chore: 🔖 release new versions

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@redocly/cli@2.40.0

Minor Changes

• Added an --ignore-headers option to the experimental drift and proxy commands.
  It takes a comma-separated list of header names to skip in undocumented-header checks, and a trailing * matches by prefix (for example x-consumer-*).
  Use it to silence headers a gateway or proxy adds that are not part of the API contract.

Patch Changes

• Fixed the drift command's schema-consistency rule reporting false-positive "Undocumented query parameter" findings for deepObject-style query parameters.
  Traffic keys like namespace[id]=...&namespace[name]=... are now matched to the documented namespace parameter, and the reconstructed object is validated against the parameter schema.
• Fixed an issue where the drift command's schema-consistency rule reported false-positive request findings for exchanges the server rejected with a 4xx client error.
  For example: missing required parameter, missing required body, request-body schema mismatch.
  A 4xx response means the server never accepted the request.
  Validating it against the operation's success-path contract flagged the server's own correct rejection as drift.
  Response-side validation still runs, so a documented error response whose shape differs from reality is still reported.
• Fixed an issue where the drift command's security-baseline rule reported false-positive "credential exposure over insecure HTTP transport" warnings for traffic captured against loopback hosts, for example: localhost, *.localhost, 127.0.0.0/8, [::1].
  Sandboxed recordings no longer produce transport warnings.
• Updated @redocly/openapi-core to v2.40.0.

@redocly/openapi-core@2.40.0

Minor Changes

• Added linting for the OpenAPI 3.2 Example Object dataValue field.

@redocly/respect-core@2.40.0

Patch Changes

• Updated @redocly/openapi-core to v2.40.0.

---

Note

Low Risk
Diff is limited to version numbers and release documentation; no application source changes in this PR.

Overview
Release 2.40.0 — bumps @redocly/cli, @redocly/openapi-core, and @redocly/respect-core from 2.39.0 to 2.40.0 and folds prior changesets into published changelogs (docs/@v2/changelog.md, package CHANGELOGs, package-lock.json).

@redocly/cli@2.40.0 documents shipped behavior (not new code in this diff): --ignore-headers on experimental drift and proxy; drift fixes for schema-consistency (deepObject query params, skipping request checks when the server returns 4xx) and security-baseline (no insecure-transport warnings on loopback); dependency on openapi-core v2.40.0.

@redocly/openapi-core@2.40.0 adds linting for the OpenAPI 3.2 Example Object dataValue field.

@redocly/respect-core@2.40.0 only updates its openapi-core dependency to v2.40.0.

^{Reviewed by Cursor Bugbot for commit 4c35459. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

⚠️ Redocly Config version mismatch: The latest published version of @redocly/config is 0.52.0, but the current version is 0.51.0. Please consider updating to the latest version.

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	70.4% (🎯 69%)	7781 / 11051
🔵	Statements	70.1% (🎯 69%)	8097 / 11550
🔵	Functions	74.8% (🎯 73%)	1562 / 2088
🔵	Branches	62% (🎯 61%)	5249 / 8466

File Coverage

No changed files found.

Generated in workflow #10741 for commit 4c35459 by the Vitest Coverage Report Action

[github-actions]

Performance Benchmark (Lower is Faster)

CLI Version	Bundle	Lint	Check Config
cli-2.0.0	▓▓▓▓▓▓▓ 1.23x ± 0.02	▓▓▓▓▓▓▓▓▓ 1.29x ± 0.02	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.70x ± 0.02
cli-2.11.1	▓▓▓▓▓▓▓ 1.23x ± 0.01	▓▓▓▓▓▓▓▓▓ 1.30x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.70x ± 0.02
cli-2.13.0	▓▓▓▓▓▓▓▓ 1.24x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.58x ± 0.02	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.74x ± 0.02
cli-2.14.2	▓▓▓▓▓▓▓ 1.23x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.55x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.76x ± 0.02
cli-2.27.0	▓▓▓▓▓▓▓▓ 1.24x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.47x ± 0.02	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.78x ± 0.02
cli-2.30.2	▓▓▓▓▓▓▓▓▓ 1.27x ± 0.02	▓▓▓▓▓▓ 1.17x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.80x ± 0.02
cli-2.31.0	▓▓▓▓▓▓▓▓▓ 1.29x ± 0.02	▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.47x ± 0.02	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.79x ± 0.02
cli-2.32.1	▓▓▓▓▓▓▓▓▓ 1.27x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.47x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.81x ± 0.02
cli-latest	▓ 1.00x (Fastest)	▓ 1.00x (Fastest)	▓ 1.00x (Fastest)
cli-next	▓ 1.00x ± 0.01	▓ 1.00x ± 0.01	▓ 1.00x ± 0.01