Update webonyx/graphql-php

[rjzondervan]

From the composer audit in #1427:

Package: webonyx/graphql-php
Severity: high
Advisory ID: PKSA-sf9j-1gs7-xzvx
CVE: NO CVE
Title: webonyx/graphql-php has quadratic validation cost in OverlappingFieldsCanBeMerged via inline fragments
URL: https://github.com/advisories/GHSA-fc86-6rv6-2jpm
Affected versions: <15.32.2
Reported at: 2026-05-04T22:22:09+00:00

This PR updates this dependency to the most recent version (15.32.3) that mitigates this security issue.

[WilcoLouwerse]

No blockers. v15.32.3 satisfies the advisory cutoff (<15.32.2 affected), composer.json's ^15.0 constraint accepts it, only the single webonyx/graphql-php entry changed in composer.lock with no transitive shifts, and composer audit is green on the new lock.

[github-actions]

Quality Report — ConductionNL/openregister @ 2279f8a

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
composer			✅	✅ 147/147
npm			✅	✅ 598/598
PHPUnit					❌
Newman					❌
Playwright					⏭️

---

Quality workflow — 2026-05-05 09:00 UTC

Download the full PDF report from the workflow artifacts.