Skip to content

chore(deps): bump @scalar/openapi-parser from 0.29.0 to 0.29.1 - #353

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/scalar/openapi-parser-0.29.1
Sep 21, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/scalar/openapi-parser-0.29.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @scalar/openapi-parser from 0.29.0 to 0.29.1.

Changelog

Sourced from @​scalar/openapi-parser's changelog.

0.29.1

Patch Changes

  • #10078: Guard mergeObjects (used by join) against prototype pollution, so a __proto__, constructor, or prototype key in an input document can no longer reach Object.prototype

  • #9990: Fix @scalar/types leaking into the published type declarations. @scalar/openapi-parser referenced @scalar/types from its .d.ts files while only depending on it as a devDependency, so consumers hit TS2307 (cannot find module). @scalar/types is now a regular dependency, and the package uses the shared UnknownObject and AnyObject utility types from @scalar/types/utils directly instead of defining its own local copies (AnyObject was added to @scalar/types/utils alongside the existing UnknownObject).

    The generic AnyObject and UnknownObject types are no longer re-exported from @scalar/openapi-parser. Import them from @scalar/types/utils instead.

Commits

@dependabot
dependabot Bot requested a review from Medformatik as a code owner September 21, 2026 04:39
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/scalar/openapi-parser-0.29.1 branch from fa52940 to 7e07d0d Compare September 21, 2026 05:07
@github-actions
github-actions Bot enabled auto-merge (squash) September 21, 2026 05:09
Bumps [@scalar/openapi-parser](https://github.com/scalar/scalar/tree/HEAD/packages/openapi-parser) from 0.29.0 to 0.29.1.
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/packages/openapi-parser/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits/HEAD/packages/openapi-parser)

---
updated-dependencies:
- dependency-name: "@scalar/openapi-parser"
  dependency-version: 0.29.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/scalar/openapi-parser-0.29.1 branch from 7e07d0d to 728a60b Compare September 21, 2026 05:35
@github-actions
github-actions Bot merged commit 0fc9b21 into main Sep 21, 2026
22 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/scalar/openapi-parser-0.29.1 branch September 21, 2026 05:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants