9.8.0-alpha.5 (2026-04-04)

Features

• Add support for invoking Cloud Function with multipart/form-data protocol (#10395) (a3f36a2)

9.8.0-alpha.4 (2026-04-03)

Features

• Add server option fileDownload to restrict file download (#10394) (fc117ef)

9.8.0-alpha.3 (2026-04-03)

Bug Fixes

• Bump lodash from 4.17.23 to 4.18.1 (#10393) (19716ad)

9.8.0-alpha.2 (2026-04-03)

Bug Fixes

• Maintenance key IP mismatch silently downgrades to regular auth instead of rejecting (#10391) (7d8b367)

9.8.0-alpha.1 (2026-04-03)

Features

• Add route block with new server option routeAllowList (#10389) (f2d06e7)

9.7.1-alpha.4 (2026-04-02)

Bug Fixes

• File upload Content-Type override via extension mismatch (GHSA-vr5f-2r24-w5hc) (#10383) (dd7cc41)

8.6.73 (2026-04-02)

Bug Fixes

• File upload Content-Type override via extension mismatch (GHSA-vr5f-2r24-w5hc) (#10384) (0de3e9f)

9.7.1-alpha.3 (2026-04-01)

Bug Fixes

• Session field guard bypass via falsy values for ACL and user fields (#10382) (ead12bd)

9.7.1-alpha.2 (2026-04-01)

Bug Fixes

• Nested batch sub-requests cause unclear error (#10371) (6635096)

8.6.72 (2026-03-31)

Bug Fixes

• Security upgrade @apollo/server from 4.12.1 to 4.13.0 (#10082) (18a1560)