Fixed security vulnerabilities CVE-2026-54286, CVE-2026-54287, CVE-2026-54288, CVE-2026-54289, and CVE-2026-54290 by upgrading hono to version 4.12.25.
- Realm
- Reef
- Revel
- Redoc
- Reunite
Next release
Try the "next" release candidate or wait until it is promoted to the latest version at the beginning of each month
Latest release
Fixes
Fixed security vulnerability
CVE-2026-53550by upgradingjs-yamlto version4.2.0.Fixed security vulnerabilities
GHSA-gvmj-g25r-r7wr,CVE-2026-49978,GHSA-x4vx-rjvf-j5p4,GHSA-vxr8-fq34-vvx9,CVE-2026-49459,CVE-2026-49458,GHSA-76mc-f452-cxcm, andGHSA-cmwh-pvxp-8882by upgradingdompurifyto version3.4.11.Fixed security vulnerability
GHSA-gv7w-rqvm-qjhrby upgradingesbuildto version0.28.1.Fixed security vulnerability
CVE-2026-54285by upgrading@opentelemetry/coreto version2.8.0.
Previous releases
Fixes
Fixed issue loading large numbers of PR contributors.
Fixed an issue where external Git user logins were capitalized instead of preserving the original casing.
Features
Added provider-native pagination and server-side search to git branch listings. Branch pickers in the project source and remote content flows now load branches page by page with infinite scroll and filter them on the git provider (GitHub, GitLab, Bitbucket Cloud, Azure DevOps) instead of fetching every branch upfront.
Fixes
Fixed security vulnerability
CVE-2026-40879by upgrading@nestjs/microservicesto version11.1.27.Fixed security vulnerability
CVE-2026-35515by upgrading@nestjs/coreto version11.1.27.
Features
Added status dots to folders in the editor file tree, indicating when a folder contains an added or modified file.
Fixes
Fixed security vulnerabilities
CVE-2026-2359,CVE-2026-3304andCVE-2026-3520by upgradingmulterto version2.2.0.Updated
@redocly/openapi-coreand@redocly/clito version2.34.0.
Features
Added an analytics source to the autonomous agent to investigate project analytics, including AI search conversations, standard search queries, and page views. Added filtering, sorting, and search to project analytics tables in Reunite. Fixed an issue where clearing the time range caused a malformed filter.
Fixes
Updated
@redocly/openapi-coreand@redocly/clito version2.33.1.Fixed
"Custom filter 'workflowId' can only be used with ':' operator"error in the Respect Monitoring tab when filtering multiple workflows.Added
captionattribute to theimgMarkdoc tag in the Reunite editor.
Fixes
Fixed git blame annotations wrapping onto a new line with word wrap enabled.
Fixes
Fixed an issue where a transient Rebilly concurrent modification conflict during usage reporting was misclassified as exceeding the pages budget, failing the build. Usage reporting now retries on such conflicts.
Fixes
Updated
@redocly/openapi-coreand@redocly/clito version2.32.1.Fixed an issue where the active editor file and
redocly.yamlcontents were not sent as context to the Reunite AI Assistant, causing answers to ignore the current file.
Features
Added infinite scroll to the organization overview project list, replacing the
Load morebutton. Fixed project card grid sizing to prevent a single card in the last row from stretching.
Features
Added configuration options to control time-specific banner visibility.
Added support for the
templateMarkdown setting to specify page templates with glob patterns.Added
renderForLlmsto custom Markdoc tag schemas to control output for LLMs.Updated styles for the
cardsMarkdoc tag.Added
Implemented bysection to interface types ingraphql-docs.Added support for default values in
redocly.yamlenvironment variable references.Excluded page actions from OpenAPI Docs heading content to improve accessibility.
Updated Replay to pre-fill workflow environment inputs and step parameter defaults with values returned from an ejected
useConfigureReplay.
Fixes
Fixed an issue where links inside schema descriptions rendered by the
json-schemaMarkdoc tag did not include the project path prefix.Fixed an issue where schema fields inside
oneOf,anyOf, or behind adiscriminatorweren't rendering inllms.txtAPI description pages.Fixed a bug that hid the
detailstag's focus outline during keyboard navigation.Fixed an issue where the search dialog closed on window resize.
Fixed an issue where front matter errors would falsely appear resolved after edits to Markdown files.
Fixed page navigation buttons stretching excessively on large screens.
Fixed scroll synchronization between the editor and the Webview.
Fixed an issue where logout did not clear federated identity token cookies.
Fixed security vulnerabilities
CVE-2026-47675,CVE-2026-47676,CVE-2026-47673,CVE-2026-47674by upgradinghonoto version4.12.23.Fixed docs MCP server to flush response headers immediately and send SSE keepalive pings.
Fixed a bug where Google Analytics recorded duplicate page views for routes with and without trailing slashes.
Fixed an issue where webhooks remained visible when all endpoints were hidden by
x-rbacaccess control.Fixed an issue where the link checker incorrectly reported valid authentication links as broken.
Fixed an issue where custom Markdoc components were not working in OpenAPI operation
descriptionfields.Updated
styled-componentsto version6.4.2.Updated
@redocly/openapi-coreto version2.31.6.Improved OpenAPI and AsyncAPI page rendering performance for projects with many Markdoc partials.
Improved error handling for API function files that do not export default functions.
Fixed an issue where failed search requests caused the search dialog to remain stuck on the loading spinner without displaying an error.
Fixed an issue where embedded Replay (
replay-openapiMarkdoc tag) could crash when using the mock server.Fixed an issue where sidebar entries were duplicated when multiple sidebar files existed in a versioned directory.
Fixed an issue where IP addresses associated with submitted feedback were inaccurate due to proxy or CDN chains.
Fixed an issue in Replay where clicking a sidebar tree node label did not expand or collapse it.
Improved AI agent API exploration capabilities for more consistent search results.
Features
- Added support for syncing pull request comment and thread resolution status from GitHub to Reunite when marked resolved or unresolved.
Fixes
Updated
@redocly/openapi-coreand@redocly/clito version2.31.6.
Features
Added
Googlesign-up button to the registration page.
Fixes
Fixed an issue where pull request reviews with more than 10 comments did not display all comments.
Fixes
Fixed an issue where in rare cases, clicking on a link on a Markdown page, could trigger navigation twice, taking the user to the first link on the target page.
Fixes
Fixed expired invitation errors showing a generic 400 message. The error page indicates the invitation expired and suggests requesting a new one from an organization admin.
Added filter for anonymous and acknowledged authors in feedback.
Added
Escapekey support so users can close the Onboarding widget drawer from the keyboard.
Features
Hid the sign-up link during account recovery, verification, and identity linking flows.