Enhancement: New lab docs

[mskorokhodov]

Background

• New lab introduced in the product

Description

• Added new lab docs

Checklist

• Input validation
• Output encoding
• Authentication management
• Session management
• Access control
• Cryptographic practices
• Error handling and logging
• Data protection
• Communication security
• System configuration
• Database security
• File management
• Memory management
• Testing

[gemini-code-assist]

Summary of Changes

Hello @mskorokhodov, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request primarily focuses on introducing extensive documentation for the newly integrated "Hive Laboratory" feature. The new documentation provides detailed guides on core functionalities such as managing GraphQL operations, leveraging schema support, organizing with collections, utilizing preflight scripts for advanced request manipulation, handling environment variables, and reviewing execution history. Additionally, a minor but important UI adjustment was made to ensure the preflight prompt modal displays reliably.

Highlights

• New Laboratory Documentation: Comprehensive documentation has been added for the new "Hive Laboratory" feature, covering its various functionalities like operations, schema support, collections, preflight scripts, environment variables, and history.
• Preflight Prompt Modal Fix: A timing issue preventing the preflight prompt modal from opening correctly in the Laboratory UI has been resolved by introducing a slight delay.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[github-actions]

📚 Storybook Deployment

The latest changes are available as preview in: https://pr-7560.hive-storybook.pages.dev

[github-actions]

🚀 Snapshot Release (alpha)

The latest changes of this PR are available as alpha on npm (based on the declared changesets):

Package	Version	Info
@graphql-hive/cli	0.57.2-alpha-20260126123418-6abbfd2d37691f1f8b41d716322e2278629385bc	npm ↗︎ unpkg ↗︎
hive	9.0.0-alpha-20260126123418-6abbfd2d37691f1f8b41d716322e2278629385bc	npm ↗︎ unpkg ↗︎

[gemini-code-assist]

Code Review

This pull request introduces comprehensive documentation for the new laboratory feature, covering collections, environment variables, history, operations, and preflight scripts. While the documentation is well-structured and helpful, a critical security vulnerability has been identified: the documented claim of 'No network access' for preflight scripts is not enforced in the actual implementation of the script sandbox. This creates a risk of data exfiltration if malicious scripts are executed. It is crucial to enforce actual network isolation and update the documentation to accurately reflect the security posture. Additionally, a setTimeout was introduced in laboratory.tsx before opening a modal, which should be reviewed for a more robust solution.

[github-actions]

🐋 This PR was built and pushed to the following Docker images:

Targets: build

Platforms: linux/amd64

Image Tag: 6abbfd2d37691f1f8b41d716322e2278629385bc

[github-actions]

💻 Website Preview

The latest changes are available as preview in: https://pr-7560.hive-landing-page.pages.dev

[n1ru4l]

Looking good 👍 Let's merge it after #7505 and #7456 are deployed to production.