Skip to content

build(deps): bump github.com/pb33f/libopenapi from 0.41.6 to 0.41.8 - #304

Merged
github-actions[bot] merged 1 commit into
developfrom
dependabot/go_modules/github.com/pb33f/libopenapi-0.41.8
Nov 5, 2026
Merged

github-actions[bot] merged 1 commit into
developfrom
dependabot/go_modules/github.com/pb33f/libopenapi-0.41.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps github.com/pb33f/libopenapi from 0.41.6 to 0.41.8.

Release notes

Sourced from github.com/pb33f/libopenapi's releases.

v0.41.8

  • Faster schema comparisons: reuse cached quick hashes before building referenced schemas, reducing processing time and allocations when UseSchemaQuickHash is enabled. (#670)

  • More accurate validation and change detection: compare enum entries by JSON value, fixing array/object false positives and numeric equality checks; correctly read whole-number floats such as maxLength: 2.0 in Swagger 2.0 parameters, items, and headers. (#656, #671)

@​CaliLuke @​youdie006 @​josephaxisa

v0..41.7

v0.41.7

This one stings a bit. With quick hash on (openapi-changes turns it on), a single circular reference made libopenapi treat every schema in the document as circular. Changes just vanished. I ran stripe.yaml against a copy with 300 breaking edits and got back zero. Zero.

Fixed. All 300 show up now. Big thanks to the contributors who chased down this one and three more. You lot are the best.

  • Circular refs only flag schemas on a loop (#667, fixes #662). Quick-hash diffs on documents with cycles report what they were missing.
  • No race when building from YAML merges (#658, fixes #657). Model building reads merged copies and leaves shared nodes alone. New public helper: utils.ResolveMergeNodes.
  • Float-tagged int64 keywords read correctly (#666, fixes #665). maxLength: 2.0 stops turning into 0. Huge values clamp, fractions stay unset.
  • Parameter $ref found at any key position (#660, fixes #659). No more bogus "has no name value" errors in OpenAPI 3.1.
  • Less hashing work (#664). Fewer redundant hashes, plus a new NodeMap.GetNodeLines().
  • Dependency bump. golang.org/x/sync goes to 0.24.0.

Upgrade, especially if you diff specs with cycles. Much more to come.

@​CaliLuke @​josephaxisa @​navaneethan-ac9 @​TastyHeadphones

Commits
  • 1fdef3e fix: bound enum numeric normalization before parsing
  • a36e1ce fix: compare enum entries by JSON value
  • de44371 fix: read float-tagged int keywords in Swagger 2.0 parameters, items and headers
  • b85883d perf: reuse a reference's quick hash before building its schema
  • 3406d80 Separate Go and TypeScript SDKs in README
  • 4ebc1f0 Add link for generating Go & TypeScript SDKs
  • b65dfd8 test: simplify hash coverage and clarify pool smoke checks
  • d2f489d perf(index): skip hashes for small origin identity matches
  • 9c90f7d perf(index): keep small hash traversals in local buffers
  • 20be038 perf(index): avoid redundant origin hashes and leaf traversal scratch
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from SyniRon as a code owner November 5, 2026 14:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 5, 2026
@coderabbitai

coderabbitai Bot commented Nov 5, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: b3405a59-e229-4931-8e2c-813d0dde930c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@github-actions
github-actions Bot enabled auto-merge (squash) November 5, 2026 14:34
Bumps [github.com/pb33f/libopenapi](https://github.com/pb33f/libopenapi) from 0.41.6 to 0.41.8.
- [Release notes](https://github.com/pb33f/libopenapi/releases)
- [Commits](pb33f/libopenapi@v0.41.6...v0.41.8)

---
updated-dependencies:
- dependency-name: github.com/pb33f/libopenapi
  dependency-version: 0.41.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/pb33f/libopenapi-0.41.8 branch from c1d6791 to 523375f Compare November 5, 2026 14:45
@github-actions
github-actions Bot merged commit 3581971 into develop Nov 5, 2026
5 checks passed
@github-actions
github-actions Bot deleted the dependabot/go_modules/github.com/pb33f/libopenapi-0.41.8 branch November 5, 2026 14:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants