1.0.1 - 2026-09-03

Full Changelog: v1.0.0...v1.0.1

1 commits in this release.

Miscellaneous tasks

• chore: upgrade to go1.26 by @fredbi in #314 ...

People who contributed to this release

• @fredbi

spec license terms

1.0.0 - 2026-09-01

stable API pledge: v1.0.0 - features frozen

Full Changelog: v0.22.11...v1.0.0

4 commits in this release.

Fixed bugs

• fix(spec): keep zero-valued bounds through a gob round-trip by @fredbi in #310 ...

Documentation

• doc: updated contributors file by @bot-go-openapi[bot] in #313 ...

Updates

• build(deps): bump the development-dependencies group with 9 updates by @dependabot[bot] in #312 ...
• build(deps): bump the go-openapi-dependencies group with 2 updates by @dependabot[bot] in #311 ...

People who contributed to this release

• @fredbi

spec license terms

0.22.11 - 2026-08-25

Full Changelog: v0.22.10...v0.22.11

4 commits in this release.

Code quality

• fix(normalizer): align $ref and base canonicalization with jsonreference by @fredbi ...

Testing

• test(normalizer): fix the escaped-path base case failing on windows by @fredbi in #309 ...

Miscellaneous tasks

• chore(deps): bump jsonreference to v1.0.1 and swag to v0.29.1 by @fredbi ...

Other (technical)

• Fix/align url normalization by @fredbi in #308 ...

People who contributed to this release

• @fredbi

spec license terms

0.22.10 - 2026-08-24

Full Changelog: v0.22.9...v0.22.10

27 commits in this release.

Fixed bugs

• fix(expander): walk maps in sorted order so expansion is reproducible by @fredbi ...
• fix(expander): rebase a $ref found under an unmapped keyword by @fredbi ...
• fix(swagger): marshal an empty items array as an array by @fredbi ...
• fix(normalizer): stop $ref rebasing from changing the target document by @fredbi ...
• fix(normalizer): anchor a $ref joined onto a base with no path by @fredbi ...

Documentation

• doc: add technical writing rule for agents by @fredbi in #304 ...
• doc: updated contributors file by @bot-go-openapi[bot] in #295 ...

Testing

• test(expander): serve the remote circular id fixture on a free port by @fredbi ...
• test: added test coverage by @fredbi in #305 ...
• test(expander): fuzz spec expansion by @fredbi ...
• test(swagger): fuzz the document round-trip by @fredbi ...
• test(normalizer): fuzz $ref normalization by @fredbi ...
• test: rename the fixtures directory to testdata by @fredbi in #298 ...

Miscellaneous tasks

• chore(normalizer): correct the build constraint of normalizer_windows.go by @fredbi ...
• chore(dependabot): fix invalid timezone by @fredbi ...
• chore: dependabot schedule is now twice a week by @fredbi in #303 ...
• fix(normalizer): compare authorities alike when rebasing a circular $ref by @fredbi ...

Updates

• build(deps): bump the go-openapi-dependencies group with 4 updates by @dependabot[bot] in #306 ...
• build(deps): bump the development-dependencies group across 1 directory with 9 updates by @dependabot[bot] in #302 ...
• build(deps): bump the go-openapi-dependencies group with 2 updates by @dependabot[bot] in #301 ...
• build(deps): bump the development-dependencies group with 9 updates by @dependabot[bot] in #297 ...
• build(deps): bump the development-dependencies group with 9 updates by @dependabot[bot] in #296 ...
• build(deps): bump the go-openapi-dependencies group with 4 updates by @dependabot[bot] in #294 ...
• build(deps): bump the development-dependencies group with 9 updates by @dependabot[bot] in #293 ...

Other (technical)

• Fix/deterministic expansion by @fredbi in #307 ...
• chore: update go dependencies by @fredbi in #300 ...
• Test/fuzz normalizer by @fredbi in #299 ...

People who contributed to this release

• @fredbi

spec license terms

0.22.9 - 2026-07-20

Full Changelog: v0.22.8...v0.22.9

1 commits in this release.

Implemented enhancements

• feat(expander): add ExpandParameterWithOptions and ExpandResponseWithOptions by @fredbi in #292 ...

People who contributed to this release

• @fredbi

spec license terms

0.22.8 - 2026-07-20

Full Changelog: v0.22.7...v0.22.8

1 commits in this release.

Implemented enhancements

• feat(expander): add ExpandSchemaWithOptions for confined schema expansion by @fredbi in #291 ...

People who contributed to this release

• @fredbi

spec license terms

0.22.7 - 2026-07-20

Full Changelog: v0.22.6...v0.22.7

17 commits in this release.

Implemented enhancements

• feat(expander): accept an option-aware document loader by @fredbi ...

Fixed bugs

• fix(ref): stop performing a network request in IsValidURI by @fredbi ...
• fix(expander): cap $ref expansion node count to prevent amplification DoS by @fredbi ...

Documentation

• doc: updated contributors file by @bot-go-openapi[bot] in #284 ...
• ci: post README announcements to discord + bump ci-workflows to v0.4.0 by @fredbi in #282 ...
• doc: updated contributors file by @bot-go-openapi[bot] in #280 ...

Miscellaneous tasks

• build(deps): bump swag modules to v0.27.3 by @fredbi ...
• chore: upgrade dependencies ; fix deprecated jsonname by @fredbi ...
• chore(ci): run contributors workflow monthly instead of weekly by @fredbi in #281 ...

Security

• test(expander): validate the SSRF posture of an injected loader by @fredbi ...
• docs(security): warn that the default $ref loader is not sandboxed by @fredbi ...

Updates

• build(deps): bump the go-openapi-dependencies group with 2 updates by @dependabot[bot] in #286 ...
• build(deps): bump the go-openapi-dependencies group with 6 updates by @dependabot[bot] in #285 ...
• build(deps): bump the go-openapi-dependencies group with 2 updates by @dependabot[bot] in #283 ...
• build(deps): bump go-openapi/ci-workflows/.github/workflows/monitor-bot-pr.yml from 93b16765c4045dbd4dac2372803294298aa7592a to 2e57e83146e049b5dfb8116ba16a09b2da27b3c5 in the development-dependencies group by @dependabot[bot] in #279 ...

Other (technical)

• Fix/vuln reports by @fredbi in #290 ...
• build(deps): bump swag/loading to v0.27.2 for confined $ref loading by @fredbi ...

People who contributed to this release

• @fredbi

spec license terms

0.22.6 - 2026-06-14

Full Changelog: v0.22.5...v0.22.6

8 commits in this release.

Fixed bugs

• fix(header): header extension should correctly marshal as JSON by @fredbi ...

Documentation

• doc: updated contributors file by @bot-go-openapi[bot] in #274 ...
• doc: aligned with org docs by @fredbi in #273 ...

Code quality

• chore: relint by @fredbi ...

Updates

• build(deps): bump the development-dependencies group with 8 updates by @dependabot[bot] in #276 ...
• build(deps): bump the go-openapi-dependencies group across 1 directory with 6 updates by @dependabot[bot] in #275 ...
• build(deps): bump the development-dependencies group with 8 updates by @dependabot[bot] in #272 ...

Other (technical)

• Fix/277 header ext by @fredbi in #278 ...

People who contributed to this release

• @fredbi

spec license terms

0.22.5 - 2026-05-31

Full Changelog: v0.22.4...v0.22.5

16 commits in this release.

Implemented enhancements

• feat(ci): added shared workflow for bot-pr monitoring by @fredbi ...

Documentation

• doc: updated contributors file by @bot-go-openapi[bot] in #264 ...
• doc: update discord link by @fredbi in #260 ...
• doc: updated contributors file by @bot-go-openapi[bot] in #257 ...

Code quality

• doc: add portable agentic instructions by @fredbi in #261 ...

Miscellaneous tasks

• chore: bump go directive to 1.25.0 by @fredbi in #262 ...

Updates

• build(deps): bump the development-dependencies group across 1 directory with 7 updates by @dependabot[bot] in #270 ...
• build(deps): bump the go-openapi-dependencies group with 2 updates by @dependabot[bot] in #269 ...
• build(deps): bump the development-dependencies group across 1 directory with 7 updates by @dependabot[bot] in #266 ...
• build(deps): bump the go-openapi-dependencies group with 2 updates by @dependabot[bot] in #268 ...
• build(deps): bump github.com/go-openapi/jsonpointer from 0.23.0 to 0.23.1 in the go-openapi-dependencies group by @dependabot[bot] in #267 ...
• build(deps): bump the go-openapi-dependencies group with 6 updates by @dependabot[bot] in #265 ...
• build(deps): bump the go-openapi-dependencies group with 2 updates by @dependabot[bot] in #263 ...
• build(deps): bump the development-dependencies group with 7 updates by @dependabot[bot] in #259 ...
• build(deps): bump the go-openapi-dependencies group with 2 updates by @dependabot[bot] in #258 ...
• build(deps): bump the development-dependencies group with 7 updates by @dependabot[bot] in #256 ...

People who contributed to this release

• @fredbi

spec license terms

0.22.4 - 2026-03-03

Full Changelog: v0.22.3...v0.22.4

9 commits in this release.

Documentation

• doc: updated contributors file by @bot-go-openapi[bot] in #247 ...

Code quality

• chore: doc, tests, lint by @fredbi in #255 ...

Updates

• build(deps): bump github.com/go-openapi/testify/v2 from 2.3.0 to 2.4.0 in the go-openapi-dependencies group by @dependabot[bot] in #254 ...
• build(deps): bump the development-dependencies group with 7 updates by @dependabot[bot] in #253 ...
• build(deps): bump github.com/go-openapi/testify/v2 from 2.2.0 to 2.3.0 in the go-openapi-dependencies group by @dependabot[bot] in #252 ...
• build(deps): bump github.com/go-openapi/testify/v2 from 2.1.8 to 2.2.0 in the go-openapi-dependencies group by @dependabot[bot] in #250 ...
• build(deps): bump the development-dependencies group with 7 updates by @dependabot[bot] in #251 ...
• build(deps): bump github.com/go-openapi/testify/v2 from 2.0.2 to 2.1.8 in the go-openapi-dependencies group by @dependabot[bot] in #248 ...
• build(deps): bump the development-dependencies group with 7 updates by @dependabot[bot] in #249 ...

People who contributed to this release

• @fredbi

spec license terms