chore(deps): bump the everything-else group across 1 directory with 3 updates

[dependabot]

Bumps the everything-else group with 3 updates in the /redisinsight/api directory: class-validator, quicktype-core and esbuild.

Updates class-validator from 0.14.4 to 0.15.1

Release notes

Sourced from class-validator's releases.

v0.15.1

What's Changed

• chore: publish 0.15.0 for real by @​braaar in typestack/class-validator#2671
• chore: publish 0.15.1 by @​braaar in typestack/class-validator#2672

Full Changelog: typestack/class-validator@v0.15.0...v0.15.1

v0.15.0

What's Changed

• feat: add IsISO31661Numeric decorator for country codes by @​RobinvanderVliet in typestack/class-validator#2657
• feat: validateIf for validation options by @​aoi-umi in typestack/class-validator#1579
• feat: update UUID validation to support versions 1-8, nil, max, and all by @​PleBea in typestack/class-validator#2647
• chore: bump vulnerable dependencies by @​braaar in typestack/class-validator#2669
• feat: add isISO6391 decorator for language codes by @​RobinvanderVliet in typestack/class-validator#2626
• feat(IsIBAN)!: Add IsIBANOptions as argument for IsIBAN decorator by @​LiiaMenke in typestack/class-validator#2618
• fix small grammatical error in README.md by @​igorrocha in typestack/class-validator#2596
• chore: release 0.15.0 by @​braaar in typestack/class-validator#2670

New Contributors

• @​RobinvanderVliet made their first contribution in typestack/class-validator#2657
• @​aoi-umi made their first contribution in typestack/class-validator#1579
• @​PleBea made their first contribution in typestack/class-validator#2647
• @​LiiaMenke made their first contribution in typestack/class-validator#2618
• @​igorrocha made their first contribution in typestack/class-validator#2596

Full Changelog: typestack/class-validator@v0.14.4...v0.15.0

Changelog

Sourced from class-validator's changelog.

0.15.1 (2026-02-26)

BREAKING CHANGES

• Added options argument to IsIBAN validator (#2618), which breaks any existing usage of this decorator that pass an argument to the decorator, e.g. @IsIBAN({forbidUnknownValues: false})

Fixed

• Updated lockfile to patch vulnerabilities (#2669)
• Fixed a small grammatical error in the docs (#2596)

Added

• Added validateIf option to all validators, providing a lot more flexibility in using conditional validation (#1579)
• Added IsISO31661Numeric validator for country codes (#2657)
• Added IsISO6391 validator for language codes (#2626)
• Added more versions to IsUUID validator options. (#2647)

Commits

• 2e1a5c2 chore: publish 0.15.1 (#2672)
• 737d2a7 chore: publish 0.15.0 (#2671)
• 8bc5f96 chore: release 0.15.0 (#2670)
• dc41588 fix small grammatical error in README.md (#2596)
• 2c0ff53 feat(IsIBAN): Add IsIBANOptions as argument for IsIBAN decorator (#2618)
• e0eaa02 feat: add isISO6391 decorator for language codes (#2626)
• a8b2f6e chore: bump vulnerable dependencies (#2669)
• 35e589d feat: update UUID validation to support versions 1-8, nil, max, and all (#2647)
• 042fb57 feat: add validateIf to validation options (#1579)
• 4fcad7b feat: add IsISO31661Numeric decorator for country codes (#2657)
• See full diff in compare view

Updates quicktype-core from 23.0.176 to 23.3.25

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for quicktype-core since your current version.

Updates esbuild from 0.28.1 to 0.28.2

Release notes

Sourced from esbuild's releases.

v0.28.2

• Fix tree shaking bug due to TypeScript import alias (#4507)

  This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

  import Base from './dep.js';
  import Alias = Base.SomeType;

• Fix CSS minification bug involving & (#4497)

  This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

  /* Original code */
  .a .b {
    & .b:not(& .c) {
      color: red;
    }
  }
  /* Old output (with --minify) */
  .a .b{.b:not(& .c){color:red}}
  /* New output (with --minify) */
  .a .b{& .b:not(& .c){color:red}}

  This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

• Avoid overwriting input files without --allow-overwrite (#4484)

  For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

  This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

• Fix incorrect code generated when using top-level await (#4498)

  Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

• Fix a minification bug with lowered logical assignment operators (#4508)

  This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

  // Original code
  function foo() {
    let x
    bar(x ||= {})

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.2

• Fix tree shaking bug due to TypeScript import alias (#4507)

  This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

  import Base from './dep.js';
  import Alias = Base.SomeType;

• Fix CSS minification bug involving & (#4497)

  This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

  /* Original code */
  .a .b {
    & .b:not(& .c) {
      color: red;
    }
  }
  /* Old output (with --minify) */
  .a .b{.b:not(& .c){color:red}}
  /* New output (with --minify) */
  .a .b{& .b:not(& .c){color:red}}

  This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

• Avoid overwriting input files without --allow-overwrite (#4484)

  For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

  This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

• Fix incorrect code generated when using top-level await (#4498)

  Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

• Fix a minification bug with lowered logical assignment operators (#4508)

  This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

  // Original code
  function foo() {
    let x

... (truncated)

Commits

• 609683d publish 0.28.2 to npm
• 11b1fe4 add to release notes
• ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
• 04627b6 fix #4498: async TLA checks need a worklist
• 5c15177 disable gopls in the go folder
• fc2ee9b css: adjust parser to allow --foo: {...}
• 209db54 release notes for css nesting bugfix
• c625d31 fix #4497: preserve nested ampersands during minification (#4500)
• 34474e2 better isolation of current part in js parser
• 07f6e8c fix #4507: import assignment tree-shaking bug
• Additional commits viewable in compare view

---

Note

Medium Risk
class-validator 0.15.x can change validation behavior on API inputs; esbuild and quicktype-core are lower risk (build tooling and AI type generation).

Overview
Bumps three redisinsight/api dependencies in package.json and package-lock.json: class-validator 0.14.4 → 0.15.1, quicktype-core ~23.0.176 → ~23.3.25, and dev esbuild 0.28.1 → 0.28.2.

class-validator is a runtime dependency used for Nest request DTO validation; the jump to 0.15.x adds validators and stricter UUID handling, with a documented breaking change only for @IsIBAN when passed validation options. quicktype-core powers JSON-to-type generation in the AI query context utilities. esbuild is used only for the API minify/build scripts (esbuild.js), not request handling.

^{Reviewed by Cursor Bugbot for commit c984750. Bugbot is set up for automated code reviews on this repo. Configure here.}