chore: bump github.com/vektah/gqlparser/v2 from 2.5.58 to 2.5.60

[dependabot]

Bumps github.com/vektah/gqlparser/v2 from 2.5.58 to 2.5.60.

Release notes

Sourced from github.com/vektah/gqlparser/v2's releases.

v2.5.60

Changelog

• 4e17d6e4d0d9f752445aac098773adc68013ab8c ast: cover the quoting cases mutants slipped through (#485)
• 1abdeea509a56ad40011da4077da85338d0aae53 ast: quote string values as GraphQL, not Go (#483)
• cea8f64cfae7b5f9703561bc7d8a16926d248479 formatter: escape """ inside descriptions (#484)

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.60' \
  checksums.txt
2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt
3. GitHub build provenance.
gh attestation verify gqlparser_2.5.60_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.60_source.tar.gz.sbom.json (SPDX-2.3).

---

Released by GoReleaser.

v2.5.59

Changelog

• 7bd8ce26a9a91a93381ec130c4dd0005a64312f5 Avoid iterator allocations in overlapping field validator (#481)
• 3ccd437ff1ef32b6851a670f749d7bc2aca6b20b Benchmarks, a benchmark gate, property tests and mutation testing (#482)
• 6ddb71072cb8e029586d5170ea73e85a0427f62c Index fragments by name in the validator walker (#472)
• b312a14470809ce15efc7d4727eea4f080fcdebd build(deps): bump brace-expansion in /validator/imported (#480)
• dce6e6633aa43412964d77e10faa431d593f99ad build(deps-dev): bump prettier (#473)
• 3e25eab8a762bdf95e1a69b91540c14354dbd324 feat(validator): Add new validator.EmptyDefinitionError (#474)
• eaee10953561f7943a8bbf46a56054aecf7c6e81 lexer: combine surrogate pair escapes in string literals (#476)
• 1c204b4b992ebdc7724634ad4be0f52f838b15bf validator: make MaxIntrospectionDepth linear in fragment spreads (#471)
• b99f91aec8211fe80208078b2d1991f10d1f7d57 validator: stop OverlappingFieldsCanBeMerged recursing forever on fragment cycles (revised #477) (#478)

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.59' \
  checksums.txt
</tr></table>

... (truncated)

Commits

• 4e17d6e ast: cover the quoting cases mutants slipped through (#485)
• 1abdeea ast: quote string values as GraphQL, not Go (#483)
• cea8f64 formatter: escape """ inside descriptions (#484)
• 7bd8ce2 Avoid iterator allocations in overlapping field validator (#481)
• 3ccd437 Benchmarks, a benchmark gate, property tests and mutation testing (#482)
• 1c204b4 validator: make MaxIntrospectionDepth linear in fragment spreads (#471)
• dce6e66 build(deps-dev): bump prettier (#473)
• b312a14 build(deps): bump brace-expansion in /validator/imported (#480)
• b99f91a validator: stop OverlappingFieldsCanBeMerged recursing forever on fragment cy...
• 6ddb710 Index fragments by name in the validator walker (#472)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: QUIET
• Plan: Advanced
• Run ID: 812bbfe0-1456-4d02-93c6-42ead46700ad

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

Superseded by #77.