Skip to content

chore(deps): bump oas-normalize from 16.1.2 to 18.0.2 - #1204

Merged
erunion merged 3 commits into
mainfrom
dependabot/npm_and_yarn/oas-normalize-18.0.0
Sep 11, 2026
Merged

erunion merged 3 commits into
mainfrom
dependabot/npm_and_yarn/oas-normalize-18.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps oas-normalize from 16.1.2 to 18.0.2.

Release notes

Sourced from oas-normalize's releases.

18.0.2

What's Changed

Full Changelog: readmeio/oas@18.0.1...18.0.2

18.0.1

What's Changed

Full Changelog: readmeio/oas@18.0.0...18.0.1

18.0.0

What's Changed

Full Changelog: readmeio/oas@17.8.1...18.0.0

17.8.2

Full Changelog: readmeio/oas@17.8.1...17.8.2

17.8.1

What's Changed

Full Changelog: readmeio/oas@17.8.0...17.8.1

17.8.0

What's Changed

... (truncated)

Changelog

Sourced from oas-normalize's changelog.

18.0.2

Patch Changes

  • @​readme/openapi-parser@​9.0.0

18.0.1

Patch Changes

  • 3a39803: chore(deps): bump js-yaml from 4.3.1 to 5.4.1
  • Updated dependencies [21732a2]
  • Updated dependencies [3f27c3e]
  • Updated dependencies [e3f4494]
  • Updated dependencies [fcfb099]
    • @​readme/openapi-parser@​8.0.2

18.0.0

Major Changes

  • 7c55763: Drop orphaned $id keywords when bundling, dereferencing, or validating. A $id carried onto an inlined external schema re-scoped its sibling #/… pointers and made bundling throw a spurious "Missing $ref pointer" error, so we now discard $ids that no $ref targets while leaving legitimate reference anchors untouched.

Patch Changes

  • Updated dependencies [7c55763]
    • @​readme/openapi-parser@​8.0.0

17.0.1

Patch Changes

  • 55e44a6: Disable filesystem $ref resolution (including file://) by default to prevent local file disclosure from untrusted specs. resolve.file: true now correctly opts back into the stock file resolver, and oas-normalize always re-asserts this policy from enablePaths so validate({ parser }) cannot re-enable it.
  • Updated dependencies [55e44a6]
    • @​readme/openapi-parser@​7.0.1

17.0.0

Major Changes

  • 99be27e: Address issues in OpenAPI URL retrievals where it private IPs could be incorrectly accessed if specified.

Patch Changes

  • Updated dependencies [99be27e]
  • Updated dependencies [ff467c3]
    • @​readme/openapi-parser@​7.0.0
Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 1, 2026
@dependabot
dependabot Bot requested a review from erunion as a code owner September 1, 2026 05:18
@changeset-bot

changeset-bot Bot commented Sep 1, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 7266005

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
api Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@erunion
erunion removed their request for review September 2, 2026 21:59
@dependabot dependabot Bot changed the title chore(deps): bump oas-normalize from 16.1.2 to 18.0.0 chore(deps): bump oas-normalize from 16.1.2 to 18.0.2 Sep 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/oas-normalize-18.0.0 branch from b7645cd to 78b6c25 Compare September 11, 2026 20:45
Bumps [oas-normalize](https://github.com/readmeio/oas/tree/HEAD/packages/oas-normalize) from 16.1.2 to 18.0.2.
- [Release notes](https://github.com/readmeio/oas/releases)
- [Changelog](https://github.com/readmeio/oas/blob/main/packages/oas-normalize/CHANGELOG.md)
- [Commits](https://github.com/readmeio/oas/commits/18.0.2/packages/oas-normalize)

---
updated-dependencies:
- dependency-name: oas-normalize
  dependency-version: 18.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/oas-normalize-18.0.0 branch from 78b6c25 to cd3afaa Compare September 11, 2026 20:54
@erunion
erunion merged commit 1953234 into main Sep 11, 2026
7 checks passed
@erunion
erunion deleted the dependabot/npm_and_yarn/oas-normalize-18.0.0 branch September 11, 2026 21:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant