v2.0.2

Compare Source

Patch Changes

• Made executionTimeout parameter optional in the run function exported from respect-core.
• Updated @​redocly/respect-core to v2.0.2.

v2.0.1

Compare Source

Patch Changes

• Fixed an issue where the no-required-schema-properties-undefined rule incorrectly resolved nested $refs relative to the file in which they were defined.
• Fixed an issue where multipart form-data parameters were not properly resolved and evaluated before sending requests.
• Updated @​redocly/openapi-core to v2.0.1.

v2.0.0

Compare Source

Major Changes

• Removed backward compatibility for the spec rule. Use struct instead.
• Removed support for the deprecated apiDefinitions option in the Redocly config. Use apis instead.
  Removed the labels field within the apis section, which was associated with the legacy Redocly API Registry product.
• Removed support for default config file names other than redocly.yaml.
• Removed support for the deprecated features.openapi and features.mockServer configuration options. Use openapi and mockServer directly instead.
• Removed backward compatibility for the deprecated lint and styleguide options in the Redocly config.
  Use rules, decorators and other related options on the root level instead.
• Removed the deprecated disallowAdditionalProperties option support in rules. Use allowAdditionalProperties instead.
• Removed support for the deprecated theme property of Redocly config.
  All the properties of theme are now available in the config root.
• Removed the deprecated path-excludes-patterns and info-license-url rules.
• Removed the deprecated undefined assertion. Use defined instead.
• Removed support for the legacy Redocly API Registry in favor of the new Reunite platform.
  Reunite provides improved API management capabilities and better integration with Redocly's tooling ecosystem.
  Migrated the login and push commands to work exclusively with Reunite.
  Removed the preview-docs command as part of platform modernization.
  Use the preview command instead.
• Removed support for the deprecated referenceDocs option, which was related to the legacy Reference docs product.
• Removed support for the deprecated assert/ prefix in configurable rules. Use rule/ prefix instead.
• Migrated the codebase to ES Modules from CommonJS, bringing improved code organization and better support for modern JavaScript features.
  Update to Node.js version 20.19.0+, 22.12.0+, or 23+.

Minor Changes

• Added x-security extension for Respect that enables secure handling of authentication in Arazzo workflows.
  Use this extension to:

  • Define security schemes at the step level using either predefined schemes or inline definitions
  • Pass values of secrets (passwords, tokens, API keys)
  • Support multiple authentication types including API Key (query, header, or cookie), Basic Authentication, Bearer Token, Digest Authentication, OAuth2, and OpenID Connect
  • Automatically transform security parameters into appropriate HTTP headers or query parameters

• Added environment variable support for CLI arguments using Yargs .env() method to parse environment variables with matching prefixes.

• Added validation for JSON Schema format.

• Extracted nullable validation from the struct rule into a new nullable-type-sibling rule for OpenAPI 3.0. This allows users to disable nullable validation separately from other structural checks.

• Configured the spec ruleset for OpenAPI, AsyncAPI, Arazzo, and Overlay specifications.
  This ruleset is designed to strictly follow the specifications.

• Added the no-duplicated-tag-names rule to check for duplications in the tags field in API descriptions.

• Enabled no-required-schema-properties-undefined, no-schema-type-mismatch, and no-enum-type-mismatch rules for AsyncAPI and Arazzo specifications.
  Adjusted the rules' severities in the recommended and minimal rulesets. Refer to the following table:

  Rule \ Ruleset	recommended	minimal
  no-required-schema-properties-undefined	off -> warn	off -> warn
  no-enum-type-mismatch	error	warn
  no-schema-type-mismatch	warn -> error	off -> warn

• Implemented automatic masking of sensitive fields (such as tokens and passwords) in response bodies to enhance security and prevent accidental exposure of secrets in logs and outputs.

• Added new CLI options for the respect command to improve test execution control.

Patch Changes

• Fixed plugins validation in config files referenced in the extends section.
• Fixed no-undefined-server-variable crash when encountering null values in the server list.
• Refactored @redocly/respect-core to eliminate Node.js-specific dependencies, improving cross-platform compatibility.
• Updated Redoc to v2.5.0.
• Fixed alias detection when using --config from a different folder than the current working directory.
• Resolved an issue where [email protected] injected an unintended message into the output.
• Fixed Redocly CLI to correctly read residency from the Redocly configuration file.
• Improved Respect's error handling when server URLs are missing from both OpenAPI descriptions and CLI options.
• Updated @​redocly/respect-core to v2.0.0.

v1.34.5

Compare Source

Patch Changes

• Updated form-data to 4.0.4 for Redocly CLI v1.
• Updated @​redocly/respect-core to v1.34.5.

v1.34.4

Compare Source

Patch Changes

• Resolved an issue where [email protected] injected an unintended message into the output.
• Updated @​redocly/respect-core to v1.34.4.

v1.34.3

Compare Source

Patch Changes

• Updated Redoc to v2.5.0.
• Updated @​redocly/openapi-core to v1.34.3.

v1.34.2

Compare Source

Patch Changes

• Updated @​redocly/openapi-core to v1.34.2.

v1.34.1

Compare Source

Patch Changes

• Improved OpenTelemetry data serialization.
• Updated @​redocly/respect-core to v1.34.1.

v1.34.0

Compare Source

Minor Changes

• Added global execution timeout timer to respect command execution to prevent infinite test runs. You can configure this timer using the RESPECT_TIMEOUT environment variable (defaults to 1 hour).

Patch Changes

• Updated @​redocly/respect-core to v1.34.0.

v1.33.1

Compare Source

Patch Changes

• Fixed generate-arazzo command to properly handle output file paths. The output-file parameter must have a value when provided.
• Updated @​redocly/respect-core to v1.33.1.

v1.33.0

Compare Source

Minor Changes

• Added support for generating workflows from OpenAPI operations without operationIds. The generate-arazzo command now automatically generates operationPaths using the URL pattern: {$sourceDescriptions.<name>.url}#/paths/<path>/<method>.

Patch Changes

• Updated @​redocly/respect-core to v1.33.0.

v1.32.2

Compare Source

Patch Changes

• Fixed step execution to respect severity levels when handling step failures. Previously, steps would always break workflow execution on failure when onFailure is omitted, but now they properly consider the configured severity level (e.g., warn | off severity allows subsequent steps to execute).
• Updated @​redocly/openapi-core to v1.32.2.

v1.32.1

Compare Source

Patch Changes

• Added support for basic, bearer, and apiKey security schemes in workflow generation with generate-arazzo command.
• Updated @​redocly/openapi-core to v1.32.1.

v1.32.0

Compare Source

Minor Changes

• Added support for linting, preprocessors, decorators, and type extensions for Overlay v1 documents.

Patch Changes

• Updated OAS3 Schema type definition to correct type keyword enum, removed null.
• Fixed an issue where JSON logs did not properly capture data from nested external workflows.
• Updated @​redocly/openapi-core to v1.32.0.

v1.31.3

Compare Source

Patch Changes

• Updated @​redocly/openapi-core to v1.31.3.

v1.31.2

Compare Source

Patch Changes

• Fixed sourceDescription name generation in generate-arazzo command when using OpenAPI files that contain multiple periods "." in their filenames.
• Updated @​redocly/respect-core to v1.31.2.

v1.31.1

Compare Source

Patch Changes

• Added the missing respect-core import in Redocly CLI package.
• Updated @​redocly/openapi-core to v1.31.1.

v1.31.0

Compare Source

Minor Changes

• Added the generate-arazzo command to scaffold Arazzo description templates out of OpenAPI descriptions.
• Added the respect command to test APIs against Arazzo description files.

Patch Changes

• Updated @​redocly/openapi-core to v1.31.0.

v1.30.0

Compare Source

Minor Changes

• Added OAuth 2.0 Device authorization flow that enables users to authenticate through Reunite API.

Patch Changes

• Updated operation-tag-defined built-in rule to verify tags are defined on the operation prior to matching them to a global tag.
• Updated @​redocly/openapi-core to v1.30.0.