Skip to content

chore: bump github.com/oasdiff/oasdiff from 1.11.4 to 1.12.3 in /tools/cli#1181

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/tools/cli/github.com/oasdiff/oasdiff-1.12.3
Open

chore: bump github.com/oasdiff/oasdiff from 1.11.4 to 1.12.3 in /tools/cli#1181
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/tools/cli/github.com/oasdiff/oasdiff-1.12.3

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 17, 2026

Bumps github.com/oasdiff/oasdiff from 1.11.4 to 1.12.3.

Release notes

Sourced from github.com/oasdiff/oasdiff's releases.

v1.12.3

Bug Fixes

  • Fix go install failure caused by replace directive in go.mod (#810, #811) — switched from github.com/getkin/kin-openapi with a replace directive to github.com/oasdiff/kin-openapi v0.136.0 directly
  • All fixes from v1.12.2 (#806, #808) are included

v1.12.2

Bug Fixes

  • Fix false positive diffs when comparing byte-identical specs loaded from different file paths (#806, #807) — __origin__ source-location metadata was leaking into typed maps (MediaType.Encoding, Server.Variables)
  • Fix panic index out of range [0] with length 0 when loading a spec with a YAML sequence containing an empty mapping node (e.g. security: - {}) (#808, #809)

v1.12.1

Changelog

  • eef14e260ca3af0c09f59f8aba33c0022180b7de Merge pull request #803 from oasdiff/fix/kin-openapi-v0134-compat
  • 8004e6cf05f3484861be37f4c9aec99450e12f49 fix: update dependencies and fix kin-openapi v0.134.0 compatibility

v1.12.0

Changelog

  • 91a067d1b84b3fd9a18c081111bea82323fff695 update Source Location Tracking documentation
  • 40792977ac4174f11238cf513d2ff229a51169e7 Merge pull request #752 from oasdiff/source-location-tracking
  • cfbbf420d64b5856fb7d92781d6edb8b2d83bee5 fix: regenerate breaking changes docs and add commit skill
  • 34cdd626d56341c382b7698356655bb8b50f6830 fix: strip origin from interface{}-typed enum values to prevent false diffs
  • fad07d20ab85590692b7f0694903340c66553965 Update README.md by removing GitHub links
  • aee43c958a633e459b4bc9bf0d020f1de8d63cf8 fix: strip git ref prefix from origin-tracked file paths in source locations
  • 76efc2f3b2d19aa1b486a8ca8cff8bbcc14337aa fix: use DisplayPath() in GetSource() to strip git ref prefix
  • dce9a97e16ae881d0462ae22f5aaa2352806db2d fix: strip git ref prefix from SpecInfo.Url used as source location
  • e61929113e4d5a05bb7aa282a5bdf000c0a8bc27 feat: source location tracking for all 93 breaking-change checkers
  • 708b2db4d89ff73c7a1d1c64e18259cd1ba05f74 Merge pull request #802 from oasdiff/fix/git-revision-loader-cache
  • ad9a2915d75ba250b85865d48d0d992385b2f32c fix: use full git ref as URL path to avoid loader cache collision
  • 45e7dab1247f8a047e1727319a7764c676b89fb8 docs: update oasdiff-action reference to v0.0.31

v1.11.11

Changelog

  • d72364083728ff28f99343ce0ccb9af66dd8f5bd Merge pull request #801 from oasdiff/fix/add-git-to-docker
  • d15d3dc3f6d37b2a539de2e659639b67ed46a208 fix: add git to Docker image and improve missing-git error message
  • 30adfba183bc94e4d6da15868f48171b579acc58 Merge pull request #799 from oasdiff/feature/git-revision-source
  • 3c691efc629eaed3db4dcff130e4ba4884d78f8a test: cover loadFromGitRevision fallback error path when git is not in PATH
  • faabe3c3e1a79ebc296285f6a3430ae1b0e6a27d docs: add GIT-REVISION.md and update README feature list
  • fae321e4cfa2bb53431ff35652322304c6b5db8e refactor: use LoadFromDataWithPath in loadFromGitRevision, eliminating temp file
  • 888a908052f1e535a70aa33748573fa96499fc62 feat: support git revision syntax for spec paths
  • adcd2c5a415b52dfa395244c396e0d0925a92c5a Merge pull request #800 from oasdiff/refactor/remove-loader-interface
  • e43172de365e610dc60f83edbd7164bbaa029a38 fix: relax TestLoadInfo_UriInvalid assertion on Windows to require.Error
  • 205fee5b2feadb359f93c611ea3f6bd214360139 refactor: replace Loader interface with *openapi3.Loader
  • 4c8d48ed77a92f728f92acf52c5035a3ed5acc9c docs: add oasdiff.com side-by-side diff link to SOURCE-LOCATOR
  • 401a40fd6ac0b5405606a80653a77a2a89b217cd more places upgraded to 1.26
  • fa4fb461dfaae5bd4768586e9b12585074740641 fix: bump Go to 1.26 to fix crypto/x509 vulnerabilities
  • 2ff9cab03f1a024397b9eca255edc0f3bf317aac remove oasdiff-service
  • 18963f104731818d31d96fd5ef4a35b87475b9f9 Simplify roadmap to beta feature links
  • d63e53e6710b45241ec92fd653c8517d679558d6 Link roadmap items to their documentation pages

... (truncated)

Commits
  • 86f8bc2 Merge pull request #811 from oasdiff/fix/issue-810-remove-replace
  • 05aa2c9 fix: replace getkin/kin-openapi with oasdiff/kin-openapi v0.136.0
  • f7ccbd2 Merge pull request #809 from oasdiff/fix/issue-808-empty-seq-panic
  • 1010a01 chore: update kin-openapi replace directive to v0.135.1
  • 99dc1a5 chore: update kin-openapi replace directive to v0.135.0
  • 3bba300 test: add regression test for panic on empty mapping in sequence (#808)
  • 144bc14 fix: update deps to prevent panic on empty mapping node in sequence
  • 8e14055 fix: eliminate false positive diffs on identical files (issue #806) (#807)
  • 324ce3d Add sunset date to endpoint and property deprecation messages
  • f916d80 rm source-location-tracking docker image
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/oasdiff/oasdiff](https://github.com/oasdiff/oasdiff) from 1.11.4 to 1.12.3.
- [Release notes](https://github.com/oasdiff/oasdiff/releases)
- [Commits](oasdiff/oasdiff@v1.11.4...v1.12.3)

---
updated-dependencies:
- dependency-name: github.com/oasdiff/oasdiff
  dependency-version: 1.12.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 17, 2026
@dependabot dependabot bot requested a review from a team as a code owner March 17, 2026 21:53
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 17, 2026
@dependabot dependabot bot requested review from drinkbird and wtrocki March 17, 2026 21:53
@dependabot dependabot bot added the go Pull requests that update Go code label Mar 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants