updateCustomer mutation triggers password change

[ChloeThomas56]

Describe the bug
When using the updateCustomer mutation, WordPress sends the
"Your password has been changed" email to the user,
even though no password-related field is provided in the mutation input.

To Reproduce
Steps to reproduce the behavior:

1. Have an authenticated user
2. Call updateCustomer without providing password field (e.g: billing address, shipping address fields)
3. User receives the password change email

Expected behavior
Updating customer information should not trigger any password-related email.

Plugin Versions

• WooGraphQL Version: 0.21.2
• WPGraphQL Version: 2.7.0
• WordPress Version: 6.9
• WooCommerce Version: 10.4.3

[scottyzen]

Having the same issue. Seems new. Will update if I find a solution.

[scottyzen]

Temporary fix. Rolling back WPGraphQL to v2.5.4 fixes this issue.

[ChloeThomas56]

Thanks for your feedback.
I did the same and downgraded to WPGraphQL 2.5.4, and the issue is gone on my side as well 👍