A weekly newsletter of the best news, articles and projects about GraphQL

Viaduct is Airbnb’s open-source GraphQL framework, and this is a big milestone for the project.

Fusion 16 is a GraphQL federation gateway built on ASP.NET Core, featuring Aspire-driven composition, incremental delivery, Semantic Introspection, OpenAPI adapters, and connectors for REST and gRPC.

Rust-native composition for Apollo Federation is in preview: 27x faster at the median, unified codebase. Enable Federation Next in GraphOS Studio.

Andi Marek, creator of GraphQL Java, has launched feddi: the first JVM-native GraphQL federation platform — eliminating the foreign runtime problem for Java-centric enterprises. feddi Gateway is open source and implements the GraphQL federation specification. feddi CLI is AI-first — manage and automate your entire federation from the terminal or via agents.

Apollo Kotlin 5 is now available on Maven Central. GraphQL Golden Path ready, with a new normalized cache, agent skills support, and a modernized Gradle plugin.

The reference implementation of GraphQL v17 is available in beta

Coprocessors are now available in Hive Router - external HTTP services that can inspect, mutate, and short-circuit requests at multiple router and GraphQL lifecycle stages.

Pure typescript GraphQL for full stack development. A lightweight GraphQL toolkit for full-stack TypeScript projects.

After 6+ months of work, we’ve reimagined the fundamentals of client plugins, guided by real-world usage and community feedback. The result: - Less generated code → leaner output, less confusion - Better defaults → simpler setup out of the box - Revamped options → fewer, more focused choices Also included: - A clear Apollo Tooling migration path (thanks to Igor Kusakov 🙌) - ESM-first packages - An improved CLI experience …and more. If you’re using GraphQL Codegen today, this release is a meaningful step forward in both developer experience and maintainability. 👉 Announcement: https://lnkd.in/gbkEgsFX 📄 Release notes: https://lnkd.in/ggQar_Pj

Apollo Router v2.13 ships HTTP OTLP support for metrics and traces, enabling teams that can't use gRPC to send telemetry, plus security hardening for CSRF/XS-Search across all active release lines.

Hive Router has now the first-class TLS and mTLS support for both inbound and outbound connections, alongside end-to-end HTTP/2 with optional h2c for subgraph traffic.

Persisted documents in Hive Router with configurable ID selectors, file and Hive CDN storage, and allowlist enforcement options. This feature joins many other recent new features and improvements in Hive Router, including HTTP2 support, TLS support, GraphQL Subscriptions, OTEL Traces & Metrics, and many more!

Hive Router now supports federated GraphQL subscriptions with full protocol coverage - SSE, WebSockets, Multipart HTTP, Incremental Delivery, and HTTP Callback.

Hive Router now supports production-ready OpenTelemetry tracing and metrics, including OTLP export and Prometheus scraping.

Broken Object Level Authorization (BOLA) has been the #1 risk on the OWASP API Security Top 10 since the list was The post Your API Has Authorization Bugs. Hadrian Finds Them.

Query GraphQL usage with the Apollo GraphOS Platform API: point-in-time operation reports plus timeseries data for operations, subgraphs, and fields.

All of Hive's access tokens can now be expired automatically to enhance your security posture.

High-performance, multi-protocol mock server. HTTP, GraphQL, WebSocket, gRPC, MQTT, SSE, SOAP in one binary.

Ship an app and its GraphQL operations stick around for months while your schema keeps evolving. Now GA after two years of testing, App Deployments combine persisted documents, per-version observability, and conditional breaking change detection.

Apollo shipped a ground-up rewrite of its Kotlin cache with Relay-style pagination, TTL expiration at the type and field level, partial cache results, and garbage collection built in.

Hive Router v0.0.40 ships a native Rust plugin system. Implement the RouterPlugin trait, and get hooks across the full request lifecycle: add new features, modify existing behavior, or integrate with external services with full performance and safety of Rust.

It's like a BFF, but it's a BF to your agents. You get a TypeScript runtime, a discoverable tool catalog, and a single local place to connect external MCP servers, OpenAPI APIs, and GraphQL APIs.

Intigriti introduced GraphQL Cop to automate checks for introspection, alias overloading, field duplication, and DoS attacks with ready-to-run cURL examples. As GraphQL adoption surges, the utility will be a huge time-saver for security teams and developers hardening APIs.

GraphQL Armor, Escape's open-source project with The Guild, keeps climbing fast enough to surprise even Escape's CTO. You're likely using it already. Escape is hiring for those ready to don the white hat.

Apart from the embedded GraphQL & CSS linting, the new Biome release includes Vue/Svelte/Astro improvements, editor inline config, rule profiler and the configuration discovery.

A GraphQL Implementation in R was released in v0.1.0 with GraphiQL interactive IDE support, verbose error messages for easier debugging, improved mutation execution validation, and removed pryr dependency.

GraphQL Workbench is a new VS Code extension for schema design with built-in AI, from the creator of Apollo Workbench. It runs entirely local and free using Ollama and OSS models, featuring natural language operation generation, local vector storage via PGLite, federation support, schema linting, and AI-powered design analysis. It can embed even massive schemas (GitHub's 8000+ types in ~2 minutes)

Cosmo Streams adds three router handlers to enable subscription authorization, initial state delivery, and per-subscriber event filtering without building custom infrastructure.

You can now configure a distributed cache (Redis, Memcached, etc.) as a L2 cache for persisted documents, sitting between the in-memory LRU cache and the CDN. This reduces CDN calls, shares cache state across instances, improves performance and resilience in serverless and multi-instance deployments.

The GraphQL Codegen team is working on a new major version and they're looking for community feedback. If you're using Codegen in production, this is your chance to shape the future of the tool.

Migrating from legacy Apollo hooks to the client preset? The Codegen team has released a codemod that automates the tedious parts of the migration, saving you hours of manual refactoring.

Schema Proposals is a new Hive feature that brings pull request-style reviews to your GraphQL schema changes. Collaborate on schema design before committing to production.