Sync open source content 🐝 (from 7270ae1a1ca13a85e75bbf69308622890893f777)

Author: beezythebot

docs/customize/authentication/configuration.mdx

@@ -207,7 +207,7 @@ end
 
 <Callout title="Note" type="info">
 
-**Security hoisting:** In cases where global security is **not** defined, Speakeasy automatically hoists the most commonly occurring operation-level security to be considered global. This simplifies SDK usage.
+**Security hoisting:** In cases where global security is **not** defined, Speakeasy automatically hoists the most commonly occurring operation-level security to be considered global. This simplifies SDK usage. To opt out, set `auth.hoistGlobalSecurity: false` in your `gen.yaml`.
 
 </Callout>
 

docs/speakeasy-reference/generation/assets/gen.yaml

@@ -15,7 +15,8 @@ generation:
     securityFeb2025: true
   auth:
     OAuth2ClientCredentialsEnabled: true
+    hoistGlobalSecurity: true
   baseServerUrl: "speakeasy.bar/public/api/"
   mockServer:
     disabled: true
-# Add language-specific configs here
+# Add language-specific configs here

docs/speakeasy-reference/generation/gen-yaml.mdx

@@ -113,12 +113,23 @@ Includes specific fixes or features to be applied during SDK generation to avoid
 ### auth
 
 - `OAuth2ClientCredentialsEnabled`: Enables the generation of code for handling OAuth 2.0 client credentials for authentication, where possible. **Enterprise license only**.
+- `hoistGlobalSecurity`: When `true` (default), Speakeasy identifies the most commonly used operation-level security scheme and hoists it to global security if no global security is defined. Set to `false` to disable this behavior.
 
 For detailed information about authentication configuration, see our [guide to customizing security and authentication](/docs/customize/authentication/configuration).
 
 ```yaml
   auth:
     OAuth2ClientCredentialsEnabled: true
+    hoistGlobalSecurity: true
+```
+
+#### Disable security hoisting
+
+Set `hoistGlobalSecurity` to `false` to opt out:
+
+```yaml
+auth:
+  hoistGlobalSecurity: false
 ```
 
 ### baseServerUrl