Bump @redocly/cli from 1.34.15 to 2.42.0

[dependabot]

Bumps @redocly/cli from 1.34.15 to 2.42.0.

Release notes

Sourced from @​redocly/cli's releases.

@​redocly/cli@​2.42.0

Minor Changes

• Added an experimental generate-client command that generates a typed, zero-dependency TypeScript client from an OpenAPI description — auth, retries, middleware, typed SSE streaming, pagination, and multipart included — plus optional companion generators for Zod validation, TanStack Query and SWR hooks, MSW mocks, and date transformers. See the generate-client command reference and the Use the generated client guide.

Patch Changes

• Updated @​redocly/client-generator to v0.1.0.
• Updated @​redocly/openapi-core to v2.42.0.

@​redocly/cli@​2.41.2

Patch Changes

• Updated js-yaml from 5.2.1 to 5.2.2 to resolve a vulnerability in YAML parsing.

• Added support for the Arazzo spec-compliant workflow reference form $sourceDescriptions.<name>.<workflowId> in dependsOn, step workflowId, and success/failure action workflowId.

  Unresolvable workflow references fail only the affected workflow with a clear error message, and no longer abort the whole run or pass unnoticed.

• Updated @​redocly/openapi-core to v2.41.2.

• Updated @​redocly/respect-core to v2.41.2.

@​redocly/cli@​2.41.1

Patch Changes

• Fixed an issue where the drift command's schema-consistency rule reported false-positive findings for oneOf schemas with a discriminator. Payloads are validated only against the branch selected by the discriminator value instead of every oneOf branch. Schemas whose discriminator does not meet Ajv's structural requirements keep the previous behavior.
• Extended the drift command's built-in undocumented-header ignore list with x-amz-, x-amzn- and x-github- prefixes, and the x-hub-signature / x-hub-signature-256 webhook signature headers.

@​redocly/cli@​2.41.0

Minor Changes

• Added a new built-in rule security-scopes-defined that requires every scope used in a security requirement to be defined in the corresponding OAuth2 security scheme. The rule supports OpenAPI 2.0/3.x and AsyncAPI 2.6/3.0, suggests the closest defined scope for typos, and has an opt-in requireScopes option that requires OAuth2 security requirements to list at least one scope.

Patch Changes

• Fixed an issue in respect where the execution of parent workflow's steps didn't halt after a step that referenced another workflow had failed.
• Fixed an issue where the cursor AI provider of the generate-spec command sent only the instructions to the model and the operation to refine never reached it.
• Updated @​redocly/openapi-core to v2.41.0.
• Updated @​redocly/respect-core to v2.41.0.

@​redocly/cli@​2.40.0

Minor Changes

• Added an --ignore-headers option to the experimental drift and proxy commands. It takes a comma-separated list of header names to skip in undocumented-header checks, and a trailing * matches by prefix (for example x-consumer-*).

... (truncated)

Commits

• d9a7dcd chore: 🔖 release new versions (#2983)
• f7aac74 chore(deps): bump redocly/config version to v0.53.0 (#2984)
• 74364e5 feat: add openapi typescript client (#2885)
• 3016d43 chore: 🔖 release new versions (#2978)
• 324c0f6 chore: bump js-yaml to 5.2.2 and refresh lockfile (#2982)
• 737ff01 chore(cli): add production env to usage data (#2976)
• bd82fc6 fix(respect): workflow references format (#2969)
• b15dae2 chore: 🔖 release new versions (#2975)
• 6da4e28 fix: validate discriminated oneOf schemas against only the branch selected by...
• fba67bd chore: fix snapshot release (#2974)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #11.