chore(release): router crates and artifacts

Author: knope-bot[bot]

.changeset/graphql-analysis-hook.md

@@ -18,7 +18,7 @@ path = "src/lib.rs"
 
 [dependencies]
 apollo-router = { version = "^2.0.0" }
-hive-console-sdk = { version = "0.3.17", path = "../../../lib/hive-console-sdk"}
+hive-console-sdk = { version = "0.3.18", path = "../../../lib/hive-console-sdk"}
 sha2 = { version = "0.10.8", features = ["std"] }
 anyhow = "1"
 tracing = "0.1"

.changeset/more_operation_validations.md

@@ -116,6 +116,20 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Other
 
 - *(deps)* update release-plz/action action to v0.5.113 ([#389](https://github.com/graphql-hive/router/pull/389))
+## 0.0.84 (2026-07-20)
+
+### Fixes
+
+#### Add an `on_graphql_analysis` plugin hook with safe operation filtering
+
+Plugin authors can now inspect and filter operation fields after normalization and immediately before query planning. Fields can be kept or nulled with a GraphQL error while the router consistently updates the operation and response projection plan, making the hook suitable for authorization, rate limiting, progressive overrides, and similar policies.
+
+#### Improve GraphQL operation validation
+
+- **Faster validation (2-3x):** rules now share a single `OperationVisitor` pass over the operation document instead of each rule visiting it independently.
+- **New `UniqueInputFieldNames` rule:** input object fields are now kept as a list rather than a map, so duplicate fields are no longer silently deduplicated before validation. A query like `{ field(input: { value: 1, value: 2 }) }` is now correctly rejected.
+- **Fixed `VariablesInAllowedPosition`:** now accounts for default values on variables, field arguments, and input object fields. Nullable variables used in a non-null argument that defines a default are no longer incorrectly rejected.
+
 ## 0.0.83 (2026-07-13)
 
 ### Fixes

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "hive-router"
-version = "0.0.83"
+version = "0.0.84"
 edition = "2021"
 description = "GraphQL router/gateway for Federation"
 license = "MIT"
@@ -23,12 +23,12 @@ testing = []
 graphiql = []
 
 [dependencies]
-hive-router-query-planner = { path = "../../lib/query-planner", version = "2.10.9" }
-hive-router-plan-executor = { path = "../../lib/executor", version = "6.22.1" }
+hive-router-query-planner = { path = "../../lib/query-planner", version = "2.10.10" }
+hive-router-plan-executor = { path = "../../lib/executor", version = "6.23.0" }
 hive-router-config = { path = "../../lib/router-config", version = "0.1.7" }
-hive-router-internal = { path = "../../lib/internal", version = "0.0.36" }
-hive-console-sdk = { path = "../../lib/hive-console-sdk", version = "0.3.17" }
-graphql-tools =  { path = "../../lib/graphql-tools", version = "0.5.6" }
+hive-router-internal = { path = "../../lib/internal", version = "0.0.37" }
+hive-console-sdk = { path = "../../lib/hive-console-sdk", version = "0.3.18" }
+graphql-tools =  { path = "../../lib/graphql-tools", version = "0.5.7" }
 
 tokio = { workspace = true }
 futures = { workspace = true }

apollo-router-workspace/Cargo.lock

@@ -94,6 +94,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Other
 
 - *(deps)* update release-plz/action action to v0.5.113 ([#389](https://github.com/graphql-hive/router/pull/389))
+## 6.23.0 (2026-07-20)
+
+### Features
+
+#### Add an `on_graphql_analysis` plugin hook with safe operation filtering
+
+Plugin authors can now inspect and filter operation fields after normalization and immediately before query planning. Fields can be kept or nulled with a GraphQL error while the router consistently updates the operation and response projection plan, making the hook suitable for authorization, rate limiting, progressive overrides, and similar policies.
+
+### Fixes
+
+#### Improve GraphQL operation validation
+
+- **Faster validation (2-3x):** rules now share a single `OperationVisitor` pass over the operation document instead of each rule visiting it independently.
+- **New `UniqueInputFieldNames` rule:** input object fields are now kept as a list rather than a map, so duplicate fields are no longer silently deduplicated before validation. A query like `{ field(input: { value: 1, value: 2 }) }` is now correctly rejected.
+- **Fixed `VariablesInAllowedPosition`:** now accounts for default values on variables, field arguments, and input object fields. Nullable variables used in a non-null argument that defines a default are no longer incorrectly rejected.
+
 ## 6.22.1 (2026-07-13)
 
 ### Fixes

apollo-router-workspace/bin/router/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "hive-router-plan-executor"
-version = "6.22.1"
+version = "6.23.0"
 edition = "2021"
 description = "GraphQL query planner executor for Federation specification"
 license = "MIT"
@@ -15,10 +15,10 @@ authors = ["The Guild"]
 doctest = false
 
 [dependencies]
-hive-router-query-planner = { path = "../query-planner", version = "2.10.9" }
+hive-router-query-planner = { path = "../query-planner", version = "2.10.10" }
 hive-router-config = { path = "../router-config", version = "0.1.7" }
-hive-router-internal = { path = "../internal", version = "0.0.36" }
-graphql-tools =  { path = "../graphql-tools", version = "0.5.6" }
+hive-router-internal = { path = "../internal", version = "0.0.37" }
+graphql-tools =  { path = "../graphql-tools", version = "0.5.7" }
 hive-console-sdk = { path = "../hive-console-sdk", version = "0.3.8" }
 
 async-trait = { workspace = true }

bin/router/CHANGELOG.md

@@ -1,3 +1,13 @@
+## 0.5.7 (2026-07-20)
+
+### Fixes
+
+#### Improve GraphQL operation validation
+
+- **Faster validation (2-3x):** rules now share a single `OperationVisitor` pass over the operation document instead of each rule visiting it independently.
+- **New `UniqueInputFieldNames` rule:** input object fields are now kept as a list rather than a map, so duplicate fields are no longer silently deduplicated before validation. A query like `{ field(input: { value: 1, value: 2 }) }` is now correctly rejected.
+- **Fixed `VariablesInAllowedPosition`:** now accounts for default values on variables, field arguments, and input object fields. Nullable variables used in a non-null argument that defines a default are no longer incorrectly rejected.
+
 ## 0.5.6 (2026-06-30)
 
 ### Fixes