Skip to content

Conversation

@subtleGradient
Copy link
Member

GitOrigin-RevId: c0eba1d9fad6b78c625ce4c192855bd63d87d58c

GitOrigin-RevId: c0eba1d9fad6b78c625ce4c192855bd63d87d58c
Copilot AI review requested due to automatic review settings December 16, 2025 23:33
@chatgpt-codex-connector
Copy link

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR represents an automated code import generated by Copybara, updating Speakeasy SDK generation configuration files for the OpenRouter TypeScript SDK. The changes synchronize the SDK configuration with upstream changes, updating version tags and adding linting configuration.

  • Updates the workflow lock file to reflect new version tags and code sample revisions
  • Introduces a lint configuration file to customize OpenAPI linting rules for the project

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
.speakeasy/workflow.lock Updates version tag from matt-fix-reasoning-and-types to subtree-sync-import-typescript-sdk and refreshes code samples revision digest
.speakeasy/lint.yaml Adds new lint configuration file that extends speakeasy-generation ruleset and disables the oas3-missing-example rule for the OpenRouter target

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

GitOrigin-RevId: ea69f116f192b69d15177330279affe214c1d552
@socket-security

This comment was marked as outdated.

@socket-security

This comment was marked as outdated.

OpenRouter Team and others added 3 commits January 9, 2026 16:15
GitOrigin-RevId: 0a99ae67ae45cc49166a123a70c5209fa4ede80b
GitOrigin-RevId: aae3911dcc666a818f9b58f3ca47a25de252c6da
@subtleGradient
Copy link
Member Author

Tracked: SDK-205

Fix: Update examples/nextjs-example/package-lock.json to use Next.js >= 15.5.7

@subtleGradient
Copy link
Member Author

Update on CVE GHSA-9qr9-h5gf-34mp:

The vulnerability has already been fixed in commit 9873004:

fix: upgrade Next.js to 15.5.9 to patch critical RCE vulnerability (GHSA-9qr9-h5gf-34mp)

Both main and dev branches now have Next.js 15.5.9 (patched version >= 15.5.7).

The Socket Security alert appears to be showing stale data. The CVE was resolved before this PR was created.

SDK-205 can be closed as resolved.

…pybara import

The Copybara import brought gen.lock referencing generation refs that
don't exist in this repo (they exist in the monorepo source). Speakeasy's
3-way merge failed on src/lib/config.ts.

Resolution:
1. Resolved config.ts conflict by keeping the current (hooks-enabled) version
2. Re-ran speakeasy run --skip-versioning to regenerate gen.lock with valid refs

The new generation ref (62917ff7-df36-438c-bde9-649eb4ad6258) has been
pushed to origin and gen.lock now tracks it correctly.
@subtleGradient
Copy link
Member Author

Closing stale PR (3+ weeks old, created 2025-12-16).

Why close vs fix?

  • PR is 3+ weeks old with failing run-speakeasy CI
  • Socket Security alert is a false positive (CVE GHSA-9qr9-h5gf-34mp already fixed in commit 9873004)
  • Fresh PR will have clean CI baseline
  • Cost of fixing Speakeasy merge conflicts exceeds cost of regeneration

Next steps:

  • Re-export from monorepo to dev branch
  • Create fresh dev→main PR
  • Fresh PR will merge cleanly with current state

See SDK-205 for CVE tracking (can be closed - already resolved).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants