Query/header/cookie/path params were attached to the path item (since the
5.0 typed-OpenAPI feature), so a sibling method on the same path inherited
them — e.g. @api.post inheriting @api.get's query params (exposed by 5.1's
same-path multi-method routing). Each operation now carries only its own
parameters, which is also where most tooling expects them. Updated two tests
that asserted the old path-level location; added a regression test.
Backwards-compatible (valid OpenAPI either way). 568 tests pass; ruff + mypy clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
kennethreitz
bdd9358faa