v1.13.0

1.13.0 - 2026-11-11

Changed

• Updated the application, Native AOT container images, development environment, and CI to .NET 11.
  Source builds now require the .NET 11 SDK; existing configuration documents need no migration.
• Enabled runtime-async compilation and multi-threaded MSBuild for builds and publication.
• Updated ASP.NET Core OpenAPI to 11.0.0 and OpenAPI.NET to 3.11.0, adapting management OpenAPI
  generation to the updated library API without changing management routes.

Fixed

• Made the Bash executable-bit onboarding test asynchronous with an explicit timeout to tolerate
  slower Git startup on busy Windows hosts.

v1.12.0

1.12.0 - 2026-10-30

Added

• The dashboard checks for newer application releases at startup and hourly, with an accessible,
  dismissible update notice and reload action. Dismissal is scoped to the current browser session.

v1.11.0

1.11.0 - 2026-10-29

Added

• Installable dashboard support with a generic reconnect page for offline launches; dashboard data,
  credentials, and request content are never cached, and offline writes are never queued.
• A dashboard cURL-copy action that targets the current instance and uses an environment variable
  for protected requests instead of embedding the API key.
• Instance-hostname display and an option to filter unexpected request summaries without changing
  aggregate statistics or retained request data.

Changed

• API-group expanded/collapsed state can persist across refreshes within the same tab.

v1.10.1

1.10.1 - 2026-10-27

Changed

• Updated Playwright and its matching CI images to 1.64.1.

Fixed

• API-group collapse and expand buttons include their visible endpoint count in the accessible
  name, keeping speech-input labels aligned with the displayed text.
• Documentation-site buttons retain readable text contrast throughout light and dark theme changes.
• Corrected stale prerelease and pending-publication guidance, updated container quick starts to
  the published stable image, and aligned Azure import documentation with project-version tags.
• Refreshed documentation screenshots with current sample definitions and endpoint group controls.
  Version and build metadata are hidden only in captures; the live dashboard footer is unchanged.

Security

• Updated the Native AOT SDK to 10.0.403 and runtime-deps image to 10.0.14 for Brotli and musl
  security fixes, and pinned build-only curl and libcurl to 8.23.0-r0 for their security fixes.

v1.10.0

1.10.0 - 2026-10-23

Added

• Revision-protected endpoint manifest and read-only batch management routes support incremental
  endpoint synchronization with stable IDs and content hashes.

Changed

• Dashboard synchronization transfers only added or changed endpoint definitions, keeps its cache
  in memory, and rechecks the manifest after reconnecting, including across process restarts.
• Updated development tooling to pnpm 12.14.0, axe-core Playwright 4.14.0, and Vitest and its
  V8 coverage provider 5.0.5.

Fixed

• Fixed endpoint rate limits continuing to return 429 after the rolling window had elapsed.
  Requests can now succeed as soon as capacity becomes available, including after a period of inactivity.

v1.9.1

[1.9.1] - 2026-10-22

Changed

• Updated ASP.NET Core OpenAPI to 10.0.13, OpenAPI.NET to 2.12.2, and Swagger UI to 10.3.0.
  Notable upstream fixes include:
  • OpenAPI.NET: improved
    nullable-schema round-tripping and multi-type schema serialization for OpenAPI 3.0.
  • Swagger UI:
    corrected relative document URLs containing query strings and serialization of custom UI
    configuration values.

Fixed

• Consolidated Markdown lint settings in the CLI configuration, preserving existing conventions
  and allowing the standard MIT license text without a Markdown heading.

v1.9.0

1.9.0 - 2026-10-22

Added

• Both developer CLIs provide azure-generate-key to save a random initial AZURE_MOCKAPI_KEY
  to the selected local environment file without printing it or replacing a non-empty value.

Changed

• Interactive developer CLI menus submit unambiguous choices immediately, retain Enter for
  ambiguous choices, and preserve the p1 and p2 pathway shortcuts.
• Dashboard API-group collapse and expansion use an accessible chevron beside the Path header,
  separate from sorting, while preserving filtered-group scope and endpoint selection.

Fixed

• Azure deploy, registry push, and image import refresh existing deployment outputs before use
  and fail explicitly when required outputs are unavailable, without provisioning infrastructure.
• Composed Azure pathways run application tests without recursively invoking developer CLI tests.

v1.8.0

1.8.0 - 2026-10-21

Added

• Opt-in deltas=true dashboard event streams send sequenced, absolute statistics state patches
  after a full baseline, with full resynchronization after resets, reconnects, or missed frames.
  Default dashboard streams, statistics GET responses, and standalone statistics streams retain
  their existing contracts.

Changed

• Configuration persistence and unfiltered native exports stream canonical snapshot bytes without
  copying the complete document. Single-endpoint mutation responses materialize only the selected
  endpoint, and registry compilation reuses unchanged immutable response bodies and headers while
  preserving fresh rate-limit permits for every applied revision.
• Request-body validation reuses cleared, bounded buffers and validates JSON without building a
  document tree. API-key verification reuses the decoded persisted digest and clears independent
  stack buffers without caching plaintext keys or changing authentication behavior.
• Statistics use contiguous counters and shared bounded snapshots and SSE serialization to reduce
  allocations without changing counting, retention, or reset semantics.
• Dashboard statistics use delta delivery and retain rows and chart columns across updates,
  preserving focus and timeline scroll while reducing rendering work.
• Refined documentation-site styling and added APIM sample guidance and a Docker Hub badge.

v1.7.0

1.7.0 - 2026-10-21

Added

• Optional deployment-supplied mock API keys through MockApi__ApiKey, with matching Azure
  infrastructure and developer CLI settings. Startup persists only the key's SHA-256 hash and
  enables protection when no security document exists; existing security settings take precedence.
• Dashboard controls select all filtered endpoints within an API group and collapse or expand all
  filtered groups without changing endpoint selection or hidden groups.

Changed

• Removed the 25-endpoint limit from configuration validation, JSON Schema, and bulk selections.
  The 4 MiB configuration document limit and independent 25-group API-description limit remain.
• Built-in examples now combine 41 Trailhead Supply endpoints across assistant, inventory, and
  shipping APIs, with individual native sample files, HEAD-only mock health endpoints, and
  clearly labeled HTTP and transport faults. Loading remains an explicit, revision-protected merge;
  upgrades never automatically remove or rewrite saved endpoints.
• Dashboard operations default to path order within each API group. Information previews provide
  more room for descriptions and emphasize the samples' business and technical section headings.
• Dashboard test requests and portable request exports use illustrative inventory and shipping
  payloads for the corresponding Trailhead routes.
• Updated onboarding documentation, screenshots, and development tooling for the Trailhead examples.

v1.6.2

1.6.2 - 2026-10-15

Added

• The dashboard shows an accessible loading state while endpoints are fetched and can pretty-print
  valid JSON test responses while preserving access to their raw bodies. A browser-local workspace
  setting chooses whether endpoint tests prefer raw or pretty-printed responses when both are available.
• Matched mock POST, PUT, and PATCH requests allow empty bodies, enforce a 1 MiB size limit, and
  validate the syntax and UTF-8 encoding of non-empty JSON bodies before applying configured responses.
  Malformed JSON and invalid content types return 400, oversized bodies return 413, and unsupported
  JSON charsets return 415.

Changed

• Dashboard endpoint testing uses a more compact response layout, and the built-in parade schedule
  example is labeled as a timeout demonstration.
• Deployment documentation now aligns Azure Container Apps to minimum and maximum replica counts of
  1 so process-local configuration and statistics remain consistent while the application stays
  continuously available.
• Container release guidance documents the Docker Hub token permissions needed to publish images
  and remove temporary architecture tags.

Security

• Valid Basic credentials now establish a one-time, process-scoped secure dashboard session cookie,
  replacing per-request PBKDF2 work for subsequent administrative requests in the same browser
  session.