OpenAPI Generator 7.25.0

Apply the Java 25 prompt first for Java 25 deployments. OpenAPI Generator 7.25.0 itself requires Java 11 or later; the generated application's runtime and framework requirements depend on the selected generator and library. Apply the client and server rules below only to the named output targets.

Runtime and specification trust

• Pin the generator JAR or the Maven or Gradle plugin version in the build files or lock file, pin any container image by digest, and pin wrappers separately; look up the current generator release before writing a version. Verify the effective generator with version; an npm wrapper version does not identify the downloaded Java generator version.
• Select generatorName, library, and serialization options explicitly and inspect config-help -g <generator> --full-details --feature-set from the same generator version the build runs. Check the generated dependency declarations and target JDK; OpenAPI 3.1 support is beta and feature support varies by generator.
• Review the specification, descriptions, examples, defaults, operation IDs, schema names, server URLs, and vendor extensions as build inputs capable of influencing generated code. Accept only the intended operations and features; successful parsing does not establish that these inputs are safe to compile or publish.
• Keep specification validation enabled: omit --skip-validate-spec, keep plugin skipValidateSpec=false, and keep Gradle validateSpec=true. Fail on validation errors and validate the same reviewed input used for generation; these checks do not enforce runtime request