[dependabot]

Bumps github.com/pb33f/libopenapi from 0.41.6 to 0.41.7.

Release notes

Sourced from github.com/pb33f/libopenapi's releases.

v0..41.7

v0.41.7

This one stings a bit. With quick hash on (openapi-changes turns it on), a single circular reference made libopenapi treat every schema in the document as circular. Changes just vanished. I ran stripe.yaml against a copy with 300 breaking edits and got back zero. Zero.

Fixed. All 300 show up now. Big thanks to the contributors who chased down this one and three more. You lot are the best.

• Circular refs only flag schemas on a loop (#667, fixes #662). Quick-hash diffs on documents with cycles report what they were missing.
• No race when building from YAML merges (#658, fixes #657). Model building reads merged copies and leaves shared nodes alone. New public helper: utils.ResolveMergeNodes.
• Float-tagged int64 keywords read correctly (#666, fixes #665). maxLength: 2.0 stops turning into 0. Huge values clamp, fractions stay unset.
• Parameter $ref found at any key position (#660, fixes #659). No more bogus "has no name value" errors in OpenAPI 3.1.
• Less hashing work (#664). Fewer redundant hashes, plus a new NodeMap.GetNodeLines().
• Dependency bump. golang.org/x/sync goes to 0.24.0.

Upgrade, especially if you diff specs with cycles. Much more to come.

@​CaliLuke @​josephaxisa @​navaneethan-ac9 @​TastyHeadphones

Commits

• b65dfd8 test: simplify hash coverage and clarify pool smoke checks
• d2f489d perf(index): skip hashes for small origin identity matches
• 9c90f7d perf(index): keep small hash traversals in local buffers
• 20be038 perf(index): avoid redundant origin hashes and leaf traversal scratch
• 3643678 perf: add owned node-line snapshots without materializing node maps
• 659eada fix: read float-tagged int64 schema keywords instead of storing 0
• 480d440 fix(index): recognise operation parameter $ref that is not the first key
• 3a936ec fix: only treat schemas on a reference loop as circular
• e0e2f84 build(deps): bump golang.org/x/sync from 0.23.0 to 0.24.0
• 02c96ab fix: build low models from immutable YAML merge views
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)