Changelog

Fixes

• Updated the Teams page to display automated role-based teams: owners, members, billing, and viewers.

Fixes

• Updated @redocly/openapi-core and @redocly/cli to version 2.31.2.

• Updated @redocly/openapi-core and @redocly/cli to version 2.31.0.

Features

• Moved onboarding access to the sidebar and replaced the drawer with a less intrusive, non-blocking assistive flow.

Features

• Added a start tab in the Reunite editor with file search, recent files, and tools.

Fixes

• Updated @redocly/openapi-core to version 2.30.5.

• Updated the Reunite pull request UI with a card-style header featuring quick actions, a redesigned visual review tab, and an updated comments container.

• Fixed invite failure when the identity domain was verified but no identity providers were defined.

• Fixed date picker to prevent selecting days outside the current month and times in the future.

• Fixed active and hover colors in the user settings modal sidebar to use grey tones matching the main navigation sidebar.

Fixes

• Fixed an issue where the login page language didn't match the language selected in the project.

Fixes

• Updated @redocly/openapi-core to version 2.30.3.

• Fixed billing portal checkbox/radio checked contrast in dark mode.

Fixes

• Updated Reunite's pull request summary interface to improve readability of merge status, reviews, and actions on the activity page.

Fixes

• Hardened Realm CORS proxy validation to block private network targets before proxying requests.

Fixes

• Fixed intermittent "Cannot edit in read-only" and dropped keystrokes issue in the Reunite editor.

Features

• Added re-request review functionality.

Fixes

• Updated @redocly/openapi-core to version 2.30.2.

• Retained feedback filters and sort order when switching between Page feedback and Code reports.

Fixes

• Fixed security vulnerability GHSA-39q2-94rc-95cp by upgrading dompurify to version 3.4.0.

• Fixed security vulnerability CVE-2026-41650 by upgrading fast-xml-parser to version 5.7.1.

• Fixed security vulnerability CVE-2026-39356 by upgrading drizzle-orm to version 0.45.2.

• Fixed security vulnerability CVE-2026-41673 by upgrading @xmldom/xmldom to version 0.9.10.

• Fixed multiple moderate security vulnerabilities in hono dependency by upgrading it to version 4.12.14.

Fixes

• Closing the last tab in a Reunite editor default files group now keeps the group in place.

Fixes

• Updated @redocly/openapi-core to version 2.30.1.

• Fixed an Editor issue where the Commit tab badge did not update after file edits.

Features

• Reworked the Reunite editor layout: file and utility tabs now share a single workspace that can be rearranged, split horizontally or vertically, and resized.

Features

• Updated error and permission-denied pages with clearer copy, actions, and navigation that adapts to org or project context.

Fixes

• Updated @redocly/openapi-core and @redocly/cli to version 2.29.1.

Fixes

• Updated @redocly/openapi-core and @redocly/cli to version 2.29.0.

• Fixed SAML SP metadata Assertion Consumer Service URL when the auth host is configured with a full URL, and aligned SAML AuthnRequest NameID policy with the email format advertised in metadata.

Fixes

• Fixed styling issues in project overview cards and dark mode border colors.

Fixes

• Updated @redocly/openapi-core and @redocly/cli to version 2.27.1.

Fixes

• Fixed authentication to reject API keys on endpoints configured for session sign-in and clarified error messages to indicate the authentication method used.

• Fixed capitalization of "Runtime logs" in sidebar menu, page title, and documentation.

Features

• Added validation for the redirects configuration option to detect dead and circular redirects.

• Added RBAC filtering for Apigee API products in developer onboarding app creation.

• Added support for Excalidraw and PlantUML diagrams.

• Added support for x-badges in OpenAPI and AsyncAPI parameters and schema properties.

• Added support for or functions in RBAC conditions within Markdoc content.

• Added a new ColorPaletteIcon icon component.

Fixes

• Fixed an issue where Typesense search ignored OpenAPI paths.

• Fixed a bug where Markdoc content wrapped in an RBAC condition did not appear in search results for users with access.

• Fixed an issue where an API path remained visible when all its endpoints were hidden by x-rbac access control.

• Fixed an issue where the "Last updated" date displayed incorrect values on project pages.

• Fixed a bug where dismissing any banner on the page prevented all banners from being displayed on that page again.

• Fixed a bug that caused search result highlighting to break in Flexsearch when the query contained duplicate words.

• Fixed an issue where pressing the Q key in the terminal in preview mode would not stop the preview.

• Fixed an issue where images referenced by the img Markdoc tag appeared broken after changing src and moving the file, requiring a manual page reload.

• Fixed an issue where URLs starting with the same characters as API reference, AsyncAPI, Scorecards, Catalog, or Developer Onboarding page slugs served data for those pages instead of showing a 404.

• Fixed an issue where files with identical names but different extensions in the same folder resolved to a single URL, causing pages to be missing from the deployed project.

• Fixed out-of-memory error in the search indexer that occurred when indexing deeply nested schemas.

• Fixed an issue in scorecardClassic where the minimumLevel calculation in targets resulted in incorrect values.

• Updated @redocly/openapi-core to version 2.25.2.

• Fixed an issue where the catalog tile descriptions displayed Markdown syntax as raw text.

• Fixed an issue where banners didn't support all Markdoc features.

• Fixed banner target priority to ensure that the most specific matching banner is displayed on a page.

• Fixed an issue where badges in sidebars.yaml were not rendering on API reference pages.

• Fixed an issue where json-schema Markdoc tags produced empty output in LLM content.

• Improved keyboard navigation across Replay's input components for more consistent and predictable focus behavior.

• Fixed incorrect RBAC validation that caused authenticated MCP tool calls to be handled improperly.

• Fixed an issue where rules in targets were not applied correctly to scorecardClassic levels.

• Fixed an issue where complex AI search queries might have resulted with an error.

• Fixed an issue where the sidebar scrolled together with the rest of the page when an announcement banner was present.

• Fixed an issue where the process did not terminate after certain short-lived CLI commands were executed.

• Fixed an issue where clicking asset download links redirected to a 404 page.

• Fixed an issue where filters on code walkthrough pages overlapped the Search dialog.

• Improved performance when building AI search documents for Markdown.

• Fixed an issue where partial Markdoc tags in OpenAPI and AsyncAPI description fields did not resolve when Windows-style path separators were used.

• Fixed an issue where navigating to a page through an anchor link from another page occasionally failed to scroll to the anchor.

• Fixed an issue where OpenAPI 3.1 discriminated unions broke when allOf merged $ref siblings.

• Fixed MCP URL variables resolution.

• Fixed security vulnerability CVE-2026-33036 by upgrading fast-xml-parser to version 5.5.9.

• Fixed an issue where Replay's Authorization type dropdown menu was hidden, preventing interaction.

• Adjusted tooltip text to remain on a single line when possible.