chore(deps): update dependency @redocly/cli to v2.50.0 - #51
Conversation
|
PR author is in the excluded authors list. |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
| }, | ||
| "devDependencies": { | ||
| "@redocly/cli": "2.40.0", | ||
| "@redocly/cli": "2.46.1", |
There was a problem hiding this comment.
🔍 New recommended rules in 2.44/2.46 may add lint output
The bump crosses 2.44.0 (no-duplicated-enum-values, no-unsafe-markdown added at warn) and 2.46.0 (spec-ref-siblings added). redocly.yaml extends recommended, so these apply to openapi.yaml via npm run lint. Warn-level rules do not fail the gate per the comment in redocly.yaml:3-6, but the severity of spec-ref-siblings in recommended is not stated in the release notes — worth confirming a lint run stays green before merge.
Was this helpful? React with 👍 or 👎 to provide feedback.
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Risk: low. Left a non-blocking comment because Cursor Security Agent skipped (not a successful completion) and Cursor Bugbot was not present. Assigned yakimoto for human review of this @redocly/cli dependency bump.
Sent by Cursor Approval Agent: Pull Request Router and Approver
ApprovabilityVerdict: Not approved Macroscope's review found this PR not approvable — This is a two-file Renovate update to development-only Redocly tooling, with impact limited to npm installation and OpenAPI lint diagnostics rather than customer request paths. Both changed files are owned by the core team, and an unresolved comment calls for verification of newly enabled lint rules, so owner review is appropriate. Not approved because:
Review your spending limits in Billing settings. You can add or adjust custom eligibility rules. Learn more. |
703ebc9 to
8e6a75b
Compare
renovate
Bot
changed the title
4ae4fd3 to
2d4b56a
Compare
renovate
Bot
changed the title
|
Skipping PR review because a bot author is detected. If you want to trigger CodeAnt AI, comment |
2d4b56a to
5b46446
Compare
renovate
Bot
changed the title
|
Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI. |
5b46446 to
e87a4ca
Compare
renovate
Bot
changed the title
|
Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI. |
e87a4ca to
722e841
Compare
renovate
Bot
changed the title
|
Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI. |
722e841 to
531fdce
Compare
renovate
Bot
changed the title
|
Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI. |
This PR contains the following updates:
2.40.0→2.50.0Release Notes
Redocly/redocly-cli (@redocly/cli)
v2.50.0Compare Source
Minor Changes
schemaassertion for configurable rules.The assertion validates a property value against a JSON Schema.
Patch Changes
v2.49.1Compare Source
Patch Changes
$refs pointed to the same path item.v2.49.0Compare Source
Minor Changes
Added the
no-illogical-composition-keywordsrule.Note: the rule is set to
warnin therecommendedruleset and toerrorinrecommended-strict. Existing API descriptions may report new problems.Patch Changes
npmwas not available.v2.48.0Compare Source
Minor Changes
python,go,php, andcligenerators beside the TypeScript client, each self-documenting with--docs, configurable per generator, and available as source in your own repository througheject-generator.Patch Changes
bundlecommand didn't resolve$refs inside an AsyncAPI 3 Multi Format Schema Object.respect --har-outputrecorded an emptypostDatafor every request.Request bodies are written to the HAR.
Captures replayed through
driftcan have their request bodies validated instead of silently passing.v2.47.0Compare Source
Minor Changes
statscommand that reports how many distinctx-extensions a description file uses and how often each one occurs.Patch Changes
statscommand reporting wrong parameter count for AsyncAPI descriptions.v2.46.2Compare Source
Patch Changes
v2.46.1Compare Source
Patch Changes
@redocly/ajvto^8.18.3.v2.46.0Compare Source
Minor Changes
spec-ref-siblingsrule that reports properties placed next to a$refwhich the specification does not allow.Patch Changes
v2.45.0Compare Source
Minor Changes
bundlecommand losing schema keywords (such astitle,properties, orrequired) written next to a$refwhen the referenced schemas started with their own$ref.Patch Changes
v2.44.2Compare Source
Patch Changes
security-definedrule for AsyncAPI 2.x and 3.x in therecommendedruleset fromerrortowarn.AsyncAPI descriptions with undefined or unresolved security no longer fail linting by default.
v2.44.1Compare Source
Patch Changes
undicito the6.28.0version.operation-4xx-problem-details-rfc7807rule incorrectly reported thetypeandtitleproperties inherited throughallOfas missing.v2.44.0Compare Source
Minor Changes
Added the
no-duplicated-enum-valuesrule that requires all values in anenumto be unique.The rule is enabled at the
warnlevel in therecommendedruleset.Note: linting output may include new warnings for API descriptions that contain duplicated enum values.
Added the
no-unsafe-markdownrule that disallows potentially executable content indescriptionfields.The rule is enabled at the
warnlevel in therecommendedruleset.Note: linting output may include new warnings for
descriptionfields that contain potentially executable content.Patch Changes
v2.43.3Compare Source
Patch Changes
v2.43.2Compare Source
Patch Changes
v2.43.1Compare Source
Patch Changes
v2.43.0Compare Source
Patch Changes
v2.42.0Compare Source
Minor Changes
generate-clientcommand that generates a typed, zero-dependency TypeScript client from an OpenAPI description — auth, retries, middleware, typed SSE streaming, pagination, and multipart included — plus optional companion generators for Zod validation, TanStack Query and SWR hooks, MSW mocks, and date transformers.See the
generate-clientcommand reference and the Use the generated client guide.Patch Changes
v2.41.2Compare Source
Patch Changes
Updated js-yaml from
5.2.1to5.2.2to resolve a vulnerability in YAML parsing.Added support for the Arazzo spec-compliant workflow reference form
$sourceDescriptions.<name>.<workflowId>independsOn, stepworkflowId, and success/failure actionworkflowId.Unresolvable workflow references fail only the affected workflow with a clear error message, and no longer abort the whole run or pass unnoticed.
Updated @redocly/openapi-core to v2.41.2.
Updated @redocly/respect-core to v2.41.2.
v2.41.1Compare Source
Patch Changes
driftcommand'sschema-consistencyrule reported false-positive findings foroneOfschemas with adiscriminator.Payloads are validated only against the branch selected by the discriminator value instead of every
oneOfbranch.Schemas whose discriminator does not meet Ajv's structural requirements keep the previous behavior.
driftcommand's built-in undocumented-header ignore list withx-amz-,x-amzn-andx-github-prefixes, and thex-hub-signature/x-hub-signature-256webhook signature headers.v2.41.0Compare Source
Minor Changes
security-scopes-definedthat requires every scope used in a security requirement to be defined in the corresponding OAuth2 security scheme.The rule supports OpenAPI 2.0/3.x and AsyncAPI 2.6/3.0, suggests the closest defined scope for typos, and has an opt-in
requireScopesoption that requires OAuth2 security requirements to list at least one scope.Patch Changes
respectwhere the execution of parent workflow's steps didn't halt after a step that referenced another workflow had failed.cursorAI provider of thegenerate-speccommand sent only the instructions to the model and the operation to refine never reached it.Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.