December 2023 Summaries

The Apollo Client team has released version 3.9, which includes several memory-related improvements and changes. The update addresses various memory leaks and adds granular control over internal cache sizes to improve performance and reduce memory usage. A new Weak LRU Cache implementation replaces weak maps for memoized results, and the canonizeResults option is deprecated due to a conceptual memory leak issue. Users can now configure individual cache sizes for better trade-offs in their applications. The team also fixed several other potential memory leaks and improved the behavior of various Apollo Client components. To help refine the default cache sizes, users are encouraged to run the beta version of Apollo Client 3.9 in their applications and submit feedback on the results.

Apollo GraphOS provides GraphQL-native workflows to implement access control declaratively across an entire supergraph. Teams using GraphOS can enforce policies at the type or field level in their router by decorating schemas with directives such as `@requiresScopes`, `@authenticated`, and new `@policy` directives. These directives provide the freedom to integrate with any authorization system, including policy engines like Casbin or Open Policy Agent (OPA). By proactively enforcing policies as code, API platform teams can ensure compliance at all times without sacrificing developer velocity. The new `@policy` directive allows users to offload policy definition and resolution for the relevant parts of their schema, integrating predefined policies from policy engines into their supergraph schema and enforcing them in their router.