chore(deps): bump github.com/pb33f/libopenapi from 0.38.7 to 0.39.1

[dependabot]

Bumps github.com/pb33f/libopenapi from 0.38.7 to 0.39.1.

Release notes

Sourced from github.com/pb33f/libopenapi's releases.

v0.39.1 is a focused performance and correctness release for indexing large OpenAPI documents and generating reliable Go SDK clients.

• Dramatically speeds up indexing of large, minified single-line JSON specs.
• Reduces indexing work by recording each YAML/JSON node only once.
• Generated Go SDKs now reject missing JSON bodies while correctly accepting bodyless responses such as 204 No Content.

@​s04

v0.39.0

• A new Go SDK generator that produces resource-oriented clients, reachable models, typed responses and API errors, OpenAPI security handling, and optional finite Arazzo workflow methods.
• Full Arazzo 1.1 support, including selectors, typed output values, expanded workflow and action fields, stricter validation, and version-aware runtime expressions.
• Pluggable Arazzo source resolution for OpenAPI, AsyncAPI, and Arazzo documents, with URI origin tracking and no forced network I/O.
• Improved schema and reference handling, including correct source-index attribution for external schemas, document-version resolution, and more reliable inline $ref rendering.
• Better resilience and OpenAPI 3.2 compatibility, including correct additionalOperations metadata and returning a useful error—rather than panicking—when an OpenAPI version field is missing.

@​sheidkamp @​hdimer @​HNO3Miracle

Commits

• 83d6d37 fix(gosdk): reject empty JSON responses
• 7025a63 fix(index): record node positions once in post-order
• d59bbac fix(index): keep node line index sub-linear for single-line JSON documents
• 64654b7 Tighten the generated SDK runtime and finish the gosdk rename
• 07795dd test: update SDK coverage for typed Arazzo outputs
• 376a0fa bump coverage
• 13b4cb8 fix pipeline
• a5607fe feat: Arazzo 1.1 support, source resolution, and schema index attribution
• 230e42d ci: run network tests in build workflow
• 8e9a114 tests: require opt-in for remote fixtures
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!