@redocly/cli 2.41.0 → 2.41.2

package/README.md

@@ -106,7 +106,7 @@ The `stylish` output is as good as it sounds, but if you need JSON, Markdown, Ch
 
 [Learn more about API standards and configuring Redocly rules](https://redocly.com/docs/cli/api-standards).
 
-Looking for more examples? Check out our [Cookbook](https://github.com/Redocly/redocly-cli-cookbook).
+Looking for more examples? Check out our [Cookbook](./cookbook/README.md).
 
 ### API contract testing with Respect
 

package/THIRD_PARTY_NOTICES

@@ -649,13 +649,13 @@ Packages:
   @redocly/cli-otel@0.3.4 — Copyright 2025 Redocly Inc, all rights reserved.
   @redocly/config@0.22.0 — Copyright 2024 Redocly Inc.
   @redocly/config@0.52.0 — Copyright 2024 Redocly Inc.
-  @redocly/openapi-core@1.34.17
+  @redocly/openapi-core@1.34.18
   agent-base@7.1.4 — Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>
   ajv-formats@3.0.1 — Copyright (c) 2020 Evgeny Poberezkin
   ajv@8.20.0 — Copyright (c) 2015-2021 Evgeny Poberezkin
   ansi-styles@4.3.0
   balanced-match@1.0.2 — Copyright (c) 2013 Julian Gruber &lt;julian@juliangruber.com&gt;
-  brace-expansion@2.1.2 — Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>
+  brace-expansion@2.1.3 — Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>
   call-me-maybe@1.0.2 — Copyright (c) 2015 Eric McCarthy
   chalk@4.1.2
   classnames@2.5.1 — Copyright (c) 2018 Jed Watson
@@ -677,8 +677,8 @@ Packages:
   https-proxy-agent@7.0.6 — Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>
   js-levenshtein@1.1.6 — Copyright (c) 2017 Gustaf Andersson
   js-tokens@4.0.0 — Copyright (c) 2014, 2015, 2016, 2017, 2018 Simon Lydell
-  js-yaml@4.2.0 — Copyright (C) 2011-2015 by Vitaly Puzrin
-  js-yaml@5.2.1 — Copyright (C) 2011-2015 by Vitaly Puzrin
+  js-yaml@4.3.0 — Copyright (C) 2011-2015 by Vitaly Puzrin
+  js-yaml@5.2.2 — Copyright (C) 2011-2015 by Vitaly Puzrin
   json-pointer@0.6.2 — Copyright (c) 2016 Manuel Stofer
   json-schema-traverse@1.0.0 — Copyright (c) 2017 Evgeny Poberezkin
   jsonpointer@5.0.1 — Copyright (c) 2011-2015 Jan Lehnardt <jan@apache.org> & Marc Bachmann <https://github.com/marcbachmann>

package/lib/chunks/{ER45DAHG.js → 3CX2Z7JI.js}

@@ -2,7 +2,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   isPlainObject
-} from "./YK6T7IHG.js";
+} from "./Z2664VV5.js";
 
 // src/commands/drift/utils/files.ts
 import { open, readdir, stat } from "node:fs/promises";
@@ -121,11 +121,12 @@ var IGNORED_UNDOCUMENTED_HEADERS = /* @__PURE__ */ new Set([
   "upgrade-insecure-requests",
   "user-agent",
   "via",
-  "x-amzn-trace-id",
   "x-client-trace-id",
   "x-cloud-trace-context",
   "x-correlation-id",
   "x-http-method-override",
+  "x-hub-signature",
+  "x-hub-signature-256",
   "x-method-override",
   "x-real-ip",
   "x-request-id",
@@ -138,9 +139,12 @@ var IGNORED_UNDOCUMENTED_HEADER_PREFIXES = [
   "cf-",
   "sec-ch-",
   "sec-fetch-",
+  "x-amz-",
+  "x-amzn-",
   "x-b3-",
   "x-envoy-",
-  "x-forwarded-"
+  "x-forwarded-",
+  "x-github-"
 ];
 var SET_COOKIE_SEPARATOR = "\n";
 function splitSetCookieHeader(value) {

package/lib/chunks/{XDNYWH7V.js → 3UUTQVCJ.js}

@@ -3,7 +3,7 @@ const require = __createRequire(import.meta.url);
 import {
   AbortFlowError,
   exitWithError
-} from "./DT4UM7U4.js";
+} from "./T6UZU3XM.js";
 import {
   ConfigValidationError,
   HandledError,
@@ -27,7 +27,7 @@ import {
   red,
   stringifyYaml,
   yellow
-} from "./YK6T7IHG.js";
+} from "./Z2664VV5.js";
 
 // src/commands/lint.ts
 import { performance as performance3 } from "perf_hooks";

package/lib/chunks/{PFPGSTSG.js → 7F5O43EU.js}

@@ -2,7 +2,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   selectTrafficParser
-} from "./GBUMU6BX.js";
+} from "./P6UGG7F6.js";
 import {
   getPathWithoutTrailingSlash,
   isJsonMime,
@@ -12,14 +12,14 @@ import {
   normalizeFsPath,
   normalizeServerPrefix,
   resolvePathForServer
-} from "./ER45DAHG.js";
+} from "./3CX2Z7JI.js";
 import {
   OPENAPI3_METHOD_NAMES,
   Spinner
-} from "./LCWGF7G6.js";
+} from "./KPMZLKQG.js";
 import {
   exitWithError
-} from "./DT4UM7U4.js";
+} from "./T6UZU3XM.js";
 import {
   createConfig,
   isPlainObject,
@@ -28,7 +28,7 @@ import {
   parseYaml,
   pluralize,
   stringifyYaml
-} from "./YK6T7IHG.js";
+} from "./Z2664VV5.js";
 import "./Z2I5YXYN.js";
 import "./5ILQMFXK.js";
 

package/lib/chunks/{SZLWDHZK.js → 7IX44JLO.js}

@@ -2,13 +2,13 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   RedoclyOAuthClient
-} from "./Q3KTKRJH.js";
+} from "./ASYQPOQY.js";
 import "./Y6DTFCLS.js";
 import "./4FB5ZIPP.js";
-import "./Z5H4OEIW.js";
+import "./GFU5KGSW.js";
 import "./XB6C62FW.js";
 import "./UUU33DK3.js";
-import "./YK6T7IHG.js";
+import "./Z2664VV5.js";
 import "./Z2I5YXYN.js";
 import "./5ILQMFXK.js";
 export {

package/lib/chunks/{7H6CC6CT.js → 7MOL2QVN.js}

@@ -3,17 +3,17 @@ const require = __createRequire(import.meta.url);
 import {
   getExecutionTime,
   getFallbackApisOrExit
-} from "./XDNYWH7V.js";
+} from "./3UUTQVCJ.js";
 import {
   exitWithError
-} from "./DT4UM7U4.js";
+} from "./T6UZU3XM.js";
 import {
   require_dist
 } from "./4FB5ZIPP.js";
 import {
   redocStandaloneSri,
   redocVersion
-} from "./Z5H4OEIW.js";
+} from "./GFU5KGSW.js";
 import {
   require_json_pointer,
   require_openapi_sampler
@@ -25,7 +25,7 @@ import {
   require_fast_deep_equal,
   require_json_schema_traverse,
   require_pluralize
-} from "./YK6T7IHG.js";
+} from "./Z2664VV5.js";
 import "./Z2I5YXYN.js";
 import {
   __commonJS,
@@ -23126,6 +23126,8 @@ var require_brace_expansion = __commonJS({
     var escClose = "\0CLOSE" + Math.random() + "\0";
     var escComma = "\0COMMA" + Math.random() + "\0";
     var escPeriod = "\0PERIOD" + Math.random() + "\0";
+    var EXPANSION_MAX = 1e5;
+    var EXPANSION_MAX_LENGTH = 4e6;
     function numeric(str) {
       return parseInt(str, 10) == str ? parseInt(str, 10) : str.charCodeAt(0);
     }
@@ -23159,11 +23161,12 @@ var require_brace_expansion = __commonJS({
       if (!str)
         return [];
       options = options || {};
-      var max = options.max == null ? Infinity : options.max;
+      var max = options.max == null ? EXPANSION_MAX : options.max;
+      var maxLength = options.maxLength == null ? EXPANSION_MAX_LENGTH : options.maxLength;
       if (str.substr(0, 2) === "{}") {
         str = "\\{\\}" + str.substr(2);
       }
-      return expand(escapeBraces(str), max, true).map(unescapeBraces);
+      return expand(escapeBraces(str), max, maxLength, true).map(unescapeBraces);
     }
     function embrace(str) {
       return "{" + str + "}";
@@ -23177,19 +23180,86 @@ var require_brace_expansion = __commonJS({
     function gte(i, y) {
       return i >= y;
     }
-    function expand(str, max, isTop) {
-      var expansions = [];
+    function combine(acc, pre, values, max, maxLength, dropEmpties) {
+      var out = [];
+      var length = 0;
+      for (var a = 0; a < acc.length; a++) {
+        for (var v = 0; v < values.length; v++) {
+          if (out.length >= max) return out;
+          var expansion = acc[a] + pre + values[v];
+          if (dropEmpties && !expansion) continue;
+          if (length + expansion.length > maxLength) return out;
+          out.push(expansion);
+          length += expansion.length;
+        }
+      }
+      return out;
+    }
+    function expandSequence(body, isAlphaSequence, max) {
+      var n = body.split(/\.\./);
+      var N = [];
+      if (n[0] === void 0 || n[1] === void 0) {
+        return N;
+      }
+      var x = numeric(n[0]);
+      var y = numeric(n[1]);
+      var width = Math.max(n[0].length, n[1].length);
+      var incr = n.length === 3 && n[2] !== void 0 ? Math.max(Math.abs(numeric(n[2])), 1) : 1;
+      var test = lte;
+      var reverse = y < x;
+      if (reverse) {
+        incr *= -1;
+        test = gte;
+      }
+      var pad = n.some(isPadded);
+      for (var i = x; test(i, y) && N.length < max; i += incr) {
+        var c;
+        if (isAlphaSequence) {
+          c = String.fromCharCode(i);
+          if (c === "\\") {
+            c = "";
+          }
+        } else {
+          c = String(i);
+          if (pad) {
+            var need = width - c.length;
+            if (need > 0) {
+              var z = new Array(need + 1).join("0");
+              if (i < 0) {
+                c = "-" + z + c.slice(1);
+              } else {
+                c = z + c;
+              }
+            }
+          }
+        }
+        N.push(c);
+      }
+      return N;
+    }
+    function expand(str, max, maxLength, isTop) {
+      var acc = [""];
+      var dropEmpties = false;
+      var firstGroup = true;
       for (; ; ) {
         const m = balanced("{", "}", str);
-        if (!m) return [str];
+        if (!m) {
+          return combine(acc, str, [""], max, maxLength, dropEmpties);
+        }
         const pre = m.pre;
-        if (/\$$/.test(m.pre)) {
-          const post2 = m.post.length ? expand(m.post, max, false) : [""];
-          for (let k2 = 0; k2 < post2.length && k2 < max; k2++) {
-            const expansion2 = pre + "{" + m.body + "}" + post2[k2];
-            expansions.push(expansion2);
-          }
-          return expansions;
+        if (/\$$/.test(pre)) {
+          acc = combine(
+            acc,
+            pre + "{" + m.body + "}",
+            [""],
+            max,
+            maxLength,
+            dropEmpties && !m.post.length
+          );
+          firstGroup = false;
+          if (!m.post.length) break;
+          str = m.post;
+          continue;
         }
         var isNumericSequence = /^-?\d+\.\.-?\d+(?:\.\.-?\d+)?$/.test(m.body);
         var isAlphaSequence = /^[a-zA-Z]\.\.[a-zA-Z](?:\.\.-?\d+)?$/.test(m.body);
@@ -23201,73 +23271,50 @@ var require_brace_expansion = __commonJS({
             isTop = true;
             continue;
           }
-          return [str];
+          return combine(
+            acc,
+            pre + "{" + m.body + "}" + m.post,
+            [""],
+            max,
+            maxLength,
+            dropEmpties
+          );
         }
-        const post = m.post.length ? expand(m.post, max, false) : [""];
-        var n;
+        if (firstGroup) {
+          dropEmpties = isTop && !isSequence;
+          firstGroup = false;
+        }
+        var values;
         if (isSequence) {
-          n = m.body.split(/\.\./);
+          values = expandSequence(m.body, isAlphaSequence, max);
         } else {
-          n = parseCommaParts(m.body);
-          if (n.length === 1) {
-            n = expand(n[0], max, false).map(embrace);
+          var n = parseCommaParts(m.body);
+          if (n.length === 1 && n[0] !== void 0) {
+            n = expand(n[0], max, maxLength, false).map(embrace);
             if (n.length === 1) {
-              return post.map(function(p) {
-                return m.pre + n[0] + p;
-              });
-            }
-          }
-        }
-        var N;
-        if (isSequence) {
-          var x = numeric(n[0]);
-          var y = numeric(n[1]);
-          var width = Math.max(n[0].length, n[1].length);
-          var incr = n.length == 3 ? Math.max(Math.abs(numeric(n[2])), 1) : 1;
-          var test = lte;
-          var reverse = y < x;
-          if (reverse) {
-            incr *= -1;
-            test = gte;
-          }
-          var pad = n.some(isPadded);
-          N = [];
-          for (var i = x; test(i, y) && N.length < max; i += incr) {
-            var c;
-            if (isAlphaSequence) {
-              c = String.fromCharCode(i);
-              if (c === "\\")
-                c = "";
-            } else {
-              c = String(i);
-              if (pad) {
-                var need = width - c.length;
-                if (need > 0) {
-                  var z = new Array(need + 1).join("0");
-                  if (i < 0)
-                    c = "-" + z + c.slice(1);
-                  else
-                    c = z + c;
-                }
-              }
+              acc = combine(
+                acc,
+                pre + n[0],
+                [""],
+                max,
+                maxLength,
+                dropEmpties && !m.post.length
+              );
+              if (!m.post.length) break;
+              str = m.post;
+              continue;
             }
-            N.push(c);
           }
-        } else {
-          N = [];
+          values = [];
           for (var j = 0; j < n.length; j++) {
-            N.push.apply(N, expand(n[j], max, false));
+            values.push.apply(values, expand(n[j], max, maxLength, false));
           }
         }
-        for (var j = 0; j < N.length; j++) {
-          for (var k = 0; k < post.length && expansions.length < max; k++) {
-            var expansion = pre + N[j] + post[k];
-            if (!isTop || isSequence || expansion)
-              expansions.push(expansion);
-          }
-        }
-        return expansions;
+        acc = combine(acc, pre, values, max, maxLength, dropEmpties && !m.post.length);
+        if (!m.post.length) break;
+        str = m.post;
       }
+      return acc;
     }
   }
 });
@@ -24412,7 +24459,7 @@ var require_int3 = __commonJS({
             if (ch !== "0" && ch !== "1") return false;
             hasDigits = true;
           }
-          return hasDigits && Number.isFinite(parseYamlInteger(data));
+          return hasDigits && isFinite(parseYamlInteger(data));
         }
         if (ch === "x") {
           index++;
@@ -24420,7 +24467,7 @@ var require_int3 = __commonJS({
             if (!isHexCode(data.charCodeAt(index))) return false;
             hasDigits = true;
           }
-          return hasDigits && Number.isFinite(parseYamlInteger(data));
+          return hasDigits && isFinite(parseYamlInteger(data));
         }
         if (ch === "o") {
           index++;
@@ -24428,7 +24475,7 @@ var require_int3 = __commonJS({
             if (!isOctCode(data.charCodeAt(index))) return false;
             hasDigits = true;
           }
-          return hasDigits && Number.isFinite(parseYamlInteger(data));
+          return hasDigits && isFinite(parseYamlInteger(data));
         }
       }
       for (; index < max; index++) {
@@ -24438,7 +24485,7 @@ var require_int3 = __commonJS({
         hasDigits = true;
       }
       if (!hasDigits) return false;
-      return Number.isFinite(parseYamlInteger(data));
+      return isFinite(parseYamlInteger(data));
     }
     function parseYamlInteger(data) {
       let value = data;
@@ -24511,7 +24558,7 @@ var require_float3 = __commonJS({
       if (!YAML_FLOAT_PATTERN.test(data)) {
         return false;
       }
-      if (Number.isFinite(parseFloat(data, 10))) {
+      if (isFinite(parseFloat(data, 10))) {
         return true;
       }
       return YAML_FLOAT_SPECIAL_PATTERN.test(data);
@@ -25035,7 +25082,7 @@ var require_loader = __commonJS({
       this.json = options["json"] || false;
       this.listener = options["listener"] || null;
       this.maxDepth = typeof options["maxDepth"] === "number" ? options["maxDepth"] : 100;
-      this.maxMergeSeqLength = typeof options["maxMergeSeqLength"] === "number" ? options["maxMergeSeqLength"] : 20;
+      this.maxTotalMergeKeys = typeof options["maxTotalMergeKeys"] === "number" ? options["maxTotalMergeKeys"] : 1e4;
       this.implicitTypes = this.schema.compiledImplicit;
       this.typeMap = this.schema.compiledTypeMap;
       this.length = input.length;
@@ -25044,6 +25091,7 @@ var require_loader = __commonJS({
       this.lineStart = 0;
       this.lineIndent = 0;
       this.depth = 0;
+      this.totalMergeKeys = 0;
       this.firstTabInLine = -1;
       this.documents = [];
       this.anchorMapTransactions = [];
@@ -25203,6 +25251,9 @@ var require_loader = __commonJS({
       const sourceKeys = Object.keys(source);
       for (let index = 0, quantity = sourceKeys.length; index < quantity; index += 1) {
         const key2 = sourceKeys[index];
+        if (state.maxTotalMergeKeys !== -1 && ++state.totalMergeKeys > state.maxTotalMergeKeys) {
+          throwError(state, "merge keys exceeded maxTotalMergeKeys (" + state.maxTotalMergeKeys + ")");
+        }
         if (!_hasOwnProperty.call(destination, key2)) {
           setProperty(destination, key2, source[key2]);
           overridableKeys[key2] = true;
@@ -25230,15 +25281,8 @@ var require_loader = __commonJS({
       }
       if (keyTag === "tag:yaml.org,2002:merge") {
         if (Array.isArray(valueNode)) {
-          if (valueNode.length > state.maxMergeSeqLength) {
-            throwError(state, "merge sequence length exceeded maxMergeSeqLength (" + state.maxMergeSeqLength + ")");
-          }
-          const seen = /* @__PURE__ */ new Set();
           for (let index = 0, quantity = valueNode.length; index < quantity; index += 1) {
-            const src = valueNode[index];
-            if (seen.has(src)) continue;
-            seen.add(src);
-            mergeMappings(state, _result, src, overridableKeys);
+            mergeMappings(state, _result, valueNode[index], overridableKeys);
           }
         } else {
           mergeMappings(state, _result, valueNode, overridableKeys);
@@ -92334,7 +92378,7 @@ var handlerBuildCommand = async ({
     const api = await import_redoc2.default.loadAndBundleSpec(
       isAbsoluteUrl(pathToApi) ? pathToApi : resolve2(pathToApi)
     );
-    collectSpecData?.(api);
+    collectSpecData?.({ parsed: api });
     const pageHTML = await getPageHTML(api, pathToApi, { ...options, redocVersion }, argv.config);
     mkdirSync(dirname2(options.output), { recursive: true });
     writeFileSync(options.output, pageHTML);

package/lib/chunks/{VMHXZFTB.js → A3VFVVHD.js}

@@ -8,10 +8,10 @@ import {
   maskSecrets,
   parseRuntimeExpression,
   run
-} from "./6ABF7ZRJ.js";
+} from "./KRMBH6JF.js";
 import "./VXIQEZPR.js";
 import "./UUU33DK3.js";
-import "./YK6T7IHG.js";
+import "./Z2664VV5.js";
 import "./Z2I5YXYN.js";
 import "./5ILQMFXK.js";
 export {

package/lib/chunks/{Q3KTKRJH.js → ASYQPOQY.js}

@@ -8,7 +8,7 @@ import {
 } from "./4FB5ZIPP.js";
 import {
   version
-} from "./Z5H4OEIW.js";
+} from "./GFU5KGSW.js";
 import {
   require_undici
 } from "./XB6C62FW.js";
@@ -16,7 +16,7 @@ import {
   blue,
   green,
   logger
-} from "./YK6T7IHG.js";
+} from "./Z2664VV5.js";
 import {
   __toESM
 } from "./5ILQMFXK.js";

package/lib/chunks/{5YSNZVUA.js → BVP23YP7.js}

@@ -10,7 +10,7 @@ import {
 } from "./Y6DTFCLS.js";
 import {
   version
-} from "./Z5H4OEIW.js";
+} from "./GFU5KGSW.js";
 import {
   diag,
   esm_exports,

package/lib/chunks/{Z5H4OEIW.js → GFU5KGSW.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 // package.json
 var package_default = {
   name: "@redocly/cli",
-  version: "2.41.0",
+  version: "2.41.2",
   description: "",
   license: "MIT",
   bin: {
@@ -49,8 +49,8 @@ var package_default = {
     "@opentelemetry/sdk-trace-node": "2.8.0",
     "@opentelemetry/semantic-conventions": "1.41.1",
     "@redocly/cli-otel": "0.3.4",
-    "@redocly/openapi-core": "2.41.0",
-    "@redocly/respect-core": "2.41.0",
+    "@redocly/openapi-core": "2.41.2",
+    "@redocly/respect-core": "2.41.2",
     "@types/cookie": "0.6.0",
     "@types/har-format": "^1.2.16",
     "@types/react": "^17.0.0 || ^18.2.21 || ^19.2.16",

package/lib/chunks/{LCWGF7G6.js → KPMZLKQG.js}

@@ -2,7 +2,7 @@ import { createRequire as __createRequire } from 'node:module';
 const require = __createRequire(import.meta.url);
 import {
   logger
-} from "./YK6T7IHG.js";
+} from "./Z2664VV5.js";
 
 // src/commands/split/oas/constants.ts
 var OPENAPI3_METHOD_NAMES = [