Gql

Latest version: v3.5.2

Safety actively analyzes 723158 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 7

3.5.1

Issue 529 reported that by default the `AIOHTTPTransport` was not validating ssl certificates
(a self-certificate was accepted by default).

This version adds a warning to warn users (See PR 533).

As a workaround, using `ssl=True` in the transport arguments fix the issue.

`graphql-core` has been restricted to `<3.2.4` to fix tests.

A new stable version will be made shortly.

3.5.0

**IMPORTANT**: graphql-core has been reverted to the stable versions 3.2.x
See 427
A new pre-release version will be made shortly with the graphql-core versions 3.3.x

New features

- Add execute-timeout argument for gql-cli (349)
- Add HTTPX transport (370)
- Don't try to close the aiohttp session if `connector_owner` is False (382)
- Feature allow to set the content-type of file uploads (386)
- Allow to configure the introspection query sent to recover the schema (402)
- Python 3.11 support (410)
- Make retry backoff and status codes customizable for the requests transport (421)
- Support batching queries using sync transports (431)
- Support automatic batching of sync requests coming from different threads (436)
- httpx transport now working with trio (455)
**new `anyio` dependency added**

Bug fixes

- Fix KeyError when errors is not iterable (359)
- Handle JSON response being `None` (365)
- Get response headers even with 4xx return code (367)
- `TransportQueryError` should extend `TransportError` (392)
- Fix sync subscribe graceful shutdown (395)
- Restrict urllib3 to versions 1.x (413)
This should fix the problems which appeared when requests version 2.30 bumped urllib3 to a 2.x version.
- DSLSchema transform type attribute assert into AttributeError (409)
- Fix typo response_headers in httpx transport (407)
- Allow alias on DSLMetaField (405)
- Fix parse_results with fragments (446)
- Fix missing empty directives in DSL nodes (448)

Documentation

- Add documentation on websockets level ping frames (345)
- Minor Spelling Mistake (351)
- Add phoenix channel transport example (354)
- DOC minor typo (396)

Misc

- Make `AsyncTransport` and `Transport` proper abstract base classes (350)
- Update graphql-core to 3.3.0 and dropping support for Python 3.6 (363)
- Update Sphinx dev dependency to 5.3.0 (371)
- Update aiohttp minimum dependency version to 3.8.0 (393)
- Bump websockets dependency to allow 11.x versions (424)
- Adjust aiohttp pin (425)
- Validate the argument of the gql function (435)
- Switch ubuntu-latest to ubuntu-20.04 to fix github actions
- Bump vcrpy and requests_toolbelt (440) : allows users to use urllib3 2.x versions
- Fix automatic documentation build on readthedocs.io:
readthedocs remove `system_packages: true` in config
- DOC explain how to install pre-releases versions
- Fix tests with Python 3.12 (442)
- Adding `node_tree` method in utilities to debug and compare `DocumentNode` instances (449)

3.5.0b9

Features

- httpx transport now working with trio (455)
**new `anyio` dependency added**

Misc

- Adding `node_tree` method in utilities to debug and compare `DocumentNode` instances (449)

3.5.0b8

Fixes

- Fix missing empty directives in DSL nodes (448)

3.5.0b7

Fixes

- Fix parse_results with fragments (446)

Misc

- Fix automatic documentation build on readthedocs.io:
readthedocs remove `system_packages: true` in config
- DOC explain how to install pre-releases versions
- Fix tests with Python 3.12 (442)

3.5.0b6

Features

- Support batching queries using sync transports (431)
- Support automatic batching of sync requests coming from different threads (436)

Misc

- Validate the argument of the gql function (435)

Maintenance

- Bump vcrpy and requests_toolbelt (440) : allows users to use urllib3 2.x versions

Page 2 of 7

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.