Update apollo-router to 2.12.0

[theguild-bot]

Automatic update of apollo-router to version 2.12.0.

[gemini-code-assist]

Summary of Changes

Hello @theguild-bot, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request performs a significant dependency update, primarily driven by the upgrade of the apollo-router and apollo-federation crates to version 2.12.0. This core update necessitated a cascade of changes across the dependency graph, leading to the introduction of many new cryptographic and utility-focused crates, as well as version bumps for several existing ones. The changes ensure the project leverages the latest features and security improvements from these updated libraries.

Highlights

• Apollo Router and Federation Update: Updated apollo-router and apollo-federation crates to version 2.12.0, along with their associated checksums.
• JSON Web Token Crate Update: Updated the jsonwebtoken crate to version 10.3.0, which introduced several new cryptographic dependencies.
• New Cryptographic Dependencies: Added numerous new cryptographic and utility crates including base16ct, base64ct, const-oid, crypto-bigint, curve25519-dalek, der, ecdsa, ed25519, ed25519-dalek, elliptic-curve, ff, fiat-crypto, group, hkdf, libm, num-bigint-dig, p256, p384, pem-rfc7468, pkcs1, pkcs8, primeorder, rfc6979, rsa, sec1, signature, and spki.
• Dependency Version Bumps: Bumped the itertools dependency from 0.11.0 to 0.14.0 for proc-macro-error and proc-macro-error-attr.
• New Direct Dependencies: Added spin as a dependency for lazy_static, zeroize for generic-array, and libm for num-traits.

Changelog

• Cargo.lock
  • Updated apollo-federation from 2.11.0 to 2.12.0 and its checksum.
  • Updated apollo-router from 2.11.0 to 2.12.0 and its checksum.
  • Added new package entries for base16ct (0.2.0), base64ct (1.8.3), const-oid (0.9.6), crypto-bigint (0.5.5), curve25519-dalek (4.1.3), curve25519-dalek-derive (0.1.1), der (0.7.10), ecdsa (0.16.9), ed25519 (2.2.3), ed25519-dalek (2.2.0), elliptic-curve (0.13.8), ff (0.13.1), fiat-crypto (0.2.9), group (0.13.0), hkdf (0.12.4), libm (0.2.16), num-bigint-dig (0.8.6), p256 (0.13.2), p384 (0.13.1), pem-rfc7468 (0.7.0), pkcs1 (0.7.5), pkcs8 (0.10.2), primeorder (0.13.6), rfc6979 (0.4.0), rsa (0.9.10), sec1 (0.7.3), signature (2.2.0), and spki (0.7.3).
  • Updated jsonwebtoken from 9.3.1 to 10.3.0 and its checksum, adding new dependencies like ed25519-dalek, getrandom, hmac, p256, p384, rand, rsa, sha2, and signature.
  • Added spin 0.9.8 as a dependency for lazy_static.
  • Added zeroize as a dependency for generic-array.
  • Added libm as a dependency for num-traits.
  • Updated itertools dependency from 0.11.0 to 0.14.0 for proc-macro-error and proc-macro-error-attr.

Activity

• This pull request was automatically generated by theguild-bot to update the apollo-router dependency.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[gemini-code-assist]

Code Review

The pull request updates the apollo-router dependency to version 2.12.0 and introduces several new transitive dependencies in Cargo.lock. The changes appear to be an automatic update, and the new dependencies are consistent with typical Rust project updates. No critical issues were found.

[github-actions]

🚀 Snapshot Release (alpha)

The latest changes of this PR are available as alpha on npm (based on the declared changesets):

Package	Version	Info
hive	9.5.0-alpha-20260225162713-73fa3753315003b94f029ba2911543cb82b635db	npm ↗︎ unpkg ↗︎

[github-actions]

🐋 This PR was built and pushed to the following Docker images:

Targets: build

Platforms: linux/arm64

Image Tag: 73fa3753315003b94f029ba2911543cb82b635db

[github-actions]

💻 Website Preview

The latest changes are available as preview in: https://pr-7728.hive-landing-page.pages.dev

[github-actions]

🐋 This PR was built and pushed to the following Docker images:

Targets: apollo-router-hive-build

Platforms: linux/arm64

Image Tag: c1acab98999fb53814961d04908e2cf93de6acf0