Update module github.com/pb33f/libopenapi to v0.28.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/pb33f/libopenapi	v0.22.3 -> v0.28.0

---

Release Notes

pb33f/libopenapi (github.com/pb33f/libopenapi)

v0.28.0

Compare Source

Full and complete OpenAPI 3.2 support.

https://learn.openapis.org/upgrading/v3.1-to-v3.2.html
https://github.com/OAI/OpenAPI-Specification/releases/tag/3.2.0

This is a breaking change

Issue #​117 has been implemented which means BuildV3Model() will return an error instead of []error as we're now using errors.Join.

v0.27.2

Compare Source

Adds error tracking to NodeBuilder to surface issues when rendering

v0.27.1

Compare Source

v0.27.0

Compare Source

Addresses issue #​90

v0.26.0

Compare Source

We have moved to a supported yaml lib!

https://github.com/yaml/go-yaml

No breaking changes, no new features, no nothing except a newly supported core engine. This is a feature release because it's a completely different fork of the yaml lib and it may have consequences downstream, however all our tests are in order.

v0.25.9

Compare Source

OpenAPI 3.2 support now available for document building.

v0.25.8

Compare Source

Fix issue #​457

v0.25.7

Compare Source

Adds support for OpenAPI 3.2 and HTTP QUERY to data models, index and what changed module.

v0.25.6

Compare Source

Fixes issue #​451

@​califlower

v0.25.5

Compare Source

Fixes race condition found in schema cache via parent proxy wiring.

@​califlower

v0.25.4

Compare Source

Adds SetSeed to mock renderer, to allow deterministic mocks.

Fixes #​454

@​califlower

v0.25.3

Compare Source

Address #​361

The rolodex now has support for its own LocalFS which uses absolute paths, and the fs.FS interface (which requires relative ones).

This update solves this issue, while maintaining backwards compatibility.

So now our violating interface (but what we need to map a FullDefinition) is supported, as well as allowing other compliant implementations to work.

Address #​426

Address #​438

v0.25.2

Compare Source

Adds dependentRequired support to the Schema low and high models for more JSON Schema compatibility.

v0.25.1

Compare Source

Security fix reported in #​446

This problem comes is a supply chain issue and one of the vendors in the chain is a potential bad actor. We have forked our suppliers code (ordered maps) and removed the offending supplier from there.

We have forked the github.com/wk8/go-ordered-map library as pb33f/ordered-map. Which is the exact same library, but uses the standard library for JSON, instead of easyjson, a drop in replacement for anyone else who needs a solution fast.

easyjson has been eradicated from our supply chain.

#​446

v0.25.0

Compare Source

No new features, no breaking changes - just a solid improvement on performance and memory use - particularly for very large specs.

Before:

vacuum took 3.30 seconds to lint 4.28 MB across 1 files

After

vacuum took 2.37 seconds to lint 4.28 MB across 1 files

• Fixes issue #​433

@​califlower

v0.24.0

Compare Source

Adds support for OpenAPI 3.2 Tags model and recursive parent/child structures.

Quick Hash is a feature introduced in v0.23.0 that allows much faster lookups for nested remote references. In short, it's a feature required for enterprise grade specs that need diffing over large distances. This conflicts with and edge case where you need to check changes in circular references in a single file doc.

TLDR; Quick schema cache is now set via a configuration flag in indexes and documents, it's off by default.

Various other fixes and additions from the community. Including discriminators and inline bundling (#​436)

@​marsevilspirit @​kink80 @​bcomnes @​califlower

v0.23.0

Compare Source

An upgraded rolodex with much more efficient async lookups and much less looping. No more sleeps and more efficient lock use. This cleans up messy async code from native implementations of the filesystem.

Adds a context to some of the index and rolodex APIs, so there are some breaking changes in lower level parts of the index.

Upgrades a few issues with parameters in the what-changed module. required state now being checked properly, as well as the parameter names being passed into the change object.

• Removes race conditions from index module #​367
• Resolves #​429

@​mencnert @​sebas2day

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
golang.org/x/sys	v0.33.0 -> v0.34.0

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: module github.com/pb33f/[email protected] requires go >= 1.24.7; switching to go1.24.8
go: downloading go1.24.8 (linux/amd64)
go: download go1.24.8: golang.org/[email protected]: verifying module: checksum database disabled by GOSUMDB=off

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.