Skip to content

DPDB: Bump @redocly/cli from 2.49.0 to 2.51.2 in the all-dependencies group - #406

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/all-dependencies-9054233edd
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/all-dependencies-9054233edd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 1 update: @redocly/cli.

Updates @redocly/cli from 2.49.0 to 2.51.2

Release notes

Sourced from @​redocly/cli's releases.

@​redocly/cli@​2.51.2

Patch Changes

  • Updated fast-uri to the 3.1.7 version to resolve CVE-2026-75931, CVE-2026-75975, CVE-2026-75899, and CVE-2026-76172.
  • Fixed drift and coverage failing to match a path template whose segment mixes literal text with parameters, such as /instances/{worldId}:{instanceId}.
  • Fixed an issue where Redocly config resolution failed when plugins used ESM syntax.
  • Updated @​redocly/openapi-core to v2.51.2.

@​redocly/cli@​2.51.1

Patch Changes

  • Fixed an issue where generate-arazzo produced a malformed remote description URL in sourceDescriptions (https:// collapsed to https:/) when --output-file was provided.
  • Fixed an issue where $faker.string.email() used without options generated addresses at the undefined.com domain.
  • Updated @​redocly/respect-core to v2.51.1.
  • Updated @faker-js/faker to the 10.6.0 version to resolve the high severity advisory GHSA-qxc2-j82w-r537.

@​redocly/cli@​2.51.0

Minor Changes

  • Enhanced the generate-arazzo command to print a ready-to-run respect command after generation, including an --input placeholder for every workflow input.
  • Added --with-ai, --ai-provider, --ai-model, --ai-concurrency, and --max-workflows options to the generate-arazzo command. --with-ai uses a local AI CLI (claude, codex, or cursor) and OpenAPI descriptions to redesign the generated one-workflow-per-operation skeleton into multi-step workflows. The AI designs at most --max-workflows workflows (default 10), and the generated file is marked as AI-inferred. For descriptions that don't fit a single prompt, the AI first selects scenarios from a compact operation index, then it designs each workflow separately.

Patch Changes

  • Fixed an issue where respect and the x-security-scheme-required-values rule incorrectly rejected x-security HTTP schemes written with non-lowercase casing (such as Basic, Bearer, or Digest). RFC 7235 scheme names are case-insensitive.
  • Updated @​redocly/openapi-core to v2.51.0.
  • Updated @​redocly/respect-core to v2.51.0.

@​redocly/cli@​2.50.0

Minor Changes

  • Added a new schema assertion for configurable rules. The assertion validates a property value against a JSON Schema.

Patch Changes

  • Updated @​redocly/openapi-core to v2.50.0.

@​redocly/cli@​2.49.1

Patch Changes

  • Fixed an issue where rule incorrectly reported a duplicate parameter when two or more $refs pointed to the same path item.
  • Updated @​redocly/openapi-core to v2.49.1.
Commits
  • 8938c89 chore: 🔖 release new versions (#3085)
  • 57c491d fix: esm plugin resolution (#3091)
  • 51f80aa fix(drift): match path segments that mix literal text with parameters (#2994)
  • faee249 fix: update fast-uri to 3.1.7 to resolve advisories (#3084)
  • 90787c1 chore: 🔖 release new versions (#3077)
  • 4bfbf55 fix: update @​faker-js/faker to resolve vulnerability (#3075)
  • 9514d13 fix: generate-arazzo mangling a remote description URL (#3076)
  • 2566393 chore: 🔖 release new versions (#3073)
  • 1645ad2 feat: add --with-ai options for generate-arazzo command (#3052)
  • e200d9d fix(cli): report production usage data only for released builds (#3065)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 1 update: [@redocly/cli](https://github.com/Redocly/redocly-cli).


Updates `@redocly/cli` from 2.49.0 to 2.51.2
- [Release notes](https://github.com/Redocly/redocly-cli/releases)
- [Commits](https://github.com/Redocly/redocly-cli/compare/@redocly/cli@2.49.0...@redocly/cli@2.51.2)

---
updated-dependencies:
- dependency-name: "@redocly/cli"
  dependency-version: 2.51.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 9, 2026
@sonarqubecloud

sonarqubecloud Bot commented Sep 9, 2026

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants