Skip to content

Realm, Redoc, Revel, and Reef changelog

This page lists the earlier releases of Reunite and the AI assistant web component, and the releases of the Realm, Redoc, Revel, and Reef packages. For new releases and the RSS feed, see the changelog.

Next release

Try the "next" release candidate or wait until it is promoted to the latest version at the beginning of each month

Latest release

Realm
0.139.0
latest
2026-10-22

Features

  • Added CSV rendering for request and response examples with a CSV media type.

  • Added support for the encoding object of multipart/form-data bodies in OpenAPI code samples and Try It.

  • Added the Copy MCP server URL page action and reordered the default MCP page actions to Connect to Claude, Connect to VS Code, then Connect to Cursor.

  • Added the ejectable layouts/CustomContexts.tsx component that allows to wrap every page of a project in custom React context providers.

  • Added Grok setup instructions to the MCP server page.

  • Added an Open in Grok page action, enabled by default.

  • Added the showMissingTranslationNotice locale option that displays a notice on pages that have no translation.

  • Added the deprecated badges to the Try it console to mark deprecated operations and security schemes and to match the badges on the API reference page.

  • Added a tooltip to the No schema status of GraphQL requests in Replay and the Try it console that explains why the schema did not load. For example, the server is unreachable, requires authentication, or has introspection disabled. The Failed to load schema notification displays the same reason.

  • Added a schema status (No schema, Loading schema..., Schema loaded) to the Query editor header of GraphQL requests in Replay and the Try it console. Schema notifications appear only after Fetch schema or Load schema file.

  • Added a resize handle between the name and value columns of the parameter tables in the Try it console. Readers can widen either column to read long parameter names or values.

  • Added a visibility Markdoc tag that targets content at humans or at AI agents.

Fixes

  • Improved access control to better protect customer resources.

  • Fixed the additional properties label in API docs, which looked like a required property named "name".

  • Fixed an issue where Copy for LLM, Open in Claude, and Open in ChatGPT included default credentials and server values stored in the API description.

  • Fixed an issue in API docs where the title and close button of the security, AsyncAPI server, and GraphQL required scopes dialogs scrolled out of view, and the dialogs did not fit in short browser windows.

  • Fixed an issue in API docs dialogs where the Tab key moved focus out of the dialog or skipped links that appeared after the dialog opened.

  • Fixed an issue in OpenAPI docs where request and response samples and schemas for a discriminator displayed placeholder values or fields from other options instead of the selected option.

  • Fixed an issue where GraphQL docs showed argument names in the operation overview list with a capital first letter instead of the case defined in the schema.

  • Fixed the Expand all and Collapse all buttons on GraphQL pages so they respect fields expanded or collapsed manually.

  • Fixed performance issues with the Expand all and Collapse all controls on GraphQL pages with many fields.

  • Improved page load times on pages that don't use GraphQL.

  • Fixed an issue in OpenAPI docs where the samples panel displayed a variant dropdown that had no effect on schemas with an example and a nested oneOf or anyOf.

  • Fixed an issue where Markdoc tags in API descriptions ignored their renderForLlms output in the Markdown for LLMs and AI search of API docs pages, and appeared as raw tag source instead.

  • Fixed an issue in API docs where links to sections of the API description didn't scroll to the section on projects with a path prefix.

  • Fixed an issue where API docs and the json-example Markdoc tag ignored keywords next to a schema $ref, such as example or examples, in samples for OpenAPI 3.1 and later. API docs display the first value of a schema examples list as the field example.

  • Fixed an issue where the sanitize option was not applied to parameter and schema property descriptions in API docs.

  • Fixed an issue in API docs where the example selected in the request samples and in Try it got out of sync.

  • Fixed an issue where webhooks in API docs displayed a server switcher with URLs that combined an API server with the webhook name.

  • Fixed an issue in AsyncAPI docs where the Payload panel displayed examples from all channel messages on initial page load.

  • Fixed an issue where developer onboarding routes didn't respect path prefix.

  • Fixed an issue where the sentiment, rating, mood, and scale feedback forms didn't display the Submit button for anonymous users when comment.hide was set to true and no reasons were configured.

  • Fixed an issue where hovering anywhere in a numbered-list item replaced its number or icon with a link icon.

  • Fixed an issue where custom Markdoc tags in GraphQL descriptions ignored their renderForLlms output in AI search and llms.txt.

  • Fixed an issue in GraphQL docs where Markdown and HTML in descriptions displayed as raw text in the field and argument lists.

  • Fixed an issue where Markdown images (![]()) with a relative path were broken on localized pages when the locale folder did not contain the image. Markdown images fall back to the the default-locale file, like other localized content. Images in the locale folder still take priority.

  • Updated @redocly/openapi-core to version 2.63.0.

  • Fixed an issue in OpenAPI docs where llms.txt showed the API description from the metadata configuration two times: as the API description and again in the metadata list.

  • Fixed an issue in API docs where the .md routes and llms.txt left out Markdoc tags that resolved data at build time, such as json-schema and the OpenAPI sample tags, from the API description and operation descriptions.

  • Fixed an issue where page content jumped to the side while long pages were loading.

  • Fixed an issue where MCP clients, such as Raycast, failed to sign in to the authenticated Docs MCP server with the redirect_uri is not registered for this client error.

  • Fixed an issue where the sign-in to the authenticated Docs MCP server failed with Invalid MCP callback or invalid_grant.

  • Improved how quickly the mobile navigation menu button responds to taps on slower phones.

  • Updated @redocly/openapi-core to version 2.66.0.

  • Reduced the page actions button to 24px in Markdown pages and API docs, and moved it below the title on mobile devices, so long titles use the full width of the screen.

  • Fixed an issue in Markdown pages and API docs where the Copy button label in page actions was highlighted when users selected the page title.

  • Updated @redocly/openapi-core to version 2.64.0.

  • Improved page load by not loading the API reference code on pages that do not show API docs.

  • Fixed an issue where the mock server rejected valid query parameter, cookie, and form body values that contained URL-encoded characters.

  • Fixed an issue where screen readers announced the close button without a name in Try it console.

  • Fixed an issue in Try it console where pressing Space on the focused close button did not close the console.

  • Fixed an issue where Replay's Close all tabs action closed open requests and discarded user-entered values without prompting for confirmation.

  • Improved the readability of JSON in the Try it console: keys, string values, numbers, and true, false, and null values have distinct colors.

  • Fixed an issue in the Try it console where the OpenId Connect URL field stayed empty for openIdConnect security schemes instead of displaying the URL from the API description.

    Fixed a misleading message in the Try it console for mutualTLS security schemes that suggested adding an Authorization header. Attaching client certificates is not supported: request are sent without them.

  • Fixed an issue where the replay-openapi embed started loading about two seconds after the page and moved the content below it when it appeared.

  • Fixed an issue in the Try it console where request body validation reported required readOnly properties as missing.

  • Fixed an issue where Reunite project analytics displayed the number of result categories instead of the number of results for each search query.

  • Fixed an issue where a wildcard redirect to a file in the static folder returned a 404 error when the file name contained uppercase characters.

  • Fixed OIDC sign-in failures after an identity provider rotated its signing key.

  • Fixed an issue where the sidebar highlight and the page URL stayed on the previous section when users scrolled a long distance in one step on Markdown pages and in API reference docs.

  • Fixed an issue in the Try it console where switching to an operation without its own security lost the document-level security. As a result, requests were sent without credentials.

  • Fixed an issue in the Try it console in OpenAPI docs where the first request left out parameters with an empty example value ('', [], or null) and query parameters with allowEmptyValue: true.

  • Fixed an issue in the Try it console that caused QUERY and custom HTTP methods to reach the server as POST. The console displays an error for TRACE, CONNECT, and TRACK requests, which browsers block.

  • Fixed an issue in the Try it console in OpenAPI docs where a search for an operation by its path returned no results.

  • Fixed security vulnerability CVE-2026-93687 by removing the braces dependency.

  • Fixed API reference builds failing with the next version of Realm.

  • Fixed an issue where the Try it console opened empty in OpenAPI docs rendered with the standalone script or RedocStandalone. The issue occurred when the API description kept path items in separate files.

Reunite
v2026-10-21.3
latest
2026-10-21

Fixes

  • Fixed redocly push and other API key requests failing with 403 Missing required project permissions for RBAC keys assigned to teams synced from an identity provider. Restored support for assigning API keys to synced teams in Access > API keys.

  • Updated @redocly/cli and @redocly/openapi-core to version 2.66.0.

  • Updated @redocly/openapi-core to version 2.66.0.

  • Fixed organization settings in Reunite so that each save changes only its own settings. Saving the default project role no longer fails when SSO is required and the identity provider was removed.

  • Improved scrollbars in Reunite so they stay hidden until a sidebar, panel, table, or modal is scrolled, which reduces visual noise.

  • Fixed duplicate success and error notifications when saving organization settings in Reunite.

Previous releases

Realm
0.138.2
2026-10-21

Fixes

  • Improved access control to better protect customer resources.

Reunite
v2026-10-21.1
2026-10-21

Fixes

  • Fixed an issue in Reunite where committers were linked to viewer and billing members by email or connected Git account. Committers link only to members and owners.

Reunite
v2026-10-20.4
2026-10-20

Features

  • Updated the Starter project template in Reunite to use the Redocly Cafe API instead of the Museum API.

Fixes

  • Fixed an issue in Reunite where a project that keeps its default domain next to a custom domain showed outdated pages on the default domain after a publish.

  • Fixed an issue in Reunite where a live production build did not show the Published tag and the Visit button on the deployment page.

Reunite
v2026-10-20.1
2026-10-20

Fixes

  • Fixed build duration display in Reunite deployments to show hours, display 0s for very short builds, and remain accurate when a build reports its final status more than once.

  • Improved Reunite page load times by reducing the initial download size by more than half.

  • Fixed an issue in Reunite where an organization page showed "Page not found" when the user had no access or the server failed; it shows the access denied or server error page with a request ID instead.

Reunite
v2026-10-19.2
2026-10-19

Fixes

  • Fixed images and other binary files not being restored in the Reunite editor for branches whose name contains /.

  • Fixed the Access group in the Reunite sidebar staying collapsed when the OAuth2 clients page was opened from a direct link.

  • Fixed sidebar groups in Reunite to follow the pages available to the user. Maintainers see the Settings group when the AI assistant settings are available to them, and groups with no available pages, such as Reports on a plan without project analytics, are hidden instead of opening empty.

Reunite
v2026-10-16.3
2026-10-16

Fixes

  • The Replay tab in the Reunite editor now opens a new request by default instead of an empty screen.

Reunite
v2026-10-16.2
2026-10-16

Features

  • Added email notifications for Git credential owners who have enabled them when Reunite can no longer use their credentials, helping them reconnect and restore builds, content syncs, and pull request updates.

  • Added an email notification and a Failed tag in the Reunite remote content list that warn when Reunite turns off auto-sync for a remote after five failed updates in a row.

Fixes

  • Fixed an issue in Reunite where auto-sync for a remote turned off again after one failed update when a user turned it back on.

  • Fixed an issue in Reunite where the What's new announcement opened on top of the dialog to create a project. The announcement shows on the next page instead.

  • Fixed spacing around the "No deployments" message on the Reunite Deployments page.

  • Fixed avatar colors in Reunite so each user has a consistent color across pull request activity and the editor. Existing avatar colors changed once.

Reunite
v2026-10-15.6
2026-10-15

Features

  • Updated Reunite sign-in; users must sign in again once after the update.

  • Added name and avatar editing in Reunite account settings for people who sign in through SSO.

  • Added a "Last used" marker to the sign-in buttons on the login page. It shows the method last used in this browser for the same portal or Reunite organization.

Fixes

  • Fixed Bitbucket Cloud OAuth connections so they continue working after access tokens expire.

  • Fixed SSO sign-in changing a person's name across all Reunite organizations. Names from an identity provider apply only to the organization associated with that provider.

  • Updated @redocly/cli and @redocly/openapi-core to version 2.64.0.

  • Updated @redocly/openapi-core to version 2.64.0.

Reunite
v2026-10-15.4
2026-10-15

Fixes

  • Fixed the Sign Up and Log in links on the Reunite login and registration pages, which were broken when the login challenge was missing or contained special characters.

  • Fixed the commit list on the Reunite Create pull request page, which grouped commits by different authors under one author.

  • Fixed an issue in Reunite where clicking the Production or Preview button in the project header did not open the deployment.

  • Fixed an issue in Reunite where a pull request's file changes could show the diff of a different set of files.

  • Fixed an issue in Reunite where the collapsed project sidebar expanded again after opening an organization page.

Reunite
v2026-10-15.1
2026-10-15

Features

  • Redesigned the editor tabs and the editor sidebar tabs in Reunite.

  • Added suggested organization names based on company email domains and removed the role and intent questions from the organization creation screen in Reunite.

Fixes

  • Fixed an issue in Reunite where a new project with a Redocly-hosted repository sometimes did not start its first build.

  • Fixed a closed URL remote pull request in Reunite that did not reopen on sync when the default branch lacked its content.

  • Improved the MCP server analytics page layout in Reunite with a toggle to switch between the tools and clients tables.

  • Fixed an issue in the Reunite editor where the file tree showed no loading indicator for new remote content while Reunite linked it.

Realm
0.138.1
2026-10-14

Fixes

  • Fixed an issue where page content jumped to the side while long pages were loading.

  • Fixed an issue where the sign-in to the authenticated Docs MCP server failed with Invalid MCP callback or invalid_grant.

  • Fixed security vulnerability CVE-2026-93687 by removing the braces dependency.

Reunite
v2026-10-14.2
2026-10-14

Fixes

  • Updated @redocly/cli and @redocly/openapi-core to version 2.63.0.

  • Updated @redocly/openapi-core to version 2.63.0.

Reunite
v2026-10-14.1
2026-10-14

Fixes

  • Fixed an issue in Reunite project analytics where the Not found label appeared on answered AI search questions and was missing from unanswered ones, including non-English questions and multi-message conversations.

Reunite
v2026-10-13.4
2026-10-13

Fixes

  • Fixed an issue that allowed CI/CD pushes using an RBAC API key to modify files in folders the key's teams couldn't edit. Reunite rejects these pushes with a 403 error.

  • Fixed branch search in Reunite to list exact-name matches first for Bitbucket Cloud and Azure DevOps repositories.

Reunite
v2026-10-13.3
2026-10-13

Features

  • Improved namespace selection in Reunite Git remote setup with broader search and more results as you scroll.

  • Improved the content path picker in Reunite Git remote setup: users open one repository folder at a time and can type a path manually. Large repositories no longer show an incomplete list of paths.

Fixes

  • Fixed remote content not appearing in the editor until a page reload when a folder with the same content existed on the project's default branch.

  • Fixed the editor file tree jumping up when a file is selected after scrolling to the bottom.

Reunite
v2026-10-13.1
2026-10-13

Fixes

  • Fixed repository names displaying a null/ prefix for inaccessible GitLab projects in Reunite.

Realm
0.138.0
2026-10-12

Features

  • Improved the AI assistant's progress display to keep generated answers stable.

  • Added a tooltip to the link icon next to headings and properties in API docs.

  • Added support for ordering options in the Markdoc connect-mcp tag.

  • Added a Connect to Claude option to page actions and the MCP server setup page.

  • Added support for project-specific MCP tools defined in an @mcp folder.

  • Improved the preview command to use the next free port and log a warning when the requested port is already in use.

  • Added the consent option to display a cookie consent banner or privacy choices link that loads analytics and gated scripts only after visitor approval.

  • Improved the Expand all and Collapse all controls in JSON samples.

  • Added output schema to the MCP execute tool and complete tool annotations to the MCP server tools.

  • Added a submit-feedback tool to report documentation issues through the MCP server.

  • Added the prompt Markdoc tag that displays an AI prompt on a page. Readers can copy the prompt with one click or open in Cursor, Claude, or ChatGPT.

  • Added tab entries to sidebars.yaml for organizing projects into logical sections.

  • Added vertical alignment support for cells in the Markdoc table tag.

  • Improved Swagger 2.0 support with faster loading times and less memory used. Preserved $ref descriptions and nullable references.

  • Changed the defaults of the analytics.segment.trackPage, analytics.segment.includeTitleInPageCall, and analytics.rudderstack.trackPage options to disable page view tracking by default.

  • Added the ejectable ReplaySecuritySchemeActions component which renders inside the security scheme card in the Try it console.

  • Added WebMCP support, which enables AI agents in the reader's browser to search, read, and navigate your documentation.

  • Improved the reliability of AI assistant answers during streaming.

  • Improved the page load progress bar: it fills and fades out when a page finishes loading instead of disappearing at once.

Fixes

  • Fixed an issue where tooltips were missing for the Copy, Like, and Dislike buttons in AI assistant answers.

  • Fixed an issue where code samples in API docs failed to compile when a form field value contained quotes.

  • Fixed an issue where API docs request samples for application/x-www-form-urlencoded bodies ignored the encoding object and didn't repeat array field names, such as tags=red&tags=green.

  • Fixed API reference pages that failed to render when descriptions contained HTML blocks with escaped generic types, such as GridItem\<T\>.

  • Fixed an issue where the link checker falsely reported broken links to API reference pages.

  • Fixed an issue in API docs where overview pages displayed only the text of info.description that came before the first heading. The sections under the headings were missing from both the page and the sidebar.

  • Fixed a ResizeObserver loop error in Safari and Firefox when navigating API reference pages from the sidebar.

  • Fixed an issue where the API docs search results displayed the source code of <script> and <style> tags from descriptions.

  • Reduced the size of API reference pages with many headings and schema fields.

  • Improved API reference page load performance.

  • Fixed regressions of oneOf and discriminator behavior in API docs.

  • Fixed an issue in OpenAPI docs where label, icon, and badges from sidebars.yaml were not applied to the API overview sidebar item.

  • Fixed the AI assistant providing answers without using the project API tools on projects with protected content.

  • Hardened authentication.

  • Fixed an issue where unknown key in redocly.yaml caused its entire object to be removed.

  • Fixed an issue where dropdown menus were cut off at edge of the viewport.

  • Fixed an issue in OpenAPI docs where the openapi.events.tryItSent callback did not run.

  • Fixed an issue where GraphQL enum pages didn't render the Referenced in panel.

  • Fixed GraphQL schema downloads to follow the access.rbac.content rules of their docs pages.

  • Improved security for API functions and custom MCP tools in projects hosted in Reunite.

  • Fixed an issue in API docs where links in the Operations panel of had duplicated path prefix.

  • Updated @redocly/openapi-core to version 2.62.1.

  • Improved keyboard navigation for catalog filters, scorecard table sorting, and the "API keys" and "Logs" tabs on app pages in developer onboarding.

  • Improved keyboard and screen reader accessibility for image lightboxes, feedback reasons, select menus such as the version picker, and schema variant switches in API reference.

  • Fixed an issue where search returned an error on built projects with a very large search index.

  • Fixed an issue where the openapi-code-sample tag omitted the authentication with security at the root instead of operation.

  • Fixed an issue where the markdoc-example tag rendered an empty result panel with renderDemo=true.

  • Updated the Claude Desktop instructions on the /mcp page to add the Docs MCP server as a custom connector.

  • Fixed an issue where MCP server lookups failed when several API description files shared a title.

  • Fixed portal server crashes under MCP traffic on Redoc and Revel projects.

  • Fixed an issue where the link checker falsely reported broken links to /mcp and /mcp-public.

  • Fixed an issue where groups in the mobile menu and drilldown sidebar collapsed if user expanded them right after a page loaded.

  • Fixed an issue where samples in OpenAPI docs displayed the wrong variant for a oneOf nested inside another oneOf.

  • Fixed an issue where the openapi-response-sample tag reverted to the first response code after in-page navigation or browser Back and Forward navigation.

  • Fixed an issue in OpenAPI docs where links to headings in API description overview partials briefly displayed a "Page not found" error.

  • Fixed an issue in API docs where clicking an anchor link on a heading inside a partial caused a 404 error instead of navigating to the heading.

  • Fixed API docs link icons so they open the heading or property link without changing clipboard contents.

  • Fixed security vulnerabilities GHSA-6688-9rhm-gjv2 and GHSA-p98j-92pf-mc4p by upgrading dompurify to version 3.4.16.

  • Fixed SSO login for branch previews of projects configured to use path prefixes.

  • Fixed an issue where portal pages, such as API reference pages, stopped working after browser translation or a browser extension changed the page.

  • Fixed divider color in button groups, such as the page actions split button, to match custom theme button colors.

  • Fixed an issue where the search dialog reset the selected category to "All" every time it was reopened.

  • Hardened RBAC enforcement for page content.

  • Fixed an issue where a React page rendered blank if its page component was wrapped in React.memo or forwardRef.

  • Fixed an issue where embedded Replay lost the entered request when the page URL changed.

  • Fixed an issue in Replay where closing a tab while a request was running in another tab left the sending tab stuck on Sending request ....

  • Fixed webhook and callback payload schemas in OpenAPI docs to correctly display read-only and write-only fields.

  • Fixed MCP server returning an empty result instead of an error when code execution produced a value too large or invalid for JSON conversion.

  • Fixed the API docs sidebar incorrectly highlighting an adjacent section while content was being lazy-loaded.

  • Fixed an issue where the search box in the navbar shifted on page load when the keyboard shortcut hint appeared.

  • Fixed an issue in API docs where the Show button on a collapsed group scrolled the page to the group heading instead of expanding the operations in place.

  • Fixed an issue where a file directly in the @l10n folder duplicated every page of the project under a path named after that file. The build ignores these files and returns a warning.

  • Fixed an issue where search returned results titled with raw HTML element names such as table, th or div. The issue occurred on Markdown pages that contained raw HTML.

  • Updated the tooltip arrow to render as a compact 16 pixels pointer with a softly rounded tip.

  • Fixed an issue with the tabs Markdoc tag that caused nested tabs to cover the More dropdown on narrow screens.

  • Fixed the split button so the menu toggle and divider use the same danger tone as the main button.

  • Fixed an issue where the tooltip arrows failed to render in browsers that didn't support CSS anchor positioning.

  • Fixed an issue where the AI assistant send button had no accessible name for screen readers.

  • Improved rendering of AsyncAPI 2.0–2.6 channels, operations, messages, servers, and traits to match AsyncAPI 3.0.

  • Fixed server-side rendering of localized projects where UI labels appeared in the wrong language alongside hydration warnings.

  • Resolved security vulnerabilities GHSA-g4wm-2vf7-vfgr, CVE-2026-102827, CVE-2026-102828, and CVE-2026-102829 by upgrading simple-git dependency to version 4.0.2.

  • Fixed an issue in the Try it console where query parameters with allowReserved caused reserved characters such as /, :, and , to be percent-encoded.

  • Updated the Try it console's example picker to label unnamed examples as Default instead of an internal identifier from the API description.

  • Fixed an issue where the Try it console opened on the first request body example in OpenAPI docs instead of the example selected in the request panel.

  • Fixed an issue in the Try it console where operations displayed empty or incorrect request bodies and missing parameter types.

  • Fixed an issue in the Try it console where referenced path item operations did not open in request tabs or appeared in the operations list.

  • Fixed an issue in the Try it console where the toolbar in the Body, Headers, and Cookies tabs hid the copy button in a narrow response panel.

  • Improved response validation in the Try it console: the response body is checked against the schema for its status code, status code range or default, and for its media type.

  • Fixed an issue where the Try it console did not validate the response body against the documented response schema.

  • Fixed an issue where the Try it console froze on request and response schemas that expand to a very large number of nodes.

  • Fixed an issue where the version picker listed versions of a page that RBAC hid from the user.

  • Fixed an issue where the version picker disappeared on pages that had no items in the sidebar.

  • Fixed an issue where some of the UI text didn't switch to a new language after navigation.

  • Updated HTTP authentication in the Try it console to accept capitalized schemes like Basic and display a message for unsupported schemes.

  • Improved panel resizing in the Try it console.

Reunite
v2026-10-12.4
2026-10-12

Features

  • Added sticky parent folders to the editor file tree so the open folders stay visible at the top when you scroll.

Fixes

  • Fixed SSO logout on the custom domain of projects configured with a path prefix (REDOCLY_PREFIX_PATHS).

  • Improved scrolling performance in the editor file tree.

Reunite
v2026-10-09.8
2026-10-09

Fixes

  • Updated @redocly/cli and @redocly/openapi-core to version 2.62.1.

  • Updated @redocly/openapi-core to version 2.62.1.

Reunite
v2026-10-09.5
2026-10-09

Fixes

  • Fixed an issue where quickly renaming a project in the create project dialog reverted its domain to the one associated with its previous name.