fix: harden yaml parsing

[Gavin Barron (gavinbarron)]

Pull Request

Description

Improved safety when loading OAS documents from YAML inputs

Type of Change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update
• Other (please describe):

Related Issue(s)

Changes Made

Checks loading via streams via SharpYaml events
Adds alias budget
Adds new helpers for AddYamlReader

Testing

• Unit tests added/updated
• Integration tests added/updated
• Manual testing performed
• All existing tests pass

Checklist

• My code follows the code style of this project
• I have performed a self-review of my own code
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes

Versions applicability

• My change applies to the version 1.X of the library, if so PR link:
• My change applies to the version 2.X of the library, if so PR link:
• My change applies to the version 3.X of the library, if so PR link: this one...
• I have evaluated the applicability of my change against the other versions above.

See the contributing guidelines for more information about how patches are applied across multiple versions.

Additional Notes

[github-code-quality]

Code Coverage Overview

Languages: C#

C# / code-coverage/dotnet

The overall coverage in commit 684c8d6 in the fix/harden-yaml-load... branch remains at 89%, unchanged from commit 39a80f3 in the main branch.

Show a code coverage summary of the most impacted files.

File	main 39a80f3	fix/harden-yaml-load... 684c8d6	+/-
/home/runner/wo...amlConverter.cs	90%	89%	-1%
/home/runner/wo...gsExtensions.cs	100%	100%	0%
/home/runner/wo...iSchemaRules.cs	93%	97%	+4%
/home/runner/wo...derException.cs	67%	83%	+16%
/home/runner/wo...piYamlReader.cs	74%	92%	+18%
/home/runner/wo...mlJsonParser.cs	0%	86%	+86%
/home/runner/wo...ersionBudget.cs	0%	91%	+91%
/home/runner/wo...aderSettings.cs	0%	100%	+100%

---

_{Updated August 18, 2026 23:23 UTC}

[sonarqubecloud]

Quality Gate passed

Issues
6 New issues
0 Accepted issues

Measures
0 Security Hotspots
87.1% Coverage on New Code
0.4% Duplication on New Code

See analysis details on SonarQube Cloud