Skip to content

chore(deps): bump the validation-npm group in /validation with 2 updates - #527

Merged
hdamker merged 1 commit into
mainfrom
dependabot/npm_and_yarn/validation/validation-npm-ac797c5d8e
Nov 10, 2026
Merged

chore(deps): bump the validation-npm group in /validation with 2 updates#527
hdamker merged 1 commit into
mainfrom
dependabot/npm_and_yarn/validation/validation-npm-ac797c5d8e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the validation-npm group in /validation with 2 updates: @redocly/cli and @stoplight/spectral-cli.

Updates @redocly/cli from 2.72.1 to 2.76.0

Release notes

Sourced from @​redocly/cli's releases.

@​redocly/cli@​2.76.0

Patch Changes

  • Fixed an issue where respect sent cnonce="undefined" in every HTTP Digest Authorization header instead of a random client nonce.
  • Fixed an issue where respect failed HTTP Digest authentication when the server's WWW-Authenticate header had no opaque parameter.
  • Fixed an issue where respect failed HTTP Digest authentication when a value in the server's WWW-Authenticate header contained = or ,, such as a base64 nonce with padding.
  • Updated @​redocly/platform-integration to v2.76.0.
  • Updated @​redocly/respect-core to v2.76.0.

@​redocly/cli@​2.75.0

Minor Changes

  • Added support for the platform option and the access.rbac.platform scope in redocly.yaml.
  • Added a warning for deprecated options in redocly.yaml, for example reunite, which platform replaces.

Patch Changes

  • Fixed an issue where the generated PHP client threw a TypeError on a response with a oneOf or anyOf value without a discriminator.
  • Fixed an issue where the generated PHP client named a type twice in a discriminated union whose member is itself a union, which PHP rejects.
  • Updated @​redocly/client-generator to v0.9.2.
  • Updated @​redocly/openapi-core to v2.75.0.

@​redocly/cli@​2.74.0

Patch Changes

  • Fixed an issue where lint reported Media Type Objects under components.mediaTypes in OpenAPI 3.2 descriptions as invalid. A $ref to such an object goes in a content entry, as the specification defines.
  • Fixed an issue where lint reported the encoding, prefixEncoding, and itemEncoding fields of a nested Encoding Object in OpenAPI 3.2 descriptions as invalid. The spec-no-invalid-encoding-combinations rule also checks nested Encoding Objects.
  • Fixed the messages of configurable rules and the codeframes in the json output so that they no longer carry terminal color codes.
  • Fixed the spec-strict-refs rule so that it no longer reports a $ref to a Media Type Object in a content entry of OpenAPI 3.2 descriptions.
  • Updated @​redocly/openapi-core to v2.74.0.

@​redocly/cli@​2.73.0

Minor Changes

  • Added usage telemetry and the onSettled hook to the generated Go, Python, and PHP clients. Renamed a schema named UsageTelemetry, UsageTelemetryOptions, UsageTelemetryEvent, NewUsageTelemetry, or FlushUsageTelemetry in every generated client, for example to UsageTelemetry_2, so that it does not clash with the usage telemetry code. If your code uses one of these generated types, update its name.

  • Added the --report option to the generate-client command. It writes a JSON file with the operations of each API and the warnings of the run, each with a stable kind. A custom or ejected generator gets reportFinding in its run input, to add its own warnings to the report.

    Note: wrappableOperations from @redocly/client-generator/contracts/typescript takes reportFinding as its third argument. A custom or ejected swr or tanstack-query generator must pass the reportFinding that its run receives.

  • Added the no-server-variables-empty-enum rule to the spec ruleset for OpenAPI 3.1 and 3.2 descriptions, where the specification requires a non-empty enum that holds the default value.

Patch Changes

... (truncated)

Commits
  • 18a0d76 chore: 🔖 release new versions (#3364)
  • a9b1bb7 chore: rename @​redocly/reunite-integration to @​redocly/platform-integration (...
  • f76e21e chore: update changelog for v1 (#3370)
  • 0cfcf64 docs: describe the bundle component naming change in the v2 migration guide (...
  • 5ef4ec4 fix: generate the client nonce and parse Digest challenges per RFC 7616 in re...
  • 7893de8 chore: 🔖 release new versions (#3362)
  • 7dbd98d fix(client-generator): type an undiscriminated union in the PHP client as its...
  • 0b66355 feat: warn about the deprecated reunite option in redocly.yaml (#3336)
  • b6dbb23 chore: add 2.74.0 to the historical benchmark versions (#3361)
  • 3256937 chore: 🔖 release new versions (#3354)
  • Additional commits viewable in compare view

Updates @stoplight/spectral-cli from 6.17.0 to 6.17.1

Release notes

Sourced from @​stoplight/spectral-cli's releases.

v6.17.1

What's Changed

New Contributors

Full Changelog: stoplightio/spectral@v6.17.0...v6.17.1

Commits
  • a7316c0 chore(release): 6.17.1 [skip ci]
  • a42744d chore(release): 1.11.1 [skip ci]
  • d5da3c0 fix(functions): republish 1.11.1 after failed release (#3104)
  • 5193715 chore(release): 1.11.1 [skip ci]
  • bf782be fix(cli): lint files whose names contain glob characters (#3101)
  • 74a5fe0 fix(rulesets): guard null definitions in oas2-discriminator given (#3098)
  • 0b4889e chore(deps): bump fast-uri from 3.1.8 to 3.1.9 (#3097)
  • 6497ddd fix(core): resolve a redefined rule's given against the aliases of its rulese...
  • 5c566df fix(functions): clearer schema errors for array items and oneOf/anyOf (#3095)
  • 7d7e791 chore(deps): bump handlebars from 4.7.9 to 4.7.10 (#3091)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the validation-npm group in /validation with 2 updates
a4bc526 
Bumps the validation-npm group in /validation with 2 updates: [@redocly/cli](https://github.com/Redocly/redocly-cli) and [@stoplight/spectral-cli](https://github.com/stoplightio/spectral).


Updates `@redocly/cli` from 2.72.1 to 2.76.0
- [Release notes](https://github.com/Redocly/redocly-cli/releases)
- [Commits](https://github.com/Redocly/redocly-cli/compare/@redocly/cli@2.72.1...@redocly/cli@2.76.0)

Updates `@stoplight/spectral-cli` from 6.17.0 to 6.17.1
- [Release notes](https://github.com/stoplightio/spectral/releases)
- [Changelog](https://github.com/stoplightio/spectral/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/stoplightio/spectral/compare/@stoplight/spectral-cli-6.17.0...@stoplight/spectral-cli-6.17.1)

---
updated-dependencies:
- dependency-name: "@redocly/cli"
  dependency-version: 2.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: validation-npm
- dependency-name: "@stoplight/spectral-cli"
  dependency-version: 6.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: validation-npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Used by Dependabot javascript Pull requests that update JavaScript dependencies labels Nov 9, 2026
Kevsy
Kevsy approved these changes Nov 10, 2026
View reviewed changes

@Kevsy Kevsy left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@hdamker
hdamker merged commit 399199e into main Nov 10, 2026
8 checks passed
@hdamker
hdamker deleted the dependabot/npm_and_yarn/validation/validation-npm-ac797c5d8e branch November 10, 2026 15:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Kevsy Kevsy Kevsy approved these changes
@hdamker hdamker hdamker approved these changes
@rartych rartych Awaiting requested review from rartych rartych is a code owner

Assignees

No one assigned

Labels

dependencies Used by Dependabot javascript Pull requests that update JavaScript dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Kevsy @hdamker