Skip to content

fix(deps): update module github.com/pb33f/libopenapi to v0.38.7 - #11

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-pb33f-libopenapi-0.x
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-pb33f-libopenapi-0.x

Conversation

@renovate

@renovate renovate Bot commented Nov 7, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/pb33f/libopenapi v0.36.1 → v0.38.7 age confidence

Release Notes

pb33f/libopenapi (github.com/pb33f/libopenapi)

v0.38.7

Compare Source

v0.38.7 improves composed bundling by correctly lifting external Security Scheme references—including bare-file and component-fragment refs—into components.securitySchemes, with safeguards against misclassifying wrapper maps or complete OpenAPI documents. Arazzo engines can now inject a context-aware SleepFunc through EngineConfig, enabling replay-safe retry delays in durable workflow runtimes and deterministic tests while preserving existing behavior by default. This release also adds regression coverage for empty Security Requirement objects and updates golang.org/x/sync to v0.22.0.

@​kriptoburak @​khalidDaoud

v0.38.6

Compare Source

Fixes daveshanley/vacuum#928

v0.38.5

Compare Source

Fixes #​597

v0.38.4

Compare Source

Just an internal refactor and deduplication of code, and build speed upgrades. No fixes, no features, no breaking changes,

v0.38.3

Compare Source

Fixes concurrent rendering issues stemming from changes in how the YAML lib has changed between RCs

#​594

@​gnuletik

v0.38.2

Compare Source

Bumps to rc6 on yaml and fixed $def handling in bundler.

v0.38.1

Compare Source

Fixes #​590 and moved to our own fork of testify

v0.38.0

Compare Source

Improves parse/index performance and memory use with lazy SpecInfo JSON generation, lower-allocation node indexing, faster component-path conversion, and reduced goroutine overhead in small translation/schema paths.

Adds SkipMetadataCollection for consumers that do not need diagnostic index metadata, allowing faster/lighter parsing for large documents.

Tightens YAML handling around duplicate keys, merge/root errors, empty overlays, and YAML v4 rc.5 rendering behavior.

Fixes OpenAPI 3.0 webhooks extraction so same-named scalar values no longer create empty webhook maps.

Improves change detection and generator metadata fidelity, including anchor-insensitive YAML comparisons and preserved/inferred

YAML tags for generated enum/const metadata.

@​asadtariq96

v0.37.3

Compare Source

Address issue #​581

v0.37.2

Compare Source

Provides a deeper fix for #​575

v0.37.1

Compare Source

Addresses regression identified in #​575

v0.37.0

Compare Source

New generator module that Generated Code and Specs.

https://pb33f.io/libopenapi/generating-code/
https://pb33f.io/libopenapi/parsing-code/

Code from OpenAPI and OpenAPI from Code, all built in. no deps. no run-time required.

v0.36.6

Compare Source

Fixes issues with auto-detecting types when bundling by adding a source path to determine type cleanly. No breaking changes.

v0.36.5

Compare Source

New budgeting controls and logic for rendering mocks. Some specs with crazy max limits as traits were causing insane blowout mock generation. No breaking changes.

v0.36.4

Compare Source

Various fixes with bundler dealing with rewriting relative paths in composed mode, some house-keeping and cleanup.

No new features or breaking changes.

v0.36.3

Compare Source

Fixes

v0.36.2

Compare Source

Addresses #​565


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Nov 7, 2026
@renovate

renovate Bot commented Nov 7, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.0 -> 1.25.7
golang.org/x/sync v0.20.0 -> v0.22.0

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgithub.com/​pb33f/​libopenapi@​v0.36.1 ⏵ v0.38.775 +1100100100100
Updatedgo.yaml.in/​yaml/​v4@​v4.0.0-rc.4 ⏵ v4.0.0-rc.697100100100100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants