diff --git a/docs/reference/api/openapi-v1.yaml b/docs/reference/api/openapi-v1.yaml
index 6550288..05f3f2d 100644
--- a/docs/reference/api/openapi-v1.yaml
+++ b/docs/reference/api/openapi-v1.yaml
@@ -470,6 +470,14 @@ paths:
           a response with problem details in RFC 9457 format will be returned. In this case,
           the response's content type will be <code>application/problem+json</code>.
         </p>
+        <p>
+          When creating projects, <code>parentUUID</code> or <code>parentName</code> and
+          <code>parentVersion</code> can place the new project under a parent,
+          <code>projectTags</code> can apply tags, and <code>isLatest</code> can mark it as
+          the latest version. The <code>isActive</code> parameter sets the project's active
+          state whenever it is provided, including when the target project already exists, so
+          clients should send it only when they intend to change that state.
+        </p>
         <p>Requires permission <strong>BOM_UPLOAD</strong></p>
       operationId: UploadBom
       requestBody:
@@ -483,6 +491,8 @@ paths:
                   default: false
                 bom:
                   type: string
+                isActive:
+                  type: boolean
                 isLatest:
                   type: boolean
                   default: false
@@ -540,6 +550,14 @@ paths:
           a response with problem details in RFC 9457 format will be returned. In this case,
           the response's content type will be <code>application/problem+json</code>.
         </p>
+        <p>
+          When creating projects, <code>parentUUID</code> or <code>parentName</code> and
+          <code>parentVersion</code> can place the new project under a parent,
+          <code>projectTags</code> can apply tags, and <code>isLatest</code> can mark it as
+          the latest version. The <code>isActive</code> parameter sets the project's active
+          state whenever it is provided, including when the target project already exists, so
+          clients should send it only when they intend to change that state.
+        </p>
         <p>
           The maximum allowed length of the <code>bom</code> value is 20'000'000 characters.
           When uploading large BOMs, the <code>POST</code> endpoint is preferred,
@@ -9681,6 +9699,8 @@ components:
           description: Base64 encoded BOM
           example: ewogICJib21Gb3JtYXQiOiAiQ3ljbG9uZURYIiwKICAic3BlY1ZlcnNpb24iOiAiMS40IiwKICAiY29tcG9uZW50cyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAibGlicmFyeSIsCiAgICAgICJuYW1lIjogImFjbWUtbGliIiwKICAgICAgInZlcnNpb24iOiAiMS4wLjAiCiAgICB9CiAgXQp9
           pattern: "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$"
+        isActive:
+          type: boolean
         isLatest:
           type: boolean
         parentName:
@@ -10952,6 +10972,10 @@ components:
           maxLength: 255
           minLength: 0
           pattern: "[\\P{Cc}]+"
+        permissions:
+          type: array
+          items:
+            $ref: "#/components/schemas/Permission"
         username:
           type: string
           maxLength: 255
@@ -11237,6 +11261,10 @@ components:
             $ref: "#/components/schemas/Permission"
         suspended:
           type: boolean
+        teams:
+          type: array
+          items:
+            $ref: "#/components/schemas/Team"
         username:
           type: string
           maxLength: 255
@@ -11490,19 +11518,11 @@ components:
           maxLength: 255
           minLength: 0
           pattern: "[\\P{Cc}]+"
-        permissions:
-          type: array
-          items:
-            $ref: "#/components/schemas/Permission"
         subjectIdentifier:
           type: string
           maxLength: 255
           minLength: 1
           pattern: "[\\P{Cc}]+"
-        teams:
-          type: array
-          items:
-            $ref: "#/components/schemas/Team"
         username:
           type: string
           maxLength: 255