Skip to content

Bump dedoc/scramble from 0.13.39 to 0.13.44 in /backend - #1357

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/composer/backend/dedoc/scramble-0.13.44
Open

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/composer/backend/dedoc/scramble-0.13.44

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps dedoc/scramble from 0.13.39 to 0.13.44.

Release notes

Sourced from dedoc/scramble's releases.

v0.13.44

What's Changed

New Contributors

Full Changelog: dedoc/scramble@0.13.43...v0.13.44

0.13.43

Tuple schemas no longer emit additionalItems. Homogeneous unions now serialize as OpenAPI 3.1 type arrays instead of anyOf.

What's Changed

🚨 Breaking changes 🚨

additionalItems existed in older JSON Schema drafts. OpenAPI 3.1 uses JSON Schema 2020-12, where that keyword is gone — extra items after prefixItems are controlled by items instead.

Scramble was emitting additionalItems: false on fixed-length array / tuple schemas (prefixItems plus minItems / maxItems). Validators such as Redocly rejected the document: Property additionalItems is not expected here.

Tuple length is already pinned with minItems / maxItems, so the extra keyword was both invalid and redundant. It is omitted rather than replaced with items: false.

The generated spec will no longer contain additionalItems. ArrayType::setAdditionalItems() is also gone. This is very unlikely to affect you unless a client or linter depended on that keyword, or you called the setter yourself.

Unions whose branches are only types (string|int, int|float|string, unconstrained array|string, …) now serialize as a type array instead of anyOf:

{ "type": ["string", "integer"] }

instead of

{ "anyOf": [{ "type": "string" }, { "type": "integer" }] }

anyOf is kept when a branch has extra keywords (enum, const, …). integer is dropped when number is present (JSON Schema: integer is a subset of number), so int|float becomes { "type": "number" }. Empty items: {} on unconstrained arrays is omitted so they can fold into the same form.

This is valid OpenAPI 3.1 and usually renders the same in the UI, but generated clients may change if they treated anyOf and type arrays differently.

Added

Unknown operands are treated as numeric (int|float) rather than unknown/string. + also documents array union ($a + [] → array). Impossible arithmetic (1 + []) is never. Concat of mixed values keeps enough of the template to guess download MIME from the extension.

Changes

... (truncated)

Commits
  • 6351072 Improve Boost integration (#1275)
  • 0bab958 Add Boost guide and troubleshooting skill (#1272)
  • 26d30bc Fix PhpDoc summary and description split for CRLF files (#1271)
  • 2226e66 Handle mixed reflection types and invalid arithmetic
  • 7bdc684 Unwrap collapsed unions with a single type
  • d1611d7 Normalize union schemas and simplify array types
  • b4c5784 Improve + operator
  • e9a8c24 Optimize homogeneous union schemas into type arrays (#1269)
  • f64b2ad Fix type refining (#1268)
  • ea7df42 Fix self binding
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [dedoc/scramble](https://github.com/dedoc/scramble) from 0.13.39 to 0.13.44.
- [Release notes](https://github.com/dedoc/scramble/releases)
- [Commits](dedoc/scramble@v0.13.39...v0.13.44)

---
updated-dependencies:
- dependency-name: dedoc/scramble
  dependency-version: 0.13.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Sep 21, 2026
@github-actions

Copy link
Copy Markdown
Contributor

✅ E2E · smoke

✅ Passed ❌ Failed ⚠️ Flaky ⏭️ Skipped ⏱️ Duration
27 0 0 1 1m 12s

View run

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants