQL framework, and this is a big milestone for the project.

Fusion 16 is a GraphQL federation gateway built on ASP.NET Core, featuring Aspire-driven composition, incremental delivery, Semantic Introspection, OpenAPI adapters, and connectors for REST and gRPC.

Rust-native composition for Apollo Federation is in preview: 27x faster at the median, unified codebase. Enable Federation Next in GraphOS Studio.

Andi Marek, creator of GraphQL Java, has launched feddi: the first JVM-native GraphQL federation platform — eliminating the foreign runtime problem for Java-centric enterprises. feddi Gateway is open source and implements the GraphQL federation specification. feddi CLI is AI-first — manage and automate your entire federation from the terminal or via agents.

Apollo Kotlin 5 is now available on Maven Central. GraphQL Golden Path ready, with a new normalized cache, agent skills support, and a modernized Gradle plugin.

The reference implementation of GraphQL v17 is available in beta

Coprocessors are now available in Hive Router - external HTTP services that can inspect, mutate, and short-circuit requests at multiple router and GraphQL lifecycle stages.

Pure typescript GraphQL for full stack development. A lightweight GraphQL toolkit for full-stack TypeScript projects.

After 6+ months of work, we’ve reimagined the fundamentals of client plugins, guided by real-world usage and community feedback. The result: - Less generated code → leaner output, less confusion - Better defaults → simpler setup out of the box - Revamped options → fewer, more focused choices Also included: - A clear Apollo Tooling migration path (thanks to Igor Kusakov 🙌) - ESM-first packages - An improved CLI experience …and more. If you’re using GraphQL Codegen today, this release is a meaningful step forward in both developer experience and maintainability. 👉 Announcement: https://lnkd.in/gbkEgsFX 📄 Release notes: https://lnkd.in/ggQar_Pj

Apollo Router v2.13 ships HTTP OTLP support for metrics and traces, enabling teams that can't use gRPC to send telemetry, plus security hardening for CSRF/XS-Search across all active release lines.

Hive Router has now the first-class TLS and mTLS support for both inbound and outbound connections, alongside end-to-end HTTP/2 with optional h2c for subgraph traffic.

Persisted documents in Hive Router with configurable ID selectors, file and Hive CDN storage, and allowlist enforcement options. This feature joins many other recent new features and improvements in Hive Router, including HTTP2 support, TLS support, GraphQL Subscriptions, OTEL Traces & Metrics, and many more!

Hive Router now supports federated GraphQL subscriptions with full protocol coverage - SSE, WebSockets, Multipart HTTP, Incremental Delivery, and HTTP Callback.

Hive Router now supports production-ready OpenTelemetry tracing and metrics, including OTLP export and Prometheus scraping.

Broken Object Level Authorization (BOLA) has been the #1 risk on the OWASP API Security Top 10 since the list was The post Your API Has Authorization Bugs. Hadrian Finds Them.

Query GraphQL usage with the Apollo GraphOS Platform API: point-in-time operation reports plus timeseries data for operations, subgraphs, and fields.

All of Hive's access tokens can now be expired automatically to enhance your security posture.

High-performance, multi-protocol mock server. HTTP, GraphQL, WebSocket, gRPC, MQTT, SSE, SOAP in one binary.