Merge branch 'main' into pickle-schema

Author: Cito

.bandit

@@ -0,0 +1,4 @@
+# unfortunately, flake8-bandit does not support pyproject.toml
+
+[bandit]
+exclude = /tests

.bumpversion.cfg

@@ -1,5 +1,5 @@
 [bumpversion]
-current_version = 3.2.1
+current_version = 3.3.0a1
 commit = False
 tag = False
 

.coveragerc

@@ -1,4 +1,7 @@
+# unfortunately, flake8 does not support pyproject.toml
+
 [flake8]
 ignore = E203,W503
 exclude = .git,.mypy_cache,.pytest_cache,.tox,.venv,__pycache__,build,dist,docs
 max-line-length = 88
+per-file-ignores = tests/*:B011

.flake8

@@ -7,10 +7,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
 
     - name: Set up Python 3.9
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: 3.9
 
@@ -22,4 +22,4 @@ jobs:
     - name: Run code quality tests with tox
       run: tox
       env:
-        TOXENV: black,flake8,mypy,docs,manifest
+        TOXENV: black,flake8,isort,mypy,docs

.github/workflows/lint.yml

@@ -10,18 +10,17 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
 
     - name: Set up Python 3.9
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v4
       with:
         python-version: 3.9
 
     - name: Build wheel and source tarball
       run: |
-        pip install wheel
-        python setup.py sdist bdist_wheel
-
+        pip install poetry
+        poetry build
     - name: Publish a Python distribution to PyPI
       uses: pypa/gh-action-pypi-publish@release/v1
       with:

.github/workflows/publish.yml

@@ -8,13 +8,13 @@ jobs:
 
     strategy:
       matrix:
-        python: ['3.6', '3.7', '3.8', '3.9', '3.10', 'pypy3']
+        python: ['3.7', '3.8', '3.9', '3.10', 'pypy3.9']
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v4
         with:
           python-version: ${{ matrix.python-version }}
 

.github/workflows/test.yml

@@ -8,17 +8,18 @@ a query language for APIs created by Facebook.
 [![Documentation Status](https://readthedocs.org/projects/graphql-core-3/badge/)](https://graphql-core-3.readthedocs.io)
 ![Test Status](https://github.com/graphql-python/graphql-core/actions/workflows/test.yml/badge.svg)
 ![Lint Status](https://github.com/graphql-python/graphql-core/actions/workflows/lint.yml/badge.svg)
-[![Dependency Updates](https://pyup.io/repos/github/graphql-python/graphql-core/shield.svg)](https://pyup.io/repos/github/graphql-python/graphql-core/)
-[![Python 3 Status](https://pyup.io/repos/github/graphql-python/graphql-core/python-3-shield.svg)](https://pyup.io/repos/github/graphql-python/graphql-core/)
 [![Code Style](https://img.shields.io/badge/code%20style-black-000000.svg)](https://github.com/ambv/black)
 
-The current version 3.2.1 of GraphQL-core is up-to-date with GraphQL.js version 16.3.0.
-
 An extensive test suite with over 2300 unit tests and 100% coverage comprises a
 replication of the complete test suite of GraphQL.js, making sure this port is
 reliable and compatible with GraphQL.js.
 
-Note that for various reasons, GraphQL-core does not use SemVer like GraphQL.js. Increases in the major version of GraphQL.js are reflected in the minor version of GraphQL-core instead. This means there can be breaking changes in the API when the minor version changes, and only patch releases are fully backward compatible. Therefore, we recommend something like `=~ 3.2.0` as version specifier when including GraphQL-core as a dependency.
+The current stable version 3.2.3 of GraphQL-core is up-to-date with GraphQL.js version 16.6.0.
+
+You can also try out the latest alpha version 3.3.0a1 of GraphQL-core that is up-to-date with GraphQL.js version 17.0.0a1.
+Please note that this new minor version of GraphQL-core does not support Python 3.7 anymore.
+
+Note that for various reasons, GraphQL-core does not use SemVer like GraphQL.js. Changes in the major version of GraphQL.js are reflected in the minor version of GraphQL-core instead. This means there can be breaking changes in the API when the minor version changes, and only patch releases are fully backward compatible. Therefore, we recommend something like `=~ 3.2.0` as version specifier when including GraphQL-core as a dependency.
 
 
 ## Documentation
@@ -50,10 +51,10 @@ GraphQL-core 3 can be installed from PyPI using the built-in pip command:
 
     python -m pip install graphql-core
 
-You can also use [pipenv](https://docs.pipenv.org/) for installation in a
+You can also use [poetry](https://github.com/python-poetry/poetry) for installation in a
 virtual environment:
 
-    pipenv install graphql-core
+    poetry install
 
 
 ## Usage

.mypy.ini

@@ -0,0 +1,16 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| >= 3.2  | :white_check_mark: |
+| < 3.2   | :x:                |
+
+## Reporting a Vulnerability
+
+You should report any vulnerabilities privately to [Cito](https://github.com/Cito) as the current maintainer of this repository, but note that he is working on the project voluntary in his spare time, so please be patient with him.
+
+Please do not use the public Issue tracker of this repository to disclose security related issues.
+
+Also, please keep in mind that this repository is actually a port of the [GraphQL.js](https://github.com/graphql/graphql-js). Issues that also affect upstream should be also reported there.

.pyup.yml

@@ -59,16 +59,16 @@
 # built documents.
 #
 # The short X.Y version.
-# version = '3.2'
+# version = '3.3'
 # The full version, including alpha/beta/rc tags.
-version = release = '3.2.1'
+version = release = '3.3.0a1'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
 #
 # This is also used if you do content translation via gettext catalogs.
 # Usually you set "language" from the command line for these cases.
-language = None
+language = 'en'
 
 # There are two options for replacing |today|: either, you set today to some
 # non-false value, then it is used:
@@ -134,6 +134,7 @@
 enum.Enum
 traceback
 types.TracebackType
+TypeMap
 EnterLeaveVisitor
 FormattedSourceLocation
 GraphQLAbstractType

MANIFEST.in

@@ -33,9 +33,9 @@ You can install GraphQL-core 3 using pip_::
 
     pip install graphql-core
 
-You can also install GraphQL-core 3 with pipenv_, if you prefer that::
+You can also install GraphQL-core 3 with poetry_, if you prefer that::
 
-    pipenv install graphql-core
+    poetry install
 
 Now you can start using GraphQL-core 3 by importing from the top-level
 :mod:`graphql` package. Nearly everything defined in the sub-packages
@@ -94,4 +94,4 @@ in the current development or want to report issues or send pull requests.
 .. _Execution: https://facebook.github.io/graphql/draft/#sec-Execution
 .. _Response: https://facebook.github.io/graphql/draft/#sec-Response
 .. _pip: https://pip.pypa.io/
-.. _pipenv: https://github.com/pypa/pipenv
+.. _poetry: https://github.com/python-poetry/poetry

README.md

@@ -18,10 +18,6 @@ Get the target Operation from a Document:
 
 .. autofunction:: get_operation_ast
 
-Get the Type for the target Operation AST:
-
-.. autofunction:: get_operation_root_type
-
 Convert a GraphQLSchema to an IntrospectionQuery:
 
 .. autofunction:: introspection_from_schema
@@ -98,11 +94,6 @@ Comparators for types:
 .. autofunction:: is_type_sub_type_of
 .. autofunction:: do_types_overlap
 
-Assert that a string is a valid GraphQL name:
-
-.. autofunction:: assert_valid_name
-.. autofunction:: is_valid_name_error
-
 Compare two GraphQLSchemas and detect breaking changes:
 
 .. autofunction:: find_breaking_changes

SECURITY.md

@@ -1,2 +1,2 @@
-sphinx>=4.3,<5
+sphinx>=5.1,<5.2
 sphinx_rtd_theme>=1,<2