Update module github.com/oapi-codegen/oapi-codegen/v2 to v2.6.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/oapi-codegen/oapi-codegen/v2	v2.4.1 → v2.6.0

---

Release Notes

oapi-codegen/oapi-codegen (github.com/oapi-codegen/oapi-codegen/v2)

v2.6.0: : 7th anniversary release 🎂

Compare Source

For those that aren't aware, 7 years ago to the day, oapi-codegen was born!

(Well, technically it's tonight at midnight UTC, but who's splitting hairs?)

There's nothing too special planned for today, but we thought it'd be the perfect time to cut a slice of cake a release!

🎉 Notable changes

New generated code requires oapi-codegen/runtime v1.2.0+

As part of #​2256, github.com/oapi-codegen/runtime v1.2.0 is needed alongside github.com/oapi-codegen/oapi-codegen, for new generated code.

This is providing a more future-proofed means to bind parameters.

See the release notes for the runtime package, and #​2256 for more information.

oapi-codegen was part of the GitHub Secure Open Source Fund

oapi-codegen was one of the projects taking part in the third GitHub Secure Open Source Fund session.

We've written up more about what we've learned, and have some more things to share with you over the coming months about lessons we've learned and improvements we've taken that we can share.

We were pretty chuffed to be selected, and it's already helped improve our security posture as a project, which is also very important for the wider ecosystem!

go directive bump in next release

Long-time users will be aware that we work very hard to try and keep our requirement for Go source compatibility, through the go directive, especially as we recommend folks use oapi-codegen as a source-tracked dependency.

For more details about this, see our Support Model docs.

In the next minor release, we'll be setting our minimum go directive to Go 1.24 (End-of-Life on 2026-02-11), as it's required for a number of dependencies of ours to be updated any higher, and a change to the module import path for Speakeasy's OpenAPI Overlay library requires us fix this centrally for our users to be able to continue updating their libraries.

[!NOTE]
Nothing is changing as part of v2.6.0, this is a pre-announcement for v2.7.0.

Behind the scenes cleanup

There's also been some work behind-the-scenes to try and clean up outstanding issues (of which we know there are many!) that have been fixed, as well as Marcin's work on trying to do some more significant rework of the internals with help from Claude.

There's still, as ever, work to go with this - as we've mentioned before, sponsoring our work would be greatly appreciated, so we can continue to put in the work, considering this is a widely used and depended on project.

🚀 New features and improvements

• feat: Pass schema type/formats to runtime v1.2.0 to allow better parameter serialization (#​2256) @​mromaszewicz
• feat: add Valid() method to generated enum types (#​2227) @​mromaszewicz
• Support nullable slice elements and map values (#​2185) @​iamtakingiteasy
• feat: add configurable type mapping for OpenAPI primitive types (#​2223) @​mromaszewicz
• Support unions with multiple mappings pointing to a single underlying type (#​2071) @​tobio
• feat: add support for custom package alias for external ref imports (#​2211) @​InventivetalentDev
• feat(output-options): add resolve-type-name-collisions to avoid name collisions (#​200) @​mgurevin
• Adopt fiber middleware template for updated GetReqHeaders() method signature (#​1419) @​getBolted

🐛 Bug fixes

• fix: qualify external ref schema types in default response codes (#​2241) @​mromaszewicz
• fix: add omitempty to optional nullable fields (#​2221) @​mromaszewicz
• fix(codegen): generate nullable.Nullable in arrays (#​2242) @​jamietanna
• fix: support x-oapi-codegen-extra-tags on parameter schemas (#​2232) (#​2235) @​mromaszewicz
• fix(templates/client): correctly nil check query parameters (#​2237) @​jamietanna
• fix(server-urls): restore generation of constants (#​2239) @​jamietanna
• fix(server-urls): use URL in GoDoc if description is empty (#​2226) @​jamietanna
• fix: set indentation to 2 when marshalling spec for overlay (#​2172) @​wndhydrnt
• fix: handle optional request bodies in strict server mode (#​2222) @​mromaszewicz
• fix(strict-server): generate correct type for $ref text responses (#​2225) @​mromaszewicz
• Fix schema gathering oversight (#​2219) @​mromaszewicz
• fix: handle duplicate path parameters in OpenAPI specs (#​2220) @​mromaszewicz
• fix: escape quoted media type directives (#​2217) @​brahmlower
• Fix Iris strict server for no content case (#​1411) @​ShouheiNishi
• Fixes type collision for enum values that start with _ (underscore) (#​1438) @​ula

📝 Documentation updates

• chore: readme update (#​2209) @​mromaszewicz
• docs: fix link to example (#​1884) @​rkosegi
• docs(extensions): correct links to examples (#​1836) @​yuro241
• docs(sponsors): update section (#​2195) @​jamietanna
• docs(sponsors): remove Elastic as a sponsor (#​2083) @​jamietanna

👻 Maintenance

• chore(renovate): add module path to security updates + override test-only dependencies' label (#​2249) @​jamietanna
• Configure Greptile code review (#​2236) @​mromaszewicz
• style(gofix): Apply go fix (#​2229) @​gaiaz-iusipov
• Run golangci-lint on a supported Go version (#​2215) @​mromaszewicz
• refactor(internal): move Fiber tests into their own modules (#​2212) @​mromaszewicz
• build: use a re-usable, single, workflow for running CI (#​2205) @​jamietanna
• fix(renovate): only run make tidy after Go module updates (#​2159) @​jamietanna
• chore(renovate): run make tidy after dependency updates to go.mod (#​2150) @​jamietanna

📦 Dependency updates

8 changes

• chore(deps): update module github.com/golangci/golangci-lint to v2.10.1 (makefile) (#​2153) @​renovate[bot]
• chore(deps): update github/codeql-action action to v4.32.4 (.github/workflows) (#​2157) @​renovate[bot]
• chore(deps): update actions/setup-go action to v6.3.0 (.github/workflows) (#​2164) @​renovate[bot]
• chore(deps): update actions/checkout action to v6 (.github/workflows) - autoclosed (#​2165) @​renovate[bot]
• chore(deps): update release-drafter/release-drafter action to v6.2.0 (.github/workflows) (#​2253) @​renovate[bot]
• chore(deps): update actions/upload-artifact action to v7 (.github/workflows) (#​2254) @​renovate[bot]
• chore(deps): update dessant/label-actions action to v5 (.github/workflows) (#​2255) @​renovate[bot]
• chore(deps): update release-drafter/release-drafter action to v6.1.0 (.github/workflows) (#​2132) @​renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

v2.5.1: : fix a couple of regressions from v2.5.0

Compare Source

🐛 Bug fixes

• fix(templates): correctly nil check arrays (#​2118) @​jamietanna
• fix: report formatting errors with line numbers (#​2117) @​jamietanna
• fix(output-options): correctly reference x-go-type-skip-optional-pointer in allOf (#​2042) @​magnetikonline

📝 Documentation updates

• docs: clarify support + go directives (#​2099) @​jamietanna
• docs: correct level of headers (#​2095) @​jamietanna
• docs(sponsors): update Speakeasy logo (#​2049) @​chailandau
• Fix bullet point line prefer-skip-optional-pointer-with-omitzero typo in README.md (#​2028) @​magnetikonline

👻 Maintenance

• build: handle additional values in GOVERSION (#​2119) @​jamietanna
• build: add explicit permissions blocks for tidy.yml (#​2101) @​jamietanna
• build: add explicit permissions blocks for Actions (#​2100) @​jamietanna
• build: add Scorecards workflow (#​2098) @​jamietanna
• build: capture govulncheck results as Code Scanning alerts (#​2084) @​jamietanna
• build: test against Go 1.25 (#​2056) @​jamietanna

Renovate configuration changes

• chore(renovate): improve actionability of pending updates (#​2120) @​jamietanna
• chore(renovate): don't exclude examples and internal/test (#​2033) @​jamietanna
• chore(renovate): correctly create branches for top-level files (#​2138) @​jamietanna

📦 Dependency updates

9 changes

• fix(deps): update module github.com/getkin/kin-openapi to v0.133.0 (go.mod) (#​2141) @​renovate[bot]
• fix(deps): update module github.com/stretchr/testify to v1.11.1 (go.mod) (#​2142) @​renovate[bot]
• chore(deps): update module github.com/golangci/golangci-lint to v2.6.0 (makefile) (#​2140) @​renovate[bot]
• chore(deps): update ossf/scorecard-action action to v2.4.3 (.github/workflows) (#​2128) @​renovate[bot]
• chore(deps): update actions/upload-artifact action to v5 (.github/workflows) (#​2136) @​renovate[bot]
• chore(deps): update actions/setup-go action to v6 (.github/workflows) (#​2135) @​renovate[bot]
• chore(deps): update actions/labeler action to v6 (.github/workflows) (#​2134) @​renovate[bot]
• chore(deps): update actions/checkout action to v5 (.github/workflows) (#​2133) @​renovate[bot]
• chore(deps): update github/codeql-action action to v4 (.github/workflows) (#​2137) @​renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

v2.5.0: : No more optional pointers (optionally), omitzero, better control over initialisms, and so much more!

Compare Source

v2.5.0: No more optional pointers (optionally)!

🎉 Notable changes

Begone optional pointers! (optionally)

One of the key things oapi-codegen does is to use an "optional pointer", following idiomatic Go practices, to indicate that a field/type is optional.

This can be tuned on a per-field basis, using the x-go-type-skip-optional-pointer extension, but it can be a bit repetitive, or can be more complex when using an OpenAPI Overlay.

As of oapi-codegen v2.5.0, this can be tuned in two specific ways, via the following Output Options:

• prefer-skip-optional-pointer: a global default that you do not want the "optional pointer" generated. Optional fields will not have an "optional pointer", and will have an omitempty JSON tag
• prefer-skip-optional-pointer-with-omitzero: when used in conjunction with prefer-skip-optional-pointer, any optional fields are generated with an omitzero JSON tag. Requires Go 1.24+

In both cases, there is control on a per-field level to set x-go-type-skip-optional-pointer: false or x-omitzero: false to undo these to field(s).

[!NOTE]
The default is not changing.

We take care to avoid breaking changes so this is, as many changes, an opt-in.

See Globally skipping the "optional pointer" for more details.

Generating omitzero JSON tags, with x-omitzero

Related to the above functionality, it is possible to define the OpenAPI extension x-omitzero on fields to generate the omitzero JSON tag, based on the (now not-so-new) Go 1.24 release.

Thanks to @​lzap for the contribution 🚀

[!NOTE]
oapi-codegen does not currently validate the Go version that the module it's generating code for.

This could lead to the omitzero JSON tag being generated, but not being actually usable.

Ensure that you're using a Go 1.24+ version, and that your go directive (for source compatibility) is go 1.24 or i.e. go 1.24.1

Using OpenAPI 3.1 with oapi-codegen

There's some promising behind-the-scenes discussions with may lead to OpenAPI 3.1 support (#​373) coming in the not-too-distant future 👀

In the meantime, Jamie (one of the Core Maintainers) has written a blog post about how to use oapi-codegen with OpenAPI 3.1 specs (by downgrading them to OpenAPI 3.0).

Defining your own initialisms

As a means to define your own custom initialisms, it's possible to use the additional-initialisms Output Option.

Thanks @​micaelmalta for the contribution 🚀

If your organisation uses a lot of TLAs (Two Letter Acronyms or Three Letter Acronyms) or any other sorts of initialisms, it's handy to be able to configure these yourself.

For instance, if you regularly use the term CSP to refer to Cloud Service Provider, you may want CSP to be used in variable names.

This makes it possible to define i.e.

### ...
output-options:
  name-normalizer: ToCamelCaseWithInitialisms
  additional-initialisms:
    - CSP

[!NOTE]
This only works when the name-normaliser Output Option is set to ToCamelCaseWithInitialisms. An error will occur if you've not configured this correctly.

Minimum version of Go needed for oapi-codegen is now 1.22.5

As part of a couple of updates in #​1888 and #​1986, we're now requiring Go >= 1.22.5.

Similar to the bump to Go 1.21 in v2.4.0

Notable background work

Since the last oapi-codegen release (all the way in September 2024 🥲) the following big changes towards the project and its ecosystem have been:

• net/http middleware v1.1.0: Better error handling, allow not validating Servers (by configuration) and return an HTTP 405 Method Not Allowed where appropriate
• Jamie posted a look back at the last year
  • Notably also writing up explicitly how the project is currently governed
• runtime: fixes for maps and x-go-type-skip-optional-pointer

🚀 New features and improvements

• feat(client): Add Bytes() to ClientWithResponses responses (#​1780) @​grongor
• feat(generate): allow generating Server URL boilerplate (#​2002) @​jamietanna
• feat(output-options): add prefer-skip-optional-pointer-on-container-types (#​1979) @​jamietanna
• feat(output-options): add prefer-skip-optional-pointer to default to skipping optional pointers (#​1694) @​aksdb
• feat(output-options): add yaml-tags option (#​1798) @​deitch
• feat(templates): consolidate logic for whether to use an optional pointer (#​1981) @​jamietanna
• feat(x-deprecated-reason): add default deprecation message (#​2022) @​jamietanna
• feat: allow specifying additional-initialisms (#​1733) @​micaelmalta

🐛 Bug fixes

• Handle leading underscores in property names (#​1822) @​tobio
• fix(codegen): allow exposing the input spec's operationId (#​1945) @​jamietanna
• fix(codegen): allow using x-go-type and x-go-type-skip-optional-pointer together (#​1957) @​Nivl
• fix(output-options): obey prefer-skip-optional-pointer in reference types + add tests for preferskipoptionalpointer (#​2021) @​jamietanna
• fix(overlay): correctly resolve references after Overlay application (#​1825) @​jgraeger
• fix(stdhttp): correctly generate root paths (#​1953) @​jamietanna
• fix: Print the warning message to stderr instead of stdout (#​1895) @​ignassew
• fix: create directories if they do not exist before writing output file (#​1994) @​kf-pineapple
• fix: don't generate an "optional pointer" for unknown types (#​610) @​jens1205

📝 Documentation updates

• docs: add example for how to downgrade OpenAPI 3.1 to 3.0 (#​1966) @​jamietanna
• Add blog post about using oapi-codegen in a Chi project (#​1791) @​0xi4o
• Fix broken anchor link for validation middleware section (#​2013) @​Park-Jongseok
• chore(tests): add additional test case for underscore naming (#​1980) @​jamietanna
• docs(client): document known issue with duplicated Response models (#​2025) @​jamietanna
• docs(extensions): correct typo to example (#​1999) @​i-sevostyanov
• docs(extensions): don't use <details> blocks in <table> (#​2019) @​jamietanna
• docs(extensions): update example code for x-enumNames (#​2000) @​jamietanna
• docs(middleware): clarify use of nethttp-middleware for other purposes (#​1951) @​jamietanna
• docs(sponsors): add Livepeer (#​1849) @​jamietanna
• docs(sponsors): update Speakeasy URL (#​1970) @​ndimares
• docs(std-http-server): warn when not using Go 1.22 (#​1967) @​jamietanna
• docs: add contributors image (#​1795) @​jamietanna
• docs: add example of using go tool for Go 1.24+ (#​1908) @​jamietanna
• docs: fix GitHub flavoured markdown (#​1934) @​MarvinJWendt
• docs: fix typo in flags usage (#​1796) @​AlekSi
• docs: note the use of a multi-module tools.go (#​1788) @​jamietanna
• docs: simplify go tool example (#​1910) @​gaiaz-iusipov

• docs(additional-initialisms): add a usage example (#​2026) @​jamietanna

👻 Maintenance

• build(labels): add additional labelling (#​1848) @​jamietanna
• build(labels): add autolabeller for "no main branch please" (#​1847) @​jamietanna
• build: build against Go 1.24 (#​1901) @​jamietanna
• build: ensure separately named "Check results" steps (#​1850) @​jamietanna
• chore(examples): use Go 1.24 with Go 1.24 example (#​1925) @​jamietanna
• chore(tests): add additional test case for underscore naming (#​1980) @​jamietanna
• chore: don't use non-GitHub URL for tests (#​1926) @​jamietanna
• fix(output-options): obey prefer-skip-optional-pointer in reference types + add tests for preferskipoptionalpointer (#​2021) @​jamietanna

📦 Dependency updates

13 changes

• fix(deps): update module github.com/getkin/kin-openapi to v0.132.0 (#​2024) @​renovate[bot]
• fix(deps): update module github.com/getkin/kin-openapi to v0.131.0 [security] (#​1986) @​renovate[bot]
• chore(deps): update module github.com/golangci/golangci-lint to v2.2.2 (#​2014) @​renovate[bot]
• fix(deps): update module github.com/speakeasy-api/openapi-overlay to v0.10.2 (#​1973) @​renovate[bot]
• chore(deps): update module github.com/golangci/golangci-lint to v2 (#​1940) @​renovate[bot]
• chore(deps): update actions/setup-go digest to d35c59a (#​1969) @​renovate[bot]
• fix(deps)!: update module github.com/speakeasy-api/openapi-overlay to v0.10.1 (#​1888) @​renovate[bot]
• chore(deps): pin dependencies (#​1948) @​renovate[bot]
• chore(deps): update module github.com/golangci/golangci-lint to v1.64.5 (#​1871) @​renovate[bot]
• fix(deps): update module golang.org/x/text to v0.20.0 (#​1792) @​renovate[bot]
• fix(deps): update module github.com/stretchr/testify to v1.10.0 (#​1844) @​renovate[bot]
• chore(deps): update module github.com/golangci/golangci-lint to v1.62.2 (#​1828) @​renovate[bot]
• fix(deps): update module github.com/getkin/kin-openapi to v0.128.0 (#​1794) @​renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

New contributors

We had 16 new contributors in this release, thanks folks 🚀

• @​0xi4o made their first contribution in #​1791
• @​AlekSi made their first contribution in #​1796
• @​tobio made their first contribution in #​1822
• @​deitch made their first contribution in #​1798
• @​jgraeger made their first contribution in #​1825
• @​grongor made their first contribution in #​1780
• @​micaelmalta made their first contribution in #​1733
• @​chailandau made their first contribution in #​1874
• @​MarvinJWendt made their first contribution in #​1934
• @​ignassew made their first contribution in #​1895
• @​Nivl made their first contribution in #​1957
• @​jens1205 made their first contribution in #​610
• @​aksdb made their first contribution in #​1694
• @​i-sevostyanov made their first contribution in #​1999
• @​Park-Jongseok made their first contribution in #​2013
• @​kf-pineapple made their first contribution in #​1994

---

Configuration

📅 Schedule: Branch creation - "every weekday,every weekend" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated

Details:

Package	Change
github.com/getkin/kin-openapi	v0.131.0 -> v0.133.0
github.com/stretchr/testify	v1.10.0 -> v1.11.1
github.com/speakeasy-api/openapi-overlay	v0.10.1 -> v0.10.2