Bump graphql from 2.3.22 to 2.5.18

[dependabot]

Bumps graphql from 2.3.22 to 2.5.18.

Changelog

Sourced from graphql's changelog.

2.5.18 (22 Jan 2026)

• GraphQL::Dashboard: properly require action_controller before using it #5510
• GraphQL::Dashboard: don't use config.asset_host for Dashboard assets since they're handled by the dashboard itself #5511

2.5.17 (21 Jan 2026)

Bug fixes

• GraphQL::Dashboard: fix routes compatibility with Devise #5505
• GraphQL::Dashboard: fix HTML/erb lint issues #5497
• Parser: improve check for invalid number followed by name #5492 #5492
• GraphQL::Field: optimize boot memory by removing Field.from_options #5495
• field, argument: improve API documentation for DSL methods #5491

2.5.16 (10 Dec 2025)

Bug fixes

• fiber-storage: properly include dependency on Ruby < 3.2 #5484
• Fix typo in legacy_invalid_empty_selections_on_union_with_type warning #5481

2.5.15 (9 Dec 2025)

New features

• DetailedTrace: add separate spans for debug-only .inspect calls, support debug: false config #5477
• required: validator: Raise a developer error when all one_of: options are hidden, support allow_all_hidden: true to allow this case #5474
• GraphQL::Testing::MockActionCable: added to support testing ActionCableSubscriptions #5482
• legacy_invalid_empty_selections_on_union_with_type: new method added for better metadata about legacy behavior #5480

Bug fixes

• Fix typo in date encoding error #5447
• Fix schema printer bug #5468
• Ensure data exists for execution errors #5452
• Improve SDL directive argument coercion #5469
• Don't require fiber-storage on Ruby 3.2+ #5456
• Visibility: default to preload: true when Rails.env.staging? #5409

2.5.14 (8 Oct 2025)

Bug fixes

• Fix error when GraphQL-Batch is used (???) #5444

2.5.13 (22 Sep 2025)

New features

... (truncated)

Commits

• 398efef 2.5.18
• c81aa29 Merge pull request #5511 from rmosolgo/skip-asset-pipeline
• 179a4e1 Fix system tests now that config.asset_host is set
• 424a775 Merge pull request #5513 from duffuniverse/fix-docs-link-in-relay-subscriptio...
• 4c5da18 Merge pull request #5510 from rafaelfranca/patch-1
• 4150c5f Update internal link for compressed payloads section
• 74c58f6 Don't use config.asset_host for GraphQL::Dashboard assets
• e7e2e12 Require action_controller before using it
• 53260f8 2.5.17
• 8298e97 Merge pull request #5505 from rmosolgo/fix-engine-routes
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Docker image tag(s) pushed:

ghcr.io/conradwt/zero-to-graphql-using-ruby:gha-21658443227
ghcr.io/conradwt/zero-to-graphql-using-ruby:pr-345 

Labels added to images:

org.opencontainers.image.created=2026-02-04T04:27:47.859Z
org.opencontainers.image.description=The purpose of this example is to provide details as to how one would go about using GraphQL with the Ruby Language.
org.opencontainers.image.licenses=MIT
org.opencontainers.image.revision=c6e26d98e5cbf01068ef02b05336d2e6e8fa6c55
org.opencontainers.image.source=https://github.com/conradwt/zero-to-graphql-using-ruby
org.opencontainers.image.title=zero-to-graphql-using-ruby
org.opencontainers.image.url=https://github.com/conradwt/zero-to-graphql-using-ruby
org.opencontainers.image.version=gha-21658443227

[dependabot]

Superseded by #354.