@redocly/realm 0.137.0-next.1 → 0.137.0-next.10

package/CHANGELOG.md

@@ -1,5 +1,218 @@
 # @redocly/realm
 
+## 0.137.0-next.10
+
+### Minor Changes
+
+- 34be1ea876c: Improved search to index every field, heading, and message.
+  Search links each result to the exact field on the page.
+
+### Patch Changes
+
+- 0a77ab6ce1c: Fixed an issue where API docs pages opened scrolled down, hiding the breadcrumbs and any custom navigation placed above the API description.
+- 2a8d8ef03f8: Fixed security vulnerabilities `CVE-2026-83610` and `CVE-2026-45820` by upgrading `@xmldom/xmldom` to version `0.9.12` and `fflate` to version `0.7.5`.
+- b486e9369b6: Fixed missing tooltips in the Try it console parameter rows in OpenAPI docs.
+- da83ea0a174: Fixed an issue in Replay where truncated tab names and request titles did not display their full versions on mouse hover or keyboard focus.
+- Updated dependencies [0a77ab6ce1c]
+- Updated dependencies [34be1ea876c]
+- Updated dependencies [1bfa724240f]
+- Updated dependencies [b486e9369b6]
+  - @redocly/api-docs@0.2.0-next.10
+  - @redocly/theme@0.69.0-next.9
+
+## 0.137.0-next.9
+
+### Minor Changes
+
+- 99c30ac1f75: Added `idea` as a supported `type` for the `admonition` Markdoc tag.
+
+### Patch Changes
+
+- 96bec15e63a: Fixed an issue where environment variable placeholders (`{{ process.env.VAR }}`) in `redocly.yaml` resolved to their build-time values instead of the server's runtime environment.
+- 82ded2a052d: Fixed an issue in API docs where the request code sample lost its form fields and displayed an empty body.
+- 8eda45d517e: Updated `openapi-sampler` to version 1.7.5.
+- 90d0ec5503e: Updated `@redocly/openapi-core` to version `2.51.2`.
+- c43c9386131: Updated `@redocly/openapi-core` to version `2.49.1`.
+- db1e5edd9a5: Fixed an issue where project SSO login failed when the IdP sent many group claims.
+- 9a6190c4c9d: Fixed an issue in Replay where the request body editor didn't display property descriptions for content with Markdown formatting.
+- 2f980fd606a: Improved the 404 page for API Docs.
+- 6514fcebcd8: Fixed an issue where preview did not update `llms.txt` and page Markdown related to LLMs.
+- Updated dependencies [82ded2a052d]
+- Updated dependencies [8eda45d517e]
+- Updated dependencies [90d0ec5503e]
+- Updated dependencies [c43c9386131]
+- Updated dependencies [9a6190c4c9d]
+- Updated dependencies [2f980fd606a]
+- Updated dependencies [99c30ac1f75]
+  - @redocly/api-docs@0.2.0-next.9
+  - @redocly/theme@0.69.0-next.8
+  - @redocly/portal-plugin-mock-server@0.22.0-next.7
+
+## 0.137.0-next.8
+
+### Patch Changes
+
+- 03bb0c362f3: Fixed MCP connections for clients on the `2026-07-28` protocol revision.
+- c9412b45d48: Reworded the AI assistant's welcome message, disclaimer, and error messages for consistent naming.
+- 6bfb1e98619: Fixed an issue in API docs where deep links did not open the linked field.
+- Updated dependencies [c9412b45d48]
+- Updated dependencies [6bfb1e98619]
+  - @redocly/theme@0.69.0-next.7
+  - @redocly/api-docs@0.2.0-next.8
+
+## 0.137.0-next.7
+
+### Patch Changes
+
+- d43a91af696: Fixed MCP code mode tool results and descriptions to match declared signatures.
+- 568a904d7b3: Fixed spacing and the selected language tab indicator in API docs overview panels.
+- Updated dependencies [568a904d7b3]
+  - @redocly/api-docs@0.2.0-next.7
+
+## 0.137.0-next.6
+
+### Minor Changes
+
+- dc778d3244f: Added an opt-in `/mcp-public` endpoint to serve public content without authentication on RBAC-restricted projects.
+- a2990a88355: Added an `onClose` prop to the custom `ReplayGate` component to close the Try it overlay when users dismiss the sign-in panel.
+
+### Patch Changes
+
+- 941a6282ce2: Fixed an issue where several Redocly extensions were incorrectly rendered as custom vendor extensions when `showExtensions` is enabled.
+- dc778d3244f: Fixed the gap between the label and the dropdown arrow in the `Connect to MCP` button, which was wider than the gap between the icon and the label.
+- f53573e23be: Fixed an issue where the **Copied!** tooltip on copy buttons disappeared too early when the button was clicked repeatedly.
+- 5aa48382698: Fixed an issue where SSO login in projects without an `l10n` configuration caused identity providers with strict `ui_locales` validation to reject the login request.
+- 19571899490: Removed the `405` status code text from the MCP endpoint pages (`/mcp` and `/mcp-public`).
+- 9e802e70486: Fixed an issue where `describe-tools` tool in the MCP server didn't provide a human-readable name.
+- 5f0a7503013: Updated default border radius for components.
+- d53bc00a387: Fixed small visual issues with the `Connect to MCP server` button and aligned its styling with the page action button.
+- d53bc00a387: Added translations for the `Connect to MCP server` and page action dropdown toggle labels, using the `page.actions.connectMcp.moreOptions` and `page.actions.moreActions` keys.
+- Updated dependencies [941a6282ce2]
+- Updated dependencies [dc778d3244f]
+- Updated dependencies [f53573e23be]
+- Updated dependencies [19571899490]
+- Updated dependencies [dc778d3244f]
+- Updated dependencies [941a6282ce2]
+- Updated dependencies [a2990a88355]
+- Updated dependencies [5f0a7503013]
+- Updated dependencies [d53bc00a387]
+- Updated dependencies [d53bc00a387]
+  - @redocly/api-docs@0.2.0-next.6
+  - @redocly/theme@0.69.0-next.6
+  - @redocly/realm-asyncapi-sdk@0.15.0-next.3
+  - @redocly/openapi-docs@3.25.0-next.6
+  - @redocly/asyncapi-docs@1.14.0-next.6
+  - @redocly/graphql-docs@1.14.0-next.6
+  - @redocly/portal-plugin-mock-server@0.22.0-next.6
+
+## 0.137.0-next.5
+
+### Patch Changes
+
+- 4925ce16bea: Fixed an issue in API docs where a schema that inherited its `discriminator` from an `allOf` parent displayed only the discriminator property, without its variants or other properties.
+- 4925ce16bea: Fixed an issue where a variant whose schema was unavailable, such as a schema restricted by RBAC, displayed as an empty option.
+- bff49e7278f: Fixed an issue in OpenAPI docs where selecting an example in the response panel did not update the request code sample.
+  The issue occurred when request and response examples shared the same key.
+- ac184788d19: Fixed an issue where angle brackets: `<`, `>` weren't rendered inside inline code within Markdown link text, such as `` [`command <name>`](./page.md) ``.
+- 67c2f278ff4: Fixed an issue where example descriptions weren't rendered in the request and response samples panels.
+  Descriptions render as Markdown below the example selector for all languages and include callback payloads and descriptions pre-parsed by the portal.
+- 4925ce16bea: Fixed an issue where code samples omitted the discriminator value of the selected variant.
+- bf3aa0200bf: Improved sidebar accessibility: separators are no longer announced as links by screen readers and no longer receive keyboard focus.
+- 505de02f7b8: Fixed an issue where a search query that contained double characters returned an error.
+- 4925ce16bea: Fixed an issue where a mapping key that pointed to the same schema as `defaultMapping` disappeared from the variant list.
+- 4925ce16bea: Fixed an issue in API docs where the code samples panel displayed no `Discriminator` selector for schemas that inherit their `discriminator` from an `allOf` parent.
+- Updated dependencies [4925ce16bea]
+- Updated dependencies [4925ce16bea]
+- Updated dependencies [bff49e7278f]
+- Updated dependencies [67c2f278ff4]
+- Updated dependencies [4925ce16bea]
+- Updated dependencies [bf3aa0200bf]
+- Updated dependencies [4925ce16bea]
+- Updated dependencies [4925ce16bea]
+  - @redocly/api-docs@0.2.0-next.5
+  - @redocly/theme@0.69.0-next.5
+  - @redocly/asyncapi-docs@1.14.0-next.5
+  - @redocly/graphql-docs@1.14.0-next.5
+  - @redocly/openapi-docs@3.25.0-next.5
+  - @redocly/portal-plugin-mock-server@0.22.0-next.5
+
+## 0.137.0-next.4
+
+### Patch Changes
+
+- 34e13e3c9e1: Fixed OAuth2 client credentials exchange in the MCP gateway credentials form.
+- 772bee46a31: The MCP credentials page consolidated all accepted API credentials on one page.
+- f53b16a05de: Updated the MCP API-credentials page to match Redocly styling.
+- 02b5b225d9d: Fixed build and Webview preview failures caused by missing exports in `@xyflow/system`.
+- 109fd55824b: Updated `@redocly/openapi-core` to version `2.47.0`.
+- 5b825b1f1fe: Fixed an issue in OpenAPI docs where the server URL was missing from the request panel for APIs with a single server when the mock server was disabled.
+- Updated dependencies [02b5b225d9d]
+- Updated dependencies [109fd55824b]
+- Updated dependencies [5b825b1f1fe]
+  - @redocly/theme@0.69.0-next.4
+  - @redocly/api-docs@0.2.0-next.4
+  - @redocly/openapi-docs@3.25.0-next.4
+  - @redocly/asyncapi-docs@1.14.0-next.4
+  - @redocly/graphql-docs@1.14.0-next.4
+  - @redocly/portal-plugin-mock-server@0.22.0-next.4
+
+## 0.137.0-next.3
+
+### Minor Changes
+
+- b1ae95e5f84: Added `linkIcon`, `cta`, `iconColor`, `badge`, `badgeColor`, and `badgeIcon` attributes to the `card` Markdoc tag to enhance customization options.
+
+### Patch Changes
+
+- 6bb6424826b: Fixed an issue where clicking an item in the table of contents caused the selection indicator to jump and highlight an incorrect item.
+- Updated dependencies [b1ae95e5f84]
+- Updated dependencies [6bb6424826b]
+- Updated dependencies [4a99bb28789]
+  - @redocly/theme@0.69.0-next.3
+  - @redocly/realm-asyncapi-sdk@0.15.0-next.2
+  - @redocly/api-docs@0.2.0-next.3
+  - @redocly/asyncapi-docs@1.14.0-next.3
+  - @redocly/graphql-docs@1.14.0-next.3
+  - @redocly/openapi-docs@3.25.0-next.3
+  - @redocly/portal-plugin-mock-server@0.22.0-next.3
+
+## 0.137.0-next.2
+
+### Minor Changes
+
+- 2c5afad45c3: Added a `Connect to the MCP server` page at `/mcp` with tabbed setup instructions for Claude, ChatGPT/Codex, and raw JSON configuration.
+  Extended the **Connect MCP** button with copy options for Claude Code and Codex CLI.
+
+### Patch Changes
+
+- e984568ea3d: Fixed the active-section tracking on a page leaving a timer behind after the page unmounted, which could read the document after it was gone.
+- 6edee5d9b47: Fixed an issue where raw HTML in operation descriptions leaked into search results and was rendered as literal text.
+- 27bb2676bfd: Fixed an issue in OpenAPI docs where schemas were positioned before operations in the sidebar.
+- e984568ea3d: Fixed the MCP gateway asking for the wrong kind of credential: when an operation accepts several security schemes, the assistant now asks which credential you hold instead of picking the API default, and only one credential is ever sent upstream per request.
+- da18d144763: Added validation to the MCP credentials form.
+- 22036d13361: Fixed an issue where the MCP server sent outdated credentials.
+  This issue happened for APIs that accept multiple security schemes.
+- e984568ea3d: Improved MCP gateway gateway to support multiple security schemes per API, enabling authentication with both bearer tokens and cookies when mixed.
+- 1d9074a4318: Added Docs MCP server audience validation for bearer tokens.
+  With audience enforcement active, tokens whose `aud` claims names other organizations are logged, reported, and rejected.
+  Tokens without an `aud` claim keep working.
+- 27bb2676bfd: Fixed an issue in API docs where the menu link for a section of a tag description contained a duplicated path segment.
+- b595126fdb7: Updated the language selection indicator's position in the API docs Languages panel to display inside the language selection box.
+- Updated dependencies [e984568ea3d]
+- Updated dependencies [6edee5d9b47]
+- Updated dependencies [27bb2676bfd]
+- Updated dependencies [2c5afad45c3]
+- Updated dependencies [1d9074a4318]
+- Updated dependencies [27bb2676bfd]
+- Updated dependencies [b595126fdb7]
+  - @redocly/theme@0.69.0-next.2
+  - @redocly/api-docs@0.2.0-next.2
+  - @redocly/realm-asyncapi-sdk@0.15.0-next.1
+  - @redocly/asyncapi-docs@1.14.0-next.2
+  - @redocly/graphql-docs@1.14.0-next.2
+  - @redocly/openapi-docs@3.25.0-next.2
+  - @redocly/portal-plugin-mock-server@0.22.0-next.2
+
 ## 0.137.0-next.1
 
 ### Minor Changes
@@ -47,6 +260,19 @@
   - @redocly/graphql-docs@1.14.0-next.0
   - @redocly/portal-plugin-mock-server@0.22.0-next.0
 
+## 0.136.2
+
+### Patch Changes
+
+- 7b45d118926: Fixed build and Webview preview failures caused by missing exports in `@xyflow/system`.
+- Updated dependencies [7b45d118926]
+  - @redocly/theme@0.68.2
+  - @redocly/api-docs@0.1.2
+  - @redocly/asyncapi-docs@1.13.2
+  - @redocly/graphql-docs@1.13.2
+  - @redocly/openapi-docs@3.24.2
+  - @redocly/portal-plugin-mock-server@0.21.2
+
 ## 0.136.1
 
 ### Patch Changes