Upcoming Release Changes

[theguild-bot]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

hive@11.0.3

Patch Changes

• #7961
  40fd27d
  Thanks @n1ru4l! - Update
  nodemailer to address vulnerability
  GHSA-vvjj-xcjg-gr5g.

• #7967
  9708f71
  Thanks @n1ru4l! - Fix schema contract composition applying
  @inaccessible on the federation types ContextArgument and FieldValue on the supergraph SDL.

  This mitigates the following error in apollo-router upon processing the supergraph:

  could not create router: Api error(s): The supergraph schema failed to produce a valid API schema: The following errors occurred:
    - Core feature type `join__ContextArgument` cannot use @inaccessible.
    - Core feature type `join__FieldValue` cannot use @inaccessible.
  

• #7961
  40fd27d
  Thanks @n1ru4l! - Update
  opentelemetry-go to address vulnerability
  CVE-2026-39883.

[github-actions]

🚀 Snapshot Release (rc)

The latest changes of this PR are available as rc on npm (based on the declared changesets):

Package	Version	Info
hive	11.0.3-rc-20260412084513-20ad0ff479a1dad60dc3d1a1102328d7cae7853c	npm ↗︎ unpkg ↗︎

[gemini-code-assist]

Code Review

This pull request updates the hive package to version 11.0.3, including security patches for nodemailer and opentelemetry-go and a fix for @inaccessible federation types in schema contract composition. A redundant Cargo.lock entry was added to the .gitignore file and should be consolidated.

[gemini-code-assist]

This line adds a redundant Cargo.lock entry. The .gitignore file already contains numerous identical entries for Cargo.lock (lines 145-163). It is recommended to remove this addition and consolidate the existing duplicates into a single entry to maintain a clean configuration.

[github-actions]

🐋 This PR was built and pushed to the following Docker images:

Targets: build

Platforms: linux/amd64

Image Tag: 20ad0ff479a1dad60dc3d1a1102328d7cae7853c