fix(deps): update module github.com/oasdiff/oasdiff to v1.15.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/oasdiff/oasdiff	v1.11.4 → v1.15.0

---

Release Notes

oasdiff/oasdiff (github.com/oasdiff/oasdiff)

v1.15.0

Compare Source

OpenAPI 3.1 support is generally available

First stable release with OpenAPI 3.1 support across diff, breaking, and changelog. The previous beta tags (v1.15.0-openapi31.beta.* and v2.2.0-openapi31.beta.*) are superseded by this release.

See docs/OPENAPI-31.md for the full feature list and known caveats.

Highlights

• 162 new rule IDs covering 3.1-specific keywords (const, prefixItems, if/then/else, dependentRequired, dependentSchemas, unevaluatedItems/Properties, contentSchema, contentMediaType, contentEncoding, patternProperties, propertyNames, contains/minContains/maxContains, numeric exclusiveMinimum/exclusiveMaximum).
• Webhook diffs and breaking-change detection. All operation-level checks (parameters, request bodies, responses, security, deprecation, etc.) are now applied automatically to modified webhook operations.
• Type arrays with null are recognised as nullable changes, eliminating the false-positive type-change reports that 3.1 specs would have produced under the old model.
• JSON Schema 2020-12 keywords parsed and tracked end-to-end (loader, diff, breaking-change checks).

Caveats

A few 3.1 features have known limitations in the underlying parser. See the Caveats section of the OPENAPI-31 doc for the current list.

Other fixes

• Git-revision $ref resolution now works correctly for multi-file specs. oasdiff diff origin/main:openapi.yaml HEAD:openapi.yaml resolves relative $ref paths in both revisions, via the new JoinFunc hook in kin-openapi v0.136.0.
• Property paths at schema root no longer carry a leading slash (#​859). Source-location output that previously read /foo for a top-level property now reads foo, which matches the rest of oasdiff's path conventions.

How to use it

• CLI: go install github.com/oasdiff/oasdiff@latest or curl -fsSL https://raw.githubusercontent.com/oasdiff/oasdiff/main/install.sh | sh
• Docker: docker pull tufin/oasdiff:v1.15.0
• GitHub Action: pin to oasdiff/oasdiff-action/<command>@&#8203;v0.0.41

---

Changelog

• 54e9cb8 Merge pull request #​869 from oasdiff/chore/oasdiff-3.1-ga-docs
• ab1bd69 docs: drop beta label for OpenAPI 3.1 support
• 8a1ce1d Merge pull request #​791 from oasdiff/feat/openapi-3.1-support
• b8f77c2 refactor: structured DependentRequiredDiff type (#​849)
• d1d157b fix: don't tag Docker image as stable/latest for pre-release builds
• 95c48dd chore: use kin-openapi v0.138.0-openapi31.beta.1 tag
• 9b1c59c fix: switch from oasdiff/kin-openapi fork to getkin/kin-openapi upstream
• e0532f0 test: cover exclusiveMin/Max, 3.1 nullable, dependent_required props, and utils
• bf7521f test: add coverage for 3.1 checker property-level and removed paths
• cac53c2 style: run go fmt on files with formatting issues
• eca8011 fix: replace remaining getkin/kin-openapi imports with oasdiff fork
• 121852c ci: bump cache key version to invalidate stale module cache
• 844b1e9 test: add test data for OAS 3.1 $ref sibling keyword test
• cc27b7e feat: enable $ref sibling keyword support via kin-openapi beta.8
• ab6610e chore: upgrade kin-openapi to v0.137.0-openapi31.beta.5
• e376d59 chore: upgrade kin-openapi to v0.137.0-openapi31.beta.2
• 2524246 chore: upgrade kin-openapi to v0.137.0-openapi31.beta.1
• e4039ce fix: use oasdiff/kin-openapi 3.1 branch with oasdiff module path
• 57646f6 test: improve coverage for contains, unevaluated, and dependent-required checkers
• a226cec rebase feat/openapi-3.1-support onto main
• 5dc938f Merge pull request #​860 from oasdiff/fix/git-ref-slash-path-resolution
• 2408267 fix: preserve git ref prefix when resolving relative $refs
• 3139dd8 Merge pull request #​867 from oasdiff/chore/bump-kin-openapi-v0.136.0
• 87cd120 chore: bump kin-openapi to v0.136.0
• f06aae5 chore: remove dead Slack badge from README (#​863)
• 8ac52be fix: drop leading slash from property paths at schema root (#​859)
• f6df062 docs: bump OPENAPI-31.md to beta.3, add GitHub Action usage (#​852)
• e43499a docs: bump install version to v1.15.0-openapi31.beta.1, add action/service status (#​848)
• 4feaf21 fix: Docker pre-release tagging and link checker rate limiting (#​847)
• ee46712 docs: bump install version to 2.2.0-openapi31.beta.4
• 7df24bc add claude skill
• 3097561 fix: point allOf/oneOf/anyOf source to specific subschema (#​843)

v1.14.0

Compare Source

Changelog

• 5bf2d58 refactor: migrate from oasdiff/kin-openapi fork to upstream getkin/kin-openapi (#​842)
• 39983dd fix: show meaningful messages when breaking/changelog finds no results (#​841)
• aee6ae7 docs: remove auto-generated BREAKING-CHANGES-EXAMPLES.md
• 69d124a docs: add CHECKS.md and link checks command in main commands
• f072ee1 docs: remove source location tracking from roadmap (officially released)
• fd033a8 refactor: consolidate test helpers, fix source locations, update linting (#​840)

v1.13.5

Compare Source

Changes

• chore: upgrade github.com/oasdiff/kin-openapi to v0.137.0

Note: v1.13.4 was tagged before the go.mod upgrade was committed; v1.13.5 is the correct release containing both the loader refactor and the kin-openapi upgrade.

v1.13.4

Compare Source

Changes

• refactor: copy loader in loadFromGitRevision instead of mutating it — cleaner than save/restore, goroutine-safe (#​839)
• chore: upgrade github.com/oasdiff/kin-openapi to v0.137.0

v1.13.3

Compare Source

Changelog

• be0b920 Fix ReadFromURIFunc leak when reusing loader instance (#​838)
• ec5a275 feat: use backticks instead of single quotes in changelog output (#​836)
• a34d521 docs+test: improve NewSource doc and harden repo-root $ref test (#​835)

v1.13.2

Compare Source

Changelog

• d886cb4 fix: resolve $ref chains via git show when loading from git revision specs (#​832)
• 084a346 chore: bump kin-openapi to v0.136.11
• 0fec5e0 docs: update OPENAPI-31.md on main with beta.2 version and known limitations

v1.13.1

Compare Source

Changelog

• 4a92d97 feat: add --allow-external-refs flag to mitigate SSRF (#​831)
• f3941fb fix: bump kin-openapi to v0.136.10, add $ref-root source tracking test (#​830)
• 01b2eb6 data: add ref-chain-example for $ref resolution testing

v1.13.0

Compare Source

Changes

• Bump github.com/oasdiff/kin-openapi to v0.136.9, which includes the OriginTree approach for origin tracking — a two-pass design replacing ad-hoc __origin__ inline stripping. Fixes performance regressions on large specs.
• Bump github.com/oasdiff/yaml to v0.0.8 and github.com/oasdiff/yaml3 to v0.0.8.

v1.12.9

Compare Source

What's Changed

• Bump kin-openapi to v0.136.8 — removes dead origin-stripping code (no functional change)
• Bump github.com/wI2L/jsondiff from v0.7.0 to v0.7.1

v1.12.8

Compare Source

What's Changed

• Bump kin-openapi to v0.136.7 — compact __origin__ format (~4x less YAML overhead), fix origin tracking for integer HTTP status codes

v1.12.7

Compare Source

Changelog

• 7828925 Merge pull request #​824 from oasdiff/bump/kin-openapi-v0.136.4
• ade47b8 bump: kin-openapi to v0.136.4 — strip origin from extension values

v1.12.6

Compare Source

Changelog

• 8200e83 Merge pull request #​823 from oasdiff/bump/kin-openapi-v0.136.3
• c551f1f bump: kin-openapi to v0.136.3 — preserve origin in alias-expanded mappings

v1.12.5

Compare Source

Bug fixes

• Fix panic and excessive-aliasing errors on YAML specs with anchors/aliases (#​821)
  • Prevent duplicate __origin__ keys when a YAML anchor is used as an alias
  • Prevent spurious "document contains excessive aliasing" errors on large specs with many aliases

Dependency updates

• oasdiff/kin-openapi → v0.136.2
• oasdiff/yaml → v0.0.3
• oasdiff/yaml3 → v0.0.3

v1.12.4

Compare Source

Changelog

• cfd790f Merge pull request #​813 from oasdiff/add-change-fingerprint
• fccd76a update git workflow
• 45290a3 update features doc
• 04fc4ba docs: add FINGERPRINT.md and link from README
• 1a167a4 formatters: add Fingerprint field to Change
• 9d14fd6 chore: update go.sum for kin-openapi v0.136.1
• 2c00f45 chore: upgrade kin-openapi to v0.136.1

v1.12.3

Compare Source

Bug Fixes

• Fix go install failure caused by replace directive in go.mod (#​810, #​811) — switched from github.com/getkin/kin-openapi with a replace directive to github.com/oasdiff/kin-openapi v0.136.0 directly
• All fixes from v1.12.2 (#​806, #​808) are included

v1.12.2

Compare Source

Bug Fixes

• Fix false positive diffs when comparing byte-identical specs loaded from different file paths (#​806, #​807) — __origin__ source-location metadata was leaking into typed maps (MediaType.Encoding, Server.Variables)
• Fix panic index out of range [0] with length 0 when loading a spec with a YAML sequence containing an empty mapping node (e.g. security: - {}) (#​808, #​809)

v1.12.1

Compare Source

Changelog

• eef14e2 Merge pull request #​803 from oasdiff/fix/kin-openapi-v0134-compat
• 8004e6c fix: update dependencies and fix kin-openapi v0.134.0 compatibility

v1.12.0

Compare Source

Changelog

• 91a067d update Source Location Tracking documentation
• 4079297 Merge pull request #​752 from oasdiff/source-location-tracking
• cfbbf42 fix: regenerate breaking changes docs and add commit skill
• 34cdd62 fix: strip origin from interface{}-typed enum values to prevent false diffs
• fad07d2 Update README.md by removing GitHub links
• aee43c9 fix: strip git ref prefix from origin-tracked file paths in source locations
• 76efc2f fix: use DisplayPath() in GetSource() to strip git ref prefix
• dce9a97 fix: strip git ref prefix from SpecInfo.Url used as source location
• e619291 feat: source location tracking for all 93 breaking-change checkers
• 708b2db Merge pull request #​802 from oasdiff/fix/git-revision-loader-cache
• ad9a291 fix: use full git ref as URL path to avoid loader cache collision
• 45e7dab docs: update oasdiff-action reference to v0.0.31

v1.11.11

Compare Source

Changelog

• d723640 Merge pull request #​801 from oasdiff/fix/add-git-to-docker
• d15d3dc fix: add git to Docker image and improve missing-git error message
• 30adfba Merge pull request #​799 from oasdiff/feature/git-revision-source
• 3c691ef test: cover loadFromGitRevision fallback error path when git is not in PATH
• faabe3c docs: add GIT-REVISION.md and update README feature list
• fae321e refactor: use LoadFromDataWithPath in loadFromGitRevision, eliminating temp file
• 888a908 feat: support git revision syntax for spec paths
• adcd2c5 Merge pull request #​800 from oasdiff/refactor/remove-loader-interface
• e43172d fix: relax TestLoadInfo_UriInvalid assertion on Windows to require.Error
• 205fee5 refactor: replace Loader interface with *openapi3.Loader
• 4c8d48e docs: add oasdiff.com side-by-side diff link to SOURCE-LOCATOR
• 401a40f more places upgraded to 1.26
• fa4fb46 fix: bump Go to 1.26 to fix crypto/x509 vulnerabilities
• 2ff9cab remove oasdiff-service
• 18963f1 Simplify roadmap to beta feature links
• d63e53e Link roadmap items to their documentation pages
• f52b9f7 Update demo link for inline PR annotations
• b84369f docs: add source location tracking feature page
• 9ee0f2b docs: add OpenAPI 3.1 documentation and feature listing
• 77d93e0 fix: update CI badge URL to current GitHub Actions format
• 24b988a Merge pull request #​794 from oasdiff/chore/upgrade-actions-checkout-v6
• b2e0c09 chore: upgrade actions/checkout from v4 to v6 in all workflows

v1.11.10

Compare Source

Changelog

• 91ed33d Merge pull request #​790 from oasdiff/refactor/simplify-internal-types
• c708e0c refactor: remove custom types and consolidate packages
• 144e4ae Update README with new roadmap details
• 18d2147 Merge pull request #​789 from oasdiff/refactor/remove-custom-string-types
• 68baece add unit test
• 451c70c format files
• 91aae19 update breaking changes
• 56c6d78 update breaking changes
• 4dc90a4 refactor: replace StringList, StringMap, StringPair with Go built-in types
• 82af827 Merge pull request #​788 from oasdiff/feat-765-exclude-extensions
• 6841120 mention exclude specific extension names in readme
• 5b9b044 docs: add documentation for --exclude-extensions flag
• 71d1946 feat: add --exclude-extensions flag to exclude specific extension names (#​765)
• c8cb0b1 Merge pull request #​787 from oasdiff/fix-710-oneof-deduplication
• 880a450 fix: deduplicate identical oneOf/anyOf groups before cartesian product (#​710)
• 097780e Merge pull request #​786 from oasdiff/fix-594-media-type-context
• a2a36ed fix format
• 742a5c4 feat: add media type context to all property checks
• 63a7d12 feat: add media type context to additional property checks
• fefa68f docs: update breaking changes examples with new line numbers
• 54a455f fix: add media type context to property deprecation messages (#​594)
• da70772 restrict go badge to main branch only
• a1243f4 Merge pull request #​785 from oasdiff/go-modernization
• d171a50 update breaking change doc
• b6dda60 test: add coverage for error wrapping and x-since-date
• f3e4fe7 test: improve test coverage for multiple packages
• 1945f29 refactor: minor Go modernization fixes
• f5441d4 refactor: migrate golang.org/x/exp/slices to stdlib slices
• e89b006 refactor: replace sort.Sort/sort.Strings with slices.Sort/slices.SortFunc
• d347a0c refactor: use maps.Keys() for map key collection
• cf8ccec refactor: replace interface{} with any across codebase

v1.11.9

Compare Source

Changelog

• 0b13917 Merge pull request #​784 from oasdiff/migrate-yaml-v3
• 85c7c2f migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3
• 2c2e2ca Merge pull request #​782 from jainsachi88/feature/Property-deprecation
• 8924224 update deprecation docs to include property deprecation support
• 7134d5a fix property deprecation: use WithDetails pattern and improve tests
• 6211e66 update breaking changes
• f721cad feature: Added missing tests to improve patch coverage for property deprecation
• d26c42a update check numbers
• 61549c2 update breaking changes examples
• a15a9c5 Merge branch 'main' into feature/Property-deprecation
• 166cbbf feature: enhance property deprecation with conditional details
• 01f5fb1 Merge pull request #​783 from oasdiff/improve-deprecation-and-sunset-date-in-changelog
• e4096ef update breaking changes doc
• 146694b fix coverage
• cb33be8 remove unused GetDetails
• 7828630 regen breaking changes deprecation
• 51d9b79 fix breaking changes docs
• 827eadb we no longer need to output comments in html and md
• 2994d1d add a dedicated Details field to avoid heuristics in formatters
• 4cb2d51 fix ignored errors
• f5d07eb type-safe formatDeprecationDetails
• 954d7d0 trigger codecov
• 32de02e feature: Add support for showing changelog for deprecated properties
• 13475c1 Add breaking changes to changelog
• b33f652 Merge pull request #​2 from grid-x/feat/add_tests_for_changelog_deprecation_display
• 2de7e2b feat: add unit tests for changelog deprecation display with conditional details
• eb93483 Merge branch 'oasdiff:main' into main
• 635bec4 Merge pull request #​781 from oasdiff/fix/issue-760-maxitems-array-parameter
• f3a3a61 Fix maxItems detection for array parameters (issue #​760)
• a24c8d5 Update goreleaser config to version 2
• cbbcd2e Merge branch 'oasdiff:main' into main
• 0f0ade1 feat: enhance changelog deprecation display with conditional details

v1.11.8

Compare Source

Changelog

• c75875f Merge pull request #​751 from oasdiff/go-1.25
• 8cce85f Fix golangci-lint for Go 1.25 by using goinstall mode
• 33beb18 Merge main and resolve go.mod conflict
• 15217b3 Merge pull request #​780 from oasdiff/fix/issue-767-exploded-param-self-match
• 3aeb15b Fix false positive diff when exploded param name matches property name
• 754626c Merge pull request #​774 from greyhairredbear/patch-1
• cd9484e Merge pull request #​777 from oasdiff/772-installation-script-of-the-plugin-on-linux-doesnt-work-anymore
• c59a83f Merge pull request #​778 from oasdiff/dependabot/go_modules/github.com/yuin/goldmark-1.7.16
• 568e563 Bump github.com/yuin/goldmark from 1.7.14 to 1.7.16
• 8fd83ff Fix install script failing when version cannot be determined (#​772)
• b7c0230 Merge pull request #​756 from oasdiff/dependabot/go_modules/github.com/getkin/kin-openapi-0.133.0
• 9ba0fe2 Merge remote-tracking branch 'origin/main' into dependabot/go_modules/github.com/getkin/kin-openapi-0.133.0
• 1e4e427 Replace deprecated Uint64Ptr with Ptr
• 5fc7b5f Fix failing test in load/spec_info_unix_test.go
• 2423bd9 Merge pull request #​763 from oasdiff/dependabot/go_modules/github.com/spf13/viper-1.21.0
• 00cad66 Merge branch 'main' into dependabot/go_modules/github.com/spf13/viper-1.21.0
• 8455646 Merge pull request #​764 from oasdiff/dependabot/go_modules/cloud.google.com/go-0.123.0
• cedc04e Merge branch 'main' into dependabot/go_modules/cloud.google.com/go-0.123.0
• d2c142a Merge pull request #​773 from oasdiff/dependabot/go_modules/github.com/spf13/cobra-1.10.2
• a585e16 Merge branch 'main' into dependabot/go_modules/github.com/spf13/cobra-1.10.2
• c6d967d Merge pull request #​775 from oasdiff/dependabot/go_modules/github.com/yuin/goldmark-1.7.14
• c106714 Merge branch 'main' into dependabot/go_modules/github.com/yuin/goldmark-1.7.14
• 530bad7 Merge pull request #​776 from oasdiff/remove-claude-code-review
• 870cf23 remove review workflow for claude
• b636856 Bump github.com/yuin/goldmark from 1.7.13 to 1.7.14
• 703711d chore: remove tap from homebrew install instructions
• 51a26ce Bump github.com/spf13/cobra from 1.10.1 to 1.10.2
• c7e237e Bump cloud.google.com/go from 0.122.0 to 0.123.0
• c0584f7 Bump github.com/spf13/viper from 1.20.1 to 1.21.0
• b91b8e2 Bump github.com/getkin/kin-openapi from 0.132.0 to 0.133.0
• 1ae5c65 Merge pull request #​757 from oasdiff/dependabot/go_modules/github.com/stretchr/testify-1.11.1
• 47756e4 Merge pull request #​759 from oasdiff/dependabot/go_modules/github.com/spf13/cobra-1.10.1
• 1e65876 Bump github.com/stretchr/testify from 1.11.0 to 1.11.1
• 8d84d54 Bump github.com/spf13/cobra from 1.9.1 to 1.10.1
• 482d32f Merge pull request #​761 from oasdiff/dependabot/go_modules/github.com/spf13/pflag-1.0.10
• 0106864 Merge pull request #​762 from oasdiff/dependabot/go_modules/cloud.google.com/go-0.122.0
• f34d54a Bump cloud.google.com/go from 0.121.6 to 0.122.0
• 853000b Bump github.com/spf13/pflag from 1.0.7 to 1.0.10
• 5d92d23 Merge pull request #​755 from oasdiff/dependabot/go_modules/github.com/stretchr/testify-1.11.0
• 5ad98da Bump github.com/stretchr/testify from 1.10.0 to 1.11.0
• cbb6a05 Merge pull request #​754 from oasdiff/dependabot/go_modules/github.com/go-viper/mapstructure/v2-2.4.0
• e865257 Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0
• eb6d69d upgrade to go 1.25

v1.11.7

Compare Source

Changelog

• fc23f9b fix html encoding
• 0584981 exclude localizations.go from final diff
• e209768 another attempt to fix the build
• 43199a9 Fix cache corruption issues in GitHub workflow
• e39d85d Update generated localization file with latest timestamp
• bc5ea67 Fix GitHub workflow cache issues and add localization generation
• 8063989 add charset UTF-8 to the HTML template
• 43d7801 fix russian messages

v1.11.6

Compare Source

Changelog

• 6d4c193 Update OASDIFF-SERVICE.md
• 5aa50ac Merge pull request #​753 from oasdiff/dependabot/go_modules/cloud.google.com/go-0.121.6
• 651797c Bump cloud.google.com/go from 0.121.5 to 0.121.6
• 984335f remove patch methods (#​750)
• b66c8a8 fix cache (#​749)
• 83bdced fix format
• 926a292 document formatters
• 538e749 run doc-breaking-changes in make test
• aeae205 run go fmt in make lint
• 5ef0a8a ignore claude files
• 110147d Bump cloud.google.com/go from 0.121.4 to 0.121.5 (#​747)
• 7b1c297 feature: exploded parameter semantic equivalence (#​744)
• dcbfdc7 Add Claude Code GitHub Workflow (#​743)
• 2213b0f add spanish messages (#​742)
• aa42d36 update checker/localizations/localizations.go (#​741)
• c30ec02 fixed all localization discrepancies (#​740)
• 1d96150 Update BREAKING-CHANGES.md
• f24fd66 improve documentation with examples folder (#​739)
• de2844e Improve make file (#​738)
• a124dc7 feature: list-of-types (#​736)
• 9c181be clarify custom templates feature

v1.11.5

Compare Source

Changelog

• dd859ec feature: custom markdown templates (#​734)
• 3f9aee7 Bump github.com/yuin/goldmark from 1.7.12 to 1.7.13 (#​731)
• b902374 Bump github.com/spf13/pflag from 1.0.6 to 1.0.7 (#​728)
• 0bcf8c1 Bump cloud.google.com/go from 0.121.3 to 0.121.4 (#​729)
• 9e4665f correct path
• 5a226e6 document install.sh
• 31d6323 point to components instead of embedding in diff (#​725)
• 685f943 pinned version (#​724)
• 9a44de6 re-add mistakenly removed request-parameter-x-extensible-enum-value-removed (#​721)
• d68743c Fix pattern addition detection: Change severity from WARN to ERROR for breaking changes (#​720)
• dcf4f18 Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 (#​718)
• ab901ac Fix invalid comparison operator (#​713)
• 0a7f68f Bump cloud.google.com/go from 0.121.2 to 0.121.3 (#​715)
• c1a1ab7 Bump cloud.google.com/go from 0.121.1 to 0.121.2 (#​709)
• 283f6a4 Bump github.com/yuin/goldmark from 1.7.11 to 1.7.12 (#​707)
• 21f8884 Bump github.com/wI2L/jsondiff from 0.6.1 to 0.7.0 (#​703)
• 9094f49 Bump cloud.google.com/go from 0.121.0 to 0.121.1 (#​704)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: cli/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 5 additional dependencies were updated

Details:

Package	Change
cloud.google.com/go	v0.121.0 -> v0.121.6
github.com/wI2L/jsondiff	v0.6.1 -> v0.7.0
github.com/yuin/goldmark	v1.7.11 -> v1.7.13
golang.org/x/crypto	v0.37.0 -> v0.40.0
golang.org/x/net	v0.39.0 -> v0.42.0

[renovate]

ℹ️ Artifact update notice

File name: cli/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 15 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.24 -> 1.26
github.com/getkin/kin-openapi	v0.132.0 -> v0.136.0
github.com/spf13/cobra	v1.9.1 -> v1.10.2
cloud.google.com/go	v0.121.0 -> v0.123.0
github.com/go-openapi/jsonpointer	v0.21.0 -> v0.22.5
github.com/mailru/easyjson	v0.9.0 -> v0.9.2
github.com/oasdiff/yaml	v0.0.0-20250309154309-f31be36b4037 -> v0.0.9
github.com/oasdiff/yaml3	v0.0.0-20250309153720-d2182401db90 -> v0.0.12
github.com/spf13/pflag	v1.0.7 -> v1.0.10
github.com/tidwall/match	v1.1.1 -> v1.2.0
github.com/wI2L/jsondiff	v0.6.1 -> v0.7.1
github.com/yuin/goldmark	v1.7.11 -> v1.8.2
golang.org/x/crypto	v0.37.0 -> v0.41.0
golang.org/x/net	v0.39.0 -> v0.43.0
golang.org/x/sys	v0.34.0 -> v0.43.0
golang.org/x/text	v0.27.0 -> v0.36.0