chore(deps): bump github.com/getkin/kin-openapi from 0.144.0 to 0.149.0 by dependabot[bot] · Pull Request #299 · atlascloud/packages

dependabot · 2026-08-05T00:22:51Z

Bumps github.com/getkin/kin-openapi from 0.144.0 to 0.149.0.

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.149.0

What's Changed

openapi3: accept boolean schemas by @reuvenharrison in getkin/kin-openapi#1258

Full Changelog: getkin/kin-openapi@v0.148.0...v0.149.0

v0.148.0

What's Changed

openapi3: do not forget to carry schema format validators over to OAS3.1 by @fenollp in getkin/kin-openapi#1250

openapi3: add FormatOfStringForUUIDOfRFC9562 for UUID v6-v8 by @ChrisJr404 in getkin/kin-openapi#1251

openapi3: compare multipleOf on exact rationals, not fixed-precision decimals by @snowyukitty in getkin/kin-openapi#1252

docs: add inspect.software health badge by @Nayjest in getkin/kin-openapi#1253

openapi3: validate prefixItems positionally by @reuvenharrison in getkin/kin-openapi#1259

New Contributors

@ChrisJr404 made their first contribution in getkin/kin-openapi#1251

@Nayjest made their first contribution in getkin/kin-openapi#1253

Full Changelog: getkin/kin-openapi@v0.147.0...v0.148.0

v0.147.0

What's Changed

openapi3filter: fix for CI by @fenollp in getkin/kin-openapi#1237

openapi3: support OAS 3.2 query and additionalOperations by @mromaszewicz in getkin/kin-openapi#1240

openapi3: export PathItemMethods by @reuvenharrison in getkin/kin-openapi#1241

openapi3filter: append only the bytes read in ZipFileBodyDecoder by @codeAnqiang-ma in getkin/kin-openapi#1247

openapi3: stop validation panicking on an uncompilable pattern by @hdimer in getkin/kin-openapi#1245

openapi3filter: handle deserializing deepObject param with additionalProperties into maps by @Berserk-hub150 in getkin/kin-openapi#1249

New Contributors

@codeAnqiang-ma made their first contribution in getkin/kin-openapi#1247

@hdimer made their first contribution in getkin/kin-openapi#1245

@Berserk-hub150 made their first contribution in getkin/kin-openapi#1249

Full Changelog: getkin/kin-openapi@v0.146.0...v0.147.0

v0.146.0

What's Changed

openapi3: keep a document's origin tree only when it can be read by @reuvenharrison in getkin/kin-openapi#1234

openapi3: store field locations in a slice, not a map by @reuvenharrison in getkin/kin-openapi#1235

Full Changelog: getkin/kin-openapi@v0.145.0...v0.146.0

v0.145.0

What's Changed

openapi3: stop InternalizeRefs panicking on unresolved discriminator mappings by @snowyukitty in getkin/kin-openapi#1233

... (truncated)

Commits

1a812b4 openapi3: accept boolean schemas (#1258)
9814d1f Merge commit from fork
9245cef Merge commit from fork
4487f19 Merge commit from fork
53c2ab1 openapi3: validate prefixItems positionally (#1259)
ba23e9d docs: add inspect.software health badge (#1253)
94fcebf openapi3: compare multipleOf on exact rationals, not fixed-precision decimals...
e9e5e11 openapi3: add FormatOfStringForUUIDOfRFC9562 for UUID v6-v8 (#1251)
df7e8f4 openapi3: do not forget to carry schema format validators over to OAS3.1 (#1250)
eda80e2 Merge commit from fork
Additional commits viewable in compare view

github-actions · 2026-08-05T00:26:13Z

❌MegaLinter analysis: Error

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	4		0	0	0.08s
✅ API	spectral	2		0	0	3.05s
✅ COPYPASTE	jscpd	yes		no	no	2.36s
✅ DOCKERFILE	hadolint	1		0	0	0.16s
✅ GO	golangci-lint	yes	yes	no	no	60.24s
✅ GO	revive	yes		no	no	2.12s
✅ MARKDOWN	markdownlint	2	0	0	0	0.72s
✅ MARKDOWN	markdown-table-formatter	2	0	0	0	0.32s
✅ REPOSITORY	checkov	yes		no	no	45.33s
✅ REPOSITORY	gitleaks	yes		no	no	0.54s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
⚠️ REPOSITORY	grype	yes		5	no	95.63s
✅ REPOSITORY	secretlint	yes		no	no	0.81s
✅ REPOSITORY	syft	yes		no	no	3.39s
❌ REPOSITORY	trivy	yes		1	no	23.5s
✅ REPOSITORY	trivy-sbom	yes		no	no	3.07s
✅ REPOSITORY	trufflehog	yes		no	no	5.61s
✅ SPELL	lychee	14		0	0	0.12s
✅ YAML	prettier	12	0	0	0	0.75s
✅ YAML	v8r	12		0	0	18.91s
✅ YAML	yamllint	12		0	0	0.87s

Detailed Issues

❌ REPOSITORY / trivy - 1 error

2026-09-13T14:55:15Z	INFO	[vulndb] Need to update DB
2026-09-13T14:55:15Z	INFO	[vulndb] Downloading vulnerability DB...
2026-09-13T14:55:15Z	INFO	[vulndb] Downloading artifact...	repo="mirror.gcr.io/aquasec/trivy-db:2"
16.80 MiB / 113.11 MiB [-------->___________________________________________________] 14.85% ? p/s ?38.96 MiB / 113.11 MiB [-------------------->_______________________________________] 34.44% ? p/s ?57.11 MiB / 113.11 MiB [------------------------------>_____________________________] 50.49% ? p/s ?76.83 MiB / 113.11 MiB [------------------------------->______________] 67.93% 100.07 MiB p/s ETA 0s99.74 MiB / 113.11 MiB [---------------------------------------->_____] 88.18% 100.07 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [------------------------------------------->] 100.00% 100.07 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 97.51 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 97.51 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 97.51 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 91.22 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 91.22 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 91.22 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 85.34 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 85.34 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 85.34 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 79.83 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 79.83 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 79.83 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 74.68 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 74.68 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 74.68 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 69.86 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 69.86 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 69.86 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 65.35 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 65.35 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 65.35 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 61.14 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 61.14 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 61.14 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 57.19 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 57.19 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 57.19 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 53.50 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 53.50 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 53.50 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 50.05 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 50.05 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 50.05 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 46.82 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 46.82 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 46.82 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 43.80 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 43.80 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 43.80 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 40.98 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 40.98 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 40.98 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 38.33 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 38.33 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 38.33 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 35.86 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 35.86 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 35.86 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 33.55 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 33.55 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 33.55 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 31.38 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 31.38 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 31.38 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 29.36 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 29.36 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 29.36 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 27.46 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------->] 100.00% 27.46 MiB p/s ETA 0s113.11 MiB / 113.11 MiB [-------------------------------------------------] 100.00% 8.73 MiB p/s 13s2026-09-13T14:55:29Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2026-09-13T14:55:29Z	INFO	[vuln] Vulnerability scanning is enabled
2026-09-13T14:55:29Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-09-13T14:55:29Z	INFO	[checks-client] Need to update the checks bundle
2026-09-13T14:55:29Z	INFO	[checks-client] Downloading the checks bundle...
234.65 KiB / 234.65 KiB [--------------------------------------------------------->] 100.00% ? p/s ?234.65 KiB / 234.65 KiB [-----------------------------------------------] 100.00% 3.98 MiB p/s 300ms2026-09-13T14:55:38Z	INFO	Number of language-specific files	num=1
2026-09-13T14:55:38Z	INFO	[gomod] Detecting vulnerabilities...
2026-09-13T14:55:38Z	INFO	Detected config files	num=2
2026-09-13T14:55:38Z	WARN	Using severities from other vendors for some vulnerabilities. Read https://trivy.dev/docs/v0.69/guide/scanner/vulnerability#severity-selection for details.

Report Summary

┌──────────────────┬────────────┬─────────────────┬───────────────────┐
│      Target      │    Type    │ Vulnerabilities │ Misconfigurations │
├──────────────────┼────────────┼─────────────────┼───────────────────┤
│ go.mod           │   gomod    │        6        │         -         │
├──────────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile       │ dockerfile │        -        │         0         │
├──────────────────┼────────────┼─────────────────┼───────────────────┤
│ Dockerfile.local │ dockerfile │        -        │         0         │
└──────────────────┴────────────┴─────────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


go.mod (gomod)
==============
Total: 6 (UNKNOWN: 1, LOW: 0, MEDIUM: 2, HIGH: 3, CRITICAL: 0)

┌─────────────────────┬────────────────┬──────────┬──────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────────┐
│       Library       │ Vulnerability  │ Severity │  Status  │ Installed Version │ Fixed Version │                            Title                            │
├─────────────────────┼────────────────┼──────────┼──────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
│ golang.org/x/crypto │ CVE-2026-56854 │ HIGH     │ fixed    │ v0.54.0           │ 0.55.0        │ golang.org/x/crypto/ssh: golang.org/x/crypto/ssh:           │
│                     │                │          │          │                   │               │ Authentication bypass due to unenforced source-address      │
│                     │                │          │          │                   │               │ restrictions                                                │
│                     │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-56854                  │
│                     ├────────────────┼──────────┤          │                   ├───────────────┼─────────────────────────────────────────────────────────────┤
│                     │ CVE-2026-56855 │ MEDIUM   │          │                   │ 0.56.0        │ golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of │
│                     │                │          │          │                   │               │ Service via crafted messages                                │
│                     │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-56855                  │
│                     ├────────────────┤          │          │                   │               ├─────────────────────────────────────────────────────────────┤
│                     │ CVE-2026-78662 │          │          │                   │               │ golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of │
│                     │                │          │          │                   │               │ Service via channel request flooding                        │
│                     │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-78662                  │
│                     ├────────────────┼──────────┼──────────┤                   ├───────────────┼─────────────────────────────────────────────────────────────┤
│                     │ GO-2026-5932   │ UNKNOWN  │ affected │                   │               │ The golang.org/x/crypto/openpgp package is unmaintained,    │
│                     │                │          │          │                   │               │ unsafe by design, and has known security...                 │
├─────────────────────┼────────────────┼──────────┼──────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
│ golang.org/x/mod    │ CVE-2026-56864 │ HIGH     │ fixed    │ v0.37.0           │ 0.40.0        │ golang.org/x/mod/sumdb: golang.org/x/mod/sumdb: Integrity   │
│                     │                │          │          │                   │               │ bypass via malicious GOSUMDB                                │
│                     │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-56864                  │
│                     ├────────────────┤          │          │                   │               ├─────────────────────────────────────────────────────────────┤
│                     │ CVE-2026-56865 │          │          │                   │               │ golang.org/x/mod/sumdb/tlog: golang.org/x/mod/sumdb/tlog:   │
│                     │                │          │          │                   │               │ Supply chain compromise via transparency log tile           │
│                     │                │          │          │                   │               │ verification bypass                                         │
│                     │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-56865                  │
└─────────────────────┴────────────────┴──────────┴──────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────────┘

📣 Notices:
  - Version 0.74.0 of Trivy is now available, current version is 0.69.1

To suppress version checks, run Trivy scans with the --skip-version-check flag

⚠️ REPOSITORY / grype - 5 errors

[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
NAME                           INSTALLED  FIXED IN  TYPE       VULNERABILITY  SEVERITY  EPSS         RISK   
golang.org/x/crypto            v0.54.0    0.56.0    go-module  GO-2026-6355   High      0.4% (31st)  0.3    
golang.org/x/crypto            v0.54.0    0.55.0    go-module  GO-2026-6303   High      0.3% (25th)  0.2    
golang.org/x/crypto            v0.54.0    0.56.0    go-module  GO-2026-6354   High      0.3% (24th)  0.2    
golang.org/x/mod               v0.37.0    0.40.0    go-module  GO-2026-6180   High      0.3% (22nd)  0.2    
golang.org/x/mod               v0.37.0    0.40.0    go-module  GO-2026-6179   High      0.1% (1st)   < 0.1  
github.com/klauspost/compress  v1.18.0    1.18.7    go-module  GO-2026-5841   Unknown   N/A          N/A    
golang.org/x/crypto            v0.54.0              go-module  GO-2026-5932   Unknown   N/A          N/A
[0095] ERROR discovered vulnerabilities at or above the severity threshold

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

Documentation: Custom Flavors
Command: npx mega-linter-runner@9.4.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,API_SPECTRAL,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,GO_GOLANGCI_LINT,GO_REVIVE,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository

iggy · 2026-09-13T14:52:14Z

@dependabot rebase

Bumps [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) from 0.144.0 to 0.149.0. - [Release notes](https://github.com/getkin/kin-openapi/releases) - [Commits](getkin/kin-openapi@v0.144.0...v0.149.0) --- updated-dependencies: - dependency-name: github.com/getkin/kin-openapi dependency-version: 0.145.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-14T00:22:40Z

Superseded by #302.

dependabot Bot assigned iggy Aug 5, 2026

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 5, 2026

dependabot Bot changed the title ~~chore(deps): bump github.com/getkin/kin-openapi from 0.140.0 to 0.145.0~~ chore(deps): bump github.com/getkin/kin-openapi from 0.144.0 to 0.149.0 Sep 13, 2026

dependabot Bot force-pushed the dependabot/go_modules/github.com/getkin/kin-openapi-0.145.0 branch from 3fb5c48 to 2895970 Compare September 13, 2026 14:53

dependabot Bot closed this Sep 14, 2026

dependabot Bot deleted the dependabot/go_modules/github.com/getkin/kin-openapi-0.145.0 branch September 14, 2026 00:22

Navigation Menu

chore(deps): bump github.com/getkin/kin-openapi from 0.144.0 to 0.149.0 - #299

chore(deps): bump github.com/getkin/kin-openapi from 0.144.0 to 0.149.0#299
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/getkin/kin-openapi-0.145.0

dependabot Bot commented on behalf of github Aug 5, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 5, 2026 •

edited

Loading

Uh oh!

iggy commented Sep 13, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.149.0

What's Changed

v0.148.0

What's Changed

New Contributors

v0.147.0

What's Changed

New Contributors

v0.146.0

What's Changed

v0.145.0

What's Changed

Uh oh!

github-actions Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌MegaLinter analysis: Error

Detailed Issues

Uh oh!

iggy commented Sep 13, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Aug 5, 2026 •

edited

Loading

github-actions Bot commented Aug 5, 2026 •

edited

Loading