Bump the npm_and_yarn group across 1 directory with 2 updates

[dependabot]

Bumps the npm_and_yarn group with 2 updates in the / directory: @toon-format/toon and @hey-api/openapi-ts.

Updates @toon-format/toon from 0.8.0 to 2.3.1

Release notes

Sourced from @​toon-format/toon's releases.

v2.3.1

   🐞 Bug Fixes

• Harden encode and decode against prototype pollution  -  by @​ckorhonen in toon-format/toon#316 (94a2b)
• decode:
  • Slice key-value rest at key token end offset  -  by @​johannschopplich (70230)
  • Treat quoted spans as opaque in line classification  -  by @​johannschopplich (9024a)

    View changes on GitHub

v2.3.0

   🚀 Features

• decode: Strict-mode error coverage for §6/§9.1/§14  -  by @​johannschopplich (a13dc)
• docs: Add YAML input to Playground with tests  -  by @​swetasanghi2004-prog in toon-format/toon#303 (90a04)
• encode: Emit canonical empty-array form key: []  -  by @​johannschopplich (e6d97)

   🐞 Bug Fixes

• decode:
  • Support \uXXXX escape per §7.1  -  by @​johannschopplich (17820)
  • Reject whitespace gap in array header per §6  -  by @​johannschopplich (d5149)

    View changes on GitHub

v2.2.0

   🚀 Features

• Throw ToonDecodeError on error  -  by @​johannschopplich (1181b)
• cli: Render decode error with line context, source, and caret  -  by @​johannschopplich (3d99b)

   🐞 Bug Fixes

• Remove deprecated bare list item decoder logic  -  by @​johannschopplich (4852a)
• Reject negative numbers with leading zeros  -  by @​johannschopplich (19719)
• Preserve empty-string keys in array headers across encode/decode  -  by @​johannschopplich in toon-format/toon#281 (c6ab0)
• decode: Reject array headers with trailing content between bracket and colon  -  by @​johannschopplich (6f699)

   🏎 Performance

• Remove tsx usage  -  by @​johannschopplich (9bb97)

    View changes on GitHub

v2.1.0

   🚀 Features

• Add replacer function for encoding transformations and filtering  -  by @​johannschopplich in toon-format/toon#209 (2c519)
• toJSON method support for custom serialization  -  by @​ViliamKopecky in toon-format/toon#237 (a4538)

... (truncated)

Commits

• 352a5b0 chore: release v2.3.1
• e200397 chore: revert v2.3.1 version bump and quote build filter glob
• bb9a09a chore: remove pnpm shamefully hoisting
• 2013a7e chore: release v2.3.1
• 9024af9 fix(decode): treat quoted spans as opaque in line classification
• 27b65c2 chore: upgrade dependencies
• 94a2b75 fix: harden encode and decode against prototype pollution (#316)
• 09a7b38 test: cover malformed array length marker error context
• 7023012 fix(decode): slice key-value rest at key token end offset
• a19a117 ci: update GitHub Actions to latest versions
• Additional commits viewable in compare view

Updates @hey-api/openapi-ts from 0.85.2 to 0.97.3

Release notes

Sourced from @​hey-api/openapi-ts's releases.

@​hey-api/openapi-ts@​0.95.0

Minor Changes

• plugin(valibot): remove request data schema (#3671) (96f60ad) by @​mrlubos

Validator request schemas

Valibot plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:

export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "valibot",
    },
    {
      name: "valibot",
      requests: {
        shouldExtract: true,
      },
    },
  ],
};

• internal: remove plugin.getSymbol() function (#3671) (96f60ad) by @​mrlubos

Removed plugin.getSymbol() function

This function has been removed. You can use plugin.querySymbol() instead. It accepts the same arguments and returns the same result.

• plugin(zod): remove request data schema (#3671) (96f60ad) by @​mrlubos

Validator request schemas

Zod plugin no longer exports composite request Data schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with shouldExtract:

export default {
  input: "hey-api/backend", // sign up at app.heyapi.dev
  output: "src/client",
  plugins: [
    // ...other plugins
    {
      name: "sdk",
      validator: "zod",
</tr></table> 

... (truncated)

Changelog

Sourced from @​hey-api/openapi-ts's changelog.

0.97.3

Patch Changes

• plugin(@​hey-api/client-axios): fix: correct return type in SSE (#3919) (a19b3a4) by @​kitlangton

• plugin(@​tanstack/preact-query): add getQueryData option (#3827) (1aa4785) by @​inas-sirhan

• plugin(@​hey-api/client-ofetch): fix: correct return type in SSE (#3919) (a19b3a4) by @​kitlangton

• plugin(@​tanstack/svelte-query): add getQueryData option (#3827) (1aa4785) by @​inas-sirhan

• plugin(@​tanstack/angular-query-experimental): add getQueryData option (#3827) (1aa4785) by @​inas-sirhan

• plugin(@​tanstack/react-query): add getQueryData option (#3827) (1aa4785) by @​inas-sirhan

• plugin(@​hey-api/client-fetch): fix: correct return type in SSE (#3919) (a19b3a4) by @​kitlangton

• plugin(@​tanstack/react-query): add useGetQueryData option (#3827) (1aa4785) by @​inas-sirhan

• plugin(@​hey-api/client-ky): fix: correct return type in SSE (#3919) (a19b3a4) by @​kitlangton

• plugin(@​tanstack/solid-query): add getQueryData option (#3827) (1aa4785) by @​inas-sirhan

• plugin(@​hey-api/client-next): fix: correct return type in SSE (#3919) (a19b3a4) by @​kitlangton

• plugin(@​tanstack/preact-query): add useGetQueryData option (#3827) (1aa4785) by @​inas-sirhan

• plugin(@​hey-api/client-angular): fix: correct return type in SSE (#3919) (58962a0) by @​kitlangton

• plugin(@​hey-api/transformers): add support for Temporal API via temporal-polyfill in dates (#3916) (bfa457a) by @​OptoCloud

• plugin(@​tanstack/vue-query): add getQueryData option (#3827) (1aa4785) by @​inas-sirhan

• plugin(zod): fix: avoid invalid .extend() on z.record() when a discriminated union member is an empty object (#3915) (8fa9f3a) by @​pullfrog

Updated Dependencies:

• @​hey-api/shared@​0.4.5
• @​hey-api/codegen-core@​0.8.2

0.97.2

Patch Changes

• plugin(zod): use enums from TypeScript if available (#3884) (abc8ceb) by @​mrlubos

• plugin(@​hey-api/client-next): fix: preserve query auth when when there are no other query parameters (#3853) (a6ee7eb) by @​copilot-swe-agent

• plugin(@​hey-api/sdk): support valibot as response transformer (#3847) (6770f78) by @​SukkaW

... (truncated)

Commits

• d833f73 ci: release
• 4987bc3 docs: add changesets
• 30498ce Merge branch 'main' of https://github.com/hey-api/openapi-ts into feat/tansta...
• 9be7e7f chore: one more try
• 4c5916d chore: one more try
• 83b4464 chore: one more try
• 597e151 Merge branch 'main' into pullfrog/3914-zod-discriminated-union-empty-object
• 462c2e9 Merge branch 'main' into feat/transformers-temporal
• 3367e64 Merge branch 'main' into fix/sse-iterator-treturn-miswiring
• e6d4416 refactor: valibot plugin
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​hey-api/openapi-ts since your current version.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​toon-format/​toon@​0.8.0 ⏵ 2.3.1	+1	+16	+1	-2
	@​hey-api/​openapi-ts@​0.85.2 ⏵ 0.97.3	+3	+2	+1	-1

View full report