Visitar URL original
Comparing v1.6.29...v1.6.30 · microsoft/OpenAPI.NET · GitHub
Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: microsoft/OpenAPI.NET
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.6.29
Choose a base ref
...
head repository: microsoft/OpenAPI.NET
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v1.6.30
Choose a head ref
  • 4 commits
  • 25 files changed
  • 4 contributors

Commits on Aug 13, 2026

  1. tests: adds validation tests for circular reference handling (#3022)

    @baywet
    baywet authored Aug 13, 2026
    Configuration menu
    Copy the full SHA
    17a229d View commit details
    Browse the repository at this point in the history

  2. fix(readers): bound YAML anchor/alias expansion to prevent OOM (billi… 

    …on laughs)

* fix(readers): bound YAML anchor/alias expansion to prevent OOM (billion laughs)

Ports the fix merged on main (#3000) to the support/v1 reader, which walks the
SharpYaml node graph directly. Aliases share a single source node, so a tiny
document expands exponentially when materialized into independent OpenApi any
trees, exhausting process memory (CWE-400).

Adds a per-parse node budget enforced by ParsingContext and a nesting depth
limit enforced while materializing any values. Limits are configurable through
the new OpenApiReaderLimits type and default to 5,000,000 nodes and depth 64
(mirroring the System.Text.Json default) as on main.

Co-authored-by: baywet <7905502+baywet@users.noreply.github.com>

* refactor(readers): move YAML expansion limits into OpenApiReaderSettings

Co-authored-by: baywet <7905502+baywet@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: baywet <7905502+baywet@users.noreply.github.com>
    @baywet
    3 people authored Aug 13, 2026
    Configuration menu
    Copy the full SHA
    1f9aea9 View commit details
    Browse the repository at this point in the history

  3. ci: refreshes ci configuration with recent updates from main (#3021) 

    * ci: refreshes ci configuration with recent updates from main

* ci: adds missing global.json
    @baywet
    baywet authored Aug 13, 2026
    Configuration menu
    Copy the full SHA
    209f886 View commit details
    Browse the repository at this point in the history

  4. chore(support/v1): release 1.6.30 (#3023) 

    Co-authored-by: release-please-token-provider[bot] <225477224+release-please-token-provider[bot]@users.noreply.github.com>
    @release-please-token-provider
    release-please-token-provider[bot] authored Aug 13, 2026
    Configuration menu
    Copy the full SHA
    59c56cf View commit details
    Browse the repository at this point in the history
Loading