v2.0.0-beta.5

2.0.0-beta.5 (2026-10-09)

Upgrading from beta.4

• OAuth sign-in in the API playground now returns to one page, /oauth/callback on the portal's address, from every endpoint page (#424). Register that redirect URI with your OAuth provider, for example https://docs.example.com/oauth/callback, in place of the endpoint pages' addresses. Until you do, the provider refuses the sign-in. A content page at oauth/callback is now refused, because the portal serves its own page there.
• apimatic quickstart in an existing project (one whose src/spec/ already holds files) now needs src/apimatic.json, and keeps it as it is, adding only what is missing (#405). It no longer creates the file. Add the project's apimatic.json first; apimatic quickstart run in an empty directory writes one to start from.
• Reference-style images (![alt][ref]) are now checked before a build, like inline images (#411). One that points at a missing file stops portal generate.

Features

• api: flagless api validate and quickstart avoids mutating adopted projects (#405) (abed462)
• portal: host a portal under the path of site.url (#411) (767671b)
• portal: one OAuth redirect URI for every endpoint page (#424) (876e66c)

Bug Fixes

• portal: follow up the review of the preview allow list (#426) (a346209)