[dependency]: Bump the npm-dependencies group across 1 directory with 3 updates

[dependabot]

Bumps the npm-dependencies group with 3 updates in the /openapi directory: @redocly/cli, markdown-link-check and openapi-to-postmanv2.

Updates @redocly/cli from 2.32.2 to 2.42.0

Release notes

Sourced from @​redocly/cli's releases.

@​redocly/cli@​2.42.0

Minor Changes

• Added an experimental generate-client command that generates a typed, zero-dependency TypeScript client from an OpenAPI description — auth, retries, middleware, typed SSE streaming, pagination, and multipart included — plus optional companion generators for Zod validation, TanStack Query and SWR hooks, MSW mocks, and date transformers. See the generate-client command reference and the Use the generated client guide.

Patch Changes

• Updated @​redocly/client-generator to v0.1.0.
• Updated @​redocly/openapi-core to v2.42.0.

@​redocly/cli@​2.41.2

Patch Changes

• Updated js-yaml from 5.2.1 to 5.2.2 to resolve a vulnerability in YAML parsing.

• Added support for the Arazzo spec-compliant workflow reference form $sourceDescriptions.<name>.<workflowId> in dependsOn, step workflowId, and success/failure action workflowId.

  Unresolvable workflow references fail only the affected workflow with a clear error message, and no longer abort the whole run or pass unnoticed.

• Updated @​redocly/openapi-core to v2.41.2.

• Updated @​redocly/respect-core to v2.41.2.

@​redocly/cli@​2.41.1

Patch Changes

• Fixed an issue where the drift command's schema-consistency rule reported false-positive findings for oneOf schemas with a discriminator. Payloads are validated only against the branch selected by the discriminator value instead of every oneOf branch. Schemas whose discriminator does not meet Ajv's structural requirements keep the previous behavior.
• Extended the drift command's built-in undocumented-header ignore list with x-amz-, x-amzn- and x-github- prefixes, and the x-hub-signature / x-hub-signature-256 webhook signature headers.

@​redocly/cli@​2.41.0

Minor Changes

• Added a new built-in rule security-scopes-defined that requires every scope used in a security requirement to be defined in the corresponding OAuth2 security scheme. The rule supports OpenAPI 2.0/3.x and AsyncAPI 2.6/3.0, suggests the closest defined scope for typos, and has an opt-in requireScopes option that requires OAuth2 security requirements to list at least one scope.

Patch Changes

• Fixed an issue in respect where the execution of parent workflow's steps didn't halt after a step that referenced another workflow had failed.
• Fixed an issue where the cursor AI provider of the generate-spec command sent only the instructions to the model and the operation to refine never reached it.
• Updated @​redocly/openapi-core to v2.41.0.
• Updated @​redocly/respect-core to v2.41.0.

@​redocly/cli@​2.40.0

Minor Changes

• Added an --ignore-headers option to the experimental drift and proxy commands. It takes a comma-separated list of header names to skip in undocumented-header checks, and a trailing * matches by prefix (for example x-consumer-*).

... (truncated)

Commits

• d9a7dcd chore: 🔖 release new versions (#2983)
• f7aac74 chore(deps): bump redocly/config version to v0.53.0 (#2984)
• 74364e5 feat: add openapi typescript client (#2885)
• 3016d43 chore: 🔖 release new versions (#2978)
• 324c0f6 chore: bump js-yaml to 5.2.2 and refresh lockfile (#2982)
• 737ff01 chore(cli): add production env to usage data (#2976)
• bd82fc6 fix(respect): workflow references format (#2969)
• b15dae2 chore: 🔖 release new versions (#2975)
• 6da4e28 fix: validate discriminated oneOf schemas against only the branch selected by...
• fba67bd chore: fix snapshot release (#2974)
• Additional commits viewable in compare view

Updates markdown-link-check from 3.14.2 to 3.15.0

Release notes

Sourced from markdown-link-check's releases.

v3.15.0

What's Changed

• Improve code block removal by @​vismam in tcort/markdown-link-check#559
• update dependencies

New Contributors

• @​vismam made their first contribution in tcort/markdown-link-check#559

Full Changelog: tcort/markdown-link-check@v3.14.2...v3.15.0

Changelog

Sourced from markdown-link-check's changelog.

Version 3.15.0

• Improve code block removal by @​vismam
• update dependencies

Commits

• 275c27c 3.15.0
• 04416b8 chore(release.yml): update node to v24
• 841ebf3 Merge pull request #559 from vismam/improve-code-block-removal
• c604140 Merge pull request #590 from tcort/dependabot/github_actions/actions/setup-no...
• b142a4d chore(package): update dependencies
• 5b72197 chore(github): remove dependabot.yml
• 27fc029 Merge pull request #591 from MikeMcC399/update/ci-node
• 3a1d1e1 ci: add Node.js 26 to test workflow
• 57770a3 chore(deps): bump actions/setup-node from 6 to 7
• 1dce945 Merge pull request #589 from tcort/dependabot/npm_and_yarn/dependencies-4c6d9...
• Additional commits viewable in compare view

Updates openapi-to-postmanv2 from 6.1.0 to 6.3.1

Changelog

Sourced from openapi-to-postmanv2's changelog.

[v6.3.1] - 2026-07-23

[v6.3.0] - 2026-07-07

[v6.2.0] - 2026-06-29

Commits

• b481d11 Merge pull request #960 from postmanlabs/release/v6.3.1
• cf15b77 Prepare release v6.3.1
• f4b8b56 Merge pull request #959 from postmanlabs/feature/parameter-examples-pairing
• 4b79a73 Refine header merging logic and enhance test fixtures for parameter example s...
• 4f1cb5d Enhance parameter example mapping handling in schemaUtils and response merging
• a3e689c Merge pull request #956 from postmanlabs/release/v6.3.0
• 97eab47 Merge pull request #957 from postmanlabs/release/v6.3.0
• b848e6c Prepare release v6.3.0
• 77124f7 Merge pull request #954 from postmanlabs/feature/deleted-orphaned-req
• 5132cde Add deleteOrphanedRequests option for collection syncing
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions