Thanks for reporting! We'll take a look at this.

Same here.

node: v21.2.0
npm: 10.2.4
yarn: 1.22.19

To reproduce.

FROM node:alpine3.18
ENV REDOCLY_TELEMETRY off
ENV NODE_OPTIONS --trace-deprecation
RUN npm install -g [email protected]
RUN npm install -g @redocly/cli
WORKDIR /api
COPY spec.yaml /api
RUN redocly lint spec.yaml

The issue comes from AJV:

┬ @redocly/[email protected] -> ./packages/core
└─┬ @redocly/[email protected]
  └─┬ [email protected]
    └── [email protected]

We need to update our fork to the upstream version I think.

See garycourt/uri-js#95

Update: problem also exists in Node 22 (current version)

The issue also comes up from outdated tr46 package.

My workaround in package.json

{
  "overrides": {
    "@redocly/cli": {
      "uri-js": "npm:uri-js-replace",
      "whatwg-url": "^14.0.0"
    }
  }
}

It seems that updating project dependencies (ajv, node-fetch) should fix the problem

@tatomyr / @lornajane
This issue should be fixed in @redocly/ajv "version": "8.11.2",
But it will take effect with the next version of CLI release.

The native punycode is still required inside the outdated version [email protected]:

https://github.com/jsdom/tr46/blob/0.0.3/index.js#L3

npm ls tr46

@project/[email protected]
`-- @redocly/[email protected]
  `-- [email protected]
    `-- [email protected]
      `-- [email protected]

It's still reproducible. Reopening the issue.

The uri-js package has been replaced by uri-js-replace in recent versions of @redocly/cli dependencies, but the issue persist due to [email protected]

Can we increase the priority of this (not because it causes any functional issue but because of pure aesthetics)?

DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead.
(Use `node --trace-deprecation ...` to show where the warning was created)

@adamaltman sure. @DmitryAnansky was about to pick it up the next week.

Given that node-fetch (that requires outdated whatwg-url package) is a polyfill for native fetch which is available in newer node versions,
I'd use it only when native fetch is not available.