diff --git a/packages/openapi-supertest/package.json b/packages/openapi-supertest/package.json
index 01a975ff..2776b07b 100644
--- a/packages/openapi-supertest/package.json
+++ b/packages/openapi-supertest/package.json
@@ -33,7 +33,7 @@
   },
   "repository": "github:MapColonies/infra-packages",
   "dependencies": {
-    "oas-normalize": "^17.0.0",
+    "oas-normalize": "^18.0.0",
     "ts-essentials": "^10.1.1"
   },
   "peerDependencies": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 69f60481..c4e4a091 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -9,6 +9,9 @@ catalogs:
     '@arethetypeswrong/cli':
       specifier: 0.18.5
       version: 0.18.5
+    '@microsoft/api-extractor':
+      specifier: ^7.55.2
+      version: 7.58.12
     '@opentelemetry/api':
       specifier: 1.9.1
       version: 1.9.1
@@ -640,8 +643,8 @@ importers:
         specifier: ^4.17.21
         version: 4.17.25
       oas-normalize:
-        specifier: ^17.0.0
-        version: 17.0.1
+        specifier: ^18.0.0
+        version: 18.0.2
       ts-essentials:
         specifier: ^10.1.1
         version: 10.2.1(typescript@5.9.3)
@@ -2480,8 +2483,8 @@ packages:
   '@readme/http-status-codes@7.2.0':
     resolution: {integrity: sha512-/dBh9qw3QhJYqlGwt2I+KUP/lQ6nytdCx3aq+GpMUhibLHF3O7fwoowNcTwlbnwtyJ+TJYTIIrp3oVUlRNx3fA==}
 
-  '@readme/openapi-parser@7.0.1':
-    resolution: {integrity: sha512-FW+qN1TGlCVKK4xE6pKCS6QdR0EBaC95LC2pnmY3+oVK0tDJ1iAIOmK1SYiDAayId7WInnYyemwBImpvmBV2xQ==}
+  '@readme/openapi-parser@9.0.0':
+    resolution: {integrity: sha512-GI86L4fGrvVq7Kzv4Qj4zMyCIeig5KIn65aq/YxcnHPEGSbF8fl8hWD96JL3KWotTp1dirZ6puopcS6ir9whDg==}
     engines: {node: '>=20'}
     peerDependencies:
       openapi-types: '>=7'
@@ -4816,6 +4819,10 @@ packages:
     resolution: {integrity: sha512-muutsYr+e2+d3rTgUGslq5rxbBlUy3cJ61IsHag2QNDQV+7zXWjkUpmALIajhrlLlrgRUiymj6U3zUr/TMK84Q==}
     hasBin: true
 
+  js-yaml@5.4.1:
+    resolution: {integrity: sha512-28R/k+NAjeuf7+CKlTxWZVExJGwVVLwY06DgEnOMz2gEpfNkDcD7QvyiVPT0xy0XXhU8vHsd4Ot42OOPdJG7dQ==}
+    hasBin: true
+
   jsesc@3.1.0:
     resolution: {integrity: sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==}
     engines: {node: '>=6'}
@@ -5167,8 +5174,8 @@ packages:
   oas-linter@3.2.2:
     resolution: {integrity: sha512-KEGjPDVoU5K6swgo9hJVA/qYGlwfbFx+Kg2QB/kd7rzV5N8N5Mg6PlsoCMohVnQmo+pzJap/F610qTodKzecGQ==}
 
-  oas-normalize@17.0.1:
-    resolution: {integrity: sha512-tiD8vH9rnNtMO3jHc/FMYVKGGCNzm+0zZvI7NBitIYwVf0g+nld3c72c39nkePYzA9mWR/Mk3gHJJouWfJoSfg==}
+  oas-normalize@18.0.2:
+    resolution: {integrity: sha512-rkHp95nGmhGrLZYCIgLrG+KJyAsYgz2udn+Dzfrwn+r0b36pDrDTUO7cJdRcmvEVR6xrFNkQvY6fL/LeoG/erQ==}
     engines: {node: '>=20'}
 
   oas-resolver@2.5.6:
@@ -5497,6 +5504,7 @@ packages:
   prom-client@15.1.3:
     resolution: {integrity: sha512-6ZiOBfCywsD4k1BN9IX0uZhF+tJkV8q8llP64G5Hajs4JOeVLPCwpPVcpXy3BwYiUGgyJzsJJQeOIv7+hDSq8g==}
     engines: {node: ^16 || ^18 || >=20}
+    deprecated: prom-client has been replaced by @prometheus-io/client
 
   prop-types@15.8.1:
     resolution: {integrity: sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg==}
@@ -8236,7 +8244,7 @@ snapshots:
 
   '@readme/http-status-codes@7.2.0': {}
 
-  '@readme/openapi-parser@7.0.1(openapi-types@12.1.3)':
+  '@readme/openapi-parser@9.0.0(openapi-types@12.1.3)':
     dependencies:
       '@apidevtools/json-schema-ref-parser': 15.5.2(@types/json-schema@7.0.15)
       '@readme/better-ajv-errors': 2.4.0(ajv@8.20.0)
@@ -10701,6 +10709,10 @@ snapshots:
     dependencies:
       argparse: 2.0.1
 
+  js-yaml@5.4.1:
+    dependencies:
+      argparse: 2.0.1
+
   jsesc@3.1.0: {}
 
   json-bigint@1.0.0:
@@ -11016,11 +11028,11 @@ snapshots:
       should: 13.2.3
       yaml: 1.10.3
 
-  oas-normalize@17.0.1:
+  oas-normalize@18.0.2:
     dependencies:
-      '@readme/openapi-parser': 7.0.1(openapi-types@12.1.3)
+      '@readme/openapi-parser': 9.0.0(openapi-types@12.1.3)
       '@readme/postman-to-openapi': 4.1.0
-      js-yaml: 4.3.0
+      js-yaml: 5.4.1
       openapi-types: 12.1.3
       swagger2openapi: 7.0.8
     transitivePeerDependencies: