Skip to content

chore: bump github.com/oasdiff/oasdiff from 1.19.1 to 1.20.0 in /tools/cli#1331

Merged
lovisaberggren merged 1 commit into
mainfrom
dependabot/go_modules/tools/cli/github.com/oasdiff/oasdiff-1.20.0
Jun 24, 2026
Merged

chore: bump github.com/oasdiff/oasdiff from 1.19.1 to 1.20.0 in /tools/cli#1331
lovisaberggren merged 1 commit into
mainfrom
dependabot/go_modules/tools/cli/github.com/oasdiff/oasdiff-1.20.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 23, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/oasdiff/oasdiff from 1.19.1 to 1.20.0.

Release notes

Sourced from github.com/oasdiff/oasdiff's releases.

v1.20.0

oasdiff v1.20.0 sharpens breaking-change detection (fewer false positives across type, format, and nullability changes) and adds a --stability-level flag to opt into draft and alpha stability levels.

CLI changes

Stability levels

  • New --stability-level flag (#845, thanks @​ankita-gd). Set the minimum stability level to include (for example draft or alpha) so changes to lower-stability resources are reported. These levels are excluded by default, so including them is opt-in.

Fewer false-positive breaking changes

  • Type-set widening on requests and narrowing on responses are no longer breaking (#1016). Broadening what a request accepts, or narrowing what a response returns, is backward compatible and is no longer flagged.
  • Nullable detection via type arrays is now symmetric (#1015). Adding or removing null from a type array is detected consistently, and the untyped case is ignored rather than misreported.
  • Duplicate "parameter type changed" reports are suppressed for list-of-types (#1020), and the suppression holds when multiple checks run together (#1021), so one change no longer produces repeated findings.

Misc

  • --open can upload an authenticated review (#1025), used by the oasdiff Pro GitHub Action. The default --open (free anonymous side-by-side review) is unchanged.

Go package changes

  • Breaking: the exported stability-level constants in checker were renamed from SCREAMING_SNAKE_CASE to MixedCaps (#1032), following Go naming conventions. Library callers referencing these constants must update the identifiers; behavior is unchanged.
Commits
  • fc383a0 refactor(checker): rename SCREAMING_SNAKE_CASE stability constants to MixedCa...
  • 82dd007 Added code to detect changes for stability level draft,alpha (#845)
  • 20180e6 handlers: guard checkStdinWithComposed against an unregistered composed flag ...
  • aa4a2d4 Add authenticated review upload to --open (#1025)
  • f55a32c fix: suppress duplicate parameter type-changed report for list-of-types (#1020)
  • 7c5e785 Guard list-of-types suppression when checks run together (#1021)
  • 2a6baf3 fix(checker): type-set widening (request) and narrowing (response) are not br...
  • 9c5062b refactor(checker): unify and decouple the type/format breaking check (#1018)
  • 64a5ab7 fix(checker): nullable-via-type-array detection is symmetric and ignores the ...
  • edc5e70 docs: pin oasdiff-action examples to the @​v0 moving major tag (#1013)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/oasdiff/oasdiff](https://github.com/oasdiff/oasdiff) from 1.19.1 to 1.20.0.
- [Release notes](https://github.com/oasdiff/oasdiff/releases)
- [Changelog](https://github.com/oasdiff/oasdiff/blob/main/docs/CHANGELOG-TEMPLATE.md)
- [Commits](oasdiff/oasdiff@v1.19.1...v1.20.0)

---
updated-dependencies:
- dependency-name: github.com/oasdiff/oasdiff
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 23, 2026
@dependabot dependabot Bot requested a review from a team as a code owner June 23, 2026 21:52
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 23, 2026
@lovisaberggren lovisaberggren merged commit 0437986 into main Jun 24, 2026
7 checks passed
@lovisaberggren lovisaberggren deleted the dependabot/go_modules/tools/cli/github.com/oasdiff/oasdiff-1.20.0 branch June 24, 2026 09:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant