A weekly newsletter of the best news, articles and projects about GraphQL

Learn how organizations leverage federation for team autonomy, centralized governance, and API scalability. Gartner predicts 30% enterprise adoption by 2027 - discover why this architecture is becoming crucial for modern API landscapes.

Explore how compiler techniques can enhance GraphQL deployments in production. Learn to build a powerful Intermediate Representation (IR) for GraphQL queries and schemas that simplifies client development, improves telemetry, and optimizes network performance.

Learn strategies for future-proofing your developer experience as technology evolves and workflows transform.

Why does GraphQL's type system clash with type-safe languages? Dive into the unexpected challenges and solutions when building type-safe GraphQL clients, featuring insights from Apollo's iOS implementation.

Learn how to reverse-engineer a “dream query” into a scalable GraphQL schema. This workshop highlights the importance of demand-driven schema design for querying only the data you need.

Learn why implementing GraphQL security is crucial. We’ll discuss critical vulnerabilities found in popular software, including CVE-2021-41248 in GraphiQL, CVE-2023-38503 in Directus, and CVE-2023-34047 in Spring for GraphQL. We'll also cover the top 10 GraphQL security checks, such as disabling introspection in production and robust authentication, and explore how to automate these security measures in your code and CI/CD processes.

Discover how to evolve a GraphQL schema without painting yourself into a corner. In this session, attendees will learn lessons from developing Compass, including guidelines for maintaining consistent APIs and ensuring backwards compatibility. The discussion will cover processes for alignment and how they integrate with the GraphQL Gateway, which exposes a federated schema across Atlassian's diverse services.

Matt DeBergalis, CTO and Co-Founder of ApolloGraphQL, delivered a powerful keynote highlighting why GraphQL is now the most important new API technology in the enterprise. Drawing on insights from industry reports and customer case studies, Matt makes the case for why more than 60% of enterprises will use GraphQL in production by 2027 - and why that estimate might be low.

GraphQL is in the House of Representatives! Andrew Doyle told us about how the US House of Reps. uses GraphQL to modernize and orchestrate legacy systems - this fascinating talk also illustrates how one of the most important document management systems in the world functions:

@defer and @stream directives enable applications to render incrementally & efficiently in an ergonomic way. RFC champion @rob_richard shared the latest on incremental delivery

Check out this exciting keynote from Apollo GraphQL Summit 2024! Discover the latest innovations and see how industry leaders like CVS Health and their partner MongoDB are unlocking enterprise value for intelligent applications and APIs.

Discover the experience of Bol.com in adopting GraphQL, where the team tackled the challenge of implementing federated GraphQL in a distributed microservices landscape with over 800 engineers primarily focused on REST. This journey involved not just technical hurdles, but also shifting work practices, building expertise, and nurturing a strong GraphQL community among engineers and product teams. They will share valuable lessons learned and insights to help others navigate their own GraphQL adoption journey at scale.

Join Hasura for a workshop on preparing robust data foundations for AI technologies like LLMs. Learn how to consolidate data and business logic under one interface using GraphQL (or SQL) and implement consistent authorization for secure AI applications. Discover how to create powerful data connectivity to meet the demands of advanced AI.

Atlassian built the first ever distributed GraphQL gateway in 2018 and continues to run and improve until today. We will look at the lessons learned and challenges including: - Schema governance - Company adoption - Running a high availability gateway - Things that didn't work out

n this lightning talk, Vincent Desmares will share insights on how GraphQL has drastically reduced the "time-to-be-operational," transforming teams into productive powerhouses. Attendees can expect to learn best practices in coding, design patterns, documentation, and processes to ensure their next GraphQL project is a breeze for new team members. Don’t miss out!

a dynamic presentation that reveals how Technical Writers and DevEx teams can supercharge developer experience with interactive documentation. Say goodbye to dry schemas and hello to actionable insights! Discover why developers crave more than just a schema—they want guidance on building products. We’ll dive into the essence of interactivity, showcasing tools like embedded code samples tied to sandbox environments. Walk away with practical strategies to create engaging GraphQL documentation and elevate your developer ecosystem. Don’t miss this chance to transform the way you document GraphQL!

In this talk, Sabrina discusses how Meta has developed client-side pagination frameworks on top of the Relay GraphQL connection specification to make paginating with GraphQL-backed data simpler for product engineers. Specifically, she will cover: - Cursor-based pagination + the Relay GraphQL Connection specification - Generating pagination queries for a given Connection field - Client-side Connection field state management - How Meta integrates their pagination frameworks with their UI frameworks.

WebAssembly is reshaping our approach to software execution units and components. With its ecosystem maturing--the ability to deploy with multiple cloud providers, the standardization of WebAssembly Components, and the rise of WASI--its potential is fast becoming a reality. WebAssembly is especially suitable for running server-side code at the edge, where resource constraints and security concerns are paramount. To realize the full potential of running API servers at the edge--lowered latency, reduced costs, and improved scalability--we must rethink our approach to building and deploying servers. GraphQL is particularly well-suited for edge deployments. It not only reduces the number of trips between the client and the server but also allows implementations to optimize the whole query to reduce round trips to the data server. In this session, we will explore how to target a Rust implementation of GraphQL server to WebAssembly. We'll also look into how this fits within the WebAssembly ecosystem and how you can run these servers even in your browser.

Discover how GraphQL and composite schemas are transforming blockchain data access and management. This talk will highlight innovative techniques that standardize and streamline blockchain data retrieval, making it more accessible and efficient for developers. Explore the future of blockchain data management and how these advancements are setting new industry standards in web3.

At MOIA we're working on a new approach to mobility using ride-pooling with autonomous vehicles. Running an autonomous fleet of vehicles requires access to real-time and low-latency telematic data. This data needs to be made accessible to our users on a fleet map to always have a detailed overview of the current fleet state. Using only queries and polling we quickly ran into scalability issues and had to rethink our approach. Therefore we went to the drawing board and designed and built a serverless architecture on top of AWS and GraphQL over WebSocket to support our stream-aligned teams in building serverless subscriptions in a microservice environment. Watch a replay of our journey enabling other teams to effortlessly push updates to their users using a shared subscription gateway.

Ever had to explain to the frontend team why their application is no longer working after a release? This session will show you what you can do to never let this happen again, ever! We will start by analysing why it is so easy to do a breaking change in a GraphQL API, what this even means and how to prevent it. Then, we will explore the issues that come once a client application uses your GraphQL API, learn effective ways to prevent the issues from happening and how to apply it in real world complexities. Learn to build resilient GraphQL APIs - today.

The GraphQL ecosystem is vast, composed of tools and libraries in many programming languages, people and organizations from across the globe, and a plethora of maintainers, contributors and developers pulling them together. The primary mission of the GraphQL Foundation is to ensure that the GraphQL community is able to focus on the continued evolution of the specification, the shared contract that competitors and collaborators alike implement to enable maximal interoperability. This talk is to thank YOU, the GraphQL community, and highlight some of the heroes that have arisen to heed this call. Find out about their efforts over the last year improving our shared specifications, implementations, documentation, tooling, tests, and websites; about how you can get involved and help shape GraphQL to fit your organization's needs; about the support we have available; and about other community initiatives you may wish to avail yourself of.

At Expedia Group, we leverage a "code-first" approach with GraphQL Kotlin to deliver high quality experiences to travelers globally. This means we let our implementations drive our GraphQL schema. However, our developers have a growing appetite to agree on our schema up front before diving into implementation. This talk will explore how we shifted our architecture to use a schema-first approach within a code-first framework. Overall, I aim to dispel the notion that using a code-first solution prevents us from defining schema as a first step. I will explore the advantages of doing schema review at scale, as well as highlight an open source GraphQL-Codegen plugin we built to generate Kotlin classes and interfaces from our schema definitions. I am eager to contribute to the conversation around schema-first vs code-first, which has been the topic of several GraphQLConf talks over the past few years. This approach brings a fresh perspective and should inspire folks to incorporate a schema-first mentality into their GraphQL development cycle.

Pinterest is too large to simply “rewrite our app” to use GraphQL in one fell swoop. Even migrating an individual screen takes months, at our scale this is quite challenging, like changing a plane’s engine while flying. Is GraphQL adoption destined to be difficult for large companies? Can this process be made more incremental? Unfortunately, the answer seems to be no. It's hard to imagine how components consuming GraphQL data can coexist on a page that makes network requests to a REST endpoint. And yet, we figured it out. And we had a good time, too! We designed Relay-compatible APIs that allow us to read data either from a GraphQL store or from arbitrary objects (e.g. from Redux.) So, engineers can migrate individual components within a larger tree. These components specify the data they need using a fragment, and receive GraphQL-shaped data, regardless of whether the data came from GraphQL or REST. When a component tree is fully migrated, we're able to A/B test the REST and GraphQL endpoints, and only turn on GraphQL when we're sure doing so won't degrade any metrics. And we're about to release this to open source: adopting GraphQL on the front-end has never been easier!

Building scalable and maintainable APIs becomes increasingly important as businesses expand and applications grow in complexity. GraphQL has emerged as a powerful tool for building flexible and efficient APIs. However, managing a monolithic GraphQL API can become challenging as your applications and teams grow. Michael Staib will explore the benefits of building distributed GraphQL APIs in this talk. He covers the basics of GraphQL federation and how it allows you to break up your GraphQL schema into smaller, more manageable pieces. He'll also dive into some of the challenges of building distributed GraphQL APIs, such as schema stitching and resolver conflicts, and explore some of the best practices for overcoming them.

If you couldn't make it to London earlier this week and attend the meetup in person, don't worry as the recording is already available for you to watch on Youtube.

The Escape team and The Guild organized a joint webinar on how to secure your GraphQL API. If you missed the webinar, but are interested in the topic, the recording is now available on Youtube.

Theo - t3.gg on how gql.tada makes him miss GraphQL and how it existing earlier might have changed how things turned for him.

If the gql.tada documentation above isn't enough to get you interested, maybe this 3-minute video by Jamie Barton can. He shows you how to get started and take advantage of the improvements this new library offers.

In this video, Roy discusses the question of whether GraphQL is still a valid choice for developers now that React Server Components have been introduced in Next.js 14. Also, we'll discuss how tRPC would be useful for modern web developers.

There is an old debate about which API protocols are better. OpenAPI, GraphQL, gRPC and others. In this talk I'll demonstrate why you don't need to choose one. You can achieve complete interoperability between any protocol and use the best feature of each for the right task in the right runtime environment (even only on the client...)

Leonardo was invited to present Gato GraphQL at WordCamp Malaysia a couple weeks ago. The video from his interesting talk is now available for you to watch.