v10.0.0

New Features

• Massive Bundle Size Reduction: Replaced swagger-client with @scalar/openapi-parser, shedding over ~300KB of minified JavaScript.
• Vite 6 Migration: Fully migrated build system to Vite 6 in library mode with custom ES module minification.
• Lightweight Syntax Highlighting: Replaced prismjs with microlighter for native CSS-based code highlighting without generating heavy nested DOM nodes.
• Native Sanitization: Replaced DOMpurify with browser-native document.setHTML and a minimal fallback shim to eliminate script injection and inline on* handlers.
• Modernized CSS: Migrated color variables to CSS color-mix() for cleaner, native dark/light theme blending.
• Native Search Dialog: Replaced custom modal implementation with native HTML <dialog> element.
• Responsive Sidebar Toggle: Added dedicated navigation toggle button when responsive breakpoints collapse the sidebar.
• Upgraded Markdown Parser: Upgraded markedjs and integrated github-slugger for GitHub-compatible heading anchor links.
• Monorepo Restructure: Reorganized repository into a monorepo architecture powering both the core Web Component and the Astro/Starlight documentation portal.

Bug Fixes

• fixed #1067 - Added support for example in OpenAPI 3.0.x / 3.1.0 deprecation handling.
• fixed #1068 - Escaped single quotes properly in generated cURL -d JSON payloads.
• fixed #1069 - Long field names in schema-style="table" now support ellipsis with configurable key width and text overflow.
• fixed #1061 - Sanitized markdown descriptions to block potential XSS injection vectors.
• fixed #1050 - Fixed max-height calculation of navigation tags that caused endpoints to be truncated.
• fixed #1048 - Streamlined data-type separator rendering in schemas.
• fixed #1051 - Fixed endpoint filtering when using match-paths attribute.
• fixed #910 - Display uniqueItems constraint for arrays in schema view.
• fixed #1005 - Do not render credentials and inputs in the authentication section when allow-try="false".
• fixed #1046 - Fixed relative URL resolution for OAuth refreshUrl, tokenUrl, and authorizationUrl.
• fixed #1042 - Display HTTP Bearer token name if specified in OpenAPI security schemes.

Other Chores

• Removed unmaintained legacy packages xml-but-prettier and randexp, replacing them with custom lightweight utilities.
• Expanded test suites and automated benchmark harnesses.