chore(deps): bump the go-modules group across 1 directory with 4 updates

[dependabot]

Bumps the go-modules group with 4 updates in the / directory: github.com/getkin/kin-openapi, github.com/pressly/goose/v3, golang.org/x/sync and golang.org/x/text.

Updates github.com/getkin/kin-openapi from 0.140.0 to 0.141.0

Release notes

Sourced from github.com/getkin/kin-openapi's releases.

v0.141.0

What's Changed

• openapi3filter: honor comma-separated and wildcard encoding.contentType by @​utah-KT in getkin/kin-openapi#1201
• openapi3: typed context wrappers for combinator and tag validation by @​reuvenharrison in getkin/kin-openapi#1199
• openapi3: enforce unique required entries and unique tag names in Validate() by @​reuvenharrison in getkin/kin-openapi#1203
• openapi3gen: Add an option to customize generated field names (properties) for structs by @​d1vbyz3r0 in getkin/kin-openapi#1204
• openapi3: add T.WalkSchemas to visit every schema in a document by @​reuvenharrison in getkin/kin-openapi#1206
• openapi3: record block end on Origin.Key (EndLine/EndColumn) by @​reuvenharrison in getkin/kin-openapi#1207
• openapi3: record scalar-valued map keys for origin location lookup by @​reuvenharrison in getkin/kin-openapi#1208
• docs: Go Report Card has been sunset by @​alexandear in getkin/kin-openapi#1210
• openapi3: support OAS 3.2 itemSchema by @​fenollp in getkin/kin-openapi#1213
• openapi3: make operation responses optional for 3.1+ by @​AlexanderWangY in getkin/kin-openapi#1214
• qol: Makefile for shorthand commands + preflight scripts by @​AlexanderWangY in getkin/kin-openapi#1217

New Contributors

• @​AlexanderWangY made their first contribution in getkin/kin-openapi#1214

Full Changelog: getkin/kin-openapi@v0.140.0...v0.141.0

Commits

• 1d0a337 Merge commit from fork
• 98d9564 qol: Makefile for shorthand commands + preflight scripts (#1217)
• b5bb6bc openapi3: make operation responses optional for 3.1+ (#1214)
• ae6bf33 openapi3: support OAS 3.2 itemSchema (#1213)
• 1b54e4c docs: Go Report Card has been sunset (#1210)
• 4a0d049 origin: record scalar-valued map keys for location lookup (#1208)
• 26c42cf openapi3: record block end on Origin.Key (EndLine/EndColumn) (#1207)
• 6b0df72 openapi3: add T.WalkSchemas to visit every schema in a document (#1206)
• e56b2a1 openapi3gen: Add an option to customize generated field names (properties) fo...
• 6c01290 openapi3: enforce unique required entries and unique tag names in Validate() ...
• Additional commits viewable in compare view

Updates github.com/pressly/goose/v3 from 3.27.1 to 3.27.2

Release notes

Sourced from github.com/pressly/goose/v3's releases.

v3.27.2

Changed

• Upgrade golang.org/x/crypto and golang.org/x/net to address security advisories (CVE fixes)
• Various dependency upgrades

Changelog

Sourced from github.com/pressly/goose/v3's changelog.

[v3.27.2] - 2026-06-30

Changed

• Upgrade golang.org/x/crypto and golang.org/x/net to address security advisories (CVE fixes)
• Various dependency upgrades

Commits

• b0f7076 release: v3.27.2
• 6669df2 build(deps): bump github.com/opencontainers/runc from 1.3.3 to 1.3.6 in /inte...
• f61f5b9 build(deps): bump the gomod group across 1 directory with 4 updates (#1086)
• 90d5b3a build(deps): bump actions/checkout from 6 to 7 (#1081)
• cef6bb7 build(deps): bump golang crypto and net to FIX CVEs (#1083)
• f2c327a build(deps): bump the gomod group across 1 directory with 7 updates (#1079)
• d0bee40 Docs: mention MariaDB support (#1071)
• See full diff in compare view

Updates golang.org/x/sync from 0.21.0 to 0.22.0

Commits

• 1eb64d4 semaphore: panic on negative weights
• See full diff in compare view

Updates golang.org/x/text from 0.38.0 to 0.40.0

Commits

• 724af9c go.mod: update golang.org/x dependencies
• bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
• b326f3d go.mod: update golang.org/x dependencies
• 5ae8e57 unicode/norm: avoid infinite loop on invalid input
• 0dc94a2 all: fix some comments
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions