Update module github.com/getkin/kin-openapi to v0.140.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/getkin/kin-openapi	v0.131.0 → v0.140.0

---

Release Notes

getkin/kin-openapi (github.com/getkin/kin-openapi)

v0.140.0

Compare Source

What's Changed

• openapi3: document that a custom ReadFromURIFunc bypasses IsExternalRefsAllowed by @​reuvenharrison in #​1191
• openapi3: remove deepcopy dependency by @​alexandear in #​1193
• openapi3: remove decimal128 dependency by @​alexandear in #​1194
• refactor: apply modernize fixes by @​alexandear in #​1195
• openapi2,openapi3: replace marshmallow with encoding/json by @​alexandear in #​1196
• docs: update GoDoc links to Go Reference by @​alexandear in #​1197
• chore: bump jsonpointer to v0.22.5 by @​alexandear in #​1198

Full Changelog: getkin/kin-openapi@v0.139.0...v0.140.0

v0.139.0

Compare Source

What's Changed

• feat(openapi3): batch-convert long-tail RequiredFieldError sites by @​reuvenharrison in #​1170
• feat(openapi3): typed validation error clusters (combined: #​1171-#​1179) by @​reuvenharrison in #​1180
• openapi3gen: skip component export for anonymous types by @​0-don in #​1163
• feat: migrate to oasdiff/yaml v0.1.0 single Unmarshal API + enable DisableTimestamps by @​reuvenharrison in #​1181
• openapi3: typed context errors for Validate() wrapper chain by @​reuvenharrison in #​1183
• openapi3: track Origin on the document root (T) by @​reuvenharrison in #​1184
• openapi3: tests flakiness corrected by @​fenollp in #​1159
• openapi3: aggregate independent validation errors via EnableMultiError by @​reuvenharrison in #​1185
• openapi3: fix validation of duplicated path templates by @​reuvenharrison in #​1189
• openapi3: type the remaining bare-error validation sites by @​reuvenharrison in #​1187

Full Changelog: getkin/kin-openapi@v0.138.0...v0.139.0

v0.138.0

Compare Source

What's Changed

• openapi3gen: clear nullable on exported component bodies by @​0-don in #​1164
• openapi3: add test for issue #​927 (nullable not respected on $ref schemas) by @​fenollp in #​1165
• test: move public-API tests to external _test packages by @​fenollp in #​1168
• feat(openapi3): add per-type validation errors with cluster wrappers by @​reuvenharrison in #​1166
• feat(openapi3conv): canonicalization pass for 3.0 -> 3.x by @​reuvenharrison in #​1162
• openapi3conv: test Upgrade on many documents by @​fenollp in #​1169

Full Changelog: getkin/kin-openapi@v0.137.0...v0.138.0

v0.137.0

Compare Source

What's Changed

• revert to go 1.25 and revert cc4f8d9 by @​fenollp in #​1161

Full Changelog: getkin/kin-openapi@v0.136.0...v0.137.0

v0.136.0

Compare Source

What's Changed

• openapi3: stop injecting contentless default in NewResponses() by @​0-don in #​1148
• openapi3: standardize Origin json tag to "-" across all types by @​reuvenharrison in #​1149
• Update usage message in cmd/validate by @​fenollp in #​1150
• openapi3: fix determinism when handling discriminator mappings by @​fenollp in #​1151
• feat: bump Go to 1.26 by @​fenollp in #​1152
• openapi3: use componentNames for deterministic visitings by @​fenollp in #​1153
• feat: add OpenAPI 3.1 support by @​reuvenharrison in #​1125
• openapi3: add JoinFunc for custom $ref path resolution by @​reuvenharrison in #​1154
• Add many many tests from ApisGuruOpenapiDirectory by @​fenollp in #​1155
• openapi3: remove map-iteration order leaks causing flaky tests by @​cloudnativeninja in #​1158
• openapi2conv: nil-guard components lookup in FromV3SchemaRef by @​SAY-5 in #​1156
• Address various lint errors by @​fenollp in #​1157

New Contributors

• @​0-don made their first contribution in #​1148
• @​cloudnativeninja made their first contribution in #​1158
• @​SAY-5 made their first contribution in #​1156

Full Changelog: getkin/kin-openapi@v0.135.0...v0.136.0

v0.135.0

Compare Source

What's Changed

• openapi3: strip origin from Encodings and ServerVariables maps by @​reuvenharrison in #​1132
• fix: update yaml3 to prevent panic on empty mapping node in sequence by @​reuvenharrison in #​1133
• openapi3: strip origin from extension values to prevent spurious diffs by @​reuvenharrison in #​1137
• openapi3: strip origin from slices in example values by @​reuvenharrison in #​1138
• fix: bump yaml and yaml3 to v0.0.4 by @​reuvenharrison in #​1136
• openapi3: OriginTree approach for origin tracking — separate pass, no inline stripping by @​reuvenharrison in #​1142
• README: drop go-openapi/spec3 by @​zonescape in #​1143
• fix: bump yaml3+yaml to v0.0.9 to fix -root schema origin by @​reuvenharrison in #​1144
• openapi3: call ReadFromURIFunc before checking IsExternalRefsAllowed by @​reuvenharrison in #​1146
• fix: use location.String() instead of location.Path for origin file tracking by @​reuvenharrison in #​1145
• refactor: Replace sort usage with slices package by @​jedevc in #​1147

New Contributors

• @​zonescape made their first contribution in #​1143
• @​jedevc made their first contribution in #​1147

Full Changelog: getkin/kin-openapi@v0.134.0...v0.135.0

v0.134.0

Compare Source

What's Changed

• openapi3filter: feat(multipart-ct-decoder): default body decoder on binary schema by @​mieltn in #​1097
• openapi3: ensure SchemaErrors get the correct path for allOf schemas by @​jamesfcarter in #​1098
• openapi3filter: Fix empty string handling in parameter validation by @​utah-KT in #​1096
• tidy(docs): Update references to oapi-codegen project URL (issue #​1094) by @​frenchi in #​1095
• openapi2conv: fix allOf inside additionalProperties by @​dani-maarouf in #​1103
• openapi3filter: Reject requests with body when non expected (issue 1100) by @​CynanX in #​1101
• openapi3: fix for RFC3339 validation: time-offset is a required component by @​mpreu in #​1104
• openapi3: add file path to origin location tracking by @​reuvenharrison in #​1128
• openapi3filter: fix bug where absent optional properties fail validation in form-urlencoded requests by @​thierry-f-78 in #​1110
• feat: add document-scoped format validators to prevent global state pollution by @​the-corp-mark in #​1126
• openapi3: process discriminator mapping values as refs by @​RaduPetreTarean in #​1108
• openapi3: serialize Extensions when using $ref by @​irees in #​1131

New Contributors

• @​mieltn made their first contribution in #​1097
• @​jamesfcarter made their first contribution in #​1098
• @​utah-KT made their first contribution in #​1096
• @​frenchi made their first contribution in #​1095
• @​dani-maarouf made their first contribution in #​1103
• @​CynanX made their first contribution in #​1101
• @​mpreu made their first contribution in #​1104
• @​thierry-f-78 made their first contribution in #​1110
• @​the-corp-mark made their first contribution in #​1126
• @​RaduPetreTarean made their first contribution in #​1108

Full Changelog: getkin/kin-openapi@v0.133.0...v0.134.0

v0.133.0

Compare Source

What's Changed

• openapi3: resolve Snyk security warning with path traversal by @​seborama in #​1066
• openapi3: replace bigfloat with decimal128 to fix rounding errors during validation by @​Revolyssup in #​1068
• openapi2conv: Preserve externalDocs on operations during conversion by @​hwustrack in #​1070
• openapi3: fix ineffectual caching of compiled regexps by @​philpearl in #​1076
• openapi3: use Ptr instead of BoolPtr,Float64Ptr,Int64Ptr,Uint64Ptr by @​alexandear in #​1033
• openapi3: resolve refs in parameter examples by @​reuvenharrison in #​1086
• openapifilter: Add support for RFC 7396 application/merge-patch+json by @​byted in #​1084
• openapi3filter: use FileBodyDecoder if the format is specified as binary by @​dbarrosop in #​1088
• openapi3: preserve all validation errors for allOf by @​alexbakker in #​1087
• openapi3filter: support primitive parsing for individual text like parts in multipart/form-data by @​nmeheus in #​1090
• Some coding style fixes and cleaning up by @​fenollp in #​1093
• openapi2conv: preserve x-fields when converting from v2 to v3 by @​saltbo in #​1092

New Contributors

• @​seborama made their first contribution in #​1066
• @​Revolyssup made their first contribution in #​1068
• @​hwustrack made their first contribution in #​1070
• @​philpearl made their first contribution in #​1076
• @​byted made their first contribution in #​1084
• @​dbarrosop made their first contribution in #​1088
• @​nmeheus made their first contribution in #​1090
• @​saltbo made their first contribution in #​1092

Full Changelog: getkin/kin-openapi@v0.132.0...v0.133.0

v0.132.0

Compare Source

What's Changed

• style: Use fmt.Sprint without formating by @​gaiaz-iusipov in #​1061
• openapi3filter: don't consume request body in AuthenticatorFunc by @​jamietanna in #​1064
• openapi2conv: fix for refs on items within additional properties by @​roberth1988 in #​1067

New Contributors

• @​gaiaz-iusipov made their first contribution in #​1061
• @​roberth1988 made their first contribution in #​1067

Full Changelog: getkin/kin-openapi@v0.131.0...v0.132.0

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • "every weekday,every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.24.2 -> 1.25
github.com/go-openapi/jsonpointer	v0.21.1 -> v0.22.5
github.com/oasdiff/yaml	v0.0.0-20250309154309-f31be36b4037 -> v0.1.0
github.com/oasdiff/yaml3	v0.0.0-20250309153720-d2182401db90 -> v0.0.13