[dependency]: Bump the npm-dependencies group across 1 directory with 3 updates

[dependabot]

Bumps the npm-dependencies group with 3 updates in the /openapi directory: @redocly/cli, markdown-link-check and openapi-to-postmanv2.

Updates @redocly/cli from 2.47.0 to 2.51.2

Release notes

Sourced from @​redocly/cli's releases.

@​redocly/cli@​2.51.2

Patch Changes

• Updated fast-uri to the 3.1.7 version to resolve CVE-2026-75931, CVE-2026-75975, CVE-2026-75899, and CVE-2026-76172.
• Fixed drift and coverage failing to match a path template whose segment mixes literal text with parameters, such as /instances/{worldId}:{instanceId}.
• Fixed an issue where Redocly config resolution failed when plugins used ESM syntax.
• Updated @​redocly/openapi-core to v2.51.2.

@​redocly/cli@​2.51.1

Patch Changes

• Fixed an issue where generate-arazzo produced a malformed remote description URL in sourceDescriptions (https:// collapsed to https:/) when --output-file was provided.
• Fixed an issue where $faker.string.email() used without options generated addresses at the undefined.com domain.
• Updated @​redocly/respect-core to v2.51.1.
• Updated @faker-js/faker to the 10.6.0 version to resolve the high severity advisory GHSA-qxc2-j82w-r537.

@​redocly/cli@​2.51.0

Minor Changes

• Enhanced the generate-arazzo command to print a ready-to-run respect command after generation, including an --input placeholder for every workflow input.
• Added --with-ai, --ai-provider, --ai-model, --ai-concurrency, and --max-workflows options to the generate-arazzo command. --with-ai uses a local AI CLI (claude, codex, or cursor) and OpenAPI descriptions to redesign the generated one-workflow-per-operation skeleton into multi-step workflows. The AI designs at most --max-workflows workflows (default 10), and the generated file is marked as AI-inferred. For descriptions that don't fit a single prompt, the AI first selects scenarios from a compact operation index, then it designs each workflow separately.

Patch Changes

• Fixed an issue where respect and the x-security-scheme-required-values rule incorrectly rejected x-security HTTP schemes written with non-lowercase casing (such as Basic, Bearer, or Digest). RFC 7235 scheme names are case-insensitive.
• Updated @​redocly/openapi-core to v2.51.0.
• Updated @​redocly/respect-core to v2.51.0.

@​redocly/cli@​2.50.0

Minor Changes

• Added a new schema assertion for configurable rules. The assertion validates a property value against a JSON Schema.

Patch Changes

• Updated @​redocly/openapi-core to v2.50.0.

@​redocly/cli@​2.49.1

Patch Changes

• Fixed an issue where rule incorrectly reported a duplicate parameter when two or more $refs pointed to the same path item.
• Updated @​redocly/openapi-core to v2.49.1.

@​redocly/cli@​2.49.0

Minor Changes

... (truncated)

Commits

• 8938c89 chore: 🔖 release new versions (#3085)
• 57c491d fix: esm plugin resolution (#3091)
• 51f80aa fix(drift): match path segments that mix literal text with parameters (#2994)
• faee249 fix: update fast-uri to 3.1.7 to resolve advisories (#3084)
• 90787c1 chore: 🔖 release new versions (#3077)
• 4bfbf55 fix: update @​faker-js/faker to resolve vulnerability (#3075)
• 9514d13 fix: generate-arazzo mangling a remote description URL (#3076)
• 2566393 chore: 🔖 release new versions (#3073)
• 1645ad2 feat: add --with-ai options for generate-arazzo command (#3052)
• e200d9d fix(cli): report production usage data only for released builds (#3065)
• Additional commits viewable in compare view

Updates markdown-link-check from 3.14.2 to 3.15.0

Release notes

Sourced from markdown-link-check's releases.

v3.15.0

What's Changed

• Improve code block removal by @​vismam in tcort/markdown-link-check#559
• update dependencies

New Contributors

• @​vismam made their first contribution in tcort/markdown-link-check#559

Full Changelog: tcort/markdown-link-check@v3.14.2...v3.15.0

Changelog

Sourced from markdown-link-check's changelog.

Version 3.15.0

• Improve code block removal by @​vismam
• update dependencies

Commits

• 275c27c 3.15.0
• 04416b8 chore(release.yml): update node to v24
• 841ebf3 Merge pull request #559 from vismam/improve-code-block-removal
• c604140 Merge pull request #590 from tcort/dependabot/github_actions/actions/setup-no...
• b142a4d chore(package): update dependencies
• 5b72197 chore(github): remove dependabot.yml
• 27fc029 Merge pull request #591 from MikeMcC399/update/ci-node
• 3a1d1e1 ci: add Node.js 26 to test workflow
• 57770a3 chore(deps): bump actions/setup-node from 6 to 7
• 1dce945 Merge pull request #589 from tcort/dependabot/npm_and_yarn/dependencies-4c6d9...
• Additional commits viewable in compare view

Updates openapi-to-postmanv2 from 6.1.0 to 6.3.3

Changelog

Sourced from openapi-to-postmanv2's changelog.

[v6.3.3] - 2026-08-11

[v6.3.2] - 2026-07-31

Fixed

• Upgraded lodash and js-yaml to patch security advisories (SECINV-136)

[v6.3.1] - 2026-07-23

[v6.3.0] - 2026-07-07

[v6.2.0] - 2026-06-29

Commits

• 92cd21e Merge pull request #972 from postmanlabs/release/v6.3.3
• adc84f8 Prepare release v6.3.3
• efe045a Merge pull request #971 from postmanlabs/feature/fix-non-stringified-env
• a905fa4 Preserve bare Postman variables in JSON request/response bodies during sync
• fec5eab Merge pull request #969 from postmanlabs/fix/npm-publish-oidc-develop
• 242ef8d ci: self-contained OIDC npm publish (public repo cannot use private reusable ...
• 1334cce Merge pull request #968 from postmanlabs/fix/npm-publish-oidc
• 09469cb ci: self-contained OIDC npm publish (public repo cannot use private reusable ...
• dc26169 Merge pull request #967 from postmanlabs/release/v6.3.2
• 92ce7c7 Merge pull request #966 from postmanlabs/release/v6.3.2
• Additional commits viewable in compare view