Changelog

Features

• Added email notifications for Git credential owners who have enabled them when Reunite can no longer use their credentials, helping them reconnect and restore builds, content syncs, and pull request updates.

• Added an email notification and a Failed tag in the Reunite remote content list that warn when Reunite turns off auto-sync for a remote after five failed updates in a row.

Fixes

• Fixed an issue in Reunite where auto-sync for a remote turned off again after one failed update when a user turned it back on.

• Fixed an issue in Reunite where the What's new announcement opened on top of the dialog to create a project. The announcement shows on the next page instead.

• Fixed spacing around the "No deployments" message on the Reunite Deployments page.

• Fixed avatar colors in Reunite so each user has a consistent color across pull request activity and the editor. Existing avatar colors changed once.

Features

• Updated Reunite sign-in; users must sign in again once after the update.

• Added name and avatar editing in Reunite account settings for people who sign in through SSO.

• Added a "Last used" marker to the sign-in buttons on the login page. It shows the method last used in this browser for the same portal or Reunite organization.

Fixes

• Fixed Bitbucket Cloud OAuth connections so they continue working after access tokens expire.

• Fixed SSO sign-in changing a person's name across all Reunite organizations. Names from an identity provider apply only to the organization associated with that provider.

• Updated @redocly/cli and @redocly/openapi-core to version 2.64.0.

• Updated @redocly/openapi-core to version 2.64.0.

Fixes

• Fixed the Sign Up and Log in links on the Reunite login and registration pages, which were broken when the login challenge was missing or contained special characters.

• Fixed the commit list on the Reunite Create pull request page, which grouped commits by different authors under one author.

• Fixed an issue in Reunite where clicking the Production or Preview button in the project header did not open the deployment.

• Fixed an issue in Reunite where a pull request's file changes could show the diff of a different set of files.

• Fixed an issue in Reunite where the collapsed project sidebar expanded again after opening an organization page.

Features

• Redesigned the editor tabs and the editor sidebar tabs in Reunite.

• Added suggested organization names based on company email domains and removed the role and intent questions from the organization creation screen in Reunite.

Fixes

• Fixed an issue in Reunite where a new project with a Redocly-hosted repository sometimes did not start its first build.

• Fixed a closed URL remote pull request in Reunite that did not reopen on sync when the default branch lacked its content.

• Improved the MCP server analytics page layout in Reunite with a toggle to switch between the tools and clients tables.

• Fixed an issue in the Reunite editor where the file tree showed no loading indicator for new remote content while Reunite linked it.

Fixes

• Updated @redocly/cli and @redocly/openapi-core to version 2.63.0.

• Updated @redocly/openapi-core to version 2.63.0.

Fixes

• Fixed an issue in Reunite project analytics where the Not found label appeared on answered AI search questions and was missing from unanswered ones, including non-English questions and multi-message conversations.

Fixes

• Fixed an issue that allowed CI/CD pushes using an RBAC API key to modify files in folders the key's teams couldn't edit. Reunite rejects these pushes with a 403 error.

• Fixed branch search in Reunite to list exact-name matches first for Bitbucket Cloud and Azure DevOps repositories.

Features

• Improved namespace selection in Reunite Git remote setup with broader search and more results as you scroll.

• Improved the content path picker in Reunite Git remote setup: users open one repository folder at a time and can type a path manually. Large repositories no longer show an incomplete list of paths.

Fixes

• Fixed remote content not appearing in the editor until a page reload when a folder with the same content existed on the project's default branch.

• Fixed the editor file tree jumping up when a file is selected after scrolling to the bottom.

Fixes

• Fixed repository names displaying a null/ prefix for inaccessible GitLab projects in Reunite.

Features

• Improved the AI assistant's progress display to keep generated answers stable.

• Added a tooltip to the link icon next to headings and properties in API docs.

• Added support for ordering options in the Markdoc connect-mcp tag.

• Added a Connect to Claude option to page actions and the MCP server setup page.

• Added support for project-specific MCP tools defined in an @mcp folder.

• Improved the preview command to use the next free port and log a warning when the requested port is already in use.

• Added the consent option to display a cookie consent banner or privacy choices link that loads analytics and gated scripts only after visitor approval.

• Improved the Expand all and Collapse all controls in JSON samples.

• Added output schema to the MCP execute tool and complete tool annotations to the MCP server tools.

• Added a submit-feedback tool to report documentation issues through the MCP server.

• Added the prompt Markdoc tag that displays an AI prompt on a page. Readers can copy the prompt with one click or open in Cursor, Claude, or ChatGPT.

• Added tab entries to sidebars.yaml for organizing projects into logical sections.

• Added vertical alignment support for cells in the Markdoc table tag.

• Improved Swagger 2.0 support with faster loading times and less memory used. Preserved $ref descriptions and nullable references.

• Changed the defaults of the analytics.segment.trackPage, analytics.segment.includeTitleInPageCall, and analytics.rudderstack.trackPage options to disable page view tracking by default.

• Added the ejectable ReplaySecuritySchemeActions component which renders inside the security scheme card in the Try it console.

• Added WebMCP support, which enables AI agents in the reader's browser to search, read, and navigate your documentation.

• Improved the reliability of AI assistant answers during streaming.

• Improved the page load progress bar: it fills and fades out when a page finishes loading instead of disappearing at once.

Fixes

• Fixed an issue where tooltips were missing for the Copy, Like, and Dislike buttons in AI assistant answers.

• Fixed an issue where code samples in API docs failed to compile when a form field value contained quotes.

• Fixed an issue where API docs request samples for application/x-www-form-urlencoded bodies ignored the encoding object and didn't repeat array field names, such as tags=red&tags=green.

• Fixed API reference pages that failed to render when descriptions contained HTML blocks with escaped generic types, such as GridItem\<T\>.

• Fixed an issue where the link checker falsely reported broken links to API reference pages.

• Fixed an issue in API docs where overview pages displayed only the text of info.description that came before the first heading. The sections under the headings were missing from both the page and the sidebar.

• Fixed a ResizeObserver loop error in Safari and Firefox when navigating API reference pages from the sidebar.

• Fixed an issue where the API docs search results displayed the source code of <script> and <style> tags from descriptions.

• Reduced the size of API reference pages with many headings and schema fields.

• Improved API reference page load performance.

• Fixed regressions of oneOf and discriminator behavior in API docs.

• Fixed an issue in OpenAPI docs where label, icon, and badges from sidebars.yaml were not applied to the API overview sidebar item.

• Fixed the AI assistant providing answers without using the project API tools on projects with protected content.

• Hardened authentication.

• Fixed an issue where unknown key in redocly.yaml caused its entire object to be removed.

• Fixed an issue where dropdown menus were cut off at edge of the viewport.

• Fixed an issue in OpenAPI docs where the openapi.events.tryItSent callback did not run.

• Fixed an issue where GraphQL enum pages didn't render the Referenced in panel.

• Fixed GraphQL schema downloads to follow the access.rbac.content rules of their docs pages.

• Improved security for API functions and custom MCP tools in projects hosted in Reunite.

• Fixed an issue in API docs where links in the Operations panel of had duplicated path prefix.

• Updated @redocly/openapi-core to version 2.62.1.

• Improved keyboard navigation for catalog filters, scorecard table sorting, and the "API keys" and "Logs" tabs on app pages in developer onboarding.

• Improved keyboard and screen reader accessibility for image lightboxes, feedback reasons, select menus such as the version picker, and schema variant switches in API reference.

• Fixed an issue where search returned an error on built projects with a very large search index.

• Fixed an issue where the openapi-code-sample tag omitted the authentication with security at the root instead of operation.

• Fixed an issue where the markdoc-example tag rendered an empty result panel with renderDemo=true.

• Updated the Claude Desktop instructions on the /mcp page to add the Docs MCP server as a custom connector.

• Fixed an issue where MCP server lookups failed when several API description files shared a title.

• Fixed portal server crashes under MCP traffic on Redoc and Revel projects.

• Fixed an issue where the link checker falsely reported broken links to /mcp and /mcp-public.

• Fixed an issue where groups in the mobile menu and drilldown sidebar collapsed if user expanded them right after a page loaded.

• Fixed an issue where samples in OpenAPI docs displayed the wrong variant for a oneOf nested inside another oneOf.

• Fixed an issue where the openapi-response-sample tag reverted to the first response code after in-page navigation or browser Back and Forward navigation.

• Fixed an issue in OpenAPI docs where links to headings in API description overview partials briefly displayed a "Page not found" error.

• Fixed an issue in API docs where clicking an anchor link on a heading inside a partial caused a 404 error instead of navigating to the heading.

• Fixed API docs link icons so they open the heading or property link without changing clipboard contents.

• Fixed security vulnerabilities GHSA-6688-9rhm-gjv2 and GHSA-p98j-92pf-mc4p by upgrading dompurify to version 3.4.16.

• Fixed SSO login for branch previews of projects configured to use path prefixes.

• Fixed an issue where portal pages, such as API reference pages, stopped working after browser translation or a browser extension changed the page.

• Fixed divider color in button groups, such as the page actions split button, to match custom theme button colors.

• Fixed an issue where the search dialog reset the selected category to "All" every time it was reopened.

• Hardened RBAC enforcement for page content.

• Fixed an issue where a React page rendered blank if its page component was wrapped in React.memo or forwardRef.

• Fixed an issue where embedded Replay lost the entered request when the page URL changed.

• Fixed an issue in Replay where closing a tab while a request was running in another tab left the sending tab stuck on Sending request ....

• Fixed webhook and callback payload schemas in OpenAPI docs to correctly display read-only and write-only fields.

• Fixed MCP server returning an empty result instead of an error when code execution produced a value too large or invalid for JSON conversion.

• Fixed the API docs sidebar incorrectly highlighting an adjacent section while content was being lazy-loaded.

• Fixed an issue where the search box in the navbar shifted on page load when the keyboard shortcut hint appeared.

• Fixed an issue in API docs where the Show button on a collapsed group scrolled the page to the group heading instead of expanding the operations in place.

• Fixed an issue where a file directly in the @l10n folder duplicated every page of the project under a path named after that file. The build ignores these files and returns a warning.

• Fixed an issue where search returned results titled with raw HTML element names such as table, th or div. The issue occurred on Markdown pages that contained raw HTML.

• Updated the tooltip arrow to render as a compact 16 pixels pointer with a softly rounded tip.

• Fixed an issue with the tabs Markdoc tag that caused nested tabs to cover the More dropdown on narrow screens.

• Fixed the split button so the menu toggle and divider use the same danger tone as the main button.

• Fixed an issue where the tooltip arrows failed to render in browsers that didn't support CSS anchor positioning.

• Fixed an issue where the AI assistant send button had no accessible name for screen readers.

• Improved rendering of AsyncAPI 2.0–2.6 channels, operations, messages, servers, and traits to match AsyncAPI 3.0.

• Fixed server-side rendering of localized projects where UI labels appeared in the wrong language alongside hydration warnings.

• Resolved security vulnerabilities GHSA-g4wm-2vf7-vfgr, CVE-2026-102827, CVE-2026-102828, and CVE-2026-102829 by upgrading simple-git dependency to version 4.0.2.

• Fixed an issue in the Try it console where query parameters with allowReserved caused reserved characters such as /, :, and , to be percent-encoded.

• Updated the Try it console's example picker to label unnamed examples as Default instead of an internal identifier from the API description.

• Fixed an issue where the Try it console opened on the first request body example in OpenAPI docs instead of the example selected in the request panel.

• Fixed an issue in the Try it console where operations displayed empty or incorrect request bodies and missing parameter types.

• Fixed an issue in the Try it console where referenced path item operations did not open in request tabs or appeared in the operations list.

• Fixed an issue in the Try it console where the toolbar in the Body, Headers, and Cookies tabs hid the copy button in a narrow response panel.

• Improved response validation in the Try it console: the response body is checked against the schema for its status code, status code range or default, and for its media type.

• Fixed an issue where the Try it console did not validate the response body against the documented response schema.

• Fixed an issue where the Try it console froze on request and response schemas that expand to a very large number of nodes.

• Fixed an issue where the version picker listed versions of a page that RBAC hid from the user.

• Fixed an issue where the version picker disappeared on pages that had no items in the sidebar.

• Fixed an issue where some of the UI text didn't switch to a new language after navigation.

• Updated HTTP authentication in the Try it console to accept capitalized schemes like Basic and display a message for unsupported schemes.

• Improved panel resizing in the Try it console.

Features

• Added sticky parent folders to the editor file tree so the open folders stay visible at the top when you scroll.

Fixes

• Fixed SSO logout on the custom domain of projects configured with a path prefix (REDOCLY_PREFIX_PATHS).

• Improved scrolling performance in the editor file tree.

Fixes

• Updated @redocly/cli and @redocly/openapi-core to version 2.62.1.

• Updated @redocly/openapi-core to version 2.62.1.

Fixes

• Fixed an issue where quickly renaming a project in the create project dialog reverted its domain to the one associated with its previous name.

Fixes

• Fixed security vulnerabilities CVE-2026-102827, CVE-2026-102828, CVE-2026-102829 and GHSA-g4wm-2vf7-vfgr by upgrading simple-git to version 4.0.2.

Fixes

• Fixed an issue that prevented deleting a Reunite branch when a Git remote content repository contained a branch with the same name.

• Fixed a server error in Reunite that occurred when users connected a repository from a GitHub organization with an IP allow list. Reunite explains how to allow the Redocly IP addresses.

• Fixed slow GitHub commit status updates in Reunite when many projects build at the same time.

• Fixed server errors in Reunite responses to GitLab rejections, such as missing projects, by returning GitLab's status code.

• Fixed an issue that could prevent Git remote content from syncing when webhook permissions were missing. Reunite displays an error explaining which webhook permissions are required.

• Fixed an issue in Respect Monitoring where pausing or resuming one workflow switched the Pause and Resume actions for every workflow in the list.

Fixes

• Fixed the Visual review check that stayed pending on pull requests in external Git repositories when no preview build ran for the pull request.

Features

• Added MCP server usage to the project Analytics page in Reunite: requests, tool calls, top tools, and AI clients, with sortable tables.

Fixes

• Fixed an issue where SSO login and logout failed on preview builds of projects with path prefixes.

Features

• Improved keyboard and screen reader access in Reunite for the sidebar, the project card menu, editor tabs, resolved comments in pull requests, and the resolution picker in visual review.

Fixes

• Updated @redocly/cli and @redocly/openapi-core to version 2.58.1.

• Updated @redocly/openapi-core to version 2.58.1.

Fixes

• Fixed the build log in Reunite dropping the indentation of indented lines.

Fixes

• Hardened the built-in CORS proxy.

• Fixed an issue that could cause the project to crash when rendering API docs with cyclic OpenAPI schemas.