Changelog

June 12, 2026

3.72.2

(fix): Use string literal for this.name in generated error classes instead of this.constructor.name, which gets mangled by minifiers.

3.72.1

(chore): Bump bundled @fern-api/generator-cli to 0.9.39 (Replay 0.18.0) for more reliable customization detection during regeneration.

3.72.0

(feat): Add serdeLayer config option as a positive alternative to the noSerdeLayer double negative. When both are specified, serdeLayer takes precedence.

3.71.9

(fix): Fix request body serialization when flattenRequestParameters is enabled with a non-object reference body (e.g., list<string>) and header parameters. Previously the generated code used spread destructuring which wrapped the body in an object.

June 11, 2026

3.71.8

(fix): Rebuild oxlint-tsgolint 0.23.0 from source with Go 1.26.4 to fix CVE-2026-42507 (net/textproto log injection) and CVE-2026-27145 (crypto/x509 quadratic hostname verification) in the typescript-sdk-generator container.

June 10, 2026

3.71.7

(chore): Upgrade oxc tooling: oxlint 1.63.0 → 1.69.0, oxfmt 0.48.0 → 0.54.0, oxlint-tsgolint 0.22.1 → 0.23.0. tsgolint 0.23.0 ships with go1.26.3 (clearing go/stdlib CVEs), so the rebuild-from-source Docker stage is removed entirely.

3.71.6

(fix): Fix hasNextPage for offset pagination so it no longer compares items.length against a fabricated default when the caller omits the page-size parameter (FER-11160). The previous logic substituted a generator-chosen default (often 1), which produced false-positive continuation on short pages and false-negative termination when the default was non-trivial. The pager now gates the size comparison on whether the caller actually provided a page-size: when supplied, a short page still short-circuits (saves one round-trip at the tail); when omitted, it falls back to an items-driven check. Explicit response.hasNextPage from the API continues to take priority.

June 8, 2026

3.71.5

(fix): Fix race condition in anySignal() where abort events could be silently dropped when a source signal aborts between the aborted check and addEventListener registration.

June 4, 2026

3.71.4

(fix): Fix request URLs containing duplicate slashes (e.g. /{id}//{nestedId}) when a base-path, service base-path, and endpoint path are joined together. Consecutive slashes in the generated URL are now collapsed into a single slash, matching the URL used in generated wire tests.

May 27, 2026

3.71.3

(fix): Retain a reference to the upstream Response on streaming and SSE response bodies so that undici’s FinalizationRegistry does not garbage-collect the Response and cancel the body stream on Node 18+.

May 22, 2026

3.71.2

(chore): Bump Node.js base image from 24.15 to 24.16.

May 21, 2026

3.71.1

(fix): Bump @fern-api/generator-cli to 0.9.35, which disables minimatch negation on .fernignore patterns so a stray !pattern no longer silently inverts the match and discards generator output.

May 20, 2026

3.71.0

(feat): Apply client-default to root path parameters at runtime. When omitted at client construction, the configured default now lands in the URL instead of undefined.

3.70.9

(fix): Use hasWebSocketInTree IR field to wire WebSocket sub-clients into the root client, even when the WebSocket channel lives on a nested sub-resource rather than the top-level namespace package.

May 18, 2026

3.70.8

(chore): Update OS packages in the TypeScript SDK generator container from Debian sid to fix krb5 (CVE-2026-40355, CVE-2026-40356), curl (CVE-2026-1965, CVE-2026-4873, CVE-2026-5545, CVE-2026-6253, CVE-2026-6429), gnutls28 (CVE-2026-3832), and expat (CVE-2026-45186).