Skip to content

Bump dedoc/scramble from 0.13.39 to 0.13.44 in /backend - #1357

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/composer/backend/dedoc/scramble-0.13.44
Closed

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/composer/backend/dedoc/scramble-0.13.44

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps dedoc/scramble from 0.13.39 to 0.13.44.

Release notes

Sourced from dedoc/scramble's releases.

v0.13.44

What's Changed

New Contributors

Full Changelog: dedoc/scramble@0.13.43...v0.13.44

0.13.43

Tuple schemas no longer emit additionalItems. Homogeneous unions now serialize as OpenAPI 3.1 type arrays instead of anyOf.

What's Changed

🚨 Breaking changes 🚨

additionalItems existed in older JSON Schema drafts. OpenAPI 3.1 uses JSON Schema 2020-12, where that keyword is gone — extra items after prefixItems are controlled by items instead.

Scramble was emitting additionalItems: false on fixed-length array / tuple schemas (prefixItems plus minItems / maxItems). Validators such as Redocly rejected the document: Property additionalItems is not expected here.

Tuple length is already pinned with minItems / maxItems, so the extra keyword was both invalid and redundant. It is omitted rather than replaced with items: false.

The generated spec will no longer contain additionalItems. ArrayType::setAdditionalItems() is also gone. This is very unlikely to affect you unless a client or linter depended on that keyword, or you called the setter yourself.

Unions whose branches are only types (string|int, int|float|string, unconstrained array|string, …) now serialize as a type array instead of anyOf:

{ "type": ["string", "integer"] }

instead of

{ "anyOf": [{ "type": "string" }, { "type": "integer" }] }

anyOf is kept when a branch has extra keywords (enum, const, …). integer is dropped when number is present (JSON Schema: integer is a subset of number), so int|float becomes { "type": "number" }. Empty items: {} on unconstrained arrays is omitted so they can fold into the same form.

This is valid OpenAPI 3.1 and usually renders the same in the UI, but generated clients may change if they treated anyOf and type arrays differently.

Added

Unknown operands are treated as numeric (int|float) rather than unknown/string. + also documents array union ($a + [] → array). Impossible arithmetic (1 + []) is never. Concat of mixed values keeps enough of the template to guess download MIME from the extension.

Changes

... (truncated)

Commits
  • 6351072 Improve Boost integration (#1275)
  • 0bab958 Add Boost guide and troubleshooting skill (#1272)
  • 26d30bc Fix PhpDoc summary and description split for CRLF files (#1271)
  • 2226e66 Handle mixed reflection types and invalid arithmetic
  • 7bdc684 Unwrap collapsed unions with a single type
  • d1611d7 Normalize union schemas and simplify array types
  • b4c5784 Improve + operator
  • e9a8c24 Optimize homogeneous union schemas into type arrays (#1269)
  • f64b2ad Fix type refining (#1268)
  • ea7df42 Fix self binding
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [dedoc/scramble](https://github.com/dedoc/scramble) from 0.13.39 to 0.13.44.
- [Release notes](https://github.com/dedoc/scramble/releases)
- [Commits](dedoc/scramble@v0.13.39...v0.13.44)

---
updated-dependencies:
- dependency-name: dedoc/scramble
  dependency-version: 0.13.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Sep 21, 2026
@github-actions

Copy link
Copy Markdown
Contributor

✅ E2E · smoke

✅ Passed ❌ Failed ⚠️ Flaky ⏭️ Skipped ⏱️ Duration
27 0 0 1 1m 12s

View run

@daveearley

Copy link
Copy Markdown
Contributor

Closing because dedoc/scramble is pinned to 0.13.39 on purpose: newer versions rewrite the committed API reference, so we'll upgrade it by hand once the output is checked.

This PR was closed by AI, as part of checking open PRs against the latest release. If this is a mistake, please let us know here and we'll reopen it.

@daveearley daveearley closed this Oct 24, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 24, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@github-actions github-actions Bot locked and limited conversation to collaborators Oct 24, 2026
@dependabot
dependabot Bot deleted the dependabot/composer/backend/dedoc/scramble-0.13.44 branch October 24, 2026 00:54
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant