chore: update OpenAPI to dfab495170fe

[ant-release-bot]

Updates cf to openapi@dfab495170fee6a8af2746ed4d624db8f9fe688a.

• pins OpenAPI revision dfab495170fee6a8af2746ed4d624db8f9fe688a
• regenerates the committed command surface with the pinned Forge package

This PR is maintained automatically by the Update OpenAPI workflow.

[pkg-pr-new]

npm i https://pkg.pr.new/cf@335

commit: e52f1df

[ask-bonk]

Review: 1 findings.

Posted 1 inline finding.

github run

[github-actions]

cf --help startup

	mean	stddev	min	max
PR	270.9 ms	4.0 ms	264.7 ms	282.0 ms
base	273.4 ms	4.5 ms	266.4 ms	281.5 ms

Δ (PR vs base): ↓ -2.6 ms (-0.9%)

Measured with hyperfine on ubuntu-latest (3 warmup runs, 20 timed runs). CI numbers carry ±a few ms of runner jitter; treat small deltas as noise.

[ask-bonk]

LGTM

github run

[clanky-the-clanker]

💬 Approved with comments — A routine automated OpenAPI regeneration with no correctness or security problems. One WARNING: the changeset should name the removed cf intel attack-surface-report issues commands. One INFO: the email-auth root is now visible.

Findings: 1 warning · 1 info

_{The decision is advisory: this comment never approves, blocks or requests changes on the pull request.}

🔧 Fix with your agent

Paste the following into your coding agent to investigate and fix these issues.

Fix the following code review issues found in pull request #335.

Before making changes, review each issue and present a brief summary table:
- For each finding, state whether you agree, disagree, or need clarification
- If you disagree (e.g., the fix would require disproportionate changes
  for minimal ROI, or the finding is factually incorrect), explain why
- If you need to clarify something before deciding, ask those questions
- Then share your plan for which issues to tackle and in what order

## WARNING (1)

### [Release] The changeset does not mention the removal of the `cf intel attack-surface-report issues` command group (`list`, `class`, `severity`, `type`, `dismiss`). Users upgrading will lose these commands without notice.
- **File:** .changeset/update-openapi-dfab495170fe.md:5

## INFO (1)

### [Code Quality] `email-auth` root changes from `hideCommand: true` to `false`, so it now appears in public help and completions with the placeholder describe string `email-auth`. This comes from the spec; confirm it is intended upstream.
- **File:** packages/cli/src/commands/_generated/index.ts:445

---

🚀 Release: ⚠️ 1 warning

The changeset does not mention that existing commands were removed.

Recommendation: 📝 Minor Comments

• [WARNING] The changeset does not mention the removal of the cf intel attack-surface-report issues command group (list, class, severity, type, dismiss). Users upgrading will lose these commands without notice. (.changeset/update-openapi-dfab495170fe.md:5)

View full review

Risk: Low

• Command removal is not in the release note. .changeset/update-openapi-dfab495170fe.md only says the generated command surface was updated. This release removes the cf intel attack-surface-report issues group and its list, class, severity, type and dismiss subcommands. Anyone scripting against those commands will find them gone after upgrading. The repository's changeset guidance asks for pre-1.0 behaviour changes to be called out, so name the removed commands. Because this changeset is written by the update workflow, a lasting fix would be to have scripts/update-openapi.ts list removed commands automatically.

---

📋 Code Quality: 💬 1 info

The regeneration looks consistent. One informational note: the email-auth root is now public.

Recommendation: 💬 Optional Nits

• [INFO] email-auth root changes from hideCommand: true to false, so it now appears in public help and completions with the placeholder describe string email-auth. This comes from the spec; confirm it is intended upstream. (packages/cli/src/commands/_generated/index.ts:445)

View full review

This pull request regenerates the command surface for OpenAPI dfab495170fe. The _generated/ changes (commands, _meta JSON, the e2e runner) agree with each other.

• email-auth root is now visible. At packages/cli/src/commands/_generated/index.ts:445, hideCommand changes from true to false. cf email-auth will now show up in top-level help and in completions. Its describe string is just email-auth, because the spec gives it no summary, so the help line is not very useful. This comes from the spec, so if it is unintended the fix belongs upstream in Forge/OpenAPI, not in this repository.

The operation modules under _operations/intel/attack-surface-report/issues/ are unchanged by this pull request and stay in the tree after their commands are removed. That matches existing behaviour: about 97 other _operations modules also have no matching command module, so the generator emits operation literals separately from the command tree. It does not suggest a stale regeneration.

---

✅ All other checks passed

🔒 Security: ✅ LGTM

No security concerns in the regenerated command surface.

---

📖 AGENTS.md: ✅ LGTM

This OpenAPI regeneration does not need an AGENTS.md update.

---

⚡ Performance: ✅ LGTM

Generated-code changes only. Nothing here affects performance.

---

📝 Documentation: ✅ LGTM

No documentation changes are needed for this regeneration.

---

_{Reviewed commit: e52f1df7}

[ask-bonk]

No new concerns since the last review

github run

[ask-bonk]

LGTM

github run