Skip to content

build(deps): bump the go_modules group across 2 directories with 6 updates - #905

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/integration-tests/go_modules-99850b6d0f
Closed

build(deps): bump the go_modules group across 2 directories with 6 updates#905
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/integration-tests/go_modules-99850b6d0f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the go_modules group with 2 updates in the /integration-tests directory: github.com/pion/dtls/v3 and github.com/pion/stun/v3.
Bumps the go_modules group with 5 updates in the / directory:

Package From To
github.com/pion/dtls/v3 3.1.2 3.1.4
github.com/pion/stun/v3 3.1.2 3.1.5
github.com/grafana/loki/v3 3.0.0-20250710111934-7be3efac7bc5 3.6.4
github.com/getkin/kin-openapi 0.133.0 0.144.0
github.com/oapi-codegen/oapi-codegen/v2 2.5.1 2.7.1

Updates github.com/pion/dtls/v3 from 3.1.2 to 3.1.4

Release notes

Sourced from github.com/pion/dtls/v3's releases.

v3.1.4

Changelog

  • e4aad60b48a4f5619443902fb484053f53c4759b Retact v3.1.3 for breaking compatiblity with firefox
  • 0e3867b253131964ba5f527576ab739ff3cb2fac Restore Firefox compatibility
  • 12eb398551d48b762b067b412d311502030e66a5 Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
  • 85fca0aac85f315fe1a35e918bbff024e5b1c987 Add MasterKeyIdentifier to use_srtp ext in flight3 (#835)
  • fd27a52a64265097a621432090926a651109b4cb Add private min and max version API (#823)
  • 620d6425fb873786357f9786982cf0e0981f34f2 Improve fuzzing for all extensions (#805)
  • 977de19f2d4f559f631c69280b2351f8478aa938 Update CI configs to v0.12.2
  • e6950f0291850b86fb704f65acf3ace88cd5b9d7 Filter non-approved FIPS curves in FIPS mode (#817)
  • 848c4bc17e147981c0b9e40bef866bb7f7c0a773 Optimize handshake memory usage
  • d0e736c2e6bcd89dada06355ef95fd0fe3957d14 DTLS 1.3 OID filter extension (#814)
  • 956d41df4ab17c1e1e387060c62242c72e8cd763 Update module golang.org/x/crypto to v0.48.0 (#809)
  • b86cb7515e56183ec0a3918d4f2738dc9b51f6ea Add missing checks and validations
  • 726522d91c73331f242ea6b5006a80e4c4244a6c Apply modernize and lint upgrades
  • d994b8bf4f571f1cf37a2f59d2c5e9b2c7a5efd7 Update CI configs to v0.12.1
  • 4fcce60395bf052abc530afd4a5ec25876e18fb4 Fix handshake hang on Finish in retransmit state
  • a25c8b860afe987ca4f17e0cc213ff686da652af Add ListenConfig option to Listener
  • 42b83fe3850722740d5258f878de148486a3ec83 Remove custom AddUint48 helper
  • 5a4e85a2fa567cc1da818d08ad2dad0d7a3346e2 DTLS 1.3 Add the Certificate Authorities extension (#807)
  • 812fc22c4f43abdf4d1da216e69e92421a64aa2c DTLS 1.3 post handshake auth extension (#806)
  • 39f310037631fb84fc47ff73447b23387eb666e3 DTLS 1.3 Add EarlyDataIndication extension (#804)
  • d1d58f212102887ef3c7e6b696d6bc218af3d7b9 Update CI configs to v0.12.0
  • 16413bad7fa0426de4c11d95f1ed2e76c0159d8b Add HKDF funcs for Key Scheduling - DTLS v1.3 (#737)
  • accee59ca63fc19171f0b807b378bb96aa49d33a Implement ChaCha20-Poly1305 Ciphersuite (#794)
  • 6b4fe8c044e03a73b6ecc8516911c7842268a430 Add RSA_PSS_RSAE back to DTLS 1.2 and fix parsing (#801)
  • 5ee9206c372458946776fe12cc7239acdd792e29 Upgrade E2E Test Docker Image (for OpenSSL 3.x) (#799)

v3.1.3

Changelog

  • 49458d604a4f3ebce1bf9587a0f3e5f3f6b4a55e Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
  • e4b257d7ea9ce71c683f62a8533e06ffe1c433ee Add MasterKeyIdentifier to use_srtp ext in flight3 (#835)
  • fd27a52a64265097a621432090926a651109b4cb Add private min and max version API (#823)
  • 620d6425fb873786357f9786982cf0e0981f34f2 Improve fuzzing for all extensions (#805)
  • 977de19f2d4f559f631c69280b2351f8478aa938 Update CI configs to v0.12.2
  • e6950f0291850b86fb704f65acf3ace88cd5b9d7 Filter non-approved FIPS curves in FIPS mode (#817)
  • 848c4bc17e147981c0b9e40bef866bb7f7c0a773 Optimize handshake memory usage
  • d0e736c2e6bcd89dada06355ef95fd0fe3957d14 DTLS 1.3 OID filter extension (#814)
  • 956d41df4ab17c1e1e387060c62242c72e8cd763 Update module golang.org/x/crypto to v0.48.0 (#809)
  • b86cb7515e56183ec0a3918d4f2738dc9b51f6ea Add missing checks and validations
  • 726522d91c73331f242ea6b5006a80e4c4244a6c Apply modernize and lint upgrades
  • d994b8bf4f571f1cf37a2f59d2c5e9b2c7a5efd7 Update CI configs to v0.12.1
  • 4fcce60395bf052abc530afd4a5ec25876e18fb4 Fix handshake hang on Finish in retransmit state
  • a25c8b860afe987ca4f17e0cc213ff686da652af Add ListenConfig option to Listener
  • 42b83fe3850722740d5258f878de148486a3ec83 Remove custom AddUint48 helper
  • 5a4e85a2fa567cc1da818d08ad2dad0d7a3346e2 DTLS 1.3 Add the Certificate Authorities extension (#807)
  • 812fc22c4f43abdf4d1da216e69e92421a64aa2c DTLS 1.3 post handshake auth extension (#806)
  • 39f310037631fb84fc47ff73447b23387eb666e3 DTLS 1.3 Add EarlyDataIndication extension (#804)
  • d1d58f212102887ef3c7e6b696d6bc218af3d7b9 Update CI configs to v0.12.0
  • 16413bad7fa0426de4c11d95f1ed2e76c0159d8b Add HKDF funcs for Key Scheduling - DTLS v1.3 (#737)

... (truncated)

Commits
  • e4aad60 Retact v3.1.3 for breaking compatiblity with firefox
  • 0e3867b Restore Firefox compatibility
  • 12eb398 Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
  • 85fca0a Add MasterKeyIdentifier to use_srtp ext in flight3 (#835)
  • fd27a52 Add private min and max version API (#823)
  • 620d642 Improve fuzzing for all extensions (#805)
  • 977de19 Update CI configs to v0.12.2
  • e6950f0 Filter non-approved FIPS curves in FIPS mode (#817)
  • 848c4bc Optimize handshake memory usage
  • d0e736c DTLS 1.3 OID filter extension (#814)
  • Additional commits viewable in compare view

Updates github.com/pion/stun/v3 from 3.1.2 to 3.1.5

Release notes

Sourced from github.com/pion/stun/v3's releases.

v3.1.5

Changelog

  • 02391b37388c7be80b4dafaec9b3e708d58d2aed Upgrade dtls to fix compatibility with firefox

v3.1.4

Changelog

  • 6a869cb3ce12869699dbf007fa48e1ce6760eca5 Update module github.com/pion/dtls/v3 to v3.1.3
  • 8f24ef3b428599b877f0c013fe2cc93670e5bc04 Update module github.com/pion/transport/v4 to v4.0.2

v3.1.3

Changelog

  • fa9f074a33a8059c76c960b1fbee39f308002423 Fix panic on short XOR-MAPPED-ADDRESS value
  • 01aa5b8eefd0c0934c6aebd2bd6b6fa7d3c7d715 Throw an error when parsing message type 0x000
  • c41a7f3240229f74db15968e1657c05b1ecb1037 Add opt-in strict mode and custom logger
  • bc40ca270a5fe67eabce506c1f4e154f804dbc36 Ignore attributes after message-integrity
  • 293095f9198ea72918620fb1e0177a9aaeb211db Update CI configs to v0.12.2
Commits
  • 02391b3 Upgrade dtls to fix compatibility with firefox
  • 6a869cb Update module github.com/pion/dtls/v3 to v3.1.3
  • 8f24ef3 Update module github.com/pion/transport/v4 to v4.0.2
  • fa9f074 Fix panic on short XOR-MAPPED-ADDRESS value
  • 01aa5b8 Throw an error when parsing message type 0x000
  • c41a7f3 Add opt-in strict mode and custom logger
  • bc40ca2 Ignore attributes after message-integrity
  • 293095f Update CI configs to v0.12.2
  • See full diff in compare view

Updates github.com/pion/dtls/v3 from 3.1.2 to 3.1.4

Release notes

Sourced from github.com/pion/dtls/v3's releases.

v3.1.4

Changelog

  • e4aad60b48a4f5619443902fb484053f53c4759b Retact v3.1.3 for breaking compatiblity with firefox
  • 0e3867b253131964ba5f527576ab739ff3cb2fac Restore Firefox compatibility
  • 12eb398551d48b762b067b412d311502030e66a5 Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
  • 85fca0aac85f315fe1a35e918bbff024e5b1c987 Add MasterKeyIdentifier to use_srtp ext in flight3 (#835)
  • fd27a52a64265097a621432090926a651109b4cb Add private min and max version API (#823)
  • 620d6425fb873786357f9786982cf0e0981f34f2 Improve fuzzing for all extensions (#805)
  • 977de19f2d4f559f631c69280b2351f8478aa938 Update CI configs to v0.12.2
  • e6950f0291850b86fb704f65acf3ace88cd5b9d7 Filter non-approved FIPS curves in FIPS mode (#817)
  • 848c4bc17e147981c0b9e40bef866bb7f7c0a773 Optimize handshake memory usage
  • d0e736c2e6bcd89dada06355ef95fd0fe3957d14 DTLS 1.3 OID filter extension (#814)
  • 956d41df4ab17c1e1e387060c62242c72e8cd763 Update module golang.org/x/crypto to v0.48.0 (#809)
  • b86cb7515e56183ec0a3918d4f2738dc9b51f6ea Add missing checks and validations
  • 726522d91c73331f242ea6b5006a80e4c4244a6c Apply modernize and lint upgrades
  • d994b8bf4f571f1cf37a2f59d2c5e9b2c7a5efd7 Update CI configs to v0.12.1
  • 4fcce60395bf052abc530afd4a5ec25876e18fb4 Fix handshake hang on Finish in retransmit state
  • a25c8b860afe987ca4f17e0cc213ff686da652af Add ListenConfig option to Listener
  • 42b83fe3850722740d5258f878de148486a3ec83 Remove custom AddUint48 helper
  • 5a4e85a2fa567cc1da818d08ad2dad0d7a3346e2 DTLS 1.3 Add the Certificate Authorities extension (#807)
  • 812fc22c4f43abdf4d1da216e69e92421a64aa2c DTLS 1.3 post handshake auth extension (#806)
  • 39f310037631fb84fc47ff73447b23387eb666e3 DTLS 1.3 Add EarlyDataIndication extension (#804)
  • d1d58f212102887ef3c7e6b696d6bc218af3d7b9 Update CI configs to v0.12.0
  • 16413bad7fa0426de4c11d95f1ed2e76c0159d8b Add HKDF funcs for Key Scheduling - DTLS v1.3 (#737)
  • accee59ca63fc19171f0b807b378bb96aa49d33a Implement ChaCha20-Poly1305 Ciphersuite (#794)
  • 6b4fe8c044e03a73b6ecc8516911c7842268a430 Add RSA_PSS_RSAE back to DTLS 1.2 and fix parsing (#801)
  • 5ee9206c372458946776fe12cc7239acdd792e29 Upgrade E2E Test Docker Image (for OpenSSL 3.x) (#799)

v3.1.3

Changelog

  • 49458d604a4f3ebce1bf9587a0f3e5f3f6b4a55e Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
  • e4b257d7ea9ce71c683f62a8533e06ffe1c433ee Add MasterKeyIdentifier to use_srtp ext in flight3 (#835)
  • fd27a52a64265097a621432090926a651109b4cb Add private min and max version API (#823)
  • 620d6425fb873786357f9786982cf0e0981f34f2 Improve fuzzing for all extensions (#805)
  • 977de19f2d4f559f631c69280b2351f8478aa938 Update CI configs to v0.12.2
  • e6950f0291850b86fb704f65acf3ace88cd5b9d7 Filter non-approved FIPS curves in FIPS mode (#817)
  • 848c4bc17e147981c0b9e40bef866bb7f7c0a773 Optimize handshake memory usage
  • d0e736c2e6bcd89dada06355ef95fd0fe3957d14 DTLS 1.3 OID filter extension (#814)
  • 956d41df4ab17c1e1e387060c62242c72e8cd763 Update module golang.org/x/crypto to v0.48.0 (#809)
  • b86cb7515e56183ec0a3918d4f2738dc9b51f6ea Add missing checks and validations
  • 726522d91c73331f242ea6b5006a80e4c4244a6c Apply modernize and lint upgrades
  • d994b8bf4f571f1cf37a2f59d2c5e9b2c7a5efd7 Update CI configs to v0.12.1
  • 4fcce60395bf052abc530afd4a5ec25876e18fb4 Fix handshake hang on Finish in retransmit state
  • a25c8b860afe987ca4f17e0cc213ff686da652af Add ListenConfig option to Listener
  • 42b83fe3850722740d5258f878de148486a3ec83 Remove custom AddUint48 helper
  • 5a4e85a2fa567cc1da818d08ad2dad0d7a3346e2 DTLS 1.3 Add the Certificate Authorities extension (#807)
  • 812fc22c4f43abdf4d1da216e69e92421a64aa2c DTLS 1.3 post handshake auth extension (#806)
  • 39f310037631fb84fc47ff73447b23387eb666e3 DTLS 1.3 Add EarlyDataIndication extension (#804)
  • d1d58f212102887ef3c7e6b696d6bc218af3d7b9 Update CI configs to v0.12.0
  • 16413bad7fa0426de4c11d95f1ed2e76c0159d8b Add HKDF funcs for Key Scheduling - DTLS v1.3 (#737)

... (truncated)

Commits
  • e4aad60 Retact v3.1.3 for breaking compatiblity with firefox
  • 0e3867b Restore Firefox compatibility
  • 12eb398 Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
  • 85fca0a Add MasterKeyIdentifier to use_srtp ext in flight3 (#835)
  • fd27a52 Add private min and max version API (#823)
  • 620d642 Improve fuzzing for all extensions (#805)
  • 977de19 Update CI configs to v0.12.2
  • e6950f0 Filter non-approved FIPS curves in FIPS mode (#817)
  • 848c4bc Optimize handshake memory usage
  • d0e736c DTLS 1.3 OID filter extension (#814)
  • Additional commits viewable in compare view

Updates github.com/pion/stun/v3 from 3.1.2 to 3.1.5

Release notes

Sourced from github.com/pion/stun/v3's releases.

v3.1.5

Changelog

  • 02391b37388c7be80b4dafaec9b3e708d58d2aed Upgrade dtls to fix compatibility with firefox

v3.1.4

Changelog

  • 6a869cb3ce12869699dbf007fa48e1ce6760eca5 Update module github.com/pion/dtls/v3 to v3.1.3
  • 8f24ef3b428599b877f0c013fe2cc93670e5bc04 Update module github.com/pion/transport/v4 to v4.0.2

v3.1.3

Changelog

  • fa9f074a33a8059c76c960b1fbee39f308002423 Fix panic on short XOR-MAPPED-ADDRESS value
  • 01aa5b8eefd0c0934c6aebd2bd6b6fa7d3c7d715 Throw an error when parsing message type 0x000
  • c41a7f3240229f74db15968e1657c05b1ecb1037 Add opt-in strict mode and custom logger
  • bc40ca270a5fe67eabce506c1f4e154f804dbc36 Ignore attributes after message-integrity
  • 293095f9198ea72918620fb1e0177a9aaeb211db Update CI configs to v0.12.2
Commits
  • 02391b3 Upgrade dtls to fix compatibility with firefox
  • 6a869cb Update module github.com/pion/dtls/v3 to v3.1.3
  • 8f24ef3 Update module github.com/pion/transport/v4 to v4.0.2
  • fa9f074 Fix panic on short XOR-MAPPED-ADDRESS value
  • 01aa5b8 Throw an error when parsing message type 0x000
  • c41a7f3 Add opt-in strict mode and custom logger
  • bc40ca2 Ignore attributes after message-integrity
  • 293095f Update CI configs to v0.12.2
  • See full diff in compare view

Updates github.com/grafana/loki/v3 from 3.0.0-20250710111934-7be3efac7bc5 to 3.6.4

Release notes

Sourced from github.com/grafana/loki/v3's releases.

v3.6.4

3.6.4 (2026-01-21)

Features

Bug Fixes

  • Backport gzip fix release 3.6.x (#20514) (d805266)
  • deps: [Release 3.6.x] Update dskit to resolve Otel conflict (#20368) (fb05a36)

v3.6.3

3.6.3 (2025-12-11)

Bug Fixes

  • Do not override S3 region if already specified in configuration chain (backport release-3.6.x) (#20128) (38582ac)
  • Fix regression in S3 client configuration (backport release-3.6.x) (#20118) (7d8176f)

v3.6.2

3.6.2 (2025-11-25)

Bug Fixes

v3.6.1

3.6.1 (2025-11-21)

Bug Fixes

  • docker: missing permissions to start docker (backport release-3.6.x) (#19948) (48b507f)
  • docker: set WORKDIR to root in loki Dockerfiles (#19952) (6040a09)

v3.6.0

Features

  • Add method to get zone-aware partition consumers (#17377) (4a733fc)
  • analytics: Change how analytics proxy works (#19098)
  • API: Add endpoint returning tenant configured limits (#17101) (6818c90)
  • API: Loki Improvement Document (LID) for query splitting (#16958) (66f0f0b)
  • ci: Add workflow_dispatch for querytee-images workflow (#19541)
  • compactor: Compactor deletion manifest builder (#17474) (47961f8)
  • compactor HS: Add a dashboard for monitoring deletion with horizontally scalable compactor (#18588) (10db8ab)

... (truncated)

Changelog

Sourced from github.com/grafana/loki/v3's changelog.

3.6.4 (2026-01-21)

Features

Bug Fixes

  • Backport gzip fix release 3.6.x (#20514) (d805266)
  • deps: [Release 3.6.x] Update dskit to resolve Otel conflict (#20368) (fb05a36)

3.6.3 (2025-12-11)

Bug Fixes

  • Do not override S3 region if already specified in configuration chain (backport release-3.6.x) (#20128) (38582ac)
  • Fix regression in S3 client configuration (backport release-3.6.x) (#20118) (7d8176f)

3.6.2 (2025-11-25)

Bug Fixes

3.6.1 (2025-11-21)

Bug Fixes

  • docker: missing permissions to start docker (backport release-3.6.x) (#19948) (48b507f)
  • docker: set WORKDIR to root in loki Dockerfiles (#19952) (6040a09)

3.6.0 (2025-11-05)

  • Add method to get zone-aware partition consumers (#17377) (4a733fc)
  • analytics: Change how analytics proxy works (#19098)
  • API: Add endpoint returning tenant configured limits (#17101) (6818c90)
  • API: Loki Improvement Document (LID) for query splitting (#16958) (66f0f0b)
  • ci: Add workflow_dispatch for querytee-images workflow (#19541)
  • compactor: Compactor deletion manifest builder (#17474) (47961f8)
  • compactor HS: Add a dashboard for monitoring deletion with horizontally scalable compactor (#18588) (10db8ab)
  • compactor HS: Add a job runner for processing of deletion jobs (#18058)
  • compactor HS: Add job queue and deletion job builder (#17843) (#17843)
  • compactor HS: Add jsonnet for deploying horizontally scalable compactor (#18550) (5e28950)
  • compactor HS: Add support for applying storage updates after finishing processing of deletion manifest (#18294) (ba3c670)
  • compactor HS: Add support for worker for processing of jobs from the compactor's job queue (#18165) (d05c4bc)
  • compactor HS: Fixes and changes for getting horizontally scalable compactor to work well (#18526) (000f90d)
  • compactor HS: Refactor interfaces and build a link between delete requests manager and compactor for HS of compactor (#18326) (3646607)
  • compactor HS: Store index updates per processed segment in the manifest to the object storage (#18212) (8007e22)
  • compactor HS: tune compactor worker config and add experimental feature warning to the docs (#18539) (5bf3f74)

... (truncated)

Commits

Updates github.com/prometheus/prometheus from 0.304.2 to 0.305.1-0.20250806170547-208187eaa19b

Commits

Updates github.com/getkin/kin-openapi from 0.133.0 to 0.144.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.144.0

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.143.0...v0.144.0

v0.143.0

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.142.0...v0.143.0

v0.142.0

What's Changed

Full Changelog: getkin/kin-openapi@v0.141.0...v0.142.0

v0.141.0

What's Changed

... (truncated)

Commits
  • f0407d5 Merge commit from fork
  • c947670 some fixes to please my moulinette (#1232)
  • 68ac2af Merge commit from fork
  • 3e5d7f4 openapi3filter: prefer non-empty value for repeated scalar query params (#1231)
  • 30e2923 Merge commit from fork
  • c11a481 openapi3gen: inline embedded struct with options-only JSON tag (#1229)
  • 0fb1f0e openapi3filter: skip schema checks for empty allowEmptyValue strings (#1228)
  • a872c57 openapi3: stable codes for validation errors (#1223)
  • d2f115e openapi3: preserve origin for a $ref to a schema under an arbitrary top-level...
  • 49523e0 openapi3filter: skip Split allocation for single-value array query params (#1...
  • Additional commits viewable in compare view

Updates github.com/oapi-codegen/oapi-codegen/v2 from 2.5.1 to 2.7.1

Release notes

Sourced from github.com/oapi-codegen/oapi-codegen/v2's releases.

Security fix for Go code injection

This is a security fix for a code injection vulnerability in v2.7.0, please see:

GHSA-rjwr-m7qx-3fjr

[!NOTE] A vulnerability like this requires that it is missed in code review and that you then call the malicious method.

Using an init() function could be enough to not require a direct call to the code, and instead rely on you importing the package, but either way, code review should be performed before any oapi-codegen generated code is executed.

We strongly recommend all users to be reviewing changes to their generated code before they execute anything within it, to protect against supply chain attacks or malicious injected code.

This is also why we recommend oapi-codegen generated code is committed to source control.

We're more strict about escaping strings passed into the OpenAPI specification, so that people can't inject Go code into generated code.

The problem was that it was possible to craft a description for server URL's which would emit arbitrary Go code, so if an attacker controlled your specification, they could inject Go code into your generated code which could do something malicious.

v2.7.0: Squashing bugs, many bugs (and adding some features)

Many improvements and even more bug fixes

This v2.7.0 release of oapi-codegen contains quite a bit of internal refactoring, focused on our most historically fragile code paths, which relate to the aggregate types (allOf/anyOf/oneOf), $ref to external specs, enums, and the spec traversal logic missing quite a few leaf nodes where models should have been generated, but were skipped.

The biggest changes are explicitly described in the sections below, and the full list of commits is at the bottom.

Thank you to all contributors, we've been going through all past PR's and updating them and merging where we can, and thanks to all our users for reporting issues that you hit.

I've (@​mromaszewicz) used a lot of LLM help here to scrub through old issues and do some deep internal refactoring to address common problem areas. I intend to continue doing this, since the conditional generation logic is getting quite complicated. When I originally released oapi-codegen, the use case was much simpler, all the models were under #/components/schemas, and all the references to them were in the requests, responses, etc. I never imagine how many things would be external references or unions, and how many complex OpenAPI specifications people would be generating code for. The initial design was never flexible enough to handle that, so ongoing bug fixes are getting increasingly complex due to edge cases. This version has a lot of internal changes you won't see as a user, but the way we handle type generation internally is unifying lots of copy/paste re-implementations into reusable code for consistency. Most of these changes can be done transparently, but some can't, so, onto the changes:

Code generation changes which might require some changes on your end

This release contains three changes, all very narrow in scope, which will require some manual adjustment of your own code. We've decided that these are small enough and uncommon enough not to require opt-in, which causes internal complexity. It's always a judgment call with these. If we got it wrong, we're happy to revisit it in a maintenance release.

Strict-server external response refs require strict-server generation in both packages (#2357)

If your strict-server spec uses an external $ref to a components/responses/... defined in another spec, that other spec must also be generated with strict-server: true. Add it to the source spec's config and regenerate:

# config for the spec being $ref'd
generate:
  models: true
  strict-server: true   # now required when imported by a strict-server spec

This restores the v2.0.0 behavior that lets you cast response models across package boundaries — the standard pattern for sharing error models (e.g. a common 400) across services. PR #1387 had silently changed the embedded type from N400JSONResponse to the bare externalRef0.N400, so the local and external response structs no longer had matching types and casts stopped compiling.

Many more anonymous inner schemas are now hoisted into top level schemas

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…dates

Bumps the go_modules group with 2 updates in the /integration-tests directory: [github.com/pion/dtls/v3](https://github.com/pion/dtls) and [github.com/pion/stun/v3](https://github.com/pion/stun).
Bumps the go_modules group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/pion/dtls/v3](https://github.com/pion/dtls) | `3.1.2` | `3.1.4` |
| [github.com/pion/stun/v3](https://github.com/pion/stun) | `3.1.2` | `3.1.5` |
| [github.com/grafana/loki/v3](https://github.com/grafana/loki) | `3.0.0-20250710111934-7be3efac7bc5` | `3.6.4` |
| [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) | `0.133.0` | `0.144.0` |
| [github.com/oapi-codegen/oapi-codegen/v2](https://github.com/oapi-codegen/oapi-codegen) | `2.5.1` | `2.7.1` |



Updates `github.com/pion/dtls/v3` from 3.1.2 to 3.1.4
- [Release notes](https://github.com/pion/dtls/releases)
- [Commits](pion/dtls@v3.1.2...v3.1.4)

Updates `github.com/pion/stun/v3` from 3.1.2 to 3.1.5
- [Release notes](https://github.com/pion/stun/releases)
- [Commits](pion/stun@v3.1.2...v3.1.5)

Updates `github.com/pion/dtls/v3` from 3.1.2 to 3.1.4
- [Release notes](https://github.com/pion/dtls/releases)
- [Commits](pion/dtls@v3.1.2...v3.1.4)

Updates `github.com/pion/stun/v3` from 3.1.2 to 3.1.5
- [Release notes](https://github.com/pion/stun/releases)
- [Commits](pion/stun@v3.1.2...v3.1.5)

Updates `github.com/grafana/loki/v3` from 3.0.0-20250710111934-7be3efac7bc5 to 3.6.4
- [Release notes](https://github.com/grafana/loki/releases)
- [Changelog](https://github.com/grafana/loki/blob/main/CHANGELOG.md)
- [Commits](https://github.com/grafana/loki/commits/v3.6.4)

Updates `github.com/prometheus/prometheus` from 0.304.2 to 0.305.1-0.20250806170547-208187eaa19b
- [Release notes](https://github.com/prometheus/prometheus/releases)
- [Changelog](https://github.com/prometheus/prometheus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/prometheus/commits)

Updates `github.com/getkin/kin-openapi` from 0.133.0 to 0.144.0
- [Release notes](https://github.com/getkin/kin-openapi/releases)
- [Commits](getkin/kin-openapi@v0.133.0...v0.144.0)

Updates `github.com/oapi-codegen/oapi-codegen/v2` from 2.5.1 to 2.7.1
- [Release notes](https://github.com/oapi-codegen/oapi-codegen/releases)
- [Commits](oapi-codegen/oapi-codegen@v2.5.1...v2.7.1)

---
updated-dependencies:
- dependency-name: github.com/pion/dtls/v3
  dependency-version: 3.1.4
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/pion/stun/v3
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/pion/dtls/v3
  dependency-version: 3.1.4
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/pion/stun/v3
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/grafana/loki/v3
  dependency-version: 3.6.4
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/prometheus/prometheus
  dependency-version: 0.305.1-0.20250806170547-208187eaa19b
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/getkin/kin-openapi
  dependency-version: 0.144.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/oapi-codegen/oapi-codegen/v2
  dependency-version: 2.7.1
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #906.

@dependabot dependabot Bot closed this Aug 18, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/integration-tests/go_modules-99850b6d0f branch August 18, 2026 22:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies-go Go Dependency Updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants