Bump com.graphql-java:graphql-java from 23.1 to 24.0 in the prod-deps group

[dependabot]

Bumps the prod-deps group with 1 update: com.graphql-java:graphql-java.

Updates com.graphql-java:graphql-java from 23.1 to 24.0

Release notes

Sourced from com.graphql-java:graphql-java's releases.

24.0 is a breaking change

This release is an unexpected breaking change release. It was made to help propagate a fix in the DataLoader library

In DataLoader version 4.0.0 we introduced immutability into the DataLoaderOptions class, which was a good thing.

However it left the old mutative setXXX methods in place and made them immutable. This was a mistake. This leads to bugs at runtime for example

DataLoaderOptions options = DataLoaderOptions.newOptions();
if (maxBatchSize != BatchLoader.UNSET_BATCH_SIZE) {
  options.setMaxBatchSize(maxBatchSize);
}
return options.setCacheMap(cache);

The above code would continue to compile but the setMaxBatchSize() would never take affected at runtime with the immutable support.

So to help address this bug a DataLoader version 5.0.0 was released and it has removed the setXXX methods and requires the Builder methods to be used to ensure that code that relied on the old mutative methods now break at compile time and not at runtime.

In turn we have released this new version of graphql-java - we have designated it a breaking change because of this transitive DataLoader breaking change

We consider v23.x poisoned and we don't recommend you use it because of the latent bug above.

But the release notes of 23 are still relevant when you upgrade from 22: https://github.com/graphql-java/graphql-java/releases/tag/v23.0

Small performance fixes

There are also a set of small performance oriented fixes that have gone out in this release.

What's Changed

• 24.x Cherry pick JSpecify OSGI config by @​dondonz in graphql-java/graphql-java#3960
• 24.x Backport of avoid wrapping materialised value by @​dondonz in graphql-java/graphql-java#3962
• Upgrade to DataLoader 5.0.0 by @​dondonz in graphql-java/graphql-java#3961
• Cherry pick DataFetcherResult helpers by @​dondonz in graphql-java/graphql-java#3965
• Cherry pick PR 3942 To add singleton to factory method by @​dondonz in graphql-java/graphql-java#3968
• Cherry pick PR 3935 by @​dondonz in graphql-java/graphql-java#3969
• Cherry pick 3934 for execution step info builder changes by @​dondonz in graphql-java/graphql-java#3970
• Cherry pick 3932 to remove streams from FPKit by @​dondonz in graphql-java/graphql-java#3971
• Cherry pick 3931 imperative filters by @​dondonz in graphql-java/graphql-java#3972
• Cherry pick 3930 remove optional streams by @​dondonz in graphql-java/graphql-java#3973
• Cherry pick PR 3929 reduce nonnullablefieldvalidator allocations by @​dondonz in graphql-java/graphql-java#3974

Full Changelog: graphql-java/graphql-java@v23.1...v24.0

Commits

• cab5b9f Merge pull request #3974 from graphql-java/Cherry-pick-3929-dont-allocate-non...
• 861050a Merge pull request #3973 from graphql-java/Cherry-pick-3930-remove-optional-s...
• f8858ea Merge pull request #3972 from graphql-java/Cherry-pick-3931-imperative-filter...
• fbb0fd1 Cherry pick PR 3929 reduce nonnullablefieldvalidator allocations
• 697298e Cherry pick 3930 remove optional streams
• 306c66a Merge pull request #3971 from graphql-java/Cherry-pick-3932-remove-streams-fr...
• 53a5215 Merge pull request #3970 from graphql-java/Cherry-pick-3934-execution-step-in...
• fb68283 Cherry pick 3931 imperative filters
• e20dad9 Merge pull request #3969 from graphql-java/Cherry-pick-3935-skip-builder-on-esp
• 5676eb9 Merge pull request #3968 from graphql-java/Cherry-pick-3942-fix-singleton-to-...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud