Loading workspace insights... Statistics interval
7 days30 daysLatest CI Pipeline Executions
06bf4773 chore(deps): update open api updates (main) (#3994)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[org.openapitools:openapi-generator](https://redirect.github.com/openapitools/openapi-generator)
| `7.19.0` ā `7.20.0` |

|

|
|
[io.swagger.core.v3:swagger-core](https://redirect.github.com/swagger-api/swagger-core)
| `2.2.42` ā `2.2.43` |

|

|
|
[org.apache.maven.plugins:maven-surefire-plugin](https://maven.apache.org/surefire/)
([source](https://redirect.github.com/apache/maven-surefire)) | `3.5.4`
ā `3.5.5` |

|

|
---
### Release Notes
<details>
<summary>openapitools/openapi-generator
(org.openapitools:openapi-generator)</summary>
###
[`v7.20.0`](https://redirect.github.com/OpenAPITools/openapi-generator/releases/tag/v7.20.0):
released
[Compare
Source](https://redirect.github.com/openapitools/openapi-generator/compare/v7.19.0...v7.20.0)
v7.20.0 stable release comes with 140+ enhancements, bug fixes. Once
again thanks for all the contributions from the community.
This release comes with 2 new generators:
- \[Terraform] New Terraform Provider generator
[#​22949](https://redirect.github.com/openapitools/openapi-generator/issues/22949)
- C++ Httplib server codegen
[#​21724](https://redirect.github.com/openapitools/openapi-generator/issues/21724)
Below are the highlights of the changes. For a full list of changes,
please refer to the ["Pull
Request"](https://redirect.github.com/OpenAPITools/openapi-generator/pulls?q=is%3Amerged+is%3Apr+milestone%3A7.20.0+)
tab.
##### General
- feat: Make model property generation deterministic by sorting
alphabetically
[#​22836](https://redirect.github.com/openapitools/openapi-generator/issues/22836)
- \[Normalizer] add type information to an error message
[#​22742](https://redirect.github.com/openapitools/openapi-generator/issues/22742)
##### C\#
- \[csharp]\[generichost] Added xml comments and restrict some access
[#​22796](https://redirect.github.com/openapitools/openapi-generator/issues/22796)
- C# GenericHost Support multi targetting
[#​22234](https://redirect.github.com/openapitools/openapi-generator/issues/22234)
- C# GenericHost remove state from TokenProvider abstract base class so
it makes more sense for JIT requested tokens (for long lived ApiClients
with OAuth security schemes)
[#​22233](https://redirect.github.com/openapitools/openapi-generator/issues/22233)
- \[csharp]\[generichost] Add HTTP client name to fix client duplicity
[#​22118](https://redirect.github.com/openapitools/openapi-generator/issues/22118)
##### C++
- \[cpp-qt-client]Prefix signal argument types with namespace
[#​22921](https://redirect.github.com/openapitools/openapi-generator/issues/22921)
- \[cpp-qt] Add global server index setter for all operations
[#​22760](https://redirect.github.com/openapitools/openapi-generator/issues/22760)
- C++ Httplib server codegen (New Generator)
[#​21724](https://redirect.github.com/openapitools/openapi-generator/issues/21724)
##### Go
- \[go] Fix text escaping in example code generation
[#​22841](https://redirect.github.com/openapitools/openapi-generator/issues/22841)
##### Java
- \[java]\[jackson] fix double serialization of discriminator
[#​22924](https://redirect.github.com/openapitools/openapi-generator/issues/22924)
- \[BUG] \[JAVA] fix validateJsonElement failing for required nullable
fields
[#​22912](https://redirect.github.com/openapitools/openapi-generator/issues/22912)
- \[JAVA]\[FEIGN] Put back hardcoded HTTP Client but without the
performance issue
[#​22905](https://redirect.github.com/openapitools/openapi-generator/issues/22905)
- feature(jackson3) add jackson3 support for spring generator
[#​22854](https://redirect.github.com/openapitools/openapi-generator/issues/22854)
- \[JAVA-SPRING;KOTLIN-SPRING] - add possibility to override
x-implements and x-kotlin-implements via config options.
[#​22839](https://redirect.github.com/openapitools/openapi-generator/issues/22839)
- Fix Jackson Serialization of additionalProperties on java and
jaxrs-spec
[#​22366](https://redirect.github.com/openapitools/openapi-generator/issues/22366)
##### Kotlin
- \[KOTLIN;SPRING] - add support for 'x-spring-paginated' to get closer
to feature parity with java-spring codegen add 'autoXSpringPaginated'
option; support x-operation-extra-annotation
[#​22958](https://redirect.github.com/openapitools/openapi-generator/issues/22958)
- \[BUG] \[KOTLIN-SPRING]
[@​HttpExchange](https://redirect.github.com/HttpExchange) in
declarative interface does not support property placeholders
[#​22882](https://redirect.github.com/openapitools/openapi-generator/issues/22882)
- \[kotlin]\[jvm-okhttp4] Fix multipart/form-data with JSON content-type
[#​22856](https://redirect.github.com/openapitools/openapi-generator/issues/22856)
- \[Kotlin]\[Client] Migrate Enum.values() to Enum.entities
[#​22852](https://redirect.github.com/openapitools/openapi-generator/issues/22852)
- \[KOTLIN-CLIENT] fix Parent interface class having incorrect
collection property type List instead of Set
[#​22850](https://redirect.github.com/openapitools/openapi-generator/issues/22850)
- \[JAVA-SPRING]\[KOTLIN-SPRING] - add possibility to override
x-implements and x-kotlin-implements via config options.
[#​22839](https://redirect.github.com/openapitools/openapi-generator/issues/22839)
- \[kotlin-server] Add polymorphism, oneOf and allOf support
[#​22610](https://redirect.github.com/openapitools/openapi-generator/issues/22610)
##### PHP
- \[php-symfony] fix sequencial escape when validating a class type
[#​22906](https://redirect.github.com/openapitools/openapi-generator/issues/22906)
- \[php]\[php-nextgen] Fix nullability when multiple response types are
possible
[#​22827](https://redirect.github.com/openapitools/openapi-generator/issues/22827)
##### Protobuf
- \[Protobuf] Fix Discriminator Issue and add capability Enum Extraction
[#​22740](https://redirect.github.com/openapitools/openapi-generator/issues/22740)
##### Python
- Update python sdk to strip any directory traversal in filename
[#​22965](https://redirect.github.com/openapitools/openapi-generator/issues/22965)
- Remove coding: utf-8 as that's the default already
[#​22934](https://redirect.github.com/openapitools/openapi-generator/issues/22934)
- feat(python): enhance retry configuration in REST client
[#​22867](https://redirect.github.com/openapitools/openapi-generator/issues/22867)
- \[python-fastapi] Set python version to 3.10
[#​22823](https://redirect.github.com/openapitools/openapi-generator/issues/22823)
##### R
- \[R] avoid to-JSON issues when R6 classes contain lists of R6 classes
[#​22828](https://redirect.github.com/openapitools/openapi-generator/issues/22828)
- \[R] optionally skip parsing responses to R6 objects
[#​22705](https://redirect.github.com/openapitools/openapi-generator/issues/22705)
##### Rust
- Add support for ApiKey auth to rust-server
[#​22950](https://redirect.github.com/openapitools/openapi-generator/issues/22950)
- Add support for enums of integers in rust-server generator
[#​22915](https://redirect.github.com/openapitools/openapi-generator/issues/22915)
- fix: apply integer type fitting for Rust params
[#​22853](https://redirect.github.com/openapitools/openapi-generator/issues/22853)
- feat: Support selective ssl/tls backend in rust-server to optionally
remove openssl
[#​22825](https://redirect.github.com/openapitools/openapi-generator/issues/22825)
- \[Rust] Update reqwest to 0.13 and reqwest-middleware to 0.5
[#​22816](https://redirect.github.com/openapitools/openapi-generator/issues/22816)
- fix: Fix rust-server model generation following serde\_valid upgrade
[#​22737](https://redirect.github.com/openapitools/openapi-generator/issues/22737)
##### Swift
- \[swift6]\[client] Remove unnecessary Combine checks
[#​22810](https://redirect.github.com/openapitools/openapi-generator/issues/22810)
- \[swift6] fix Vapor build, disable swift 5 tests on CI and enable more
swift 6 tests on CI
[#​22805](https://redirect.github.com/openapitools/openapi-generator/issues/22805)
- \[swift6]\[client] Increase minimum supported SDK to accommodate swift
concurrency
[#​22802](https://redirect.github.com/openapitools/openapi-generator/issues/22802)
- \[swift6]\[client] improve swift 6 thread safety
[#​22801](https://redirect.github.com/openapitools/openapi-generator/issues/22801)
- \[swift6]\[client] Add new hooks to OpenAPIInterceptor
[#​22800](https://redirect.github.com/openapitools/openapi-generator/issues/22800)
- \[swift6]\[client] mark PromiseKit as deprecated
[#​22792](https://redirect.github.com/openapitools/openapi-generator/issues/22792)
- \[swift6]\[client] make api calls concurrent
[#​22790](https://redirect.github.com/openapitools/openapi-generator/issues/22790)
- \[swift5]\[client] soft deprecate Swift 5 generator
[#​22789](https://redirect.github.com/openapitools/openapi-generator/issues/22789)
- \[swift6]\[client] mark some closures as sendable
[#​22776](https://redirect.github.com/openapitools/openapi-generator/issues/22776)
##### Terraform
- \[Terraform] New Terraform Provider generator (New Generator)
[#​22949](https://redirect.github.com/openapitools/openapi-generator/issues/22949)
##### TypeScript
- fix(typescript-axios): Ignore unused parameter on JSON serializer
replacer function
[#​22858](https://redirect.github.com/openapitools/openapi-generator/issues/22858)
- \[BUG]\[Typescript] Fix isRelativeUrl incorrectly detecting URLs
containing @​, -, \~, . as not relative.
[#​22768](https://redirect.github.com/openapitools/openapi-generator/issues/22768)
- \[typescript-angular] Fix inner enum reference in multi-map property
type
[#​22748](https://redirect.github.com/openapitools/openapi-generator/issues/22748)
- Add create requestOpts method to {{classname}}Interface
[#​21709](https://redirect.github.com/openapitools/openapi-generator/issues/21709)
- \[typescript] make TypeScript version configurable and default to v5
[#​20064](https://redirect.github.com/openapitools/openapi-generator/issues/20064)
</details>
<details>
<summary>swagger-api/swagger-core
(io.swagger.core.v3:swagger-core)</summary>
###
[`v2.2.43`](https://redirect.github.com/swagger-api/swagger-core/releases/tag/v2.2.43):
Swagger-core 2.2.43 released!
[Compare
Source](https://redirect.github.com/swagger-api/swagger-core/compare/v2.2.42...v2.2.43)
- fix: add missing
[@​ArraysSchema](https://redirect.github.com/ArraysSchema).arraySchema
properties
([#​5049](https://redirect.github.com/swagger-api/swagger-core/issues/5049))
- refactor: introduce class responsible for how bean validation
annotations affect schemas
([#​5047](https://redirect.github.com/swagger-api/swagger-core/issues/5047))
- fix: treat example values starting with numbers as strings
([#​5046](https://redirect.github.com/swagger-api/swagger-core/issues/5046))
- refactor: add an overloaded method for resolving required so that the
field type can be utilized
([#​5042](https://redirect.github.com/swagger-api/swagger-core/issues/5042))
- test: Add test showing how
[@​JsonSubTypes](https://redirect.github.com/JsonSubTypes) can be
used with
[@​Schema-oneOf](https://redirect.github.com/Schema-oneOf)
annotations
([#​5030](https://redirect.github.com/swagger-api/swagger-core/issues/5030))
- chore: update commons-lang3 to 3.20
([#​5026](https://redirect.github.com/swagger-api/swagger-core/issues/5026))
</details>
---
### Configuration
š
**Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
š¦ **Automerge**: Enabled.
ā» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
š» **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/AmadeusITGroup/otter).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNi41IiwidXBkYXRlZEluVmVyIjoiNDMuMzYuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19--> 06bf4773 chore(deps): update open api updates (main) (#3994)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[org.openapitools:openapi-generator](https://redirect.github.com/openapitools/openapi-generator)
| `7.19.0` ā `7.20.0` |

|

|
|
[io.swagger.core.v3:swagger-core](https://redirect.github.com/swagger-api/swagger-core)
| `2.2.42` ā `2.2.43` |

|

|
|
[org.apache.maven.plugins:maven-surefire-plugin](https://maven.apache.org/surefire/)
([source](https://redirect.github.com/apache/maven-surefire)) | `3.5.4`
ā `3.5.5` |

|

|
---
### Release Notes
<details>
<summary>openapitools/openapi-generator
(org.openapitools:openapi-generator)</summary>
###
[`v7.20.0`](https://redirect.github.com/OpenAPITools/openapi-generator/releases/tag/v7.20.0):
released
[Compare
Source](https://redirect.github.com/openapitools/openapi-generator/compare/v7.19.0...v7.20.0)
v7.20.0 stable release comes with 140+ enhancements, bug fixes. Once
again thanks for all the contributions from the community.
This release comes with 2 new generators:
- \[Terraform] New Terraform Provider generator
[#​22949](https://redirect.github.com/openapitools/openapi-generator/issues/22949)
- C++ Httplib server codegen
[#​21724](https://redirect.github.com/openapitools/openapi-generator/issues/21724)
Below are the highlights of the changes. For a full list of changes,
please refer to the ["Pull
Request"](https://redirect.github.com/OpenAPITools/openapi-generator/pulls?q=is%3Amerged+is%3Apr+milestone%3A7.20.0+)
tab.
##### General
- feat: Make model property generation deterministic by sorting
alphabetically
[#​22836](https://redirect.github.com/openapitools/openapi-generator/issues/22836)
- \[Normalizer] add type information to an error message
[#​22742](https://redirect.github.com/openapitools/openapi-generator/issues/22742)
##### C\#
- \[csharp]\[generichost] Added xml comments and restrict some access
[#​22796](https://redirect.github.com/openapitools/openapi-generator/issues/22796)
- C# GenericHost Support multi targetting
[#​22234](https://redirect.github.com/openapitools/openapi-generator/issues/22234)
- C# GenericHost remove state from TokenProvider abstract base class so
it makes more sense for JIT requested tokens (for long lived ApiClients
with OAuth security schemes)
[#​22233](https://redirect.github.com/openapitools/openapi-generator/issues/22233)
- \[csharp]\[generichost] Add HTTP client name to fix client duplicity
[#​22118](https://redirect.github.com/openapitools/openapi-generator/issues/22118)
##### C++
- \[cpp-qt-client]Prefix signal argument types with namespace
[#​22921](https://redirect.github.com/openapitools/openapi-generator/issues/22921)
- \[cpp-qt] Add global server index setter for all operations
[#​22760](https://redirect.github.com/openapitools/openapi-generator/issues/22760)
- C++ Httplib server codegen (New Generator)
[#​21724](https://redirect.github.com/openapitools/openapi-generator/issues/21724)
##### Go
- \[go] Fix text escaping in example code generation
[#​22841](https://redirect.github.com/openapitools/openapi-generator/issues/22841)
##### Java
- \[java]\[jackson] fix double serialization of discriminator
[#​22924](https://redirect.github.com/openapitools/openapi-generator/issues/22924)
- \[BUG] \[JAVA] fix validateJsonElement failing for required nullable
fields
[#​22912](https://redirect.github.com/openapitools/openapi-generator/issues/22912)
- \[JAVA]\[FEIGN] Put back hardcoded HTTP Client but without the
performance issue
[#​22905](https://redirect.github.com/openapitools/openapi-generator/issues/22905)
- feature(jackson3) add jackson3 support for spring generator
[#​22854](https://redirect.github.com/openapitools/openapi-generator/issues/22854)
- \[JAVA-SPRING;KOTLIN-SPRING] - add possibility to override
x-implements and x-kotlin-implements via config options.
[#​22839](https://redirect.github.com/openapitools/openapi-generator/issues/22839)
- Fix Jackson Serialization of additionalProperties on java and
jaxrs-spec
[#​22366](https://redirect.github.com/openapitools/openapi-generator/issues/22366)
##### Kotlin
- \[KOTLIN;SPRING] - add support for 'x-spring-paginated' to get closer
to feature parity with java-spring codegen add 'autoXSpringPaginated'
option; support x-operation-extra-annotation
[#​22958](https://redirect.github.com/openapitools/openapi-generator/issues/22958)
- \[BUG] \[KOTLIN-SPRING]
[@​HttpExchange](https://redirect.github.com/HttpExchange) in
declarative interface does not support property placeholders
[#​22882](https://redirect.github.com/openapitools/openapi-generator/issues/22882)
- \[kotlin]\[jvm-okhttp4] Fix multipart/form-data with JSON content-type
[#​22856](https://redirect.github.com/openapitools/openapi-generator/issues/22856)
- \[Kotlin]\[Client] Migrate Enum.values() to Enum.entities
[#​22852](https://redirect.github.com/openapitools/openapi-generator/issues/22852)
- \[KOTLIN-CLIENT] fix Parent interface class having incorrect
collection property type List instead of Set
[#​22850](https://redirect.github.com/openapitools/openapi-generator/issues/22850)
- \[JAVA-SPRING]\[KOTLIN-SPRING] - add possibility to override
x-implements and x-kotlin-implements via config options.
[#​22839](https://redirect.github.com/openapitools/openapi-generator/issues/22839)
- \[kotlin-server] Add polymorphism, oneOf and allOf support
[#​22610](https://redirect.github.com/openapitools/openapi-generator/issues/22610)
##### PHP
- \[php-symfony] fix sequencial escape when validating a class type
[#​22906](https://redirect.github.com/openapitools/openapi-generator/issues/22906)
- \[php]\[php-nextgen] Fix nullability when multiple response types are
possible
[#​22827](https://redirect.github.com/openapitools/openapi-generator/issues/22827)
##### Protobuf
- \[Protobuf] Fix Discriminator Issue and add capability Enum Extraction
[#​22740](https://redirect.github.com/openapitools/openapi-generator/issues/22740)
##### Python
- Update python sdk to strip any directory traversal in filename
[#​22965](https://redirect.github.com/openapitools/openapi-generator/issues/22965)
- Remove coding: utf-8 as that's the default already
[#​22934](https://redirect.github.com/openapitools/openapi-generator/issues/22934)
- feat(python): enhance retry configuration in REST client
[#​22867](https://redirect.github.com/openapitools/openapi-generator/issues/22867)
- \[python-fastapi] Set python version to 3.10
[#​22823](https://redirect.github.com/openapitools/openapi-generator/issues/22823)
##### R
- \[R] avoid to-JSON issues when R6 classes contain lists of R6 classes
[#​22828](https://redirect.github.com/openapitools/openapi-generator/issues/22828)
- \[R] optionally skip parsing responses to R6 objects
[#​22705](https://redirect.github.com/openapitools/openapi-generator/issues/22705)
##### Rust
- Add support for ApiKey auth to rust-server
[#​22950](https://redirect.github.com/openapitools/openapi-generator/issues/22950)
- Add support for enums of integers in rust-server generator
[#​22915](https://redirect.github.com/openapitools/openapi-generator/issues/22915)
- fix: apply integer type fitting for Rust params
[#​22853](https://redirect.github.com/openapitools/openapi-generator/issues/22853)
- feat: Support selective ssl/tls backend in rust-server to optionally
remove openssl
[#​22825](https://redirect.github.com/openapitools/openapi-generator/issues/22825)
- \[Rust] Update reqwest to 0.13 and reqwest-middleware to 0.5
[#​22816](https://redirect.github.com/openapitools/openapi-generator/issues/22816)
- fix: Fix rust-server model generation following serde\_valid upgrade
[#​22737](https://redirect.github.com/openapitools/openapi-generator/issues/22737)
##### Swift
- \[swift6]\[client] Remove unnecessary Combine checks
[#​22810](https://redirect.github.com/openapitools/openapi-generator/issues/22810)
- \[swift6] fix Vapor build, disable swift 5 tests on CI and enable more
swift 6 tests on CI
[#​22805](https://redirect.github.com/openapitools/openapi-generator/issues/22805)
- \[swift6]\[client] Increase minimum supported SDK to accommodate swift
concurrency
[#​22802](https://redirect.github.com/openapitools/openapi-generator/issues/22802)
- \[swift6]\[client] improve swift 6 thread safety
[#​22801](https://redirect.github.com/openapitools/openapi-generator/issues/22801)
- \[swift6]\[client] Add new hooks to OpenAPIInterceptor
[#​22800](https://redirect.github.com/openapitools/openapi-generator/issues/22800)
- \[swift6]\[client] mark PromiseKit as deprecated
[#​22792](https://redirect.github.com/openapitools/openapi-generator/issues/22792)
- \[swift6]\[client] make api calls concurrent
[#​22790](https://redirect.github.com/openapitools/openapi-generator/issues/22790)
- \[swift5]\[client] soft deprecate Swift 5 generator
[#​22789](https://redirect.github.com/openapitools/openapi-generator/issues/22789)
- \[swift6]\[client] mark some closures as sendable
[#​22776](https://redirect.github.com/openapitools/openapi-generator/issues/22776)
##### Terraform
- \[Terraform] New Terraform Provider generator (New Generator)
[#​22949](https://redirect.github.com/openapitools/openapi-generator/issues/22949)
##### TypeScript
- fix(typescript-axios): Ignore unused parameter on JSON serializer
replacer function
[#​22858](https://redirect.github.com/openapitools/openapi-generator/issues/22858)
- \[BUG]\[Typescript] Fix isRelativeUrl incorrectly detecting URLs
containing @​, -, \~, . as not relative.
[#​22768](https://redirect.github.com/openapitools/openapi-generator/issues/22768)
- \[typescript-angular] Fix inner enum reference in multi-map property
type
[#​22748](https://redirect.github.com/openapitools/openapi-generator/issues/22748)
- Add create requestOpts method to {{classname}}Interface
[#​21709](https://redirect.github.com/openapitools/openapi-generator/issues/21709)
- \[typescript] make TypeScript version configurable and default to v5
[#​20064](https://redirect.github.com/openapitools/openapi-generator/issues/20064)
</details>
<details>
<summary>swagger-api/swagger-core
(io.swagger.core.v3:swagger-core)</summary>
###
[`v2.2.43`](https://redirect.github.com/swagger-api/swagger-core/releases/tag/v2.2.43):
Swagger-core 2.2.43 released!
[Compare
Source](https://redirect.github.com/swagger-api/swagger-core/compare/v2.2.42...v2.2.43)
- fix: add missing
[@​ArraysSchema](https://redirect.github.com/ArraysSchema).arraySchema
properties
([#​5049](https://redirect.github.com/swagger-api/swagger-core/issues/5049))
- refactor: introduce class responsible for how bean validation
annotations affect schemas
([#​5047](https://redirect.github.com/swagger-api/swagger-core/issues/5047))
- fix: treat example values starting with numbers as strings
([#​5046](https://redirect.github.com/swagger-api/swagger-core/issues/5046))
- refactor: add an overloaded method for resolving required so that the
field type can be utilized
([#​5042](https://redirect.github.com/swagger-api/swagger-core/issues/5042))
- test: Add test showing how
[@​JsonSubTypes](https://redirect.github.com/JsonSubTypes) can be
used with
[@​Schema-oneOf](https://redirect.github.com/Schema-oneOf)
annotations
([#​5030](https://redirect.github.com/swagger-api/swagger-core/issues/5030))
- chore: update commons-lang3 to 3.20
([#​5026](https://redirect.github.com/swagger-api/swagger-core/issues/5026))
</details>
---
### Configuration
š
**Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
š¦ **Automerge**: Enabled.
ā» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
š» **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/AmadeusITGroup/otter).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNi41IiwidXBkYXRlZEluVmVyIjoiNDMuMzYuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19--> 81c694d4 chore(deps): update open api updates (main) (#3994)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[org.openapitools:openapi-generator](https://redirect.github.com/openapitools/openapi-generator)
| `7.19.0` ā `7.20.0` |

|

|
|
[io.swagger.core.v3:swagger-core](https://redirect.github.com/swagger-api/swagger-core)
| `2.2.42` ā `2.2.43` |

|

|
|
[org.apache.maven.plugins:maven-surefire-plugin](https://maven.apache.org/surefire/)
([source](https://redirect.github.com/apache/maven-surefire)) | `3.5.4`
ā `3.5.5` |

|

|
---
### Release Notes
<details>
<summary>openapitools/openapi-generator
(org.openapitools:openapi-generator)</summary>
###
[`v7.20.0`](https://redirect.github.com/OpenAPITools/openapi-generator/releases/tag/v7.20.0):
released
v7.20.0 stable release comes with 140+ enhancements, bug fixes. Once
again thanks for all the contributions from the community.
This release comes with 2 new generators:
- \[Terraform] New Terraform Provider generator
[#​22949](https://redirect.github.com/openapitools/openapi-generator/issues/22949)
- C++ Httplib server codegen
[#​21724](https://redirect.github.com/openapitools/openapi-generator/issues/21724)
Below are the highlights of the changes. For a full list of changes,
please refer to the ["Pull
Request"](https://redirect.github.com/OpenAPITools/openapi-generator/pulls?q=is%3Amerged+is%3Apr+milestone%3A7.20.0+)
tab.
##### General
- feat: Make model property generation deterministic by sorting
alphabetically
[#​22836](https://redirect.github.com/openapitools/openapi-generator/issues/22836)
- \[Normalizer] add type information to an error message
[#​22742](https://redirect.github.com/openapitools/openapi-generator/issues/22742)
##### C\#
- \[csharp]\[generichost] Added xml comments and restrict some access
[#​22796](https://redirect.github.com/openapitools/openapi-generator/issues/22796)
- C# GenericHost Support multi targetting
[#​22234](https://redirect.github.com/openapitools/openapi-generator/issues/22234)
- C# GenericHost remove state from TokenProvider abstract base class so
it makes more sense for JIT requested tokens (for long lived ApiClients
with OAuth security schemes)
[#​22233](https://redirect.github.com/openapitools/openapi-generator/issues/22233)
- \[csharp]\[generichost] Add HTTP client name to fix client duplicity
[#​22118](https://redirect.github.com/openapitools/openapi-generator/issues/22118)
##### C++
- \[cpp-qt-client]Prefix signal argument types with namespace
[#​22921](https://redirect.github.com/openapitools/openapi-generator/issues/22921)
- \[cpp-qt] Add global server index setter for all operations
[#​22760](https://redirect.github.com/openapitools/openapi-generator/issues/22760)
- C++ Httplib server codegen (New Generator)
[#​21724](https://redirect.github.com/openapitools/openapi-generator/issues/21724)
##### Go
- \[go] Fix text escaping in example code generation
[#​22841](https://redirect.github.com/openapitools/openapi-generator/issues/22841)
##### Java
- \[java]\[jackson] fix double serialization of discriminator
[#​22924](https://redirect.github.com/openapitools/openapi-generator/issues/22924)
- \[BUG] \[JAVA] fix validateJsonElement failing for required nullable
fields
[#​22912](https://redirect.github.com/openapitools/openapi-generator/issues/22912)
- \[JAVA]\[FEIGN] Put back hardcoded HTTP Client but without the
performance issue
[#​22905](https://redirect.github.com/openapitools/openapi-generator/issues/22905)
- feature(jackson3) add jackson3 support for spring generator
[#​22854](https://redirect.github.com/openapitools/openapi-generator/issues/22854)
- \[JAVA-SPRING;KOTLIN-SPRING] - add possibility to override
x-implements and x-kotlin-implements via config options.
[#​22839](https://redirect.github.com/openapitools/openapi-generator/issues/22839)
- Fix Jackson Serialization of additionalProperties on java and
jaxrs-spec
[#​22366](https://redirect.github.com/openapitools/openapi-generator/issues/22366)
##### Kotlin
- \[KOTLIN;SPRING] - add support for 'x-spring-paginated' to get closer
to feature parity with java-spring codegen add 'autoXSpringPaginated'
option; support x-operation-extra-annotation
[#​22958](https://redirect.github.com/openapitools/openapi-generator/issues/22958)
- \[BUG] \[KOTLIN-SPRING]
[@​HttpExchange](https://redirect.github.com/HttpExchange) in
declarative interface does not support property placeholders
[#​22882](https://redirect.github.com/openapitools/openapi-generator/issues/22882)
- \[kotlin]\[jvm-okhttp4] Fix multipart/form-data with JSON content-type
[#​22856](https://redirect.github.com/openapitools/openapi-generator/issues/22856)
- \[Kotlin]\[Client] Migrate Enum.values() to Enum.entities
[#​22852](https://redirect.github.com/openapitools/openapi-generator/issues/22852)
- \[KOTLIN-CLIENT] fix Parent interface class having incorrect
collection property type List instead of Set
[#​22850](https://redirect.github.com/openapitools/openapi-generator/issues/22850)
- \[JAVA-SPRING]\[KOTLIN-SPRING] - add possibility to override
x-implements and x-kotlin-implements via config options.
[#​22839](https://redirect.github.com/openapitools/openapi-generator/issues/22839)
- \[kotlin-server] Add polymorphism, oneOf and allOf support
[#​22610](https://redirect.github.com/openapitools/openapi-generator/issues/22610)
##### PHP
- \[php-symfony] fix sequencial escape when validating a class type
[#​22906](https://redirect.github.com/openapitools/openapi-generator/issues/22906)
- \[php]\[php-nextgen] Fix nullability when multiple response types are
possible
[#​22827](https://redirect.github.com/openapitools/openapi-generator/issues/22827)
##### Protobuf
- \[Protobuf] Fix Discriminator Issue and add capability Enum Extraction
[#​22740](https://redirect.github.com/openapitools/openapi-generator/issues/22740)
##### Python
- Update python sdk to strip any directory traversal in filename
[#​22965](https://redirect.github.com/openapitools/openapi-generator/issues/22965)
- Remove coding: utf-8 as that's the default already
[#​22934](https://redirect.github.com/openapitools/openapi-generator/issues/22934)
- feat(python): enhance retry configuration in REST client
[#​22867](https://redirect.github.com/openapitools/openapi-generator/issues/22867)
- \[python-fastapi] Set python version to 3.10
[#​22823](https://redirect.github.com/openapitools/openapi-generator/issues/22823)
##### R
- \[R] avoid to-JSON issues when R6 classes contain lists of R6 classes
[#​22828](https://redirect.github.com/openapitools/openapi-generator/issues/22828)
- \[R] optionally skip parsing responses to R6 objects
[#​22705](https://redirect.github.com/openapitools/openapi-generator/issues/22705)
##### Rust
- Add support for ApiKey auth to rust-server
[#​22950](https://redirect.github.com/openapitools/openapi-generator/issues/22950)
- Add support for enums of integers in rust-server generator
[#​22915](https://redirect.github.com/openapitools/openapi-generator/issues/22915)
- fix: apply integer type fitting for Rust params
[#​22853](https://redirect.github.com/openapitools/openapi-generator/issues/22853)
- feat: Support selective ssl/tls backend in rust-server to optionally
remove openssl
[#​22825](https://redirect.github.com/openapitools/openapi-generator/issues/22825)
- \[Rust] Update reqwest to 0.13 and reqwest-middleware to 0.5
[#​22816](https://redirect.github.com/openapitools/openapi-generator/issues/22816)
- fix: Fix rust-server model generation following serde\_valid upgrade
[#​22737](https://redirect.github.com/openapitools/openapi-generator/issues/22737)
##### Swift
- \[swift6]\[client] Remove unnecessary Combine checks
[#​22810](https://redirect.github.com/openapitools/openapi-generator/issues/22810)
- \[swift6] fix Vapor build, disable swift 5 tests on CI and enable more
swift 6 tests on CI
[#​22805](https://redirect.github.com/openapitools/openapi-generator/issues/22805)
- \[swift6]\[client] Increase minimum supported SDK to accommodate swift
concurrency
[#​22802](https://redirect.github.com/openapitools/openapi-generator/issues/22802)
- \[swift6]\[client] improve swift 6 thread safety
[#​22801](https://redirect.github.com/openapitools/openapi-generator/issues/22801)
- \[swift6]\[client] Add new hooks to OpenAPIInterceptor
[#​22800](https://redirect.github.com/openapitools/openapi-generator/issues/22800)
- \[swift6]\[client] mark PromiseKit as deprecated
[#​22792](https://redirect.github.com/openapitools/openapi-generator/issues/22792)
- \[swift6]\[client] make api calls concurrent
[#​22790](https://redirect.github.com/openapitools/openapi-generator/issues/22790)
- \[swift5]\[client] soft deprecate Swift 5 generator
[#​22789](https://redirect.github.com/openapitools/openapi-generator/issues/22789)
- \[swift6]\[client] mark some closures as sendable
[#​22776](https://redirect.github.com/openapitools/openapi-generator/issues/22776)
##### Terraform
- \[Terraform] New Terraform Provider generator (New Generator)
[#​22949](https://redirect.github.com/openapitools/openapi-generator/issues/22949)
##### TypeScript
- fix(typescript-axios): Ignore unused parameter on JSON serializer
replacer function
[#​22858](https://redirect.github.com/openapitools/openapi-generator/issues/22858)
- \[BUG]\[Typescript] Fix isRelativeUrl incorrectly detecting URLs
containing @​, -, \~, . as not relative.
[#​22768](https://redirect.github.com/openapitools/openapi-generator/issues/22768)
- \[typescript-angular] Fix inner enum reference in multi-map property
type
[#​22748](https://redirect.github.com/openapitools/openapi-generator/issues/22748)
- Add create requestOpts method to {{classname}}Interface
[#​21709](https://redirect.github.com/openapitools/openapi-generator/issues/21709)
- \[typescript] make TypeScript version configurable and default to v5
[#​20064](https://redirect.github.com/openapitools/openapi-generator/issues/20064)
</details>
<details>
<summary>swagger-api/swagger-core
(io.swagger.core.v3:swagger-core)</summary>
###
[`v2.2.43`](https://redirect.github.com/swagger-api/swagger-core/releases/tag/v2.2.43):
Swagger-core 2.2.43 released!
[Compare
Source](https://redirect.github.com/swagger-api/swagger-core/compare/v2.2.42...v2.2.43)
- fix: add missing
[@​ArraysSchema](https://redirect.github.com/ArraysSchema).arraySchema
properties
([#​5049](https://redirect.github.com/swagger-api/swagger-core/issues/5049))
- refactor: introduce class responsible for how bean validation
annotations affect schemas
([#​5047](https://redirect.github.com/swagger-api/swagger-core/issues/5047))
- fix: treat example values starting with numbers as strings
([#​5046](https://redirect.github.com/swagger-api/swagger-core/issues/5046))
- refactor: add an overloaded method for resolving required so that the
field type can be utilized
([#​5042](https://redirect.github.com/swagger-api/swagger-core/issues/5042))
- test: Add test showing how
[@​JsonSubTypes](https://redirect.github.com/JsonSubTypes) can be
used with
[@​Schema-oneOf](https://redirect.github.com/Schema-oneOf)
annotations
([#​5030](https://redirect.github.com/swagger-api/swagger-core/issues/5030))
- chore: update commons-lang3 to 3.20
([#​5026](https://redirect.github.com/swagger-api/swagger-core/issues/5026))
</details>
---
### Configuration
š
**Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
š¦ **Automerge**: Enabled.
ā» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
š» **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/AmadeusITGroup/otter).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNi41IiwidXBkYXRlZEluVmVyIjoiNDMuMzYuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19--> 81c694d4 chore(deps): update open api updates (main) (#3994)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[org.openapitools:openapi-generator](https://redirect.github.com/openapitools/openapi-generator)
| `7.19.0` ā `7.20.0` |

|

|
|
[io.swagger.core.v3:swagger-core](https://redirect.github.com/swagger-api/swagger-core)
| `2.2.42` ā `2.2.43` |

|

|
|
[org.apache.maven.plugins:maven-surefire-plugin](https://maven.apache.org/surefire/)
([source](https://redirect.github.com/apache/maven-surefire)) | `3.5.4`
ā `3.5.5` |

|

|
---
### Release Notes
<details>
<summary>openapitools/openapi-generator
(org.openapitools:openapi-generator)</summary>
###
[`v7.20.0`](https://redirect.github.com/OpenAPITools/openapi-generator/releases/tag/v7.20.0):
released
v7.20.0 stable release comes with 140+ enhancements, bug fixes. Once
again thanks for all the contributions from the community.
This release comes with 2 new generators:
- \[Terraform] New Terraform Provider generator
[#​22949](https://redirect.github.com/openapitools/openapi-generator/issues/22949)
- C++ Httplib server codegen
[#​21724](https://redirect.github.com/openapitools/openapi-generator/issues/21724)
Below are the highlights of the changes. For a full list of changes,
please refer to the ["Pull
Request"](https://redirect.github.com/OpenAPITools/openapi-generator/pulls?q=is%3Amerged+is%3Apr+milestone%3A7.20.0+)
tab.
##### General
- feat: Make model property generation deterministic by sorting
alphabetically
[#​22836](https://redirect.github.com/openapitools/openapi-generator/issues/22836)
- \[Normalizer] add type information to an error message
[#​22742](https://redirect.github.com/openapitools/openapi-generator/issues/22742)
##### C\#
- \[csharp]\[generichost] Added xml comments and restrict some access
[#​22796](https://redirect.github.com/openapitools/openapi-generator/issues/22796)
- C# GenericHost Support multi targetting
[#​22234](https://redirect.github.com/openapitools/openapi-generator/issues/22234)
- C# GenericHost remove state from TokenProvider abstract base class so
it makes more sense for JIT requested tokens (for long lived ApiClients
with OAuth security schemes)
[#​22233](https://redirect.github.com/openapitools/openapi-generator/issues/22233)
- \[csharp]\[generichost] Add HTTP client name to fix client duplicity
[#​22118](https://redirect.github.com/openapitools/openapi-generator/issues/22118)
##### C++
- \[cpp-qt-client]Prefix signal argument types with namespace
[#​22921](https://redirect.github.com/openapitools/openapi-generator/issues/22921)
- \[cpp-qt] Add global server index setter for all operations
[#​22760](https://redirect.github.com/openapitools/openapi-generator/issues/22760)
- C++ Httplib server codegen (New Generator)
[#​21724](https://redirect.github.com/openapitools/openapi-generator/issues/21724)
##### Go
- \[go] Fix text escaping in example code generation
[#​22841](https://redirect.github.com/openapitools/openapi-generator/issues/22841)
##### Java
- \[java]\[jackson] fix double serialization of discriminator
[#​22924](https://redirect.github.com/openapitools/openapi-generator/issues/22924)
- \[BUG] \[JAVA] fix validateJsonElement failing for required nullable
fields
[#​22912](https://redirect.github.com/openapitools/openapi-generator/issues/22912)
- \[JAVA]\[FEIGN] Put back hardcoded HTTP Client but without the
performance issue
[#​22905](https://redirect.github.com/openapitools/openapi-generator/issues/22905)
- feature(jackson3) add jackson3 support for spring generator
[#​22854](https://redirect.github.com/openapitools/openapi-generator/issues/22854)
- \[JAVA-SPRING;KOTLIN-SPRING] - add possibility to override
x-implements and x-kotlin-implements via config options.
[#​22839](https://redirect.github.com/openapitools/openapi-generator/issues/22839)
- Fix Jackson Serialization of additionalProperties on java and
jaxrs-spec
[#​22366](https://redirect.github.com/openapitools/openapi-generator/issues/22366)
##### Kotlin
- \[KOTLIN;SPRING] - add support for 'x-spring-paginated' to get closer
to feature parity with java-spring codegen add 'autoXSpringPaginated'
option; support x-operation-extra-annotation
[#​22958](https://redirect.github.com/openapitools/openapi-generator/issues/22958)
- \[BUG] \[KOTLIN-SPRING]
[@​HttpExchange](https://redirect.github.com/HttpExchange) in
declarative interface does not support property placeholders
[#​22882](https://redirect.github.com/openapitools/openapi-generator/issues/22882)
- \[kotlin]\[jvm-okhttp4] Fix multipart/form-data with JSON content-type
[#​22856](https://redirect.github.com/openapitools/openapi-generator/issues/22856)
- \[Kotlin]\[Client] Migrate Enum.values() to Enum.entities
[#​22852](https://redirect.github.com/openapitools/openapi-generator/issues/22852)
- \[KOTLIN-CLIENT] fix Parent interface class having incorrect
collection property type List instead of Set
[#​22850](https://redirect.github.com/openapitools/openapi-generator/issues/22850)
- \[JAVA-SPRING]\[KOTLIN-SPRING] - add possibility to override
x-implements and x-kotlin-implements via config options.
[#​22839](https://redirect.github.com/openapitools/openapi-generator/issues/22839)
- \[kotlin-server] Add polymorphism, oneOf and allOf support
[#​22610](https://redirect.github.com/openapitools/openapi-generator/issues/22610)
##### PHP
- \[php-symfony] fix sequencial escape when validating a class type
[#​22906](https://redirect.github.com/openapitools/openapi-generator/issues/22906)
- \[php]\[php-nextgen] Fix nullability when multiple response types are
possible
[#​22827](https://redirect.github.com/openapitools/openapi-generator/issues/22827)
##### Protobuf
- \[Protobuf] Fix Discriminator Issue and add capability Enum Extraction
[#​22740](https://redirect.github.com/openapitools/openapi-generator/issues/22740)
##### Python
- Update python sdk to strip any directory traversal in filename
[#​22965](https://redirect.github.com/openapitools/openapi-generator/issues/22965)
- Remove coding: utf-8 as that's the default already
[#​22934](https://redirect.github.com/openapitools/openapi-generator/issues/22934)
- feat(python): enhance retry configuration in REST client
[#​22867](https://redirect.github.com/openapitools/openapi-generator/issues/22867)
- \[python-fastapi] Set python version to 3.10
[#​22823](https://redirect.github.com/openapitools/openapi-generator/issues/22823)
##### R
- \[R] avoid to-JSON issues when R6 classes contain lists of R6 classes
[#​22828](https://redirect.github.com/openapitools/openapi-generator/issues/22828)
- \[R] optionally skip parsing responses to R6 objects
[#​22705](https://redirect.github.com/openapitools/openapi-generator/issues/22705)
##### Rust
- Add support for ApiKey auth to rust-server
[#​22950](https://redirect.github.com/openapitools/openapi-generator/issues/22950)
- Add support for enums of integers in rust-server generator
[#​22915](https://redirect.github.com/openapitools/openapi-generator/issues/22915)
- fix: apply integer type fitting for Rust params
[#​22853](https://redirect.github.com/openapitools/openapi-generator/issues/22853)
- feat: Support selective ssl/tls backend in rust-server to optionally
remove openssl
[#​22825](https://redirect.github.com/openapitools/openapi-generator/issues/22825)
- \[Rust] Update reqwest to 0.13 and reqwest-middleware to 0.5
[#​22816](https://redirect.github.com/openapitools/openapi-generator/issues/22816)
- fix: Fix rust-server model generation following serde\_valid upgrade
[#​22737](https://redirect.github.com/openapitools/openapi-generator/issues/22737)
##### Swift
- \[swift6]\[client] Remove unnecessary Combine checks
[#​22810](https://redirect.github.com/openapitools/openapi-generator/issues/22810)
- \[swift6] fix Vapor build, disable swift 5 tests on CI and enable more
swift 6 tests on CI
[#​22805](https://redirect.github.com/openapitools/openapi-generator/issues/22805)
- \[swift6]\[client] Increase minimum supported SDK to accommodate swift
concurrency
[#​22802](https://redirect.github.com/openapitools/openapi-generator/issues/22802)
- \[swift6]\[client] improve swift 6 thread safety
[#​22801](https://redirect.github.com/openapitools/openapi-generator/issues/22801)
- \[swift6]\[client] Add new hooks to OpenAPIInterceptor
[#​22800](https://redirect.github.com/openapitools/openapi-generator/issues/22800)
- \[swift6]\[client] mark PromiseKit as deprecated
[#​22792](https://redirect.github.com/openapitools/openapi-generator/issues/22792)
- \[swift6]\[client] make api calls concurrent
[#​22790](https://redirect.github.com/openapitools/openapi-generator/issues/22790)
- \[swift5]\[client] soft deprecate Swift 5 generator
[#​22789](https://redirect.github.com/openapitools/openapi-generator/issues/22789)
- \[swift6]\[client] mark some closures as sendable
[#​22776](https://redirect.github.com/openapitools/openapi-generator/issues/22776)
##### Terraform
- \[Terraform] New Terraform Provider generator (New Generator)
[#​22949](https://redirect.github.com/openapitools/openapi-generator/issues/22949)
##### TypeScript
- fix(typescript-axios): Ignore unused parameter on JSON serializer
replacer function
[#​22858](https://redirect.github.com/openapitools/openapi-generator/issues/22858)
- \[BUG]\[Typescript] Fix isRelativeUrl incorrectly detecting URLs
containing @​, -, \~, . as not relative.
[#​22768](https://redirect.github.com/openapitools/openapi-generator/issues/22768)
- \[typescript-angular] Fix inner enum reference in multi-map property
type
[#​22748](https://redirect.github.com/openapitools/openapi-generator/issues/22748)
- Add create requestOpts method to {{classname}}Interface
[#​21709](https://redirect.github.com/openapitools/openapi-generator/issues/21709)
- \[typescript] make TypeScript version configurable and default to v5
[#​20064](https://redirect.github.com/openapitools/openapi-generator/issues/20064)
</details>
<details>
<summary>swagger-api/swagger-core
(io.swagger.core.v3:swagger-core)</summary>
###
[`v2.2.43`](https://redirect.github.com/swagger-api/swagger-core/releases/tag/v2.2.43):
Swagger-core 2.2.43 released!
[Compare
Source](https://redirect.github.com/swagger-api/swagger-core/compare/v2.2.42...v2.2.43)
- fix: add missing
[@​ArraysSchema](https://redirect.github.com/ArraysSchema).arraySchema
properties
([#​5049](https://redirect.github.com/swagger-api/swagger-core/issues/5049))
- refactor: introduce class responsible for how bean validation
annotations affect schemas
([#​5047](https://redirect.github.com/swagger-api/swagger-core/issues/5047))
- fix: treat example values starting with numbers as strings
([#​5046](https://redirect.github.com/swagger-api/swagger-core/issues/5046))
- refactor: add an overloaded method for resolving required so that the
field type can be utilized
([#​5042](https://redirect.github.com/swagger-api/swagger-core/issues/5042))
- test: Add test showing how
[@​JsonSubTypes](https://redirect.github.com/JsonSubTypes) can be
used with
[@​Schema-oneOf](https://redirect.github.com/Schema-oneOf)
annotations
([#​5030](https://redirect.github.com/swagger-api/swagger-core/issues/5030))
- chore: update commons-lang3 to 3.20
([#​5026](https://redirect.github.com/swagger-api/swagger-core/issues/5026))
</details>
---
### Configuration
š
**Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
š¦ **Automerge**: Enabled.
ā» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
š» **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/AmadeusITGroup/otter).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNi41IiwidXBkYXRlZEluVmVyIjoiNDMuMzYuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19--> aa9c6acd chore(deps): update patch dependencies (main) (#3986)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[@azure/functions](https://redirect.github.com/Azure/azure-functions-nodejs-library)
| [`4.11.0` ā
`4.11.2`](https://renovatebot.com/diffs/npm/@azure%2ffunctions/4.11.0/4.11.2)
|

|

|
|
[@capacitor/browser](https://redirect.github.com/ionic-team/capacitor-plugins)
| [`8.0.0` ā
`8.0.1`](https://renovatebot.com/diffs/npm/@capacitor%2fbrowser/8.0.0/8.0.1)
|

|

|
|
[@capacitor/device](https://redirect.github.com/ionic-team/capacitor-plugins)
| [`8.0.0` ā
`8.0.1`](https://renovatebot.com/diffs/npm/@capacitor%2fdevice/8.0.0/8.0.1)
|

|

|
|
[@capacitor/preferences](https://redirect.github.com/ionic-team/capacitor-plugins)
| [`8.0.0` ā
`8.0.1`](https://renovatebot.com/diffs/npm/@capacitor%2fpreferences/8.0.0/8.0.1)
|

|

|
| [@commitlint/cli](https://commitlint.js.org/)
([source](https://redirect.github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli))
| [`20.4.0` ā
`20.4.1`](https://renovatebot.com/diffs/npm/@commitlint%2fcli/20.4.0/20.4.1)
|

|

|
| [@commitlint/config-angular](https://commitlint.js.org/)
([source](https://redirect.github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-angular))
| [`20.4.0` ā
`20.4.1`](https://renovatebot.com/diffs/npm/@commitlint%2fconfig-angular/20.4.0/20.4.1)
|

|

|
| [@commitlint/config-conventional](https://commitlint.js.org/)
([source](https://redirect.github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional))
| [`20.4.0` ā
`20.4.1`](https://renovatebot.com/diffs/npm/@commitlint%2fconfig-conventional/20.4.0/20.4.1)
|

|

|
|
[@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node)
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node))
| [`24.10.9` ā
`24.10.13`](https://renovatebot.com/diffs/npm/@types%2fnode/24.10.9/24.10.13)
|

|

|
| [ioredis](https://redirect.github.com/luin/ioredis) | [`5.9.2` ā
`5.9.3`](https://renovatebot.com/diffs/npm/ioredis/5.9.2/5.9.3) |

|

|
| [lighthouse](https://redirect.github.com/GoogleChrome/lighthouse) |
[`13.0.1` ā
`13.0.3`](https://renovatebot.com/diffs/npm/lighthouse/13.0.1/13.0.3) |

|

|
| [marked](https://marked.js.org)
([source](https://redirect.github.com/markedjs/marked)) | [`17.0.1` ā
`17.0.2`](https://renovatebot.com/diffs/npm/marked/17.0.1/17.0.2) |

|

|
| [nock](https://redirect.github.com/nock/nock) | [`14.0.10` ā
`14.0.11`](https://renovatebot.com/diffs/npm/nock/14.0.10/14.0.11) |

|

|
| [sass-loader](https://redirect.github.com/webpack/sass-loader) |
[`16.0.6` ā
`16.0.7`](https://renovatebot.com/diffs/npm/sass-loader/16.0.6/16.0.7) |

|

|
| [type-fest](https://redirect.github.com/sindresorhus/type-fest) |
[`5.4.3` ā
`5.4.4`](https://renovatebot.com/diffs/npm/type-fest/5.4.3/5.4.4) |

|

|
| [typedoc](https://typedoc.org)
([source](https://redirect.github.com/TypeStrong/TypeDoc)) | [`0.28.16`
ā `0.28.17`](https://renovatebot.com/diffs/npm/typedoc/0.28.16/0.28.17)
|

|

|
| [wait-on](https://redirect.github.com/jeffbski/wait-on) | [`9.0.3` ā
`9.0.4`](https://renovatebot.com/diffs/npm/wait-on/9.0.3/9.0.4) |

|

|
---
### Release Notes
<details>
<summary>Azure/azure-functions-nodejs-library
(@​azure/functions)</summary>
###
[`v4.11.1`](https://redirect.github.com/Azure/azure-functions-nodejs-library/releases/tag/v4.11.1)
[Compare
Source](https://redirect.github.com/Azure/azure-functions-nodejs-library/compare/v4.11.0...v4.11.1)
Removing Long as depndency
Removing dependency from lib.DOM
</details>
<details>
<summary>ionic-team/capacitor-plugins
(@​capacitor/browser)</summary>
###
[`v8.0.1`](https://redirect.github.com/ionic-team/capacitor-plugins/releases/tag/%40capacitor/status-bar%408.0.1)
[Compare
Source](https://redirect.github.com/ionic-team/capacitor-plugins/compare/@capacitor/browser@8.0.0...@capacitor/browser@8.0.1)
##### Bug Fixes
- AGP 9.0 no longer supporting `proguard-android.txt`
([#​2468](https://redirect.github.com/ionic-team/capacitor-plugins/issues/2468))
([a8760a9](https://redirect.github.com/ionic-team/capacitor-plugins/commit/a8760a989f594bc406d0ec7da58125d17447cae4))
</details>
<details>
<summary>conventional-changelog/commitlint
(@​commitlint/cli)</summary>
###
[`v20.4.1`](https://redirect.github.com/conventional-changelog/commitlint/blob/HEAD/@​commitlint/cli/CHANGELOG.md#2041-2026-02-02)
[Compare
Source](https://redirect.github.com/conventional-changelog/commitlint/compare/v20.4.0...v20.4.1)
**Note:** Version bump only for package
[@​commitlint/cli](https://redirect.github.com/commitlint/cli)
</details>
<details>
<summary>conventional-changelog/commitlint
(@​commitlint/config-angular)</summary>
###
[`v20.4.1`](https://redirect.github.com/conventional-changelog/commitlint/blob/HEAD/@​commitlint/config-angular/CHANGELOG.md#2041-2026-02-02)
[Compare
Source](https://redirect.github.com/conventional-changelog/commitlint/compare/v20.4.0...v20.4.1)
**Note:** Version bump only for package
[@​commitlint/config-angular](https://redirect.github.com/commitlint/config-angular)
</details>
<details>
<summary>conventional-changelog/commitlint
(@​commitlint/config-conventional)</summary>
###
[`v20.4.1`](https://redirect.github.com/conventional-changelog/commitlint/blob/HEAD/@​commitlint/config-conventional/CHANGELOG.md#2041-2026-02-02)
[Compare
Source](https://redirect.github.com/conventional-changelog/commitlint/compare/v20.4.0...v20.4.1)
**Note:** Version bump only for package
[@​commitlint/config-conventional](https://redirect.github.com/commitlint/config-conventional)
</details>
<details>
<summary>luin/ioredis (ioredis)</summary>
###
[`v5.9.3`](https://redirect.github.com/luin/ioredis/blob/HEAD/CHANGELOG.md#593-2026-02-12)
[Compare
Source](https://redirect.github.com/luin/ioredis/compare/v5.9.2...v5.9.3)
##### Bug Fixes
- autopipelining to route writes to masters with scaleReads
([#​2072](https://redirect.github.com/luin/ioredis/issues/2072))
([8adb1ae](https://redirect.github.com/luin/ioredis/commit/8adb1aeb6f01cb2cf832c1f218033daf2a722925))
- fix issue with moved command for replicas
([#​2064](https://redirect.github.com/luin/ioredis/issues/2064))
([de4eed4](https://redirect.github.com/luin/ioredis/commit/de4eed4c88c1222002223b17d6d481c2a12df329))
- **types:** optional properties on RedisOptions allow explicit
undefined
([#​2066](https://redirect.github.com/luin/ioredis/issues/2066))
([0a1a898](https://redirect.github.com/luin/ioredis/commit/0a1a8982f9c912c78de68295e1f56136b62a645e))
</details>
<details>
<summary>GoogleChrome/lighthouse (lighthouse)</summary>
###
[`v13.0.3`](https://redirect.github.com/GoogleChrome/lighthouse/blob/HEAD/changelog.md#1303-2026-02-11)
[Compare
Source](https://redirect.github.com/GoogleChrome/lighthouse/compare/v13.0.2...v13.0.3)
Fix npm package publish of 13.0.2. Refer to
<https://github.com/GoogleChrome/lighthouse/releases/tag/v13.0.2>.
We expect this release to ship in the DevTools of [Chrome
146](https://chromiumdash.appspot.com/schedule), and to PageSpeed
Insights within 2 weeks.
###
[`v13.0.2`](https://redirect.github.com/GoogleChrome/lighthouse/blob/HEAD/changelog.md#1303-2026-02-11)
[Compare
Source](https://redirect.github.com/GoogleChrome/lighthouse/compare/v13.0.1...v13.0.2)
Fix npm package publish of 13.0.2. Refer to
<https://github.com/GoogleChrome/lighthouse/releases/tag/v13.0.2>.
We expect this release to ship in the DevTools of [Chrome
146](https://chromiumdash.appspot.com/schedule), and to PageSpeed
Insights within 2 weeks.
</details>
<details>
<summary>markedjs/marked (marked)</summary>
###
[`v17.0.2`](https://redirect.github.com/markedjs/marked/compare/v17.0.1...e8246208bc9dffcf550d5d3744746c6809ad2bdf)
[Compare
Source](https://redirect.github.com/markedjs/marked/compare/v17.0.1...v17.0.2)
</details>
<details>
<summary>nock/nock (nock)</summary>
###
[`v14.0.11`](https://redirect.github.com/nock/nock/releases/tag/v14.0.11)
[Compare
Source](https://redirect.github.com/nock/nock/compare/v14.0.10...v14.0.11)
##### Bug Fixes
- migrate to npm OIDC
([#​2940](https://redirect.github.com/nock/nock/issues/2940))
([113dcac](https://redirect.github.com/nock/nock/commit/113dcac727a769b0f2f27dd0213ea91d10fdcceb))
- restore github actions write permissions
([#​2941](https://redirect.github.com/nock/nock/issues/2941))
([a4cb6b8](https://redirect.github.com/nock/nock/commit/a4cb6b8252202bfce68d6475bf214dee9c1fe5fb))
- update `@mswjs/interceptors` to fix a memory leak
([#​2938](https://redirect.github.com/nock/nock/issues/2938))
([025db76](https://redirect.github.com/nock/nock/commit/025db760a4c8c101cd1c51da699de66a18e58f83))
- upgrade semantic-release
([#​2943](https://redirect.github.com/nock/nock/issues/2943))
([db0b280](https://redirect.github.com/nock/nock/commit/db0b28005ae4531277f77c52b56694cb484f802e))
</details>
<details>
<summary>webpack/sass-loader (sass-loader)</summary>
###
[`v16.0.7`](https://redirect.github.com/webpack/sass-loader/blob/HEAD/CHANGELOG.md#1607-2026-02-05)
[Compare
Source](https://redirect.github.com/webpack/sass-loader/compare/v16.0.6...v16.0.7)
</details>
<details>
<summary>sindresorhus/type-fest (type-fest)</summary>
###
[`v5.4.4`](https://redirect.github.com/sindresorhus/type-fest/releases/tag/v5.4.4)
[Compare
Source](https://redirect.github.com/sindresorhus/type-fest/compare/v5.4.3...v5.4.4)
- `PackageJson`: Use `LiteralUnion` for `engines` field
([#​1354](https://redirect.github.com/sindresorhus/type-fest/issues/1354))
[`fc9e2bb`](https://redirect.github.com/sindresorhus/type-fest/commit/fc9e2bb)
- `IsUnion`: Fix behavior when the entire union extends all individual
members
([#​1353](https://redirect.github.com/sindresorhus/type-fest/issues/1353))
[`b0321a5`](https://redirect.github.com/sindresorhus/type-fest/commit/b0321a5)
- `Paths`: Fix `leavesOnly` behavior with `never` leaves
([#​1350](https://redirect.github.com/sindresorhus/type-fest/issues/1350))
[`2c34128`](https://redirect.github.com/sindresorhus/type-fest/commit/2c34128)
- `Paths`: Fix behavior with `WeakMap`s / `WeakSet`s
([#​1348](https://redirect.github.com/sindresorhus/type-fest/issues/1348))
[`ac3b50e`](https://redirect.github.com/sindresorhus/type-fest/commit/ac3b50e)
- `Paths`: Fix behavior with tuples containing optional elements with a
rest element
([#​1346](https://redirect.github.com/sindresorhus/type-fest/issues/1346))
[`7c82a21`](https://redirect.github.com/sindresorhus/type-fest/commit/7c82a21)
***
</details>
<details>
<summary>TypeStrong/TypeDoc (typedoc)</summary>
###
[`v0.28.17`](https://redirect.github.com/TypeStrong/TypeDoc/blob/HEAD/CHANGELOG.md#v02817-2026-02-13)
[Compare
Source](https://redirect.github.com/TypeStrong/TypeDoc/compare/v0.28.16...v0.28.17)
##### Bug Fixes
- Improved handling of comments for type aliases which have been
declaration merged with functions,
[#​3064](https://redirect.github.com/TypeStrong/TypeDoc/issues/3064).
- Fixed anchor link generation to members named `$`,
[#​3065](https://redirect.github.com/TypeStrong/TypeDoc/issues/3065).
- Corrected typing of the `plugin` option to permit functions,
[#​3066](https://redirect.github.com/TypeStrong/TypeDoc/issues/3066).
- Warnings about unused `@param` tags will now be properly suppressed
when they come from declaration files and
the suppressCommentWarningsInDeclarationFiles option is enabled,
[#​3070](https://redirect.github.com/TypeStrong/TypeDoc/issues/3070).
- Fixed conversion of types referencing type parameters on functions,
[#​3071](https://redirect.github.com/TypeStrong/TypeDoc/issues/3071).
##### Thanks!
- [@​pjeby](https://redirect.github.com/pjeby)
</details>
<details>
<summary>jeffbski/wait-on (wait-on)</summary>
###
[`v9.0.4`](https://redirect.github.com/jeffbski/wait-on/releases/tag/v9.0.4)
[Compare
Source](https://redirect.github.com/jeffbski/wait-on/compare/v9.0.3...v9.0.4)
Updated patch dependencies including axios and lodash
</details>
---
### Configuration
š
**Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
š¦ **Automerge**: Enabled.
ā» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
š» **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/AmadeusITGroup/otter).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMi4wIiwidXBkYXRlZEluVmVyIjoiNDMuMjIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19--> aa9c6acd chore(deps): update patch dependencies (main) (#3986)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[@azure/functions](https://redirect.github.com/Azure/azure-functions-nodejs-library)
| [`4.11.0` ā
`4.11.2`](https://renovatebot.com/diffs/npm/@azure%2ffunctions/4.11.0/4.11.2)
|

|

|
|
[@capacitor/browser](https://redirect.github.com/ionic-team/capacitor-plugins)
| [`8.0.0` ā
`8.0.1`](https://renovatebot.com/diffs/npm/@capacitor%2fbrowser/8.0.0/8.0.1)
|

|

|
|
[@capacitor/device](https://redirect.github.com/ionic-team/capacitor-plugins)
| [`8.0.0` ā
`8.0.1`](https://renovatebot.com/diffs/npm/@capacitor%2fdevice/8.0.0/8.0.1)
|

|

|
|
[@capacitor/preferences](https://redirect.github.com/ionic-team/capacitor-plugins)
| [`8.0.0` ā
`8.0.1`](https://renovatebot.com/diffs/npm/@capacitor%2fpreferences/8.0.0/8.0.1)
|

|

|
| [@commitlint/cli](https://commitlint.js.org/)
([source](https://redirect.github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli))
| [`20.4.0` ā
`20.4.1`](https://renovatebot.com/diffs/npm/@commitlint%2fcli/20.4.0/20.4.1)
|

|

|
| [@commitlint/config-angular](https://commitlint.js.org/)
([source](https://redirect.github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-angular))
| [`20.4.0` ā
`20.4.1`](https://renovatebot.com/diffs/npm/@commitlint%2fconfig-angular/20.4.0/20.4.1)
|

|

|
| [@commitlint/config-conventional](https://commitlint.js.org/)
([source](https://redirect.github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional))
| [`20.4.0` ā
`20.4.1`](https://renovatebot.com/diffs/npm/@commitlint%2fconfig-conventional/20.4.0/20.4.1)
|

|

|
|
[@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node)
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node))
| [`24.10.9` ā
`24.10.13`](https://renovatebot.com/diffs/npm/@types%2fnode/24.10.9/24.10.13)
|

|

|
| [ioredis](https://redirect.github.com/luin/ioredis) | [`5.9.2` ā
`5.9.3`](https://renovatebot.com/diffs/npm/ioredis/5.9.2/5.9.3) |

|

|
| [lighthouse](https://redirect.github.com/GoogleChrome/lighthouse) |
[`13.0.1` ā
`13.0.3`](https://renovatebot.com/diffs/npm/lighthouse/13.0.1/13.0.3) |

|

|
| [marked](https://marked.js.org)
([source](https://redirect.github.com/markedjs/marked)) | [`17.0.1` ā
`17.0.2`](https://renovatebot.com/diffs/npm/marked/17.0.1/17.0.2) |

|

|
| [nock](https://redirect.github.com/nock/nock) | [`14.0.10` ā
`14.0.11`](https://renovatebot.com/diffs/npm/nock/14.0.10/14.0.11) |

|

|
| [sass-loader](https://redirect.github.com/webpack/sass-loader) |
[`16.0.6` ā
`16.0.7`](https://renovatebot.com/diffs/npm/sass-loader/16.0.6/16.0.7) |

|

|
| [type-fest](https://redirect.github.com/sindresorhus/type-fest) |
[`5.4.3` ā
`5.4.4`](https://renovatebot.com/diffs/npm/type-fest/5.4.3/5.4.4) |

|

|
| [typedoc](https://typedoc.org)
([source](https://redirect.github.com/TypeStrong/TypeDoc)) | [`0.28.16`
ā `0.28.17`](https://renovatebot.com/diffs/npm/typedoc/0.28.16/0.28.17)
|

|

|
| [wait-on](https://redirect.github.com/jeffbski/wait-on) | [`9.0.3` ā
`9.0.4`](https://renovatebot.com/diffs/npm/wait-on/9.0.3/9.0.4) |

|

|
---
### Release Notes
<details>
<summary>Azure/azure-functions-nodejs-library
(@​azure/functions)</summary>
###
[`v4.11.1`](https://redirect.github.com/Azure/azure-functions-nodejs-library/releases/tag/v4.11.1)
[Compare
Source](https://redirect.github.com/Azure/azure-functions-nodejs-library/compare/v4.11.0...v4.11.1)
Removing Long as depndency
Removing dependency from lib.DOM
</details>
<details>
<summary>ionic-team/capacitor-plugins
(@​capacitor/browser)</summary>
###
[`v8.0.1`](https://redirect.github.com/ionic-team/capacitor-plugins/releases/tag/%40capacitor/status-bar%408.0.1)
[Compare
Source](https://redirect.github.com/ionic-team/capacitor-plugins/compare/@capacitor/browser@8.0.0...@capacitor/browser@8.0.1)
##### Bug Fixes
- AGP 9.0 no longer supporting `proguard-android.txt`
([#​2468](https://redirect.github.com/ionic-team/capacitor-plugins/issues/2468))
([a8760a9](https://redirect.github.com/ionic-team/capacitor-plugins/commit/a8760a989f594bc406d0ec7da58125d17447cae4))
</details>
<details>
<summary>conventional-changelog/commitlint
(@​commitlint/cli)</summary>
###
[`v20.4.1`](https://redirect.github.com/conventional-changelog/commitlint/blob/HEAD/@​commitlint/cli/CHANGELOG.md#2041-2026-02-02)
[Compare
Source](https://redirect.github.com/conventional-changelog/commitlint/compare/v20.4.0...v20.4.1)
**Note:** Version bump only for package
[@​commitlint/cli](https://redirect.github.com/commitlint/cli)
</details>
<details>
<summary>conventional-changelog/commitlint
(@​commitlint/config-angular)</summary>
###
[`v20.4.1`](https://redirect.github.com/conventional-changelog/commitlint/blob/HEAD/@​commitlint/config-angular/CHANGELOG.md#2041-2026-02-02)
[Compare
Source](https://redirect.github.com/conventional-changelog/commitlint/compare/v20.4.0...v20.4.1)
**Note:** Version bump only for package
[@​commitlint/config-angular](https://redirect.github.com/commitlint/config-angular)
</details>
<details>
<summary>conventional-changelog/commitlint
(@​commitlint/config-conventional)</summary>
###
[`v20.4.1`](https://redirect.github.com/conventional-changelog/commitlint/blob/HEAD/@​commitlint/config-conventional/CHANGELOG.md#2041-2026-02-02)
[Compare
Source](https://redirect.github.com/conventional-changelog/commitlint/compare/v20.4.0...v20.4.1)
**Note:** Version bump only for package
[@​commitlint/config-conventional](https://redirect.github.com/commitlint/config-conventional)
</details>
<details>
<summary>luin/ioredis (ioredis)</summary>
###
[`v5.9.3`](https://redirect.github.com/luin/ioredis/blob/HEAD/CHANGELOG.md#593-2026-02-12)
[Compare
Source](https://redirect.github.com/luin/ioredis/compare/v5.9.2...v5.9.3)
##### Bug Fixes
- autopipelining to route writes to masters with scaleReads
([#​2072](https://redirect.github.com/luin/ioredis/issues/2072))
([8adb1ae](https://redirect.github.com/luin/ioredis/commit/8adb1aeb6f01cb2cf832c1f218033daf2a722925))
- fix issue with moved command for replicas
([#​2064](https://redirect.github.com/luin/ioredis/issues/2064))
([de4eed4](https://redirect.github.com/luin/ioredis/commit/de4eed4c88c1222002223b17d6d481c2a12df329))
- **types:** optional properties on RedisOptions allow explicit
undefined
([#​2066](https://redirect.github.com/luin/ioredis/issues/2066))
([0a1a898](https://redirect.github.com/luin/ioredis/commit/0a1a8982f9c912c78de68295e1f56136b62a645e))
</details>
<details>
<summary>GoogleChrome/lighthouse (lighthouse)</summary>
###
[`v13.0.3`](https://redirect.github.com/GoogleChrome/lighthouse/blob/HEAD/changelog.md#1303-2026-02-11)
[Compare
Source](https://redirect.github.com/GoogleChrome/lighthouse/compare/v13.0.2...v13.0.3)
Fix npm package publish of 13.0.2. Refer to
<https://github.com/GoogleChrome/lighthouse/releases/tag/v13.0.2>.
We expect this release to ship in the DevTools of [Chrome
146](https://chromiumdash.appspot.com/schedule), and to PageSpeed
Insights within 2 weeks.
###
[`v13.0.2`](https://redirect.github.com/GoogleChrome/lighthouse/blob/HEAD/changelog.md#1303-2026-02-11)
[Compare
Source](https://redirect.github.com/GoogleChrome/lighthouse/compare/v13.0.1...v13.0.2)
Fix npm package publish of 13.0.2. Refer to
<https://github.com/GoogleChrome/lighthouse/releases/tag/v13.0.2>.
We expect this release to ship in the DevTools of [Chrome
146](https://chromiumdash.appspot.com/schedule), and to PageSpeed
Insights within 2 weeks.
</details>
<details>
<summary>markedjs/marked (marked)</summary>
###
[`v17.0.2`](https://redirect.github.com/markedjs/marked/compare/v17.0.1...e8246208bc9dffcf550d5d3744746c6809ad2bdf)
[Compare
Source](https://redirect.github.com/markedjs/marked/compare/v17.0.1...v17.0.2)
</details>
<details>
<summary>nock/nock (nock)</summary>
###
[`v14.0.11`](https://redirect.github.com/nock/nock/releases/tag/v14.0.11)
[Compare
Source](https://redirect.github.com/nock/nock/compare/v14.0.10...v14.0.11)
##### Bug Fixes
- migrate to npm OIDC
([#​2940](https://redirect.github.com/nock/nock/issues/2940))
([113dcac](https://redirect.github.com/nock/nock/commit/113dcac727a769b0f2f27dd0213ea91d10fdcceb))
- restore github actions write permissions
([#​2941](https://redirect.github.com/nock/nock/issues/2941))
([a4cb6b8](https://redirect.github.com/nock/nock/commit/a4cb6b8252202bfce68d6475bf214dee9c1fe5fb))
- update `@mswjs/interceptors` to fix a memory leak
([#​2938](https://redirect.github.com/nock/nock/issues/2938))
([025db76](https://redirect.github.com/nock/nock/commit/025db760a4c8c101cd1c51da699de66a18e58f83))
- upgrade semantic-release
([#​2943](https://redirect.github.com/nock/nock/issues/2943))
([db0b280](https://redirect.github.com/nock/nock/commit/db0b28005ae4531277f77c52b56694cb484f802e))
</details>
<details>
<summary>webpack/sass-loader (sass-loader)</summary>
###
[`v16.0.7`](https://redirect.github.com/webpack/sass-loader/blob/HEAD/CHANGELOG.md#1607-2026-02-05)
[Compare
Source](https://redirect.github.com/webpack/sass-loader/compare/v16.0.6...v16.0.7)
</details>
<details>
<summary>sindresorhus/type-fest (type-fest)</summary>
###
[`v5.4.4`](https://redirect.github.com/sindresorhus/type-fest/releases/tag/v5.4.4)
[Compare
Source](https://redirect.github.com/sindresorhus/type-fest/compare/v5.4.3...v5.4.4)
- `PackageJson`: Use `LiteralUnion` for `engines` field
([#​1354](https://redirect.github.com/sindresorhus/type-fest/issues/1354))
[`fc9e2bb`](https://redirect.github.com/sindresorhus/type-fest/commit/fc9e2bb)
- `IsUnion`: Fix behavior when the entire union extends all individual
members
([#​1353](https://redirect.github.com/sindresorhus/type-fest/issues/1353))
[`b0321a5`](https://redirect.github.com/sindresorhus/type-fest/commit/b0321a5)
- `Paths`: Fix `leavesOnly` behavior with `never` leaves
([#​1350](https://redirect.github.com/sindresorhus/type-fest/issues/1350))
[`2c34128`](https://redirect.github.com/sindresorhus/type-fest/commit/2c34128)
- `Paths`: Fix behavior with `WeakMap`s / `WeakSet`s
([#​1348](https://redirect.github.com/sindresorhus/type-fest/issues/1348))
[`ac3b50e`](https://redirect.github.com/sindresorhus/type-fest/commit/ac3b50e)
- `Paths`: Fix behavior with tuples containing optional elements with a
rest element
([#​1346](https://redirect.github.com/sindresorhus/type-fest/issues/1346))
[`7c82a21`](https://redirect.github.com/sindresorhus/type-fest/commit/7c82a21)
***
</details>
<details>
<summary>TypeStrong/TypeDoc (typedoc)</summary>
###
[`v0.28.17`](https://redirect.github.com/TypeStrong/TypeDoc/blob/HEAD/CHANGELOG.md#v02817-2026-02-13)
[Compare
Source](https://redirect.github.com/TypeStrong/TypeDoc/compare/v0.28.16...v0.28.17)
##### Bug Fixes
- Improved handling of comments for type aliases which have been
declaration merged with functions,
[#​3064](https://redirect.github.com/TypeStrong/TypeDoc/issues/3064).
- Fixed anchor link generation to members named `$`,
[#​3065](https://redirect.github.com/TypeStrong/TypeDoc/issues/3065).
- Corrected typing of the `plugin` option to permit functions,
[#​3066](https://redirect.github.com/TypeStrong/TypeDoc/issues/3066).
- Warnings about unused `@param` tags will now be properly suppressed
when they come from declaration files and
the suppressCommentWarningsInDeclarationFiles option is enabled,
[#​3070](https://redirect.github.com/TypeStrong/TypeDoc/issues/3070).
- Fixed conversion of types referencing type parameters on functions,
[#​3071](https://redirect.github.com/TypeStrong/TypeDoc/issues/3071).
##### Thanks!
- [@​pjeby](https://redirect.github.com/pjeby)
</details>
<details>
<summary>jeffbski/wait-on (wait-on)</summary>
###
[`v9.0.4`](https://redirect.github.com/jeffbski/wait-on/releases/tag/v9.0.4)
[Compare
Source](https://redirect.github.com/jeffbski/wait-on/compare/v9.0.3...v9.0.4)
Updated patch dependencies including axios and lodash
</details>
---
### Configuration
š
**Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
š¦ **Automerge**: Enabled.
ā» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
š» **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/AmadeusITGroup/otter).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMi4wIiwidXBkYXRlZEluVmVyIjoiNDMuMjIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19--> deb6da20 chore(deps): update patch dependencies (main) (#3986)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[@azure/functions](https://redirect.github.com/Azure/azure-functions-nodejs-library)
| [`4.11.0` ā
`4.11.2`](https://renovatebot.com/diffs/npm/@azure%2ffunctions/4.11.0/4.11.2)
|

|

|
|
[@capacitor/browser](https://redirect.github.com/ionic-team/capacitor-plugins)
| [`8.0.0` ā
`8.0.1`](https://renovatebot.com/diffs/npm/@capacitor%2fbrowser/8.0.0/8.0.1)
|

|

|
|
[@capacitor/device](https://redirect.github.com/ionic-team/capacitor-plugins)
| [`8.0.0` ā
`8.0.1`](https://renovatebot.com/diffs/npm/@capacitor%2fdevice/8.0.0/8.0.1)
|

|

|
|
[@capacitor/preferences](https://redirect.github.com/ionic-team/capacitor-plugins)
| [`8.0.0` ā
`8.0.1`](https://renovatebot.com/diffs/npm/@capacitor%2fpreferences/8.0.0/8.0.1)
|

|

|
| [@commitlint/cli](https://commitlint.js.org/)
([source](https://redirect.github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli))
| [`20.4.0` ā
`20.4.1`](https://renovatebot.com/diffs/npm/@commitlint%2fcli/20.4.0/20.4.1)
|

|

|
| [@commitlint/config-angular](https://commitlint.js.org/)
([source](https://redirect.github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-angular))
| [`20.4.0` ā
`20.4.1`](https://renovatebot.com/diffs/npm/@commitlint%2fconfig-angular/20.4.0/20.4.1)
|

|

|
| [@commitlint/config-conventional](https://commitlint.js.org/)
([source](https://redirect.github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional))
| [`20.4.0` ā
`20.4.1`](https://renovatebot.com/diffs/npm/@commitlint%2fconfig-conventional/20.4.0/20.4.1)
|

|

|
|
[@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node)
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node))
| [`24.10.9` ā
`24.10.13`](https://renovatebot.com/diffs/npm/@types%2fnode/24.10.9/24.10.13)
|

|

|
| [ioredis](https://redirect.github.com/luin/ioredis) | [`5.9.2` ā
`5.9.3`](https://renovatebot.com/diffs/npm/ioredis/5.9.2/5.9.3) |

|

|
| [lighthouse](https://redirect.github.com/GoogleChrome/lighthouse) |
[`13.0.1` ā
`13.0.3`](https://renovatebot.com/diffs/npm/lighthouse/13.0.1/13.0.3) |

|

|
| [marked](https://marked.js.org)
([source](https://redirect.github.com/markedjs/marked)) | [`17.0.1` ā
`17.0.2`](https://renovatebot.com/diffs/npm/marked/17.0.1/17.0.2) |

|

|
| [nock](https://redirect.github.com/nock/nock) | [`14.0.10` ā
`14.0.11`](https://renovatebot.com/diffs/npm/nock/14.0.10/14.0.11) |

|

|
| [sass-loader](https://redirect.github.com/webpack/sass-loader) |
[`16.0.6` ā
`16.0.7`](https://renovatebot.com/diffs/npm/sass-loader/16.0.6/16.0.7) |

|

|
| [type-fest](https://redirect.github.com/sindresorhus/type-fest) |
[`5.4.3` ā
`5.4.4`](https://renovatebot.com/diffs/npm/type-fest/5.4.3/5.4.4) |

|

|
| [typedoc](https://typedoc.org)
([source](https://redirect.github.com/TypeStrong/TypeDoc)) | [`0.28.16`
ā `0.28.17`](https://renovatebot.com/diffs/npm/typedoc/0.28.16/0.28.17)
|

|

|
| [wait-on](https://redirect.github.com/jeffbski/wait-on) | [`9.0.3` ā
`9.0.4`](https://renovatebot.com/diffs/npm/wait-on/9.0.3/9.0.4) |

|

|
---
### Release Notes
<details>
<summary>Azure/azure-functions-nodejs-library
(@​azure/functions)</summary>
###
[`v4.11.1`](https://redirect.github.com/Azure/azure-functions-nodejs-library/releases/tag/v4.11.1)
[Compare
Source](https://redirect.github.com/Azure/azure-functions-nodejs-library/compare/v4.11.0...v4.11.1)
Removing Long as depndency
Removing dependency from lib.DOM
</details>
<details>
<summary>ionic-team/capacitor-plugins
(@​capacitor/browser)</summary>
###
[`v8.0.1`](https://redirect.github.com/ionic-team/capacitor-plugins/releases/tag/%40capacitor/status-bar%408.0.1)
[Compare
Source](https://redirect.github.com/ionic-team/capacitor-plugins/compare/@capacitor/browser@8.0.0...@capacitor/browser@8.0.1)
##### Bug Fixes
- AGP 9.0 no longer supporting `proguard-android.txt`
([#​2468](https://redirect.github.com/ionic-team/capacitor-plugins/issues/2468))
([a8760a9](https://redirect.github.com/ionic-team/capacitor-plugins/commit/a8760a989f594bc406d0ec7da58125d17447cae4))
</details>
<details>
<summary>conventional-changelog/commitlint
(@​commitlint/cli)</summary>
###
[`v20.4.1`](https://redirect.github.com/conventional-changelog/commitlint/blob/HEAD/@​commitlint/cli/CHANGELOG.md#2041-2026-02-02)
[Compare
Source](https://redirect.github.com/conventional-changelog/commitlint/compare/v20.4.0...v20.4.1)
**Note:** Version bump only for package
[@​commitlint/cli](https://redirect.github.com/commitlint/cli)
</details>
<details>
<summary>conventional-changelog/commitlint
(@​commitlint/config-angular)</summary>
###
[`v20.4.1`](https://redirect.github.com/conventional-changelog/commitlint/blob/HEAD/@​commitlint/config-angular/CHANGELOG.md#2041-2026-02-02)
[Compare
Source](https://redirect.github.com/conventional-changelog/commitlint/compare/v20.4.0...v20.4.1)
**Note:** Version bump only for package
[@​commitlint/config-angular](https://redirect.github.com/commitlint/config-angular)
</details>
<details>
<summary>conventional-changelog/commitlint
(@​commitlint/config-conventional)</summary>
###
[`v20.4.1`](https://redirect.github.com/conventional-changelog/commitlint/blob/HEAD/@​commitlint/config-conventional/CHANGELOG.md#2041-2026-02-02)
[Compare
Source](https://redirect.github.com/conventional-changelog/commitlint/compare/v20.4.0...v20.4.1)
**Note:** Version bump only for package
[@​commitlint/config-conventional](https://redirect.github.com/commitlint/config-conventional)
</details>
<details>
<summary>luin/ioredis (ioredis)</summary>
###
[`v5.9.3`](https://redirect.github.com/luin/ioredis/blob/HEAD/CHANGELOG.md#593-2026-02-12)
[Compare
Source](https://redirect.github.com/luin/ioredis/compare/v5.9.2...v5.9.3)
##### Bug Fixes
- autopipelining to route writes to masters with scaleReads
([#​2072](https://redirect.github.com/luin/ioredis/issues/2072))
([8adb1ae](https://redirect.github.com/luin/ioredis/commit/8adb1aeb6f01cb2cf832c1f218033daf2a722925))
- fix issue with moved command for replicas
([#​2064](https://redirect.github.com/luin/ioredis/issues/2064))
([de4eed4](https://redirect.github.com/luin/ioredis/commit/de4eed4c88c1222002223b17d6d481c2a12df329))
- **types:** optional properties on RedisOptions allow explicit
undefined
([#​2066](https://redirect.github.com/luin/ioredis/issues/2066))
([0a1a898](https://redirect.github.com/luin/ioredis/commit/0a1a8982f9c912c78de68295e1f56136b62a645e))
</details>
<details>
<summary>GoogleChrome/lighthouse (lighthouse)</summary>
###
[`v13.0.3`](https://redirect.github.com/GoogleChrome/lighthouse/blob/HEAD/changelog.md#1303-2026-02-11)
[Compare
Source](https://redirect.github.com/GoogleChrome/lighthouse/compare/v13.0.2...v13.0.3)
Fix npm package publish of 13.0.2. Refer to
<https://github.com/GoogleChrome/lighthouse/releases/tag/v13.0.2>.
We expect this release to ship in the DevTools of [Chrome
146](https://chromiumdash.appspot.com/schedule), and to PageSpeed
Insights within 2 weeks.
###
[`v13.0.2`](https://redirect.github.com/GoogleChrome/lighthouse/blob/HEAD/changelog.md#1303-2026-02-11)
[Compare
Source](https://redirect.github.com/GoogleChrome/lighthouse/compare/v13.0.1...v13.0.2)
Fix npm package publish of 13.0.2. Refer to
<https://github.com/GoogleChrome/lighthouse/releases/tag/v13.0.2>.
We expect this release to ship in the DevTools of [Chrome
146](https://chromiumdash.appspot.com/schedule), and to PageSpeed
Insights within 2 weeks.
</details>
<details>
<summary>markedjs/marked (marked)</summary>
###
[`v17.0.2`](https://redirect.github.com/markedjs/marked/compare/v17.0.1...e8246208bc9dffcf550d5d3744746c6809ad2bdf)
[Compare
Source](https://redirect.github.com/markedjs/marked/compare/v17.0.1...v17.0.2)
</details>
<details>
<summary>nock/nock (nock)</summary>
###
[`v14.0.11`](https://redirect.github.com/nock/nock/releases/tag/v14.0.11)
[Compare
Source](https://redirect.github.com/nock/nock/compare/v14.0.10...v14.0.11)
##### Bug Fixes
- migrate to npm OIDC
([#​2940](https://redirect.github.com/nock/nock/issues/2940))
([113dcac](https://redirect.github.com/nock/nock/commit/113dcac727a769b0f2f27dd0213ea91d10fdcceb))
- restore github actions write permissions
([#​2941](https://redirect.github.com/nock/nock/issues/2941))
([a4cb6b8](https://redirect.github.com/nock/nock/commit/a4cb6b8252202bfce68d6475bf214dee9c1fe5fb))
- update `@mswjs/interceptors` to fix a memory leak
([#​2938](https://redirect.github.com/nock/nock/issues/2938))
([025db76](https://redirect.github.com/nock/nock/commit/025db760a4c8c101cd1c51da699de66a18e58f83))
- upgrade semantic-release
([#​2943](https://redirect.github.com/nock/nock/issues/2943))
([db0b280](https://redirect.github.com/nock/nock/commit/db0b28005ae4531277f77c52b56694cb484f802e))
</details>
<details>
<summary>webpack/sass-loader (sass-loader)</summary>
###
[`v16.0.7`](https://redirect.github.com/webpack/sass-loader/blob/HEAD/CHANGELOG.md#1607-2026-02-05)
[Compare
Source](https://redirect.github.com/webpack/sass-loader/compare/v16.0.6...v16.0.7)
</details>
<details>
<summary>sindresorhus/type-fest (type-fest)</summary>
###
[`v5.4.4`](https://redirect.github.com/sindresorhus/type-fest/releases/tag/v5.4.4)
[Compare
Source](https://redirect.github.com/sindresorhus/type-fest/compare/v5.4.3...v5.4.4)
- `PackageJson`: Use `LiteralUnion` for `engines` field
([#​1354](https://redirect.github.com/sindresorhus/type-fest/issues/1354))
[`fc9e2bb`](https://redirect.github.com/sindresorhus/type-fest/commit/fc9e2bb)
- `IsUnion`: Fix behavior when the entire union extends all individual
members
([#​1353](https://redirect.github.com/sindresorhus/type-fest/issues/1353))
[`b0321a5`](https://redirect.github.com/sindresorhus/type-fest/commit/b0321a5)
- `Paths`: Fix `leavesOnly` behavior with `never` leaves
([#​1350](https://redirect.github.com/sindresorhus/type-fest/issues/1350))
[`2c34128`](https://redirect.github.com/sindresorhus/type-fest/commit/2c34128)
- `Paths`: Fix behavior with `WeakMap`s / `WeakSet`s
([#​1348](https://redirect.github.com/sindresorhus/type-fest/issues/1348))
[`ac3b50e`](https://redirect.github.com/sindresorhus/type-fest/commit/ac3b50e)
- `Paths`: Fix behavior with tuples containing optional elements with a
rest element
([#​1346](https://redirect.github.com/sindresorhus/type-fest/issues/1346))
[`7c82a21`](https://redirect.github.com/sindresorhus/type-fest/commit/7c82a21)
***
</details>
<details>
<summary>TypeStrong/TypeDoc (typedoc)</summary>
###
[`v0.28.17`](https://redirect.github.com/TypeStrong/TypeDoc/blob/HEAD/CHANGELOG.md#v02817-2026-02-13)
[Compare
Source](https://redirect.github.com/TypeStrong/TypeDoc/compare/v0.28.16...v0.28.17)
##### Bug Fixes
- Improved handling of comments for type aliases which have been
declaration merged with functions,
[#​3064](https://redirect.github.com/TypeStrong/TypeDoc/issues/3064).
- Fixed anchor link generation to members named `$`,
[#​3065](https://redirect.github.com/TypeStrong/TypeDoc/issues/3065).
- Corrected typing of the `plugin` option to permit functions,
[#​3066](https://redirect.github.com/TypeStrong/TypeDoc/issues/3066).
- Warnings about unused `@param` tags will now be properly suppressed
when they come from declaration files and
the suppressCommentWarningsInDeclarationFiles option is enabled,
[#​3070](https://redirect.github.com/TypeStrong/TypeDoc/issues/3070).
- Fixed conversion of types referencing type parameters on functions,
[#​3071](https://redirect.github.com/TypeStrong/TypeDoc/issues/3071).
##### Thanks!
- [@​pjeby](https://redirect.github.com/pjeby)
</details>
<details>
<summary>jeffbski/wait-on (wait-on)</summary>
###
[`v9.0.4`](https://redirect.github.com/jeffbski/wait-on/releases/tag/v9.0.4)
[Compare
Source](https://redirect.github.com/jeffbski/wait-on/compare/v9.0.3...v9.0.4)
Updated patch dependencies including axios and lodash
</details>
---
### Configuration
š
**Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
š¦ **Automerge**: Enabled.
ā» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
š» **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/AmadeusITGroup/otter).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMi4wIiwidXBkYXRlZEluVmVyIjoiNDMuMjIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19--> deb6da20 chore(deps): update patch dependencies (main) (#3986)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[@azure/functions](https://redirect.github.com/Azure/azure-functions-nodejs-library)
| [`4.11.0` ā
`4.11.2`](https://renovatebot.com/diffs/npm/@azure%2ffunctions/4.11.0/4.11.2)
|

|

|
|
[@capacitor/browser](https://redirect.github.com/ionic-team/capacitor-plugins)
| [`8.0.0` ā
`8.0.1`](https://renovatebot.com/diffs/npm/@capacitor%2fbrowser/8.0.0/8.0.1)
|

|

|
|
[@capacitor/device](https://redirect.github.com/ionic-team/capacitor-plugins)
| [`8.0.0` ā
`8.0.1`](https://renovatebot.com/diffs/npm/@capacitor%2fdevice/8.0.0/8.0.1)
|

|

|
|
[@capacitor/preferences](https://redirect.github.com/ionic-team/capacitor-plugins)
| [`8.0.0` ā
`8.0.1`](https://renovatebot.com/diffs/npm/@capacitor%2fpreferences/8.0.0/8.0.1)
|

|

|
| [@commitlint/cli](https://commitlint.js.org/)
([source](https://redirect.github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli))
| [`20.4.0` ā
`20.4.1`](https://renovatebot.com/diffs/npm/@commitlint%2fcli/20.4.0/20.4.1)
|

|

|
| [@commitlint/config-angular](https://commitlint.js.org/)
([source](https://redirect.github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-angular))
| [`20.4.0` ā
`20.4.1`](https://renovatebot.com/diffs/npm/@commitlint%2fconfig-angular/20.4.0/20.4.1)
|

|

|
| [@commitlint/config-conventional](https://commitlint.js.org/)
([source](https://redirect.github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional))
| [`20.4.0` ā
`20.4.1`](https://renovatebot.com/diffs/npm/@commitlint%2fconfig-conventional/20.4.0/20.4.1)
|

|

|
|
[@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node)
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node))
| [`24.10.9` ā
`24.10.13`](https://renovatebot.com/diffs/npm/@types%2fnode/24.10.9/24.10.13)
|

|

|
| [ioredis](https://redirect.github.com/luin/ioredis) | [`5.9.2` ā
`5.9.3`](https://renovatebot.com/diffs/npm/ioredis/5.9.2/5.9.3) |

|

|
| [lighthouse](https://redirect.github.com/GoogleChrome/lighthouse) |
[`13.0.1` ā
`13.0.3`](https://renovatebot.com/diffs/npm/lighthouse/13.0.1/13.0.3) |

|

|
| [marked](https://marked.js.org)
([source](https://redirect.github.com/markedjs/marked)) | [`17.0.1` ā
`17.0.2`](https://renovatebot.com/diffs/npm/marked/17.0.1/17.0.2) |

|

|
| [nock](https://redirect.github.com/nock/nock) | [`14.0.10` ā
`14.0.11`](https://renovatebot.com/diffs/npm/nock/14.0.10/14.0.11) |

|

|
| [sass-loader](https://redirect.github.com/webpack/sass-loader) |
[`16.0.6` ā
`16.0.7`](https://renovatebot.com/diffs/npm/sass-loader/16.0.6/16.0.7) |

|

|
| [type-fest](https://redirect.github.com/sindresorhus/type-fest) |
[`5.4.3` ā
`5.4.4`](https://renovatebot.com/diffs/npm/type-fest/5.4.3/5.4.4) |

|

|
| [typedoc](https://typedoc.org)
([source](https://redirect.github.com/TypeStrong/TypeDoc)) | [`0.28.16`
ā `0.28.17`](https://renovatebot.com/diffs/npm/typedoc/0.28.16/0.28.17)
|

|

|
| [wait-on](https://redirect.github.com/jeffbski/wait-on) | [`9.0.3` ā
`9.0.4`](https://renovatebot.com/diffs/npm/wait-on/9.0.3/9.0.4) |

|

|
---
### Release Notes
<details>
<summary>Azure/azure-functions-nodejs-library
(@​azure/functions)</summary>
###
[`v4.11.1`](https://redirect.github.com/Azure/azure-functions-nodejs-library/releases/tag/v4.11.1)
[Compare
Source](https://redirect.github.com/Azure/azure-functions-nodejs-library/compare/v4.11.0...v4.11.1)
Removing Long as depndency
Removing dependency from lib.DOM
</details>
<details>
<summary>ionic-team/capacitor-plugins
(@​capacitor/browser)</summary>
###
[`v8.0.1`](https://redirect.github.com/ionic-team/capacitor-plugins/releases/tag/%40capacitor/status-bar%408.0.1)
[Compare
Source](https://redirect.github.com/ionic-team/capacitor-plugins/compare/@capacitor/browser@8.0.0...@capacitor/browser@8.0.1)
##### Bug Fixes
- AGP 9.0 no longer supporting `proguard-android.txt`
([#​2468](https://redirect.github.com/ionic-team/capacitor-plugins/issues/2468))
([a8760a9](https://redirect.github.com/ionic-team/capacitor-plugins/commit/a8760a989f594bc406d0ec7da58125d17447cae4))
</details>
<details>
<summary>conventional-changelog/commitlint
(@​commitlint/cli)</summary>
###
[`v20.4.1`](https://redirect.github.com/conventional-changelog/commitlint/blob/HEAD/@​commitlint/cli/CHANGELOG.md#2041-2026-02-02)
[Compare
Source](https://redirect.github.com/conventional-changelog/commitlint/compare/v20.4.0...v20.4.1)
**Note:** Version bump only for package
[@​commitlint/cli](https://redirect.github.com/commitlint/cli)
</details>
<details>
<summary>conventional-changelog/commitlint
(@​commitlint/config-angular)</summary>
###
[`v20.4.1`](https://redirect.github.com/conventional-changelog/commitlint/blob/HEAD/@​commitlint/config-angular/CHANGELOG.md#2041-2026-02-02)
[Compare
Source](https://redirect.github.com/conventional-changelog/commitlint/compare/v20.4.0...v20.4.1)
**Note:** Version bump only for package
[@​commitlint/config-angular](https://redirect.github.com/commitlint/config-angular)
</details>
<details>
<summary>conventional-changelog/commitlint
(@​commitlint/config-conventional)</summary>
###
[`v20.4.1`](https://redirect.github.com/conventional-changelog/commitlint/blob/HEAD/@​commitlint/config-conventional/CHANGELOG.md#2041-2026-02-02)
[Compare
Source](https://redirect.github.com/conventional-changelog/commitlint/compare/v20.4.0...v20.4.1)
**Note:** Version bump only for package
[@​commitlint/config-conventional](https://redirect.github.com/commitlint/config-conventional)
</details>
<details>
<summary>luin/ioredis (ioredis)</summary>
###
[`v5.9.3`](https://redirect.github.com/luin/ioredis/blob/HEAD/CHANGELOG.md#593-2026-02-12)
[Compare
Source](https://redirect.github.com/luin/ioredis/compare/v5.9.2...v5.9.3)
##### Bug Fixes
- autopipelining to route writes to masters with scaleReads
([#​2072](https://redirect.github.com/luin/ioredis/issues/2072))
([8adb1ae](https://redirect.github.com/luin/ioredis/commit/8adb1aeb6f01cb2cf832c1f218033daf2a722925))
- fix issue with moved command for replicas
([#​2064](https://redirect.github.com/luin/ioredis/issues/2064))
([de4eed4](https://redirect.github.com/luin/ioredis/commit/de4eed4c88c1222002223b17d6d481c2a12df329))
- **types:** optional properties on RedisOptions allow explicit
undefined
([#​2066](https://redirect.github.com/luin/ioredis/issues/2066))
([0a1a898](https://redirect.github.com/luin/ioredis/commit/0a1a8982f9c912c78de68295e1f56136b62a645e))
</details>
<details>
<summary>GoogleChrome/lighthouse (lighthouse)</summary>
###
[`v13.0.3`](https://redirect.github.com/GoogleChrome/lighthouse/blob/HEAD/changelog.md#1303-2026-02-11)
[Compare
Source](https://redirect.github.com/GoogleChrome/lighthouse/compare/v13.0.2...v13.0.3)
Fix npm package publish of 13.0.2. Refer to
<https://github.com/GoogleChrome/lighthouse/releases/tag/v13.0.2>.
We expect this release to ship in the DevTools of [Chrome
146](https://chromiumdash.appspot.com/schedule), and to PageSpeed
Insights within 2 weeks.
###
[`v13.0.2`](https://redirect.github.com/GoogleChrome/lighthouse/blob/HEAD/changelog.md#1303-2026-02-11)
[Compare
Source](https://redirect.github.com/GoogleChrome/lighthouse/compare/v13.0.1...v13.0.2)
Fix npm package publish of 13.0.2. Refer to
<https://github.com/GoogleChrome/lighthouse/releases/tag/v13.0.2>.
We expect this release to ship in the DevTools of [Chrome
146](https://chromiumdash.appspot.com/schedule), and to PageSpeed
Insights within 2 weeks.
</details>
<details>
<summary>markedjs/marked (marked)</summary>
###
[`v17.0.2`](https://redirect.github.com/markedjs/marked/compare/v17.0.1...e8246208bc9dffcf550d5d3744746c6809ad2bdf)
[Compare
Source](https://redirect.github.com/markedjs/marked/compare/v17.0.1...v17.0.2)
</details>
<details>
<summary>nock/nock (nock)</summary>
###
[`v14.0.11`](https://redirect.github.com/nock/nock/releases/tag/v14.0.11)
[Compare
Source](https://redirect.github.com/nock/nock/compare/v14.0.10...v14.0.11)
##### Bug Fixes
- migrate to npm OIDC
([#​2940](https://redirect.github.com/nock/nock/issues/2940))
([113dcac](https://redirect.github.com/nock/nock/commit/113dcac727a769b0f2f27dd0213ea91d10fdcceb))
- restore github actions write permissions
([#​2941](https://redirect.github.com/nock/nock/issues/2941))
([a4cb6b8](https://redirect.github.com/nock/nock/commit/a4cb6b8252202bfce68d6475bf214dee9c1fe5fb))
- update `@mswjs/interceptors` to fix a memory leak
([#​2938](https://redirect.github.com/nock/nock/issues/2938))
([025db76](https://redirect.github.com/nock/nock/commit/025db760a4c8c101cd1c51da699de66a18e58f83))
- upgrade semantic-release
([#​2943](https://redirect.github.com/nock/nock/issues/2943))
([db0b280](https://redirect.github.com/nock/nock/commit/db0b28005ae4531277f77c52b56694cb484f802e))
</details>
<details>
<summary>webpack/sass-loader (sass-loader)</summary>
###
[`v16.0.7`](https://redirect.github.com/webpack/sass-loader/blob/HEAD/CHANGELOG.md#1607-2026-02-05)
[Compare
Source](https://redirect.github.com/webpack/sass-loader/compare/v16.0.6...v16.0.7)
</details>
<details>
<summary>sindresorhus/type-fest (type-fest)</summary>
###
[`v5.4.4`](https://redirect.github.com/sindresorhus/type-fest/releases/tag/v5.4.4)
[Compare
Source](https://redirect.github.com/sindresorhus/type-fest/compare/v5.4.3...v5.4.4)
- `PackageJson`: Use `LiteralUnion` for `engines` field
([#​1354](https://redirect.github.com/sindresorhus/type-fest/issues/1354))
[`fc9e2bb`](https://redirect.github.com/sindresorhus/type-fest/commit/fc9e2bb)
- `IsUnion`: Fix behavior when the entire union extends all individual
members
([#​1353](https://redirect.github.com/sindresorhus/type-fest/issues/1353))
[`b0321a5`](https://redirect.github.com/sindresorhus/type-fest/commit/b0321a5)
- `Paths`: Fix `leavesOnly` behavior with `never` leaves
([#​1350](https://redirect.github.com/sindresorhus/type-fest/issues/1350))
[`2c34128`](https://redirect.github.com/sindresorhus/type-fest/commit/2c34128)
- `Paths`: Fix behavior with `WeakMap`s / `WeakSet`s
([#​1348](https://redirect.github.com/sindresorhus/type-fest/issues/1348))
[`ac3b50e`](https://redirect.github.com/sindresorhus/type-fest/commit/ac3b50e)
- `Paths`: Fix behavior with tuples containing optional elements with a
rest element
([#​1346](https://redirect.github.com/sindresorhus/type-fest/issues/1346))
[`7c82a21`](https://redirect.github.com/sindresorhus/type-fest/commit/7c82a21)
***
</details>
<details>
<summary>TypeStrong/TypeDoc (typedoc)</summary>
###
[`v0.28.17`](https://redirect.github.com/TypeStrong/TypeDoc/blob/HEAD/CHANGELOG.md#v02817-2026-02-13)
[Compare
Source](https://redirect.github.com/TypeStrong/TypeDoc/compare/v0.28.16...v0.28.17)
##### Bug Fixes
- Improved handling of comments for type aliases which have been
declaration merged with functions,
[#​3064](https://redirect.github.com/TypeStrong/TypeDoc/issues/3064).
- Fixed anchor link generation to members named `$`,
[#​3065](https://redirect.github.com/TypeStrong/TypeDoc/issues/3065).
- Corrected typing of the `plugin` option to permit functions,
[#​3066](https://redirect.github.com/TypeStrong/TypeDoc/issues/3066).
- Warnings about unused `@param` tags will now be properly suppressed
when they come from declaration files and
the suppressCommentWarningsInDeclarationFiles option is enabled,
[#​3070](https://redirect.github.com/TypeStrong/TypeDoc/issues/3070).
- Fixed conversion of types referencing type parameters on functions,
[#​3071](https://redirect.github.com/TypeStrong/TypeDoc/issues/3071).
##### Thanks!
- [@​pjeby](https://redirect.github.com/pjeby)
</details>
<details>
<summary>jeffbski/wait-on (wait-on)</summary>
###
[`v9.0.4`](https://redirect.github.com/jeffbski/wait-on/releases/tag/v9.0.4)
[Compare
Source](https://redirect.github.com/jeffbski/wait-on/compare/v9.0.3...v9.0.4)
Updated patch dependencies including axios and lodash
</details>
---
### Configuration
š
**Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
š¦ **Automerge**: Enabled.
ā» **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
š» **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/AmadeusITGroup/otter).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMi4wIiwidXBkYXRlZEluVmVyIjoiNDMuMjIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19--> cbfefc04 chore(deps): update dependency qs to v6.14.2 [security] (main) (#3985)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [qs](https://redirect.github.com/ljharb/qs) | [`6.14.1` ā
`6.14.2`](https://renovatebot.com/diffs/npm/qs/6.14.1/6.14.2) |

|

|
### GitHub Vulnerability Alerts
####
[CVE-2026-2391](https://redirect.github.com/ljharb/qs/security/advisories/GHSA-w7fw-mjwx-w883)
### Summary
The `arrayLimit` option in qs does not enforce limits for
comma-separated values when `comma: true` is enabled, allowing attackers
to cause denial-of-service via memory exhaustion. This is a bypass of
the array limit enforcement, similar to the bracket notation bypass
addressed in GHSA-6rw7-vpxm-498p (CVE-2025-15284).
### Details
When the `comma` option is set to `true` (not the default, but
configurable in applications), qs allows parsing comma-separated strings
as arrays (e.g., `?param=a,b,c` becomes `['a', 'b', 'c']`). However, the
limit check for `arrayLimit` (default: 20) and the optional
throwOnLimitExceeded occur after the comma-handling logic in
`parseArrayValue`, enabling a bypass. This permits creation of
arbitrarily large arrays from a single parameter, leading to excessive
memory allocation.
**Vulnerable code** (lib/parse.js: lines ~40-50):
```js
if (val && typeof val === 'string' && options.comma && val.indexOf(',') > -1) {
return val.split(',');
}
if (options.throwOnLimitExceeded && currentArrayLength >= options.arrayLimit) {
throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');
}
return val;
```
The `split(',')` returns the array immediately, skipping the subsequent
limit check. Downstream merging via `utils.combine` does not prevent
allocation, even if it marks overflows for sparse arrays.This
discrepancy allows attackers to send a single parameter with millions of
commas (e.g., `?param=,,,,,,,,...`), allocating massive arrays in memory
without triggering limits. It bypasses the intent of `arrayLimit`, which
is enforced correctly for indexed (`a[0]=`) and bracket (`a[]=`)
notations (the latter fixed in v6.14.1 per GHSA-6rw7-vpxm-498p).
### PoC
**Test 1 - Basic bypass:**
```
npm install qs
```
```js
const qs = require('qs');
const payload = 'a=' + ','.repeat(25); // 26 elements after split (bypasses arrayLimit: 5)
const options = { comma: true, arrayLimit: 5, throwOnLimitExceeded: true };
try {
const result = qs.parse(payload, options);
console.log(result.a.length); // Outputs: 26 (bypass successful)
} catch (e) {
console.log('Limit enforced:', e.message); // Not thrown
}
```
**Configuration:**
- `comma: true`
- `arrayLimit: 5`
- `throwOnLimitExceeded: true`
Expected: Throws "Array limit exceeded" error.
Actual: Parses successfully, creating an array of length 26.
### Impact
Denial of Service (DoS) via memory exhaustion.
### Suggested Fix
Move the `arrayLimit` check before the comma split in `parseArrayValue`,
and enforce it on the resulting array length. Use `currentArrayLength`
(already calculated upstream) for consistency with bracket notation
fixes.
**Current code** (lib/parse.js: lines ~40-50):
```js
if (val && typeof val === 'string' && options.comma && val.indexOf(',') > -1) {
return val.split(',');
}
if (options.throwOnLimitExceeded && currentArrayLength >= options.arrayLimit) {
throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');
}
return val;
```
**Fixed code:**
```js
if (val && typeof val === 'string' && options.comma && val.indexOf(',') > -1) {
const splitArray = val.split(',');
if (splitArray.length > options.arrayLimit - currentArrayLength) { // Check against remaining limit
if (options.throwOnLimitExceeded) {
throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');
} else {
// Optionally convert to object or truncate, per README
return splitArray.slice(0, options.arrayLimit - currentArrayLength);
}
}
return splitArray;
}
if (options.throwOnLimitExceeded && currentArrayLength >= options.arrayLimit) {
throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');
}
return val;
```
This aligns behavior with indexed and bracket notations, reuses
`currentArrayLength`, and respects `throwOnLimitExceeded`. Update README
to note the consistent enforcement.
---
### Release Notes
<details>
<summary>ljharb/qs (qs)</summary>
###
[`v6.14.2`](https://redirect.github.com/ljharb/qs/blob/HEAD/CHANGELOG.md#6142)
[Compare
Source](https://redirect.github.com/ljharb/qs/compare/v6.14.1...v6.14.2)
- \[Fix] `parse`: mark overflow objects for indexed notation exceeding
`arrayLimit`
([#​546](https://redirect.github.com/ljharb/qs/issues/546))
- \[Fix] `arrayLimit` means max count, not max index, in
`combine`/`merge`/`parseArrayValue`
- \[Fix] `parse`: throw on `arrayLimit` exceeded with indexed notation
when `throwOnLimitExceeded` is true
([#​529](https://redirect.github.com/ljharb/qs/issues/529))
- \[Fix] `parse`: enforce `arrayLimit` on `comma`-parsed values
- \[Fix] `parse`: fix error message to reflect arrayLimit as max index;
remove extraneous comments
([#​545](https://redirect.github.com/ljharb/qs/issues/545))
- \[Robustness] avoid `.push`, use `void`
- \[readme] document that `addQueryPrefix` does not add `?` to empty
output ([#​418](https://redirect.github.com/ljharb/qs/issues/418))
- \[readme] clarify `parseArrays` and `arrayLimit` documentation
([#​543](https://redirect.github.com/ljharb/qs/issues/543))
- \[readme] replace runkit CI badge with shields.io check-runs badge
- \[meta] fix changelog typo (`arrayLength` ā `arrayLimit`)
- \[actions] fix rebase workflow permissions
</details>
---
### Configuration
š
**Schedule**: Branch creation - "" in timezone Europe/Paris, Automerge
- At any time (no schedule defined).
š¦ **Automerge**: Disabled because a matching PR was automerged
previously.
ā» **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
š **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/AmadeusITGroup/otter).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMi4wIiwidXBkYXRlZEluVmVyIjoiNDMuMjIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19--> cbfefc04 chore(deps): update dependency qs to v6.14.2 [security] (main) (#3985)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [qs](https://redirect.github.com/ljharb/qs) | [`6.14.1` ā
`6.14.2`](https://renovatebot.com/diffs/npm/qs/6.14.1/6.14.2) |

|

|
### GitHub Vulnerability Alerts
####
[CVE-2026-2391](https://redirect.github.com/ljharb/qs/security/advisories/GHSA-w7fw-mjwx-w883)
### Summary
The `arrayLimit` option in qs does not enforce limits for
comma-separated values when `comma: true` is enabled, allowing attackers
to cause denial-of-service via memory exhaustion. This is a bypass of
the array limit enforcement, similar to the bracket notation bypass
addressed in GHSA-6rw7-vpxm-498p (CVE-2025-15284).
### Details
When the `comma` option is set to `true` (not the default, but
configurable in applications), qs allows parsing comma-separated strings
as arrays (e.g., `?param=a,b,c` becomes `['a', 'b', 'c']`). However, the
limit check for `arrayLimit` (default: 20) and the optional
throwOnLimitExceeded occur after the comma-handling logic in
`parseArrayValue`, enabling a bypass. This permits creation of
arbitrarily large arrays from a single parameter, leading to excessive
memory allocation.
**Vulnerable code** (lib/parse.js: lines ~40-50):
```js
if (val && typeof val === 'string' && options.comma && val.indexOf(',') > -1) {
return val.split(',');
}
if (options.throwOnLimitExceeded && currentArrayLength >= options.arrayLimit) {
throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');
}
return val;
```
The `split(',')` returns the array immediately, skipping the subsequent
limit check. Downstream merging via `utils.combine` does not prevent
allocation, even if it marks overflows for sparse arrays.This
discrepancy allows attackers to send a single parameter with millions of
commas (e.g., `?param=,,,,,,,,...`), allocating massive arrays in memory
without triggering limits. It bypasses the intent of `arrayLimit`, which
is enforced correctly for indexed (`a[0]=`) and bracket (`a[]=`)
notations (the latter fixed in v6.14.1 per GHSA-6rw7-vpxm-498p).
### PoC
**Test 1 - Basic bypass:**
```
npm install qs
```
```js
const qs = require('qs');
const payload = 'a=' + ','.repeat(25); // 26 elements after split (bypasses arrayLimit: 5)
const options = { comma: true, arrayLimit: 5, throwOnLimitExceeded: true };
try {
const result = qs.parse(payload, options);
console.log(result.a.length); // Outputs: 26 (bypass successful)
} catch (e) {
console.log('Limit enforced:', e.message); // Not thrown
}
```
**Configuration:**
- `comma: true`
- `arrayLimit: 5`
- `throwOnLimitExceeded: true`
Expected: Throws "Array limit exceeded" error.
Actual: Parses successfully, creating an array of length 26.
### Impact
Denial of Service (DoS) via memory exhaustion.
### Suggested Fix
Move the `arrayLimit` check before the comma split in `parseArrayValue`,
and enforce it on the resulting array length. Use `currentArrayLength`
(already calculated upstream) for consistency with bracket notation
fixes.
**Current code** (lib/parse.js: lines ~40-50):
```js
if (val && typeof val === 'string' && options.comma && val.indexOf(',') > -1) {
return val.split(',');
}
if (options.throwOnLimitExceeded && currentArrayLength >= options.arrayLimit) {
throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');
}
return val;
```
**Fixed code:**
```js
if (val && typeof val === 'string' && options.comma && val.indexOf(',') > -1) {
const splitArray = val.split(',');
if (splitArray.length > options.arrayLimit - currentArrayLength) { // Check against remaining limit
if (options.throwOnLimitExceeded) {
throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');
} else {
// Optionally convert to object or truncate, per README
return splitArray.slice(0, options.arrayLimit - currentArrayLength);
}
}
return splitArray;
}
if (options.throwOnLimitExceeded && currentArrayLength >= options.arrayLimit) {
throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');
}
return val;
```
This aligns behavior with indexed and bracket notations, reuses
`currentArrayLength`, and respects `throwOnLimitExceeded`. Update README
to note the consistent enforcement.
---
### Release Notes
<details>
<summary>ljharb/qs (qs)</summary>
###
[`v6.14.2`](https://redirect.github.com/ljharb/qs/blob/HEAD/CHANGELOG.md#6142)
[Compare
Source](https://redirect.github.com/ljharb/qs/compare/v6.14.1...v6.14.2)
- \[Fix] `parse`: mark overflow objects for indexed notation exceeding
`arrayLimit`
([#​546](https://redirect.github.com/ljharb/qs/issues/546))
- \[Fix] `arrayLimit` means max count, not max index, in
`combine`/`merge`/`parseArrayValue`
- \[Fix] `parse`: throw on `arrayLimit` exceeded with indexed notation
when `throwOnLimitExceeded` is true
([#​529](https://redirect.github.com/ljharb/qs/issues/529))
- \[Fix] `parse`: enforce `arrayLimit` on `comma`-parsed values
- \[Fix] `parse`: fix error message to reflect arrayLimit as max index;
remove extraneous comments
([#​545](https://redirect.github.com/ljharb/qs/issues/545))
- \[Robustness] avoid `.push`, use `void`
- \[readme] document that `addQueryPrefix` does not add `?` to empty
output ([#​418](https://redirect.github.com/ljharb/qs/issues/418))
- \[readme] clarify `parseArrays` and `arrayLimit` documentation
([#​543](https://redirect.github.com/ljharb/qs/issues/543))
- \[readme] replace runkit CI badge with shields.io check-runs badge
- \[meta] fix changelog typo (`arrayLength` ā `arrayLimit`)
- \[actions] fix rebase workflow permissions
</details>
---
### Configuration
š
**Schedule**: Branch creation - "" in timezone Europe/Paris, Automerge
- At any time (no schedule defined).
š¦ **Automerge**: Disabled because a matching PR was automerged
previously.
ā» **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
š **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/AmadeusITGroup/otter).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMi4wIiwidXBkYXRlZEluVmVyIjoiNDMuMjIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->