Skip to content

chore(deps): bump ajv and oas-tools in /server - #165

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/server/multi-35bb16dc7d
Open

chore(deps): bump ajv and oas-tools in /server#165
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/server/multi-35bb16dc7d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 17, 2026

Copy link
Copy Markdown
Contributor

Bumps ajv to 8.18.0 and updates ancestor dependency oas-tools. These dependencies need to be updated together.

Updates ajv from 6.12.6 to 8.18.0

Release notes

Sourced from ajv's releases.

v8.18.0

What's Changed

New Contributors

Full Changelog: ajv-validator/ajv@v8.17.1...v8.18.0

v8.17.1

What's Changed

Full Changelog: ajv-validator/ajv@v8.17.0...v8.17.1

Plus everything in 8.17.0 which failed to release

The only functional change is to switch from uri-js (which is no longer supported), to fast-uri. This is the second attempt and the team on fast-uri have been really helpful addressing the issues we found last time.

Revert "Revert fast-uri change (ajv-validator/ajv#2444)" by @​gurgunday in ajv-validator/ajv#2448 fix: ignore new eslint error for @​typescript-eslint/no-extraneous-class by @​jasoniangreen in ajv-validator/ajv#2455 docs: clarify behaviour of addVocabulary by @​jasoniangreen in ajv-validator/ajv#2454 docs: refactor to improve legibility by @​blottn in ajv-validator/ajv#2432 Fix grammatical typo in managing-schemas.md by @​wetneb in ajv-validator/ajv#2305 docs: Fix broken strict-mode link by @​alexanderjsx in ajv-validator/ajv#2459 feat: add test for encoded refs and bump fast-uri by @​jasoniangreen in ajv-validator/ajv#2449 fix: changes for @​typescript-eslint/array-type rule by @​jasoniangreen in ajv-validator/ajv#2467 fixes ajv-validator/ajv#2217 - clarify custom keyword naming by @​jasoniangreen in ajv-validator/ajv#2457

v8.17.0

What's Changed

The only functional change is to switch from uri-js (which is no longer supported), to fast-uri. This is the second attempt and the team on fast-uri have been really helpful addressing the issues we found last time.

... (truncated)

Commits
  • 142ce84 8.18.0
  • 720a23f fix(pattern): use configured RegExp engine with $data keyword to mitigate ReD...
  • 82735a1 fix: typos in schema-language.md (#2507)
  • b17ec32 fix: small grammatical error in managing-schemas.md (#2508)
  • 69568d0 fix: #2482 Infinity and NaN serialise to null (#2487)
  • f06766f feat: allow tree-shaking by adding ``"sideEffects": falsetopackage.json` ...
  • 9050ba1 bump version to 8.17.1 (#2472)
  • f7831b4 fixes #2217 - clarify custom keyword naming (#2457)
  • a523784 fix: changes for @​typescript-eslint/array-type rule (#2467)
  • 595fe58 feat: add test for encoded refs and bump fast-uri (#2449)
  • Additional commits viewable in compare view
Install script changes

This version modifies prepublish script that runs during installation. Review the package contents before updating.


Updates oas-tools from 2.2.2 to 3.1.0

Release notes

Sourced from oas-tools's releases.

v3.1.0

Bug Fixes

  • Avoid route overlapping when registering (eaf73a0)
  • Compatibility issue with parameter parsing (8bb0aa5), closes #362 #357
  • support jest test (918de8c)
  • when an option field is object type and is missing from request body, the request body shall considered as valid (68e860b), closes #356

Features

  • added async error handling for router and associated tests (6c4a53f)
  • upgrade js-yaml to v4.1.0 (906596a)

v3.0.3

Bug Fixes

  • Backward compatibility function error (a401ca6)

v3.0.2

Bug Fixes

  • Allow null values (22e72d2)
  • Check for extraneous query parameters (5f0c59b)
  • Data not being sent after response validation (b85a6c4)
  • default and nullable fields logic (2670211)
  • Support for OAS 'default' keyword in schemas (94c4297)
  • Support for readOnly and writeOnly (be25966)

v3.0.1

Bug Fixes

  • Fixed routing when controller is async (ee1650b)
  • support for common path parameters (b299b62)

v3.0.0

Bug Fixes

  • .snyk & package.json to reduce vulnerabilities (4a98e98)
  • .snyk, package.json & package-lock.json to reduce vulnerabilities (9c0664d)
  • .snyk, package.json & package-lock.json to reduce vulnerabilities (d4964b4)
  • Avoid conflict of multiple http secSchemes (51df899)
  • Avoid returning promise when calling 2.X init (f846061)
  • Backwards compatibility initialization (3ee3973)
  • Changed replaceAll with replace for Node v14 (f340f4a)
  • Check if secSchemes are defined in OASecurity (b59b23a)
  • Fixed error when not defining requestBody (a70353d)
  • Fixed error when using default config (f1804ac)
  • Fixed exception when no param sent on cookie (58f69d8)
  • Fixed logger not setting level correctly (5db1b6b)

... (truncated)

Changelog

Sourced from oas-tools's changelog.

3.1.0 (2023-03-07)

Bug Fixes

  • Avoid route overlapping when registering (eaf73a0)
  • Compatibility issue with parameter parsing (8bb0aa5), closes #362 #357
  • support jest test (918de8c)
  • when an option field is object type and is missing from request body, the request body shall considered as valid (68e860b), closes #356

Features

  • added async error handling for router and associated tests (6c4a53f)
  • upgrade js-yaml to v4.1.0 (906596a)

3.0.3 (2022-11-21)

Bug Fixes

  • Backward compatibility function error (a401ca6)

3.0.2 (2022-09-26)

Bug Fixes

  • Allow null values (22e72d2)
  • Check for extraneous query parameters (5f0c59b)
  • Data not being sent after response validation (b85a6c4)
  • default and nullable fields logic (2670211)
  • Support for OAS 'default' keyword in schemas (94c4297)
  • Support for readOnly and writeOnly (be25966)

3.0.1 (2022-09-12)

Bug Fixes

  • Fixed routing when controller is async (ee1650b)
  • support for common path parameters (b299b62)

... (truncated)

Commits
  • 622df71 chore(release): v3.1.0 [skip ci]
  • 15c3c54 Merge pull request #368 from oas-tools/develop
  • 32a4871 Merge pull request #366 from pebo/fix/jest-dynamic-esm-import-issue
  • 1d626b7 chore: Update commons library
  • eaf73a0 fix: Avoid route overlapping when registering
  • ae3a2e6 style: lint fix
  • 8bb0aa5 fix: Compatibility issue with parameter parsing
  • 3a8a74c Merge pull request #365 from pebo/feat/upgrade-js-yaml
  • 918de8c fix: support jest test
  • 906596a feat: upgrade js-yaml to v4.1.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [ajv](https://github.com/ajv-validator/ajv) to 8.18.0 and updates ancestor dependency [oas-tools](https://github.com/oas-tools/oas-tools). These dependencies need to be updated together.


Updates `ajv` from 6.12.6 to 8.18.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v6.12.6...v8.18.0)

Updates `oas-tools` from 2.2.2 to 3.1.0
- [Release notes](https://github.com/oas-tools/oas-tools/releases)
- [Changelog](https://github.com/oas-tools/oas-tools/blob/main/CHANGELOG.md)
- [Commits](oas-tools/oas-tools@2.2.2...v3.1.0)

---
updated-dependencies:
- dependency-name: ajv
  dependency-version: 8.18.0
  dependency-type: indirect
- dependency-name: oas-tools
  dependency-version: 3.1.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants