chore(deps): bump github.com/oapi-codegen/echo-middleware from 1.0.2 to 1.1.0 by dependabot[bot] · Pull Request #295 · atlascloud/packages

dependabot · 2026-07-23T00:22:30Z

Bumps github.com/oapi-codegen/echo-middleware from 1.0.2 to 1.1.0.

Release notes

Sourced from github.com/oapi-codegen/echo-middleware's releases.

OpenAPI 3.1, Go 1.25

This release bumps the required Go version to 1.25, and pulls in a version of kin-openapi which can validate OpenAPI 3.1 specifications.

🎉 Notable changes

OpenAPI 3.1 support in kin-openapi (#56) @mromaszewicz

Modernize + make more consistent with net/http (#38) @jamietanna

🐛 Bug fixes

fix: unescape URL-encoded path params before OpenAPI validation (#43) @mromaszewicz, @claude, @florentchauveau

feat: add Prefix option for sub-path mounted APIs (#42) @mromaszewicz, @claude, @GreyXor

📝 Documentation updates

docs(sponsors): add FUNDING.yml (#21) @jamietanna

👻 Maintenance

Add a tidy-ci rule to make CI happy (#58) @mromaszewicz

chore: Update Go to 1.24 and update CI (#47) @mromaszewicz, @claude

📦 Dependency updates

chore(deps): update oapi-codegen/actions action to v0.8.0 (#54) @renovate[bot]

chore(deps): update release-drafter/release-drafter action to v7 (#55) @renovate[bot]

OpenAPI 3.1 support in kin-openapi (#56) @mromaszewicz

chore(deps): update module github.com/golangci/golangci-lint to v2 (#24) @renovate[bot]

chore(deps): pin dependencies (#25) @renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

Commits

128f801 chore(deps): update oapi-codegen/actions action to v0.8.0 (#54)
6006233 Add a tidy-ci rule to make CI happy (#58)
9c03be1 chore(deps): update release-drafter/release-drafter action to v7 (#55)
347c9c9 OpenAPI 3.1 support in kin-openapi (#56)
24c48ee chore: Update Go to 1.24 and update CI (#47)
b5a3ece fix: unescape URL-encoded path params before OpenAPI validation (#43)
f3f6b0c feat: add Prefix option for sub-path mounted APIs (#42)
ce13011 Modernize + make more consistent with net/http (#38)
e81f4c5 chore(deps): update module github.com/golangci/golangci-lint to v2
a576862 chore(deps): pin dependencies
Additional commits viewable in compare view

github-actions · 2026-07-23T00:26:02Z

❌MegaLinter analysis: Error

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	4		0	0	0.08s
✅ API	spectral	2		0	0	2.97s
✅ COPYPASTE	jscpd	yes		no	no	2.38s
✅ DOCKERFILE	hadolint	1		0	0	0.13s
✅ GO	golangci-lint	yes	yes	no	no	61.71s
✅ GO	revive	yes		no	no	1.81s
✅ MARKDOWN	markdownlint	2	0	0	0	0.78s
✅ MARKDOWN	markdown-table-formatter	2	0	0	0	0.36s
✅ REPOSITORY	checkov	yes		no	no	45.91s
✅ REPOSITORY	gitleaks	yes		no	no	0.41s
✅ REPOSITORY	git_diff	yes		no	no	0.0s
⚠️ REPOSITORY	grype	yes		2	no	91.08s
✅ REPOSITORY	secretlint	yes		no	no	0.76s
✅ REPOSITORY	syft	yes		no	no	3.62s
❌ REPOSITORY	trivy	yes		1	no	24.85s
✅ REPOSITORY	trivy-sbom	yes		no	no	3.27s
✅ REPOSITORY	trufflehog	yes		no	no	5.36s
✅ SPELL	lychee	14		0	0	0.11s
✅ YAML	prettier	12	0	0	0	0.8s
✅ YAML	v8r	12		0	0	16.98s
✅ YAML	yamllint	12		0	0	0.87s

Detailed Issues

❌ REPOSITORY / trivy - 1 error

2026-08-04T21:21:30Z	INFO	[vulndb] Need to update DB
2026-08-04T21:21:30Z	INFO	[vulndb] Downloading vulnerability DB...
2026-08-04T21:21:30Z	INFO	[vulndb] Downloading artifact...	repo="mirror.gcr.io/aquasec/trivy-db:2"
13.74 MiB / 103.45 MiB [------->____________________________________________________] 13.28% ? p/s ?32.68 MiB / 103.45 MiB [------------------>_________________________________________] 31.59% ? p/s ?50.55 MiB / 103.45 MiB [----------------------------->______________________________] 48.87% ? p/s ?66.80 MiB / 103.45 MiB [------------------------------>________________] 64.57% 88.12 MiB p/s ETA 0s86.77 MiB / 103.45 MiB [--------------------------------------->_______] 83.88% 88.12 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 88.12 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 86.40 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 86.40 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 86.40 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 80.82 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 80.82 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 80.82 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 75.61 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 75.61 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 75.61 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 70.73 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 70.73 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 70.73 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 66.17 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 66.17 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 66.17 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 61.90 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 61.90 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 61.90 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 57.91 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 57.91 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 57.91 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 54.17 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 54.17 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 54.17 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 50.67 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 50.67 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 50.67 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 47.41 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 47.41 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 47.41 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 44.35 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 44.35 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 44.35 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 41.49 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 41.49 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 41.49 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 38.81 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 38.81 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 38.81 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 36.31 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 36.31 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 36.31 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 33.96 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 33.96 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 33.96 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 31.77 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 31.77 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 31.77 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 29.72 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 29.72 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 29.72 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 27.80 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 27.80 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 27.80 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 26.01 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 26.01 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 26.01 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 24.33 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 24.33 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 24.33 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------------] 100.00% 7.84 MiB p/s 13s2026-08-04T21:21:45Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2026-08-04T21:21:45Z	INFO	[vuln] Vulnerability scanning is enabled
2026-08-04T21:21:45Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-08-04T21:21:45Z	INFO	[checks-client] Need to update the checks bundle
2026-08-04T21:21:45Z	INFO	[checks-client] Downloading the checks bundle...
234.65 KiB / 234.65 KiB [--------------------------------------------------------->] 100.00% ? p/s ?234.65 KiB / 234.65 KiB [-----------------------------------------------] 100.00% 2.32 MiB p/s 300ms2026-08-04T21:21:54Z	INFO	Number of language-specific files	num=1
2026-08-04T21:21:54Z	INFO	[gomod] Detecting vulnerabilities...
2026-08-04T21:21:54Z	INFO	Detected config files	num=2
2026-08-04T21:21:54Z	WARN	Using severities from other vendors for some vulnerabilities. Read https://trivy.dev/docs/v0.69/guide/scanner/vulnerability#severity-selection for details.

Report Summary

┌──────────────────┬────────────┬─────────────────┬───────────────────┐
│      Target      │    Type    │ Vulnerabilities │ Misconfigurations │
├──────────────────┼────────────┼─────────────────┼───────────────────┤
│ go.mod           │   gomod    │        3        │         -         │
├──────────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile       │ dockerfile │        -        │         0         │
├──────────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile.local │ dockerfile │        -        │         0         │
└──────────────────┴────────────┴─────────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


go.mod (gomod)
==============
Total: 3 (UNKNOWN: 1, LOW: 0, MEDIUM: 1, HIGH: 0, CRITICAL: 1)

┌───────────────────────────────┬─────────────────────┬──────────┬──────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────┐
│            Library            │    Vulnerability    │ Severity │  Status  │ Installed Version │ Fixed Version │                          Title                           │
├───────────────────────────────┼─────────────────────┼──────────┼──────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────┤
│ github.com/getkin/kin-openapi │ GHSA-r277-6w6q-xmqw │ CRITICAL │ fixed    │ v0.142.0          │ 0.144.0       │ kin-openapi: ValidationHandler.Load() Fail-Open          │
│                               │                     │          │          │                   │               │ Authentication Bypass via NoopAuthenticationFunc Default │
│                               │                     │          │          │                   │               │ https://github.com/advisories/GHSA-r277-6w6q-xmqw        │
│                               ├─────────────────────┼──────────┤          │                   │               ├──────────────────────────────────────────────────────────┤
│                               │ GHSA-jpcw-4wr7-c3vq │ MEDIUM   │          │                   │               │ kin-openapi openapi3filter: unauthenticated nil-pointer  │
│                               │                     │          │          │                   │               │ panic when validating a request against a `content`...   │
│                               │                     │          │          │                   │               │ https://github.com/advisories/GHSA-jpcw-4wr7-c3vq        │
├───────────────────────────────┼─────────────────────┼──────────┼──────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────┤
│ golang.org/x/crypto           │ GO-2026-5932        │ UNKNOWN  │ affected │ v0.54.0           │               │ The golang.org/x/crypto/openpgp package is unmaintained, │
│                               │                     │          │          │                   │               │ unsafe by design, and has known security...              │
└───────────────────────────────┴─────────────────────┴──────────┴──────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────┘

📣 Notices:
  - Version 0.73.0 of Trivy is now available, current version is 0.69.1

To suppress version checks, run Trivy scans with the --skip-version-check flag

⚠️ REPOSITORY / grype - 2 errors

[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
NAME                           INSTALLED  FIXED IN  TYPE       VULNERABILITY        SEVERITY  EPSS  RISK  
github.com/getkin/kin-openapi  v0.142.0   0.144.0   go-module  GHSA-r277-6w6q-xmqw  Critical  N/A   N/A   
github.com/getkin/kin-openapi  v0.142.0   0.144.0   go-module  GHSA-jpcw-4wr7-c3vq  Medium    N/A   N/A   
github.com/klauspost/compress  v1.18.0    1.18.7    go-module  GO-2026-5841         Unknown   N/A   N/A   
golang.org/x/crypto            v0.54.0              go-module  GO-2026-5932         Unknown   N/A   N/A
[0091] ERROR discovered vulnerabilities at or above the severity threshold

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

Documentation: Custom Flavors
Command: npx mega-linter-runner@9.4.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,API_SPECTRAL,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,GO_GOLANGCI_LINT,GO_REVIVE,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository

Bumps [github.com/oapi-codegen/echo-middleware](https://github.com/oapi-codegen/echo-middleware) from 1.0.2 to 1.1.0. - [Release notes](https://github.com/oapi-codegen/echo-middleware/releases) - [Commits](oapi-codegen/echo-middleware@v1.0.2...v1.1.0) --- updated-dependencies: - dependency-name: github.com/oapi-codegen/echo-middleware dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot assigned iggy Jul 23, 2026

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 23, 2026

dependabot Bot force-pushed the dependabot/go_modules/github.com/oapi-codegen/echo-middleware-1.1.0 branch from fcbd557 to 4d7d99c Compare August 4, 2026 21:19

Navigation Menu

Uh oh!

chore(deps): bump github.com/oapi-codegen/echo-middleware from 1.0.2 to 1.1.0 - #295

chore(deps): bump github.com/oapi-codegen/echo-middleware from 1.0.2 to 1.1.0#295
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/oapi-codegen/echo-middleware-1.1.0

dependabot Bot commented on behalf of github Jul 23, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 23, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

OpenAPI 3.1, Go 1.25

🎉 Notable changes

🐛 Bug fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Sponsors

Uh oh!

github-actions Bot commented Jul 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌MegaLinter analysis: Error

Detailed Issues

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 23, 2026 •

edited

Loading

github-actions Bot commented Jul 23, 2026 •

edited

Loading