chore(deps): bump github.com/getkin/kin-openapi from 0.140.0 to 0.144.0 by dependabot[bot] · Pull Request #297 · atlascloud/packages

dependabot · 2026-07-28T09:31:26Z

Bumps github.com/getkin/kin-openapi from 0.140.0 to 0.144.0.

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.144.0

What's Changed

openapi3filter: prefer non-empty value for repeated scalar query params by @sonnemusk in getkin/kin-openapi#1231

some fixes to please my moulinette by @fenollp in getkin/kin-openapi#1232

New Contributors

@sonnemusk made their first contribution in getkin/kin-openapi#1231

Full Changelog: getkin/kin-openapi@v0.143.0...v0.144.0

v0.143.0

What's Changed

openapi3: remove StringMap and its pre-OriginTree origin-stripping machinery by @reuvenharrison in getkin/kin-openapi#1219

openapi3: huge test suite: make it more parallel by @fenollp in getkin/kin-openapi#1221

openapi31: support 3.1+ reference metadata overrides by @AlexanderWangY in getkin/kin-openapi#1215

docs: move the StringMap changelog entry to v0.143.0 by @reuvenharrison in getkin/kin-openapi#1222

openapi3: add T.WalkParameters to visit every parameter in a document by @reuvenharrison in getkin/kin-openapi#1224

openapi3filter: reuse deepObject bracket regex by @matiasinsaurralde in getkin/kin-openapi#1225

openapi3filter: skip Split allocation for single-value array query params by @matiasinsaurralde in getkin/kin-openapi#1226

openapi3: preserve origin for a $ref to a schema under an arbitrary top-level key by @reuvenharrison in getkin/kin-openapi#1227

openapi3: stable codes for validation errors by @reuvenharrison in getkin/kin-openapi#1223

openapi3filter: skip schema checks for empty allowEmptyValue strings by @snowyukitty in getkin/kin-openapi#1228

openapi3gen: inline embedded struct with options-only JSON tag by @mvanhorn in getkin/kin-openapi#1229

New Contributors

@matiasinsaurralde made their first contribution in getkin/kin-openapi#1225

@snowyukitty made their first contribution in getkin/kin-openapi#1228

@mvanhorn made their first contribution in getkin/kin-openapi#1229

Full Changelog: getkin/kin-openapi@v0.142.0...v0.143.0

v0.142.0

What's Changed

openapi3: fix test that relied on now non-resolving domain by @fenollp in getkin/kin-openapi#1220

Full Changelog: getkin/kin-openapi@v0.141.0...v0.142.0

v0.141.0

What's Changed

openapi3filter: honor comma-separated and wildcard encoding.contentType by @utah-KT in getkin/kin-openapi#1201

openapi3: typed context wrappers for combinator and tag validation by @reuvenharrison in getkin/kin-openapi#1199

openapi3: enforce unique required entries and unique tag names in Validate() by @reuvenharrison in getkin/kin-openapi#1203

openapi3gen: Add an option to customize generated field names (properties) for structs by @d1vbyz3r0 in getkin/kin-openapi#1204

openapi3: add T.WalkSchemas to visit every schema in a document by @reuvenharrison in getkin/kin-openapi#1206

openapi3: record block end on Origin.Key (EndLine/EndColumn) by @reuvenharrison in getkin/kin-openapi#1207

openapi3: record scalar-valued map keys for origin location lookup by @reuvenharrison in getkin/kin-openapi#1208

docs: Go Report Card has been sunset by @alexandear in getkin/kin-openapi#1210

openapi3: support OAS 3.2 itemSchema by @fenollp in getkin/kin-openapi#1213

openapi3: make operation responses optional for 3.1+ by @AlexanderWangY in getkin/kin-openapi#1214

... (truncated)

Commits

f0407d5 Merge commit from fork
c947670 some fixes to please my moulinette (#1232)
68ac2af Merge commit from fork
3e5d7f4 openapi3filter: prefer non-empty value for repeated scalar query params (#1231)
30e2923 Merge commit from fork
c11a481 openapi3gen: inline embedded struct with options-only JSON tag (#1229)
0fb1f0e openapi3filter: skip schema checks for empty allowEmptyValue strings (#1228)
a872c57 openapi3: stable codes for validation errors (#1223)
d2f115e openapi3: preserve origin for a $ref to a schema under an arbitrary top-level...
49523e0 openapi3filter: skip Split allocation for single-value array query params (#1...
Additional commits viewable in compare view

github-actions · 2026-07-28T09:34:52Z

❌MegaLinter analysis: Error

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	4		0	0	0.09s
✅ API	spectral	2		0	0	2.68s
✅ COPYPASTE	jscpd	yes		no	no	1.83s
✅ DOCKERFILE	hadolint	1		0	0	0.12s
✅ GO	golangci-lint	yes	yes	no	no	60.07s
✅ GO	revive	yes		no	no	1.64s
✅ MARKDOWN	markdownlint	2	0	0	0	0.73s
✅ MARKDOWN	markdown-table-formatter	2	0	0	0	0.29s
✅ REPOSITORY	checkov	yes		no	no	44.47s
✅ REPOSITORY	gitleaks	yes		no	no	0.39s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
⚠️ REPOSITORY	grype	yes		1	no	89.13s
✅ REPOSITORY	secretlint	yes		no	no	0.71s
✅ REPOSITORY	syft	yes		no	no	3.27s
❌ REPOSITORY	trivy	yes		1	no	25.2s
✅ REPOSITORY	trivy-sbom	yes		no	no	3.41s
✅ REPOSITORY	trufflehog	yes		no	no	5.1s
✅ SPELL	lychee	14		0	0	0.1s
✅ YAML	prettier	12	0	0	0	0.83s
✅ YAML	v8r	12		0	0	15.05s
✅ YAML	yamllint	12		0	0	0.77s

Detailed Issues

❌ REPOSITORY / trivy - 1 error

2026-08-04T21:21:46Z	INFO	[vulndb] Need to update DB
2026-08-04T21:21:46Z	INFO	[vulndb] Downloading vulnerability DB...
2026-08-04T21:21:46Z	INFO	[vulndb] Downloading artifact...	repo="mirror.gcr.io/aquasec/trivy-db:2"
10.48 MiB / 103.45 MiB [------>_____________________________________________________] 10.13% ? p/s ?32.22 MiB / 103.45 MiB [------------------>_________________________________________] 31.14% ? p/s ?53.87 MiB / 103.45 MiB [------------------------------->____________________________] 52.07% ? p/s ?79.30 MiB / 103.45 MiB [----------------------------------->__________] 76.66% 114.74 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [------------------------------------------->] 100.00% 114.74 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [------------------------------------------->] 100.00% 114.74 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [------------------------------------------->] 100.00% 109.94 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [------------------------------------------->] 100.00% 109.94 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [------------------------------------------->] 100.00% 109.94 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [------------------------------------------->] 100.00% 102.85 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [------------------------------------------->] 100.00% 102.85 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [------------------------------------------->] 100.00% 102.85 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 96.21 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 96.21 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 96.21 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 90.00 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 90.00 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 90.00 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 84.20 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 84.20 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 84.20 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 78.76 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 78.76 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 78.76 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 73.68 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 73.68 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 73.68 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 68.93 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 68.93 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 68.93 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 64.48 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 64.48 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 64.48 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 60.32 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 60.32 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 60.32 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 56.43 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 56.43 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 56.43 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 52.79 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 52.79 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 52.79 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 49.38 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 49.38 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 49.38 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 46.20 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 46.20 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 46.20 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 43.22 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 43.22 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 43.22 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 40.43 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 40.43 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 40.43 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 37.82 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 37.82 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 37.82 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 35.38 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 35.38 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 35.38 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 33.10 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 33.10 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------->] 100.00% 33.10 MiB p/s ETA 0s103.45 MiB / 103.45 MiB [-------------------------------------------------] 100.00% 8.24 MiB p/s 13s2026-08-04T21:22:00Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2026-08-04T21:22:00Z	INFO	[vuln] Vulnerability scanning is enabled
2026-08-04T21:22:00Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-08-04T21:22:00Z	INFO	[checks-client] Need to update the checks bundle
2026-08-04T21:22:00Z	INFO	[checks-client] Downloading the checks bundle...
234.65 KiB / 234.65 KiB [--------------------------------------------------------->] 100.00% ? p/s ?234.65 KiB / 234.65 KiB [-----------------------------------------------] 100.00% 2.71 MiB p/s 300ms2026-08-04T21:22:10Z	INFO	Number of language-specific files	num=1
2026-08-04T21:22:10Z	INFO	[gomod] Detecting vulnerabilities...
2026-08-04T21:22:10Z	INFO	Detected config files	num=2
2026-08-04T21:22:10Z	WARN	Using severities from other vendors for some vulnerabilities. Read https://trivy.dev/docs/v0.69/guide/scanner/vulnerability#severity-selection for details.

Report Summary

┌──────────────────┬────────────┬─────────────────┬───────────────────┐
│      Target      │    Type    │ Vulnerabilities │ Misconfigurations │
├──────────────────┼────────────┼─────────────────┼───────────────────┤
│ go.mod           │   gomod    │        2        │         -         │
├──────────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile       │ dockerfile │        -        │         0         │
├──────────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile.local │ dockerfile │        -        │         0         │
└──────────────────┴────────────┴─────────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


go.mod (gomod)
==============
Total: 2 (UNKNOWN: 1, LOW: 0, MEDIUM: 0, HIGH: 1, CRITICAL: 0)

┌─────────────────────┬────────────────┬──────────┬──────────┬───────────────────┬───────────────┬────────────────────────────────────────────────────────────┐
│       Library       │ Vulnerability  │ Severity │  Status  │ Installed Version │ Fixed Version │                           Title                            │
├─────────────────────┼────────────────┼──────────┼──────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ golang.org/x/crypto │ GO-2026-5932   │ UNKNOWN  │ affected │ v0.53.0           │               │ The golang.org/x/crypto/openpgp package is unmaintained,   │
│                     │                │          │          │                   │               │ unsafe by design, and has known security...                │
├─────────────────────┼────────────────┼──────────┼──────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
│ golang.org/x/text   │ CVE-2026-56852 │ HIGH     │ fixed    │ v0.38.0           │ 0.39.0        │ A norm.Iter can enter an infinite loop when handling input │
│                     │                │          │          │                   │               │ containing ...                                             │
│                     │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-56852                 │
└─────────────────────┴────────────────┴──────────┴──────────┴───────────────────┴───────────────┴────────────────────────────────────────────────────────────┘

📣 Notices:
  - Version 0.73.0 of Trivy is now available, current version is 0.69.1

To suppress version checks, run Trivy scans with the --skip-version-check flag

⚠️ REPOSITORY / grype - 1 error

[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
NAME                           INSTALLED  FIXED IN  TYPE       VULNERABILITY  SEVERITY  EPSS         RISK  
golang.org/x/text              v0.38.0    0.39.0    go-module  GO-2026-5970   High      0.4% (36th)  0.3   
github.com/klauspost/compress  v1.18.0    1.18.7    go-module  GO-2026-5841   Unknown   N/A          N/A   
golang.org/x/crypto            v0.53.0              go-module  GO-2026-5932   Unknown   N/A          N/A
[0089] ERROR discovered vulnerabilities at or above the severity threshold

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

Documentation: Custom Flavors
Command: npx mega-linter-runner@9.4.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,API_SPECTRAL,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,GO_GOLANGCI_LINT,GO_REVIVE,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository

Bumps [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) from 0.140.0 to 0.144.0. - [Release notes](https://github.com/getkin/kin-openapi/releases) - [Commits](getkin/kin-openapi@v0.140.0...v0.144.0) --- updated-dependencies: - dependency-name: github.com/getkin/kin-openapi dependency-version: 0.144.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot assigned iggy Jul 28, 2026

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 28, 2026

dependabot Bot force-pushed the dependabot/go_modules/github.com/getkin/kin-openapi-0.144.0 branch from 9e981ca to f30ff59 Compare August 4, 2026 21:19

Navigation Menu

Uh oh!

chore(deps): bump github.com/getkin/kin-openapi from 0.140.0 to 0.144.0 - #297

chore(deps): bump github.com/getkin/kin-openapi from 0.140.0 to 0.144.0#297
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/getkin/kin-openapi-0.144.0

dependabot Bot commented on behalf of github Jul 28, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 28, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.144.0

What's Changed

New Contributors

v0.143.0

What's Changed

New Contributors

v0.142.0

What's Changed

v0.141.0

What's Changed

Uh oh!

github-actions Bot commented Jul 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌MegaLinter analysis: Error

Detailed Issues

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 28, 2026 •

edited

Loading

github-actions Bot commented Jul 28, 2026 •

edited

Loading