Release 0.10.0

[rasuvaeff]

Everything the first full-cycle review turned up, in one minor.

• Fixed. A YAML document under a kilobyte could exhaust memory and die with a fatal error rather than an InvalidContract: anchors expand inside the parser, before any budget measures anything, and the byte budget measures the file. Documents are now measured by what they expand into (Bound what a document expands into, not only what it weighs #121, issue A sub-kilobyte YAML document exhausts memory and dies with a fatal error #120).
• Added. Limits::$documentNodes, default 5 000 000 — above what any document within documentBytes can hold, so it refuses amplification without refusing size.
• Changed. Matching indexes routes by method, segment count and first literal segment instead of scanning every operation on every request: 0.83 ms → 0.006 ms on a thousand-operation document, and flat in the size of the document (Find an operation without walking the document #123).
• Changed. The message-reading trait joined the mutation gate's coverage map — it produced no mutants at all before (Bound what a document expands into, not only what it weighs #121).
• Documentation. Three divergences from the specification are written down rather than merely true, with the reasoning for leaving behaviour alone (Write down three divergences instead of changing behaviour #122).
• Added. Two examples: a PSR-15-shaped gate over a multi-file document, and the budgets.

bc-check against v0.9.0 is clean — nothing was removed or narrowed. Consumer bridged first: property-testing-openapi accepts ^0.10 as of its #90, green on every line it declares.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Team

Run ID: 6cca5c5b-120b-4fda-a622-7c4fe764f827

Warning

Your free Security trial is over. An organization admin can upgrade to Advanced for continuous pull request security review or dismiss this notice.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}