v5.29.4

Compare Source

Bug Fixes

• core: refactor UNSAFE_ lifecycle methods in ContentType and OperationContainer (#​10373) (2814709), closes #​10212
• ignore rendering responses with extensions in the schema (#​10592) (23e3e00)
• include script in body (#​10593) (456274c)
• update vulnerable libxml2 to 2.13.9-r0 (#​10600) (8138154)
• use h1 for title heading to improve accessibility (#​10598) (c0bd7b6), closes #​10480

v5.29.3

Compare Source

Bug Fixes

• auth: ensure schema is immutable when persisting authorization (#​10588) (9124f59), closes #​10569

v5.29.2

Compare Source

Bug Fixes

• include oauth2-redirect.js in npm package distribution (#​10585) (443c011), closes #​10574

v5.29.1

Compare Source

Bug Fixes

• security: update Axios to non-vulnerable 1.12.2 version (#​10579) (54276b9)

v5.29.0

Compare Source

Features

• oauth2-redirect: externalize inline script for CSP compliance (#​10559) (35eb103)

v5.28.1

Compare Source

Bug Fixes

• provide polyfill for buffer in build (#​10554) (bbb1282), closes #​10553

v5.28.0

Compare Source

Features

• add initial support for React 19 (#​10551) (7a13771), closes #​10243

v5.27.1

Compare Source

Bug Fixes

• use open-cli instead of require('open') for Node 20+ compatibility (#​10517) (47a5c1f)

v5.27.0

Compare Source

Bug Fixes

• permissions of files to allow running as non-root (#​10515) (679e73b)
• sanitization of relative OpenAPI JSON paths (#​10528) (60dee8b)

Features

• json-schema: support x-additionalPropertiesName (#​10006) (4bada92)

v5.26.2

Compare Source

Bug Fixes

• style: restore paragraph spacing in parameter and response descriptions (#​10514) (efe6eb5)

v5.26.1

Compare Source

Bug Fixes

• oas3: reset request body values in try it out (#​9717) (32dd3af)

v5.26.0

Compare Source

Features

• release Swagger UI to Packagist (#​10513) (d48549f)

v5.25.4

Compare Source

Bug Fixes

• docker: bump nginx image to version 1.29.0-alpine to fix CVE-2025-48174 (#​10508) (94f0818)

v5.25.3

Compare Source

Bug Fixes

• fix opened model schema resolving issue on spec change (#​10509) (0ddc74d)

v5.25.2

Compare Source

Bug Fixes

• dist: provide correct npm token for swagger-ui-dist release (a9ce4bb)

v5.24.2: Swagger UI v5.24.2 Released!

Compare Source

Bug Fixes

• align expanded content inside expand collapse button (#​10497) (2574351)

v5.24.1: Swagger UI v5.24.1 Released!

Compare Source

Features

• oas3: show the schema tab in the Try it Out mode (#​10440) (ac106cd)

v5.24.0: Swagger UI v5.24.0 Released!

Compare Source

Bug Fixes

• mitigate ReDoS when generating examples from pattern (#​10477) (71c9314)
• packagist: exclude large obsolete directories from publishing to Packagist (#​10329) (cbd4b30)
• release: fix failed v5.23.0 release (8045f06)

Features

• json-schema-5-samples: add support for time format example generation (#​10420) (#​10421) (fc6fb24)

v5.22.0: Swagger UI v5.22.0 Released!

Compare Source

Bug Fixes

• assure parameter is an immutable map when grouping parameters (#​10457) (8577d71)
• avoid accessing properties of empty Example Objects (#​10453) (6a07ac8)
• docker: address CVE-2025-32414/CVE-2025-32415 (#​10461) (01e380e)
• json-schema-2020-12-samples: generate proper samples for XML atttributes (#​10459) (5d346fd)
• oauth2: avoid processing authorizationUrl when it is not a string (#​10452) (119052e)
• security: update Axios to non-vulnerable 1.9.0 version (#​10460) (c85865c)
• spec: assure operation is an immutable map in operations selectors (#​10454) (b6151d4)
• spec: avoid accessing $ref when path item is not an object (#​10456) (581d544)
• use spec compliant JSON Pointer implementation (#​10455) (2f0cbba)

Features

• observability: allow defining custom uncaught exception handler (#​10462) (0a438f2)