Releases · cdimascio/express-openapi-validator

27 Dec 17:30

cdimascio

v5.4.2

ecba075

v5.4.2 Latest

Latest

(2024-12-27)

re-enable keywords now properly supported (#1031) (83dac8a), closes #1031
update deps (6eb86a6)
v5.4.2 (c811993)

(2024-12-27)

fixes method res with path params (#1032) (aa60f9c), closes #1032
Update README.md (d43ec2e)

(2024-12-26)

update alpha 3.1 version (cba4aac)
v5.3.9 (75531ae)
v5.4.0 (34359d0)
feat(openapi): support OpenAPI version 3.1 (extends PR #882) (#1027) (fc876a3), closes #882 #1027 #1009 #1021 #1017 #1016
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (8da3707), closes #1021
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (f6e6295), closes #972
fix: fix authHeader without cookie-parser middleware (#1003) (17e91d5), closes #1003 #949
fix: package.json & package-lock.json to reduce vulnerabilities (#1017) (e88a4ef), closes #1017
fix: upgrade @apidevtools/json-schema-ref-parser from 11.7.0 to 11.7.2 (#1006) (a67802b), closes #1006
fix: upgrade express-openapi-validator from 5.3.6 to 5.3.7 (#1001) (7a8fcc0), closes #1001
fix: upgrade express-openapi-validator from 5.3.6 to 5.3.7 (#1008) (831b648), closes #1008
fix: upgrade express-openapi-validator from 5.3.7 to 5.3.8 (#1011) (65c0e56), closes #1011
fix: upgrade path-to-regexp from 8.1.0 to 8.2.0 (#1000) (ed6a9b7), closes #1000
chore(deps): bump cookie and express in /examples/3-eov-operations (#1002) (f2aba32), closes #1002
chore(deps): bump path-to-regexp and express in /examples/1-standard (#1016) (4a3efff), closes #1016

(2024-10-30)

fix: fix authHeader without cookie-parser middleware (#1003) (17e91d5), closes #1003 #949
chore(deps): bump cookie and express in /examples/3-eov-operations (#1002) (f2aba32), closes #1002

(2024-10-26)

fix: add cookie support for HTTP bearer authentication (#949) (00d070b), closes #949
fix: examples/1-standard/package.json & examples/1-standard/package-lock.json to reduce vulnerabilit (8ce7fda), closes #986
fix: examples/2-standard-multiple-api-specs/package.json & examples/2-standard-multiple-api-specs/pa (95f5f5a), closes #987
fix: examples/3-eov-operations/package.json & examples/3-eov-operations/package-lock.json to reduce (e81222e), closes #989
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (263c641), closes #994
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (e71b5fc), closes #988
fix: package.json & package-lock.json to reduce vulnerabilities (#993) (b6201c3), closes #993
fix: upgrade express-openapi-validator from 5.3.6 to 5.3.7 (#995) (8cee5f9), closes #995
Create SECURITY.md (#999) (5e21e3f), closes #999
example 6 enhancements (789b43b)
Update README.md (946aab8)
Update README.md (f61c185)
chore(deps): bump body-parser and @nestjs/platform-express (#990) (773f18e), closes #990
chore(deps): bump cookie and cookie-parser (#996) (9bd5177), closes #996
chore(deps): bump path-to-regexp (#997) (e60d146), closes #997

(2024-09-18)

fix: upgrade @types/multer from 1.4.11 to 1.4.12 (#983) (0fa043e), closes #983
feat(path-to-regexp): path-to-regexp 8.1.0 update (#976) (70cce65), closes #976

(2024-09-13)

bodyParsers is deprecated so update with expess bodyParsers (#974) (6dc3b97), closes #974
Update README.md (772d1dc)
Update README.md (de4219e)
fix: upgrade express-openapi-validator from 5.2.0 to 5.3.1 (#960) (bd636bb), closes #960
chore(deps-dev): bump braces from 3.0.2 to 3.0.3 in /examples/9-nestjs (#964) (148fa90), closes #964
chore(deps-dev): bump braces in /examples/7-response-date-serialization (#963) (aa3018a), closes #963

(2024-09-06)

fix: Dereference path parameters (#962) ([0aebe5d](https://github.com/cdimascio/ex...

Assets 2

27 Dec 16:47

cdimascio

v5.4.1

98d5e4e

v5.4.1

(2024-12-27)

fixes method res with path params (#1032) (aa60f9c), closes #1032
Update README.md (d43ec2e)

(2024-12-26)

update alpha 3.1 version (cba4aac)
v5.3.9 (75531ae)
v5.4.0 (34359d0)
feat(openapi): support OpenAPI version 3.1 (extends PR #882) (#1027) (fc876a3), closes #882 #1027 #1009 #1021 #1017 #1016
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (8da3707), closes #1021
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (f6e6295), closes #972
fix: fix authHeader without cookie-parser middleware (#1003) (17e91d5), closes #1003 #949
fix: package.json & package-lock.json to reduce vulnerabilities (#1017) (e88a4ef), closes #1017
fix: upgrade @apidevtools/json-schema-ref-parser from 11.7.0 to 11.7.2 (#1006) (a67802b), closes #1006
fix: upgrade express-openapi-validator from 5.3.6 to 5.3.7 (#1001) (7a8fcc0), closes #1001
fix: upgrade express-openapi-validator from 5.3.6 to 5.3.7 (#1008) (831b648), closes #1008
fix: upgrade express-openapi-validator from 5.3.7 to 5.3.8 (#1011) (65c0e56), closes #1011
fix: upgrade path-to-regexp from 8.1.0 to 8.2.0 (#1000) (ed6a9b7), closes #1000
chore(deps): bump cookie and express in /examples/3-eov-operations (#1002) (f2aba32), closes #1002
chore(deps): bump path-to-regexp and express in /examples/1-standard (#1016) (4a3efff), closes #1016

(2024-10-30)

fix: fix authHeader without cookie-parser middleware (#1003) (17e91d5), closes #1003 #949
chore(deps): bump cookie and express in /examples/3-eov-operations (#1002) (f2aba32), closes #1002

(2024-10-26)

fix: add cookie support for HTTP bearer authentication (#949) (00d070b), closes #949
fix: examples/1-standard/package.json & examples/1-standard/package-lock.json to reduce vulnerabilit (8ce7fda), closes #986
fix: examples/2-standard-multiple-api-specs/package.json & examples/2-standard-multiple-api-specs/pa (95f5f5a), closes #987
fix: examples/3-eov-operations/package.json & examples/3-eov-operations/package-lock.json to reduce (e81222e), closes #989
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (263c641), closes #994
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (e71b5fc), closes #988
fix: package.json & package-lock.json to reduce vulnerabilities (#993) (b6201c3), closes #993
fix: upgrade express-openapi-validator from 5.3.6 to 5.3.7 (#995) (8cee5f9), closes #995
Create SECURITY.md (#999) (5e21e3f), closes #999
example 6 enhancements (789b43b)
Update README.md (946aab8)
Update README.md (f61c185)
chore(deps): bump body-parser and @nestjs/platform-express (#990) (773f18e), closes #990
chore(deps): bump cookie and cookie-parser (#996) (9bd5177), closes #996
chore(deps): bump path-to-regexp (#997) (e60d146), closes #997

(2024-09-18)

fix: upgrade @types/multer from 1.4.11 to 1.4.12 (#983) (0fa043e), closes #983
feat(path-to-regexp): path-to-regexp 8.1.0 update (#976) (70cce65), closes #976

(2024-09-13)

bodyParsers is deprecated so update with expess bodyParsers (#974) (6dc3b97), closes #974
Update README.md (772d1dc)
Update README.md (de4219e)
fix: upgrade express-openapi-validator from 5.2.0 to 5.3.1 (#960) (bd636bb), closes #960
chore(deps-dev): bump braces from 3.0.2 to 3.0.3 in /examples/9-nestjs (#964) (148fa90), closes #964
chore(deps-dev): bump braces in /examples/7-response-date-serialization (#963) (aa3018a), closes #963

(2024-09-06)

fix: Dereference path parameters (#962) (0aebe5d), closes #962
fix: upgrade express-openapi-validator from 5.2.0 to 5.3.1 (#951) (5b0058d), closes #951
[StepSecurity] ci: Harden GitHub Actions (#959) ([78e55be](https://gith...

Assets 2

26 Dec 17:00

cdimascio

v5.4.0

333960c

v5.4.0

(2024-12-26)

update alpha 3.1 version (cba4aac)
v5.3.9 (75531ae)
v5.4.0 (34359d0)
feat(openapi): support OpenAPI version 3.1 (extends PR #882) (#1027) (fc876a3), closes #882 #1027 #1009 #1021 #1017 #1016
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (8da3707), closes #1021
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (f6e6295), closes #972
fix: fix authHeader without cookie-parser middleware (#1003) (17e91d5), closes #1003 #949
fix: package.json & package-lock.json to reduce vulnerabilities (#1017) (e88a4ef), closes #1017
fix: upgrade @apidevtools/json-schema-ref-parser from 11.7.0 to 11.7.2 (#1006) (a67802b), closes #1006
fix: upgrade express-openapi-validator from 5.3.6 to 5.3.7 (#1001) (7a8fcc0), closes #1001
fix: upgrade express-openapi-validator from 5.3.6 to 5.3.7 (#1008) (831b648), closes #1008
fix: upgrade express-openapi-validator from 5.3.7 to 5.3.8 (#1011) (65c0e56), closes #1011
fix: upgrade path-to-regexp from 8.1.0 to 8.2.0 (#1000) (ed6a9b7), closes #1000
chore(deps): bump cookie and express in /examples/3-eov-operations (#1002) (f2aba32), closes #1002
chore(deps): bump path-to-regexp and express in /examples/1-standard (#1016) (4a3efff), closes #1016

(2024-10-30)

fix: fix authHeader without cookie-parser middleware (#1003) (17e91d5), closes #1003 #949
chore(deps): bump cookie and express in /examples/3-eov-operations (#1002) (f2aba32), closes #1002

(2024-10-26)

fix: add cookie support for HTTP bearer authentication (#949) (00d070b), closes #949
fix: examples/1-standard/package.json & examples/1-standard/package-lock.json to reduce vulnerabilit (8ce7fda), closes #986
fix: examples/2-standard-multiple-api-specs/package.json & examples/2-standard-multiple-api-specs/pa (95f5f5a), closes #987
fix: examples/3-eov-operations/package.json & examples/3-eov-operations/package-lock.json to reduce (e81222e), closes #989
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (263c641), closes #994
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (e71b5fc), closes #988
fix: package.json & package-lock.json to reduce vulnerabilities (#993) (b6201c3), closes #993
fix: upgrade express-openapi-validator from 5.3.6 to 5.3.7 (#995) (8cee5f9), closes #995
Create SECURITY.md (#999) (5e21e3f), closes #999
example 6 enhancements (789b43b)
Update README.md (946aab8)
Update README.md (f61c185)
chore(deps): bump body-parser and @nestjs/platform-express (#990) (773f18e), closes #990
chore(deps): bump cookie and cookie-parser (#996) (9bd5177), closes #996
chore(deps): bump path-to-regexp (#997) (e60d146), closes #997

(2024-09-18)

fix: upgrade @types/multer from 1.4.11 to 1.4.12 (#983) (0fa043e), closes #983
feat(path-to-regexp): path-to-regexp 8.1.0 update (#976) (70cce65), closes #976

(2024-09-13)

bodyParsers is deprecated so update with expess bodyParsers (#974) (6dc3b97), closes #974
Update README.md (772d1dc)
Update README.md (de4219e)
fix: upgrade express-openapi-validator from 5.2.0 to 5.3.1 (#960) (bd636bb), closes #960
chore(deps-dev): bump braces from 3.0.2 to 3.0.3 in /examples/9-nestjs (#964) (148fa90), closes #964
chore(deps-dev): bump braces in /examples/7-response-date-serialization (#963) (aa3018a), closes #963

(2024-09-06)

fix: Dereference path parameters (#962) (0aebe5d), closes #962
fix: upgrade express-openapi-validator from 5.2.0 to 5.3.1 (#951) (5b0058d), closes #951
[StepSecurity] ci: Harden GitHub Actions (#959) (78e55be), closes #959
Fix changelog breaking changes notice (#961) (0a8dc2f), closes [#961](https://github.com/cdimascio/express-openapi-va...

Assets 2

26 Oct 19:34

cdimascio

v5.3.8

efbcdc7

v5.3.8

(2024-10-26)

fix: add cookie support for HTTP bearer authentication (#949) (00d070b), closes #949
fix: examples/1-standard/package.json & examples/1-standard/package-lock.json to reduce vulnerabilit (8ce7fda), closes #986
fix: examples/2-standard-multiple-api-specs/package.json & examples/2-standard-multiple-api-specs/pa (95f5f5a), closes #987
fix: examples/3-eov-operations/package.json & examples/3-eov-operations/package-lock.json to reduce (e81222e), closes #989
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (263c641), closes #994
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (e71b5fc), closes #988
fix: package.json & package-lock.json to reduce vulnerabilities (#993) (b6201c3), closes #993
fix: upgrade express-openapi-validator from 5.3.6 to 5.3.7 (#995) (8cee5f9), closes #995
Create SECURITY.md (#999) (5e21e3f), closes #999
example 6 enhancements (789b43b)
Update README.md (946aab8)
Update README.md (f61c185)
chore(deps): bump body-parser and @nestjs/platform-express (#990) (773f18e), closes #990
chore(deps): bump cookie and cookie-parser (#996) (9bd5177), closes #996
chore(deps): bump path-to-regexp (#997) (e60d146), closes #997

(2024-09-18)

fix: upgrade @types/multer from 1.4.11 to 1.4.12 (#983) (0fa043e), closes #983
feat(path-to-regexp): path-to-regexp 8.1.0 update (#976) (70cce65), closes #976

(2024-09-13)

bodyParsers is deprecated so update with expess bodyParsers (#974) (6dc3b97), closes #974
Update README.md (772d1dc)
Update README.md (de4219e)
fix: upgrade express-openapi-validator from 5.2.0 to 5.3.1 (#960) (bd636bb), closes #960
chore(deps-dev): bump braces from 3.0.2 to 3.0.3 in /examples/9-nestjs (#964) (148fa90), closes #964
chore(deps-dev): bump braces in /examples/7-response-date-serialization (#963) (aa3018a), closes #963

(2024-09-06)

fix: Dereference path parameters (#962) (0aebe5d), closes #962
fix: upgrade express-openapi-validator from 5.2.0 to 5.3.1 (#951) (5b0058d), closes #951
[StepSecurity] ci: Harden GitHub Actions (#959) (78e55be), closes #959
Fix changelog breaking changes notice (#961) (0a8dc2f), closes #961
update README (7334ccd)
chore(deps-dev): bump braces in /examples/5-custom-operation-resolver (#958) (eda5612), closes #958
chore(deps): bump braces in /examples/4-eov-operations-babel (#957) (749a8c8), closes #957
chore(deps): bump webpack and @nestjs/cli in /examples/9-nestjs (#953) (299aad6), closes #953

(2024-08-31)

Change AJV allErrors default and support user setting (#955) (392f1dd), closes #955 #954
Update README.md (f20b1c9)
Use lenient resolver type (#956) (826ba62), closes #956 #921 #952

breaking change

By default, request and response validation now stops after the first failure. Only one error will be reported even when multiple may exist. This follows best practices from AJV:

To report all validation errors (only recommended in development), option allErrors can be set in options validateRequests and/or validateResponses. For example:

app.use(
  OpenApiValidator.middleware({
    apiSpec: 'path/to/openapi.json',
    validateRequests: {
      allErrors: true,
    },
    validateResponses: {
      allErrors: true,
    },
  })
);

(2024-08-24)

chore(deps-dev): bump @babel/traverse in /examples/9-nestjs (#948) (edd054f), closes #948
chore(deps-dev): bump braces in /examples/8-top-level-discriminator (#929) (e3a9526), closes #929
chore(deps-dev): bump ws from 7.5.5 to 7.5.10 in /examples/9-nestjs (#930) (9d5895b), closes #930
fix: correct security schema logic for OR verification (#946) (2265a10), closes #946
fix: upgrade @apidevtools/json-schema-ref-parser from 11.6.4 to 11.7.0 (#947) (ea4129c), closes #947
fix: upgrade ajv from 8.15.0 to 8.17.1 (#945) (087d8f7), closes #945
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#944) (f022d21), closes #944
version 5.3.2 (4428922)

(2024-08-24)

fix: correct security schema logic for OR verification (#946) ([2265a10](https://github.com/cdimascio/express-openapi-va...

Assets 2

18 Sep 22:57

cdimascio

v5.3.7

6873649

v5.3.7

(2024-09-18)

fix: upgrade @types/multer from 1.4.11 to 1.4.12 (#983) (0fa043e), closes #983
feat(path-to-regexp): path-to-regexp 8.1.0 update (#976) (70cce65), closes #976

(2024-09-13)

bodyParsers is deprecated so update with expess bodyParsers (#974) (6dc3b97), closes #974
Update README.md (772d1dc)
Update README.md (de4219e)
fix: upgrade express-openapi-validator from 5.2.0 to 5.3.1 (#960) (bd636bb), closes #960
chore(deps-dev): bump braces from 3.0.2 to 3.0.3 in /examples/9-nestjs (#964) (148fa90), closes #964
chore(deps-dev): bump braces in /examples/7-response-date-serialization (#963) (aa3018a), closes #963

(2024-09-06)

fix: Dereference path parameters (#962) (0aebe5d), closes #962
fix: upgrade express-openapi-validator from 5.2.0 to 5.3.1 (#951) (5b0058d), closes #951
[StepSecurity] ci: Harden GitHub Actions (#959) (78e55be), closes #959
Fix changelog breaking changes notice (#961) (0a8dc2f), closes #961
update README (7334ccd)
chore(deps-dev): bump braces in /examples/5-custom-operation-resolver (#958) (eda5612), closes #958
chore(deps): bump braces in /examples/4-eov-operations-babel (#957) (749a8c8), closes #957
chore(deps): bump webpack and @nestjs/cli in /examples/9-nestjs (#953) (299aad6), closes #953

(2024-08-31)

Change AJV allErrors default and support user setting (#955) (392f1dd), closes #955 #954
Update README.md (f20b1c9)
Use lenient resolver type (#956) (826ba62), closes #956 #921 #952

breaking change

By default, request and response validation now stops after the first failure. Only one error will be reported even when multiple may exist. This follows best practices from AJV:

To report all validation errors (only recommended in development), option allErrors can be set in options validateRequests and/or validateResponses. For example:

app.use(
  OpenApiValidator.middleware({
    apiSpec: 'path/to/openapi.json',
    validateRequests: {
      allErrors: true,
    },
    validateResponses: {
      allErrors: true,
    },
  })
);

(2024-08-24)

chore(deps-dev): bump @babel/traverse in /examples/9-nestjs (#948) (edd054f), closes #948
chore(deps-dev): bump braces in /examples/8-top-level-discriminator (#929) (e3a9526), closes #929
chore(deps-dev): bump ws from 7.5.5 to 7.5.10 in /examples/9-nestjs (#930) (9d5895b), closes #930
fix: correct security schema logic for OR verification (#946) (2265a10), closes #946
fix: upgrade @apidevtools/json-schema-ref-parser from 11.6.4 to 11.7.0 (#947) (ea4129c), closes #947
fix: upgrade ajv from 8.15.0 to 8.17.1 (#945) (087d8f7), closes #945
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#944) (f022d21), closes #944
version 5.3.2 (4428922)

(2024-08-24)

fix: correct security schema logic for OR verification (#946) (2265a10), closes #946
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#944) (f022d21), closes #944

(2024-08-05)

Stripped query params for req.url branch arm (#942) (26d06c4), closes #942
Update LICENSE (20727ff)
version 5.2.1 (aace73c)
FIX: issue #917 (#935) (8e66d3f), closes #917 #935
fix: upgrade @apidevtools/json-schema-ref-parser from 11.6.2 to 11.6.4 (#937) (f148eeb), closes #937
fix: upgrade ajv from 8.14.0 to 8.15.0 (#938) (a1ea81f), closes #938
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#936) (2d75db4), closes #936
chore(deps-dev): bump braces from 3.0.2 to 3.0.3 (#928) (093bd3c), closes #928

(2024-06-02)

Add express as peer dependency (#907) (4e8bc84), closes #907
Add multipart fix when does not exist any body (#905) (5c98d17), closes #905
add reponse serializer tests for arrays (bbbd160)
pass coerceTypes through (#809) (8f7c678), closes #809
Support async operation handler resolver (#921) (a4a7175), closes #921
upgrade ajv (a708132)
upgrade example 3 (43cccc8)
upgrade example 4 ([255f20f](https://github.com/cdimascio/express-openapi-va...

Assets 2

13 Sep 00:31

cdimascio

v5.3.6

8e422b2

v5.3.6

(2024-09-13)

bodyParsers is deprecated so update with expess bodyParsers (#974) (6dc3b97), closes #974
Update README.md (772d1dc)
Update README.md (de4219e)
fix: upgrade express-openapi-validator from 5.2.0 to 5.3.1 (#960) (bd636bb), closes #960
chore(deps-dev): bump braces from 3.0.2 to 3.0.3 in /examples/9-nestjs (#964) (148fa90), closes #964
chore(deps-dev): bump braces in /examples/7-response-date-serialization (#963) (aa3018a), closes #963

(2024-09-06)

fix: Dereference path parameters (#962) (0aebe5d), closes #962
fix: upgrade express-openapi-validator from 5.2.0 to 5.3.1 (#951) (5b0058d), closes #951
[StepSecurity] ci: Harden GitHub Actions (#959) (78e55be), closes #959
Fix changelog breaking changes notice (#961) (0a8dc2f), closes #961
update README (7334ccd)
chore(deps-dev): bump braces in /examples/5-custom-operation-resolver (#958) (eda5612), closes #958
chore(deps): bump braces in /examples/4-eov-operations-babel (#957) (749a8c8), closes #957
chore(deps): bump webpack and @nestjs/cli in /examples/9-nestjs (#953) (299aad6), closes #953

(2024-08-31)

Change AJV allErrors default and support user setting (#955) (392f1dd), closes #955 #954
Update README.md (f20b1c9)
Use lenient resolver type (#956) (826ba62), closes #956 #921 #952

breaking change

By default, request and response validation now stops after the first failure. Only one error will be reported even when multiple may exist. This follows best practices from AJV:

To report all validation errors (only recommended in development), option allErrors can be set in options validateRequests and/or validateResponses. For example:

app.use(
  OpenApiValidator.middleware({
    apiSpec: 'path/to/openapi.json',
    validateRequests: {
      allErrors: true,
    },
    validateResponses: {
      allErrors: true,
    },
  })
);

(2024-08-24)

chore(deps-dev): bump @babel/traverse in /examples/9-nestjs (#948) (edd054f), closes #948
chore(deps-dev): bump braces in /examples/8-top-level-discriminator (#929) (e3a9526), closes #929
chore(deps-dev): bump ws from 7.5.5 to 7.5.10 in /examples/9-nestjs (#930) (9d5895b), closes #930
fix: correct security schema logic for OR verification (#946) (2265a10), closes #946
fix: upgrade @apidevtools/json-schema-ref-parser from 11.6.4 to 11.7.0 (#947) (ea4129c), closes #947
fix: upgrade ajv from 8.15.0 to 8.17.1 (#945) (087d8f7), closes #945
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#944) (f022d21), closes #944
version 5.3.2 (4428922)

(2024-08-24)

fix: correct security schema logic for OR verification (#946) (2265a10), closes #946
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#944) (f022d21), closes #944

(2024-08-05)

Stripped query params for req.url branch arm (#942) (26d06c4), closes #942
Update LICENSE (20727ff)
version 5.2.1 (aace73c)
FIX: issue #917 (#935) (8e66d3f), closes #917 #935
fix: upgrade @apidevtools/json-schema-ref-parser from 11.6.2 to 11.6.4 (#937) (f148eeb), closes #937
fix: upgrade ajv from 8.14.0 to 8.15.0 (#938) (a1ea81f), closes #938
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#936) (2d75db4), closes #936
chore(deps-dev): bump braces from 3.0.2 to 3.0.3 (#928) (093bd3c), closes #928

(2024-06-02)

Add express as peer dependency (#907) (4e8bc84), closes #907
Add multipart fix when does not exist any body (#905) (5c98d17), closes #905
add reponse serializer tests for arrays (bbbd160)
pass coerceTypes through (#809) (8f7c678), closes #809
Support async operation handler resolver (#921) (a4a7175), closes #921
upgrade ajv (a708132)
upgrade example 3 (43cccc8)
upgrade example 4 (255f20f)
v5.2.0 (42cb3ab)
chore: apiSpec may be const literal (#854) (e35a07c), closes #854
chore(dependencies): bump @apidevtools/json-schema-ref-parser to 11.6.2 to prevent vulnerability (#9 ([61ff0cf](https://github.com/cdimasci...

Assets 2

06 Sep 01:34

cdimascio

v5.3.5

8852536

v5.3.5

(2024-09-06)

fix: Dereference path parameters (#962) (0aebe5d), closes #962
fix: upgrade express-openapi-validator from 5.2.0 to 5.3.1 (#951) (5b0058d), closes #951
[StepSecurity] ci: Harden GitHub Actions (#959) (78e55be), closes #959
Fix changelog breaking changes notice (#961) (0a8dc2f), closes #961
update README (7334ccd)
chore(deps-dev): bump braces in /examples/5-custom-operation-resolver (#958) (eda5612), closes #958
chore(deps): bump braces in /examples/4-eov-operations-babel (#957) (749a8c8), closes #957
chore(deps): bump webpack and @nestjs/cli in /examples/9-nestjs (#953) (299aad6), closes #953

(2024-08-31)

Change AJV allErrors default and support user setting (#955) (392f1dd), closes #955 #954
Update README.md (f20b1c9)
Use lenient resolver type (#956) (826ba62), closes #956 #921 #952

breaking change

By default, request and response validation now stops after the first failure. Only one error will be reported even when multiple may exist. This follows best practices from AJV:

To report all validation errors (only recommended in development), option allErrors can be set in options validateRequests and/or validateResponses. For example:

app.use(
  OpenApiValidator.middleware({
    apiSpec: 'path/to/openapi.json',
    validateRequests: {
      allErrors: true,
    },
    validateResponses: {
      allErrors: true,
    },
  })
);

(2024-08-24)

chore(deps-dev): bump @babel/traverse in /examples/9-nestjs (#948) (edd054f), closes #948
chore(deps-dev): bump braces in /examples/8-top-level-discriminator (#929) (e3a9526), closes #929
chore(deps-dev): bump ws from 7.5.5 to 7.5.10 in /examples/9-nestjs (#930) (9d5895b), closes #930
fix: correct security schema logic for OR verification (#946) (2265a10), closes #946
fix: upgrade @apidevtools/json-schema-ref-parser from 11.6.4 to 11.7.0 (#947) (ea4129c), closes #947
fix: upgrade ajv from 8.15.0 to 8.17.1 (#945) (087d8f7), closes #945
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#944) (f022d21), closes #944
version 5.3.2 (4428922)

(2024-08-24)

fix: correct security schema logic for OR verification (#946) (2265a10), closes #946
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#944) (f022d21), closes #944

(2024-08-05)

Stripped query params for req.url branch arm (#942) (26d06c4), closes #942
Update LICENSE (20727ff)
version 5.2.1 (aace73c)
FIX: issue #917 (#935) (8e66d3f), closes #917 #935
fix: upgrade @apidevtools/json-schema-ref-parser from 11.6.2 to 11.6.4 (#937) (f148eeb), closes #937
fix: upgrade ajv from 8.14.0 to 8.15.0 (#938) (a1ea81f), closes #938
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#936) (2d75db4), closes #936
chore(deps-dev): bump braces from 3.0.2 to 3.0.3 (#928) (093bd3c), closes #928

(2024-06-02)

Add express as peer dependency (#907) (4e8bc84), closes #907
Add multipart fix when does not exist any body (#905) (5c98d17), closes #905
add reponse serializer tests for arrays (bbbd160)
pass coerceTypes through (#809) (8f7c678), closes #809
Support async operation handler resolver (#921) (a4a7175), closes #921
upgrade ajv (a708132)
upgrade example 3 (43cccc8)
upgrade example 4 (255f20f)
v5.2.0 (42cb3ab)
chore: apiSpec may be const literal (#854) (e35a07c), closes #854
chore(dependencies): bump @apidevtools/json-schema-ref-parser to 11.6.2 to prevent vulnerability (#9 (61ff0cf), closes #918
chore(deps-dev): bump @babel/traverse (#924) (5a04ea9), closes #924
chore(deps): bump axios, @nestjs/common, @nestjs/core, @nestjs/platform-express and @nestjs/testing (b77150f), closes #925
chore(deps): bump webpack and @nestjs/cli in /examples/9-nestjs (#831) (c0c5f4c), closes #831
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (87d173b), closes #911
fix: package.json & package-lock.json to reduce vulnerabilities (#92...

Assets 2

31 Aug 23:14

cdimascio

v5.3.4

47a39b3

v5.3.4

(2024-08-31)

Change AJV allErrors default and support user setting (#955) (392f1dd), closes #955 #954
Update README.md (f20b1c9)
Use lenient resolver type (#956) (826ba62), closes #956 #921 #952

breaking change

by defaulting to true when not defined by the user.

Add tests:

Make sure AjvOptions sets the value appropriately based on whether
the end user defined allErrors or not.
When validating requests, make sure the number of errors reported
(when multiple occur) is 1 when allErrors is false.

The allErrors configuration for OpenAPISchemaValidator is not changed
by this commit since that validation is for trusted content.

(2024-08-24)

chore(deps-dev): bump @babel/traverse in /examples/9-nestjs (#948) (edd054f), closes #948
chore(deps-dev): bump braces in /examples/8-top-level-discriminator (#929) (e3a9526), closes #929
chore(deps-dev): bump ws from 7.5.5 to 7.5.10 in /examples/9-nestjs (#930) (9d5895b), closes #930
fix: correct security schema logic for OR verification (#946) (2265a10), closes #946
fix: upgrade @apidevtools/json-schema-ref-parser from 11.6.4 to 11.7.0 (#947) (ea4129c), closes #947
fix: upgrade ajv from 8.15.0 to 8.17.1 (#945) (087d8f7), closes #945
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#944) (f022d21), closes #944
version 5.3.2 (4428922)

(2024-08-24)

fix: correct security schema logic for OR verification (#946) (2265a10), closes #946
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#944) (f022d21), closes #944

(2024-08-05)

Stripped query params for req.url branch arm (#942) (26d06c4), closes #942
Update LICENSE (20727ff)
version 5.2.1 (aace73c)
FIX: issue #917 (#935) (8e66d3f), closes #917 #935
fix: upgrade @apidevtools/json-schema-ref-parser from 11.6.2 to 11.6.4 (#937) (f148eeb), closes #937
fix: upgrade ajv from 8.14.0 to 8.15.0 (#938) (a1ea81f), closes #938
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#936) (2d75db4), closes #936
chore(deps-dev): bump braces from 3.0.2 to 3.0.3 (#928) (093bd3c), closes #928

(2024-06-02)

Add express as peer dependency (#907) (4e8bc84), closes #907
Add multipart fix when does not exist any body (#905) (5c98d17), closes #905
add reponse serializer tests for arrays (bbbd160)
pass coerceTypes through (#809) (8f7c678), closes #809
Support async operation handler resolver (#921) (a4a7175), closes #921
upgrade ajv (a708132)
upgrade example 3 (43cccc8)
upgrade example 4 (255f20f)
v5.2.0 (42cb3ab)
chore: apiSpec may be const literal (#854) (e35a07c), closes #854
chore(dependencies): bump @apidevtools/json-schema-ref-parser to 11.6.2 to prevent vulnerability (#9 (61ff0cf), closes #918
chore(deps-dev): bump @babel/traverse (#924) (5a04ea9), closes #924
chore(deps): bump axios, @nestjs/common, @nestjs/core, @nestjs/platform-express and @nestjs/testing (b77150f), closes #925
chore(deps): bump webpack and @nestjs/cli in /examples/9-nestjs (#831) (c0c5f4c), closes #831
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (87d173b), closes #911
fix: package.json & package-lock.json to reduce vulnerabilities (#920) (898ceb7), closes #920
fix: upgrade @types/multer from 1.4.7 to 1.4.11 (#897) (a7d67e7), closes #897
fix: upgrade path-to-regexp from 6.2.0 to 6.2.2 (#914) (bce2d6a), closes #914

5.1.6 (2024-02-11)

Fixes for 881 - multiple specs w/validateRequests fail (#903) (766806b), closes #903

5.1.5 (2024-02-10)

fixes write-only tests (8c53e58)
Support writeOnly + required combination #149 (#756) (4f16ed2), closes #149 #756
v5.1.5 (708f2f5)

5.1.4 (2024-02-09)

add cookies to examples 1 and 2 (#891) (2c95d5b), closes #891
Direct example broken link to the guide (00a9c8f)
fixes badging for build and test (631fb7b)
npm audit fix (#892) ([2977c0a](https://github.com/cdimascio/express-openap...

Assets 2

24 Aug 15:21

cdimascio

v5.3.3

fcc2cb9

v5.3.3

(2024-08-24)

chore(deps-dev): bump @babel/traverse in /examples/9-nestjs (#948) (edd054f), closes #948
chore(deps-dev): bump braces in /examples/8-top-level-discriminator (#929) (e3a9526), closes #929
chore(deps-dev): bump ws from 7.5.5 to 7.5.10 in /examples/9-nestjs (#930) (9d5895b), closes #930
fix: correct security schema logic for OR verification (#946) (2265a10), closes #946
fix: upgrade @apidevtools/json-schema-ref-parser from 11.6.4 to 11.7.0 (#947) (ea4129c), closes #947
fix: upgrade ajv from 8.15.0 to 8.17.1 (#945) (087d8f7), closes #945
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#944) (f022d21), closes #944
version 5.3.2 (4428922)

(2024-08-24)

fix: correct security schema logic for OR verification (#946) (2265a10), closes #946
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#944) (f022d21), closes #944

(2024-08-05)

Stripped query params for req.url branch arm (#942) (26d06c4), closes #942
Update LICENSE (20727ff)
version 5.2.1 (aace73c)
FIX: issue #917 (#935) (8e66d3f), closes #917 #935
fix: upgrade @apidevtools/json-schema-ref-parser from 11.6.2 to 11.6.4 (#937) (f148eeb), closes #937
fix: upgrade ajv from 8.14.0 to 8.15.0 (#938) (a1ea81f), closes #938
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#936) (2d75db4), closes #936
chore(deps-dev): bump braces from 3.0.2 to 3.0.3 (#928) (093bd3c), closes #928

(2024-06-02)

Add express as peer dependency (#907) (4e8bc84), closes #907
Add multipart fix when does not exist any body (#905) (5c98d17), closes #905
add reponse serializer tests for arrays (bbbd160)
pass coerceTypes through (#809) (8f7c678), closes #809
Support async operation handler resolver (#921) (a4a7175), closes #921
upgrade ajv (a708132)
upgrade example 3 (43cccc8)
upgrade example 4 (255f20f)
v5.2.0 (42cb3ab)
chore: apiSpec may be const literal (#854) (e35a07c), closes #854
chore(dependencies): bump @apidevtools/json-schema-ref-parser to 11.6.2 to prevent vulnerability (#9 (61ff0cf), closes #918
chore(deps-dev): bump @babel/traverse (#924) (5a04ea9), closes #924
chore(deps): bump axios, @nestjs/common, @nestjs/core, @nestjs/platform-express and @nestjs/testing (b77150f), closes #925
chore(deps): bump webpack and @nestjs/cli in /examples/9-nestjs (#831) (c0c5f4c), closes #831
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (87d173b), closes #911
fix: package.json & package-lock.json to reduce vulnerabilities (#920) (898ceb7), closes #920
fix: upgrade @types/multer from 1.4.7 to 1.4.11 (#897) (a7d67e7), closes #897
fix: upgrade path-to-regexp from 6.2.0 to 6.2.2 (#914) (bce2d6a), closes #914

5.1.6 (2024-02-11)

Fixes for 881 - multiple specs w/validateRequests fail (#903) (766806b), closes #903

5.1.5 (2024-02-10)

fixes write-only tests (8c53e58)
Support writeOnly + required combination #149 (#756) (4f16ed2), closes #149 #756
v5.1.5 (708f2f5)

5.1.4 (2024-02-09)

add cookies to examples 1 and 2 (#891) (2c95d5b), closes #891
Direct example broken link to the guide (00a9c8f)
fixes badging for build and test (631fb7b)
npm audit fix (#892) (2977c0a), closes #892
Remove read only and write only fields (#895) (97617fd), closes #895 #627
removes lodash.uniq and lodash.zipobject dependencies (#893) (1206802), closes #893
Update CONTRIBUTING.md (6d67169)
Update README.md (dffda28)
Update README.md (bdd0d79)
Update README.md (#896) (bb66916), closes #896
v5.1.4 (b3d7483)
v5.1.4 ([509fa22](...

Assets 2

05 Aug 00:16

cdimascio

v5.3.1

5928ac5

v5.3.1

(2024-08-05)

Stripped query params for req.url branch arm (#942) (26d06c4), closes #942
Update LICENSE (20727ff)
version 5.2.1 (aace73c)
FIX: issue #917 (#935) (8e66d3f), closes #917 #935
fix: upgrade @apidevtools/json-schema-ref-parser from 11.6.2 to 11.6.4 (#937) (f148eeb), closes #937
fix: upgrade ajv from 8.14.0 to 8.15.0 (#938) (a1ea81f), closes #938
fix: upgrade express-openapi-validator from 5.1.6 to 5.2.0 (#936) (2d75db4), closes #936
chore(deps-dev): bump braces from 3.0.2 to 3.0.3 (#928) (093bd3c), closes #928

(2024-06-02)

Add express as peer dependency (#907) (4e8bc84), closes #907
Add multipart fix when does not exist any body (#905) (5c98d17), closes #905
add reponse serializer tests for arrays (bbbd160)
pass coerceTypes through (#809) (8f7c678), closes #809
Support async operation handler resolver (#921) (a4a7175), closes #921
upgrade ajv (a708132)
upgrade example 3 (43cccc8)
upgrade example 4 (255f20f)
v5.2.0 (42cb3ab)
chore: apiSpec may be const literal (#854) (e35a07c), closes #854
chore(dependencies): bump @apidevtools/json-schema-ref-parser to 11.6.2 to prevent vulnerability (#9 (61ff0cf), closes #918
chore(deps-dev): bump @babel/traverse (#924) (5a04ea9), closes #924
chore(deps): bump axios, @nestjs/common, @nestjs/core, @nestjs/platform-express and @nestjs/testing (b77150f), closes #925
chore(deps): bump webpack and @nestjs/cli in /examples/9-nestjs (#831) (c0c5f4c), closes #831
fix: examples/4-eov-operations-babel/package.json & examples/4-eov-operations-babel/package-lock.jso (87d173b), closes #911
fix: package.json & package-lock.json to reduce vulnerabilities (#920) (898ceb7), closes #920
fix: upgrade @types/multer from 1.4.7 to 1.4.11 (#897) (a7d67e7), closes #897
fix: upgrade path-to-regexp from 6.2.0 to 6.2.2 (#914) (bce2d6a), closes #914

5.1.6 (2024-02-11)

Fixes for 881 - multiple specs w/validateRequests fail (#903) (766806b), closes #903

5.1.5 (2024-02-10)

fixes write-only tests (8c53e58)
Support writeOnly + required combination #149 (#756) (4f16ed2), closes #149 #756
v5.1.5 (708f2f5)

5.1.4 (2024-02-09)

add cookies to examples 1 and 2 (#891) (2c95d5b), closes #891
Direct example broken link to the guide (00a9c8f)
fixes badging for build and test (631fb7b)
npm audit fix (#892) (2977c0a), closes #892
Remove read only and write only fields (#895) (97617fd), closes #895 #627
removes lodash.uniq and lodash.zipobject dependencies (#893) (1206802), closes #893
Update CONTRIBUTING.md (6d67169)
Update README.md (dffda28)
Update README.md (bdd0d79)
Update README.md (#896) (bb66916), closes #896
v5.1.4 (b3d7483)
v5.1.4 (509fa22)
fix: #887 allow multiple params with wildcard (#898) (2d33d0a), closes #887 #898 #1
docs: fix doc typo in README.md (#885) (8a81bf8), closes #885

5.1.3 (2024-01-27)

CLS Context is lost after using multer middleware (#695) (40716fb), closes #695
remove examples from schema (#890) (0ad49ec), closes #890
v5.1.3 (f806690)
v5.1.3 (e567701)

5.1.2 (2023-12-04)

Normalize request body ContentTypes (#863) (0099b0d), closes #863
Safer handling of multipart nested JSON body props (#878) (807e09c), closes #878
v5.1.1 (4b0c989)

5.1.1 (2023-11-21)

Pass-through HttpError caught in multipart handler (#867) (240c876), closes #867
v5.1.0 (a9a3b0b)
v5.1.1 ([a4e62ac](ht...

Assets 2

Releases: cdimascio/express-openapi-validator

v5.4.2

(2024-12-27)

(2024-12-27)

(2024-12-26)

(2024-10-30)

(2024-10-26)

(2024-09-18)

(2024-09-13)

(2024-09-06)

v5.4.1

(2024-12-27)

(2024-12-26)

(2024-10-30)

(2024-10-26)

(2024-09-18)

(2024-09-13)

(2024-09-06)

v5.4.0

(2024-12-26)

(2024-10-30)

(2024-10-26)

(2024-09-18)

(2024-09-13)

(2024-09-06)

v5.3.8

(2024-10-26)

(2024-09-18)

(2024-09-13)

(2024-09-06)

(2024-08-31)

breaking change

(2024-08-24)

(2024-08-24)

v5.3.7

(2024-09-18)

(2024-09-13)

(2024-09-06)

(2024-08-31)

breaking change

(2024-08-24)

(2024-08-24)

(2024-08-05)

(2024-06-02)

v5.3.6

(2024-09-13)

(2024-09-06)

(2024-08-31)

breaking change

(2024-08-24)

(2024-08-24)

(2024-08-05)

(2024-06-02)

v5.3.5

(2024-09-06)

(2024-08-31)

breaking change

(2024-08-24)

(2024-08-24)

(2024-08-05)

(2024-06-02)

v5.3.4

(2024-08-31)

breaking change

(2024-08-24)

(2024-08-24)

(2024-08-05)

(2024-06-02)

5.1.6 (2024-02-11)

5.1.5 (2024-02-10)

5.1.4 (2024-02-09)

v5.3.3

(2024-08-24)

(2024-08-24)

(2024-08-05)

(2024-06-02)

5.1.6 (2024-02-11)

5.1.5 (2024-02-10)

5.1.4 (2024-02-09)

v5.3.1