Skip to content

[release-v1.21][gomod]: Bump the minor group across 1 directory with 4 updates#1133

Open
dependabot[bot] wants to merge 1 commit intorelease-v1.21from
dependabot/go_modules/release-v1.21/minor-2e0747dd5e
Open

[release-v1.21][gomod]: Bump the minor group across 1 directory with 4 updates#1133
dependabot[bot] wants to merge 1 commit intorelease-v1.21from
dependabot/go_modules/release-v1.21/minor-2e0747dd5e

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 2, 2026 •
edited
Loading

Bumps the minor group with 4 updates in the / directory: github.com/getkin/kin-openapi, github.com/oapi-codegen/nethttp-middleware, github.com/oapi-codegen/oapi-codegen/v2 and github.com/oapi-codegen/runtime.

Updates github.com/getkin/kin-openapi from 0.128.0 to 0.133.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.133.0

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.132.0...v0.133.0

v0.132.0

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.131.0...v0.132.0

v0.131.0

What's Changed

Full Changelog: getkin/kin-openapi@v0.130.0...v0.131.0

v0.130.0

What's Changed

... (truncated)

Commits
  • 2baea3d openapi2conv: preserve x-fields when converting from v2 to v3 (#1092)
  • 59b018c Some coding style fixes and cleaning up (#1093)
  • a33c5f8 openapi3filter: support primitive parsing for individual text like parts in m...
  • e00a340 openapi3: preserve all validation errors for allOf (#1087)
  • 6acf92b openapi3filter: use FileBodyDecoder if the format is specified as binary (#1088)
  • 4358c4a feat: add support for RFC 7396 application/merge-patch+json (#1084)
  • d72d75b openapi3: resolve refs in parameter examples (#1086)
  • 2de45f7 openapi3: use Ptr instead of BoolPtr,Float64Ptr,Int64Ptr,Uint64Ptr (#1033)
  • 783206b openapi3: fix ineffectual caching of compiled regexps (#1076)
  • 90fb641 openapi2conv: Set externalDocs for Operations (#1070)
  • Additional commits viewable in compare view

Updates github.com/oapi-codegen/nethttp-middleware from 1.0.2 to 1.1.2

Release notes

Sourced from github.com/oapi-codegen/nethttp-middleware's releases.

v1.1.1: fix an incorrect HTTP status code (in an unlikely failure case)

🐛 Bug fixes

📦 Dependency updates

  • chore(deps): update module github.com/golangci/golangci-lint to v2.1.5 (#39) @renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

... (truncated)

Commits
  • a4be325 fix(deps)!: update module github.com/getkin/kin-openapi to v0.132.0
  • 02b3b1c build: indicate which versions of Go are supported vs "supported"
  • d05a186 build: build against Go 1.23 and 1.24
  • 0a8001d fix: correct error code
  • 9b5d19d chore(deps): update module github.com/golangci/golangci-lint to v2.1.5
  • be28747 refactor: migrate error to a method parameter, not part of ErrorHandlerOpts
  • 124a344 feat: add error handler with more configuration
  • 750f72e refactor: return early if no options
  • 83a8756 refactor: flip error checking to remove nested conditionals
  • 0cb46bb chore(deps): update module github.com/golangci/golangci-lint to v2.1.4
  • Additional commits viewable in compare view

Updates github.com/oapi-codegen/oapi-codegen/v2 from 2.4.1 to 2.6.0

Release notes

Sourced from github.com/oapi-codegen/oapi-codegen/v2's releases.

v2.6.0: 7th anniversary release 🎂

For those that aren't aware, 7 years ago to the day, oapi-codegen was born!

(Well, technically it's tonight at midnight UTC, but who's splitting hairs?)

There's nothing too special planned for today, but we thought it'd be the perfect time to cut a slice of cake a release!

🎉 Notable changes

New generated code requires oapi-codegen/runtime v1.2.0+

As part of #2256, github.com/oapi-codegen/runtime v1.2.0 is needed alongside github.com/oapi-codegen/oapi-codegen, for new generated code.

This is providing a more future-proofed means to bind parameters.

See the release notes for the runtime package, and #2256 for more information.

oapi-codegen was part of the GitHub Secure Open Source Fund

oapi-codegen was one of the projects taking part in the third GitHub Secure Open Source Fund session.

We've written up more about what we've learned, and have some more things to share with you over the coming months about lessons we've learned and improvements we've taken that we can share.

We were pretty chuffed to be selected, and it's already helped improve our security posture as a project, which is also very important for the wider ecosystem!

go directive bump in next release

Long-time users will be aware that we work very hard to try and keep our requirement for Go source compatibility, through the go directive, especially as we recommend folks use oapi-codegen as a source-tracked dependency.

For more details about this, see our Support Model docs.

In the next minor release, we'll be setting our minimum go directive to Go 1.24 (End-of-Life on 2026-02-11), as it's required for a number of dependencies of ours to be updated any higher, and a change to the module import path for Speakeasy's OpenAPI Overlay library requires us fix this centrally for our users to be able to continue updating their libraries.

[!NOTE] Nothing is changing as part of v2.6.0, this is a pre-announcement for v2.7.0.

Behind the scenes cleanup

There's also been some work behind-the-scenes to try and clean up outstanding issues (of which we know there are many!) that have been fixed, as well as Marcin's work on trying to do some more significant rework of the internals with help from Claude.

There's still, as ever, work to go with this - as we've mentioned before, sponsoring our work would be greatly appreciated, so we can continue to put in the work, considering this is a widely used and depended on project.

🚀 New features and improvements

... (truncated)

Commits
  • efb2df3 docs: add example of using Renovate to sync files between repos
  • d04991e fix: qualify external ref schema types in default response codes (#2241)
  • 15fc536 fix: pass OpenAPI type/format to runtime parameter binding and styling functions
  • 28d0083 Update github.com/oapi-codegen/runtime to v1.2.0
  • 890e8de chore(deps): update module github.com/golangci/golangci-lint to v2.10.1 (make...
  • 6f6e243 chore(deps): update github/codeql-action action to v4.32.4 (.github/workflows)
  • 3f9222e chore(deps): update actions/setup-go action to v6.3.0 (.github/workflows)
  • 33cd677 chore(deps): update actions/checkout action to v6 (.github/workflows)
  • 109fbfa chore(deps): update release-drafter/release-drafter action to v6.2.0 (.github...
  • c184310 chore(deps): update actions/upload-artifact action to v7 (.github/workflows)
  • Additional commits viewable in compare view

Updates github.com/oapi-codegen/runtime from 1.1.1 to 1.2.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

Parameter binding extensions, bug fixes, dependency updates

Notable Changes

The main change in this release is the addition of new Parameter binding and styling functions, which allow the code generator to pass in the type and format from the spec. Previously, we inferred what we wanted to do based on the destination type, however, it's not always possible to decide this without information about the specification.

🚀 New features and improvements

🐛 Bug fixes

👻 Maintenance

📦 Dependency updates

  • chore(deps): update release-drafter/release-drafter action to v6 (#31) @renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

... (truncated)

Commits
  • b76a24f fix: bind Date and Time query params as scalar values (#21) (#93)
  • 1f844c3 feat: add BindRawQueryParameter for correct comma handling (#92)
  • ca4e933 fix: support non-indexed deepObject array unmarshaling (#22) (#96)
  • ead11e4 fix: correct time.Time date-only fallback parsing in deepObject (#95)
  • 224825a fix: add Type/Format-aware parameter binding and styling for []byte (#97) (#98)
  • 03288f9 Refactor date parsing error handling (#88)
  • effec1a feat(fix): bump gin version (#51)
  • 53a813b fix: improve email validation using net/mail package (#60)
  • 451d249 Update golang.org/x/crypto to v0.32.0 (#59)
  • 7dffa6e Updated Golang reference to address security vulnerability (#57)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
[release-v1.21][gomod]: Bump the minor group across 1 directory with …
fa12c2b 
…4 updates

Bumps the minor group with 4 updates in the / directory: [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi), [github.com/oapi-codegen/nethttp-middleware](https://github.com/oapi-codegen/nethttp-middleware), [github.com/oapi-codegen/oapi-codegen/v2](https://github.com/oapi-codegen/oapi-codegen) and [github.com/oapi-codegen/runtime](https://github.com/oapi-codegen/runtime).


Updates `github.com/getkin/kin-openapi` from 0.128.0 to 0.133.0
- [Release notes](https://github.com/getkin/kin-openapi/releases)
- [Commits](getkin/kin-openapi@v0.128.0...v0.133.0)

Updates `github.com/oapi-codegen/nethttp-middleware` from 1.0.2 to 1.1.2
- [Release notes](https://github.com/oapi-codegen/nethttp-middleware/releases)
- [Commits](oapi-codegen/nethttp-middleware@v1.0.2...v1.1.2)

Updates `github.com/oapi-codegen/oapi-codegen/v2` from 2.4.1 to 2.6.0
- [Release notes](https://github.com/oapi-codegen/oapi-codegen/releases)
- [Commits](oapi-codegen/oapi-codegen@v2.4.1...v2.6.0)

Updates `github.com/oapi-codegen/runtime` from 1.1.1 to 1.2.0
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.1.1...v1.2.0)

---
updated-dependencies:
- dependency-name: github.com/getkin/kin-openapi
  dependency-version: 0.133.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: github.com/oapi-codegen/nethttp-middleware
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: github.com/oapi-codegen/oapi-codegen/v2
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 2, 2026
@openshift-ci openshift-ci bot requested review from creydr and lberk March 2, 2026 14:18
@openshift-ci
Copy link

openshift-ci bot commented Mar 2, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign kaustubh-pande for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link

openshift-ci bot commented Mar 2, 2026

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift-knative member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@creydr creydr Awaiting requested review from creydr

@lberk lberk Awaiting requested review from lberk

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code needs-ok-to-test

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants