chore(deps): update dependency @redocly/cli to v2.51.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@redocly/cli	2.43.3 → 2.51.2

---

Release Notes

Redocly/redocly-cli (@​redocly/cli)

v2.51.2

Compare Source

Patch Changes

• Updated fast-uri to the 3.1.7 version to resolve CVE-2026-75931, CVE-2026-75975, CVE-2026-75899, and CVE-2026-76172.
• Fixed drift and coverage failing to match a path template whose segment mixes literal text with parameters, such as /instances/{worldId}:{instanceId}.
• Fixed an issue where Redocly config resolution failed when plugins used ESM syntax.
• Updated @​redocly/openapi-core to v2.51.2.

v2.51.1

Compare Source

Patch Changes

• Fixed an issue where generate-arazzo produced a malformed remote description URL in sourceDescriptions (https:// collapsed to https:/) when --output-file was provided.
• Fixed an issue where $faker.string.email() used without options generated addresses at the undefined.com domain.
• Updated @​redocly/respect-core to v2.51.1.
• Updated @faker-js/faker to the 10.6.0 version to resolve the high severity advisory GHSA-qxc2-j82w-r537.

v2.51.0

Compare Source

Minor Changes

• Enhanced the generate-arazzo command to print a ready-to-run respect command after generation, including an --input placeholder for every workflow input.
• Added --with-ai, --ai-provider, --ai-model, --ai-concurrency, and --max-workflows options to the generate-arazzo command.
  --with-ai uses a local AI CLI (claude, codex, or cursor) and OpenAPI descriptions to redesign the generated one-workflow-per-operation skeleton into multi-step workflows.
  The AI designs at most --max-workflows workflows (default 10), and the generated file is marked as AI-inferred.
  For descriptions that don't fit a single prompt, the AI first selects scenarios from a compact operation index, then it designs each workflow separately.

Patch Changes

• Fixed an issue where respect and the x-security-scheme-required-values rule incorrectly rejected x-security HTTP schemes written with non-lowercase casing (such as Basic, Bearer, or Digest).
  RFC 7235 scheme names are case-insensitive.
• Updated @​redocly/openapi-core to v2.51.0.
• Updated @​redocly/respect-core to v2.51.0.

v2.50.0

Compare Source

Minor Changes

• Added a new schema assertion for configurable rules.
  The assertion validates a property value against a JSON Schema.

Patch Changes

• Updated @​redocly/openapi-core to v2.50.0.

v2.49.1

Compare Source

Patch Changes

• Fixed an issue where rule incorrectly reported a duplicate parameter when two or more $refs pointed to the same path item.
• Updated @​redocly/openapi-core to v2.49.1.

v2.49.0

Compare Source

Minor Changes

• Added the no-illogical-composition-keywords rule.

  Note: the rule is set to warn in the recommended ruleset and to error in recommended-strict. Existing API descriptions may report new problems.

Patch Changes

• Fixed an issue where telemetry silently failed to send when npm was not available.
• Updated @​redocly/openapi-core to v2.49.0.

v2.48.0

Compare Source

Minor Changes

• Added agent-friendly client generation: python, go, php, and cli generators beside the TypeScript client, each self-documenting with --docs, configurable per generator, and available as source in your own repository through eject-generator.

Patch Changes

• Fixed an issue where the bundle command didn't resolve $refs inside an AsyncAPI 3 Multi Format Schema Object.
• Fixed an issue where respect --har-output recorded an empty postData for every request.
  Request bodies are written to the HAR.
  Captures replayed through drift can have their request bodies validated instead of silently passing.
• Updated @​redocly/client-generator to v0.4.0.
• Updated @​redocly/openapi-core to v2.48.0.

v2.47.0

Compare Source

Minor Changes

• Added a Vendor Extensions metric to the stats command that reports how many distinct x- extensions a description file uses and how often each one occurs.

Patch Changes

• Fixed the stats command reporting wrong parameter count for AsyncAPI descriptions.
• Updated @​redocly/openapi-core to v2.47.0.

v2.46.2

Compare Source

Patch Changes

• Updated @​redocly/openapi-core to v2.46.2.

v2.46.1

Compare Source

Patch Changes

• Updated @redocly/ajv to ^8.18.3.
• Updated @​redocly/openapi-core to v2.46.1.
• Updated @​redocly/respect-core to v2.46.1.

v2.46.0

Compare Source

Minor Changes

• Added the spec-ref-siblings rule that reports properties placed next to a $ref which the specification does not allow.

Patch Changes

• Updated @​redocly/openapi-core to v2.46.0.

v2.45.0

Compare Source

Minor Changes

• Fixed the bundle command losing schema keywords (such as title, properties, or required) written next to a $ref when the referenced schemas started with their own $ref.

Patch Changes

• Updated @​redocly/openapi-core to v2.45.0.

v2.44.2

Compare Source

Patch Changes

• Changed the severity of the security-defined rule for AsyncAPI 2.x and 3.x in the recommended ruleset from error to warn.
  AsyncAPI descriptions with undefined or unresolved security no longer fail linting by default.
• Updated @​redocly/openapi-core to v2.44.2.

v2.44.1

Compare Source

Patch Changes

• Updated undici to the 6.28.0 version.
• Fixed an issue where the operation-4xx-problem-details-rfc7807 rule incorrectly reported the type and title properties inherited through allOf as missing.
• Updated @​redocly/openapi-core to v2.44.1.

v2.44.0

Compare Source

Minor Changes

• Added the no-duplicated-enum-values rule that requires all values in an enum to be unique.
  The rule is enabled at the warn level in the recommended ruleset.

  Note: linting output may include new warnings for API descriptions that contain duplicated enum values.

• Added the no-unsafe-markdown rule that disallows potentially executable content in description fields.
  The rule is enabled at the warn level in the recommended ruleset.

  Note: linting output may include new warnings for description fields that contain potentially executable content.

Patch Changes

• Updated @​redocly/client-generator to v0.3.0.
• Updated @​redocly/openapi-core to v2.44.0.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Vercel Preview

✅ Deployment is ready.

• Preview: https://waline-server-ci-deploy-test-3hyxft0bk-austin-lees-projects.vercel.app
• PR: chore(deps): update dependency @redocly/cli to v2.51.2 #3806
• Commit: 20aefff
• Workflow: https://github.com/walinejs/waline/actions/runs/31841278611