Webiny 6.5.2 Changelog

For the full list of changes, check out the Webiny 6.5.2 release on GitHub.

Development

Documented Constructor Dependency Safety in GraphQL Resolvers (#6148)

⏳ REVIEW-PENDING @adrians5j: confirm this entry, then delete this line.

GraphQL schema factories receive their constructor dependencies from the request that builds the schema, which is cached for the life of the Lambda container. Reading constructor-injected dependencies (like IdentityContext) inside a resolver can expose stale data from the request that originally built the schema, potentially causing authorization issues in deployed environments. Documentation has been added to warn against this pattern — constructor dependencies should only be used in the execute() method, not inside resolvers.