GraphQL can be challenging, and not only for beginners. The reason for this is often that it's so tempting to do the wrong thing. In this session, I will walk you through the various challenges of building production-ready applications with GraphQL. We will discuss the differences between a public GraphQL server and a private GraphQL server. I will show the most common mistakes people encounter with GraphQL and how to tackle them.

In this talk, we will look at persisted operations, rate-limiting, introspection security, the right defaults for paging, errors, and many more aspects. This talk is suitable for you whether you are a GraphQL server or client implementer or just a user of GraphQL. After this session, you should have a solid understanding of how to put GraphQL into production in a secure way.

In this talk, we're unpacking GraphQL Fusion, a new approach that makes building distributed GraphQL APIs easier. We'll explore how this approach lets your teams work independently by owning different parts of the company's graph and cover how you can reshape subgraphs to follow your company's rules. Come learn about this powerful tool that brings efficiency and customization to your GraphQL operations.

This ad-hoc talk is just Benjie (and Michael Staib from ChilliCream!) riffing about some of the work that's going on in the GraphQL Working Groups currently. Topics covered include:

• GraphQL Spec Freeze July 2025 - a new spec cut is coming!
• Incremental Delivery
• Schema Coordinates
• Fragment Arguments
• Nullability
• Operation Descriptions
• Service Capabilities
• GraphQL-over-HTTP
• Partial Success Status Code
• Composite Schemas
• GraphQL.js v17
• GraphiQL v5
• OpenTelemetry
• Documentation Overhaul
• Community Working Group
• Website Redesign
• GET INVOLVED!