diff --git a/.changeset/five-hounds-know.md b/.changeset/five-hounds-know.md deleted file mode 100644 index 4a9c5777095..00000000000 --- a/.changeset/five-hounds-know.md +++ /dev/null @@ -1,30 +0,0 @@ ---- -'hive': minor ---- - -Added opt-in AWS IAM authentication for ElastiCache Redis connections and Redis Cluster mode -support. When IAM is enabled, services authenticate to Redis using short-lived SigV4 pre-signed -tokens instead of static passwords, with automatic token refresh before expiry. - -### New environment variables - -| Variable | Service | Description | -| ---------------------------- | ---------------------------------------- | ----------------------------------------------------------------------------- | -| `AWS_REGION` | schema, server, tokens, usage, workflows | Default AWS region for all AWS connections. | -| `REDIS_AWS_IAM_AUTH_ENABLED` | schema, server, tokens, usage, workflows | Set to `1` to enable IAM authentication for Redis. | -| `REDIS_AWS_IAM_CACHE_NAME` | schema, server, tokens, usage, workflows | The ElastiCache Redis cache instance name. Used as the host for the signer. | -| `REDIS_AWS_REGION` | schema, server, tokens, usage, workflows | Optional override for the Redis region (defaults to `AWS_REGION`). | -| `REDIS_CLUSTER_MODE_ENABLED` | schema, server, tokens, usage, workflows | Set to `1` to connect using Redis Cluster mode. | -| `REDIS_USERNAME` | schema, server, tokens, usage, workflows | Optional Redis username for ACL-based authentication (defaults to `default`). | - -### To enable - -- `REDIS_AWS_IAM_AUTH_ENABLED=1` -- `REDIS_TLS_ENABLED=1` must be set (IAM authentication requires TLS). -- `REDIS_AWS_REGION` or `AWS_REGION` must be set. -- `REDIS_AWS_IAM_CACHE_NAME` set to the name of the cache instance in AWS. This will be used as the hostname for the signer. -- The pod/instance must have AWS credentials available (e.g. IRSA, EKS Pod Identity, instance - profile) with the appropriate ElastiCache IAM permissions. - -### Other changes -- Bumping ioredis to `5.10.1`. diff --git a/.changeset/grumpy-moments-repair.md b/.changeset/grumpy-moments-repair.md deleted file mode 100644 index 42bef34c2d5..00000000000 --- a/.changeset/grumpy-moments-repair.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'hive': patch ---- - -Maintain scroll position on target explorer page when navigating back from another page diff --git a/.changeset/ninety-apes-sneeze.md b/.changeset/ninety-apes-sneeze.md deleted file mode 100644 index 008bc482b37..00000000000 --- a/.changeset/ninety-apes-sneeze.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -'hive': minor ---- - -Introduce a new configuration option for selecting individual dangerous change types to consider breaking. -This is useful because dangerous changes can be situational based on a team's accepted risk and deployment process. \ No newline at end of file diff --git a/.changeset/vast-sides-wave.md b/.changeset/vast-sides-wave.md deleted file mode 100644 index b925d2bb394..00000000000 --- a/.changeset/vast-sides-wave.md +++ /dev/null @@ -1,7 +0,0 @@ ---- -'@graphql-hive/yoga': patch ---- - -Use original operation document when usage reporting - -Some envelop plugins (like extended-validation) mutate documents in place and can therefore cause the document to be different AFTER execution than the one that was used FOR execution. To avoid this rugpull, we create a new stable document operation (object) for usage reporting. diff --git a/deployment/CHANGELOG.md b/deployment/CHANGELOG.md index 2e04c5df6c5..3554a9c078e 100644 --- a/deployment/CHANGELOG.md +++ b/deployment/CHANGELOG.md @@ -1,5 +1,54 @@ # hive +## 11.4.0 + +### Minor Changes + +- [#8078](https://github.com/graphql-hive/console/pull/8078) + [`bd6cce7`](https://github.com/graphql-hive/console/commit/bd6cce70b253deb676300e5e4ba063a6307e37cb) + Thanks [@mish-elle](https://github.com/mish-elle)! - Added opt-in AWS IAM authentication for + ElastiCache Redis connections and Redis Cluster mode support. When IAM is enabled, services + authenticate to Redis using short-lived SigV4 pre-signed tokens instead of static passwords, with + automatic token refresh before expiry. + + ### New environment variables + + | Variable | Service | Description | + | ---------------------------- | ---------------------------------------- | ----------------------------------------------------------------------------- | + | `AWS_REGION` | schema, server, tokens, usage, workflows | Default AWS region for all AWS connections. | + | `REDIS_AWS_IAM_AUTH_ENABLED` | schema, server, tokens, usage, workflows | Set to `1` to enable IAM authentication for Redis. | + | `REDIS_AWS_IAM_CACHE_NAME` | schema, server, tokens, usage, workflows | The ElastiCache Redis cache instance name. Used as the host for the signer. | + | `REDIS_AWS_REGION` | schema, server, tokens, usage, workflows | Optional override for the Redis region (defaults to `AWS_REGION`). | + | `REDIS_CLUSTER_MODE_ENABLED` | schema, server, tokens, usage, workflows | Set to `1` to connect using Redis Cluster mode. | + | `REDIS_USERNAME` | schema, server, tokens, usage, workflows | Optional Redis username for ACL-based authentication (defaults to `default`). | + + ### To enable + + - `REDIS_AWS_IAM_AUTH_ENABLED=1` + - `REDIS_TLS_ENABLED=1` must be set (IAM authentication requires TLS). + - `REDIS_AWS_REGION` or `AWS_REGION` must be set. + - `REDIS_AWS_IAM_CACHE_NAME` set to the name of the cache instance in AWS. This will be used as + the hostname for the signer. + - The pod/instance must have AWS credentials available (e.g. IRSA, EKS Pod Identity, instance + profile) with the appropriate ElastiCache IAM permissions. + + ### Other changes + + - Bumping ioredis to `5.10.1`. + +- [#8175](https://github.com/graphql-hive/console/pull/8175) + [`dc800a8`](https://github.com/graphql-hive/console/commit/dc800a8a3e4c1ad7816ccd961090e2f1d38cd532) + Thanks [@jdolle](https://github.com/jdolle)! - Introduce a new configuration option for selecting + individual dangerous change types to consider breaking. This is useful because dangerous changes + can be situational based on a team's accepted risk and deployment process. + +### Patch Changes + +- [#8183](https://github.com/graphql-hive/console/pull/8183) + [`42c9d81`](https://github.com/graphql-hive/console/commit/42c9d818e8b12287cfc687ce8b2691d39103c164) + Thanks [@jdolle](https://github.com/jdolle)! - Maintain scroll position on target explorer page + when navigating back from another page + ## 11.3.0 ### Minor Changes diff --git a/deployment/package.json b/deployment/package.json index 82a945fcab3..d76ed6e52d6 100644 --- a/deployment/package.json +++ b/deployment/package.json @@ -1,6 +1,6 @@ { "name": "hive", - "version": "11.3.0", + "version": "11.4.0", "private": true, "scripts": { "generate": "tsx generate.ts", diff --git a/packages/libraries/yoga/CHANGELOG.md b/packages/libraries/yoga/CHANGELOG.md index 10a45a1d939..ea3e52a1463 100644 --- a/packages/libraries/yoga/CHANGELOG.md +++ b/packages/libraries/yoga/CHANGELOG.md @@ -1,5 +1,18 @@ # @graphql-hive/yoga +## 0.48.2 + +### Patch Changes + +- [#8189](https://github.com/graphql-hive/console/pull/8189) + [`edda043`](https://github.com/graphql-hive/console/commit/edda043e8aa60f852228cac9a83ea3a746f58917) + Thanks [@enisdenjo](https://github.com/enisdenjo)! - Use original operation document when usage + reporting + + Some envelop plugins (like extended-validation) mutate documents in place and can therefore cause + the document to be different AFTER execution than the one that was used FOR execution. To avoid + this rugpull, we create a new stable document operation (object) for usage reporting. + ## 0.48.1 ### Patch Changes diff --git a/packages/libraries/yoga/package.json b/packages/libraries/yoga/package.json index 14ea3bdce32..9c81d1427f0 100644 --- a/packages/libraries/yoga/package.json +++ b/packages/libraries/yoga/package.json @@ -1,6 +1,6 @@ { "name": "@graphql-hive/yoga", - "version": "0.48.1", + "version": "0.48.2", "type": "module", "description": "GraphQL Hive + GraphQL Yoga", "repository": { diff --git a/packages/libraries/yoga/src/version.ts b/packages/libraries/yoga/src/version.ts index f5b9d6c7c0b..a956b21f33c 100644 --- a/packages/libraries/yoga/src/version.ts +++ b/packages/libraries/yoga/src/version.ts @@ -1 +1 @@ -export const version = '0.48.1'; +export const version = '0.48.2';