apiaryio / gavel.js

Validator of HTTP messages (JavaScript implementation)
MIT License
97 stars 22 forks source link

fix(deps): bump ajv from 6.12.6 to 7.2.4 #572

Closed dependabot-preview[bot] closed 3 years ago

dependabot-preview[bot] commented 3 years ago

Bumps ajv from 6.12.6 to 7.2.4.

Release notes

Sourced from ajv's releases.

v7.2.4

Fix #1515: correctly initialize evaluated properties.

v7.2.3

Remove docs from npm package

v7.2.2

Docs correction Simplified JSONSchemaType (@erikbrinkman Fix #1493 - incorrect reporting of missing required property with option ownProperties: true Fix #1501 - JTD not working correctly with many properties in the schema

v7.2.1

Add tests and fix parsers compiled with ajv.compileParser from JTD schemas:

  • fail on invalid JSON:
    • trailing comma in arrays/objects
    • invalid JSON numbers
    • control characters in strings
  • fix parsing of u-escaped characters
  • do not fail on duplicate object keys (consistent with JSON.parse)

Compiled parsers are now:

  • consistent with JSON.parse in case of invalid JSON
  • only parse data that is valid for JTD schema

It is a breaking change for compiled parsers compared with 7.2.0 that was released earlier pn the same day.

v7.2.0

strictRequired option (off by default) - to log or fail if properties used in JSON Schema "required" are not defined in "properties" (@PBug90, #1403)

Compiled parsers (as fast as JSON.parse on valid JSON, but replace validation and fail much faster on invalid JSON) and serializers (10x+ faster than JSON.stringify) from JSON Type Definition schemas (#1454) - see examples in javascript and typescript

Please note: there are fixes to compiled parsers in 7.2.1

The website migrated to VuePress and documentation is restructured to make navigating Ajv documentation and learning easier - this is still work in progress, but already some improvement on the information structure. Any feedback/corrections would be very much appreciated!

Improved TypeScript support for JSONSchemaType:

  • JTDSchemaType utility type to convert your data type into the type of JTD schema, to simplify its writing and to make sure it is consistent with your data type, with type inference support for ajv methods (@erikbrinkman, #1446, #1456, #1457, #1475) - see example here
  • Alternatively, you can use JTDDataType utility type to convert your JTD schema type into the type of data (@erikbrinkman, #1458) - see this example

Other improvements by @Fdawgs (#1466), @t7yang (#1472, #1473), @koba04 (#1460)

v7.1.1

Support readonly arrays with JSONSchemaType (@LinusU, #1447)

v7.1.0

Support for JSON Type Definition RFC 8927 - a simple schema language provided as an alternative to JSON Schema.

See these docs:

... (truncated)

Commits
  • d658548 7.2.4
  • 6014412 fix: correctly initialize evaluated properties with nested anyOf (etc.), clos...
  • 46d91d7 Merge pull request #1511 from radekmie/patch-1
  • c0b2476 Updated options docs link.
  • 1b07663 7.2.3
  • 43f448c remove docs from npm package
  • 678f243 7.2.2
  • 4f83021 fix incorrect missing property reporting with ownProperties option, closes #1493
  • 3ae14a3 fix incorrect code for additional properties when there are "many" properties...
  • 2ada8d6 Merge pull request #1499 from ajv-validator/format-vue
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in the `.dependabot/config.yml` file in this repo: - Update frequency - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)
dependabot-preview[bot] commented 3 years ago

Superseded by #574.