Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 17, 2025

Bumps github.com/pb33f/libopenapi from 0.28.2 to 0.30.0.

Release notes

Sourced from github.com/pb33f/libopenapi's releases.

v0.30.0

Fixing, adding, solving, doing, making.

This PR introduces v0.30 with significant enhancements to the breaking rules system, concurrency improvements in the indexing layer, and API additions for programmatic spec building. The main changes include:

  • Refactored breaking rules to be fully configurable with validation
  • Added reference support to high-level v3 types for better spec construction
  • Improved concurrency handling in rolodex file loading to prevent deadlocks
  • Updated test assertions to reflect corrected breaking change counts

Key Changes

  • Introduced configurable breaking rules system with YAML validation
  • Added CreateXRef() helper functions for Parameter, Response, RequestBody, PathItem, Header, Link, Callback, and SecurityScheme
  • Fixed circular reference deadlocks in rolodex by coordinating indexing with context tracking
  • Refactored PropertyCheck creation across 20+ files to use NewPropertyCheck helper

Docs updated:

https://pb33f.io/libopenapi/bundling/#advanced-inline-bundling https://pb33f.io/libopenapi/modifying/#using-references https://pb33f.io/libopenapi/what-changed/#configurable-breaking-change-rules

Fixes

v0.29.1

Adds additional 3.2 properties that I missed during dev, discovered when testing upstream.

Docs also available https://pb33f.io/libopenapi/what-changed/#configurable-breaking-change-rules

v0.29.0

Configurable Breaking Change Rules

New Feature

  • Configurable breaking change detection - All breaking change rules are now configurable instead of hardcoded, allowing users to customize what is considered a breaking change for their use case

New Files

  • breaking_rules.go - Core API functions (GenerateDefaultBreakingRules(), IsBreakingChange(), BreakingAdded/Modified/Removed())
  • breaking_rules_model.go - Type definitions for all component rules (Schema, Operation, Parameter, etc.)
  • breaking_rules_config.go - Configuration management with Merge() and IsBreaking() lookup methods
  • breaking_rules_constants.go - Component and property name constants for type-safe lookups
  • breaking_rules_test.go

Key Capabilities

... (truncated)

Commits
  • 5911841 fixed breaking change count.
  • d21fd23 more testing with what-changes breaking config
  • 9fb26ec last line of coverage.
  • 596d471 added missing util files
  • 3498b98 tune up windows path handling.
  • a7074d1 remove dead code
  • f8a9f1d add signaling tests
  • 93552af resolve relative file path lookup.
  • 1a3b264 aded CPU core test for async ref lookup.
  • e47c626 address that coverage
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/pb33f/libopenapi](https://github.com/pb33f/libopenapi) from 0.28.2 to 0.30.0.
- [Release notes](https://github.com/pb33f/libopenapi/releases)
- [Commits](pb33f/libopenapi@v0.28.2...v0.30.0)

---
updated-dependencies:
- dependency-name: github.com/pb33f/libopenapi
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 17, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 18, 2025

Superseded by #620.

@dependabot dependabot bot closed this Dec 18, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/pb33f/libopenapi-0.30.0 branch December 18, 2025 19:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant