fix(deps): bump @workos/openapi-spec to drop tree-sitter chain

[gjtorikian]

Summary

• Bumps @workos/openapi-spec from ^0.14.0 to ^0.45.0. As of 0.45.0 the package no longer declares @workos/oagen as a runtime dependency (its single runtime import, toCamelCase, is now inlined upstream), so the CLI stops inheriting oagen's native tree-sitter toolchain.
• Resolves the three install failures reported in Unused @workos/oagen transitive dependency causes installation failures #202: oagen's node >= 24.10 engine requirement conflicting with the CLI's declared >= 22.11 support range, pnpm's blockExoticSubdeps rejecting the tree-sitter-kotlin GitHub tarball, and tree-sitter@0.21.1 failing to compile against Node 24 V8 headers on platforms without prebuilds (e.g. Linux ARM64).
• The lockfile drops the entire oagen/tree-sitter subtree (326 lines); pnpm why @workos/oagen and pnpm why tree-sitter both come back empty.
• No CLI code changes needed: the only consumer is require.resolve('@workos/openapi-spec/spec') in src/commands/api/catalog.ts, and the ./spec export path is unchanged in 0.45.0.

Fixes #202

[greptile-apps]

Greptile Summary

This PR bumps @workos/openapi-spec from ^0.14.0 to ^0.45.0 to eliminate the transitive native dependency chain (@workos/oagen → tree-sitter + language grammars) that caused install failures on Node 22, Linux ARM64, and in strict pnpm environments.

• Dependency removal: the lockfile drops @workos/oagen@0.23.0, all ten tree-sitter-* grammar packages, @redocly/openapi-core, node-addon-api, node-gyp-build, and related tooling (326 lines removed), leaving @workos/openapi-spec@0.45.0 with zero runtime dependencies.
• No runtime impact: the only CLI consumer — require.resolve('@workos/openapi-spec/spec') in catalog.ts — uses the ./spec export path that is unchanged in 0.45.0, and toCamelCase (the sole import from oagen) is now inlined in the upstream package.

Confidence Score: 5/5

Safe to merge — the change removes a problematic native dependency chain with no impact on CLI behaviour.

The bump drops the entire oagen/tree-sitter subtree that was causing install failures, and the only runtime consumer of the package (require.resolve('@workos/openapi-spec/spec') in catalog.ts) continues to work because the ./spec export path is preserved in 0.45.0. The lockfile integrity hash is present, the snapshot section correctly shows zero dependencies for the new version, and no CLI source files needed to change.

No files require special attention.

Important Files Changed

Filename	Overview
package.json	Single version specifier change for @workos/openapi-spec (^0.14.0 → ^0.45.0); no other dependency changes.
pnpm-lock.yaml	Lockfile faithfully reflects the version bump: removes the entire oagen/tree-sitter subtree, updates the spec snapshot to 0.45.0 with no deps, and marks graphql@16.14.2 as optional (it was only required through the removed redocly chain).

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    subgraph Before["Before (0.14.0)"]
        A["@workos/openapi-spec@0.14.0"] --> B["@workos/oagen@0.23.0"]
        B --> C["@redocly/openapi-core@2.37.0"]
        B --> D["tree-sitter@0.21.1"]
        D --> D1["node-addon-api"]
        D --> D2["node-gyp-build"]
        B --> E["tree-sitter-c-sharp"]
        B --> F["tree-sitter-kotlin (GitHub tarball)"]
        B --> G["tree-sitter-go / ruby / python / ..."]
        B --> H["typescript@6.0.3"]
    end

    subgraph After["After (0.45.0)"]
        X["@workos/openapi-spec@0.45.0 (no deps)"]
    end

    subgraph CLI
        Z["catalog.ts: require.resolve('@workos/openapi-spec/spec')"]
    end

    X --> Z

Loading

_{Reviews (1): Last reviewed commit: "fix(deps): bump @workos/openapi-spec to ..." | Re-trigger Greptile}