Merge branch 'main' of github.com:graphql-hive/console into feat/lab-settings

Author: mskorokhodov

.changeset/bright-buses-say.md

@@ -0,0 +1,6 @@
+---
+'hive': patch
+---
+
+Update [`nodemailer`](https://github.com/nodemailer/nodemailer) to address vulnerability
+[GHSA-vvjj-xcjg-gr5g](https://github.com/advisories/GHSA-vvjj-xcjg-gr5g).

.changeset/curly-pumas-carry.md

@@ -0,0 +1,5 @@
+---
+'hive': patch
+---
+
+address vulnerability [GHSA-r4q5-vmmm-2653](https://github.com/advisories/GHSA-r4q5-vmmm-2653)

.changeset/deep-lies-happen.md

@@ -0,0 +1,13 @@
+---
+'hive': patch
+---
+
+Fix schema contract composition applying `@inaccessible` on the federation types `ContextArgument` and `FieldValue` on the supergraph SDL.
+
+This mitigates the following error in apollo-router upon processing the supergraph:
+
+```
+could not create router: Api error(s): The supergraph schema failed to produce a valid API schema: The following errors occurred:
+  - Core feature type `join__ContextArgument` cannot use @inaccessible.
+  - Core feature type `join__FieldValue` cannot use @inaccessible.
+```

.changeset/stale-cooks-talk.md

@@ -0,0 +1,6 @@
+---
+'hive': patch
+---
+
+Update [`opentelemetry-go`](https://github.com/open-telemetry/opentelemetry-go) to address vulnerability
+[CVE-2026-39883](https://github.com/advisories/GHSA-hfvc-g4fc-pqhx).

.github/workflows/apollo-router-updater.yaml

@@ -29,7 +29,7 @@ jobs:
       - name: Install Rust
         uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # v1
         with:
-          toolchain: '1.91.1'
+          toolchain: '1.94.1'
           default: true
           override: true
 

.github/workflows/build-and-dockerize.yaml

@@ -45,6 +45,9 @@ jobs:
             suffix: '-arm64'
     runs-on: ${{ matrix.builder }}
     name: dockerize (${{ matrix.platform }})
+    env:
+      SENTRY_ORG: the-guild-z4
+      SENTRY_PROJECT: graphql-hive
     permissions:
       contents: read
       packages: write
@@ -66,6 +69,8 @@ jobs:
         run: pnpm build
         env:
           NODE_OPTIONS: '--max-old-space-size=14336' # GitHub Actions gives us 16GB, it's ok to use 80%
+          SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
+          RELEASE: ${{ inputs.imageTag }}
 
       - name: test ESM & CJS exports integrity
         if: ${{ inputs.build }}
@@ -191,8 +196,6 @@ jobs:
         if: ${{ inputs.publishSourceMaps }}
         env:
           SENTRY_DSN: ${{ secrets.SENTRY_DSN }}
-          SENTRY_ORG: the-guild-z4
-          SENTRY_PROJECT: graphql-hive
           SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
           SENTRY_RELEASE: ${{ inputs.imageTag }}
         run: pnpm upload-sourcemaps

.github/workflows/publish-rust.yaml

@@ -56,7 +56,7 @@ jobs:
       - name: Install Rust
         uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # v1
         with:
-          toolchain: '1.91.1'
+          toolchain: '1.94.1'
           default: true
           override: true
 
@@ -118,7 +118,7 @@ jobs:
       - name: Install Rust
         uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # v1
         with:
-          toolchain: '1.91.1'
+          toolchain: '1.94.1'
           target: ${{ env.RUST_TARGET }}
           default: true
           override: true

.github/workflows/tests-integration.yaml

@@ -90,7 +90,7 @@ jobs:
         name: Install Rust
         uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # v1
         with:
-          toolchain: '1.91.1'
+          toolchain: '1.94.1'
           default: true
           override: true