v0.18.0

Minor Changes

• Added RouteDocs and ServiceBuilder::route_with_docs so proxy routes, paid or free, can declare a summary and an OpenAPI requestBody that generate_openapi emits in the proxy's /openapi.json. Route gains a docs field. (by Georgios Konstantopoulos, #661)
• Removed TempoBuilder::fee_payer_allow_key_authorization and ChargeMethod::with_fee_payer_allow_key_authorization: the fee payer now sponsors transactions that carry a key authorization, so an access key can pay in the transaction that installs it. The fee payer's gas and total-fee policy still bounds the cost. (by Georgios Konstantopoulos, #661)

Patch Changes

• Authenticate vouchers and commit channel refreshes atomically so rejected credentials cannot consume recognized prepaid credit. (by Georgios Konstantopoulos, #661)
• Keep replacement close evidence and metering guards intact when an older close handler finishes late. (by Georgios Konstantopoulos, #661)
• Reject confirmed Stripe PaymentIntent replays as terminal credential-replayed errors, without replacement payment challenges. (by Georgios Konstantopoulos, #661)

What's Changed

• ci: bump tempoxyz/changelogs to v0.11.0 by @brendanjryan in #655
• fix: reject Stripe replays without offering another payment by @brendanjryan in #656
• fix: commit voucher refresh only after authentication by @brendanjryan in #657
• fix: preserve replacement close state during stale cleanup by @brendanjryan in #658
• feat(proxy): add per-route summary and requestBody to OpenAPI discovery (mppx#1118) by @brendanjryan in #660
• fix(tempo): sponsor transactions that install access keys by @gakonst in #661
• Release v0.18.0 by @tempo-github-sts[bot] in #659

Full Changelog: v0.17.1...v0.18.0