fix(deps): update module github.com/pb33f/libopenapi to v0.38.7

[doordash-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/pb33f/libopenapi	v0.34.3 → v0.38.7

---

Release Notes

pb33f/libopenapi (github.com/pb33f/libopenapi)

v0.38.7

Compare Source

v0.38.7 improves composed bundling by correctly lifting external Security Scheme references—including bare-file and component-fragment refs—into components.securitySchemes, with safeguards against misclassifying wrapper maps or complete OpenAPI documents. Arazzo engines can now inject a context-aware SleepFunc through EngineConfig, enabling replay-safe retry delays in durable workflow runtimes and deterministic tests while preserving existing behavior by default. This release also adds regression coverage for empty Security Requirement objects and updates golang.org/x/sync to v0.22.0.

@​kriptoburak @​khalidDaoud

v0.38.6

Compare Source

Fixes daveshanley/vacuum#928

v0.38.5

Compare Source

Fixes #​597

v0.38.4

Compare Source

Just an internal refactor and deduplication of code, and build speed upgrades. No fixes, no features, no breaking changes,

v0.38.3

Compare Source

Fixes concurrent rendering issues stemming from changes in how the YAML lib has changed between RCs

#​594

@​gnuletik

v0.38.2

Compare Source

Bumps to rc6 on yaml and fixed $def handling in bundler.

v0.38.1

Compare Source

Fixes #​590 and moved to our own fork of testify

v0.38.0

Compare Source

Improves parse/index performance and memory use with lazy SpecInfo JSON generation, lower-allocation node indexing, faster component-path conversion, and reduced goroutine overhead in small translation/schema paths.

Adds SkipMetadataCollection for consumers that do not need diagnostic index metadata, allowing faster/lighter parsing for large documents.

Tightens YAML handling around duplicate keys, merge/root errors, empty overlays, and YAML v4 rc.5 rendering behavior.

Fixes OpenAPI 3.0 webhooks extraction so same-named scalar values no longer create empty webhook maps.

Improves change detection and generator metadata fidelity, including anchor-insensitive YAML comparisons and preserved/inferred

YAML tags for generated enum/const metadata.

@​asadtariq96

v0.37.3

Compare Source

Address issue #​581

v0.37.2

Compare Source

Provides a deeper fix for #​575

v0.37.1

Compare Source

Addresses regression identified in #​575

v0.37.0

Compare Source

New generator module that Generated Code and Specs.

https://pb33f.io/libopenapi/generating-code/
https://pb33f.io/libopenapi/parsing-code/

Code from OpenAPI and OpenAPI from Code, all built in. no deps. no run-time required.

v0.36.6

Compare Source

Fixes issues with auto-detecting types when bundling by adding a source path to determine type cleanly. No breaking changes.

v0.36.5

Compare Source

New budgeting controls and logic for rendering mocks. Some specs with crazy max limits as traits were causing insane blowout mock generation. No breaking changes.

v0.36.4

Compare Source

Various fixes with bundler dealing with rewriting relative paths in composed mode, some house-keeping and cleanup.

No new features or breaking changes.

v0.36.3

Compare Source

Fixes

• #​562
• daveshanley/vacuum#863

v0.36.2

Compare Source

Addresses #​565

v0.36.1

Compare Source

Fixes a number of issues in the new version of openapi-changes.

no new features, no breaking changes.

v0.36.0

Compare Source

New XML rendering capability in the mock renderer.

Fixed a few glitches and reported issues.

No breaking changes.

v0.35.1

Compare Source

A big refactor of the low-level model, after years of growth and organic changes. runs faster and cooler now, fewer allocations, less memory, and less number crunching. runs fewer instructions faster, all for free.

Also fixes a bundling glitch that was keeping old references in play in the model after composed bundling.

No breaking changes, no new features.

v0.35.0

Compare Source

The release fixes an issue where $id was being parsed when inside examples. The index module was also heavily refactored to make it easier to read, operate, and understand, a huge cleanup of years of organic growth. Much more to come.

No breaking changes, no new features, 7% more efficient.

@​luke-hagar-sp

v0.34.4

Compare Source

Fixes security issues and patches issues #​545

@​zhirschtritt

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[doordash-renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated

Details:

Package	Change
go.yaml.in/yaml/v4	v4.0.0-rc.4 -> v4.0.0-rc.6
github.com/pb33f/jsonpath	v0.8.1 -> v0.8.2
github.com/pb33f/ordered-map/v2	v2.3.0 -> v2.3.1

[doordash-renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.