diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index b8d0b0f2..3bc94178 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -13,11 +13,15 @@ on: workflow_dispatch: # Allow workflow to be triggered manually. +permissions: {} + jobs: detect-secrets: if: "!contains(github.event.head_commit.message, '[skip ci]')" name: detect-secrets runs-on: ubuntu-latest + permissions: + contents: read strategy: matrix: python-version: ['3.12'] @@ -49,6 +53,8 @@ jobs: name: build-test (node v${{ matrix.node-version }}) needs: detect-secrets runs-on: ubuntu-latest + permissions: + contents: read strategy: matrix: node-version: ['16', '18', '20', '22', '24'] @@ -96,6 +102,8 @@ jobs: name: semantic-release if: "github.ref_name == 'main' && github.event_name != 'pull_request'" runs-on: ubuntu-latest + permissions: + contents: read steps: - name: Checkout repository diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml index a3a6c574..72bf3401 100644 --- a/.github/workflows/docker.yaml +++ b/.github/workflows/docker.yaml @@ -12,6 +12,8 @@ on: workflow_dispatch: # Allow this workflow to be triggered manually +permissions: {} + jobs: deploy-image: # We want to trigger this job ONLY for a published release @@ -19,7 +21,9 @@ jobs: name: deploy-image if: "contains(github.ref_name, 'ibm-openapi-validator')" runs-on: ubuntu-latest - + permissions: + contents: read + steps: # Display some info about the build for debugging purposes. - name: Trigger info diff --git a/package-lock.json b/package-lock.json index db3506a0..29496dd4 100644 --- a/package-lock.json +++ b/package-lock.json @@ -2305,9 +2305,9 @@ } }, "node_modules/@stoplight/spectral-cli": { - "version": "6.16.3", - "resolved": "https://registry.npmjs.org/@stoplight/spectral-cli/-/spectral-cli-6.16.3.tgz", - "integrity": "sha512-corAOQ/WhGoPJOQ3Tcipyn64TgKYDkEhsDplS6vNSGys3kzi9+zzxiVOlbzk9mWuafovzoW+TpGCoNwIZvFf5w==", + "version": "6.17.0", + "resolved": "https://registry.npmjs.org/@stoplight/spectral-cli/-/spectral-cli-6.17.0.tgz", + "integrity": "sha512-9OTHNYqfF99hjHsh5aCjNHRZgocJBaHa6uaQTBUOsgAA19jaLaT8xB6/SBGC+GA7Wpzu4t9MMIOXPLj0ZbL5UA==", "license": "Apache-2.0", "dependencies": { "@scarf/scarf": "^1.4.0", @@ -2335,13 +2335,13 @@ "spectral": "dist/index.js" }, "engines": { - "node": "^16.20 || ^18.18 || >= 20.17" + "node": "^22.0 || >= 24.0" } }, "node_modules/@stoplight/spectral-core": { - "version": "1.23.1", - "resolved": "https://registry.npmjs.org/@stoplight/spectral-core/-/spectral-core-1.23.1.tgz", - "integrity": "sha512-VLC8OhpO/pMJKb6IHhurxJjXO1qB56Ng1unIb8b+hNxdw0+SEcASvmR+RpjfHYX/jv/DfSaA1x8QhFBJBmqBOQ==", + "version": "1.24.0", + "resolved": "https://registry.npmjs.org/@stoplight/spectral-core/-/spectral-core-1.24.0.tgz", + "integrity": "sha512-abKt++GFFaqwKiGTfPZ5O3nIv8s+1V7J5awCjWPBtCXn7ZKTEPzEF8tBYsM3ne+RMrQ8ORkHzKFu9QZhenmkPw==", "license": "Apache-2.0", "dependencies": { "@scarf/scarf": "^1.4.0", @@ -2445,9 +2445,9 @@ } }, "node_modules/@stoplight/spectral-formats": { - "version": "1.8.5", - "resolved": "https://registry.npmjs.org/@stoplight/spectral-formats/-/spectral-formats-1.8.5.tgz", - "integrity": "sha512-xaC0rCH0p7/bzNJsz+JgLSj+Cp6uwYGWpePQxdLkF2G6a8Zyp3OyS7umkGYNiimEwKrOjvCNNTFJpeuiENZSBA==", + "version": "1.9.0", + "resolved": "https://registry.npmjs.org/@stoplight/spectral-formats/-/spectral-formats-1.9.0.tgz", + "integrity": "sha512-OmHZpeBdlWbDxAI43HR08vyVXY2D++YHBx9AWMQ6S2DH8aWWCvk64BJOJk161XsHJQuy/vnC8tRBIIKwSQPAsA==", "license": "Apache-2.0", "dependencies": { "@scarf/scarf": "^1.4.0", @@ -2485,9 +2485,9 @@ } }, "node_modules/@stoplight/spectral-functions": { - "version": "1.10.5", - "resolved": "https://registry.npmjs.org/@stoplight/spectral-functions/-/spectral-functions-1.10.5.tgz", - "integrity": "sha512-vDCd0NJ93715bcUpZZ5vNHiyxd4cgHF6tuXsDiXOXKAByg+I1fR5/dMijEo6Ce1Lz95a+RZ22JKYhF1YuzVvuA==", + "version": "1.11.0", + "resolved": "https://registry.npmjs.org/@stoplight/spectral-functions/-/spectral-functions-1.11.0.tgz", + "integrity": "sha512-HFlFhI+q13GqG8pphY4nNGYq9+5L14dhR9xLqx+/H2/FmAouHTfNaqE4SygIhSmtMxfNDJ8G4qnjxiQRv1kPWA==", "license": "Apache-2.0", "dependencies": { "@scarf/scarf": "^1.4.0", @@ -2696,9 +2696,9 @@ } }, "node_modules/@stoplight/spectral-rulesets": { - "version": "1.22.7", - "resolved": "https://registry.npmjs.org/@stoplight/spectral-rulesets/-/spectral-rulesets-1.22.7.tgz", - "integrity": "sha512-cT1B6Ly21923lvr235lu7iIgmcnoCTJaN3ANOyTqr4D5GA/4p2k0+yhjhdfj/1ks/Os3kUzSFnFkzpWH7WszFA==", + "version": "1.23.0", + "resolved": "https://registry.npmjs.org/@stoplight/spectral-rulesets/-/spectral-rulesets-1.23.0.tgz", + "integrity": "sha512-svAajFVBpHScoAAjPcgf0dgC5afkQ+psvjjH/NYBDq/U0QLrn2QvmfRVJiqO0UetMed3Aiu87BvXyFGQA9j54Q==", "license": "Apache-2.0", "dependencies": { "@asyncapi/specs": "6.11.1", @@ -7558,9 +7558,9 @@ } }, "node_modules/jsonpath-plus": { - "version": "10.4.0", - "resolved": "https://registry.npmjs.org/jsonpath-plus/-/jsonpath-plus-10.4.0.tgz", - "integrity": "sha512-T92WWatJXmhBbKsgH/0hl+jxjdXrifi5IKeMY02DWggRxX0UElcbVzPlmgLTbvsPeW1PasQ6xE2Q75stkhGbsA==", + "version": "10.3.0", + "resolved": "https://registry.npmjs.org/jsonpath-plus/-/jsonpath-plus-10.3.0.tgz", + "integrity": "sha512-8TNmfeTCk2Le33A3vRRwtuworG/L5RrgMvdjhKZxvyShO+mBu2fP50OWUjRLNtvw344DdDarFh9buFAZs5ujeA==", "license": "MIT", "dependencies": { "@jsep-plugin/assignment": "^1.3.0", @@ -13908,13 +13908,13 @@ }, "packages/ruleset": { "name": "@ibm-cloud/openapi-ruleset", - "version": "1.33.14", + "version": "1.33.15", "license": "Apache-2.0", "dependencies": { - "@ibm-cloud/openapi-ruleset-utilities": "1.9.3", - "@stoplight/spectral-formats": "1.8.5", - "@stoplight/spectral-functions": "1.10.5", - "@stoplight/spectral-rulesets": "1.22.7", + "@ibm-cloud/openapi-ruleset-utilities": "1.9.4", + "@stoplight/spectral-formats": "1.9.0", + "@stoplight/spectral-functions": "1.11.0", + "@stoplight/spectral-rulesets": "1.23.0", "chalk": "4.1.2", "inflected": "2.1.0", "jsonschema": "1.5.0", @@ -13925,7 +13925,7 @@ "validator": "13.15.35" }, "devDependencies": { - "@stoplight/spectral-core": "1.23.1", + "@stoplight/spectral-core": "1.24.0", "jest": "29.7.0" }, "engines": { @@ -13970,10 +13970,10 @@ }, "packages/utilities": { "name": "@ibm-cloud/openapi-ruleset-utilities", - "version": "1.9.3", + "version": "1.9.4", "license": "Apache-2.0", "devDependencies": { - "@stoplight/spectral-core": "1.23.1", + "@stoplight/spectral-core": "1.24.0", "jest": "29.7.0", "typescript": "5.9.3" }, @@ -13983,13 +13983,13 @@ }, "packages/validator": { "name": "ibm-openapi-validator", - "version": "1.38.3", + "version": "1.38.4", "license": "Apache-2.0", "dependencies": { - "@ibm-cloud/openapi-ruleset": "1.33.14", - "@ibm-cloud/openapi-ruleset-utilities": "1.9.3", - "@stoplight/spectral-cli": "6.16.3", - "@stoplight/spectral-core": "1.23.1", + "@ibm-cloud/openapi-ruleset": "1.33.15", + "@ibm-cloud/openapi-ruleset-utilities": "1.9.4", + "@stoplight/spectral-cli": "6.17.0", + "@stoplight/spectral-core": "1.24.0", "@stoplight/spectral-parsers": "1.0.5", "@stoplight/spectral-ref-resolver": "1.0.5", "ajv": "8.20.0", diff --git a/packages/ruleset/package.json b/packages/ruleset/package.json index 3fea9f62..cdcd8f07 100644 --- a/packages/ruleset/package.json +++ b/packages/ruleset/package.json @@ -22,9 +22,9 @@ }, "dependencies": { "@ibm-cloud/openapi-ruleset-utilities": "1.9.4", - "@stoplight/spectral-formats": "1.8.5", - "@stoplight/spectral-functions": "1.10.5", - "@stoplight/spectral-rulesets": "1.22.7", + "@stoplight/spectral-formats": "1.9.0", + "@stoplight/spectral-functions": "1.11.0", + "@stoplight/spectral-rulesets": "1.23.0", "chalk": "4.1.2", "inflected": "2.1.0", "jsonschema": "1.5.0", @@ -35,7 +35,7 @@ "validator": "13.15.35" }, "devDependencies": { - "@stoplight/spectral-core": "1.23.1", + "@stoplight/spectral-core": "1.24.0", "jest": "29.7.0" }, "engines": { diff --git a/packages/utilities/package.json b/packages/utilities/package.json index f079d711..4bb88de5 100644 --- a/packages/utilities/package.json +++ b/packages/utilities/package.json @@ -22,7 +22,7 @@ "pkg": "echo no executables to build in this package" }, "devDependencies": { - "@stoplight/spectral-core": "1.23.1", + "@stoplight/spectral-core": "1.24.0", "jest": "29.7.0", "typescript": "5.9.3" }, diff --git a/packages/validator/package.json b/packages/validator/package.json index 8e6164ad..0c2a6b96 100644 --- a/packages/validator/package.json +++ b/packages/validator/package.json @@ -25,8 +25,8 @@ "dependencies": { "@ibm-cloud/openapi-ruleset": "1.33.15", "@ibm-cloud/openapi-ruleset-utilities": "1.9.4", - "@stoplight/spectral-cli": "6.16.3", - "@stoplight/spectral-core": "1.23.1", + "@stoplight/spectral-cli": "6.17.0", + "@stoplight/spectral-core": "1.24.0", "@stoplight/spectral-parsers": "1.0.5", "@stoplight/spectral-ref-resolver": "1.0.5", "ajv": "8.20.0",