# What changed in @envelop/disable-introspection

> 2 changes in @envelop/disable-introspection 9 from its official release notes, upgrade guides and advisories: 1 breaking, 1 security. Each one cited. Sources checked 2026-10-21. HTML: https://unstale.sh/npm/@envelop/disable-introspection/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @envelop/disable-introspection 9

### Breaking changes

- Adds support for graphql-js 17, including compatibility with subscribe. (9.2.0) — [release notes](https://github.com/graphql-hive/graphql-yoga/blob/73fe2a004fcf23b36ca36e3a980579aaf25e0eea/packages/envelop/plugins/disable-introspection/CHANGELOG.md#920)

### Security

- @envelop/graphql-modules has a Race Condition vulnerability (9.1.0) — [security advisory](https://github.com/advisories/GHSA-H3HW-29FV-2X75)