Graphweaver

API Development

A code‑first, highly customizable open‑source GraphQL API server that can connect and unify multiple data sources, offering built‑in auth, permissions, and an admin UI.

Track releases GitHub Website

TypeScript Latest v2.23.0 · 22d ago Security brief →

Features

Instant GraphQL CRUD API from any data source
Granular row‑ and column‑level permissions
Combine multiple sources (Postgres, MySQL, SQLite, SaaS, REST) with cross‑source filters
Fully open‑source MIT‑licensed code with an extensible admin panel

Recent releases

View all 37 releases →

Review required

v2.23.0 New feature 22d

Dependencies

Authorization Context access

Open

v2.22.0 Breaking risk 2mo

Breaking changes

MSAL packages moved from peer to direct dependencies; pnpm users must add overrides configuration

Notable features

DB introspection for client-generated primary keys
Nested entity creation fixes

Full changelog

What's Changed

Notes

pnpm doesn't respect our peer dependency ranges when installing msal packages. As a result we've had to move the msal packages to direct dependencies of our packages instead of peer dependencies.

If you have your own versions of msal packages installed, you'll need to use pnpm overrides to ensure we resolve to one version.

Fixes

EXOGW-476 - Detect clientGeneratedPrimaryKeys during DB introspection by @dgivney-exogee in https://github.com/exogee-technology/graphweaver/pull/2450
Fix / Grandchild Nested Create Issue by @thekevinbrown in https://github.com/exogee-technology/graphweaver/pull/2482

Changes

Chore / Switched to minio for CI. by @thekevinbrown in https://github.com/exogee-technology/graphweaver/pull/2483
Chore / Generate Types by @thekevinbrown in https://github.com/exogee-technology/graphweaver/pull/2481

Dependency Version Bumps

build(deps): bump @auth0/auth0-spa-js from 2.11.0 to 2.16.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2447
build(deps-dev): bump aws-cdk from 2.1105.0 to 2.1106.0 in /src in the aws-cdk group by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2444
build(deps): bump the aws-sdk group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2443
build(deps): bump the opentelemetry group in /src with 6 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2445
build(deps): bump pnpm/action-setup from 4.2.0 to 5.0.0 by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2469
[Snyk] Security upgrade node from 22.21.0-trixie-slim to 22.22.1-trixie-slim by @thekevinbrown in https://github.com/exogee-technology/graphweaver/pull/2465
build(deps): bump the aws-sdk group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2451
build(deps-dev): bump the storybook group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2446
build(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2462
build(deps): bump fastify from 5.7.3 to 5.8.3 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2470
[Snyk] Security upgrade node from 25.5.0-alpine to 25.8.2-alpine by @eddiesholl in https://github.com/exogee-technology/graphweaver/pull/2480
build(deps): bump the tiptap group in /src with 3 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2454
build(deps-dev): bump the aws-cdk group in /src with 2 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2452

Full Changelog: https://github.com/exogee-technology/graphweaver/compare/v2.21.3...v2.22.0

View release on GitHub

v2.21.1 Bug fix 3mo

Minor fixes and improvements.

Full changelog

What's Changed

Fixes

EXOGW-473 - Check value of ClientGeneratedPrimaryKey when executing a mutation with Nested Entities by @dgivney-exogee in https://github.com/exogee-technology/graphweaver/pull/2415
EXOGW-475 - Add support for user defined PrimaryKeys in createOrUpdateMany method for MikroORM by @dgivney-exogee in https://github.com/exogee-technology/graphweaver/pull/2416
EXOGW-474 - Fix datatype mismatch when saving array values in Nested Entities by @dgivney-exogee in https://github.com/exogee-technology/graphweaver/pull/2418

Improvements

EXOGW-340 - Add a Test Suite for mutations based on Chinook Database by @dgivney-exogee in https://github.com/exogee-technology/graphweaver/pull/2433

Dependency Version Bumps

[Snyk] Security upgrade node from 25.4.0-alpine to 25.5.0-alpine by @thekevinbrown in https://github.com/exogee-technology/graphweaver/pull/2403
build(deps): bump the tiptap group in /src with 3 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2401
build(deps): bump @apollo/server from 5.2.0 to 5.4.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2408
build(deps-dev): bump the aws-cdk group in /src with 2 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2397
build(deps-dev): bump globals from 16.5.0 to 17.2.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2402
build(deps-dev): bump the storybook group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2400
build(deps): bump fastify from 5.6.2 to 5.7.3 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2405
build(deps): bump the aws-sdk group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2396
build(deps): bump the tiptap group in /src with 3 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2411
build(deps-dev): bump the storybook group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2410
build(deps-dev): bump the aws-cdk group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2417
build(deps): bump the react group in /src with 2 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2399
build(deps): bump the opentelemetry group in /src with 6 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2398
build(deps): bump @graphql-tools/utils from 10.11.0 to 11.0.0 in /src in the graphql-tools group by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2364
build(deps): bump jsonwebtoken from 9.0.2 to 9.0.3 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2424
build(deps-dev): bump turbo from 2.7.3 to 2.8.3 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2423
build(deps): bump @vitejs/plugin-react from 5.1.2 to 5.1.3 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2422
build(deps-dev): bump the storybook group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2421
build(deps-dev): bump aws-cdk-lib from 2.237.1 to 2.238.0 in /src in the aws-cdk group by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2420
build(deps): bump the aws-sdk group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2419
build(deps-dev): bump globals from 17.2.0 to 17.3.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2430
build(deps): bump the aws-sdk group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2427
build(deps): bump pino from 10.1.0 to 10.3.1 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2425
build(deps): bump node-sqlite3-wasm from 0.8.52 to 0.8.53 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2429
build(deps): bump tedious from 19.2.0 to 19.2.1 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2428
Upgrade @as-integrations and use new export format. by @thekevinbrown in https://github.com/exogee-technology/graphweaver/pull/2435

New Contributors

@dgivney-exogee made their first contribution in https://github.com/exogee-technology/graphweaver/pull/2415

Full Changelog: https://github.com/exogee-technology/graphweaver/compare/v2.21.0...v2.21.1

View release on GitHub

v2.21.0 New feature 4mo

Notable features

Azure Cloud Functions integration
Static method hooks support

Full changelog

What's Changed

New Features

Feature / Azure Cloud Functions by @thekevinbrown in https://github.com/exogee-technology/graphweaver/pull/2393

Bug Fixes

Fix / Hooks on static methods. by @thekevinbrown in https://github.com/exogee-technology/graphweaver/pull/2376

Dependency Version Bumps

build(deps): bump @vitejs/plugin-react from 5.1.1 to 5.1.2 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2369
build(deps): bump dotenv-cli from 10.0.0 to 11.0.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2368
build(deps): bump tedious from 19.1.3 to 19.2.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2372
build(deps): bump @escape.tech/graphql-armor from 3.1.7 to 3.2.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2371
build(deps-dev): bump @types/papaparse from 5.3.16 to 5.5.2 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2373
build(deps): bump the aws-sdk group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2362
build(deps): bump inquirer from 13.1.0 to 13.2.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2374
build(deps): bump chokidar from 4.0.3 to 5.0.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2367
build(deps-dev): bump @types/k6 from 1.4.0 to 1.5.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2380
build(deps): bump json-bigint-patch from 0.0.8 to 0.0.9 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2379
build(deps): bump the aws-sdk group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2377
build(deps): bump the opentelemetry group in /src with 6 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2365
build(deps-dev): bump the aws-cdk group in /src with 2 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2363
[Snyk] Security upgrade node from 25.0.0-alpine to 25.4.0-alpine by @thekevinbrown in https://github.com/exogee-technology/graphweaver/pull/2392
build(deps-dev): bump the aws-cdk group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2391
build(deps): bump the aws-sdk group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2382
build(deps): bump motion from 12.23.24 to 12.27.1 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2387
build(deps): bump the tiptap group in /src with 3 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2366
build(deps-dev): bump vitest from 4.0.3 to 4.0.17 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2384
build(deps): bump lodash from 4.17.21 to 4.17.23 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2390
build(deps-dev): bump @types/lodash from 4.17.21 to 4.17.23 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2385

Full Changelog: https://github.com/exogee-technology/graphweaver/compare/v2.20.9...v2.21.0

View release on GitHub

v2.20.9 New feature 4mo

Notable features

Client-side token refresh mechanism

Full changelog

What's Changed

Improvements

Feature / Added client side token refresh by @thekevinbrown in https://github.com/exogee-technology/graphweaver/pull/2343

Dependency Version Bumps

build(deps): bump downshift from 9.0.10 to 9.0.12 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2303
build(deps): bump @vitejs/plugin-react from 5.1.0 to 5.1.1 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2301
build(deps-dev): bump @types/k6 from 1.3.1 to 1.4.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2300
build(deps-dev): bump aws-cdk-lib from 2.230.0 to 2.231.0 in /src in the aws-cdk group by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2297
build(deps-dev): bump the storybook group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2299
build(deps-dev): bump turbo from 2.5.8 to 2.6.3 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2308
build(deps): bump esbuild from 0.27.0 to 0.27.1 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2307
build(deps): bump the tiptap group in /src with 3 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2306
build(deps): bump tedious from 18.6.1 to 19.1.3 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2302
build(deps): bump the react group in /src with 2 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2298
build(deps-dev): bump aws-cdk-lib from 2.231.0 to 2.232.1 in /src in the aws-cdk group by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2305
build(deps-dev): bump aws-cdk from 2.1033.0 to 2.1034.0 in /src in the aws-cdk group by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2309
build(deps-dev): bump eslint-plugin-storybook from 9.1.13 to 10.1.7 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2314
build(deps-dev): bump globals from 16.4.0 to 16.5.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2313
build(deps-dev): bump the storybook group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2310
build(deps): bump the aws-sdk group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2304
build(deps): bump zod from 4.1.12 to 4.1.13 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2322
build(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2318
build(deps): bump @graphql-codegen/typescript-operations from 5.0.2 to 5.0.6 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2323
build(deps): bump actions/cache from 4 to 5 by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2317
build(deps): bump the react group in /src with 2 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2320
build(deps-dev): bump the aws-cdk group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2328
build(deps-dev): bump storybook from 10.1.7 to 10.1.10 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2330
build(deps): bump class-validator from 0.14.2 to 0.14.3 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2326
build(deps-dev): bump typescript-eslint from 8.46.2 to 8.49.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2325
build(deps): bump downshift from 9.0.12 to 9.0.13 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2312
build(deps): bump graphql from 16.11.0 to 16.12.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2292
build(deps-dev): bump the storybook group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2331
build(deps): bump zod from 4.1.13 to 4.2.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2327
Upgrade Mikro ORM to v6.6.2 by @thekevinbrown in https://github.com/exogee-technology/graphweaver/pull/2332
build(deps): bump inquirer from 11.1.0 to 13.1.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2324
build(deps): bump vite from 7.1.12 to 7.3.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2339
build(deps): bump validate-npm-package-name from 7.0.0 to 7.0.1 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2337
build(deps-dev): bump turbo from 2.6.3 to 2.7.1 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2336
build(deps-dev): bump @types/lodash from 4.17.20 to 4.17.21 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2340
build(deps-dev): bump the aws-cdk group in /src with 2 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2334
build(deps): bump the tiptap group in /src with 3 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2335
build(deps): bump the aws-sdk group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2333
build(deps): bump xero-node from 13.2.0 to 13.3.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2341
build(deps): bump @graphql-codegen/typescript-react-apollo from 4.3.3 to 4.3.4 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2338
build(deps-dev): bump @playwright/test from 1.56.1 to 1.57.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2351
build(deps): bump @graphql-codegen/cli from 6.0.1 to 6.1.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2350
build(deps): bump zod from 4.2.0 to 4.3.5 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2349
build(deps): bump @auth0/auth0-spa-js from 2.7.0 to 2.11.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2348
build(deps-dev): bump aws-cdk from 2.1100.1 to 2.1100.2 in /src in the aws-cdk group by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2345
build(deps): bump the aws-sdk group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2344
build(deps): bump react-error-boundary from 6.0.0 to 6.0.2 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2357
build(deps): bump xero-node from 13.3.0 to 13.3.1 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2356
build(deps-dev): bump turbo from 2.7.1 to 2.7.3 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2355
build(deps-dev): bump eslint-plugin-storybook from 10.1.7 to 10.1.11 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2354
build(deps): bump the tiptap group in /src with 3 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2352
build(deps): bump node-sqlite3-wasm from 0.8.50 to 0.8.52 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2358
build(deps): bump wouter from 3.7.1 to 3.9.0 in /src by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2353
build(deps-dev): bump the storybook group in /src with 4 updates by @dependabot[bot] in https://github.com/exogee-technology/graphweaver/pull/2347