chore(deps): bump github.com/pb33f/libopenapi from 0.38.7 to 0.40.1 in the go-dependencies group

[dependabot]

Bumps the go-dependencies group with 1 update: github.com/pb33f/libopenapi.

Updates github.com/pb33f/libopenapi from 0.38.7 to 0.40.1

Release notes

Sourced from github.com/pb33f/libopenapi's releases.

v0.40.1

fix: initialize operation reference so a failed sibling cannot cause a nil panic

@​SAY-5

v0.40.0

This release adds a TypeScript model generator and improves OpenAPI 3.1 enum generation for Go. Both model targets build from the same schema IR.

• TypeScript models: Generate type-only modules from component schemas, including interfaces, literal unions, composition, discriminators, nullable types, recursive maps, and component references.
• Go models: Scalar const values in OpenAPI 3.1 oneOf and anyOf schemas now generate typed enums and constants instead of raw JSON unions.

@​sloudel

v0.39.1 is a focused performance and correctness release for indexing large OpenAPI documents and generating reliable Go SDK clients.

• Dramatically speeds up indexing of large, minified single-line JSON specs.
• Reduces indexing work by recording each YAML/JSON node only once.
• Generated Go SDKs now reject missing JSON bodies while correctly accepting bodyless responses such as 204 No Content.

@​s04

v0.39.0

• A new Go SDK generator that produces resource-oriented clients, reachable models, typed responses and API errors, OpenAPI security handling, and optional finite Arazzo workflow methods.
• Full Arazzo 1.1 support, including selectors, typed output values, expanded workflow and action fields, stricter validation, and version-aware runtime expressions.
• Pluggable Arazzo source resolution for OpenAPI, AsyncAPI, and Arazzo documents, with URI origin tracking and no forced network I/O.
• Improved schema and reference handling, including correct source-index attribution for external schemas, document-version resolution, and more reliable inline $ref rendering.
• Better resilience and OpenAPI 3.2 compatibility, including correct additionalOperations metadata and returning a useful error—rather than panicking—when an OpenAPI version field is missing.

@​sheidkamp @​hdimer @​HNO3Miracle

Commits

• 61ea631 fix: initialize operation reference so a failed sibling cannot cause a nil panic
• 3aa3b0d fix: close remaining coverage gaps and the bugs hiding behind them
• 72e3196 feat(generator/golang): fold 3.1 const-based scalar oneOf/anyOf into enums (#...
• c1942d9 test(index): cover waiting on an in-flight local file load
• 2965094 fix(typescript): close gaps found by differential testing and review
• bc41820 fix(typescript): keep pointer and required-name types, reserve await
• d35f299 docs: note TypeScript model generation in the README
• 4554440 test(generator): cover every new TypeScript and IR path
• d07a491 feat(generator): add TypeScript model target
• 83d6d37 fix(gosdk): reject empty JSON responses
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions