feat: add support for validating Arazzo 1.1.0

[DmitryAnansky]

What/Why/How?

What's new in Arazzo 1.1.0 (verified against spec.openapis.org/arazzo/latest.html)

Object	Change
Root	New optional $self (URI-reference, base URI for the doc)
Source Description	type gains asyncapi (was openapi/arazzo)
Step	New channelPath (AsyncAPI channel pointer, joins mutual-exclusivity group with operationId/operationPath/workflowId), action (send/receive), correlationId, timeout (integer, ms), dependsOn (list of stepIds)
Parameter	in gains querystring (OpenAPI 3.2 alignment)
Criterion	Object form of type is now the generalized Expression Type Object; jsonpath versions gain rfc9535, xpath versions gain xpath-31
Expression Type Object	type: jsonpath/xpath/jsonpointer; version REQUIRED: jsonpath→rfc9535,draft-goessner-dispatch-jsonpath-00; xpath→xpath-31,xpath-30,xpath-20,xpath-10; jsonpointer→rfc6901
Selector Object (new)	context (REQUIRED), selector (REQUIRED), type (REQUIRED, string enum or Expression Type Object). Usable in outputs, parameter values, requestBody payload, payload replacement values
Outputs	Values may be runtime-expression strings or Selector Objects
Payload Replacement	New targetSelectorType (string enum or Expression Type Object); value may be a Selector Object
Success/Failure Action	New parameters (list of Parameter Object | Reusable Object) for passing inputs to the referenced workflow
Runtime expressions	New $message.header.*, $message.payload, $self sources (no lint impact — expressions are opaque strings to lint)

---

Reference

Closes: #2825

Testing

Screenshots (optional)

Check yourself

• This PR follows the contributing guide
• All new/updated code is covered by tests
• Core code changed? - Tested with other Redocly products (internal contributions only)
• New package installed? - Tested in different environments (browser/node)
• Documentation update has been considered

Security

• The security impact of the change has been considered
• Code follows company security practices and guidelines

---

Note

Medium Risk
Touches core spec detection and config resolution for a new document version; behavior is covered by unit and e2e tests but mis-routing versions could affect all Arazzo lint runs.

Overview
Adds Arazzo 1.1.0 as a first-class lint target: detectSpec routes arazzo: 1.1.x to arazzo1_1 (1.0.x still uses arazzo1), and structural validation uses new Arazzo1_1Types ($self, AsyncAPI source descriptions, channelPath/action/selector objects, expanded expression types, etc.). 1.0 documents reject 1.1-only fields via the existing struct walk.

Configuration gains arazzo1_1Rules / arazzo1_1Preprocessors / arazzo1_1Decorators (mirroring arazzo1*), wired through presets, config merge, plugins, and CLI fixtures/telemetry for both Arazzo spec keys.

Introduces spec-step-mutually-exclusive-fields (version-aware: includes channelPath on 1.1) and updates sourceDescription-type to allow asyncapi only for arazzo1_1. Docs, ruleset templates, and e2e cover valid 1.1 workflows and the new rule.

^{Reviewed by Cursor Bugbot for commit 8cdf4f5. Bugbot is set up for automated code reviews on this repo. Configure here.}

[changeset-bot]

🦋 Changeset detected

Latest commit: 8cdf4f5

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages

Name	Type
@redocly/openapi-core	Minor
@redocly/cli	Minor
@redocly/respect-core	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	81.46% (🎯 81%)	7471 / 9171
🔵	Statements	80.81% (🎯 80%)	7764 / 9607
🔵	Functions	84.53% (🎯 84%)	1487 / 1759
🔵	Branches	73.15% (🎯 73%)	5046 / 6898

File Coverage

File	Stmts	Branches	Functions	Lines	Uncovered Lines
Changed Files
packages/cli/src/wrapper.ts	73.8%	47.22%	100%	73.17%	50, 68, 72-75, 93-100
packages/cli/src/utils/telemetry.ts	93.23%	75%	94.44%	93.89%	58, 63, 252, 288, 301-302, 387, 392
packages/core/src/detect-spec.ts	95.74%	95.83%	100%	95.74%	34, 40
packages/core/src/oas-types.ts	100%	100%	100%	100%
packages/core/src/visitors.ts	92.94%	90.12%	90%	92.5%	565, 602, 605, 626, 658, 672
packages/core/src/config/all.ts	100%	100%	100%	100%
packages/core/src/config/config.ts	61.45%	61.64%	69.76%	61.98%	176-206, 232, 236, 240-246, 249, 253-259, 291, 309-329, 384-392, 419-449
packages/core/src/config/minimal.ts	100%	100%	100%	100%
packages/core/src/config/recommended-strict.ts	100%	100%	100%	100%
packages/core/src/config/recommended.ts	100%	100%	100%	100%
packages/core/src/config/spec.ts	100%	100%	100%	100%
packages/core/src/config/utils.ts	97.53%	81.81%	100%	98.75%	33, 84-86
packages/core/src/rules/arazzo/index.ts	100%	100%	100%	100%
packages/core/src/rules/arazzo/sourceDescription-type.ts	88.88%	83.33%	100%	100%	8
packages/core/src/rules/arazzo/spec-step-mutually-exclusive-fields.ts	100%	100%	100%	100%
packages/core/src/types/arazzo1_1.ts	92.85%	85%	100%	92.85%	25, 144-147, 203
packages/core/src/types/redocly-yaml.ts	91.75%	83.01%	100%	91.48%	410, 442, 448, 491-498, 500, 651-656, 659-664, 667-672
packages/core/src/typings/arazzo.ts	100%	100%	100%	100%

Generated in workflow #10372 for commit 8cdf4f5 by the Vitest Coverage Report Action

[github-actions]

Performance Benchmark (Lower is Faster)

CLI Version	Bundle	Lint	Check Config
cli-latest	▓ 1.00x (Fastest)	▓ 1.01x ± 0.01	▓ 1.00x (Fastest)
cli-next	▓ 1.01x ± 0.01	▓ 1.00x (Fastest)	▓ 1.01x ± 0.01

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit c360758. Configure here.}