chore: 🔖 release new versions

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@redocly/cli@2.40.0

Minor Changes

• Added an --ignore-headers option to the experimental drift and proxy commands.
  It takes a comma-separated list of header names to skip in undocumented-header checks, and a trailing * matches by prefix (for example x-consumer-*).
  Use it to silence headers a gateway or proxy adds that are not part of the API contract.

Patch Changes

• Fixed the drift command's schema-consistency rule reporting false-positive "Undocumented query parameter" findings for deepObject-style query parameters.
  Traffic keys like namespace[id]=...&namespace[name]=... are now matched to the documented namespace parameter, and the reconstructed object is validated against the parameter schema.
• Fixed an issue where the drift command's schema-consistency rule reported false-positive request findings for exchanges the server rejected with a 4xx client error.
  For example: missing required parameter, missing required body, request-body schema mismatch.
  A 4xx response means the server never accepted the request.
  Validating it against the operation's success-path contract flagged the server's own correct rejection as drift.
  Response-side validation still runs, so a documented error response whose shape differs from reality is still reported.
• Fixed an issue where the drift command's security-baseline rule reported false-positive "credential exposure over insecure HTTP transport" warnings for traffic captured against loopback hosts, for example: localhost, *.localhost, 127.0.0.0/8, [::1].
  Sandboxed recordings no longer produce transport warnings.
• Fixed an issue where the bundle command rewrote internal $refs pointing to other $refs.
  The issue caused AsyncAPI 3 operation messages references to point to components instead of channel messages.
• Updated @redocly/openapi-core to v2.40.0.

@redocly/openapi-core@2.40.0

Minor Changes

• Added linting for the OpenAPI 3.2 Example Object dataValue field.

Patch Changes

• Fixed an issue where the bundle command rewrote internal $refs pointing to other $refs.
  The issue caused AsyncAPI 3 operation messages references to point to components instead of channel messages.

@redocly/respect-core@2.40.0

Patch Changes

• Updated @redocly/openapi-core to v2.40.0.

---

Note

Low Risk
No runtime code changes in the diff—only version and changelog updates from the release workflow.

Overview
This is an automated Changesets release PR: it removes consumed .changeset/* files, bumps package versions to 2.40.0, updates package-lock.json, and records the release in docs/@v2/changelog.md and per-package changelogs.

@redocly/cli@2.40.0 ships drift/proxy improvements and bundling fixes already implemented on main: new --ignore-headers on experimental drift and proxy; fewer false positives in drift schema-consistency (deepObject query params, skipping request checks when the server returns 4xx) and security-baseline (loopback HTTP); and a bundle fix for chained internal $refs (AsyncAPI 3 operation messages).

@redocly/openapi-core@2.40.0 adds OpenAPI 3.2 Example Object dataValue linting and includes the same bundle chained-$ref fix. @redocly/respect-core@2.40.0 only bumps its dependency on openapi-core.

^{Reviewed by Cursor Bugbot for commit 46581c2. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

⚠️ Redocly Config version mismatch: The latest published version of @redocly/config is 0.52.0, but the current version is 0.51.0. Please consider updating to the latest version.

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	70.4% (🎯 69%)	7781 / 11051
🔵	Statements	70.1% (🎯 69%)	8097 / 11550
🔵	Functions	74.8% (🎯 73%)	1562 / 2088
🔵	Branches	62% (🎯 61%)	5249 / 8466

File Coverage

No changed files found.

Generated in workflow #10741 for commit 4c35459 by the Vitest Coverage Report Action

[github-actions]

Performance Benchmark (Lower is Faster)

CLI Version	Bundle	Lint	Check Config
cli-2.0.0	▓▓▓▓▓▓▓ 1.23x ± 0.02	▓▓▓▓▓▓▓▓▓ 1.29x ± 0.02	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.70x ± 0.02
cli-2.11.1	▓▓▓▓▓▓▓ 1.23x ± 0.01	▓▓▓▓▓▓▓▓▓ 1.30x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.70x ± 0.02
cli-2.13.0	▓▓▓▓▓▓▓▓ 1.24x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.58x ± 0.02	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.74x ± 0.02
cli-2.14.2	▓▓▓▓▓▓▓ 1.23x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.55x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.76x ± 0.02
cli-2.27.0	▓▓▓▓▓▓▓▓ 1.24x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.47x ± 0.02	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.78x ± 0.02
cli-2.30.2	▓▓▓▓▓▓▓▓▓ 1.27x ± 0.02	▓▓▓▓▓▓ 1.17x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.80x ± 0.02
cli-2.31.0	▓▓▓▓▓▓▓▓▓ 1.29x ± 0.02	▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.47x ± 0.02	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.79x ± 0.02
cli-2.32.1	▓▓▓▓▓▓▓▓▓ 1.27x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.47x ± 0.01	▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ 1.81x ± 0.02
cli-latest	▓ 1.00x (Fastest)	▓ 1.00x (Fastest)	▓ 1.00x (Fastest)
cli-next	▓ 1.00x ± 0.01	▓ 1.00x ± 0.01	▓ 1.00x ± 0.01