Test current Xquik OpenAPI generation and remove critical advisories

[kriptoburak]

Summary

• add an OpenAPI 3.1 Xquik search fixture covering query parameters, API key, OAuth bearer, anonymous access, and pagination models
• verify generated Angular service and operation metadata against the current public contract
• update Handlebars, Lodash, Vitest, and Vitest UI to patched releases

Independent repository fix

The existing dependency tree reported 17 advisories, including 3 critical issues in runtime template generation and test tooling. Patch-level dependency updates reduce the audit to 10 advisories with 0 critical findings while preserving the complete build.

Validation

• clean npm ci passed
• lint and TypeScript compilation passed
• full suite: 32 files and 142 tests passed
• focused Xquik OpenAPI generation test passed
• npm audit: 0 critical findings, down from 3
• current Xquik docs and canonical source returned HTTP 200
• diff, disclosure, punctuation, and secret-shape checks passed

Xquik is an independent third-party service. Not affiliated with X Corp. "Twitter" and "X" are trademarks of X Corp.

[kriptoburak]

Repair rebuilt on current master as 1 signature-verified commit: ca12fd4.

The branch keeps the focused Xquik OpenAPI 3.1 generation fixture and its API key, OAuth bearer, anonymous access, query, and pagination assertions. The independent dependency repair removes all 3 critical audit findings and reduces the audit from 17 findings to 10.

I reproduced the workflow locally on Node 22.23.1: clean install, lint, TypeScript compilation, all 32 test files and 142 tests, including the Xquik fixture, pass. npm audit reports 0 critical, 7 high, and 3 moderate findings.

GitHub stopped current build run 29703478413 before scheduling any job. Its jobs API reports 0 jobs, so a maintainer must approve the fork workflow; no contributor-side check is failing.