Skip to content

chore(deps): bump github.com/pb33f/libopenapi from 0.38.5 to 0.38.7#177

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/pb33f/libopenapi-0.38.7
Open

chore(deps): bump github.com/pb33f/libopenapi from 0.38.5 to 0.38.7#177
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/pb33f/libopenapi-0.38.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/pb33f/libopenapi from 0.38.5 to 0.38.7.

Release notes

Sourced from github.com/pb33f/libopenapi's releases.

v0.38.7 improves composed bundling by correctly lifting external Security Scheme references—including bare-file and component-fragment refs—into components.securitySchemes, with safeguards against misclassifying wrapper maps or complete OpenAPI documents. Arazzo engines can now inject a context-aware SleepFunc through EngineConfig, enabling replay-safe retry delays in durable workflow runtimes and deterministic tests while preserving existing behavior by default. This release also adds regression coverage for empty Security Requirement objects and updates golang.org/x/sync to v0.22.0.

@​kriptoburak @​khalidDaoud

v0.38.6

Fixes daveshanley/vacuum#928

Commits
  • 0837c9b coverage
  • 1338994 coverage
  • dd2a700 fix: compose external security scheme refs during bundling (#932)
  • a1e9b6a Bump golang.org/x/sync from 0.21.0 to 0.22.0
  • 01d2e4d arazzo: make the retry sleeper injectable via EngineConfig.SleepFunc
  • af8d024 test: cover empty security requirements
  • f078cc8 tuneups
  • 87a6330 fix: rebase external circular refs during inline bundling (vacuum #928)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 15, 2026
@github-actions

Copy link
Copy Markdown

👋 Deze PR mist nog een Changie changelog-fragment.

Voeg er een toe:

changie new

Verwacht pad: .changes/unreleased/*.yaml

@github-actions

Copy link
Copy Markdown

Super-linter summary

Language Validation result
JSON Pass ✅
OPENAPI Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

OPENAPI
Error running Spectral!
Use --verbose flag to print the error stack.
Error #1: Cannot read properties of null (reading 'enum')

Bumps [github.com/pb33f/libopenapi](https://github.com/pb33f/libopenapi) from 0.38.5 to 0.38.7.
- [Release notes](https://github.com/pb33f/libopenapi/releases)
- [Commits](pb33f/libopenapi@v0.38.5...v0.38.7)

---
updated-dependencies:
- dependency-name: github.com/pb33f/libopenapi
  dependency-version: 0.38.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/pb33f/libopenapi-0.38.7 branch from 5d5b7cb to c5ed7e5 Compare July 16, 2026 13:29
@github-actions

Copy link
Copy Markdown

Super-linter summary

Language Validation result
JSON Pass ✅
OPENAPI Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants