Skip to content

chore(deps): Bump github.com/oapi-codegen/runtime in /cpapi/api - #614

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/admin/go_modules-6beefb8482
Open

chore(deps): Bump github.com/oapi-codegen/runtime in /cpapi/api#614
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/admin/go_modules-6beefb8482

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/oapi-codegen/runtime in /cpapi/api from 1.6.0 to 1.7.0.

Updates github.com/oapi-codegen/runtime from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

v1.7.0: Extensions for OpenAPI 3.1 parameter binding

This release teaches the parameter binders about OpenAPI 3.1 multi-type unions, and fixes a long-standing panic on the request binding path. As with v1.6.0, new behavior is controlled by explicit settings rather than assumptions: binding stays exactly as it was unless the new options are used.

Notable Changes

Binding OpenAPI 3.1 multi-type union parameters

OpenAPI 3.1 allows a parameter's type to be a list, such as type: [string, integer]. Go has no type meaning "one of these", so generated code maps such parameters to any — which the binders previously rejected outright with can not bind to destination of type: interface, making these parameters unusable.

The binder options structs (BindStyledParameterOptions, BindQueryParameterOptions, BindStringToObjectOptions) gain a Types []string field carrying the union's member list. It is only consulted when the destination is an any; binding into every concrete Go type is completely unchanged. The value binds to the first member that parses, trying boolean, integer, number, then string — most restrictive first, since a string always parses. Member detection follows the JSON number grammar (RFC 8259), so values like 007 or +1 bind as strings rather than being silently reinterpreted as numbers.

The bound value's dynamic type is always one of bool, int64, float64, string, or (with format: byte) []byte, so a handler's type switch is stable regardless of what the spec's format says. Applications that want format: int32 / format: float to narrow the produced types to int32 / float32 can opt in via a new package-level setting, following the same pattern as DefaultQueryEncoder from v1.6.0:

func init() {
    runtime.NarrowUnionNumericFormats = true
}

Generator support for emitting Types is landing in oapi-codegen separately; the runtime side ships first so generated code can rely on it. Arrays of unions and deepObject-style parameters are not covered yet — see the Types field documentation for the exact scope.

Fix for a panic when binding numeric values into slice destinations

Since v1.2.0, binding a string that happens to parse as an integer into a non-[]byte slice destination panicked with reflect: call of reflect.Value.OverflowInt on slice Value, instead of returning an error. This was reachable from generated code on the request path: a nullable.Nullable[[]string] query parameter using the default form/explode serialization would panic on ?p=123 while returning a normal binding error on ?p=abc. These cases now return a clean can not bind to destination of type: slice error.

🚀 New features and improvements

🐛 Bug fixes

✍ Other changes

📦 Dependency updates

... (truncated)

Commits
  • 25e2d35 Fix panic binding numeric values into non-byte slice destinations (#156)
  • f2e468c Bind OpenAPI 3.1 multi-type union parameters into any destinations (#154)
  • 611503e chore(deps): update github/codeql-action action to v4.37.7 (#152)
  • d8c6443 chore(deps): update release-drafter/release-drafter action to v7.7.0 (#151)
  • 0caa035 chore(deps): update github/codeql-action action to v4.37.5 (#150)
  • 95ed734 fix(deps): update module github.com/labstack/echo/v5 to v5.3.1 (#149)
  • 2f68f55 chore: use go mod tidy instead of tidied (#148)
  • 03f0d06 chore(deps): update release-drafter/release-drafter action to v7.6.0 (#147)
  • 99e61d7 chore(deps): update github/codeql-action action to v4.37.2 (#146)
  • See full diff in compare view

Updates github.com/oapi-codegen/runtime from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

v1.7.0: Extensions for OpenAPI 3.1 parameter binding

This release teaches the parameter binders about OpenAPI 3.1 multi-type unions, and fixes a long-standing panic on the request binding path. As with v1.6.0, new behavior is controlled by explicit settings rather than assumptions: binding stays exactly as it was unless the new options are used.

Notable Changes

Binding OpenAPI 3.1 multi-type union parameters

OpenAPI 3.1 allows a parameter's type to be a list, such as type: [string, integer]. Go has no type meaning "one of these", so generated code maps such parameters to any — which the binders previously rejected outright with can not bind to destination of type: interface, making these parameters unusable.

The binder options structs (BindStyledParameterOptions, BindQueryParameterOptions, BindStringToObjectOptions) gain a Types []string field carrying the union's member list. It is only consulted when the destination is an any; binding into every concrete Go type is completely unchanged. The value binds to the first member that parses, trying boolean, integer, number, then string — most restrictive first, since a string always parses. Member detection follows the JSON number grammar (RFC 8259), so values like 007 or +1 bind as strings rather than being silently reinterpreted as numbers.

The bound value's dynamic type is always one of bool, int64, float64, string, or (with format: byte) []byte, so a handler's type switch is stable regardless of what the spec's format says. Applications that want format: int32 / format: float to narrow the produced types to int32 / float32 can opt in via a new package-level setting, following the same pattern as DefaultQueryEncoder from v1.6.0:

func init() {
    runtime.NarrowUnionNumericFormats = true
}

Generator support for emitting Types is landing in oapi-codegen separately; the runtime side ships first so generated code can rely on it. Arrays of unions and deepObject-style parameters are not covered yet — see the Types field documentation for the exact scope.

Fix for a panic when binding numeric values into slice destinations

Since v1.2.0, binding a string that happens to parse as an integer into a non-[]byte slice destination panicked with reflect: call of reflect.Value.OverflowInt on slice Value, instead of returning an error. This was reachable from generated code on the request path: a nullable.Nullable[[]string] query parameter using the default form/explode serialization would panic on ?p=123 while returning a normal binding error on ?p=abc. These cases now return a clean can not bind to destination of type: slice error.

🚀 New features and improvements

🐛 Bug fixes

✍ Other changes

📦 Dependency updates

... (truncated)

Commits
  • 25e2d35 Fix panic binding numeric values into non-byte slice destinations (#156)
  • f2e468c Bind OpenAPI 3.1 multi-type union parameters into any destinations (#154)
  • 611503e chore(deps): update github/codeql-action action to v4.37.7 (#152)
  • d8c6443 chore(deps): update release-drafter/release-drafter action to v7.7.0 (#151)
  • 0caa035 chore(deps): update github/codeql-action action to v4.37.5 (#150)
  • 95ed734 fix(deps): update module github.com/labstack/echo/v5 to v5.3.1 (#149)
  • 2f68f55 chore: use go mod tidy instead of tidied (#148)
  • 03f0d06 chore(deps): update release-drafter/release-drafter action to v7.6.0 (#147)
  • 99e61d7 chore(deps): update github/codeql-action action to v4.37.2 (#146)
  • See full diff in compare view

Updates github.com/oapi-codegen/runtime from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

v1.7.0: Extensions for OpenAPI 3.1 parameter binding

This release teaches the parameter binders about OpenAPI 3.1 multi-type unions, and fixes a long-standing panic on the request binding path. As with v1.6.0, new behavior is controlled by explicit settings rather than assumptions: binding stays exactly as it was unless the new options are used.

Notable Changes

Binding OpenAPI 3.1 multi-type union parameters

OpenAPI 3.1 allows a parameter's type to be a list, such as type: [string, integer]. Go has no type meaning "one of these", so generated code maps such parameters to any — which the binders previously rejected outright with can not bind to destination of type: interface, making these parameters unusable.

The binder options structs (BindStyledParameterOptions, BindQueryParameterOptions, BindStringToObjectOptions) gain a Types []string field carrying the union's member list. It is only consulted when the destination is an any; binding into every concrete Go type is completely unchanged. The value binds to the first member that parses, trying boolean, integer, number, then string — most restrictive first, since a string always parses. Member detection follows the JSON number grammar (RFC 8259), so values like 007 or +1 bind as strings rather than being silently reinterpreted as numbers.

The bound value's dynamic type is always one of bool, int64, float64, string, or (with format: byte) []byte, so a handler's type switch is stable regardless of what the spec's format says. Applications that want format: int32 / format: float to narrow the produced types to int32 / float32 can opt in via a new package-level setting, following the same pattern as DefaultQueryEncoder from v1.6.0:

func init() {
    runtime.NarrowUnionNumericFormats = true
}

Generator support for emitting Types is landing in oapi-codegen separately; the runtime side ships first so generated code can rely on it. Arrays of unions and deepObject-style parameters are not covered yet — see the Types field documentation for the exact scope.

Fix for a panic when binding numeric values into slice destinations

Since v1.2.0, binding a string that happens to parse as an integer into a non-[]byte slice destination panicked with reflect: call of reflect.Value.OverflowInt on slice Value, instead of returning an error. This was reachable from generated code on the request path: a nullable.Nullable[[]string] query parameter using the default form/explode serialization would panic on ?p=123 while returning a normal binding error on ?p=abc. These cases now return a clean can not bind to destination of type: slice error.

🚀 New features and improvements

🐛 Bug fixes

✍ Other changes

📦 Dependency updates

... (truncated)

Commits
  • 25e2d35 Fix panic binding numeric values into non-byte slice destinations (#156)
  • f2e468c Bind OpenAPI 3.1 multi-type union parameters into any destinations (#154)
  • 611503e chore(deps): update github/codeql-action action to v4.37.7 (#152)
  • d8c6443 chore(deps): update release-drafter/release-drafter action to v7.7.0 (#151)
  • 0caa035 chore(deps): update github/codeql-action action to v4.37.5 (#150)
  • 95ed734 fix(deps): update module github.com/labstack/echo/v5 to v5.3.1 (#149)
  • 2f68f55 chore: use go mod tidy instead of tidied (#148)
  • 03f0d06 chore(deps): update release-drafter/release-drafter action to v7.6.0 (#147)
  • 99e61d7 chore(deps): update github/codeql-action action to v4.37.2 (#146)
  • See full diff in compare view

Updates github.com/oapi-codegen/runtime from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

v1.7.0: Extensions for OpenAPI 3.1 parameter binding

This release teaches the parameter binders about OpenAPI 3.1 multi-type unions, and fixes a long-standing panic on the request binding path. As with v1.6.0, new behavior is controlled by explicit settings rather than assumptions: binding stays exactly as it was unless the new options are used.

Notable Changes

Binding OpenAPI 3.1 multi-type union parameters

OpenAPI 3.1 allows a parameter's type to be a list, such as type: [string, integer]. Go has no type meaning "one of these", so generated code maps such parameters to any — which the binders previously rejected outright with can not bind to destination of type: interface, making these parameters unusable.

The binder options structs (BindStyledParameterOptions, BindQueryParameterOptions, BindStringToObjectOptions) gain a Types []string field carrying the union's member list. It is only consulted when the destination is an any; binding into every concrete Go type is completely unchanged. The value binds to the first member that parses, trying boolean, integer, number, then string — most restrictive first, since a string always parses. Member detection follows the JSON number grammar (RFC 8259), so values like 007 or +1 bind as strings rather than being silently reinterpreted as numbers.

The bound value's dynamic type is always one of bool, int64, float64, string, or (with format: byte) []byte, so a handler's type switch is stable regardless of what the spec's format says. Applications that want format: int32 / format: float to narrow the produced types to int32 / float32 can opt in via a new package-level setting, following the same pattern as DefaultQueryEncoder from v1.6.0:

func init() {
    runtime.NarrowUnionNumericFormats = true
}

Generator support for emitting Types is landing in oapi-codegen separately; the runtime side ships first so generated code can rely on it. Arrays of unions and deepObject-style parameters are not covered yet — see the Types field documentation for the exact scope.

Fix for a panic when binding numeric values into slice destinations

Since v1.2.0, binding a string that happens to parse as an integer into a non-[]byte slice destination panicked with reflect: call of reflect.Value.OverflowInt on slice Value, instead of returning an error. This was reachable from generated code on the request path: a nullable.Nullable[[]string] query parameter using the default form/explode serialization would panic on ?p=123 while returning a normal binding error on ?p=abc. These cases now return a clean can not bind to destination of type: slice error.

🚀 New features and improvements

🐛 Bug fixes

✍ Other changes

📦 Dependency updates

... (truncated)

Commits
  • 25e2d35 Fix panic binding numeric values into non-byte slice destinations (#156)
  • f2e468c Bind OpenAPI 3.1 multi-type union parameters into any destinations (#154)
  • 611503e chore(deps): update github/codeql-action action to v4.37.7 (#152)
  • d8c6443 chore(deps): update release-drafter/release-drafter action to v7.7.0 (#151)
  • 0caa035 chore(deps): update github/codeql-action action to v4.37.5 (#150)
  • 95ed734 fix(deps): update module github.com/labstack/echo/v5 to v5.3.1 (#149)
  • 2f68f55 chore: use go mod tidy instead of tidied (#148)
  • 03f0d06 chore(deps): update release-drafter/release-drafter action to v7.6.0 (#147)
  • 99e61d7 chore(deps): update github/codeql-action action to v4.37.2 (#146)
  • See full diff in compare view

Updates github.com/oapi-codegen/runtime from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

v1.7.0: Extensions for OpenAPI 3.1 parameter binding

This release teaches the parameter binders about OpenAPI 3.1 multi-type unions, and fixes a long-standing panic on the request binding path. As with v1.6.0, new behavior is controlled by explicit settings rather than assumptions: binding stays exactly as it was unless the new options are used.

Notable Changes

Binding OpenAPI 3.1 multi-type union parameters

OpenAPI 3.1 allows a parameter's type to be a list, such as type: [string, integer]. Go has no type meaning "one of these", so generated code maps such parameters to any — which the binders previously rejected outright with can not bind to destination of type: interface, making these parameters unusable.

The binder options structs (BindStyledParameterOptions, BindQueryParameterOptions, BindStringToObjectOptions) gain a Types []string field carrying the union's member list. It is only consulted when the destination is an any; binding into every concrete Go type is completely unchanged. The value binds to the first member that parses, trying boolean, integer, number, then string — most restrictive first, since a string always parses. Member detection follows the JSON number grammar (RFC 8259), so values like 007 or +1 bind as strings rather than being silently reinterpreted as numbers.

The bound value's dynamic type is always one of bool, int64, float64, string, or (with format: byte) []byte, so a handler's type switch is stable regardless of what the spec's format says. Applications that want format: int32 / format: float to narrow the produced types to int32 / float32 can opt in via a new package-level setting, following the same pattern as DefaultQueryEncoder from v1.6.0:

func init() {
    runtime.NarrowUnionNumericFormats = true
}

Generator support for emitting Types is landing in oapi-codegen separately; the runtime side ships first so generated code can rely on it. Arrays of unions and deepObject-style parameters are not covered yet — see the Types field documentation for the exact scope.

Fix for a panic when binding numeric values into slice destinations

Since v1.2.0, binding a string that happens to parse as an integer into a non-[]byte slice destination panicked with reflect: call of reflect.Value.OverflowInt on slice Value, instead of returning an error. This was reachable from generated code on the request path: a nullable.Nullable[[]string] query parameter using the default form/explode serialization would panic on ?p=123 while returning a normal binding error on ?p=abc. These cases now return a clean can not bind to destination of type: slice error.

🚀 New features and improvements

🐛 Bug fixes

✍ Other changes

📦 Dependency updates

... (truncated)

Commits
  • 25e2d35 Fix panic binding numeric values into non-byte slice destinations (#156)
  • f2e468c Bind OpenAPI 3.1 multi-type union parameters into any destinations (#154)
  • 611503e chore(deps): update github/codeql-action action to v4.37.7 (#152)
  • d8c6443 chore(deps): update release-drafter/release-drafter action to v7.7.0 (#151)
  • 0caa035 chore(deps): update github/codeql-action action to v4.37.5 (#150)
  • 95ed734 fix(deps): update module github.com/labstack/echo/v5 to v5.3.1 (#149)
  • 2f68f55 chore: use go mod tidy instead of tidied (#148)
  • 03f0d06 chore(deps): update release-drafter/release-drafter action to v7.6.0 (#147)
  • 99e61d7 chore(deps): update github/codeql-action action to v4.37.2 (#146)
  • See full diff in compare view

Updates github.com/oapi-codegen/runtime from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

v1.7.0: Extensions for OpenAPI 3.1 parameter binding

This release teaches the parameter binders about OpenAPI 3.1 multi-type unions, and fixes a long-standing panic on the request binding path. As with v1.6.0, new behavior is controlled by explicit settings rather than assumptions: binding stays exactly as it was unless the new options are used.

Notable Changes

Binding OpenAPI 3.1 multi-type union parameters

OpenAPI 3.1 allows a parameter's type to be a list, such as type: [string, integer]. Go has no type meaning "one of these", so generated code maps such parameters to any — which the binders previously rejected outright with can not bind to destination of type: interface, making these parameters unusable.

The binder options structs (BindStyledParameterOptions, BindQueryParameterOptions, BindStringToObjectOptions) gain a Types []string field carrying the union's member list. It is only consulted when the destination is an any; binding into every concrete Go type is completely unchanged. The value binds to the first member that parses, trying boolean, integer, number, then string — most restrictive first, since a string always parses. Member detection follows the JSON number grammar (RFC 8259), so values like 007 or +1 bind as strings rather than being silently reinterpreted as numbers.

The bound value's dynamic type is always one of bool, int64, float64, string, or (with format: byte) []byte, so a handler's type switch is stable regardless of what the spec's format says. Applications that want format: int32 / format: float to narrow the produced types to int32 / float32 can opt in via a new package-level setting, following the same pattern as DefaultQueryEncoder from v1.6.0:

func init() {
    runtime.NarrowUnionNumericFormats = true
}

Generator support for emitting Types is landing in oapi-codegen separately; the runtime side ships first so generated code can rely on it. Arrays of unions and deepObject-style parameters are not covered yet — see the Types field documentation for the exact scope.

Fix for a panic when binding numeric values into slice destinations

Since v1.2.0, binding a string that happens to parse as an integer into a non-[]byte slice destination panicked with reflect: call of reflect.Value.OverflowInt on slice Value, instead of returning an error. This was reachable from generated code on the request path: a nullable.Nullable[[]string] query parameter using the default form/explode serialization would panic on ?p=123 while returning a normal binding error on ?p=abc. These cases now return a clean can not bind to destination of type: slice error.

🚀 New features and improvements

🐛 Bug fixes

✍ Other changes

📦 Dependency updates

... (truncated)

Commits
  • 25e2d35 Fix panic binding numeric values into non-byte slice destinations (#156)
  • f2e468c Bind OpenAPI 3.1 multi-type union parameters into any destinations (#154)
  • 611503e chore(deps): update github/codeql-action action to v4.37.7 (#152)
  • d8c6443 chore(deps): update release-drafter/release-drafter action to v7.7.0 (#151)
  • 0caa035 chore(deps): update github/codeql-action action to v4.37.5 (#150)
  • 95ed734 fix(deps): update module github.com/labstack/echo/v5 to v5.3.1 (#149)
  • 2f68f55 chore: use go mod tidy instead of tidied (#148)
  • 03f0d06 chore(deps): update release-drafter/release-drafter action to v7.6.0 (#147)
  • 99e61d7 chore(deps): update github/codeql-action action to v4.37.2 (#146)
  • See full diff in compare view

Updates github.com/oapi-codegen/runtime from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

v1.7.0: Extensions for OpenAPI 3.1 parameter binding

This release teaches the parameter binders about OpenAPI 3.1 multi-type unions, and fixes a long-standing panic on the request binding path. As with v1.6.0, new behavior is controlled by explicit settings rather than assumptions: binding stays exactly as it was unless the new options are used.

Notable Changes

Binding OpenAPI 3.1 multi-type union parameters

OpenAPI 3.1 allows a parameter's type to be a list, such as type: [string, integer]. Go has no type meaning "one of these", so generated code maps such parameters to any — which the binders previously rejected outright with can not bind to destination of type: interface, making these parameters unusable.

The binder options structs (BindStyledParameterOptions, BindQueryParameterOptions, BindStringToObjectOptions) gain a Types []string field carrying the union's member list. It is only consulted when the destination is an any; binding into every concrete Go type is completely unchanged. The value binds to the first member that parses, trying boolean, integer, number, then string — most restrictive first, since a string always parses. Member detection follows the JSON number grammar (RFC 8259), so values like 007 or +1 bind as strings rather than being silently reinterpreted as numbers.

The bound value's dynamic type is always one of bool, int64, float64, string, or (with format: byte) []byte, so a handler's type switch is stable regardless of what the spec's format says. Applications that want format: int32 / format: float to narrow the produced types to int32 / float32 can opt in via a new package-level setting, following the same pattern as DefaultQueryEncoder from v1.6.0:

func init() {
    runtime.NarrowUnionNumericFormats = true
}

Generator support for emitting Types is landing in oapi-codegen separately; the runtime side ships first so generated code can rely on it. Arrays of unions and deepObject-style parameters are not covered yet — see the Types field documentation for the exact scope.

Fix for a panic when binding numeric values into slice destinations

Since v1.2.0, binding a string that happens to parse as an integer into a non-[]byte slice destination panicked with reflect: call of reflect.Value.OverflowInt on slice Value, instead of returning an error. This was reachable from generated code on the request path: a nullable.Nullable[[]string] query parameter using the default form/explode serialization would panic on ?p=123 while returning a normal binding error on ?p=abc. These cases now return a clean can not bind to destination of type: slice error.

🚀 New features and improvements

🐛 Bug fixes

✍ Other changes

📦 Dependency updates

... (truncated)

Commits
  • 25e2d35 Fix panic binding numeric values into non-byte slice destinations (#156)
  • f2e468c Bind OpenAPI 3.1 multi-type union parameters into any destinations (#154)
  • 611503e chore(deps): update github/codeql-action action to v4.37.7 (#152)
  • d8c6443 chore(deps): update release-drafter/release-drafter action to v7.7.0 (#151)
  • 0caa035 chore(deps): update github/codeql-action action to v4.37.5 (#150)
  • 95ed734 fix(deps): update module github.com/labstack/echo/v5 to v5.3.1 (#149)
  • 2f68f55 chore: use go mod tidy instead of tidied (#148)
  • 03f0d06 chore(deps): update release-drafter/release-drafter action to v7.6.0 (#147)
  • 99e61d7 chore(deps): update github/codeql-action action to v4.37.2 (#146)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 20, 2026
Copilot AI lite review requested due to automatic review settings August 20, 2026 08:19
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 20, 2026
Copilot AI reviewed Aug 20, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates github.com/oapi-codegen/runtime to v1.7.0 across the monorepo’s Go modules (including /cpapi/api), picking up fixes and optional OpenAPI 3.1 union-binding support from the upstream runtime.

Changes:

  • Bump github.com/oapi-codegen/runtime from v1.6.0 to v1.7.0 in multiple modules’ go.mod.
  • Update corresponding go.sum entries/checksums to match v1.7.0.

Reviewed changes

Copilot reviewed 18 out of 36 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
admin/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0 (indirect).
admin/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
api/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0 (indirect).
api/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
application/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0 (indirect).
application/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
common-server/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0 (indirect).
common-server/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
controlplane-api/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0 (indirect).
controlplane-api/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
cpapi/api/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0.
cpapi/api/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
discovery-server/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0.
discovery-server/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
event/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0 (indirect).
event/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
file-manager/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0.
file-manager/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
gateway/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0.
gateway/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
identity/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0.
identity/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
organization/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0 (indirect).
organization/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
pubsub/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0 (indirect).
pubsub/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
rover/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0 (indirect).
rover/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
rover-server/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0.
rover-server/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
secret-manager/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0.
secret-manager/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
tools/route-tester/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0 (indirect).
tools/route-tester/go.sum Update oapi-codegen/runtime checksums for v1.7.0.
tools/snapshotter/go.mod Bump github.com/oapi-codegen/runtime to v1.7.0 (indirect).
tools/snapshotter/go.sum Update oapi-codegen/runtime checksums for v1.7.0.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread cpapi/api/go.mod
Comment on lines 6 to +10

go 1.26.6

require (
github.com/oapi-codegen/runtime v1.6.0
github.com/oapi-codegen/runtime v1.7.0
Comment thread cpapi/api/go.mod
Comment on lines 9 to +10
require (
github.com/oapi-codegen/runtime v1.6.0
github.com/oapi-codegen/runtime v1.7.0
@dependabot @BjoernKarma
chore(deps): Bump github.com/oapi-codegen/runtime in /cpapi/api
ef8d75b 
Bumps [github.com/oapi-codegen/runtime](https://github.com/oapi-codegen/runtime) in `/cpapi/api` from 1.6.0 to 1.7.0.


Updates `github.com/oapi-codegen/runtime` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.6.0...v1.7.0)

Updates `github.com/oapi-codegen/runtime` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.6.0...v1.7.0)

Updates `github.com/oapi-codegen/runtime` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.6.0...v1.7.0)

Updates `github.com/oapi-codegen/runtime` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.6.0...v1.7.0)

Updates `github.com/oapi-codegen/runtime` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.6.0...v1.7.0)

Updates `github.com/oapi-codegen/runtime` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.6.0...v1.7.0)

Updates `github.com/oapi-codegen/runtime` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/oapi-codegen/runtime/releases)
- [Commits](oapi-codegen/runtime@v1.6.0...v1.7.0)

---
updated-dependencies:
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go_modules
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go_modules
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go_modules
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go_modules
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go_modules
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go_modules
- dependency-name: github.com/oapi-codegen/runtime
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@BjoernKarma
BjoernKarma force-pushed the dependabot/go_modules/admin/go_modules-6beefb8482 branch from 068ea11 to ef8d75b Compare August 20, 2026 13:35
@BjoernKarma

BjoernKarma commented Aug 21, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot @github

dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor Author

Sorry, the 'unknown' group has been removed from your config so we do not know how to rebase this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@BjoernKarma