Skip to content

deps: bump github.com/pb33f/libopenapi from 0.38.6 to 0.38.7#139

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/go_modules/github.com/pb33f/libopenapi-0.38.7
Jul 19, 2026
Merged

deps: bump github.com/pb33f/libopenapi from 0.38.6 to 0.38.7#139
github-actions[bot] merged 1 commit into
mainfrom
dependabot/go_modules/github.com/pb33f/libopenapi-0.38.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 19, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/pb33f/libopenapi from 0.38.6 to 0.38.7.

Release notes

Sourced from github.com/pb33f/libopenapi's releases.

v0.38.7 improves composed bundling by correctly lifting external Security Scheme references—including bare-file and component-fragment refs—into components.securitySchemes, with safeguards against misclassifying wrapper maps or complete OpenAPI documents. Arazzo engines can now inject a context-aware SleepFunc through EngineConfig, enabling replay-safe retry delays in durable workflow runtimes and deterministic tests while preserving existing behavior by default. This release also adds regression coverage for empty Security Requirement objects and updates golang.org/x/sync to v0.22.0.

@​kriptoburak @​khalidDaoud

Commits
  • 0837c9b coverage
  • 1338994 coverage
  • dd2a700 fix: compose external security scheme refs during bundling (#932)
  • a1e9b6a Bump golang.org/x/sync from 0.21.0 to 0.22.0
  • 01d2e4d arazzo: make the retry sleeper injectable via EngineConfig.SleepFunc
  • af8d024 test: cover empty security requirements
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/pb33f/libopenapi](https://github.com/pb33f/libopenapi) from 0.38.6 to 0.38.7.
- [Release notes](https://github.com/pb33f/libopenapi/releases)
- [Commits](pb33f/libopenapi@v0.38.6...v0.38.7)

---
updated-dependencies:
- dependency-name: github.com/pb33f/libopenapi
  dependency-version: 0.38.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 19, 2026
@github-actions
github-actions Bot merged commit 5149fa9 into main Jul 19, 2026
8 of 9 checks passed
@codecov

codecov Bot commented Jul 19, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/pb33f/libopenapi-0.38.7 branch July 19, 2026 09:09
@dependabot
dependabot Bot restored the dependabot/go_modules/github.com/pb33f/libopenapi-0.38.7 branch July 19, 2026 09:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants