chore(deps): update dependency @redocly/cli to v2.46.1 - #51
Conversation
|
PR author is in the excluded authors list. |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
| }, | ||
| "devDependencies": { | ||
| "@redocly/cli": "2.40.0", | ||
| "@redocly/cli": "2.46.1", |
There was a problem hiding this comment.
🔍 New recommended rules in 2.44/2.46 may add lint output
The bump crosses 2.44.0 (no-duplicated-enum-values, no-unsafe-markdown added at warn) and 2.46.0 (spec-ref-siblings added). redocly.yaml extends recommended, so these apply to openapi.yaml via npm run lint. Warn-level rules do not fail the gate per the comment in redocly.yaml:3-6, but the severity of spec-ref-siblings in recommended is not stated in the release notes — worth confirming a lint run stays green before merge.
Was this helpful? React with 👍 or 👎 to provide feedback.
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Risk: low. Left a non-blocking comment because Cursor Security Agent skipped (not a successful completion) and Cursor Bugbot was not present. Assigned yakimoto for human review of this @redocly/cli dependency bump.
Sent by Cursor Approval Agent: Pull Request Router and Approver
ApprovabilityVerdict: Needs human review Dev dependency bump for @redocly/cli (2.40.0 → 2.46.1) with no runtime impact. Files are owned by wave-av/core-team per CODEOWNERS, and the Renovate bot is not a designated owner, so team review is appropriate. No code changes detected at You can customize Macroscope's approvability policy. Learn more. |
703ebc9 to
8e6a75b
Compare
This PR contains the following updates:
2.40.0→2.46.1Release Notes
Redocly/redocly-cli (@redocly/cli)
v2.46.1Compare Source
Patch Changes
@redocly/ajvto^8.18.3.v2.46.0Compare Source
Minor Changes
spec-ref-siblingsrule that reports properties placed next to a$refwhich the specification does not allow.Patch Changes
v2.45.0Compare Source
Minor Changes
bundlecommand losing schema keywords (such astitle,properties, orrequired) written next to a$refwhen the referenced schemas started with their own$ref.Patch Changes
v2.44.2Compare Source
Patch Changes
security-definedrule for AsyncAPI 2.x and 3.x in therecommendedruleset fromerrortowarn.AsyncAPI descriptions with undefined or unresolved security no longer fail linting by default.
v2.44.1Compare Source
Patch Changes
undicito the6.28.0version.operation-4xx-problem-details-rfc7807rule incorrectly reported thetypeandtitleproperties inherited throughallOfas missing.v2.44.0Compare Source
Minor Changes
Added the
no-duplicated-enum-valuesrule that requires all values in anenumto be unique.The rule is enabled at the
warnlevel in therecommendedruleset.Note: linting output may include new warnings for API descriptions that contain duplicated enum values.
Added the
no-unsafe-markdownrule that disallows potentially executable content indescriptionfields.The rule is enabled at the
warnlevel in therecommendedruleset.Note: linting output may include new warnings for
descriptionfields that contain potentially executable content.Patch Changes
v2.43.3Compare Source
Patch Changes
v2.43.2Compare Source
Patch Changes
v2.43.1Compare Source
Patch Changes
v2.43.0Compare Source
Patch Changes
v2.42.0Compare Source
Minor Changes
generate-clientcommand that generates a typed, zero-dependency TypeScript client from an OpenAPI description — auth, retries, middleware, typed SSE streaming, pagination, and multipart included — plus optional companion generators for Zod validation, TanStack Query and SWR hooks, MSW mocks, and date transformers.See the
generate-clientcommand reference and the Use the generated client guide.Patch Changes
v2.41.2Compare Source
Patch Changes
Updated js-yaml from
5.2.1to5.2.2to resolve a vulnerability in YAML parsing.Added support for the Arazzo spec-compliant workflow reference form
$sourceDescriptions.<name>.<workflowId>independsOn, stepworkflowId, and success/failure actionworkflowId.Unresolvable workflow references fail only the affected workflow with a clear error message, and no longer abort the whole run or pass unnoticed.
Updated @redocly/openapi-core to v2.41.2.
Updated @redocly/respect-core to v2.41.2.
v2.41.1Compare Source
Patch Changes
driftcommand'sschema-consistencyrule reported false-positive findings foroneOfschemas with adiscriminator.Payloads are validated only against the branch selected by the discriminator value instead of every
oneOfbranch.Schemas whose discriminator does not meet Ajv's structural requirements keep the previous behavior.
driftcommand's built-in undocumented-header ignore list withx-amz-,x-amzn-andx-github-prefixes, and thex-hub-signature/x-hub-signature-256webhook signature headers.v2.41.0Compare Source
Minor Changes
security-scopes-definedthat requires every scope used in a security requirement to be defined in the corresponding OAuth2 security scheme.The rule supports OpenAPI 2.0/3.x and AsyncAPI 2.6/3.0, suggests the closest defined scope for typos, and has an opt-in
requireScopesoption that requires OAuth2 security requirements to list at least one scope.Patch Changes
respectwhere the execution of parent workflow's steps didn't halt after a step that referenced another workflow had failed.cursorAI provider of thegenerate-speccommand sent only the instructions to the model and the operation to refine never reached it.Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.