feat(go): update github.com/pb33f/libopenapi-validator (v0.4.7 → v0.9.3)

[lrstanley-x]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/pb33f/libopenapi-validator	v0.4.7 -> v0.9.3

---

Release Notes

pb33f/libopenapi-validator (github.com/pb33f/libopenapi-validator)

v0.9.3

Compare Source

Added a new --yaml2json flag to executable version of the lib to handle JSON encoding issues with yaml.

@​reversearrow

v0.9.2

Compare Source

Added a new XMLValidator interface and the ability validate (in a simple mechanism) XML is valid.

// XMLValidator is an interface that defines methods for validating XML against OpenAPI schemas.
// There are 2 methods for validating XML:
//
//	ValidateXMLString validates an XML string against a schema, applying OpenAPI xml object transformations.
//	ValidateXMLStringWithVersion - version-aware XML validation that allows OpenAPI 3.0 keywords when version is specified.
type XMLValidator interface {
	// ValidateXMLString validates an XML string against an OpenAPI schema, applying xml object transformations.
	// Uses OpenAPI 3.1+ validation by default (strict JSON Schema compliance).
	ValidateXMLString(schema *base.Schema, xmlString string) (bool, []*liberrors.ValidationError)

	// ValidateXMLStringWithVersion validates an XML string with version-specific rules.
	// When version is 3.0, OpenAPI 3.0-specific keywords like 'nullable' are allowed and processed.
	// When version is 3.1+, OpenAPI 3.0-specific keywords like 'nullable' will cause validation to fail.
	ValidateXMLStringWithVersion(schema *base.Schema, xmlString string, version float32) (bool, []*liberrors.ValidationError)
}

v0.9.1

Compare Source

Fixes daveshanley/vacuum#726

v0.9.0

Compare Source

Introduces a regex cache to the FindPath method.

It's a breaking change, but well worth it if you're using this library in long running, heavy load servers and you're seeing memory drain.

#​190

@​ySnoopyDogy

v0.8.1

Compare Source

Fixes cache warm up bug

@​its-hammer-time

v0.8.0

Compare Source

Adds in Schema caching for long running validation.

A full breakdown of the changes.

#​187

@​its-hammer-time

v0.7.0

Compare Source

Support for considering the OpenAPI version in response.ValidateResponseSchema and request.ValidateRequestSchema.

Each function signature contains a breaking change.

In ValidateRequestSchema and ValidateResponseSchema, I think the version should ideally be passed as a parameter via config.Option, but since all other functions were passing the version as an argument, I followed suit.
(For example, the intent of the arguments of helpers.NewCompiledSchemaWithVersion becomes unclear.)

#​186

@​k1LoW

v0.6.4

Compare Source

Upgrades to latest libopenapi

v0.6.3

Compare Source

Fixed validation for schemas that have no index.

v0.6.2

Compare Source

Addressing daveshanley/vacuum#712

v0.6.1

Compare Source

Relaxes ignore regex on noise from schema violations.

v0.6.0

Compare Source

Adds a custom vocabulary to the schema validator to support OpenAPI 3.0 keywords and provide proper nullable validation for 3.1 (not allowed) and 3.0 (allowed) as well as other OpenAPI specific keywords like discriminator

daveshanley/vacuum#710
daveshanley/vacuum#603

Also adds Jackson-style scalar coercion (string->boolean/number) configuration options.

v0.5.0

Compare Source

Fixes for

• #​168
• #​167
• #​157
• #​155
• #​52

And also brings in support for latest deps and yaml.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

PR generated using automation.

[lrstanley-x]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 8 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.24.0 -> 1.24.7
go (toolchain)	1.24.4 -> 1.24.11
github.com/pb33f/ordered-map/v2	v2.2.0 -> v2.3.0
golang.org/x/mod	v0.27.0 -> v0.29.0
golang.org/x/sync	v0.16.0 -> v0.18.0
golang.org/x/sys	v0.35.0 -> v0.37.0
golang.org/x/text	v0.28.0 -> v0.31.0
golang.org/x/tools	v0.36.0 -> v0.38.0
github.com/pb33f/libopenapi	v0.25.3 -> v0.28.2
github.com/stretchr/testify	v1.10.0 -> v1.11.1

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.23%. Comparing base (07961d7) to head (5525b71).

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #114      +/-   ##
==========================================
- Coverage   69.37%   69.23%   -0.14%     
==========================================
  Files          10       10              
  Lines        2436     2022     -414     
==========================================
- Hits         1690     1400     -290     
+ Misses        632      508     -124     
  Partials      114      114              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.