Skip to content

[pull] main from fern-api:main#796

Merged
pull[bot] merged 10 commits into
code:mainfrom
fern-api:main
Jun 16, 2026
Merged

[pull] main from fern-api:main#796
pull[bot] merged 10 commits into
code:mainfrom
fern-api:main

Conversation

@pull

@pull pull Bot commented Jun 16, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

patrickthornton and others added 10 commits June 16, 2026 06:26
… parent (#16531)

* fix(openapi): lift discriminated-union properties inherited via shared $ref parent

`infer-discriminated-union-base-properties` previously dropped properties
that every variant inherited from a shared `allOf $ref` parent to keep
TypeScript's synthesized `_Base` from colliding with the real parent
interface (TS2320). The exclusion silently broke Go and C# unions, which
have no structural typing fallback — customers had to switch on the
variant pointer to reach common fields like `id`/`name`/`display_name`.

Lift these properties at the parser layer so all generators see them on
the union's `baseProperties`. The TypeScript generator suppresses any
that every variant already inherits via its IR `extends` chain, keeping
the TS output identical and avoiding the collision.

* fix(typescript): suppress inherited base props in serde layer too

`GeneratedUnionSchema` was using unfiltered `baseProperties` while
`GeneratedUnionImpl` already filtered out properties every variant
inherits via its `extends` chain. With shared-parent properties now
lifted by the OpenAPI parser, the schema layer would emit a `_Base`
serde schema with the same fields the variant's parent raw schema
already declares — TS2320 if optionality disagreed, redundant work
otherwise.

Expose the effective base properties on the `GeneratedUnion` interface
and have the schema generator delegate to it. Type layer and serde
layer now agree on what `_Base` contains.
* [Dependabot Alert #2085] Scaffold PR for tmp

* fix(deps): bump tmp to 0.2.7 to fix CVE-2026-49982 (GHSA-7c78-jf6q-g5cm)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
) (#16537)

* [Dependabot Alert #2093] Scaffold PR for tar

* fix(deps): bump tar to 7.5.16 to fix GHSA-vmf3-w455-68vh (CVE-2026-53655)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
* [Dependabot Alert #2092] Scaffold PR for vite

* fix(deps): bump vite to 7.3.5 to fix GHSA-v6wh-96g9-6wx3

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
* [Dependabot Alert #2086] Scaffold PR for Starlette

* fix(deps): bump starlette to 1.3.1 to fix CVE-2026-54282 (GHSA-jp82-jpqv-5vv3)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Co-authored-by: David Konigsberg <72822263+davidkonigsberg@users.noreply.github.com>
…16535)

* [Dependabot Alert #2095] Scaffold PR for @opentelemetry/core

* fix(deps): bump @opentelemetry/core to >=2.8.0 to fix CVE-2026-54285 (GHSA-8988-4f7v-96qf)

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Co-authored-by: David Konigsberg <72822263+davidkonigsberg@users.noreply.github.com>
* [Dependabot Alert #2088] Scaffold PR for ws

* fix(deps): bump ws to ^8.21.0 to fix CVE-2026-48779 (GHSA-96hv-2xvq-fx4p)

* remove excess override

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Co-authored-by: David Konigsberg <72822263+davidkonigsberg@users.noreply.github.com>
* [Dependabot Alert #2089] Scaffold PR for @babel/core

* fix(deps): bump @babel/core to ^7.29.6 to fix CVE-2026-49356 (GHSA-4x5r-pxfx-6jf8)

* fix(deps): regenerate lockfile without dedupe for minimal diff

* fix(deps): re-run pnpm install to fix specifier mismatch

* fix(deps): dedupe lockfile to consolidate duplicate @babel and @rollup packages

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
@pull pull Bot locked and limited conversation to collaborators Jun 16, 2026
@pull pull Bot added the ⤵️ pull label Jun 16, 2026
@pull pull Bot merged commit 679d222 into code:main Jun 16, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant