Changelog

(feat): fern generate --version AUTO now works for an sdk-config.yml target that delivers to GitHub, so Fern Autorelease can release SDK Config targets. sdk-gen-api generates with a placeholder version, and Fiddle picks the semver bump, replaces the placeholder and writes the changelog, as it does for generators.yml groups. The CLI prints the picked version, and each AUTO run starts a new build instead of replaying an earlier one. AUTO with download or direct registry output still fails before generation, because nothing would replace the placeholder.

(fix): fern generate now fails with a deprecation error when a Fern Definition workspace is routed to sdk-gen-api, instead of the internal “composes no spec-bearing dependencies” error. sdk-gen-api generates from source specs, so the error points to fern export for migrating the API to OpenAPI.

(feat): An sdk-config.yml cli target without generatorVersion now generates with the newest fern-cli-generator the route can run, like an unpinned generator in generators.yml: the translated generator is written as version: latest, which sdk-gen-api resolves through its generator version discovery, and Fiddle and --local resolve to the newest published version. Previously it was pinned to 0.49.0, which predates the crate-name, installer URL, npm publish and build-attestation fixes. The CLI_TARGET_UNPOOLED_VERSION warning is removed.

(feat): The sdk-config.yml cli target now writes output.distribution.githubAttestations (auto, true or false) to fern-cli-generator’s config.distribution.githubAttestations, so the generated release workflow can skip build-provenance attestations on private repositories. Previously the field was dropped with a warning and the workflow always attested. Generator versions before 0.54.3 ignore the key, so auto or false on those versions warns with CLI_TARGET_ATTESTATIONS_VERSION.

(fix): Respect github.workflows: false in generators.yml when generation runs through sdk-gen-api. The setting was dropped on that route, so generated .github/workflows/* files were still committed. Requests that keep the default (true) are unchanged.

(fix): Upgrade @postman/sdk-config to 0.14.0, which adds optional output.github.workflows to SDK Config. output.github.workflows: false in sdk-config.yml is now sent to sdk-gen-api the same way as the generators.yml setting. The SDK Config cli target accepts the field and ignores it with a warning, like the other GitHub delivery settings its translated generators.yml does not write.

(feat): fern generator list and fern generator get now describe SDK Config targets from sdk-config.yml alongside legacy generator groups, so they stay accurate after fern sdk migrate.

fern generator list output now nests each API under groups (legacy groups from generators.yml or generators.legacy.yml) and targets (SDK Config targets with their language, generator, and version, where an unpinned target reports latest). A language configured in both files appears in both sections. The new --targets option filters SDK Config targets by language or target id.

(feat): settings.search.prioritize-current-product in docs.yml now defaults to true. When unset, search boosts results from the current product/version without hiding other products/versions. Set it to false to keep the previous ranking.

(fix): webhook-signature.algorithm-header now accepts key-id-parameter and algorithm-parameter so key/value settings headers such as Twilio’s X-Twilio-Webhooks-Signature-Settings: key=<id>,algorithm=HMAC_SHA256 are parsed into the bare key ID and algorithm instead of key=<id> (IR 67.33.0).

(fix): Fix fern docs dev dropping uploaded (file:) icons and images from the navigation, such as custom product switcher and navbar link icons. The Astro preview now maps the preview’s file IDs to file paths in the docs config, matching how fern generate --docs publishes. Translated navbar-links overrides now also show up in the preview.

(fix): Preserve actionable sdk-gen-api errors instead of printing [object Object] when fern sdk preview fails.

(feat): The dynamic IR now sets requirement (ALL, ANY or ENDPOINT_SECURITY) on each endpoint’s auth, so dynamic snippet generators can tell auth: any apart from endpoint-level security.

(fix): SDK Config targets and generators.yml groups that publish a NuGet or RubyGems package through GitHub now carry the api-key: ${SECRET_NAME} secret name to sdk-gen-api, so the generated release workflow reads the API key from that repository secret instead of the default one. An apiKey in sdk-config.yml that is not an environment expression is rejected, and so is an apiKey combined with trustedPublishing: true.

(fix): The SDK Config cli target accepts the fields added in @postman/sdk-config 0.13.0 instead of failing with CLI_TARGET_UNKNOWN_FIELD. apiImportSettings.inferDiscriminatedUnionBaseProperties is written as infer-discriminated-union-base-properties; package.bugs and output.distribution.githubAttestations are ignored with a warning. The field coverage check now covers only the fields a cli target can carry, so a new setting for another language no longer needs an entry.

(feat): The cli target in sdk-config.yml can now publish to npm. With GitHub delivery, output.publish with registry: npm is written as an npm output for fernapi/fern-cli-generator: trustedPublishing: true publishes with OIDC, and otherwise token: ${NAME} names the token variable (NPM_TOKEN by default). package.packageName is then the npm package name. When it is not a valid crate name (for example @acme/cli), the crate is named from the CLI binary name, or else from the kebab-cased npm name (acme-cli). Publish fields the CLI generator cannot honor warn or fail instead of being rejected as a block.

(fix): Restore the docs.yml step of fern sdk migrate. It adds specs (paths, namespaces, overlays, overrides, and import settings) to the API reference sections that use the migrated API, so docs no longer depend on generators.yml. All specs of an API stay in one section, so docs merge them into one API reference as before. The docs edits are committed together with the SDK Config and rolled back with it if anything fails.

(fix): Fix snippets: cli on a docs API reference being dropped while parsing docs.yml (and the docs section of fern.yml), so the cli dynamic IR is now generated and cliSdk is registered with FDR during docs publish.

(fix): When an API reference’s own generators.yml has a single generator for a snippet language with no package name (e.g. a local-file-system CLI generator), docs publish now uses it for dynamic snippets even if a sibling API workspace has a generator for the same language.

(fix): The “unknown package” warning from fern generate --docs now explains that SDK snippets are not supported yet for SDKs configured in sdk-config.yml.

(fix): Git-ref-backed versions (ref:) now work under products[].versions. The CLI locates the same product in the ref’s docs.yml (by slug, else display name) and builds that product’s working-tree version, falling back to the product file’s navigation. A ref from before the site adopted products: uses its site-level versions or navigation, as before. At any scope, the first path: version at the ref is used, so refs whose docs.yml lists older ref: entries first resolve correctly.

(fix): The x-displayName extension on OpenAPI tags now sets the API Reference section name in the v3 parser. Previously it was only applied when the display name differed from the tag by letter casing, so a display name such as Plants for tag plant, or any multi-word tag, fell back to the title-cased tag name.

(fix): Allow playground-docs on auth-schemes in generators.yml. Previously the CLI rejected it with Unexpected key "playground-docs", so schemes defined there could not set playground-only auth text.