Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 15, 2025

Bumps js-yaml to 4.1.1 and updates ancestor dependency swagger-typescript-api. These dependencies need to be updated together.

Updates js-yaml from 4.1.0 to 4.1.1

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.
Commits

Updates swagger-typescript-api from 12.0.4 to 13.2.16

Release notes

Sourced from swagger-typescript-api's releases.

13.2.16

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#13216

13.2.15

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#13215

13.2.14

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#13214

13.2.13

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#13213

13.2.12

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#13212

13.2.11

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#13211

13.2.10

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#13210

13.2.9

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#1329

13.2.8

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#1328

13.2.7

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#1327

13.2.6

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#1326

13.2.5

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#1325

13.2.4

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#1324

13.2.3

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#1323

13.2.2

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#1322

13.2.1

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#1321

13.2.0

See the changelog for release notes: https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md#1320

... (truncated)

Changelog

Sourced from swagger-typescript-api's changelog.

13.2.16

Patch Changes

  • #1459 6b485dd Thanks @​smorimoto! - Downgrade eta from 4.0.1 to 3.5.0 to fix module resolution error.

    After the upgrade to eta@4.0.1 in version 13.2.11, API generation started failing with ERR_PACKAGE_PATH_NOT_EXPORTED: No "exports" main defined in eta/package.json. This issue is caused by incorrect package export configuration in eta@4.0.1, which is tracked in the upstream repository.

    Downgrading to eta@3.5.0 resolves the module resolution error whilst maintaining compatibility with the existing template system.

    Fixes #1427.

13.2.15

Patch Changes

  • afc2448 Thanks @​js2me! - added ability to override usageSchema and originalSchema after onInit hook and before all other operations

13.2.14

Patch Changes

  • #1398 d987aee Thanks @​k1rd3rf! - Fix modular template to always generate class property syntax.

    The modular template was incorrectly using object method syntax (: and ,) when route.namespace was present, introduced by PR #1326. This caused TypeScript syntax errors in generated code.

    The modular template should always generate class properties with arrow functions (= and ;), regardless of namespace presence.

    This resolves the issue reported in #1366 where version 13.2.8 generated invalid TypeScript code with modular templates.

13.2.13

Patch Changes

  • #1424 aa79764 Thanks @​smorimoto! - Ensure discriminator mappings use union enum literals.

    Resolve discriminator mapping generation to use literal values when generateUnionEnums is enabled to avoid emitting enum member references. Add regression coverage that snapshots the discriminator output with union enums.

  • #1422 724b0cd Thanks @​smorimoto! - Replace js-yaml with yaml.

... (truncated)

Commits
  • a590fe8 Version Packages (#1460)
  • 6b485dd Downgrade eta to 3.5.0 to fix module resolution error (#1459)
  • 589ba49 chore(deps-dev): bump @​types/node from 24.9.0 to 24.9.1 (#1458)
  • e8ce7b4 chore(deps): bump actions/setup-node from 5 to 6 (#1456)
  • 4a981d6 chore(deps-dev): bump tsdown from 0.15.8 to 0.15.9 (#1455)
  • 02f4806 chore(deps-dev): bump @​types/node from 24.8.1 to 24.9.0 (#1454)
  • ad03d52 chore(deps): bump vite in the npm_and_yarn group across 1 directory (#1457)
  • ee0f5a8 chore(deps-dev): bump tsdown from 0.15.7 to 0.15.8 (#1453)
  • dea2a2f chore(deps-dev): bump @​types/node from 24.8.0 to 24.8.1 (#1451)
  • 45afcf8 chore(deps): bump c12 from 3.3.0 to 3.3.1 (#1452)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for swagger-typescript-api since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 4.1.1 and updates ancestor dependency [swagger-typescript-api](https://github.com/acacode/swagger-typescript-api). These dependencies need to be updated together.


Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

Updates `swagger-typescript-api` from 12.0.4 to 13.2.16
- [Release notes](https://github.com/acacode/swagger-typescript-api/releases)
- [Changelog](https://github.com/acacode/swagger-typescript-api/blob/main/CHANGELOG.md)
- [Commits](acacode/swagger-typescript-api@12.0.4...13.2.16)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
- dependency-name: swagger-typescript-api
  dependency-version: 13.2.16
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 15, 2025
@vercel
Copy link

vercel bot commented Nov 15, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Preview Comments Updated (UTC)
ainsleydev Ignored Ignored Preview Nov 15, 2025 11:27am

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant