Scalar Changelog

1.1.43 (2026-10-23)

Fri, 23 Oct 2026 00:00:00 GMT

Close tabs with keyboard shortcuts and AsyncAPI server-variable examples

The desktop app now closes tabs and windows with Cmd+W (or Ctrl+W on Windows and Linux), matching browser behavior. AsyncAPI server-variable examples are now visible in the API reference.

Press Cmd+W (or Ctrl+W) to close the active tab in the desktop app. The window closes when only one tab remains.
AsyncAPI server-variable examples now appear in the API reference with copy support, including examples from referenced variables.
Upgraded to Undici 8.12.3, which enables HTTP/2 by default. This requires Node.js 22.19.0 or later.

Read full release notes

1.76.0 (2026-10-23)

Fri, 23 Oct 2026 00:00:00 GMT

AsyncAPI message examples and optional URL routing

This release improves AsyncAPI documentation with operation-level payload examples, server-variable examples, and flexible action slots. You can now disable URL synchronization to keep navigation internal when embedding the reference.

Display AsyncAPI message and reply payload examples in dark code cards with message selection and schema-generated fallbacks
Add urlRouting: false to keep API reference navigation internal without changing the host page URL
Show server-variable examples in a popup with copy support, including examples from referenced variables
Add Copy as Markdown buttons for AsyncAPI channels and operations, with customizable action slots
List AsyncAPI operations beside channel details instead of repeating channel navigation at the tag level

Read full release notes

0.12.46 (2026-10-23)

Fri, 23 Oct 2026 00:00:00 GMT

Polish and bug fixes shipped

Read full release notes

0.20.0 (2026-10-23)

Fri, 23 Oct 2026 00:00:00 GMT

Updated to Undici 8 with HTTP/2 enabled by default

This release upgrades the underlying HTTP client to Undici 8, which enables HTTP/2 by default for faster request handling. The minimum Node.js version is now 22.19.0.

HTTP/2 is now enabled by default through the Undici 8 upgrade, improving request performance.
Minimum Node.js version raised to 22.19.0. Node.js 22.0 through 22.18 are no longer supported.
Updated dependencies while maintaining existing APIs and five-day release-age policy.

Read full release notes

0.36.9 (2026-10-21)

Wed, 21 Oct 2026 00:00:00 GMT

Configuration handling improvements and code generation refinements

This release improves how the generator handles Scalar configuration files, fixes how CLI samples appear in augmented OpenAPI documents, and refines generated SDK code across multiple languages.

Configuration files are now converted on every run instead of being cached, so edits to scalar-sdk.config.yaml are no longer ignored after the first generation.
CLI code samples and install instructions in augmented OpenAPI documents now appear under CLI instead of Shell, and regenerating replaces old entries cleanly.
Generated C++ clients now send user agent headers, handle idempotency keys correctly, and build unions through explicit factory methods.
Go SDKs now comma-join array query parameters by default, and v2 SDKs name union arms and enums more clearly based on discriminators or titles.
Dart SDKs declare models only when they have a public identity, reducing the number of generated classes and improving the package surface.

1.1.42 (2026-10-20)

Tue, 20 Oct 2026 00:00:00 GMT

Improved OAuth token management

Read full release notes

1.75.1 (2026-10-20)

Tue, 20 Oct 2026 00:00:00 GMT

Accessibility improvements and AsyncAPI refinements

This release brings keyboard navigation support, responsive design fixes, and AsyncAPI rendering improvements that align messaging documentation with the OpenAPI experience.

Endpoint links in operation lists now support keyboard navigation and modified clicks to open in new tabs
Request example cards wrap long operation paths instead of truncating them, with the client picker moving below when space is tight
Operation header actions wrap on narrow screens instead of overflowing the viewport
AsyncAPI operations now match OpenAPI spacing, headings, and layout, with messages collapsed by default
Ask AI now supports AsyncAPI context and search results alongside OpenAPI

Read full release notes

0.12.45 (2026-10-20)

Tue, 20 Oct 2026 00:00:00 GMT

AsyncAPI support in Ask AI

Ask AI now works with both OpenAPI and AsyncAPI descriptions. The chat interface understands AsyncAPI channels, operations, and messages, and switching between different API sources starts a fresh conversation with the correct context.

Ask AI now supports AsyncAPI descriptions alongside OpenAPI
Search results display AsyncAPI channels, operations, and messages with their native identities
Switching between API sources preserves the selected description and starts a new conversation
Unsupported AsyncAPI execution actions return a helpful explanation instead of attempting HTTP requests

Read full release notes

0.19.0 (2026-10-20)

Tue, 20 Oct 2026 00:00:00 GMT

Unified OpenAPI and AsyncAPI mocking in a single factory

createMockServer now detects whether you provide an OpenAPI or AsyncAPI document and returns the appropriate Hono app. This replaces the separate createAsyncApiMockServer factory with a single unified API.

createMockServer automatically detects OpenAPI or AsyncAPI documents from objects, files, URLs, or inline JSON and YAML
AsyncAPI WebSocket channels now require a runtime-specific upgradeWebSocket adapter for flexible deployment
AsyncAPI apps automatically serve /asyncapi.json and /asyncapi.yaml with deployment-specific connection URLs
Galaxy now serves sample events on connection at wss://galaxy.scalar.com/ws/v1/planets/4/events
Node hosts create their own WebSocketServer for AsyncAPI channels

Read full release notes

0.36.8 (2026-10-19)

Mon, 19 Oct 2026 00:00:00 GMT

Improved union handling and refined SDK documentation

This release improves how discriminated unions are generated across all targets and refines generated SDK documentation. Union arms that reference configured models now use those models directly instead of creating copies, and several documentation improvements landed for C# and PHP SDKs.

Discriminated union arms that reference configured models are no longer copied; the configured models are used directly as union variants.
C# SDK documentation now shows accurate method signatures in reference.md and correctly describes client options in README and SKILL.md.
C# SDKs now mark deprecated required members as [Obsolete] and mark records that contain them to allow compilation.
PHP union arms without their own component are now named more descriptively using x-stainless-naming, component names, or UnionMember<n> instead of generic Variant<n> names.
Python models declared at the top level now stay importable from types/ even when they reference subresource models, avoiding import path changes.

1.1.41 (2026-10-16)

Fri, 16 Oct 2026 00:00:00 GMT

Security improvements and polish

This release focuses on security hardening for OAuth flows and external links, along with improvements to API key configuration handling and better compatibility with host page styles.

OAuth authorization URLs are now validated to prevent non-web protocols from being opened in browser popups or desktop handlers
Desktop external links are restricted to HTTPS or HTTP for local development URLs before opening
API key names can now be cleared when authentication configuration supplies a default name, and edits are preserved for export
Component styles no longer override host page body backgrounds and margins, including hosts using CSS layers

Read full release notes

1.75.0 (2026-10-16)

Fri, 16 Oct 2026 00:00:00 GMT

AsyncAPI rendering improvements and Mermaid diagram support

This release enhances AsyncAPI documentation with comprehensive rendering of replies, bindings, tags, and non-JSON schemas. A new opt-in Mermaid plugin brings interactive diagrams to Markdown content throughout the reference.

Render AsyncAPI operation replies with expandable message schemas, channel links, and dynamic address expressions
Add opt-in Mermaid plugin for interactive diagrams with zoom controls and keyboard panning
Display AsyncAPI bindings for servers, channels, operations, and messages with version details and nested values
Show AsyncAPI tags with filtering that preserves channel grouping and navigation anchors
Search response schema fields and nested objects with cycle-safe traversal, ranking field names above prose

Read full release notes

0.12.44 (2026-10-16)

Fri, 16 Oct 2026 00:00:00 GMT

Security patch and code quality improvements

This release addresses a security advisory in the AI SDK response handling and cleans up code quality issues across the package.

Updated AI SDK dependencies to patch GHSA-866g-f22w-33x8 in response body handling
Cleaned up lint warnings while preserving all existing runtime behavior

Read full release notes

0.18.0 (2026-10-16)

Fri, 16 Oct 2026 00:00:00 GMT

OpenID Connect provider and transport security enforcement

This release adds a development OpenID Connect authorization server with signed ID tokens and enforces security requirements for AsyncAPI WebSocket and Server-Sent Events connections.

Added a development OpenID Connect provider with signed ID tokens, JWKS endpoints, PKCE support, and token refresh rotation for testing identity flows.
AsyncAPI WebSocket and SSE connections now enforce server and operation security requirements before opening channels.
HTTP authentication accepts case-insensitive Basic and Bearer schemes, validates Digest credentials, and recognizes verified mutual TLS certificates.
OAuth callback URLs are validated to reject non-HTTP schemes and prevent executable links on authorization pages.
AsyncAPI mock servers register OAuth and OpenID Connect endpoints declared in security schemes and return discovery metadata on the mock origin.

Read full release notes

0.36.7 (2026-10-16)

Fri, 16 Oct 2026 00:00:00 GMT

Operations can now route to their own server URLs

This release adds support for operations that declare their own server URLs in the OpenAPI document. Generated SDKs now send these operations to their declared hosts instead of the client base URL, while preserving environment selection and proxy support. The C++ target gets async clients, streaming, webhooks, and code samples.

Operations with their own servers configuration now route to those hosts across all targets (TypeScript, C#, Go, Java, Kotlin, PHP, Python, Ruby, Rust, Swift), letting SDKs work with APIs that host different endpoints on different domains.
C++ SDKs now generate an async client with methods that return futures or accept callbacks, alongside streaming support for Server-Sent Events and JSON Lines responses.
C++ SDKs verify and decode webhook deliveries with Standard Webhooks signature schemes, plus ship code samples, a smoke harness, and build much faster on large APIs.
Enum members renamed through x-stainless-renameMap or x-fern-enum now use those names in C#, Java, Kotlin, PHP and Ruby instead of deriving names from wire values.
Generated documentation improvements include operation-specific API reference sections, better deprecation messages from x-stainless-deprecation-message, and repository links in package READMEs.

0.36.6 (2026-10-15)

Thu, 15 Oct 2026 00:00:00 GMT

Expanded C++ and Dart SDKs, refined authentication and pagination

This release brings substantial progress to the experimental C++ and Dart targets, with generated clients, models and runtime components now available. C# SDKs receive refinements to union naming, credential handling and code samples, while TypeScript SDKs gain server variable options and bigint support for 64-bit integers.

C++ SDKs now generate a complete client over libcurl with typed models, paginated operations and credential support.
Dart SDKs now ship a client, models, resources, pagination, webhook helpers and formatted code samples.
C# union arms that extend a component now take descriptive names such as ThingNodeWithType instead of positional ones.
TypeScript SDKs accept client options for server variables, so a tenant in the host is set with new Client({ site: 'acme' }) instead of a hand-built baseURL.
Webhook helpers configured with webhookKeyOpt: false no longer emit signature verification when no verifying helper shares their events.

1.1.40 (2026-10-12)

Mon, 12 Oct 2026 00:00:00 GMT

Traditional Chinese localization and authentication polish

This release adds full Traditional Chinese translations for Taiwan readers and refines authentication field behavior to show only the icons that perform an action.

Added Traditional Chinese (Taiwan) translations across the API Client, accessible via zh-TW locale variants
Authentication fields now show reset and show password icons only when they would do something, reducing clutter
Query parameter objects can expand into a searchable Add parameter picker, keeping optional empty fields out of sight until needed
OAuth2 refresh button now stays in a consistent position between the settings gear and Authorize via OAuth2
Cookie persistence now respects Max-Age precedence over Expires when both headers are present

Read full release notes

1.74.0 (2026-10-12)

Mon, 12 Oct 2026 00:00:00 GMT

AsyncAPI documentation improvements and SDK generation tools

This release brings major improvements to AsyncAPI support, including complete channel and message documentation, better trait inheritance, and full-document search. Local development now includes SDK generation tools alongside the existing MCP workflow.

Search AsyncAPI channels, operations, messages, parameters, and nested payload fields by name or description
Document all channel messages including those not referenced by operations, with server and protocol filtering
Make modern sidebar tag groups and nested parent tags collapsible by default, revealing ancestors when navigating
Add Generate SDK buttons to developer tools, client libraries, and request examples when running on localhost
Show an Explore Scalar call to action in the sidebar footer on localhost with expandable card and demo booking dialog

Read full release notes

0.12.43 (2026-10-12)

Mon, 12 Oct 2026 00:00:00 GMT

Polish and bug fixes shipped

Read full release notes

0.17.6 (2026-10-12)

Mon, 12 Oct 2026 00:00:00 GMT

Polish and bug fixes shipped

Read full release notes

0.36.5 (2026-10-09)

Fri, 09 Oct 2026 00:00:00 GMT

OAuth token revocation, resource indicators, and query parameter fixes

This release adds OAuth token revocation when signing out of generated CLIs, introduces resource indicators for requesting API-specific tokens, and fixes query parameter serialization in Java and Kotlin SDKs.

Generated CLIs now revoke OAuth tokens at the provider when you sign out, using the RFC 7009 endpoint set in targets.cli.credentialStore.oauth.revocationUrl or discovered from OpenID Connect metadata.
Generated CLIs and Rust SDKs can now request OAuth tokens for a specific API, sending openapi.securitySchemeSettings.<scheme>.resource and audience on every token request.
Java and Kotlin SDKs now follow OpenAPI explode for query parameters when querySettings.arrayFormat is not set, repeating keys instead of comma-joining them.
Ruby SDKs now spell boolean and numeric enum members as their JSON types instead of symbols, so true, false, integers, and floats are sent correctly.
Kotlin and Java SDKs publishing to Maven Central now release uploads automatically instead of waiting for manual approval in the Central Portal.

0.36.4 (2026-10-09)

Fri, 09 Oct 2026 00:00:00 GMT

Per-target skip settings now isolate each SDK, and Java, Kotlin, and Ruby are stable

This release applies per-target only and skip settings to each SDK on its own, so skipping operations or models for one target no longer affects the others. Java, Kotlin, and Ruby are also promoted to stable targets.

Per-target only and skip settings now apply to each target independently, so a resource or method skipped for one target does not appear in that SDK even when another target keeps it.
A resource skipped for a target also drops its methods, subresources, and the models declared under it, for that target only.
only and skip on webhook unwrap helpers and streaming overloads are now honored whether you generate one target or several.
Code samples follow the same per-language settings, and every target now honors document-level per-target skip lists on union variants and object properties.
Generating several targets at once stays fast, because targets with the same only and skip settings share a single compile.
Java, Kotlin, and Ruby are now stable targets: list-targets reports them as stable, and their configuration reference pages no longer carry the experimental note.

1.1.38 (2026-10-05)

Mon, 05 Oct 2026 00:00:00 GMT

macOS 13 requirement and authentication polish

The desktop app now requires macOS 13 or later after updating to Electron 44. This release also brings authentication improvements and editor fixes from the API Client.

Updated to Electron 44.5.1, which requires macOS 13 or later
Fixed large request bodies rendering blank gaps when scrolling in the code editor
Made authentication field clearing consistent with separate reset actions for configured defaults
Polished the bearer token acquisition row to match the design of surrounding elements
Fixed long unbroken lines in request bodies stretching the client beyond the viewport

Read full release notes

1.73.0 (2026-10-05)

Mon, 05 Oct 2026 00:00:00 GMT

Featured client tabs, visible extensions, and better schema composition

Choose which HTTP clients appear as tabs in your API documentation, show OpenAPI extensions without plugins, and control how many request body properties display by default. Plus improvements to nested schema composition and floating UI styling.

Add featuredClients to choose which HTTP clients are shown as tabs in the Client Libraries block, and in which order
Add showExtensions to display selected OpenAPI extensions on operations, parameters, response headers, and schema fields without a custom plugin
Add hideModelNames to show structural types instead of model names in schema labels and operation headings
Add maxVisibleRequestBodyProperties to control the initial request body property limit with a count of hidden properties
Keep nested allOf object fields and choice groups inside their named property, with recursive references rendering as leaves

Read full release notes

0.36.3 (2026-10-05)

Mon, 05 Oct 2026 00:00:00 GMT

Python item-cursor pagination types

Python SDKs with item-cursor pagination now declare a protocol for cursor items, so imports and type checking work correctly.

from <package>.pagination import CursorPageItem now resolves to a runtime-checkable Protocol, and paging behaves exactly as before.

0.36.2 (2026-10-05)

Mon, 05 Oct 2026 00:00:00 GMT

README type accuracy, Python union fixes, and Go and Ruby naming fixes

This release improves README documentation accuracy across all target languages, fixes several Python SDK bugs related to union types and recursive structures, and corrects Go union routing and Ruby attribute naming.

README authentication and client options tables now show the exact types each language declares, so they match what you see in your generated SDK.
Python SDKs no longer silently drop wire aliases and date formatting inside recursive request unions.
Python union response variants that extend a model now subclass it instead of duplicating all of its fields.
Go discriminated unions now route by discriminator only when each variant has a unique value, preventing incorrect decoding.
Ruby attributes that shadow built-in methods now take a trailing underscore to avoid conflicts.

1.1.37 (2026-10-02)

Fri, 02 Oct 2026 00:00:00 GMT

Import Hono reference pages and accessibility improvements

This release brings support for importing API descriptions from Hono reference page URLs and includes accessibility fixes for code blocks and keyboard navigation.

Import API descriptions directly from Hono reference page URLs, with automatic document discovery and watch mode support
Screen readers now announce code blocks with their language and context, such as "Code sample: Shell cURL"
Copy buttons in code blocks have stable accessible names that remain clear even when the visible label is hidden
Press Space to toggle options in multiselect comboboxes like the auth scheme picker without hiding the list
Update the desktop app’s Undici dependency to 8.11.2 to address security advisories

Read full release notes

1.72.4 (2026-10-02)

Fri, 02 Oct 2026 00:00:00 GMT

Better accessibility and fixes for discriminator schemas and CDN caching

This release improves keyboard navigation and screen reader support for code blocks, fixes a visual bug where discriminator oneOf variants composed with allOf were rendering duplicated content, and resolves an issue where cached ESM entry points could fail to load chunks after a new release.

Code blocks now announce their language to screen readers (for example, "Code sample: Shell cURL") and copy buttons have stable accessible names in all states
Pressing Space in multiselect comboboxes like the auth scheme picker now toggles the active option instead of hiding the list when the search is empty
Discriminator oneOf variants that use allOf to compose their base schema no longer render duplicate selectors, fields, or descriptions
The ESM entry point now pins itself to its release version when loading chunks from CDN URLs, preventing 404 errors when a cached entry point tries to fetch chunks from a newer release
Custom self-hosted paths and popular CDN hosts like jsDelivr and UNPKG continue to work without changes

Read full release notes

0.36.1 (2026-10-02)

Fri, 02 Oct 2026 00:00:00 GMT

Keychain support for CLI credentials, aliases for renamed types, and Go identifier fixes

This release improves credential management on macOS, adds aliases for renamed types in TypeScript and Python, and fixes Go identifier formatting issues.

Generated CLIs now store credentials in the macOS Keychain through the system security utility, which works for both npm and standalone binary installs.
TypeScript SDKs now support type aliases through backCompat.typeAliases, keeping legacy type names and imports working after types are renamed or nested.
Python SDKs now support import path aliases, so existing imports keep working when types move or are renamed, with optional deprecation messages.
Go SDKs now handle nested model types in request parameters correctly and format identifier segments like sla as Sla instead of SLA.
Python request serialization now resolves forward-referenced union members, fixing runtime errors when sending requests with recursive union types.

1.1.36 (2026-09-30)

Wed, 30 Sep 2026 00:00:00 GMT

Improved request body editing and clearer error handling

This release makes it easier to work with array-based enum selections in request bodies, removes unnecessary authentication dropdowns, and provides better visibility when requests fail due to CORS or network issues.

Enum array selections now preserve their original types (numbers, booleans, strings) when editing request bodies in the Form view
Failed requests remain visible with guidance about possible CORS or network causes instead of disappearing after a toast message
Authentication dropdowns are hidden when only one required option is available, reducing visual clutter in the API Reference
Long enum selection labels now stay contained within their controls
Search performance improvements reduce unnecessary allocations during document search

Read full release notes

1.72.3 (2026-09-30)

Wed, 30 Sep 2026 00:00:00 GMT

Search performance improvements and parameter display fixes

This release brings substantial search performance improvements and fixes several display issues in the API Reference. Search operations are now faster through optimized schema traversal and reduced computation overhead.

Search is up to 28% faster when opening search and up to 30% faster during typing by optimizing schema field collection and skipping unused match range calculations
Nested properties of expanded query parameters now display with proper indentation under their parent objects and arrays
Authentication dropdowns are hidden when only one required option is available, streamlining the interface while keeping credential inputs visible
Response examples now display correctly when multiple media types normalize to the same MIME type, preserving distinct content for each variant
Configuration updates skip unchanged document fields during change detection, reducing unnecessary processing overhead

Read full release notes

0.36.0 (2026-09-30)

Wed, 30 Sep 2026 00:00:00 GMT

Generated code checks, CLI environment selection, and Go pagination pages

This release checks generated Go code before writing it, fixes CLI credential routing across environments, and generates page types for Go pagination. C++ webhook signature verification now works correctly, and several type inference fixes improve Go SDK quality.

The generator now checks Go code samples before writing them, and a sample that assigns a value of the wrong type to a struct field is withheld and reported as Target/InvalidGeneratedCode.
Generated CLIs now match stored credentials to the selected environment: login and logout accept --environment, and the CLI reads a new <PREFIX>_ENVIRONMENT variable.
Go SDKs now generate page types for page-number and offset pagination, with GetNextPage and AutoPaging methods that handle totals and empty pages correctly.
C++ webhook signature verification now implements the Standard Webhooks HMAC scheme correctly, with constant-time comparison and timestamp tolerance checks.
TypeScript SDKs no longer shadow globals like Response or FormData in client.ts, and Go request enums are typed correctly when fields reference the same component.

1.1.35 (2026-09-29)

Tue, 29 Sep 2026 00:00:00 GMT

OAuth reliability improvements and accessibility refinements

This release resolves OAuth configuration bugs that caused redirect URLs to be lost and scope selections to duplicate, while incorporating a comprehensive set of screen reader and keyboard accessibility improvements throughout the testing client.

OAuth redirect URLs now persist when changing credentials or clearing tokens, and refresh controls appear only when a refresh token is available
Selecting OAuth scopes no longer creates duplicate entries, and configured default scopes are applied automatically
Auth fields now expose their visible labels to screen readers in both masked and unmasked states
Opening the test modal moves focus to the close button first, and request filter tabs announce each option once instead of twice
At narrow widths, the modal header keeps the method label inside the address bar and the sidebar toggle moves to the backdrop as a circle

Read full release notes

1.72.2 (2026-09-29)

Tue, 29 Sep 2026 00:00:00 GMT

Improved accessibility and contrast across themes

This release addresses findings from an external accessibility audit, improving screen reader semantics, keyboard navigation, and color contrast across the reference and all shipped themes.

Text and focus rings now meet WCAG contrast minimums in the default light theme and nine presets
Screen readers announce correct selection states, response status meanings, and collapsible section structure
Keyboard focus rings are visible on all interactive controls including the response copy button
Schema tree toggles and property copy buttons meet the 24px minimum touch target size in narrow layouts
The powered by Scalar link now includes UTM parameters to identify which integration visitors came from

Read full release notes

0.35.2 (2026-09-28)

Mon, 28 Sep 2026 00:00:00 GMT

Homebrew cask publishing

This release adds support for publishing generated CLIs as Homebrew casks.

Generated CLIs can now be published to Homebrew as casks with targets.cli.publish.homebrew.cask: true, with support for macOS notarization and shell completions.
replaceFormula: true migrates users from a Homebrew formula to the cask automatically, with tap migration support.
Generated Homebrew packages now pass brew audit --strict and brew style.
Install commands for third-party Homebrew taps now use fully qualified names to avoid conflicts with official packages.

0.35.1 (2026-09-28)

Mon, 28 Sep 2026 00:00:00 GMT

macOS binary signing and credential fallback for generated CLIs

This release adds code signing support for macOS CLI binaries and accepts publishing credentials under standard secret names used by other generators, making setup easier for repositories that already have those secrets configured.

Generated CLIs can now sign macOS binaries with a Developer ID certificate and optionally notarize them, so they run on Apple Silicon without Gatekeeper warnings.
Release workflows accept publishing credentials under common secret names used by other generators as fallbacks, so repositories with existing PyPI, RubyGems, Homebrew, or Maven Central secrets publish without adding new ones.
macOS signing runs on Linux release runners, and signing credentials are checked before anything is compiled or published to npm.

0.35.0 (2026-09-26)

Sat, 26 Sep 2026 00:00:00 GMT

Configure your integration branch and control how CLI commands nest

You can now name the branch where generated code is merged with custom work, choose how CLI subresources appear in help text and completions, and migrate a Homebrew tap from a cask to a formula without leaving two copies installed.

destinations.production.integrationBranch sets the branch that receives generated releases and versioning commits (defaults to scalar-next).
targets.cli.subresourceSeparator chooses between colon (projects:tasks create) and space (projects tasks create) in generated CLIs.
publish.homebrew.pullRequest opens a pull request against protected taps instead of pushing directly.
publish.homebrew.replaceCask migrates users from a cask to a formula automatically when the cask installs the same CLI command.
Go SDKs now name discriminated union arms and request constructors after their tags, and order response fields consistently.
Generated Swift SDKs now include a test executable that calls every operation against a mock server and writes a JSON report, as the other targets do.

1.1.34 (2026-09-25)

Fri, 25 Sep 2026 00:00:00 GMT

Desktop login fixes and improved form handling

This release resolves desktop login callback issues and brings several improvements to the API client, including better form field handling and response display on narrow screens.

Fixed desktop login callback port allocation and CORS configuration so authentication works reliably
Selecting files or editing optional form fields now automatically includes them in requests
Long response bodies remain scrollable in narrow layouts instead of expanding the entire panel
XML examples now generate correctly from schemas with proper attribute and namespace support
Mock server XML responses preserve schema metadata and report generation errors through headers

Read full release notes

1.72.1 (2026-09-25)

Fri, 25 Sep 2026 00:00:00 GMT

XML generation improvements and navigation fixes

This release introduces schema-aware XML example generation across the reference documentation, with proper support for attributes, namespaces, and OpenAPI 3.2 features. Navigation in themed layouts now scrolls correctly to selected operations.

XML examples now preserve attributes, namespaces, and element structure consistently across request bodies, response examples, code snippets, and mock responses
Authentication tooltips show clear headings with readable scheme types, API key locations and names, and formatted descriptions
Fixed sidebar navigation scrolling past operations in themes with decorative backgrounds like Kepler and Deep Space
Nested objects composed from multiple allOf schemas now display with proper indentation instead of merging fields into the parent level
Mock server XML responses include X-Scalar-XML-Error header when generation fails, with detailed diagnostics for troubleshooting

Read full release notes

0.17.0 (2026-09-25)

Fri, 25 Sep 2026 00:00:00 GMT

Schema-aware XML generation and AsyncAPI security hardening

Mock server XML responses now preserve attributes, namespaces, and proper element structure from OpenAPI schemas. AsyncAPI reference resolution is now restricted to safe locations.

XML mock responses now serialize using schema metadata instead of json2xml, preserving attributes, namespaces, and root element names from your OpenAPI document.
Mock server returns X-Scalar-XML-Error header when XML generation fails, helping you debug schema issues.
AsyncAPI external references are now restricted to the source directory and public network addresses for improved security.
Existing XML response snapshots may need updating to match the new schema-aware output format.

Read full release notes

1.1.33 (2026-09-24)

Thu, 24 Sep 2026 00:00:00 GMT

OpenAPI 3.2 support for custom methods and query parameters

This release adds OpenAPI 3.2 features to the API client, including support for custom HTTP methods like PURGE and QUERY, whole-query parameters, and improved parameter examples. SDK code samples now follow the example switcher, and several hydration and rendering issues have been resolved.

Custom HTTP methods from additionalOperations now appear in navigation and the method picker, with case-sensitive spelling preserved in requests and code samples
Whole-query parameters (in: querystring) can now be edited, validated, and sent with proper content-based serialization and percent-encoding
SDK code samples follow the request example switcher and show localized status messages when a linked sample is unavailable
Parameter examples using dataValue and serializedValue now work correctly in the editor, outgoing requests, and code snippets without double-encoding
Fixed server-side rendering hydration issues for auth forms, accordion headers, and initial sidebar selection

Read full release notes

1.72.0 (2026-09-24)

Thu, 24 Sep 2026 00:00:00 GMT

OpenAPI 3.2 query string and custom HTTP method support

This release adds OpenAPI 3.2 support for querystring parameters and custom HTTP methods (additionalOperations), plus fixes for discriminator labels, parameter examples, and server-side rendering hydration.

Querystring parameters are now editable, validated, and rendered in requests and code samples, with proper handling of percent encoding and mixed query parameter types.
Custom HTTP methods defined in additionalOperations appear in navigation and can be sent from the API client, preserving their case throughout requests and code examples.
Parameter examples using dataValue or serializedValue are now honored in the editor, outgoing requests, and generated snippets without double encoding.
Discriminator mapping values appear beside schema names in oneOf and anyOf selectors, making it clear which payload value selects each schema.
SDK code samples can now be linked to request examples using optional example and contentType fields, with unavailable samples showing localized status messages.

Read full release notes

0.16.0 (2026-09-24)

Thu, 24 Sep 2026 00:00:00 GMT

OpenAPI 3.2 querystring parameters and custom HTTP methods

This release adds support for OpenAPI 3.2 features including whole-query parameters and document-defined HTTP methods like PURGE or NOTIFY.

Querystring parameters can now be validated and handled in custom request handlers, with full support for JSON, text, and form content from the entire query string.
Custom HTTP methods defined in additionalOperations are now supported with case-sensitive routing and CORS preflight responses.
The mock server preserves custom method capitalization when routing requests to your handlers.
Boolean false schemas are now correctly preserved in validation, rejecting every value as specified in your OpenAPI document.

Read full release notes

0.34.0 (2026-09-24)

Thu, 24 Sep 2026 00:00:00 GMT

Fern project detection and SDK variables support

This release reads Fern-annotated documents automatically and adds support for x-fern-sdk-variables, which moves common path parameters like workspace or project IDs from method arguments to client constructor options. Generation is also much faster for large APIs, and the augmented OpenAPI document gains Swift code samples.

Fern-annotated OpenAPI documents are now read the Fern way when no config exists, deriving a starter configuration from x-fern-* extensions for grouping, method names, pagination, and more.
Path parameters marked with x-fern-sdk-variable become client constructor options in TypeScript, Python, Java, Kotlin, and CLI targets, simplifying method signatures for multi-tenant APIs.
Generation of large SDKs is now much faster, especially for C# and Go.
SDK code samples are now generated for each named example in the request body, linked by example name and content type for the API reference example switcher.
Swift code samples are now added to the augmented OpenAPI document, with typed arguments, pagination, and streaming operations.

0.33.5 (2026-09-23)

Wed, 23 Sep 2026 00:00:00 GMT

Better error messages and Go SDK improvements

This release improves error messages for unresolvable references, improves Go SDK generation, and lets CLI sign-in pages show your organization's logo.

Reference resolution errors now explain what went wrong and where, instead of surfacing raw errors.
Go SDKs now honor per-target skip settings.
CLI sign-in pages can show a custom organization logo set with organization.logo.
Go SDKs generated with the v2 code style now place parent path parameters in the params struct instead of taking them positionally.
The Swift generator was rebuilt from scratch, with improved models, enums, and union handling.

1.1.32 (2026-09-22)

Tue, 22 Sep 2026 00:00:00 GMT

OpenAPI 3.2 support with streaming responses and device authorization

This release adds comprehensive OpenAPI 3.2 support, including streaming response rendering, OAuth device authorization flows, and multilingual UI translations. The editor now validates and suggests OpenAPI 3.2 features while continuing to accept existing 3.1 documents.

Display JSON Lines, JSON Sequences, and multipart response parts as they arrive with cancellation support and bounded display limits
Support OAuth device authorization flows with verification codes, cancellable token polling, and stored credentials
Localize the API Client in eight languages including English, Russian, Spanish, French, German, Chinese, Arabic, and Portuguese
Preserve OpenAPI 3.2 fields such as streaming item schemas, tag hierarchy, nested encoding, and additional operations
Fix duplicate parameter rows and lost focus when editing request headers, cookies, and query parameters

Read full release notes

1.71.0 (2026-09-22)

Tue, 22 Sep 2026 00:00:00 GMT

Streaming schemas, collapsible parameters, and copy operations as Markdown

This release adds OpenAPI 3.2 streaming support with generated framed examples, a new option to collapse parameter lists, and a Copy as Markdown button for operations and webhooks. The API Client now loads on demand and supports eight languages.

Support OpenAPI 3.2 streaming item schemas with framed JSON Lines, JSON Sequence, and server-sent events examples across request bodies, responses, and code snippets.
Add Copy as Markdown buttons to operations and webhooks in both layouts, converting resolved OpenAPI documents to Markdown on demand.
Add expandAllParameters option (defaults to true) to start operation parameters collapsed and expand each one on click for cleaner long parameter lists.
Load the API Client modal and agent chat only when first opened instead of at startup, reducing initial bundle size by about 28 percent for read-only configurations.
Localize the embedded API Client in eight languages (English, Russian, Spanish, French, German, Simplified Chinese, Arabic, and Portuguese) with override support through configuration.

Read full release notes

0.12.35 (2026-09-22)

Tue, 22 Sep 2026 00:00:00 GMT

Faster startup and smarter OpenAPI reference resolution

This release makes the agent chat load faster by deferring the API client modal until you actually need it. We also improved how relative references resolve in OpenAPI 3.2 documents, honoring the $self identifier and preserving authored reference spellings.

The API client modal now loads on demand when you open a request, saving 292 KB (28%) on initial page load.
Added support for OpenAPI 3.2 $self to resolve relative references against the document's declared identity instead of its network location.
Preserved authored reference spellings through partial bundles and editable exports, so schema labels and anchors keep their existing behavior.
URI resolution now correctly handles root-relative URLs, protocol-relative URLs, query strings, and fragments across all bundler workflows.

Read full release notes

0.15.0 (2026-09-22)

Tue, 22 Sep 2026 00:00:00 GMT

OpenAPI 3.2 streaming, OAuth device authorization, and WebSocket v2

This release adds OpenAPI 3.2 support across the mock server, including streaming responses with itemSchema and OAuth device authorization flows. WebSocket handling has been upgraded to Hono Node server v2.

Generate finite SSE, JSON Lines, NDJSON, and JSON Sequence mock responses from OpenAPI 3.2 itemSchema definitions.
Support OAuth device authorization flows with verification codes, token polling, and mock approval endpoints.
Generate the correct primitive and array branches for anyOf and oneOf schemas, preserving the selected shape in mock HTTP responses.
Upgrade to Hono Node server v2 for WebSocket support. AsyncAPI callers must pass websocket to serve() instead of calling injectWebSocket().
Preserve semantics when upgrading to OpenAPI 3.2, with compatibility diagnostics for descriptions requiring author decisions.

Read full release notes

0.33.4 (2026-09-22)

Tue, 22 Sep 2026 00:00:00 GMT

Swift formatting, Go union fixes, Python circular import guards, and CLI environment picker

This release formats Swift SDKs automatically with a WebAssembly build of swift-format, fixes Go union declarations and name collisions, guards Python type re-exports against circular imports, and adds an environment picker to generated CLIs.

Generated Swift SDKs are now formatted with a pinned WebAssembly build of swift-format, so no Swift toolchain is needed on the host machine.
Swift SDKs now support macOS 12 and iOS 15, and names that collide after escaping no longer produce duplicate declarations.
Go SDKs now declare component oneOf unions that no resource configures, fixing compilation errors.
Python type package indexes now defer re-exports that would cause a circular import, and forward references now resolve through the full dotted module path.
Generated CLIs for APIs with multiple environments now support a global --environment flag with shell completions and a new environments command.

1.1.31 (2026-09-21)

Mon, 21 Sep 2026 00:00:00 GMT

Smarter parameter handling and faster example loading

This release improves how the API client handles optional parameters with pre-filled values and makes working with large API descriptions much faster by loading external examples only when needed.

Optional parameters with default or enum values are now automatically enabled so they are included in your requests
External examples load on demand when you view them, making the client faster when working with APIs that have thousands of examples
Example payloads are cached and shared across the interface to reduce network requests

Read full release notes

1.70.0 (2026-09-21)

Mon, 21 Sep 2026 00:00:00 GMT

Search multi-document selectors, lazy-load external examples, and better deep linking

This release adds filtering and keyboard navigation to the multi-document API selector, making large references easier to navigate. External examples now load on demand instead of at startup, and deep links scroll correctly even when your app has sticky headers.

Filter API documents by title with keyboard navigation in the multi-document selector
Load external examples only when visible or opened in Test Request, improving performance for large APIs
Deep-linked headings now appear below sticky or fixed headers instead of scrolling behind them
Show response example summaries and descriptions alongside their payloads
Generate AsyncAPI payload examples from JSON Schema when no explicit example is provided

Read full release notes

0.14.4 (2026-09-21)

Mon, 21 Sep 2026 00:00:00 GMT

Polish and bug fixes shipped

Read full release notes

0.33.3 (2026-09-20)

Sun, 20 Sep 2026 00:00:00 GMT

Credential redaction in TypeScript request logs

This release makes TypeScript request logging safe for APIs whose credentials use their own header or query parameter names.

TypeScript request logs now redact the credential headers and query parameters your API description names, not only a fixed list of common header names.

1.1.29 (2026-09-18)

Fri, 18 Sep 2026 00:00:00 GMT

Line wrapping toggle and OAuth2 metadata discovery

This release adds interactive line wrapping for long request and response bodies, OAuth2 authorization server metadata discovery, and several polish fixes for the API client modal and authentication flows.

Toggle line wrapping in request and response bodies to view long strings without horizontal scrolling
OAuth2 flows now support metadata URLs to automatically discover authorization endpoints
Copy button added to the request body editor for quick clipboard access
OpenAPI 3.2 response summaries, server names, and deprecated security scheme indicators now render correctly
Fixed the API client modal showing no operation when reopening a document's first request

Read full release notes

1.69.1 (2026-09-18)

Fri, 18 Sep 2026 00:00:00 GMT

OAuth2 metadata discovery and environment defaults

This release adds OAuth2 authorization server metadata discovery for OpenAPI 3.2, fixes environment variable resolution in API references, and renders new display fields from the OpenAPI 3.2 specification.

OAuth2 metadata URLs now fetch authorization server metadata to discover flows and endpoints while preserving explicit configuration
Environment variable defaults from OpenAPI documents now apply correctly in the reference and Test Request client
Response summaries, server names in server selectors, and deprecated security scheme strikethroughs now render for OpenAPI 3.2 documents
Fixed the API client modal getting stuck on a placeholder state when reopening a document's first operation after the document re-synced

Read full release notes

0.14.2 (2026-09-18)

Fri, 18 Sep 2026 00:00:00 GMT

OAuth2 metadata discovery for local development

The mock server now serves OAuth2 authorization server metadata at the configured URL, advertising local mock endpoints and the grants and scopes you have defined.

Serve OAuth2 metadata at the declared oauth2MetadataUrl with local mock endpoints and configured grants and scopes.
Normalize absolute OAuth token URLs to route paths when registering mock authentication routes.
Warn when OAuth2 metadata routes collide with declared API paths to help catch configuration issues early.

Read full release notes

0.33.2 (2026-09-18)

Fri, 18 Sep 2026 00:00:00 GMT

Credential stores, OAuth improvements, and multi-scheme authentication

This release stores generated CLI credentials in the operating system's credential store, improves OAuth flows, fixes SDKs for APIs that offer several authentication options, and reports unsupported OpenAPI operations instead of omitting them.

Generated CLIs now store credentials in your operating system's native credential store (Secret Service on Linux, Credential Manager on Windows), falling back to a permission-restricted file when no store is available.
OAuth flows gained device authorization support, better refresh token handling, and a styled callback page for browser-based sign-ins.
Schema metadata such as defaults, examples, extensions, and readOnly flags written beside a $ref is now preserved.
Unsupported OpenAPI operations (QUERY, CONNECT, custom methods) and querystring parameters are now reported with their source locations instead of being silently omitted.
SDKs for APIs that offer several authentication alternatives no longer demand every credential at once.
Generated workflows now use GitHub Actions versions that run on Node.js 24 and configure Gradle cache settings for private repositories.
Java and Kotlin code samples now show documented enum defaults instead of always showing the first enum member.

0.33.1 (2026-09-17)

Thu, 17 Sep 2026 00:00:00 GMT

Nullable references preserve metadata and improved CLI reliability

This release fixes how nullable references handle documentation and defaults, resolves CLI command collisions, and validates repository configuration before it reaches generated code.

Nullable references now preserve property documentation, defaults, and naming metadata while reusing shared models.
CLI commands no longer send path parameters twice when used positionally.
Reserved CLI flag names like --help are now handled correctly, with --version available for body fields.
Repository configuration is validated before generation, preventing shell injection risks in install commands.
Client-level options can now be marked overridable, allowing per-request overrides of default values.

1.1.28 (2026-09-16)

Wed, 16 Sep 2026 00:00:00 GMT

Improved workspace settings, authentication, and request handling

This release fixes workspace settings visibility issues, improves request body handling with schema generation and multipart arrays, and preserves mutual TLS security scheme types with read-only authentication guidance.

Fixed workspace settings options becoming unreadable while clicked, and made light theme color swatches visible
Added a button to generate request body examples from schema when custom examples hide schema fields
Optional query parameters and form body fields are now automatically enabled when you enter a value
Request duration is now available in post-response scripts as response time in milliseconds
Multipart form arrays are now sent correctly as separate parts with the same field name

Read full release notes

1.69.0 (2026-09-16)

Wed, 16 Sep 2026 00:00:00 GMT

Tree layout, shared localization engine, and response hooks

This release introduces a new tree layout for schema rendering with continuous depth rails and inline disclosure controls, ships a shared localization engine across packages, and adds response interception hooks for API references.

Schema renderer now uses a tree layout with depth rails, inline type tokens, and one disclosure grammar across parameters, headers, callbacks, and AsyncAPI messages.
Deep links and expand-all now work across every surface through a per-reference expansion store, with keyboard navigation available behind the schemaKeyboardNav flag.
Localization moves to a shared @scalar/localization package. Schema-related translation keys migrate from common.* to schema.* (e.g., common.nullable becomes schema.nullable).
Response hooks can now replace the response before the client processes it, and the onResponseReceived callback ships for API references.
Discriminator-based variant selectors render consistently for array items and object properties, with inherited fields shown once instead of twice.

Read full release notes

0.14.1 (2026-09-16)

Wed, 16 Sep 2026 00:00:00 GMT

Mock server now serves deprecated response schemas and supports HTTP QUERY

The mock server no longer returns empty bodies for deprecated response schemas. It now correctly generates values for deprecated fields and message payloads, matching real API behavior. HTTP QUERY requests are now allowed in CORS preflight responses.

Deprecated response schemas are now served with generated content instead of empty bodies.
AsyncAPI deprecated message payloads generate realistic data instead of sending null.
Response headers that generate no value are skipped rather than being deleted.
HTTP QUERY method is now supported in default CORS preflight responses.

Read full release notes

0.33.0 (2026-09-15)

Tue, 15 Sep 2026 00:00:00 GMT

Warn when re-derived placement breaks public API

Adding operations can silently move methods to new subresources when the SDK structure is derived from the OpenAPI document. This release warns when public accessors change or disappear.

Generation now warns when re-deriving resource placement renames or removes public methods, helping you catch breaking changes before you publish.
CLI error messages no longer mention SDK constructor APIs that command-line users cannot use.
TypeScript SDKs can now type format: date-time fields as JavaScript Date objects with targets.typescript.options.dateTimeType: 'Date'.
Documents can now declare pagination schemes, response unwrapping, and client settings directly through extensions like x-scalar-pagination and x-scalar-sdk-settings.

0.32.14 (2026-09-14)

Mon, 14 Sep 2026 00:00:00 GMT

Improved streaming support and model naming across languages

This release brings clearer streaming implementations across all targets, with dedicated decoders for JSON Lines responses and improved type safety. It also fixes a bug where generated types could shadow language built-in generics and break compilation.

Models named after language generics (like Array, List, and Record) no longer shadow built-in types and break compilation.
TypeScript, Python, C#, Go, Ruby, PHP, and Kotlin SDKs now have dedicated JSON Lines stream decoders instead of sharing the SSE handler.
Go SDKs using the v2 code style now support response unions that mix scalar and composite types, with flattened struct representations.
TypeScript non-string header parameters are now stringified, fixing compilation errors for boolean and numeric headers.
C# SDKs now stream newline-delimited JSON responses through Core/Jsonl.cs.

0.32.13 (2026-09-11)

Fri, 11 Sep 2026 00:00:00 GMT

Clearer error class names in TypeScript SDKs

Generated TypeScript SDKs now report distinct error class names for better debugging and log grouping.

TypeScript error classes now report their actual names instead of a generic Error, making debugging and error tracking easier.

0.32.12 (2026-09-11)

Fri, 11 Sep 2026 00:00:00 GMT

Improved package registry linking and target stability in the config schema

This release improves how the SDK generator links to package registries across platforms, fixes PHP package name resolution, and records each target's stability in the config schema.

Package registry URLs now support platform-specific addressing, including Maven Central artifacts, Go modules, and GitHub release binaries.
PHP package name resolution now prefers Composer package names over internal namespace identifiers.
The config schema now records each target's stability: in this release TypeScript, Python, Go, and CLI were marked stable and the other targets experimental.

0.32.10 (2026-09-11)

Fri, 11 Sep 2026 00:00:00 GMT

Improved streaming responses, CLI documentation, and Go SDK generation

This release improves content negotiation for streaming responses across all targets, adds command group descriptions to generated CLI tools, and fixes several Go SDK generation issues, including WebSocket support and response type handling.

Streaming responses now send the correct Accept header based on the API's declared media type instead of a hardcoded value.
Generated CLI tools now display resource descriptions in command group listings, making help output more informative.
Long CLI command samples wrap across multiple lines for better readability in documentation and man pages.
Go SDKs now handle WebSocket channels and non-JSON response bodies like zip archives.

0.32.9 (2026-09-10)

Thu, 10 Sep 2026 00:00:00 GMT

Go SDK v2 code style support and prerelease channel configuration

This release adds support for generating Go SDKs in the newer v2 code style through targets.go.options.codeStyle. It also declares prerelease channels in the configuration schema for every package-publishing target.

Go SDKs can now be generated in the v2 code style by setting targets.go.options.codeStyle to "v2", which uses param.Opt optionals and dedicated union types.
Prerelease channels are now declared in the configuration schema for all targets that publish packages.
Go request unions are now supported in the v2 code style.
The default Go code style is unchanged, so existing SDKs keep generating identical output.

0.32.8 (2026-09-09)

Wed, 09 Sep 2026 00:00:00 GMT

Improved Go SDK generation

This release improves Go code samples and header handling for both Go code styles.

Go code samples now match the code style being generated, with full support for v2 params structs and nullable fields.
Go header and cookie parameters are now guarded and unwrapped according to the code style, with correct handling of optional and required fields.

0.32.7 (2026-09-09)

Wed, 09 Sep 2026 00:00:00 GMT

Faster SDK generation and improved config handling

This release brings substantial performance improvements to SDK generation across all target languages, with large OpenAPI documents generating noticeably faster. The release also fixes several language-specific issues.

SDK generation is now significantly faster for all languages, with Go seeing the largest improvement.
TypeScript generation is faster too, and its output is unchanged.
C# SDKs now return the raw HTTP response for non-JSON binary content instead of trying to deserialize it as JSON.
Java and Kotlin SDKs now handle query parameters in path segments and nested class references in code samples correctly.

0.32.6 (2026-09-08)

Tue, 08 Sep 2026 00:00:00 GMT

Ruby gemspec metadata fix

This release fixes Ruby SDK metadata so generated gemspecs link to the repository correctly.

Generated Ruby gemspecs now strip branch suffixes from repository URLs.

0.32.5 (2026-09-08)

Tue, 08 Sep 2026 00:00:00 GMT

CLI file uploads and Java and Kotlin compilation fixes

This release fixes file uploads in generated CLIs and compilation of generated Java and Kotlin SDKs, and standardizes package install commands in augmented OpenAPI documents.

Generated CLIs now upload file contents instead of sending path strings, using curl-style syntax like @file.pdf or --document @openapi.json.
Generated Java and Kotlin SDKs now compile, fixing conflicts with reserved method names and null handling in builders.
Package install commands in augmented OpenAPI documents now use standard templates for npm and PyPI.

0.32.4 (2026-09-08)

Tue, 08 Sep 2026 00:00:00 GMT

Publishing configuration improvements and package identifier fixes

This release documents each publishing registry's setup in the configuration schema, adds options for npm package visibility and dist-tags, and fixes several package identifier bugs across Go, Swift, and other languages.

Setup instructions for each publishing registry are now documented in the configuration schema, with OIDC and token authentication steps.
TypeScript SDKs can now set npm package visibility with publish.npm.access and choose the dist-tag stable releases use with publish.npm.tag.
Go package identifiers now default to the configured client name instead of a long API slug, producing more readable package declarations.
Swift package identifiers no longer change when you regenerate an existing SDK, so published packages are not accidentally renamed.
Ruby targets using the legacy publish.gem key are migrated to publish.rubygems automatically on load, preventing silent publishing failures.

1.1.27 (2026-09-07)

Mon, 07 Sep 2026 00:00:00 GMT

Form view improvements for request bodies

This release adds control over the default request body editor view and fixes how optional form fields are handled.

You can now default the request body editor to Form view using the defaultRequestBodyView config option or the x-scalar-default-request-body-view extension in your OpenAPI document
Optional form-body properties (multipart/form-data and application/x-www-form-urlencoded) now start unchecked and are only sent when you enable them, matching how optional parameters already work

Read full release notes

1.68.0 (2026-09-07)

Mon, 07 Sep 2026 00:00:00 GMT

Default request body view and composition label improvements

You can now open the request body editor in Form view by default, and schema composition selectors show clearer labels for array types that reference models.

Set defaultRequestBodyView: 'form' in config or use the x-scalar-default-request-body-view extension to start in Form view instead of Raw.
Array branches in schema composition selectors now show the referenced model name (for example, ResourceObject[] instead of the generic array object[]).

Read full release notes

0.14.0 (2026-09-07)

Mon, 07 Sep 2026 00:00:00 GMT

Custom handler and seed code now runs in a secure sandbox

This release hardens the mock server against security risks. Custom handler and seed code is now isolated in a WebAssembly sandbox, and OpenAPI references are protected from server-side request forgery and unauthorized file access.

Custom x-handler and x-seed code now runs in a QuickJS WebAssembly sandbox with memory and time limits, preventing access to the Node.js host.
OpenAPI $ref resolution is now hardened to block private networks, loopback addresses, and metadata endpoints.
Local file references are confined to the document's own directory, preventing unauthorized file reads.
The store, faker, req, res, schema, and seed APIs continue to work as before in the sandbox.
Faker methods that take callbacks (like faker.helpers.multiple) are no longer supported due to sandbox boundaries.

Read full release notes

0.32.3 (2026-09-06)

Sun, 06 Sep 2026 00:00:00 GMT

Speakeasy pagination import and unified code samples

This release imports Speakeasy pagination configuration and unifies how code samples are generated across all target languages. SDKs generated from imported Speakeasy projects now include pagination helpers, and code samples show consistent, realistic request data in every language.

Speakeasy pagination extensions are now mapped to Scalar pagination schemes when importing a gen.yaml, so list endpoints in imported projects get typed page helpers.
Code samples now show the same request data for an operation in every language, with arrays filled and constraints like minItems honored consistently.
C# SDKs now send configured default headers from the client instead of declaring a member for them, so client-wide headers apply to every request.
Generated CLIs now coerce repeatable flag values by their item schema, so empty strings stay empty and integers parse as numbers instead of becoming null.

0.32.2 (2026-09-04)

Fri, 04 Sep 2026 00:00:00 GMT

Improved Fern project support

This release supports more Fern OpenAPI extensions, so projects using Fern's audience filtering, custom naming, and SDK variables generate correctly.

Fern projects now respect audience filtering through x-fern-audiences, converting excluded endpoints and properties to the equivalent Scalar configuration.
Fern naming extensions (x-fern-type-name, x-fern-property-name, x-fern-enum) are now read alongside x-scalar-* markers and behave identically.
Fern projects declaring both Node and browser TypeScript generators now get one client that runs in both environments.

0.32.1 (2026-09-03)

Thu, 03 Sep 2026 00:00:00 GMT

Better validation, pagination fixes, and improved SDK quality across all targets

This release improves how generated SDKs handle numeric constraints, cursor-based pagination, and request bodies. Code samples now respect bounds declared in your OpenAPI documents, pagination advances on the correct parameters, and several targets gained fixes for text responses, binary uploads, and type retention.

Code samples now honor numeric bounds like minimum, maximum, and their exclusive variants, producing realistic values that respect your schema constraints.
Cursor pagination now advances on the parameter your API declares instead of inventing one, fixing compilation errors in Kotlin and runtime failures in C#.
Generated C# SDKs can now call operations with binary request bodies and advance cursor_id pages from the last row's cursor.
Python SDK generation is significantly faster on documents with shared request models, and all imported types are now kept.
Rust SDKs serialize integer-valued numbers without decimal points and parse date-time fields leniently to handle real-world timestamp formats.

0.32.0 (2026-08-29)

Sat, 29 Aug 2026 00:00:00 GMT

Ruby trusted publishing

This release makes trusted publishing the default for Ruby SDKs.

Ruby SDKs now publish to RubyGems with trusted publishing (OIDC) by default, so destination repositories no longer need to store long-lived API keys.

1.1.26 (2026-08-28)

Fri, 28 Aug 2026 00:00:00 GMT

Header layout polish and request body fix

This release fixes the app header overflowing on mobile and resolves an issue where clicking Test Request could discard your edits when the operation was already open.

Fixed the app header overflowing the viewport on smaller screens
Clicking Test Request no longer throws away your edited request body when reopening the same operation
Added support for testing OpenAPI webhooks from both the API reference and API client
Reduced the standalone bundle size by 18 KB gzip by removing duplicate dependencies

Read full release notes

1.67.0 (2026-08-28)

Fri, 28 Aug 2026 00:00:00 GMT

Better heading hierarchy and response example syncing

This release fixes how heading levels work when rendering blocks on their own (like in docs sites), synchronizes response examples with the content type selector, and polishes several schema display issues.

Heading levels now resolve from the page outline instead of being hardcoded, so an operation rendered alone starts at h1
Response examples now reflect the content type selected in the response dropdown
oneOf selector labels now show each variant's own name instead of repeating the shared base name
OAuth scopes section only renders for oauth2 and openIdConnect schemes, not for http or apiKey schemes
Pattern hover chip moved next to Example chip so it no longer collides with constraints

Read full release notes

0.13.0 (2026-08-28)

Fri, 28 Aug 2026 00:00:00 GMT

Server-Sent Events support and improved error diagnostics

The mock server now streams text/event-stream responses as real Server-Sent Events, returns structured JSON errors that name the failed operation, and validates recursive schemas correctly.

Server-Sent Events responses are now streamed with proper data: line framing instead of buffered as a single JSON body.
Named examples in SSE responses are sent as a sequence of events in declaration order.
Unhandled errors return structured JSON with the operation method, path, and operationId instead of plain-text 500 responses.
Request validation now works for recursive schemas instead of silently falling open.
Path keys with query strings or special routing characters are properly escaped and matched against incoming requests.

Read full release notes

0.31.1 (2026-08-28)

Fri, 28 Aug 2026 00:00:00 GMT

npm publishing fix for generated CLIs

This release fixes npm publishing for generated CLIs.

Generated CLIs now include the repository metadata npm needs for provenance-signed releases.

0.31.0 (2026-08-28)

Fri, 28 Aug 2026 00:00:00 GMT

Speakeasy import improvements, faster Go and Ruby generation, and CLI package naming

This release improves importing Speakeasy projects and speeds up Go and Ruby generation for large documents. CLI package naming now uses more readable kebab-case by default.

Imported Speakeasy projects now read x-speakeasy-name-override and x-speakeasy-globals automatically.
CLI packages now use kebab-case names (for example scalar-galaxy-cli instead of scalargalaxy-cli), which targets.cli.packageName can override.
Go SDK generation is significantly faster for large documents, and Go SDKs now compile correctly with union references.
Ruby formatting now runs in parallel across worker threads, speeding up generation for large SDKs.

0.30.1 (2026-08-27)

Thu, 27 Aug 2026 00:00:00 GMT

Naming overrides, enum flattening, and type declaration fixes

This release supports vendor naming extensions in more schema positions, merges inline string enum unions into single enums, and fixes several target-specific bugs where declarations were missing or colliding.

x-stainless-naming overrides are now honored on component schemas and parameters, not just properties.
Inline string enum unions are now flattened into single enums in Go, Rust, Ruby, C#, Java, and Kotlin.
x-stainless-param and x-stainless-renameMap are now respected for parameter and enum member names.
C# SDKs now skip duplicate constructors and name array element types after their component types.
Go modules now declare every referenced type, so generated code compiles without missing identifiers.

0.30.0 (2026-08-25)

Tue, 25 Aug 2026 00:00:00 GMT

Improved formatting resilience and pagination cursor handling

This release fixes formatting of large Java and Kotlin files, pagination cursor extraction, and parameter name collisions across several languages.

Kotlin and Java SDKs no longer fail to format when a large file exceeds formatter limits: the SDK is generated in full, and the files left unformatted are reported.
Pagination now follows cursors nested inside envelope fields, so APIs that return cursors like links.next fetch every page in Python and TypeScript.
Parameters with similar names like status and status[] no longer conflict in Python, Ruby, Rust, and other languages.
C# namespaces are now fully qualified when nested resources share names with top-level resources, preventing ambiguous reference errors.
PHP page metadata fields with object shapes are now declared as models instead of strings, so their nested properties are accessible.

0.29.0 (2026-08-24)

Mon, 24 Aug 2026 00:00:00 GMT

Generated SDK tests now exercise optional parameters

The tests generated with each SDK call every operation against a mock server. Previously they passed only required parameters, leaving optional query parameters, headers, and nested body fields unexercised. Each operation with optional arguments is now called twice: once with required parameters only, and once with every parameter filled.

Each operation now gets up to two test cases: a minimal call with required parameters, and a full call that fills every optional argument the signature accepts.
Test reports label each case as required params or all params, so a failure shows which call broke.
Go, Python, and Kotlin code samples that fill optional fields now generate valid code.
Documentation samples (README, docstrings, augmented OpenAPI) keep their minimal shape, so guides stay focused on the simplest working call.
Go SDKs no longer overflow the stack or loop forever on schemas that reference themselves.

0.28.0 (2026-08-21)

Fri, 21 Aug 2026 00:00:00 GMT

AsyncAPI support and refined example rendering

This release extends imported vendor configurations to AsyncAPI documents and improves how configured examples appear across all generated SDKs.

Imported Fern and Speakeasy configurations now derive their resource tree from AsyncAPI documents, enabling full WebSocket client generation.
README examples now respect readme.exampleRequests in every target, opening with the operation you specify rather than the first one alphabetically.
Generated Python, Go, C#, Java, and Kotlin samples now render configured parameter values exactly as written and print the response property you choose.
Rust SDKs now get properly named sub-clients and request builders without model name collisions, box recursive union variants so they compile, and escape crate names that start with digits.

0.27.3 (2026-08-21)

Fri, 21 Aug 2026 00:00:00 GMT

Code sample formatting and README customization

This release adds formatting for generated Kotlin and Java code samples, makes README configuration take effect in every target, and improves how generated CLIs and SDKs document their usage examples.

Kotlin and Java code samples are now formatted with ktfmt and google-java-format at generation time, so snippets copied from documentation match the SDK's own code style.
README headings and generator attribution can now be customized through the readme config block in every supported language.
CLI READMEs now render usage examples from your configured example requests instead of sampling from the OpenAPI document, showing exactly the commands and arguments you choose.
Generated TypeScript is now formatted with Biome's WebAssembly build instead of the Biome CLI, so formatting no longer depends on the host platform.
Code sample formatters now start before any sample is built, so formatters that load asynchronously no longer leave samples unformatted.

1.1.25 (2026-08-20)

Thu, 20 Aug 2026 00:00:00 GMT

Polish and bug fixes shipped

Read full release notes

1.1.24 (2026-08-20)

Thu, 20 Aug 2026 00:00:00 GMT

Fixes for request parameters and schema switching

This release addresses several issues with parameter display and request body handling in the API client. Parameter names now appear correctly on first load, and switching between schema options properly resets edited examples.

Fixed parameter names appearing blank when first opening the Try It panel for GET endpoints
Fixed header parameters showing as empty rows when viewing operations after one with a request body
Reset edited request body examples when switching between oneOf or anyOf schema options
Improved stability of parameter row rendering using consistent component keys

Read full release notes

1.66.1 (2026-08-20)

Thu, 20 Aug 2026 00:00:00 GMT

Polish and bug fixes

Read full release notes

1.66.0 (2026-08-20)

Thu, 20 Aug 2026 00:00:00 GMT

Crawlable navigation and OpenAPI 3.2 nested tags

Navigation entries are now real anchor links that search engines can discover, and the API reference supports OpenAPI 3.2 tag nesting for multi-level hierarchies.

Sidebar navigation renders as anchor links instead of buttons, so entries can be opened in a new tab and are crawlable with path routing enabled
Server-rendered HTML includes a hidden flat list of all sidebar URLs so crawlers can discover every operation and model without executing JavaScript
OpenAPI 3.2 nested tags are now supported through the native parent field, building arbitrary-depth hierarchies with sticky breadcrumb navigation in the modern layout
Schema pattern constraints now appear as hover dropdowns instead of truncated inline text, making long regex patterns fully readable
Standalone browser build now ships with source maps for easier debugging, and a short CDN URL is available at /esm.js

Read full release notes

0.12.28 (2026-08-20)

Thu, 20 Aug 2026 00:00:00 GMT

Security and infrastructure improvements

Read full release notes

0.12.27 (2026-08-20)

Thu, 20 Aug 2026 00:00:00 GMT

Polish and bug fixes shipped

Read full release notes

0.12.13 (2026-08-20)

Thu, 20 Aug 2026 00:00:00 GMT

Package republished with npm trusted publishing

Read full release notes

0.27.2 (2026-08-20)

Thu, 20 Aug 2026 00:00:00 GMT

WebAssembly rustfmt, least-privilege workflows, and security policies

Rust SDK generation no longer needs a Rust toolchain, generated GitHub workflows ask for only the permissions they use, and every SDK ships a security policy.

Rust SDK generation no longer requires an installed Rust toolchain, using WebAssembly-compiled rustfmt instead.
Generated GitHub workflows now declare least-privilege token permissions.
Every target now ships a SECURITY.md file that clearly separates SDK and API vulnerability reporting.

0.27.1 (2026-08-18)

Tue, 18 Aug 2026 00:00:00 GMT

Better documentation and improved packaging

This release improves SDK documentation across several targets, including real javadoc jars, dependency coordinates, and resource descriptions.

Java and Kotlin SDKs now ship real API documentation in their javadoc jars instead of the empty artifacts previously published to Maven Central.
Java and Kotlin READMEs now include copy-and-paste dependency coordinates for Gradle and Maven, not only build-from-source instructions.
Generated resources are now documented with the OpenAPI tag descriptions their operations carry, filling in service class documentation that was previously missing.
Per-operation request timeouts are now respected in Java, Kotlin, TypeScript, and Python SDKs, so endpoints configured as slow no longer time out early.

0.27.0 (2026-08-17)

Mon, 17 Aug 2026 00:00:00 GMT

Connect protocol support and proto diagnostics

This release adds Connect RPC support for unary and server-streaming calls to TypeScript SDKs and improves diagnostics for proto inputs. Connect calls now send the correct protocol headers and decode error envelopes, while server-streaming calls decode frames into the same Stream interface as SSE methods. SDKs generated from proto files gain detailed diagnostics for unsupported features and configuration issues, with fixes that point at the declaring .proto file.

TypeScript SDKs generated from proto files now make working Connect calls, with the correct protocol headers, error handling, and server streaming.
Eight new diagnostics for proto inputs report problems such as query format mismatches and service placement issues, pointing at the .proto file and offering safe fixes.
Generated SDKs now ship a .gitignore file that keeps build output out of the repository from the first run.
Java and Kotlin SDKs gained async pagination, Optional returns from core APIs, and corrected enum constant naming.

0.26.0 (2026-08-14)

Fri, 14 Aug 2026 00:00:00 GMT

Generate SDKs from Protocol Buffers

You can now generate typed SDKs from gRPC services defined in Protocol Buffers. Point the generator at a compiled descriptor set or a directory of proto files, and it will produce SDKs with message models and client scaffolding in every language, and RPC methods wherever the target can send them.

SDKs can now be generated from protobuf inputs, either descriptor sets or proto directories, alongside OpenAPI and AsyncAPI documents.
RPCs with google.api.http annotations become REST endpoints, so they can be called over HTTP without a Connect runtime.
Proto inputs without a config now derive a starter config from the descriptor set, naming the SDK after the proto package.
Java and Kotlin SDKs now type format: byte fields as String instead of ByteArray, fixing base64 text handling.
Python SDKs now model allOf compositions as subclasses, import models correctly in union variants, and generate accurate client method signatures.

0.25.1 (2026-08-14)

Fri, 14 Aug 2026 00:00:00 GMT

Improved naming across targets

This release improves naming consistency across Java, Kotlin, Python, and TypeScript SDKs.

TypeScript, Java, and Kotlin SDKs now require the request body parameter when the payload cannot accept an empty object.
Java and Kotlin class names now honor custom type names from extensions and keep component titles for union arms.
Python array element models now use component names instead of numeric suffixes.
Java and Kotlin SDKs no longer declare unused type aliases for scalar components that produce no class.

1.1.22 (2026-08-13)

Thu, 13 Aug 2026 00:00:00 GMT

OAuth2 flow control, NDJSON support, and environment variables in scripts

This release adds OpenAPI extensions to customize OAuth2 flows, renders NDJSON responses instead of showing a binary file placeholder, and fixes environment variables so they work correctly in pre-request and post-response scripts.

Use x-order to control the order of OAuth2 flow tabs, and x-scalar-ignore to hide flows that cannot run in the browser (like Client Credentials) or entire security schemes from the auth selector
NDJSON responses (application/x-ndjson or application/ndjson) now render as text with each JSON record pretty-printed in the preview
Environment variables now work in scripts: pm.environment.get() reads the active environment, and pm.environment.set() persists values like bearer tokens so they survive to the next request

Read full release notes

1.65.0 (2026-08-13)

Thu, 13 Aug 2026 00:00:00 GMT

AsyncAPI component exports and model link fixes

This release exports AsyncAPI content components so you can render individual channels, operations, and messages on their own pages. It also fixes several issues with model name links that appeared clickable but scrolled nowhere.

Export AsyncAPI content components (AsyncApiChannel, AsyncApiOperation, AsyncApiMessage) from @scalar/api-reference/components
Model names now render as plain text when the models section is hidden or the referenced model is hidden via x-internal
Fix model name links for schemas grouped under a tag via x-tags so clicking them scrolls to the correct model
Model names are no longer clickable when the reference points to parameters, responses, or external files instead of schemas
Webhooks now show a webhook icon in search results to distinguish them from regular operations

Read full release notes

0.12.25 (2026-08-13)

Thu, 13 Aug 2026 00:00:00 GMT

Better international input and NDJSON response rendering

Fixed Enter key sending messages too early when typing Japanese, Chinese, or Korean text on macOS Chrome and Safari.
NDJSON responses now render as pretty-printed JSON records instead of showing as a binary file.
Removed a debug log statement that fired every time you toggled the response view.

Read full release notes

0.25.0 (2026-08-13)

Thu, 13 Aug 2026 00:00:00 GMT

AsyncAPI support and new diagnostics rules

This release accepts AsyncAPI 3.x documents alongside OpenAPI, generating SDKs from AsyncAPI channels served over HTTP and WebSocket. Diagnostics now apply only to the document types they are written for, and AsyncAPI findings each get their own rule and documentation page.

AsyncAPI 3.x documents are now accepted, and channels become streaming methods where the target's runtime supports them.
AsyncAPI channels served over http or https become streaming methods with the same framing OpenAPI operations use: text/event-stream as SSE and NDJSON as JSON Lines.
Diagnostics now apply only to the document types they are written for, so OpenAPI-specific diagnostics no longer report findings on AsyncAPI documents.
Twelve AsyncAPI diagnostics now have dedicated rules and documentation pages, covering protocol support, supported schema formats, and channel configuration issues.
Generated Python SDKs now install in editable mode with pip install -e, fixing a metadata error when working from a cloned repository.

0.24.0 (2026-08-12)

Wed, 12 Aug 2026 00:00:00 GMT

Resilient multi-target builds and improved Kotlin and Java code generation

This release makes multi-target SDK generation more reliable by isolating failures per language, so one broken target no longer blocks the rest. Kotlin and Java SDKs also gain significant improvements to naming, type handling, and composition.

Multi-target builds now continue when one language fails, reporting errors per target instead of aborting the whole run.
Kotlin and Java union variants are now named after their backing component instead of their schema title, making names more predictable and collision-free.
Discriminator tags with a single legal value are now pinned as JSON constants in Kotlin and Java.
Objects with only additionalProperties now generate dedicated holder classes in Kotlin and Java instead of generic maps, with validation and type safety.
Kotlin and Java models composed with allOf now inherit their base's members instead of redeclaring them, significantly reducing generated code size for recursive models.

0.23.8 (2026-08-11)

Tue, 11 Aug 2026 00:00:00 GMT

Fern extensions and TypeScript improvements

This release adds support for Fern's server naming, base path, and global parameter extensions, so Fern-generated OpenAPI documents keep their environments and constructor options. TypeScript SDKs now handle open object schemas and punctuated query parameters.

Fern's x-fern-server-name, x-fern-default-url, x-fern-base-path, and x-fern-global-parameters extensions now map to client environments and constructor options.
TypeScript SDKs now declare [k: string]: unknown index signatures for schemas marked additionalProperties: true, so you can access undeclared properties without casting.
Query parameters with punctuated names like time_ranges[] now keep the document's exact spelling instead of an invented camelCase key when propertyCasing: 'wire' is set.
Python discriminated unions no longer cause import errors or broken code samples for union request bodies.

0.23.7 (2026-08-11)

Tue, 11 Aug 2026 00:00:00 GMT

Agent-friendly CLIs and package attribution

Generated CLIs are now agent-friendly with structured output formats and actionable error codes. All generated packages now attribute their publisher organization. Multiple fixes improve TypeScript, Python, and Ruby SDK quality.

Generated CLIs now offer a token-efficient toon output format, classified error codes to branch on, and actionable hints for authentication and permission failures.
All generated packages now take the publisher name, contact, and documentation URL from organization config in TypeScript, Python, Rust, PHP, C#, Java, Kotlin, and Dart.
Generated CLIs now ship formatted source.
Python SDK auth validation errors now name the client options to set rather than request headers, and HTTP Basic auth pairs credentials per scheme correctly.
TypeScript clients now validate required credentials at construction and expose protected auth hooks per security scheme for customization.

0.23.6 (2026-08-08)

Sat, 08 Aug 2026 00:00:00 GMT

Improved Rust type resolution and Ruby documentation quality

This release brings significant improvements to Rust SDK generation, including proper type resolution for wrapped references and cleaner generated code. Ruby SDK documentation is now complete and runnable, with corrected examples and proper installation instructions.

Rust SDKs now resolve types wrapped in single-member allOf correctly, consistent with TypeScript, Go, Python, Java, Kotlin, Ruby, PHP, and C#.
Generated Rust SDKs no longer export base structs that nothing in the crate refers to, resulting in cleaner public APIs.
Ruby README examples are now complete and runnable, with client initialization, corrected error handling, and accurate code samples.
Rust webhook signature verification now implements the Standard Webhooks scheme in full, fixing an issue where genuine deliveries were rejected.

0.23.5 (2026-08-08)

Sat, 08 Aug 2026 00:00:00 GMT

Rust SDK modules and OAuth pagination fix

This release brings modular organization to generated Rust SDKs and resolves an issue preventing Rust OAuth from composing with pagination.

Rust SDKs now split models into separate modules per resource instead of one flat file, improving navigation in large SDKs.
Rust SDKs now compile when OAuth token exchange is combined with paginated operations.

0.23.4 (2026-08-08)

Sat, 08 Aug 2026 00:00:00 GMT

TypeScript formatting checks and locked Ruby dependencies

This release fixes the formatting check in generated TypeScript SDK workflows and ships Ruby SDKs with a Gemfile.lock.

The formatting check in generated TypeScript SDK workflows now passes, with Biome upgraded to 2.5.7 and formatting that stays stable across runs.
Ruby SDKs now ship with Gemfile.lock, so contributors use consistent development toolchain versions.

0.23.3 (2026-08-08)

Sat, 08 Aug 2026 00:00:00 GMT

Improved parameter naming and Ruby SDK refinements

This release refines how path parameters are named and ordered across TypeScript, Ruby, and Rust SDKs, with better handling of edge cases like reserved words and name collisions.

TypeScript path parameters now use camelCase names instead of the raw wire spelling, consistent with the rest of the SDK.
Ruby params classes now list path parameters first, in URL order.
TypeScript methods no longer declare the same parameter name twice, which caused parse errors.
Ruby SDKs no longer declare writeOnly properties on response models.
Rust webhook events now use variant names based on the event type, with typed payloads instead of raw JSON.

1.1.21 (2026-08-07)

Fri, 07 Aug 2026 00:00:00 GMT

Cookie preset switcher and API improvements

This release introduces a streamlined way to work with global cookies that share the same name, alongside fixes for header parameter behavior and multipart file display.

Global cookies with the same name now collapse into a single row with a dropdown to switch between preset values (e.g. Culture: PL or EN), sending only the selected value.
Header parameters with x-disabled: false now stay enabled while editing, fixing a bug where optional headers were incorrectly reset on every keystroke.
Long file names in multipart forms now truncate with an ellipsis instead of overflowing, with the full name visible on hover.
Plugins can now access the active server and custom fetch implementation in the beforeRequest hook for resolving relative URLs and making network calls.
Updated build and runtime dependencies to their latest compatible versions for improved stability.

Read full release notes

1.64.1 (2026-08-07)

Fri, 07 Aug 2026 00:00:00 GMT

Security hardening and accessibility improvements

This release hardens the API reference against untrusted OpenAPI documents, resolves critical accessibility violations, and fixes several rendering issues including duplicate enum values and recursive discriminator schemas.

Dangerous URLs from OpenAPI documents (like javascript: links) are now sanitized to prevent script execution when clicked
Fixed ARIA violations in the sidebar and client tabs to improve screen reader accessibility
Array parameters with enum items no longer list their values twice
Discriminator schemas that reference their base type no longer render recursively
Selected server is now preserved when the configuration is updated

Read full release notes

0.23.2 (2026-08-07)

Fri, 07 Aug 2026 00:00:00 GMT

Complete C# READMEs and cross-language fixes

This release rewrites README generation for the experimental C# target and fixes bugs across TypeScript, Go, Python, and Ruby SDKs.

C# SDKs now generate complete READMEs with feature documentation, client options tables, pagination guides, and Agent Skill files, like the other targets.
Go SDKs now URL-escape string path parameters and reject path traversal attempts, so requests cannot reach the wrong resource.
TypeScript SDKs now declare property-less object schemas as Record types instead of empty interfaces, so free-form JSON bodies are usable.
Python SDKs now type-check nested properties with reserved keyword names, by splitting them into private TypedDict bases.
Ruby gem metadata now takes author, contact, and documentation links from organization config instead of generic branding.

0.23.1 (2026-08-07)

Fri, 07 Aug 2026 00:00:00 GMT

Inheritance fixes and fuller Java and Kotlin client documentation

This release fixes inheritance handling and TypeScript path parameter typing, and documents the complete Kotlin and Java client surface.

Kotlin and Java clients now document their complete API surface, including lifecycle methods and resource accessors.
Subclasses now keep the members contributed by composition branches, even when a base class declares identical properties.
Path parameters typed by models from other resources are now namespace-qualified in TypeScript, fixing compilation errors.

0.23.0 (2026-08-07)

Fri, 07 Aug 2026 00:00:00 GMT

Improved formatting, authentication validation, and removed experimental docs target

This release ships automatic formatting for PHP, Dart, and C++ SDKs, validates authentication at client construction for Kotlin and Java, and removes the experimental docs target in favor of serving the generated OpenAPI document directly.

The experimental docs target is removed, and generated SDKs still write openapi.augmented.json, which you can serve with @scalar/api-reference directly.
PHP, Dart, and C++ SDKs are now formatted automatically with WebAssembly-based tooling, and each ships its formatter config so later format runs change nothing.
Kotlin and Java clients now validate authentication at construction and fail with a helpful message when credentials are missing, instead of sending unauthenticated requests.
Generated SDK workflows now check formatting for TypeScript, Python, Go, Dart, C++, and Rust, so shipped code stays formatted.

0.22.10 (2026-08-06)

Thu, 06 Aug 2026 00:00:00 GMT

Ruby Sorbet enum fixes and runnable Rust READMEs

Ruby request enums are now spelled correctly for Sorbet users, and Rust READMEs show complete runnable programs.

Ruby request enum types are now spelled correctly for Sorbet users when a schema is used in both requests and responses.
Rust README quickstart and api.md setup blocks now show complete runnable programs that match the generated code samples.

0.22.9 (2026-08-05)

Wed, 05 Aug 2026 00:00:00 GMT

Generated code samples are now formatted with real language formatters

Code samples generated for Go, Python, PHP, CLI, Rust, and TypeScript are now automatically formatted with each language's real formatter before they ship. Samples appear consistently styled in augmented OpenAPI documents, generated Markdown docs, and source doc comments.

Generated code samples are now formatted with pinned WebAssembly builds of gofmt, ruff, mago, shfmt, rustfmt, and Biome.
Formatted samples follow the style config each generated SDK ships, so snippets copied from docs do not change when first formatted in your project.
Curated code samples from your OpenAPI document are preserved exactly as written.
Formatters are pinned dependencies, so samples are styled identically on hosts without Go, Python, PHP, or shell tooling installed.
Samples a formatter rejects ship unformatted instead of failing the run.

0.22.8 (2026-08-05)

Wed, 05 Aug 2026 00:00:00 GMT

Webhook helpers for Java and Kotlin

Java and Kotlin SDKs gain webhook helpers in this release.

Java and Kotlin SDKs now generate typed webhook helpers with signature verification, event unions, and client accessors.

0.22.7 (2026-08-05)

Wed, 05 Aug 2026 00:00:00 GMT

C# SDK generation rebuilt, formatters move to WebAssembly

This release rebuilds the experimental C# target with JSON-backed models and dual service hierarchies, and moves formatters to WebAssembly so they no longer depend on host toolchains.

C# SDKs now generate JSON-backed models, dual service hierarchies, pagination wrappers, and async streaming support.
Go and Python formatters now run as WebAssembly builds, removing the dependency on host toolchains while improving speed and reliability.
Rust request models now derive Default and gain builder constructors, removing verbose None-filling boilerplate.
Ruby enum constants now keep digit-glued acronyms without spurious underscores.

0.22.6 (2026-08-05)

Wed, 05 Aug 2026 00:00:00 GMT

Service interfaces and formatting updates

This release adds positional overloads and documentation to generated Java and Kotlin service interfaces, and formats TypeScript and Python SDKs automatically.

Java and Kotlin service interfaces now have positional overloads, KDoc documentation, and resource management annotations.
TypeScript SDKs are now formatted with Biome at generation time, and Python SDKs with ruff.
Ruby clients now keep the nullability of map value schemas, fixing types for optional values in hash properties.
Rust clients now send Accept headers, with content negotiation for streaming and vendor JSON types.

0.22.5 (2026-08-05)

Wed, 05 Aug 2026 00:00:00 GMT

Code sample polish and Ruby and Rust improvements

This release improves the readability of generated code samples across all languages, names Ruby request body arguments after their models, and adds a runnable Cargo.toml to Rust installation snippets.

Code samples in every language now separate the request from response handling with a blank line.
Ruby SDKs now expose request body models as named keyword arguments matching their registered model name.
Rust installation snippets now include a runnable Cargo.toml example with the required dependencies.

0.22.4 (2026-08-04)

Tue, 04 Aug 2026 00:00:00 GMT

Java and Kotlin runtime improvements and pagination fixes

This release rebuilds the generated Java and Kotlin runtime core with improved error handling, logging, and client options. It also fixes pagination behavior in Ruby and adds PHP code sample generation.

Java and Kotlin SDKs now generate operation-specific response classes and wrap every pagination scheme in page wrappers.
The Java and Kotlin runtime now includes timeout, sleeper, clock, and log level options, plus per-status error exceptions and improved credential handling.
Ruby auto-pagination no longer stalls after the first page, and query parameters are now comma-joined instead of repeated.
PHP code samples are now generated and appear in the README, api.md, and SKILL.md with real argument values.
In generated SDK repositories, retitling a release pull request to release: <version> now reliably releases that version, and the release pull request's version check always runs.

0.22.3 (2026-08-04)

Tue, 04 Aug 2026 00:00:00 GMT

Client option defaults, improved Rust and Kotlin params, and rebuilt PHP SDK generation

This release applies configured client option defaults in every target, improves documentation accuracy in Rust, and rebuilds PHP SDK generation.

Client options now honor configured default values in every language, applied after environment variables.
Kotlin and Rust params classes now handle headers properly and resolve name collisions.
Ruby streaming and pagination now work with custom event handlers and every pagination scheme.
PHP SDK generation was rewritten, with PSR-4 file placement and params handling.
Rust documentation now reflects the generated code accurately, with correct method names and type links.

0.22.2 (2026-08-03)

Mon, 03 Aug 2026 00:00:00 GMT

Schema handling improvements and Ruby SDK rewrite

This release fixes schema coercion issues that caused property-less objects to be treated as closed instead of open maps, and ships the complete Ruby SDK rewrite with typed resources, webhook helpers, and repository scaffolding.

Schemas with additionalProperties: {} are now treated as open maps instead of closed objects.
Ruby SDKs now ship with a fully rewritten architecture, including typed resources, webhook helpers, and pagination support.
C# SDKs now include repository scaffolding (.editorconfig, devcontainer, contribution guidelines).
Rust SDKs gain a pluggable HTTP transport, the OAuth client-credentials flow, and improved pagination handling.
Kotlin and Java SDKs now render dedicated enum, union, and model classes.

1.1.20 (2026-07-31)

Fri, 31 Jul 2026 00:00:00 GMT

OAuth2 improvements, form editor for JSON bodies, and AsyncAPI broker auth

This release adds a form view for JSON and YAML request bodies, brings OAuth2 token acquisition directly to bearer auth schemes, and adds credential inputs for all AsyncAPI broker security types.

JSON and YAML request bodies now have a form view with dropdowns, required badges, and per-field validation — switch between Form and Raw with a single click
Bearer auth schemes can now acquire tokens through OAuth2 flows without switching auth methods, with an inline Authorize button and automatic token routing
All eight AsyncAPI broker security scheme types (SASL, X509, encryption, GSSAPI) now have dedicated credential input forms
Confidential OAuth2 clients can now use PKCE together with a client secret, following RFC 9700 recommendations
OAuth2 scope selection no longer drops changes when clicking checkboxes quickly, and checkboxes include accessible labels for screen readers

Read full release notes

1.64.0 (2026-07-31)

Fri, 31 Jul 2026 00:00:00 GMT

Plugin loading from URLs, improved schema composition, and accessibility fixes

This release introduces a new pluginUrls configuration option so integrations that pass JSON configuration can load plugins without custom bundles. Schema rendering now properly handles sibling properties in allOf compositions and multiple oneOf/anyOf groups, while accessibility improvements include proper ARIA attributes and print styles.

New pluginUrls configuration option allows loading API Reference plugins from URLs, enabling JSON-based integrations like Docker and server-side frameworks to use plugins without replacing the entire bundle
OAuth scopes required for an operation now appear as a dedicated section below the description instead of only inside the Auth Required badge popover
Schemas with multiple oneOf or anyOf groups under allOf now render every group with its own selector in position, rather than silently dropping all but the first
Sibling properties next to a single-member allOf are now preserved and merged with the base schema, fixing cases where fields and titles were lost
Print styles flatten the reference into document flow so saving to PDF no longer renders expanded content over following text or truncates long examples

Read full release notes

0.22.1 (2026-07-31)

Fri, 31 Jul 2026 00:00:00 GMT

Improved Kotlin and Java SDK generation with better model placement and type safety

This release refines how Kotlin and Java SDKs are structured, with clearer model placement and package layouts. It also improves documentation accuracy by removing unreachable default values and adds better handling of quoted numeric samples.

Kotlin and Java models are now placed by ownership, with resource-claimed models in resource directories and shared models at the root.
Operation type names and package layouts now use camelCase directories and proper prefixes for client methods.
Field documentation no longer includes unreachable default values on required parameters, preventing misleading assertions about server behavior.
Quoted numeric samples are now normalized to their declared types, fixing type-check failures in generated code.
Go SDK generation is faster on large OpenAPI documents.

0.22.0 (2026-07-31)

Fri, 31 Jul 2026 00:00:00 GMT

Diagnostics engine and standalone CLI executables

This release introduces a structured diagnostics system that checks your OpenAPI documents and SDK configs, and ships CLI targets as compiled binaries that run without Node.

A new diagnostics engine with 23 validation rules, suppressions, and auto-fixable config suggestions checks your OpenAPI document and config before generation.
Generated CLIs now ship as standalone executables for Linux, macOS, and Windows, so brew install or a direct download works without Node.
Generated CLIs include shell completion scripts for bash, zsh, and fish: run mycli completion zsh and eval it for Tab completion on commands and flags.

0.21.1 (2026-07-30)

Thu, 30 Jul 2026 00:00:00 GMT

Reference cycle fixes across targets

This release refines how individual targets render reference cycles, so each one generates compact, compilable code.

Reference cycles in schemas are now broken where they re-enter, so each declaration is expanded once and generated code stays compact.
Python SDKs now use trailing imports and quoted forward references for mutually recursive models.
Go SDKs now add pointers at cyclic named references to avoid invalid recursive types, and merged union roots spell cyclic fields correctly.
Kotlin and Java models that reference themselves no longer shadow their enclosing class with nested accessor objects.
Generated LICENSE files now name a real copyright holder instead of template placeholders, defaulting to the SDK name and current year.

0.21.0 (2026-07-30)

Thu, 30 Jul 2026 00:00:00 GMT

Support for reference cycles and improved Go module paths

This release brings full support for OpenAPI documents with reference cycles across all target languages, plus new configuration options for Go module paths and improved handling of nullable components.

SDKs now generate correctly for documents with reference cycles, without combinatorial expansion or running out of memory.
Go targets now support goModulePathOverride to decouple module paths from repository names, with validation that prevents injection.
Generated TypeScript, Python, and Go clients now default to the first configured environment instead of always choosing production.
Nullable component references are now reused instead of being inlined at each usage site.
Generated CLIs now include man pages for their commands, installed automatically through npm.

0.20.1 (2026-07-28)

Tue, 28 Jul 2026 00:00:00 GMT

Performance improvements and configuration fixes

This release speeds up TypeScript SDK generation for large OpenAPI documents and fixes Homebrew formula configuration handling.

TypeScript SDK generation is now much faster on large schemas.
Homebrew formulas now respect the configured homepage and description instead of silently ignoring them.
Go SDKs no longer include unused response structs for request-only models.
Python webhook event payloads composed with allOf now render as subclasses, removing thousands of duplicated lines.

0.20.0 (2026-07-28)

Tue, 28 Jul 2026 00:00:00 GMT

Speakeasy config import and faster compilation for large OpenAPI documents

This release imports Speakeasy gen.yaml configuration files and dramatically improves compilation speed for large OpenAPI documents.

Speakeasy gen.yaml files can now be imported to configure package names, module names, and retry settings in every target language.
Compilation is much faster for large OpenAPI documents.
OpenAPI documents with many shared components now compile instead of slowing down exponentially and hanging.
Registry manifests now use one-line summaries instead of multi-paragraph descriptions, fixing PyPI publish rejections.
Python SDKs now name classes after their usage context and handle complex union variants without shadowing imports.

0.19.9 (2026-07-27)

Mon, 27 Jul 2026 00:00:00 GMT

Better inheritance and cleaner type generation

This release improves how generated SDKs handle OpenAPI inheritance patterns, resulting in cleaner type hierarchies and smaller output bundles.

TypeScript and Python SDKs now follow inheritance chains through wrapper schemas, reducing extra namespace exports.
TypeScript SDKs now generate inheritance at nested declaration sites.
Go SDKs no longer ship an unused JSON runtime package, reducing their size.
Python SDKs now honor x-stainless-naming overrides for properties with special characters.
Generated release workflows now let you set the version number by editing the release pull request title.

0.19.8 (2026-07-25)

Sat, 25 Jul 2026 00:00:00 GMT

Go webhook parsing, Python ergonomics, and TypeScript param handling

This release improves generated SDKs across multiple languages with enhanced webhook support in Go, improved Python and TypeScript SDK ergonomics, and support for naming overrides through vendor extensions.

Go SDKs now generate scoped webhook helper services for parsing and verifying webhook events, with clean container accessors.
Python SDKs now ship the aiohttp extra correctly and expose auth headers publicly.
Python SDKs now handle reserved keywords like from as aliased attributes for type-safe construction.
TypeScript methods now handle params more cleanly, with query pass-through and object shorthand.
x-stainless-naming overrides are now honored for property and type names across languages.

0.19.7 (2026-07-24)

Fri, 24 Jul 2026 00:00:00 GMT

Scoped webhook helpers and improved type naming consistency

This release introduces scoped webhook parse and verify methods in Python and TypeScript SDKs, so you can configure namespace-scoped webhook unwrap methods that get their own dedicated resources and types. Operation type names now join resource and method segments verbatim.

Python and TypeScript SDKs now support scoped webhook helpers that generate dedicated parse and verify resources under custom namespaces (for example notifications.webhooks.parse_pet).
Operation class and type names in Python and TypeScript now join resource and method segments verbatim instead of de-duplicating shared prefixes.
Python SDKs now name nested classes for scoped types correctly, preserving acronyms and initialisms inherited from parent types.
TypeScript declaration files are now rewritten at build time to prevent type-check errors in consumer projects that disable skipLibCheck.

0.19.6 (2026-07-24)

Fri, 24 Jul 2026 00:00:00 GMT

Type improvements across TypeScript, Python, Go, and Ruby

This release improves type accuracy across TypeScript, Python, Go, and Ruby SDKs. Generated clients now handle vendor JSON media types, pagination models, and authentication schemes more precisely.

TypeScript clients now send the correct Accept header for vendor JSON media types like application/vnd.pet.v2+json.
Python resource methods now type object and array query parameters instead of collapsing them to generic objects.
Go array and map element type names now re-case generated names consistently.
Ruby SDKs no longer break when an operation is named initialize, and request params classes are generated once per name.
Pagination page type aliases are now declared once in their owning module and imported elsewhere, removing duplicate declarations.

0.19.5 (2026-07-23)

Thu, 23 Jul 2026 00:00:00 GMT

Improved type inheritance and naming conventions across all languages

This release brings significant improvements to how SDKs handle inheritance, naming, and type generation across Go, Python, and TypeScript targets.

Python and TypeScript SDKs now render allOf responses that extend a single public model as subclasses, avoiding duplicate field declarations and duplicated nested types.
Go type naming is improved, with per-operation response families for repeated roots, enums named per usage, and better handling of nested resource params types.
Python nested helper classes now use their full ancestry path in their names instead of short names with numeric suffixes.
Webhook helpers are now opt-in through config, so webhook resources and signature verification are generated only when configured.
json and xml now render as Json and Xml by default instead of JSON and XML in every language.

0.19.4 (2026-07-21)

Tue, 21 Jul 2026 00:00:00 GMT

Code sample fixes and consistent response decoding

This release fixes how generated code samples name client instances, ensures all languages decode the same response body when an API offers multiple content types, and corrects several language-specific type and documentation inconsistencies.

Code samples now import the configured client class name instead of overwriting it with the example variable name.
Installation snippets in augmented OpenAPI documents now update when you rename a package, and each language appears only once.
Kotlin and Java SDKs now return the JSON response body when an operation offers both JSON and text, as other languages do.
C# SDKs now compile when multiple resources share the same leaf name, by placing service classes in namespaces.
Generated documentation for C#, Rust, Dart, PHP, C++, and Swift now shows the actual type names those languages generate instead of generic placeholders.

0.19.3 (2026-07-21)

Tue, 21 Jul 2026 00:00:00 GMT

Publishing improvements and Go and Python type fixes

Trusted publishing workflows are more reliable across all language targets.

Publishing workflows for Python, Kotlin, Ruby, and other targets now use top-level dispatch to support OIDC trusted publishing.
Go SDKs with object-typed query parameters that reference component schemas now compile.
Python SDKs now place request-side types under their resource's path and use sibling param modules.

0.19.2 (2026-07-21)

Tue, 21 Jul 2026 00:00:00 GMT

Agent skill files and improved publishing workflows

Generated SDKs now ship with SKILL.md files that teach AI coding agents how to install, authenticate, and call your API. Publishing workflows now support OIDC trusted publishing, and Go releases warm the public module proxy for immediate availability.

Generated SDKs now include SKILL.md files for AI agents, covering installation, authentication, API calls, pagination, streaming, WebSockets, and error handling (opt out with settings.agentSkill: false).
Publishing workflows now use OIDC trusted publishing with workflow_dispatch triggers instead of reusable workflows.
Go SDKs now warm the public module proxy after each release, so packages are available on pkg.go.dev immediately.
README files now use a consistent generic intro sentence and link to the api.md operation catalog instead of embedding the OpenAPI description.

1.63.0 (2026-07-20)

Mon, 20 Jul 2026 00:00:00 GMT

SDK installation instructions now available for custom layouts

Consumers building custom reference layouts from blocks can now render SDK installation instructions again. The SdkInstallationInstructions component and getRenderableSdks helper are now exported from @scalar/api-reference/blocks.

Exported SdkInstallationInstructions component from blocks entry point
Exported getRenderableSdks helper for custom layouts that render x-scalar-sdk-installation

Read full release notes

0.19.1 (2026-07-20)

Mon, 20 Jul 2026 00:00:00 GMT

Smarter type generation and model ownership improvements

This release refines how models are placed and exported across languages, with significant improvements to Go and TypeScript.

TypeScript SDKs now export only configured models at the top level, so internal types no longer leak.
Go SDKs now collapse open enum unions to their enum type instead of boxing them in an interface.
Client-scoped models now live in the client methods module instead of shared files.
Go SDKs now share enum declarations between read structs and params types where appropriate.
Discriminator fields in Go response unions now list every variant value instead of only the first one declared.

0.19.0 (2026-07-17)

Fri, 17 Jul 2026 00:00:00 GMT

Improved release workflow and version management

This release streamlines how generated SDKs are versioned and released. Release pull requests now target the default branch directly, making it easier to see what will ship. SDK versioning is now fully independent of the generator and managed by your own release tooling.

Release pull requests now target the default branch directly, so they show the full pending release diff.
Documentation for handling conflicted release pull requests and adopting existing repositories is improved.
The release workflow now syncs merged releases back to the scalar-next integration branch automatically.

0.17.0 (2026-07-17)

Fri, 17 Jul 2026 00:00:00 GMT

Generated SDKs now manage their own versions and releases

This release moves version ownership entirely to generated SDK repositories. Versions are no longer configured in the generator; instead, generated repositories start at 0.1.0 and use release-please to bump versions automatically from conventional commits. The platform manages the branch layout, which needs no secrets, personal access tokens, or workflow-approval settings in destination repositories.

SDK versions are now managed by the destination repository, not the generator config: every generated package starts at 0.1.0, and release tooling reads the current version at runtime.
Generated repositories now include release-please configuration: regenerated code lands on scalar-generated, merges into scalar-next with your custom code, and release pull requests open against scalar-next without manual approval.
Releases are cut automatically on merge, publish through a reusable workflow, and promote to the default branch, all with the default GitHub token and no personal access token or GitHub App token.
Go SDKs now generate typed union catch-all structs, reuse canonical params types across operations, and place shared models in the correct packages with clean nested type names.
Breaking change: repositories generated by earlier versions must regenerate to adopt the new branch layout and release-please workflows, and the versionFiles field is removed from the manifest.

1.1.19 (2026-07-16)

Thu, 16 Jul 2026 00:00:00 GMT

Polish and bug fixes shipped

Read full release notes

1.1.18 (2026-07-16)

Thu, 16 Jul 2026 00:00:00 GMT

Border radius now scales from a single theme variable

Setting a custom border radius in your theme is simpler and more predictable. Override --scalar-radius once to rescale every corner in the interface, including buttons, inputs, and panels. Setting it to zero now produces a fully squared-off UI.

Border radius tokens now derive from --scalar-radius, so changing one variable rescales the entire interface
Setting --scalar-radius to zero produces a fully square theme with no rounded corners
Two new radius tokens added: --scalar-radius-2xl (12px) and --scalar-radius-3xl (16px)
Replaced hardcoded border radius values throughout the UI with theme tokens

Read full release notes

1.62.9 (2026-07-16)

Thu, 16 Jul 2026 00:00:00 GMT

Updated package README with refreshed platform overview

Read full release notes

1.62.8 (2026-07-16)

Thu, 16 Jul 2026 00:00:00 GMT

Border radius scale now derives from a single variable

Setting --scalar-radius to zero now produces a fully square interface. Previously, larger radius tokens were independent, so rounded corners persisted on components using --scalar-radius-lg, --scalar-radius-xl, or rounded-full even when the base radius was set to zero.

All border radius tokens now derive from --scalar-radius, so overriding one variable rescales the entire interface
Setting --scalar-radius: 0 now removes all rounded corners across the UI
Added --scalar-radius-2xl (12px) and --scalar-radius-3xl (16px) tokens to fill out the scale
Added --scalar-radius-full token for pill shapes and circles
All default values remain unchanged, so existing themes render identically unless you were relying on independent radius tokens

Read full release notes

0.12.22 (2026-07-16)

Thu, 16 Jul 2026 00:00:00 GMT

Updated package README with refreshed platform overview

Read full release notes

0.12.21 (2026-07-16)

Thu, 16 Jul 2026 00:00:00 GMT

Border radius now scales from a single variable

Setting --scalar-radius now rescales every corner in the interface, including larger radii and pills. Previously, overriding the base radius left some corners rounded because tokens were independent.

All border radius tokens now derive from --scalar-radius, so setting it to 0 squares off the entire interface
Two new tokens, --scalar-radius-2xl (12px) and --scalar-radius-3xl (16px), fill out the scale
The rounded-2xl and rounded-3xl Tailwind utilities now work correctly
Default values are unchanged, so existing themes render identically unless you were overriding --scalar-radius alone

Read full release notes

0.12.7 (2026-07-16)

Thu, 16 Jul 2026 00:00:00 GMT

Updated README with refreshed Scalar platform overview

Read full release notes

0.16.9 (2026-07-16)

Thu, 16 Jul 2026 00:00:00 GMT

Improved union handling and pagination fixes across Go and Python SDKs

This release improves union type modeling in Go, pagination in several languages, and parameter handling. Generated SDKs now model complex union types more accurately and page through results correctly.

Go SDKs now model heterogeneous unions (mixing scalars with objects or arrays) as typed sealed interfaces instead of falling back to any.
Go path parameters now appear in method signatures in URL path order, fixing incorrect resource addressing when an OpenAPI document declares parameters out of order.
Python cursor pagination now pages backward when a previous-cursor parameter is set.
Python methods with oneOf request bodies now validate required argument groups at runtime before sending the request.
Go SDKs now advertise non-JSON text response types (like text/html) in their Accept headers.

1.1.16 (2026-07-15)

Wed, 15 Jul 2026 00:00:00 GMT

Clearer authentication warnings

Authentication warnings now name the document type and distinguish unsupported authentication types from security schemes with a missing type.

Authentication warnings now correctly identify the document type (AsyncAPI or OpenAPI) instead of always saying OpenAPI
Unsupported AsyncAPI authentication types now show a clear message indicating the feature is not yet supported

Read full release notes

1.62.6 (2026-07-15)

Wed, 15 Jul 2026 00:00:00 GMT

AsyncAPI authentication and plugin auth fixes

AsyncAPI documents now render document-wide authentication with the same interactive selector used for OpenAPI. The plugin auth accessor now correctly reads credentials from the client store.

AsyncAPI documents now render document-wide authentication in the introduction with full input UI for shared scheme types (HTTP, OAuth2, OpenID Connect, API Key)
Security requirements are derived from the union of each server's security settings, with an optional no-auth choice when some servers allow unauthenticated connections
AsyncAPI OAuth2 availableScopes are mapped to OpenAPI scopes so the scope list renders correctly
Security scheme warnings now name the actual document type (AsyncAPI or OpenAPI) instead of always saying OpenAPI
Plugin auth accessor now reads from the correct store so plugins see the credentials and security schemes users actually entered

Read full release notes

0.12.6 (2026-07-15)

Wed, 15 Jul 2026 00:00:00 GMT

Fixed npm package README display

This release fixes a metadata collision that caused the package README to display incorrectly on the npm registry. The mock server now publishes with the updated README that includes the Scalar platform overview.

Read full release notes

0.16.8 (2026-07-15)

Wed, 15 Jul 2026 00:00:00 GMT

Go SDK naming improvements and Python date serialization

This release improves Go SDK type naming, removes duplicate types from Go SDKs, and fixes Python date serialization.

Go SDKs now embed allOf branches backed by components instead of flattening them, removing duplicate types.
Python SDKs now serialize date fields as ISO 8601 strings, fixing JSON encoding errors that previously stopped requests from being sent.
Go type naming is now more accurate for response unions, shared components, and request body types.

0.16.7 (2026-07-14)

Tue, 14 Jul 2026 00:00:00 GMT

Rust edition 2024, Go SDK refinements, and improved type safety

This release upgrades generated Rust crates to edition 2024 and brings major improvements to Go SDK generation, including better enum handling, typed union types, and more consistent naming.

Generated Rust crates now target edition 2024 with rust-version 1.85, fixing build issues with older Cargo versions.
Rust string enums now capture unrecognized values in an Unknown(String) variant that preserves the original value on round-trip.
Go SDKs now generate shared top-level enums for configured models instead of duplicating them per usage.
Go SDKs now generate typed unions for oneOf and anyOf response bodies instead of falling back to map[string]any.
Go naming is improved: discriminated oneOf request bodies are marked required, enum constants drop a spurious Value prefix, and ttl, ui, and ip use consistent initialism casing.

0.16.6 (2026-07-11)

Sat, 11 Jul 2026 00:00:00 GMT

Go binary streaming, Python WebSockets, and union body improvements

This release improves generated Go and Python SDKs with better handling of binary responses, WebSocket connections, and polymorphic request bodies. Shared models and acronym casing are also more consistent across generated SDKs.

Go SDKs now stream binary responses as *http.Response instead of buffering them into memory, as TypeScript and Python SDKs do.
Python SDKs gained typed WebSocket support with event handlers, pre-connect send queues, and raw receive and send helpers.
Go SDKs now generate sealed interface unions for oneOf and anyOf request bodies when every variant is a local type.
Python SDKs now organize shared models into a dedicated types/shared/ subpackage and resolve nested response model references correctly.
Go SDKs now apply initialism casing to acronyms like SKU in exported identifiers while keeping wire format tags.

0.16.5 (2026-07-10)

Fri, 10 Jul 2026 00:00:00 GMT

Improved Python and Go SDK generation with multipart uploads and WebSocket support

This release brings significant improvements to Python and Go SDK generation, including proper multipart file upload handling, WebSocket connection support, better type modeling, and refined response handling.

Go SDKs now serialize multipart/form-data request bodies with file uploads using the multipart encoder instead of JSON.
Python SDKs gained full WebSocket support with typed event handlers, message queues, and raw send and receive helpers.
Python response models now resolve nested references correctly and organize shared types into a dedicated subpackage.
Python paginated methods now use proper item types instead of falling back to generic object types.
Empty-response methods now keep application/json Accept headers when configured.

0.16.4 (2026-07-09)

Thu, 09 Jul 2026 00:00:00 GMT

Constructor option aliases and backward cursor pagination

Clients can accept constructor option names an existing SDK used, and TypeScript pagination pages backward through previous-cursor fields.

clientSettings.baseUrlAliases lets clients accept constructor option names from other generators, like Speakeasy's serverURL.
TypeScript pagination now preserves backward cursor pagination when using previous-cursor request fields.

0.16.3 (2026-07-09)

Thu, 09 Jul 2026 00:00:00 GMT

Improved response type naming

This release fixes how generated SDKs name response types when you declare models by endpoint reference.

Response types now use the declared model name when you register a component by endpoint reference, instead of falling back to an operation-derived name.
Single-use paginated list envelopes get operation-derived names, while shared envelopes keep their configured names.

1.1.15 (2026-07-08)

Wed, 08 Jul 2026 00:00:00 GMT

Cookie persistence and auth selector polish

This release fixes cookie handling so server-set tokens like Django CSRF survive page reloads, and removes confusing delete buttons from read-only security schemes in the API reference.

Response cookies (such as Django csrftoken) now persist across page reloads and are replayed on later requests
Auth selector no longer shows delete buttons for security schemes that cannot be removed

Read full release notes

1.62.5 (2026-07-08)

Wed, 08 Jul 2026 00:00:00 GMT

Deep-link fixes and read-only auth for plugins

Response property deep links now scroll correctly on fresh loads, and plugins can read authentication state without being able to mutate it.

Response property deep links now work when expandAllResponses is off and scroll to the correct operation on page load
Plugins can read the global authentication state through a new read-only accessor in lifecycle hooks and view components
Security scheme delete buttons are now hidden in API reference (schemes come from the document and cannot be removed)
Schemas with allOf base properties next to oneOf or anyOf now keep shared fields visible in each branch
Protocol and server filters no longer appear in the classic layout header for AsyncAPI documents

Read full release notes

0.16.2 (2026-07-08)

Wed, 08 Jul 2026 00:00:00 GMT

Python WebSocket improvements and TypeScript union naming refinements

This release improves Python WebSocket methods with better parameter handling and shared connection state, and refines TypeScript union member naming around wire discriminator tags.

Python WebSocket connect methods now expose path parameters and options as typed arguments, with a shared send queue.
TypeScript union member interfaces are now named after their wire discriminator tags or owning properties.
Empty object schemas now generate named empty interfaces instead of generic records, preserving type names across migrations.

0.16.1 (2026-07-08)

Wed, 08 Jul 2026 00:00:00 GMT

Improved Python imports and deprecation hints

This release ships cleaner Python import deduplication and fixes for deprecated method hints across all languages.

Python resource modules now deduplicate their imports, so a type used by several operations is imported once instead of once per method.
Deprecated method hints now show the canonical method name in each target language's own casing convention.
Python request body types are now generated as params-only TypedDict files instead of reusing response model optionality.
TypeScript list-envelope models now declaration-merge with their resource class instead of forcing a rename.

0.16.0 (2026-07-08)

Wed, 08 Jul 2026 00:00:00 GMT

Auto-discovered pagination and improved TypeScript SDK generation

This release brings smart pagination detection for list operations and a new opt-in SDK-style casing mode for TypeScript. Multiple fixes land for generated Python, Go, Kotlin, and TypeScript SDKs.

List operations now detect pagination schemes automatically when importing configurations, matching request parameters and response fields against configured pagination patterns to generate typed page helpers.
TypeScript SDKs can now opt into idiomatic camelCase property names with propertyCasing: 'sdk', while still sending and reading the correct wire names through schema-guided request and response mapping.
Generated TypeScript SDKs now organize shared models in a single src/resources/shared.ts module and re-export them from the client namespace for easier migration.
Code samples now use OpenAPI examples and schema formats when available, producing more realistic samples in every target language.
Python request types now preserve nested union-of-object shapes instead of collapsing to object, and reserved keyword field names are handled through private TypedDict bases.

0.15.2 (2026-07-07)

Tue, 07 Jul 2026 00:00:00 GMT

Improved name collision handling and Python SDK enhancements

This release improves how the generator handles name collisions across all language targets, ensuring unique model and method names while keeping the names from your OpenAPI document readable. Python SDKs now generate more idiomatic code with better support for union request bodies, multipart uploads, and binary responses.

Model and method names are now globally unique, with deterministic collision resolution in every target.
TypeScript exports now resolve name collisions by keeping the names from your OpenAPI document and renaming the generator's own internal names instead.
Python SDKs now generate overloaded method signatures for union request bodies and handle multipart file uploads.
Go and Rust SDKs now use consistent numeric suffixes for name collisions.
Generated CLI commands now point at renamed root resources correctly when those collide with client member names.

0.15.1 (2026-07-04)

Sat, 04 Jul 2026 00:00:00 GMT

Fixed TypeScript resource class name collisions

This release fixes a naming issue in generated TypeScript SDKs.

TypeScript SDKs no longer generate colliding resource class names when operation models are configured on parent resources.

0.14.0 (2026-07-03)

Fri, 03 Jul 2026 00:00:00 GMT

Generator version tracking and TypeScript naming improvements

Generated SDKs now include provenance metadata that records which generator version produced them, making it easier to track SDK origins and ensure reproducible builds.

Every generated SDK now includes a manifest file with a generatorVersion field recording the exact generator version that created it.
TypeScript resource class names no longer collide across unrelated nested resources, reducing numeric suffixes in generated code.
Generated TypeScript SDKs now expose WebSocket send and receive event aliases through resource index modules and client namespaces.

1.62.2 (2026-07-02)

Thu, 02 Jul 2026 00:00:00 GMT

AsyncAPI tag layout improvements and SSR hydration fix

This release fixes how AsyncAPI tags render in the reference documentation and resolves a hydration warning when server-side rendering.

AsyncAPI channels nested under tags now align with the rest of the document instead of being indented too far
AsyncAPI tag headers now display a Channels card that lists the channels in the tag, replacing the empty Operations card
Fixed an SSR hydration mismatch caused by scrollbar detection running too early on the client

Read full release notes

0.12.16 (2026-07-02)

Thu, 02 Jul 2026 00:00:00 GMT

Remove duplicate heading from start panel

The Agent Chat start panel no longer renders a hidden heading tag, preventing SEO issues on API reference pages where crawlers were detecting duplicate headings.

Read full release notes

1.1.12 (2026-06-30)

Tue, 30 Jun 2026 00:00:00 GMT

OAuth2 flows and URL imports now work in the desktop app

Interactive OAuth2 (authorization code and implicit flows) never actually worked in the desktop app because the renderer runs on file:// URLs. This release adds loopback redirect support so you can complete OAuth2 flows through your system browser.

OAuth2 authorization code and implicit flows now work via a local loopback server that captures the redirect from your system browser
Importing OpenAPI documents from a URL no longer fails with a Content Security Policy error

Read full release notes

1.62.1 (2026-06-30)

Tue, 30 Jun 2026 00:00:00 GMT

Advanced schema rendering and stability fixes

This release improves support for OpenAPI 3.1 schemas with JSON Schema 2020-12 features, polymorphic types from code generators like NSwag, and fixes a crash affecting deeply nested or recursive schemas.

Generic schemas using $dynamicRef now render their concrete bound types instead of empty shapes (for example, PaginatedResponse<User> shows the User fields)
Polymorphic types with only a discriminator.mapping (common in NSwag output) now show the variant dropdown again
Fixed a stack overflow crash when rendering schemas with self-references inside allOf branches

Read full release notes

1.1.11 (2026-06-26)

Fri, 26 Jun 2026 00:00:00 GMT

Synced example pickers and improved array parameter display

Example selections now sync across all operations, making it easier to see the same use case throughout your API. Array parameters in deepObject style also display with the correct trailing brackets to match the actual request.

Selecting a request or response example now applies that choice to every operation that defines the same example
Array parameters in deepObject style now show trailing brackets (like filter[ids][]) so the table matches the serialized request
Editing array parameter values preserves the array type when writing back to the request

Read full release notes

1.62.0 (2026-06-26)

Fri, 26 Jun 2026 00:00:00 GMT

API Reference UI localization, AsyncAPI protocol filters, and custom legal links

This release adds built-in localization support for seven languages with automatic RTL layout for Arabic, introduces protocol and server filters to AsyncAPI navigation, and ships an OpenAPI extension for custom legal links.

Configure API Reference UI language with built-in English, Russian, Spanish, French, German, Simplified Chinese, and Arabic translations, plus automatic RTL direction for Arabic locales
Filter AsyncAPI sidebar navigation by protocol and server to narrow down operations reachable over a selected protocol or server
Render custom legal links (privacy policy, imprint) in the introduction using the new x-scalar-links OpenAPI extension
Request and response example pickers now sync across operations—selecting an example on one operation selects it on every operation that defines it
Show propertyNames type and format constraints (like string · uuid) for map keys in schema documentation

Read full release notes

1.1.10 (2026-06-22)

Mon, 22 Jun 2026 00:00:00 GMT

Request signing, auth token fixes, and parameter editing improvements

This release adds a new hook for request signing use cases, fixes auth tokens being dropped when document names contain spaces or special characters, and improves the behavior of query parameter renaming in the request editor.

New requestBuilt hook and onRequestBuilt callback receive the exact fetch Request sent over the wire, making request body signing possible for multipart/form-data and other use cases
Fixed Bearer tokens being dropped when documents loaded via sources have non-slug-safe names (spaces, special characters)
Renaming auto-expanded query parameter keys now commits the change on blur and persists in both the request and table
Header mutations in the new requestBuilt hook apply to the outgoing request (unlike onBeforeRequest which rebuilds after the callback)
Query parameters not defined in the schema are now surfaced as their own rows after renaming

Read full release notes

1.61.0 (2026-06-22)

Mon, 22 Jun 2026 00:00:00 GMT

AsyncAPI operations, messages, and protocols now render inline

This release brings AsyncAPI documentation to parity with dedicated AsyncAPI tools by rendering operations and their message payloads inside each channel. Server and protocol labels now appear throughout, making it clear which servers and transports each channel and message uses.

AsyncAPI operations and their messages (with payload and header schemas) now render nested inside each channel in both modern and classic layouts
Channel headers show which servers they are available on and their protocols, while message headers display every protocol they are carried over
New requestBuilt client plugin hook and onRequestBuilt callback expose the exact fetch Request sent over the wire, enabling request signing with accurate body hashes
Fixed oneOf and anyOf being dropped when nested inside allOf, so composition variants now render alongside merged base properties
Object properties factored out alongside composition keywords (anyOf, oneOf, allOf, not) now render correctly instead of being hidden

Read full release notes

0.12.0 (2026-06-22)

Mon, 22 Jun 2026 00:00:00 GMT

Mock AsyncAPI documents and validate all parameter styles

The mock server can now generate event-driven APIs from AsyncAPI 3.1 documents, serving channels over WebSocket and Server-Sent Events. Request validation has been extended to cover header and cookie parameters, and all OpenAPI serialization styles are now deserialized before validation.

AsyncAPI 3.1 documents are mocked through a new createAsyncApiMockServer function that serves channels over WebSocket and SSE.
Messages are generated from payload schemas using the same generator as REST endpoints, and custom transports can be added through an extension point.
The Docker mock server auto-detects AsyncAPI documents and starts the event-driven engine automatically.
Header and cookie parameters are validated against their schemas, with case-insensitive header matching and spec-compliant filtering of Accept, Content-Type, and Authorization.
Array and object parameters are deserialized by their OpenAPI style (form, simple, deepObject, label, matrix, and delimiter styles) before validation, so complex query strings and path segments validate correctly.

Read full release notes

1.1.9 (2026-06-17)

Wed, 17 Jun 2026 00:00:00 GMT

Editable Watch Mode sources and improved input performance

This release makes it easier to manage Watch Mode documents and improves responsiveness across request, authentication, and environment variable tables.

Edit the Watch Mode source URL directly in document settings without needing to delete and re-import your collection
Faster, more responsive input fields for parameters, headers, and environment variables with the new lightweight CodeInputLite component
OAuth2 and OpenID Connect token requests now route through the desktop app's secure IPC layer

Read full release notes

1.60.0 (2026-06-17)

Wed, 17 Jun 2026 00:00:00 GMT

Plugin view slots, sidebar customization, and layout polish

This release adds a new plugin extension point at the top of your documentation and lets plugin views appear in the sidebar. It also ships a handful of fixes that improve deep linking, schema rendering, and responsive layout behavior.

Plugins can now inject components before the introduction section with the new content.start view slot
Plugin views can opt in to sidebar navigation with the sidebar visibility option
Deep links to nested schema properties now expand collapsed sections and scroll into view automatically
The introduction loading skeleton now mirrors the real layout so the page does not jump when your document loads
Fixed sidebar overlap at exactly 1000px wide by aligning mobile and desktop breakpoints

Read full release notes

0.11.1 (2026-06-17)

Wed, 17 Jun 2026 00:00:00 GMT

Smarter response selection and format fixes

This release improves how the mock server chooses which response to return when your API defines multiple status codes, and fixes edge cases with line-delimited JSON formats and array responses.

The mock server now prefers 2xx success responses over error codes when no specific status is requested, making default mocks more realistic
JSONL and NDJSON responses are now correctly formatted as single-line records instead of pretty-printed JSON
Singular examples are automatically wrapped in arrays when the response schema expects an array

Read full release notes

1.1.8 (2026-06-11)

Thu, 11 Jun 2026 00:00:00 GMT

Path item references and SDK tab sync

This release fixes OpenAPI specs that use path item references and improves code example consistency across the client.

Operations now appear correctly when OpenAPI paths use $ref to reference components.pathItems
Authentication scheme dropdown now opens reliably when multiple API reference modals are present
Selecting a language in Client Libraries now switches all operation code examples to that language

Read full release notes

1.59.3 (2026-06-11)

Thu, 11 Jun 2026 00:00:00 GMT

Path item references, redirects, and SDK tab sync

This release fixes rendering when path items use component references, improves navigation for custom section labels, and syncs SDK installation tabs with code examples across all operations.

Operations now appear correctly when OpenAPI path items reference components.pathItems instead of inlining methods
Old model bookmarks automatically redirect to custom section slugs when you have renamed the models section
Selecting a language in SDK installation tabs now switches every operation's code sample to that language
Empty info link lists no longer push down the download button on mobile

Read full release notes

0.11.0 (2026-06-11)

Thu, 11 Jun 2026 00:00:00 GMT

Request validation and improved authentication

The mock server now validates incoming requests against your OpenAPI schema by default, returning detailed contract violations instead of mock responses when parameters or bodies do not match. Authentication evaluation has been corrected to follow the OpenAPI specification.

Request validation is now on by default—path, query parameters, and JSON bodies are checked against the schema, returning 422 with violation details when they do not match
Use the Prefer header to control mock responses: code=404 picks a specific status, example=bob selects a named example from the examples map
Authentication now evaluates security requirements as OR-of-ANDs, inherits document-level security when operations define none, and validates credential shape for Basic and Bearer tokens
Set validateRequest: false to restore previous behavior and always return mock responses

Read full release notes

1.1.6 (2026-06-09)

Tue, 09 Jun 2026 00:00:00 GMT

Polish and bug fixes shipped

Read full release notes

1.59.2 (2026-06-09)

Tue, 09 Jun 2026 00:00:00 GMT

Restore deprecated source field for SDK installation commands

The deprecated source field on x-scalar-sdk-installation is now supported again for backward compatibility. When present, it is automatically appended to the description as a fenced code block, or used on its own when there is no description. The description field remains the recommended way to document installation commands.

Read full release notes

1.59.1 (2026-06-09)

Tue, 09 Jun 2026 00:00:00 GMT

Fixed examples panel layout in operation view

Read full release notes

1.1.5 (2026-06-08)

Mon, 08 Jun 2026 00:00:00 GMT

SDK code samples, AsyncAPI servers, and form encoding fixes

This release adds support for SDK-generated code samples from popular tools, introduces an AsyncAPI server selector, and fixes how form data is sent to match your API specification.

Read custom code samples from x-scalar-examples, x-stainless-snippets, x-stainless-examples, and x-readme.code-samples extensions
Added AsyncAPI server selector with variable editing and persistence
Fixed multipart and urlencoded form data to respect OpenAPI encoding styles like deepObject
Simplified the client picker when only one option is available

Read full release notes

1.59.0 (2026-06-08)

Mon, 08 Jun 2026 00:00:00 GMT

AsyncAPI server and channel parameters, CSP nonce support, and expanded schemas

This release brings full AsyncAPI server selection and channel parameter rendering to the API reference, adds Content Security Policy support with a nonce option for strict script-src, and introduces an expandAllSchemaProperties configuration to show nested properties by default.

AsyncAPI channel address parameters are now rendered in the API reference, showing their enum, default, and example values alongside operation parameters
A server selector for AsyncAPI documents displays constructed connection URLs and persists selection and variable changes to the workspace store
Pass a nonce option to run the API reference under a strict script-src Content Security Policy with no unsafe-inline or unsafe-eval
The new expandAllSchemaProperties configuration expands nested schema properties by default while keeping manual collapse controls available
Custom SDK installation instructions from x-scalar-sdk-installation now render in the introduction card with support for rich Markdown and multiple code blocks per language

Read full release notes

0.12.7 (2026-06-08)

Mon, 08 Jun 2026 00:00:00 GMT

Polish and bug fixes shipped

Read full release notes

0.10.17 (2026-06-08)

Mon, 08 Jun 2026 00:00:00 GMT

Improved OpenAPI reference resolution performance

The mock server now resolves OpenAPI $ref nodes on demand instead of processing the entire document upfront, improving startup time and memory usage for large specifications.

References are now resolved lazily only when needed for generating responses
Nested references (like a Planet referencing a User) now resolve correctly in examples
Broken references are handled gracefully without failing document processing

Read full release notes

1.1.4 (2026-06-01)

Mon, 01 Jun 2026 00:00:00 GMT

Code splitting, WebSocket support, and performance improvements

This release introduces a new ESM standalone build with code splitting that reduces the initial bundle size by ~570 KB, adds WebSocket session support for AsyncAPI operations, and improves first-request performance when using scripts.

New ESM standalone build with code splitting reduces initial load from 3.32 MB to 2.73 MB
Fixed code samples with duplicate languages (like Python and Python Async) now appearing as separate selectable entries
Scripts sandbox now warms up on mount to eliminate lag on the first request
Added WebSocket session transport with plugin hooks for AsyncAPI operations

Read full release notes

1.58.0 (2026-06-01)

Mon, 01 Jun 2026 00:00:00 GMT

AsyncAPI support and improved bundle performance

This release brings AsyncAPI documents closer to feature parity with OpenAPI. AsyncAPI specs now render schemas as Models, display channels in the content area, and surface introduction headings in the sidebar and search. We also shipped a new ESM standalone bundle with code splitting that reduces the initial load by over 500 KB.

AsyncAPI schemas render as Models in the sidebar, content, and search alongside OpenAPI schemas
AsyncAPI channels appear in the content area with their address and description, grouped by tags when configured
New ESM standalone bundle with code splitting drops initial load from 3.32 MB to 2.73 MB by lazy-loading the API client modal and icon library
Configure the Models section label with modelsSectionLabel to use OpenAPI-style Schemas terminology or custom labels
Customize the browser tab title with setPageTitle, called whenever the section in view changes

Read full release notes

1.57.5 (2026-05-27)

Wed, 27 May 2026 00:00:00 GMT

Response content type selector works with expanded responses

When every response is expanded by default, the content type picker now stays above the response body and remains clickable.

Read full release notes

1.1.3 (2026-05-22)

Fri, 22 May 2026 00:00:00 GMT

Script execution and build reliability improvements

This release fixes script execution in production builds and strengthens environment configuration validation to catch missing variables before deployment.

Fixed pre-request and post-request scripts not running in production Electron builds
Build now fails early when required environment variables are missing
Added analytics tracking for document saves and registry sync operations

Read full release notes

1.1.2 (2026-05-21)

Thu, 21 May 2026 00:00:00 GMT

Logout now works correctly in the desktop app

We fixed a navigation issue that caused the Electron desktop app to break when logging out, and improved how environment variables are loaded across different build targets.

Read full release notes

1.1.1 (2026-05-21)

Thu, 21 May 2026 00:00:00 GMT

Improved multipart forms and better security

This release brings cleaner multipart form handling, better deep-linking from API Reference, and hardened security across the board.

Nested object properties in multipart forms now expand into individual editable rows and serialize as clean JSON parts
Opening the client from API Reference now lands you directly on the selected operation
Response previews are now protected against XSS and referrer leakage
Pre-request and post-response scripts run in an isolated sandbox, removing unsafe-eval from the main app
Web client now defaults to proxy.scalar.com while desktop skips the proxy unless you configure one

Read full release notes

1.57.3 (2026-05-21)

Thu, 21 May 2026 00:00:00 GMT

Custom fetch support and clearer schema examples

You can now pass a custom fetch implementation through API Reference configuration so Test Request calls honor options like credentials. Schema examples also render more reliably for null, whitespace-only, and value or externalValue shapes.

Added customFetch configuration and deprecated the previous fetch option with an automatic migration path.
Fixed rendering for null, whitespace-only, and value or externalValue schema examples.

Read full release notes

1.1.0 (2026-05-16)

Sat, 16 May 2026 00:00:00 GMT

Improved sidebar filtering and analytics fixes

This release brings better document organization with combined title and namespace filtering in the sidebar, plus fixes for analytics tracking and content security.

Sidebar now filters documents by both title and namespace together with clearer controls
Fixed analytics events not tracking login and logout actions
Improved team picker to match dashboard design
Relaxed image loading restrictions to support HTTPS sources

Read full release notes

1.57.2 (2026-05-15)

Fri, 15 May 2026 00:00:00 GMT

Security badge layout stays intact

The security badge no longer shrinks in tight layouts, so operation headers stay readable on smaller screens.

Read full release notes

1.0.13 (2026-05-14)

Thu, 14 May 2026 00:00:00 GMT

Scalar Client 1.0 — team workspaces, registry sync, conflict resolution, and a rebuilt experience

Intro walkthrough — What's new in Scalar Client 1.0

Scalar Client 1.0 is the first major release of the open-source HTTP client as a focused desktop and web app. Workspaces are now built around teams and the Scalar Registry: you can sync in real time, resolve conflicts when edits diverge, and manage API descriptions and versions without leaving the client. Local workspaces stay fast and offline-friendly with explicit save and revert before anything ships upstream.

Team workspaces and Scalar Registry

Team workspaces and Scalar Registry

First-class team workspaces with a stable team identity that survives slug renames on the server.
Live sync with the Scalar Registry so shared API descriptions stay aligned across machines.
Conflict detection and resolution when local edits and registry changes disagree.
Team switching from the header menu, with routing that follows the active team after sign-in.
Returning to a workspace restores the tabs and routes you had open last time.

Local workspaces

Local workspaces

Save and revert flows for local-only drafts so you can experiment safely before publishing.
Clear separation between personal local workspaces and team-backed workspaces.
IndexedDB-backed persistence with a migration path from older localStorage installs.

Registry from the client

Registry from the client

Add, update, and remove API descriptions tied to the registry without switching tools.
Create and manage document versions from the same UI you use to send requests.
Integrated registry adapter so the client speaks the same contracts as the hosted product.

Client shell, layout, and polish

Layout tuned for small screens: breadcrumbs tuck away, workspace switching moves into the menu, and the address bar stacks cleanly with send actions.
Command palette surfaces inline validation instead of silently disabling invalid actions.
Electron window transparency and splash handling so team workspace reloads and resize flashes feel steadier.
Monaco editor bundling moved to ESM-aligned workers for a more reliable desktop build.

Read the full changelog on GitHub

1.57.0 (2026-05-14)

Thu, 14 May 2026 00:00:00 GMT

AsyncAPI support, better search, and cleaner teardown

API Reference now treats AsyncAPI documents as first-class citizens alongside OpenAPI, with clearer badges, download labels, and improved search across polymorphic schemas.

Added AsyncAPI badges and a Download AsyncAPI Document action.
Improved search ranking for parameters, request bodies, and model fields, including oneOf, anyOf, and allOf schemas.
Fixed listener leaks when createApiReference instances are destroyed repeatedly.
Raised the mobile sidebar z-index so it stays above page content.
Resolved $ref values in additionalProperties before rendering schemas.

Read full release notes

0.12.0 (2026-05-14)

Thu, 14 May 2026 00:00:00 GMT

AsyncAPI documents in the Agent workspace

The Agent chat UI now understands workspace documents that can be either OpenAPI or AsyncAPI, so mixed API descriptions load through the same flow.

Read full release notes

0.10.14 (2026-05-04)

Mon, 04 May 2026 00:00:00 GMT

Smaller initial bundle for the chat UI

Tailwind CSS is now code-split so the Agent chat interface loads less CSS up front.

Read full release notes

0.10.10 (2026-04-27)

Mon, 27 Apr 2026 00:00:00 GMT

0.10.9 (2026-04-26)

Sun, 26 Apr 2026 00:00:00 GMT

Clearer messaging around Agent credits

We updated the copy around Agent credits so free limits and usage are easier to understand in the chat UI.

Read full release notes

0.10.2 (2026-04-21)

Tue, 21 Apr 2026 00:00:00 GMT

OAuth refresh endpoints in mock authentication routes

Mock Server now generates authentication routes for OAuth refreshUrl endpoints defined in your OpenAPI security schemes.

Read full release notes

0.10.0 (2026-04-15)

Wed, 15 Apr 2026 00:00:00 GMT

Random data generation for mock responses

Mock Server can now generate random but schema-aware data for responses, making local testing feel closer to real API behavior.

Read full release notes