Flint release notes

Summary

In this release, in the OpenAPI flow-trigger, we added support for updating an existing OpenAPI document via the UI, and also introduced smart body encoding and content-type header selection. Additionally, we added support for overriding host, basePath and schemes in OpenAPI 2.0 and servers in OpenAPI 3.0 documents respectively.

Update

To update an existing API Builder application, execute the following command from within the application directory:

npm update

To update the API Builder CLI, execute the following command:

axway pm update

Breaking changes

• #7195: @axway/api-builder-plugin-ft-oas now requires a minimum API Builder version of Flint.
• #7168: @axway/api-builder-plugin-ft-oas is more strict when a response body is sent without a content-type header, and will now return a 500 Server Error if the correct content-type cannot automatically be determined from the OpenAPI document.
• #7212: @axway/api-builder-plugin-ft-oas now sends 400 Bad Request if a client includes a HTTP body but the document does not define one.

Features

• #7220: Added support for updating previously imported API documents.
• #7168: @axway/api-builder-plugin-ft-oas now has smart content-type header selection to when a HTTP response body is set in the flow without a content-type header. The flow-trigger will attempt to determine the correct content-type from the OpenAPI document.
• #7168: @axway/api-builder-plugin-ft-oas now has automatic JSON response body encoding when a content-type header is not set in the flow and the OpenAPI document describes a single JSON mime-type for that response.
• #7195: @axway/api-builder-plugin-ft-oas can now handle OpenAPI documents containing references with requestBody of content-type application/x-www-form-urlencoded or multipart/form-data.
• #7138: @axway/api-builder-plugin-ft-oas now supports configuration overrides in the OpenAPI 2.0 and 3.0 documents when config.apidoc.overrides are set.
• #7214: Added a log warning when a GET/HEAD request sends a body, that the body will be ignored.

Fixes

• #7226: Fixed an issue with @axway/api-builder-plugin-fn-restclient flow-node while invoking an API with it should be able to access the response body of the API call when the method is DELETE or OPTIONS.
• #7195: Fixed an issue with @axway/api-builder-plugin-ft-oas that failed to dereference JSON schema when parsing and validating the request body or parameters.
• #7228: Updated marked dependency to fix CVE-2022-21680 and CVE-2022-21681.
• #7212: Fixed an issue in @axway/api-builder-plugin-ft-oas that incorrectly treated requests having content-length: 0 as being invalid, even when the body was optional.

Updated modules

• @axway/amplify-api-builder-cli@2.0.2
• @axway/api-builder@5.0.2
• @axway/api-builder-admin@1.49.0
• @axway/api-builder-runtime@4.80.2
• @axway/api-builder-sdk@1.1.19
• @axway/api-builder-test-utils@1.5.5

Updated plugins

• @axway/api-builder-plugin-fn-restclient@2.1.0
• @axway/api-builder-plugin-ft-oas@0.9.1

Known issues

For a list of up-to-date known issues see API Builder known issues.

Previous releases