New release: @redocly/reef@0.133.0 · Date: 2026-05-14 · 8 features · 23 fixes
Features:
• Added multi-version API support for Docs MCP tools.
• Improved visibility and accessibility of Markdown links by adding an underline.
• Updated styles for page navigation buttons.
• Updated the icon displayed alongside hyperlinks in the project.
• Added Client ID Metadata Document (CIMD) support to the MCP OAuth flow.
• Added support for callback URLs in developerOnboarding.
• Added hreflang alternate links for translated pages.
• Improved language picker accessibility by converting menu options to links.
Fixes:
• Prevented search engines from indexing Markdown pages generated by the llms.txt feature.
• Fixed unauthenticated callback execution in the MCP docs server.
• Fixed an issue in OpenAPI docs route resolution where lines not tied to an operation generated incorrect URLs by duplicating the base slug.
• Fixed an issue where searching in projects without searchable content caused a server error.
• Fixed rendering of non-Latin characters by enforcing UTF-8 encoding.
• Fixed an issue where login and logout redirects caused 404 and URI mismatch errors in projects with path prefix.
• Fixed an issue where preview login redirects failed when the branch hostname contained double hyphens.
• Fixed an issue where closing the search dialog modal locked page scrolling.
• Fixed an issue in Realm Markdown image handling where inline data: image URLs were incorrectly treated as broken local routes.
• Excluded buttons and links from heading content to improve accessibility.
• Fixed API function responses with status 204 to prevent errors when calling JSON or text helpers.
• Fixed curation in Typesense search.
• Fixed security vulnerabilities CVE-2026-44455, CVE-2026-44456, CVE-2026-44457, CVE-2026-44458 and CVE-2026-44459 by upgrading hono to version 4.12.18.
• Fixed an issue where the tooltips in API docs and Replay might partially render outside the viewport.
• Fixed an issue where API functions failed to hot-reload after files were added in Reunite’s Webview or local preview.
• Fixed an issue where MCP auth URLs were displayed after MCP docs had been disabled.
• Updated @redocly/openapi-core to version 2.30.5.
• Fixed 404 error when opening login from locale-prefixed URLs.
• Fixed an issue where MCP connect actions were hidden for OpenAPI pages excluded from search (openapi.excludeFromSearch).
• Fixed an issue where navigating on a code walkthrough page prevented automatic scrolling to the active step.
• Fixed an issue where selected request body examples were not properly synchronized between Redoc and the Try it overlay.
• Fixed an issue in Replay where stale credentials persisted in the active environment across page reloads, and caused intermittent “JWT is expired” errors.
• Fixed an issue in Replay where the request body with invalid JSON input grew after restarts, leading to decreased performance.