From 7246d41ff5a276b0363628fc4b24ed5492cc4264 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 22 Mar 2024 10:00:25 +0000
Subject: [PATCH 01/63] Bump the development-dependencies group with 1 update

Bumps the development-dependencies group with 1 update: [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata).


Updates `dependabot/fetch-metadata` from 1 to 2
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](https://github.com/dependabot/fetch-metadata/compare/v1...v2)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/auto-merge.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index b4009db..04c0316 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -12,7 +12,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v1
+        uses: dependabot/fetch-metadata@v2
 
       - name: Auto-approve all dependabot PRs
         run: gh pr review --approve "$PR_URL"

From 2a63555d0585224cdf202a5c5aafe5bffecf48e7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 26 Apr 2024 09:39:56 +0000
Subject: [PATCH 02/63] Bump golangci/golangci-lint-action in the
 development-dependencies group

Bumps the development-dependencies group with 1 update: [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action).


Updates `golangci/golangci-lint-action` from 4 to 5
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/go-test.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index e1c413e..cd516c4 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -21,7 +21,7 @@ jobs:
           check-latest: true
           cache: true
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v4
+        uses: golangci/golangci-lint-action@v5
         with:
           version: latest
           only-new-issues: true

From 7b021a96ebb218df8113599e550b100be6ab27ce Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 10 May 2024 09:59:46 +0000
Subject: [PATCH 03/63] Bump golangci/golangci-lint-action in the
 development-dependencies group

Bumps the development-dependencies group with 1 update: [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action).


Updates `golangci/golangci-lint-action` from 5 to 6
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v5...v6)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/go-test.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index cd516c4..e9a89e3 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -21,7 +21,7 @@ jobs:
           check-latest: true
           cache: true
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v5
+        uses: golangci/golangci-lint-action@v6
         with:
           version: latest
           only-new-issues: true

From 96bee3509dce526ce9d5339c2fb3e9be7da33c9b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 15 Nov 2024 09:34:33 +0000
Subject: [PATCH 04/63] Bump codecov/codecov-action in the
 development-dependencies group

Bumps the development-dependencies group with 1 update: [codecov/codecov-action](https://github.com/codecov/codecov-action).


Updates `codecov/codecov-action` from 4 to 5
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/go-test.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index e9a89e3..27273bd 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -49,7 +49,7 @@ jobs:
     - run: go test -v -race -coverprofile="coverage-${{ matrix.os }}.${{ matrix.go_version }}.out" -covermode=atomic -coverpkg=$(go list)/... ./...
 
     - name: Upload coverage to codecov
-      uses: codecov/codecov-action@v4
+      uses: codecov/codecov-action@v5
       with:
         files: './coverage-${{ matrix.os }}.${{ matrix.go_version }}.out'
         flags: '${{ matrix.go_version }}'

From 302430d31767c411df6eb2e6e883292bdd497589 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 29 Nov 2024 09:25:52 +0000
Subject: [PATCH 05/63] Bump github.com/stretchr/testify from 1.9.0 to 1.10.0

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.9.0...v1.10.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index 996f90a..136e07f 100644
--- a/go.mod
+++ b/go.mod
@@ -4,7 +4,7 @@ require (
 	github.com/go-openapi/jsonpointer v0.21.0
 	github.com/go-openapi/jsonreference v0.21.0
 	github.com/go-openapi/swag v0.23.0
-	github.com/stretchr/testify v1.9.0
+	github.com/stretchr/testify v1.10.0
 	gopkg.in/yaml.v3 v3.0.1
 )
 
diff --git a/go.sum b/go.sum
index b5bc1d1..9927a50 100644
--- a/go.sum
+++ b/go.sum
@@ -15,8 +15,8 @@ github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJ
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
-github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg=
-github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
+github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
+github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=

From 0201d0c71ffa9c0fd68ff255dca187fd4a55a5d8 Mon Sep 17 00:00:00 2001
From: Frederic BIDON <fredbi@yahoo.com>
Date: Tue, 11 Mar 2025 21:06:19 +0100
Subject: [PATCH 06/63] Relint

* updated linter config
* fixed linting errors

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
---
 .golangci.yml        | 31 +++++++---------
 contact_info_test.go |  2 +-
 debug_test.go        |  3 +-
 errors.go            |  3 ++
 expander.go          | 10 +++---
 header.go            | 16 ++++-----
 header_test.go       |  8 ++---
 info_test.go         | 34 +++++++++---------
 items.go             | 16 ++++-----
 items_test.go        | 84 ++++++++++++++++++++++++--------------------
 license_test.go      | 31 ++++++++--------
 parameter.go         | 16 ++++-----
 paths.go             |  2 +-
 ref.go               |  3 +-
 ref_test.go          |  2 +-
 responses.go         |  2 +-
 schema.go            | 36 +++++++++----------
 swagger.go           |  2 +-
 swagger_test.go      |  2 +-
 validations.go       | 12 ++++---
 20 files changed, 167 insertions(+), 148 deletions(-)

diff --git a/.golangci.yml b/.golangci.yml
index 22f8d21..d2fafb8 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -1,12 +1,6 @@
 linters-settings:
-  govet:
-    check-shadowing: true
-  golint:
-    min-confidence: 0
   gocyclo:
     min-complexity: 45
-  maligned:
-    suggest-new: true
   dupl:
     threshold: 200
   goconst:
@@ -16,7 +10,7 @@ linters-settings:
 linters:
   enable-all: true
   disable:
-    - maligned
+    - recvcheck
     - unparam
     - lll
     - gochecknoinits
@@ -29,9 +23,6 @@ linters:
     - wrapcheck
     - testpackage
     - nlreturn
-    - gomnd
-    - exhaustivestruct
-    - goerr113
     - errorlint
     - nestif
     - godot
@@ -39,7 +30,6 @@ linters:
     - paralleltest
     - tparallel
     - thelper
-    - ifshort
     - exhaustruct
     - varnamelen
     - gci
@@ -52,10 +42,15 @@ linters:
     - forcetypeassert
     - cyclop
     # deprecated linters
-    - deadcode
-    - interfacer
-    - scopelint
-    - varcheck
-    - structcheck
-    - golint
-    - nosnakecase
+    #- deadcode
+    #- interfacer
+    #- scopelint
+    #- varcheck
+    #- structcheck
+    #- golint
+    #- nosnakecase
+    #- maligned
+    #- goerr113
+    #- ifshort
+    #- gomnd
+    #- exhaustivestruct
diff --git a/contact_info_test.go b/contact_info_test.go
index fedd81a..4aaddd6 100644
--- a/contact_info_test.go
+++ b/contact_info_test.go
@@ -38,7 +38,7 @@ var contactInfo = ContactInfo{ContactInfoProps: ContactInfoProps{
 func TestIntegrationContactInfo(t *testing.T) {
 	b, err := json.MarshalIndent(contactInfo, "", "\t")
 	require.NoError(t, err)
-	assert.Equal(t, contactInfoJSON, string(b))
+	assert.JSONEq(t, contactInfoJSON, string(b))
 
 	actual := ContactInfo{}
 	err = json.Unmarshal([]byte(contactInfoJSON), &actual)
diff --git a/debug_test.go b/debug_test.go
index c74fc28..50edb18 100644
--- a/debug_test.go
+++ b/debug_test.go
@@ -27,7 +27,8 @@ var (
 )
 
 func TestDebug(t *testing.T) {
-	tmpFile, _ := os.CreateTemp("", "debug-test")
+	// usetesting linter disabled until https://github.com/golang/go/issues/71544 is fixed for windows
+	tmpFile, _ := os.CreateTemp("", "debug-test") //nolint:usetesting
 	tmpName := tmpFile.Name()
 	defer func() {
 		Debug = false
diff --git a/errors.go b/errors.go
index 6992c7b..718b4ae 100644
--- a/errors.go
+++ b/errors.go
@@ -16,4 +16,7 @@ var (
 
 	// ErrExpandUnsupportedType indicates that $ref expansion is attempted on some invalid type
 	ErrExpandUnsupportedType = errors.New("expand: unsupported type. Input should be of type *Parameter or *Response")
+
+	// ErrSpec is an error raised by the spec package
+	ErrSpec = errors.New("spec error")
 )
diff --git a/expander.go b/expander.go
index b81a569..df936b3 100644
--- a/expander.go
+++ b/expander.go
@@ -19,6 +19,8 @@ import (
 	"fmt"
 )
 
+const smallPrealloc = 10
+
 // ExpandOptions provides options for the spec expander.
 //
 // RelativeBase is the path to the root document. This can be a remote URL or a path to a local file.
@@ -56,7 +58,7 @@ func ExpandSpec(spec *Swagger, options *ExpandOptions) error {
 
 	if !options.SkipSchemas {
 		for key, definition := range spec.Definitions {
-			parentRefs := make([]string, 0, 10)
+			parentRefs := make([]string, 0, smallPrealloc)
 			parentRefs = append(parentRefs, "#/definitions/"+key)
 
 			def, err := expandSchema(definition, parentRefs, resolver, specBasePath)
@@ -160,7 +162,7 @@ func ExpandSchemaWithBasePath(schema *Schema, cache ResolutionCache, opts *Expan
 
 	resolver := defaultSchemaLoader(nil, opts, cache, nil)
 
-	parentRefs := make([]string, 0, 10)
+	parentRefs := make([]string, 0, smallPrealloc)
 	s, err := expandSchema(*schema, parentRefs, resolver, opts.RelativeBase)
 	if err != nil {
 		return err
@@ -386,7 +388,7 @@ func expandPathItem(pathItem *PathItem, resolver *schemaLoader, basePath string)
 		return nil
 	}
 
-	parentRefs := make([]string, 0, 10)
+	parentRefs := make([]string, 0, smallPrealloc)
 	if err := resolver.deref(pathItem, parentRefs, basePath); resolver.shouldStopOnError(err) {
 		return err
 	}
@@ -546,7 +548,7 @@ func expandParameterOrResponse(input interface{}, resolver *schemaLoader, basePa
 		return nil
 	}
 
-	parentRefs := make([]string, 0, 10)
+	parentRefs := make([]string, 0, smallPrealloc)
 	if ref != nil {
 		// dereference this $ref
 		if err = resolver.deref(input, parentRefs, basePath); resolver.shouldStopOnError(err) {
diff --git a/header.go b/header.go
index 9dfd17b..5957fa2 100644
--- a/header.go
+++ b/header.go
@@ -74,14 +74,14 @@ func (h *Header) WithDefault(defaultValue interface{}) *Header {
 }
 
 // WithMaxLength sets a max length value
-func (h *Header) WithMaxLength(max int64) *Header {
-	h.MaxLength = &max
+func (h *Header) WithMaxLength(maximum int64) *Header {
+	h.MaxLength = &maximum
 	return h
 }
 
 // WithMinLength sets a min length value
-func (h *Header) WithMinLength(min int64) *Header {
-	h.MinLength = &min
+func (h *Header) WithMinLength(minimum int64) *Header {
+	h.MinLength = &minimum
 	return h
 }
 
@@ -98,15 +98,15 @@ func (h *Header) WithMultipleOf(number float64) *Header {
 }
 
 // WithMaximum sets a maximum number value
-func (h *Header) WithMaximum(max float64, exclusive bool) *Header {
-	h.Maximum = &max
+func (h *Header) WithMaximum(maximum float64, exclusive bool) *Header {
+	h.Maximum = &maximum
 	h.ExclusiveMaximum = exclusive
 	return h
 }
 
 // WithMinimum sets a minimum number value
-func (h *Header) WithMinimum(min float64, exclusive bool) *Header {
-	h.Minimum = &min
+func (h *Header) WithMinimum(minimum float64, exclusive bool) *Header {
+	h.Minimum = &minimum
 	h.ExclusiveMinimum = exclusive
 	return h
 }
diff --git a/header_test.go b/header_test.go
index 67a893a..5259cd8 100644
--- a/header_test.go
+++ b/header_test.go
@@ -118,15 +118,15 @@ func TestJSONLookupHeader(t *testing.T) {
 	require.Error(t, err)
 	require.Nil(t, res)
 
-	var max *float64
+	var maximum *float64
 	res, err = header.JSONLookup("maximum")
 	require.NoError(t, err)
 	require.NotNil(t, res)
-	require.IsType(t, max, res)
+	require.IsType(t, maximum, res)
 
-	max, ok = res.(*float64)
+	maximum, ok = res.(*float64)
 	require.True(t, ok)
-	assert.InDelta(t, float64(100), *max, epsilon)
+	assert.InDelta(t, float64(100), *maximum, epsilon)
 }
 
 func TestResponseHeaueder(t *testing.T) {
diff --git a/info_test.go b/info_test.go
index a8e3fbe..3255cd1 100644
--- a/info_test.go
+++ b/info_test.go
@@ -39,7 +39,7 @@ const infoJSON = `{
 	"x-framework": "go-swagger"
 }`
 
-var info = Info{
+var testInfo = Info{
 	InfoProps: InfoProps{
 		Version: "1.0.9-abcd",
 		Title:   "Swagger Sample API",
@@ -56,21 +56,23 @@ var info = Info{
 	VendorExtensible: VendorExtensible{Extensions: map[string]interface{}{"x-framework": "go-swagger"}},
 }
 
-func TestIntegrationInfo_Serialize(t *testing.T) {
-	b, err := json.MarshalIndent(info, "", "\t")
-	require.NoError(t, err)
-	assert.Equal(t, infoJSON, string(b))
-}
+func TestInfo(t *testing.T) {
+	t.Run("should marshal Info", func(t *testing.T) {
+		b, err := json.MarshalIndent(testInfo, "", "\t")
+		require.NoError(t, err)
+		assert.JSONEq(t, infoJSON, string(b))
+	})
 
-func TestIntegrationInfo_Deserialize(t *testing.T) {
-	actual := Info{}
-	require.NoError(t, json.Unmarshal([]byte(infoJSON), &actual))
-	assert.EqualValues(t, info, actual)
-}
+	t.Run("should unmarshal Info", func(t *testing.T) {
+		actual := Info{}
+		require.NoError(t, json.Unmarshal([]byte(infoJSON), &actual))
+		assert.EqualValues(t, testInfo, actual)
+	})
 
-func TestInfoGobEncoding(t *testing.T) {
-	var src, dst Info
-	require.NoError(t, json.Unmarshal([]byte(infoJSON), &src))
-	assert.EqualValues(t, src, info)
-	doTestAnyGobEncoding(t, &src, &dst)
+	t.Run("should GobEncode Info", func(t *testing.T) {
+		var src, dst Info
+		require.NoError(t, json.Unmarshal([]byte(infoJSON), &src))
+		assert.EqualValues(t, src, testInfo)
+		doTestAnyGobEncoding(t, &src, &dst)
+	})
 }
diff --git a/items.go b/items.go
index e2afb21..7404bee 100644
--- a/items.go
+++ b/items.go
@@ -97,14 +97,14 @@ func (i *Items) WithDefault(defaultValue interface{}) *Items {
 }
 
 // WithMaxLength sets a max length value
-func (i *Items) WithMaxLength(max int64) *Items {
-	i.MaxLength = &max
+func (i *Items) WithMaxLength(maximum int64) *Items {
+	i.MaxLength = &maximum
 	return i
 }
 
 // WithMinLength sets a min length value
-func (i *Items) WithMinLength(min int64) *Items {
-	i.MinLength = &min
+func (i *Items) WithMinLength(minimum int64) *Items {
+	i.MinLength = &minimum
 	return i
 }
 
@@ -121,15 +121,15 @@ func (i *Items) WithMultipleOf(number float64) *Items {
 }
 
 // WithMaximum sets a maximum number value
-func (i *Items) WithMaximum(max float64, exclusive bool) *Items {
-	i.Maximum = &max
+func (i *Items) WithMaximum(maximum float64, exclusive bool) *Items {
+	i.Maximum = &maximum
 	i.ExclusiveMaximum = exclusive
 	return i
 }
 
 // WithMinimum sets a minimum number value
-func (i *Items) WithMinimum(min float64, exclusive bool) *Items {
-	i.Minimum = &min
+func (i *Items) WithMinimum(minimum float64, exclusive bool) *Items {
+	i.Minimum = &minimum
 	i.ExclusiveMinimum = exclusive
 	return i
 }
diff --git a/items_test.go b/items_test.go
index 4d4e458..88cf12f 100644
--- a/items_test.go
+++ b/items_test.go
@@ -23,7 +23,7 @@ import (
 	"github.com/stretchr/testify/require"
 )
 
-var items = Items{
+var testItems = Items{
 	Refable: Refable{Ref: MustCreateRef("Dog")},
 	CommonValidations: CommonValidations{
 		Maximum:          float64Ptr(100),
@@ -76,17 +76,17 @@ const itemsJSON = `{
 func TestIntegrationItems(t *testing.T) {
 	var actual Items
 	require.NoError(t, json.Unmarshal([]byte(itemsJSON), &actual))
-	assert.EqualValues(t, actual, items)
+	assert.EqualValues(t, actual, testItems)
 
-	assertParsesJSON(t, itemsJSON, items)
+	assertParsesJSON(t, itemsJSON, testItems)
 }
 
 func TestTypeNameItems(t *testing.T) {
 	var nilItems Items
 	assert.Equal(t, "", nilItems.TypeName())
 
-	assert.Equal(t, "date", items.TypeName())
-	assert.Equal(t, "", items.ItemsTypeName())
+	assert.Equal(t, "date", testItems.TypeName())
+	assert.Equal(t, "", testItems.ItemsTypeName())
 
 	nested := Items{
 		SimpleSchema: SimpleSchema{
@@ -151,39 +151,47 @@ func TestItemsBuilder(t *testing.T) {
 }
 
 func TestJSONLookupItems(t *testing.T) {
-	res, err := items.JSONLookup("$ref")
-	require.NoError(t, err)
-	require.NotNil(t, res)
-	require.IsType(t, &Ref{}, res)
-
-	var ok bool
-	ref, ok := res.(*Ref)
-	require.True(t, ok)
-	assert.EqualValues(t, MustCreateRef("Dog"), *ref)
-
-	var max *float64
-	res, err = items.JSONLookup("maximum")
-	require.NoError(t, err)
-	require.NotNil(t, res)
-	require.IsType(t, max, res)
-
-	max, ok = res.(*float64)
-	require.True(t, ok)
-	assert.InDelta(t, float64(100), *max, epsilon)
-
-	var f string
-	res, err = items.JSONLookup("collectionFormat")
-	require.NoError(t, err)
-	require.NotNil(t, res)
-	require.IsType(t, f, res)
-
-	f, ok = res.(string)
-	require.True(t, ok)
-	assert.Equal(t, "csv", f)
-
-	res, err = items.JSONLookup("unknown")
-	require.Error(t, err)
-	require.Nil(t, res)
+	t.Run(`lookup should find "$ref"`, func(t *testing.T) {
+		res, err := testItems.JSONLookup("$ref")
+		require.NoError(t, err)
+		require.NotNil(t, res)
+		require.IsType(t, &Ref{}, res)
+
+		ref, ok := res.(*Ref)
+		require.True(t, ok)
+		assert.EqualValues(t, MustCreateRef("Dog"), *ref)
+	})
+
+	t.Run(`lookup should find "maximum"`, func(t *testing.T) {
+		var maximum *float64
+		res, err := testItems.JSONLookup("maximum")
+		require.NoError(t, err)
+		require.NotNil(t, res)
+		require.IsType(t, maximum, res)
+
+		var ok bool
+		maximum, ok = res.(*float64)
+		require.True(t, ok)
+		assert.InDelta(t, float64(100), *maximum, epsilon)
+	})
+
+	t.Run(`lookup should find "collectionFormat"`, func(t *testing.T) {
+		var f string
+		res, err := testItems.JSONLookup("collectionFormat")
+		require.NoError(t, err)
+		require.NotNil(t, res)
+		require.IsType(t, f, res)
+
+		f, ok := res.(string)
+		require.True(t, ok)
+		assert.Equal(t, "csv", f)
+	})
+
+	t.Run(`lookup should fail on "unknown"`, func(t *testing.T) {
+		res, err := testItems.JSONLookup("unknown")
+		require.Error(t, err)
+		require.Nil(t, res)
+	})
 }
 
 func TestItemsWithValidation(t *testing.T) {
diff --git a/license_test.go b/license_test.go
index 398f0d8..67a75c0 100644
--- a/license_test.go
+++ b/license_test.go
@@ -22,26 +22,29 @@ import (
 	"github.com/stretchr/testify/require"
 )
 
-var license = License{
-	LicenseProps:     LicenseProps{Name: "the name", URL: "the url"},
-	VendorExtensible: VendorExtensible{Extensions: map[string]interface{}{"x-license": "custom term"}}}
-
-const licenseJSON = `{
+func TestIntegrationLicense(t *testing.T) {
+	const licenseJSON = `{
 	"name": "the name",
 	"url": "the url",
 	"x-license": "custom term"
 }`
 
-func TestIntegrationLicense(t *testing.T) {
+	var testLicense = License{
+		LicenseProps:     LicenseProps{Name: "the name", URL: "the url"},
+		VendorExtensible: VendorExtensible{Extensions: map[string]interface{}{"x-license": "custom term"}}}
 
 	// const licenseYAML = "name: the name\nurl: the url\n"
 
-	b, err := json.MarshalIndent(license, "", "\t")
-	require.NoError(t, err)
-	assert.Equal(t, licenseJSON, string(b))
-
-	actual := License{}
-	err = json.Unmarshal([]byte(licenseJSON), &actual)
-	require.NoError(t, err)
-	assert.EqualValues(t, license, actual)
+	t.Run("should marshal license", func(t *testing.T) {
+		b, err := json.MarshalIndent(testLicense, "", "\t")
+		require.NoError(t, err)
+		assert.JSONEq(t, licenseJSON, string(b))
+	})
+
+	t.Run("should unmarshal empty license", func(t *testing.T) {
+		actual := License{}
+		err := json.Unmarshal([]byte(licenseJSON), &actual)
+		require.NoError(t, err)
+		assert.EqualValues(t, testLicense, actual)
+	})
 }
diff --git a/parameter.go b/parameter.go
index bd4f1cd..1363a2d 100644
--- a/parameter.go
+++ b/parameter.go
@@ -210,14 +210,14 @@ func (p *Parameter) AsRequired() *Parameter {
 }
 
 // WithMaxLength sets a max length value
-func (p *Parameter) WithMaxLength(max int64) *Parameter {
-	p.MaxLength = &max
+func (p *Parameter) WithMaxLength(maximum int64) *Parameter {
+	p.MaxLength = &maximum
 	return p
 }
 
 // WithMinLength sets a min length value
-func (p *Parameter) WithMinLength(min int64) *Parameter {
-	p.MinLength = &min
+func (p *Parameter) WithMinLength(minimum int64) *Parameter {
+	p.MinLength = &minimum
 	return p
 }
 
@@ -234,15 +234,15 @@ func (p *Parameter) WithMultipleOf(number float64) *Parameter {
 }
 
 // WithMaximum sets a maximum number value
-func (p *Parameter) WithMaximum(max float64, exclusive bool) *Parameter {
-	p.Maximum = &max
+func (p *Parameter) WithMaximum(maximum float64, exclusive bool) *Parameter {
+	p.Maximum = &maximum
 	p.ExclusiveMaximum = exclusive
 	return p
 }
 
 // WithMinimum sets a minimum number value
-func (p *Parameter) WithMinimum(min float64, exclusive bool) *Parameter {
-	p.Minimum = &min
+func (p *Parameter) WithMinimum(minimum float64, exclusive bool) *Parameter {
+	p.Minimum = &minimum
 	p.ExclusiveMinimum = exclusive
 	return p
 }
diff --git a/paths.go b/paths.go
index 9dc82a2..d4b62dd 100644
--- a/paths.go
+++ b/paths.go
@@ -41,7 +41,7 @@ func (p Paths) JSONLookup(token string) (interface{}, error) {
 	if ex, ok := p.Extensions[token]; ok {
 		return &ex, nil
 	}
-	return nil, fmt.Errorf("object has no field %q", token)
+	return nil, fmt.Errorf("object has no field %q: %w", token, ErrSpec)
 }
 
 // UnmarshalJSON hydrates this items instance with the data from JSON
diff --git a/ref.go b/ref.go
index b0ef9bd..6c14a9f 100644
--- a/ref.go
+++ b/ref.go
@@ -75,7 +75,8 @@ func (r *Ref) IsValidURI(basepaths ...string) bool {
 		}
 		defer rr.Body.Close()
 
-		return rr.StatusCode/100 == 2
+		// true if the response is >= 200 and < 300
+		return rr.StatusCode/100 == 2 //nolint:mnd
 	}
 
 	if !(r.HasFileScheme || r.HasFullFilePath || r.HasURLPathOnly) {
diff --git a/ref_test.go b/ref_test.go
index 6f4c0de..3d233e0 100644
--- a/ref_test.go
+++ b/ref_test.go
@@ -40,5 +40,5 @@ func TestCloneRef(t *testing.T) {
 	jazon, err := json.Marshal(dst)
 	require.NoError(t, err)
 
-	assert.Equal(t, `{"$ref":"#/definitions/test"}`, string(jazon))
+	assert.JSONEq(t, `{"$ref":"#/definitions/test"}`, string(jazon))
 }
diff --git a/responses.go b/responses.go
index 16c3076..c133b17 100644
--- a/responses.go
+++ b/responses.go
@@ -55,7 +55,7 @@ func (r Responses) JSONLookup(token string) (interface{}, error) {
 			return scr, nil
 		}
 	}
-	return nil, fmt.Errorf("object has no field %q", token)
+	return nil, fmt.Errorf("object has no field %q: %w", token, ErrSpec)
 }
 
 // UnmarshalJSON hydrates this items instance with the data from JSON
diff --git a/schema.go b/schema.go
index 4e9be85..8c929dd 100644
--- a/schema.go
+++ b/schema.go
@@ -275,14 +275,14 @@ func (s *Schema) WithAllOf(schemas ...Schema) *Schema {
 }
 
 // WithMaxProperties sets the max number of properties an object can have
-func (s *Schema) WithMaxProperties(max int64) *Schema {
-	s.MaxProperties = &max
+func (s *Schema) WithMaxProperties(maximum int64) *Schema {
+	s.MaxProperties = &maximum
 	return s
 }
 
 // WithMinProperties sets the min number of properties an object must have
-func (s *Schema) WithMinProperties(min int64) *Schema {
-	s.MinProperties = &min
+func (s *Schema) WithMinProperties(minimum int64) *Schema {
+	s.MinProperties = &minimum
 	return s
 }
 
@@ -334,14 +334,14 @@ func (s *Schema) AddRequired(items ...string) *Schema {
 }
 
 // WithMaxLength sets a max length value
-func (s *Schema) WithMaxLength(max int64) *Schema {
-	s.MaxLength = &max
+func (s *Schema) WithMaxLength(maximum int64) *Schema {
+	s.MaxLength = &maximum
 	return s
 }
 
 // WithMinLength sets a min length value
-func (s *Schema) WithMinLength(min int64) *Schema {
-	s.MinLength = &min
+func (s *Schema) WithMinLength(minimum int64) *Schema {
+	s.MinLength = &minimum
 	return s
 }
 
@@ -358,15 +358,15 @@ func (s *Schema) WithMultipleOf(number float64) *Schema {
 }
 
 // WithMaximum sets a maximum number value
-func (s *Schema) WithMaximum(max float64, exclusive bool) *Schema {
-	s.Maximum = &max
+func (s *Schema) WithMaximum(maximum float64, exclusive bool) *Schema {
+	s.Maximum = &maximum
 	s.ExclusiveMaximum = exclusive
 	return s
 }
 
 // WithMinimum sets a minimum number value
-func (s *Schema) WithMinimum(min float64, exclusive bool) *Schema {
-	s.Minimum = &min
+func (s *Schema) WithMinimum(minimum float64, exclusive bool) *Schema {
+	s.Minimum = &minimum
 	s.ExclusiveMinimum = exclusive
 	return s
 }
@@ -566,29 +566,29 @@ func (s Schema) Validations() SchemaValidations {
 func (s Schema) MarshalJSON() ([]byte, error) {
 	b1, err := json.Marshal(s.SchemaProps)
 	if err != nil {
-		return nil, fmt.Errorf("schema props %v", err)
+		return nil, fmt.Errorf("schema props %v: %w", err, ErrSpec)
 	}
 	b2, err := json.Marshal(s.VendorExtensible)
 	if err != nil {
-		return nil, fmt.Errorf("vendor props %v", err)
+		return nil, fmt.Errorf("vendor props %v: %w", err, ErrSpec)
 	}
 	b3, err := s.Ref.MarshalJSON()
 	if err != nil {
-		return nil, fmt.Errorf("ref prop %v", err)
+		return nil, fmt.Errorf("ref prop %v: %w", err, ErrSpec)
 	}
 	b4, err := s.Schema.MarshalJSON()
 	if err != nil {
-		return nil, fmt.Errorf("schema prop %v", err)
+		return nil, fmt.Errorf("schema prop %v: %w", err, ErrSpec)
 	}
 	b5, err := json.Marshal(s.SwaggerSchemaProps)
 	if err != nil {
-		return nil, fmt.Errorf("common validations %v", err)
+		return nil, fmt.Errorf("common validations %v: %w", err, ErrSpec)
 	}
 	var b6 []byte
 	if s.ExtraProps != nil {
 		jj, err := json.Marshal(s.ExtraProps)
 		if err != nil {
-			return nil, fmt.Errorf("extra props %v", err)
+			return nil, fmt.Errorf("extra props %v: %w", err, ErrSpec)
 		}
 		b6 = jj
 	}
diff --git a/swagger.go b/swagger.go
index 1590fd1..977c2f0 100644
--- a/swagger.go
+++ b/swagger.go
@@ -379,7 +379,7 @@ func (s *StringOrArray) UnmarshalJSON(data []byte) error {
 		*s = StringOrArray([]string{v})
 		return nil
 	default:
-		return fmt.Errorf("only string or array is allowed, not %T", single)
+		return fmt.Errorf("only string or array is allowed, not %T: %w", single, ErrSpec)
 	}
 }
 
diff --git a/swagger_test.go b/swagger_test.go
index 59e2403..e111bb6 100644
--- a/swagger_test.go
+++ b/swagger_test.go
@@ -29,7 +29,7 @@ var spec = Swagger{
 		Consumes:    []string{"application/json", "application/x-yaml"},
 		Produces:    []string{"application/json"},
 		Schemes:     []string{"http", "https"},
-		Info:        &info,
+		Info:        &testInfo,
 		Host:        "some.api.out.there",
 		BasePath:    "/",
 		Paths:       &paths,
diff --git a/validations.go b/validations.go
index 6360a8e..ae80a5d 100644
--- a/validations.go
+++ b/validations.go
@@ -54,7 +54,8 @@ func (c clearedValidations) apply(cbs []func(string, interface{})) {
 //
 // Some callbacks may be set by the caller to capture changed values.
 func (v *CommonValidations) ClearNumberValidations(cbs ...func(string, interface{})) {
-	done := make(clearedValidations, 0, 5)
+	const maxNumberValidations = 5
+	done := make(clearedValidations, 0, maxNumberValidations)
 	defer func() {
 		done.apply(cbs)
 	}()
@@ -85,7 +86,8 @@ func (v *CommonValidations) ClearNumberValidations(cbs ...func(string, interface
 //
 // Some callbacks may be set by the caller to capture changed values.
 func (v *CommonValidations) ClearStringValidations(cbs ...func(string, interface{})) {
-	done := make(clearedValidations, 0, 3)
+	const maxStringValidations = 3
+	done := make(clearedValidations, 0, maxStringValidations)
 	defer func() {
 		done.apply(cbs)
 	}()
@@ -108,7 +110,8 @@ func (v *CommonValidations) ClearStringValidations(cbs ...func(string, interface
 //
 // Some callbacks may be set by the caller to capture changed values.
 func (v *CommonValidations) ClearArrayValidations(cbs ...func(string, interface{})) {
-	done := make(clearedValidations, 0, 3)
+	const maxArrayValidations = 3
+	done := make(clearedValidations, 0, maxArrayValidations)
 	defer func() {
 		done.apply(cbs)
 	}()
@@ -195,7 +198,8 @@ func (v SchemaValidations) Validations() SchemaValidations {
 //
 // Some callbacks may be set by the caller to capture changed values.
 func (v *SchemaValidations) ClearObjectValidations(cbs ...func(string, interface{})) {
-	done := make(clearedValidations, 0, 3)
+	const maxObjectValidations = 3
+	done := make(clearedValidations, 0, maxObjectValidations)
 	defer func() {
 		done.apply(cbs)
 	}()

From 9deaa98a5abb93c26f09a710004eacc98d01d2d6 Mon Sep 17 00:00:00 2001
From: Frederic BIDON <fredbi@yahoo.com>
Date: Wed, 12 Mar 2025 09:50:41 +0100
Subject: [PATCH 07/63] re-enacted dependabot auto-merge

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
---
 .github/workflows/auto-merge.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index 04c0316..9420058 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -8,7 +8,7 @@ permissions:
 jobs:
   dependabot:
     runs-on: ubuntu-latest
-    if: github.actor == 'dependabot[bot]'
+    if: github.event.pull_request.user.login == 'dependabot[bot]'
     steps:
       - name: Dependabot metadata
         id: metadata

From d8c0160078542955d1db8bb6c0733b00177bfd96 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 14 Mar 2025 09:14:03 +0000
Subject: [PATCH 08/63] Bump the go-openapi-dependencies group with 2 updates

Bumps the go-openapi-dependencies group with 2 updates: [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) and [github.com/go-openapi/swag](https://github.com/go-openapi/swag).


Updates `github.com/go-openapi/jsonpointer` from 0.21.0 to 0.21.1
- [Commits](https://github.com/go-openapi/jsonpointer/compare/v0.21.0...v0.21.1)

Updates `github.com/go-openapi/swag` from 0.23.0 to 0.23.1
- [Commits](https://github.com/go-openapi/swag/compare/v0.23.0...v0.23.1)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 go.mod |  6 +++---
 go.sum | 12 ++++++------
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/go.mod b/go.mod
index 136e07f..7e12f48 100644
--- a/go.mod
+++ b/go.mod
@@ -1,9 +1,9 @@
 module github.com/go-openapi/spec
 
 require (
-	github.com/go-openapi/jsonpointer v0.21.0
+	github.com/go-openapi/jsonpointer v0.21.1
 	github.com/go-openapi/jsonreference v0.21.0
-	github.com/go-openapi/swag v0.23.0
+	github.com/go-openapi/swag v0.23.1
 	github.com/stretchr/testify v1.10.0
 	gopkg.in/yaml.v3 v3.0.1
 )
@@ -11,7 +11,7 @@ require (
 require (
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
-	github.com/mailru/easyjson v0.7.7 // indirect
+	github.com/mailru/easyjson v0.9.0 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 )
 
diff --git a/go.sum b/go.sum
index 9927a50..1e2ed75 100644
--- a/go.sum
+++ b/go.sum
@@ -1,17 +1,17 @@
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/go-openapi/jsonpointer v0.21.0 h1:YgdVicSA9vH5RiHs9TZW5oyafXZFc6+2Vc1rr/O9oNQ=
-github.com/go-openapi/jsonpointer v0.21.0/go.mod h1:IUyH9l/+uyhIYQ/PXVA41Rexl+kOkAPDdXEYns6fzUY=
+github.com/go-openapi/jsonpointer v0.21.1 h1:whnzv/pNXtK2FbX/W9yJfRmE2gsmkfahjMKB0fZvcic=
+github.com/go-openapi/jsonpointer v0.21.1/go.mod h1:50I1STOfbY1ycR8jGz8DaMeLCdXiI6aDteEdRNNzpdk=
 github.com/go-openapi/jsonreference v0.21.0 h1:Rs+Y7hSXT83Jacb7kFyjn4ijOuVGSvOdF2+tg1TRrwQ=
 github.com/go-openapi/jsonreference v0.21.0/go.mod h1:LmZmgsrTkVg9LG4EaHeY8cBDslNPMo06cago5JNLkm4=
-github.com/go-openapi/swag v0.23.0 h1:vsEVJDUo2hPJ2tu0/Xc+4noaxyEffXNIs3cOULZ+GrE=
-github.com/go-openapi/swag v0.23.0/go.mod h1:esZ8ITTYEsH1V2trKHjAN8Ai7xHb8RV+YSZ577vPjgQ=
+github.com/go-openapi/swag v0.23.1 h1:lpsStH0n2ittzTnbaSloVZLuB5+fvSY/+hnagBjSNZU=
+github.com/go-openapi/swag v0.23.1/go.mod h1:STZs8TbRvEQQKUA+JZNAm3EWlgaOBGpyFDqQnDHMef0=
 github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY=
 github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
-github.com/mailru/easyjson v0.7.7 h1:UGYAvKxe3sBsEDzO8ZeWOSlIQfWFlxbzLZe7hwFURr0=
-github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
+github.com/mailru/easyjson v0.9.0 h1:PrnmzHw7262yW8sTBwxi1PdJA3Iw/EKBa8psRf7d9a4=
+github.com/mailru/easyjson v0.9.0/go.mod h1:1+xMtQp2MRNVL/V1bOzuP3aP8VNwRW55fQUto+XFtTU=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=

From 66137443772785bfd7f7a149f5a6c2e28062bac4 Mon Sep 17 00:00:00 2001
From: Frederic BIDON <fredbi@yahoo.com>
Date: Sun, 16 Mar 2025 12:04:48 +0100
Subject: [PATCH 09/63] ci: fixed broken codecov coverage upload

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
---
 .github/workflows/go-test.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 27273bd..8b7863c 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -52,7 +52,6 @@ jobs:
       uses: codecov/codecov-action@v5
       with:
         files: './coverage-${{ matrix.os }}.${{ matrix.go_version }}.out'
-        flags: '${{ matrix.go_version }}'
-        os: '${{ matrix.os }}'
+        flags: '${{ matrix.go_version }},${{ matrix.os }}'
         fail_ci_if_error: false
         verbose: true

From bc386e32f0c5eff170d2de995689f8ec2c734bd9 Mon Sep 17 00:00:00 2001
From: Frederic BIDON <fredbi@yahoo.com>
Date: Fri, 28 Mar 2025 17:58:23 +0100
Subject: [PATCH 10/63] ci: updated config for golangci-lint v2

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
---
 .github/workflows/go-test.yml |   2 +-
 .golangci.yml                 | 102 ++++++++++++++++++----------------
 2 files changed, 55 insertions(+), 49 deletions(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 8b7863c..19c4491 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -21,7 +21,7 @@ jobs:
           check-latest: true
           cache: true
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v6
+        uses: golangci/golangci-lint-action@v7
         with:
           version: latest
           only-new-issues: true
diff --git a/.golangci.yml b/.golangci.yml
index d2fafb8..5006306 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -1,56 +1,62 @@
-linters-settings:
-  gocyclo:
-    min-complexity: 45
-  dupl:
-    threshold: 200
-  goconst:
-    min-len: 2
-    min-occurrences: 3
-
+version: "2"
 linters:
-  enable-all: true
+  default: all
   disable:
-    - recvcheck
-    - unparam
-    - lll
-    - gochecknoinits
-    - gochecknoglobals
+    - cyclop
+    - depguard
+    - errchkjson
+    - errorlint
+    - exhaustruct
+    - forcetypeassert
     - funlen
-    - godox
+    - gochecknoglobals
+    - gochecknoinits
     - gocognit
-    - whitespace
-    - wsl
-    - wrapcheck
-    - testpackage
-    - nlreturn
-    - errorlint
-    - nestif
     - godot
-    - gofumpt
+    - godox
+    - gosmopolitan
+    - inamedparam
+    - ireturn
+    - lll
+    - musttag
+    - nestif
+    - nlreturn
+    - nonamedreturns
     - paralleltest
-    - tparallel
+    - testpackage
     - thelper
-    - exhaustruct
+    - tparallel
+    - unparam
     - varnamelen
-    - gci
-    - depguard
-    - errchkjson
-    - inamedparam
-    - nonamedreturns
-    - musttag
-    - ireturn
-    - forcetypeassert
-    - cyclop
-    # deprecated linters
-    #- deadcode
-    #- interfacer
-    #- scopelint
-    #- varcheck
-    #- structcheck
-    #- golint
-    #- nosnakecase
-    #- maligned
-    #- goerr113
-    #- ifshort
-    #- gomnd
-    #- exhaustivestruct
+    - whitespace
+    - wrapcheck
+    - wsl
+  settings:
+    dupl:
+      threshold: 200
+    goconst:
+      min-len: 2
+      min-occurrences: 3
+    gocyclo:
+      min-complexity: 45
+  exclusions:
+    generated: lax
+    presets:
+      - comments
+      - common-false-positives
+      - legacy
+      - std-error-handling
+    paths:
+      - third_party$
+      - builtin$
+      - examples$
+formatters:
+  enable:
+    - gofmt
+    - goimports
+  exclusions:
+    generated: lax
+    paths:
+      - third_party$
+      - builtin$
+      - examples$

From a3928469592e2049dabc3ffd2d15533ad072fcec Mon Sep 17 00:00:00 2001
From: Frederic BIDON <fredbi@yahoo.com>
Date: Mon, 17 Mar 2025 12:33:00 +0100
Subject: [PATCH 11/63] ci: fixed codecov upload

Fixed broken test coverage upload to codecov with codecov-action@v5.

    * fixed tokenless upload (now supported with codecov v5)
    * fixed flags for codecov
    * fixed coverage for windows (now use bash instead of powershell)

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
---
 .github/workflows/go-test.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 19c4491..58326bb 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -37,21 +37,21 @@ jobs:
         go_version: ['oldstable', 'stable' ]
 
     steps:
-    - name: Run unit tests
-      uses: actions/setup-go@v5
+    - uses: actions/setup-go@v5
       with:
         go-version: '${{ matrix.go_version }}'
         check-latest: true
         cache: true
 
     - uses: actions/checkout@v4
-
-    - run: go test -v -race -coverprofile="coverage-${{ matrix.os }}.${{ matrix.go_version }}.out" -covermode=atomic -coverpkg=$(go list)/... ./...
+    - name: Run unit tests
+      shell: bash
+      run: go test -v -race -coverprofile="coverage-${{ matrix.os }}.${{ matrix.go_version }}.out" -covermode=atomic -coverpkg=$(go list)/... ./...
 
     - name: Upload coverage to codecov
       uses: codecov/codecov-action@v5
       with:
         files: './coverage-${{ matrix.os }}.${{ matrix.go_version }}.out'
-        flags: '${{ matrix.go_version }},${{ matrix.os }}'
+        flags: '${{ matrix.go_version }}-${{ matrix.os }}'
         fail_ci_if_error: false
         verbose: true

From cebbc5a0ccb37ba84e05317a9fc9a20597d65455 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 9 May 2025 09:34:02 +0000
Subject: [PATCH 12/63] Bump golangci/golangci-lint-action in the
 development-dependencies group

Bumps the development-dependencies group with 1 update: [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action).


Updates `golangci/golangci-lint-action` from 7 to 8
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v7...v8)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/go-test.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 58326bb..7165e0f 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -21,7 +21,7 @@ jobs:
           check-latest: true
           cache: true
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v7
+        uses: golangci/golangci-lint-action@v8
         with:
           version: latest
           only-new-issues: true

From c58668ddfe2deb3925a129cba2b9437407e0dd9e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20BIDON?= <fredbi@yahoo.com>
Date: Sat, 9 Aug 2025 21:53:09 +0200
Subject: [PATCH 13/63] chore(lint): updated linters, relinted code
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Frédéric BIDON <fredbi@yahoo.com>
---
 .golangci.yml        |  3 +++
 contact_info_test.go |  2 +-
 header_test.go       | 16 ++++++++--------
 info_test.go         |  6 +++---
 items_test.go        | 12 ++++++------
 license_test.go      |  2 +-
 operation.go         | 33 ++++++++++++++++++---------------
 operation_test.go    |  2 +-
 parameters_test.go   |  4 ++--
 path_item_test.go    |  2 +-
 paths.go             |  7 ++++---
 paths_test.go        |  2 +-
 properties.go        |  3 ++-
 ref.go               | 41 +++++++++++++++++++++--------------------
 response.go          | 30 +++++++++++++++---------------
 response_test.go     | 10 +++++-----
 responses_test.go    |  4 ++--
 schema.go            | 31 ++++++++++++++++---------------
 schema_loader.go     | 40 ++++++++++++++++++++--------------------
 schema_test.go       |  4 ++--
 spec_test.go         |  8 ++++----
 structs_test.go      | 23 ++++++++++++-----------
 swagger_test.go      |  6 +++---
 tag.go               | 10 +++++-----
 validations_test.go  |  8 ++++----
 25 files changed, 160 insertions(+), 149 deletions(-)

diff --git a/.golangci.yml b/.golangci.yml
index 5006306..015e33a 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -22,7 +22,9 @@ linters:
     - nestif
     - nlreturn
     - nonamedreturns
+    - noinlineerr
     - paralleltest
+    - recvcheck
     - testpackage
     - thelper
     - tparallel
@@ -31,6 +33,7 @@ linters:
     - whitespace
     - wrapcheck
     - wsl
+    - wsl_v5
   settings:
     dupl:
       threshold: 200
diff --git a/contact_info_test.go b/contact_info_test.go
index 4aaddd6..99ce05e 100644
--- a/contact_info_test.go
+++ b/contact_info_test.go
@@ -43,5 +43,5 @@ func TestIntegrationContactInfo(t *testing.T) {
 	actual := ContactInfo{}
 	err = json.Unmarshal([]byte(contactInfoJSON), &actual)
 	require.NoError(t, err)
-	assert.EqualValues(t, contactInfo, actual)
+	assert.Equal(t, contactInfo, actual)
 }
diff --git a/header_test.go b/header_test.go
index 5259cd8..2aad150 100644
--- a/header_test.go
+++ b/header_test.go
@@ -33,7 +33,7 @@ func int64Ptr(f int64) *int64 {
 }
 
 var header = Header{
-	VendorExtensible: VendorExtensible{Extensions: map[string]interface{}{
+	VendorExtensible: VendorExtensible{Extensions: map[string]any{
 		"x-framework": "swagger-go",
 	}},
 	HeaderProps: HeaderProps{Description: "the description of this header"},
@@ -57,7 +57,7 @@ var header = Header{
 		MinItems:         int64Ptr(5),
 		UniqueItems:      true,
 		MultipleOf:       float64Ptr(5),
-		Enum:             []interface{}{"hello", "world"},
+		Enum:             []any{"hello", "world"},
 	},
 }
 
@@ -87,7 +87,7 @@ const headerJSON = `{
 func TestIntegrationHeader(t *testing.T) {
 	var actual Header
 	require.NoError(t, json.Unmarshal([]byte(headerJSON), &actual))
-	assert.EqualValues(t, actual, header)
+	assert.Equal(t, actual, header)
 
 	assertParsesJSON(t, headerJSON, header)
 }
@@ -104,13 +104,13 @@ func TestJSONLookupHeader(t *testing.T) {
 	require.True(t, ok)
 	assert.Equal(t, "8", def)
 
-	var x *interface{}
+	var x *any
 	res, err = header.JSONLookup("x-framework")
 	require.NoError(t, err)
 	require.NotNil(t, res)
 	require.IsType(t, x, res)
 
-	x, ok = res.(*interface{})
+	x, ok = res.(*any)
 	require.True(t, ok)
 	assert.EqualValues(t, "swagger-go", *x)
 
@@ -144,7 +144,7 @@ func TestWithHeader(t *testing.T) {
 	i := new(Items).Typed("string", "date")
 	h = new(Header).CollectionOf(i, "pipe")
 
-	assert.EqualValues(t, *i, *h.Items)
+	assert.Equal(t, *i, *h.Items)
 	assert.Equal(t, "pipe", h.CollectionFormat)
 
 	h = new(Header).WithDefault([]string{"a", "b", "c"}).WithMaxLength(10).WithMinLength(3)
@@ -162,7 +162,7 @@ func TestWithHeader(t *testing.T) {
 	h = new(Header).WithEnum("a", "b", "c")
 	assert.Equal(t, Header{
 		CommonValidations: CommonValidations{
-			Enum: []interface{}{
+			Enum: []any{
 				"a",
 				"b",
 				"c",
@@ -173,5 +173,5 @@ func TestWithHeader(t *testing.T) {
 
 func TestHeaderWithValidation(t *testing.T) {
 	h := new(Header).WithValidations(CommonValidations{MaxLength: swag.Int64(15)})
-	assert.EqualValues(t, swag.Int64(15), h.MaxLength)
+	assert.Equal(t, swag.Int64(15), h.MaxLength)
 }
diff --git a/info_test.go b/info_test.go
index 3255cd1..c54777d 100644
--- a/info_test.go
+++ b/info_test.go
@@ -53,7 +53,7 @@ var testInfo = Info{
 		},
 		},
 	},
-	VendorExtensible: VendorExtensible{Extensions: map[string]interface{}{"x-framework": "go-swagger"}},
+	VendorExtensible: VendorExtensible{Extensions: map[string]any{"x-framework": "go-swagger"}},
 }
 
 func TestInfo(t *testing.T) {
@@ -66,13 +66,13 @@ func TestInfo(t *testing.T) {
 	t.Run("should unmarshal Info", func(t *testing.T) {
 		actual := Info{}
 		require.NoError(t, json.Unmarshal([]byte(infoJSON), &actual))
-		assert.EqualValues(t, testInfo, actual)
+		assert.Equal(t, testInfo, actual)
 	})
 
 	t.Run("should GobEncode Info", func(t *testing.T) {
 		var src, dst Info
 		require.NoError(t, json.Unmarshal([]byte(infoJSON), &src))
-		assert.EqualValues(t, src, testInfo)
+		assert.Equal(t, src, testInfo)
 		doTestAnyGobEncoding(t, &src, &dst)
 	})
 }
diff --git a/items_test.go b/items_test.go
index 88cf12f..c1d3954 100644
--- a/items_test.go
+++ b/items_test.go
@@ -76,17 +76,17 @@ const itemsJSON = `{
 func TestIntegrationItems(t *testing.T) {
 	var actual Items
 	require.NoError(t, json.Unmarshal([]byte(itemsJSON), &actual))
-	assert.EqualValues(t, actual, testItems)
+	assert.Equal(t, actual, testItems)
 
 	assertParsesJSON(t, itemsJSON, testItems)
 }
 
 func TestTypeNameItems(t *testing.T) {
 	var nilItems Items
-	assert.Equal(t, "", nilItems.TypeName())
+	assert.Empty(t, nilItems.TypeName())
 
 	assert.Equal(t, "date", testItems.TypeName())
-	assert.Equal(t, "", testItems.ItemsTypeName())
+	assert.Empty(t, testItems.ItemsTypeName())
 
 	nested := Items{
 		SimpleSchema: SimpleSchema{
@@ -110,7 +110,7 @@ func TestTypeNameItems(t *testing.T) {
 	}
 
 	assert.Equal(t, "string", simple.TypeName())
-	assert.Equal(t, "", simple.ItemsTypeName())
+	assert.Empty(t, simple.ItemsTypeName())
 
 	simple.Items = NewItems()
 	simple.Type = "array"
@@ -159,7 +159,7 @@ func TestJSONLookupItems(t *testing.T) {
 
 		ref, ok := res.(*Ref)
 		require.True(t, ok)
-		assert.EqualValues(t, MustCreateRef("Dog"), *ref)
+		assert.Equal(t, MustCreateRef("Dog"), *ref)
 	})
 
 	t.Run(`lookup should find "maximum"`, func(t *testing.T) {
@@ -196,5 +196,5 @@ func TestJSONLookupItems(t *testing.T) {
 
 func TestItemsWithValidation(t *testing.T) {
 	i := new(Items).WithValidations(CommonValidations{MaxLength: swag.Int64(15)})
-	assert.EqualValues(t, swag.Int64(15), i.MaxLength)
+	assert.Equal(t, swag.Int64(15), i.MaxLength)
 }
diff --git a/license_test.go b/license_test.go
index 67a75c0..84ba850 100644
--- a/license_test.go
+++ b/license_test.go
@@ -45,6 +45,6 @@ func TestIntegrationLicense(t *testing.T) {
 		actual := License{}
 		err := json.Unmarshal([]byte(licenseJSON), &actual)
 		require.NoError(t, err)
-		assert.EqualValues(t, testLicense, actual)
+		assert.Equal(t, testLicense, actual)
 	})
 }
diff --git a/operation.go b/operation.go
index a69cca8..5c7b6c6 100644
--- a/operation.go
+++ b/operation.go
@@ -25,8 +25,8 @@ import (
 )
 
 func init() {
-	gob.Register(map[string]interface{}{})
-	gob.Register([]interface{}{})
+	gob.Register(map[string]any{})
+	gob.Register([]any{})
 }
 
 // OperationProps describes an operation
@@ -58,19 +58,22 @@ func (op OperationProps) MarshalJSON() ([]byte, error) {
 	type Alias OperationProps
 	if op.Security == nil {
 		return json.Marshal(&struct {
-			Security []map[string][]string `json:"security,omitempty"`
 			*Alias
+
+			Security []map[string][]string `json:"security,omitempty"`
 		}{
-			Security: op.Security,
 			Alias:    (*Alias)(&op),
+			Security: op.Security,
 		})
 	}
+
 	return json.Marshal(&struct {
-		Security []map[string][]string `json:"security"`
 		*Alias
+
+		Security []map[string][]string `json:"security"`
 	}{
-		Security: op.Security,
 		Alias:    (*Alias)(&op),
+		Security: op.Security,
 	})
 }
 
@@ -82,6 +85,14 @@ type Operation struct {
 	OperationProps
 }
 
+// NewOperation creates a new operation instance.
+// It expects an ID as parameter but not passing an ID is also valid.
+func NewOperation(id string) *Operation {
+	op := new(Operation)
+	op.ID = id
+	return op
+}
+
 // SuccessResponse gets a success response model
 func (o *Operation) SuccessResponse() (*Response, int, bool) {
 	if o.Responses == nil {
@@ -104,7 +115,7 @@ func (o *Operation) SuccessResponse() (*Response, int, bool) {
 }
 
 // JSONLookup look up a value by the json property name
-func (o Operation) JSONLookup(token string) (interface{}, error) {
+func (o Operation) JSONLookup(token string) (any, error) {
 	if ex, ok := o.Extensions[token]; ok {
 		return &ex, nil
 	}
@@ -134,14 +145,6 @@ func (o Operation) MarshalJSON() ([]byte, error) {
 	return concated, nil
 }
 
-// NewOperation creates a new operation instance.
-// It expects an ID as parameter but not passing an ID is also valid.
-func NewOperation(id string) *Operation {
-	op := new(Operation)
-	op.ID = id
-	return op
-}
-
 // WithID sets the ID property on this operation, allows for chaining.
 func (o *Operation) WithID(id string) *Operation {
 	o.ID = id
diff --git a/operation_test.go b/operation_test.go
index 495f609..46f61c8 100644
--- a/operation_test.go
+++ b/operation_test.go
@@ -259,7 +259,7 @@ func TestOperationBuilder(t *testing.T) {
 func TestIntegrationOperation(t *testing.T) {
 	var actual Operation
 	require.NoError(t, json.Unmarshal([]byte(operationJSON), &actual))
-	assert.EqualValues(t, actual, operation)
+	assert.Equal(t, actual, operation)
 
 	assertParsesJSON(t, operationJSON, operation)
 }
diff --git a/parameters_test.go b/parameters_test.go
index 702d867..04955b2 100644
--- a/parameters_test.go
+++ b/parameters_test.go
@@ -94,7 +94,7 @@ var parameterJSON = `{
 func TestIntegrationParameter(t *testing.T) {
 	var actual Parameter
 	require.NoError(t, json.Unmarshal([]byte(parameterJSON), &actual))
-	assert.EqualValues(t, actual, parameter)
+	assert.Equal(t, actual, parameter)
 
 	assertParsesJSON(t, parameterJSON, parameter)
 }
@@ -164,5 +164,5 @@ func TestParameterGobEncoding(t *testing.T) {
 
 func TestParametersWithValidation(t *testing.T) {
 	p := new(Parameter).WithValidations(CommonValidations{MaxLength: swag.Int64(15)})
-	assert.EqualValues(t, swag.Int64(15), p.MaxLength)
+	assert.Equal(t, swag.Int64(15), p.MaxLength)
 }
diff --git a/path_item_test.go b/path_item_test.go
index c3507a0..1d0048b 100644
--- a/path_item_test.go
+++ b/path_item_test.go
@@ -75,7 +75,7 @@ const pathItemJSON = `{
 func TestIntegrationPathItem(t *testing.T) {
 	var actual PathItem
 	require.NoError(t, json.Unmarshal([]byte(pathItemJSON), &actual))
-	assert.EqualValues(t, actual, pathItem)
+	assert.Equal(t, actual, pathItem)
 
 	assertParsesJSON(t, pathItemJSON, pathItem)
 }
diff --git a/paths.go b/paths.go
index d4b62dd..42f65ff 100644
--- a/paths.go
+++ b/paths.go
@@ -30,11 +30,12 @@ import (
 // For more information: http://goo.gl/8us55a#pathsObject
 type Paths struct {
 	VendorExtensible
+
 	Paths map[string]PathItem `json:"-"` // custom serializer to flatten this, each entry must start with "/"
 }
 
 // JSONLookup look up a value by the json property name
-func (p Paths) JSONLookup(token string) (interface{}, error) {
+func (p Paths) JSONLookup(token string) (any, error) {
 	if pi, ok := p.Paths[token]; ok {
 		return &pi, nil
 	}
@@ -53,9 +54,9 @@ func (p *Paths) UnmarshalJSON(data []byte) error {
 	for k, v := range res {
 		if strings.HasPrefix(strings.ToLower(k), "x-") {
 			if p.Extensions == nil {
-				p.Extensions = make(map[string]interface{})
+				p.Extensions = make(map[string]any)
 			}
-			var d interface{}
+			var d any
 			if err := json.Unmarshal(v, &d); err != nil {
 				return err
 			}
diff --git a/paths_test.go b/paths_test.go
index 4592818..cbb37af 100644
--- a/paths_test.go
+++ b/paths_test.go
@@ -36,7 +36,7 @@ const pathsJSON = `{"x-framework":"go-swagger","/":{"$ref":"cats"}}`
 func TestIntegrationPaths(t *testing.T) {
 	var actual Paths
 	require.NoError(t, json.Unmarshal([]byte(pathsJSON), &actual))
-	assert.EqualValues(t, actual, paths)
+	assert.Equal(t, actual, paths)
 
 	assertParsesJSON(t, pathsJSON, paths)
 
diff --git a/properties.go b/properties.go
index 91d2435..ada68dd 100644
--- a/properties.go
+++ b/properties.go
@@ -9,8 +9,9 @@ import (
 
 // OrderSchemaItem holds a named schema (e.g. from a property of an object)
 type OrderSchemaItem struct {
-	Name string
 	Schema
+
+	Name string
 }
 
 // OrderSchemaItems is a sortable slice of named schemas.
diff --git a/ref.go b/ref.go
index 6c14a9f..87b8b3a 100644
--- a/ref.go
+++ b/ref.go
@@ -45,6 +45,23 @@ type Ref struct {
 	jsonreference.Ref
 }
 
+// NewRef creates a new instance of a ref object
+// returns an error when the reference uri is an invalid uri
+func NewRef(refURI string) (Ref, error) {
+	ref, err := jsonreference.New(refURI)
+	if err != nil {
+		return Ref{}, err
+	}
+
+	return Ref{Ref: ref}, nil
+}
+
+// MustCreateRef creates a ref object but panics when refURI is invalid.
+// Use the NewRef method for a version that returns an error.
+func MustCreateRef(refURI string) Ref {
+	return Ref{Ref: jsonreference.MustCreateRef(refURI)}
+}
+
 // RemoteURI gets the remote uri part of the ref
 func (r *Ref) RemoteURI() string {
 	if r.String() == "" {
@@ -79,7 +96,7 @@ func (r *Ref) IsValidURI(basepaths ...string) bool {
 		return rr.StatusCode/100 == 2 //nolint:mnd
 	}
 
-	if !(r.HasFileScheme || r.HasFullFilePath || r.HasURLPathOnly) {
+	if !r.HasFileScheme && !r.HasFullFilePath && !r.HasURLPathOnly {
 		return false
 	}
 
@@ -115,22 +132,6 @@ func (r *Ref) Inherits(child Ref) (*Ref, error) {
 	return &Ref{Ref: *ref}, nil
 }
 
-// NewRef creates a new instance of a ref object
-// returns an error when the reference uri is an invalid uri
-func NewRef(refURI string) (Ref, error) {
-	ref, err := jsonreference.New(refURI)
-	if err != nil {
-		return Ref{}, err
-	}
-	return Ref{Ref: ref}, nil
-}
-
-// MustCreateRef creates a ref object but panics when refURI is invalid.
-// Use the NewRef method for a version that returns an error.
-func MustCreateRef(refURI string) Ref {
-	return Ref{Ref: jsonreference.MustCreateRef(refURI)}
-}
-
 // MarshalJSON marshals this ref into a JSON object
 func (r Ref) MarshalJSON() ([]byte, error) {
 	str := r.String()
@@ -140,13 +141,13 @@ func (r Ref) MarshalJSON() ([]byte, error) {
 		}
 		return []byte("{}"), nil
 	}
-	v := map[string]interface{}{"$ref": str}
+	v := map[string]any{"$ref": str}
 	return json.Marshal(v)
 }
 
 // UnmarshalJSON unmarshals this ref from a JSON object
 func (r *Ref) UnmarshalJSON(d []byte) error {
-	var v map[string]interface{}
+	var v map[string]any
 	if err := json.Unmarshal(d, &v); err != nil {
 		return err
 	}
@@ -175,7 +176,7 @@ func (r *Ref) GobDecode(b []byte) error {
 	return json.Unmarshal(raw, r)
 }
 
-func (r *Ref) fromMap(v map[string]interface{}) error {
+func (r *Ref) fromMap(v map[string]any) error {
 	if v == nil {
 		return nil
 	}
diff --git a/response.go b/response.go
index 0340b60..d71226f 100644
--- a/response.go
+++ b/response.go
@@ -38,6 +38,18 @@ type Response struct {
 	VendorExtensible
 }
 
+// NewResponse creates a new response instance
+func NewResponse() *Response {
+	return new(Response)
+}
+
+// ResponseRef creates a response as a json reference
+func ResponseRef(url string) *Response {
+	resp := NewResponse()
+	resp.Ref = MustCreateRef(url)
+	return resp
+}
+
 // JSONLookup look up a value by the json property name
 func (r Response) JSONLookup(token string) (interface{}, error) {
 	if ex, ok := r.Extensions[token]; ok {
@@ -79,9 +91,9 @@ func (r Response) MarshalJSON() ([]byte, error) {
 			Headers     map[string]Header      `json:"headers,omitempty"`
 			Examples    map[string]interface{} `json:"examples,omitempty"`
 		}{
-			Description: r.ResponseProps.Description,
-			Schema:      r.ResponseProps.Schema,
-			Examples:    r.ResponseProps.Examples,
+			Description: r.Description,
+			Schema:      r.Schema,
+			Examples:    r.Examples,
 		})
 	}
 	if err != nil {
@@ -99,18 +111,6 @@ func (r Response) MarshalJSON() ([]byte, error) {
 	return swag.ConcatJSON(b1, b2, b3), nil
 }
 
-// NewResponse creates a new response instance
-func NewResponse() *Response {
-	return new(Response)
-}
-
-// ResponseRef creates a response as a json reference
-func ResponseRef(url string) *Response {
-	resp := NewResponse()
-	resp.Ref = MustCreateRef(url)
-	return resp
-}
-
 // WithDescription sets the description on this response, allows for chaining
 func (r *Response) WithDescription(description string) *Response {
 	r.Description = description
diff --git a/response_test.go b/response_test.go
index d03720c..39d9c43 100644
--- a/response_test.go
+++ b/response_test.go
@@ -25,7 +25,7 @@ import (
 var response = Response{
 	Refable: Refable{Ref: MustCreateRef("Dog")},
 	VendorExtensible: VendorExtensible{
-		Extensions: map[string]interface{}{
+		Extensions: map[string]any{
 			"x-go-name": "PutDogExists",
 		},
 	},
@@ -47,7 +47,7 @@ const responseJSON = `{
 func TestIntegrationResponse(t *testing.T) {
 	var actual Response
 	require.NoError(t, json.Unmarshal([]byte(responseJSON), &actual))
-	assert.EqualValues(t, actual, response)
+	assert.Equal(t, actual, response)
 
 	assertParsesJSON(t, responseJSON, response)
 }
@@ -61,7 +61,7 @@ func TestJSONLookupResponse(t *testing.T) {
 	var ok bool
 	ref, ok := res.(*Ref)
 	require.True(t, ok)
-	assert.EqualValues(t, MustCreateRef("Dog"), *ref)
+	assert.Equal(t, MustCreateRef("Dog"), *ref)
 
 	var def string
 	res, err = response.JSONLookup("description")
@@ -73,13 +73,13 @@ func TestJSONLookupResponse(t *testing.T) {
 	require.True(t, ok)
 	assert.Equal(t, "Dog exists", def)
 
-	var x *interface{}
+	var x *any
 	res, err = response.JSONLookup("x-go-name")
 	require.NoError(t, err)
 	require.NotNil(t, res)
 	require.IsType(t, x, res)
 
-	x, ok = res.(*interface{})
+	x, ok = res.(*any)
 	require.True(t, ok)
 	assert.EqualValues(t, "PutDogExists", *x)
 
diff --git a/responses_test.go b/responses_test.go
index fc626bf..4ef1e69 100644
--- a/responses_test.go
+++ b/responses_test.go
@@ -61,7 +61,7 @@ const responsesJSON = `{
 func TestIntegrationResponses(t *testing.T) {
 	var actual Responses
 	require.NoError(t, json.Unmarshal([]byte(responsesJSON), &actual))
-	assert.EqualValues(t, actual, responses)
+	assert.Equal(t, actual, responses)
 
 	assertParsesJSON(t, responsesJSON, responses)
 }
@@ -77,7 +77,7 @@ func TestJSONLookupResponses(t *testing.T) {
 
 	ref, ok := res.(*Ref)
 	require.True(t, ok)
-	assert.EqualValues(t, MustCreateRef("Dog"), *ref)
+	assert.Equal(t, MustCreateRef("Dog"), *ref)
 
 	var def string
 	res, err = resp200.JSONLookup("description")
diff --git a/schema.go b/schema.go
index 8c929dd..c1043bc 100644
--- a/schema.go
+++ b/schema.go
@@ -125,20 +125,20 @@ func (r SchemaURL) MarshalJSON() ([]byte, error) {
 	if r == "" {
 		return []byte("{}"), nil
 	}
-	v := map[string]interface{}{"$schema": string(r)}
+	v := map[string]any{"$schema": string(r)}
 	return json.Marshal(v)
 }
 
 // UnmarshalJSON unmarshal this from JSON
 func (r *SchemaURL) UnmarshalJSON(data []byte) error {
-	var v map[string]interface{}
+	var v map[string]any
 	if err := json.Unmarshal(data, &v); err != nil {
 		return err
 	}
 	return r.fromMap(v)
 }
 
-func (r *SchemaURL) fromMap(v map[string]interface{}) error {
+func (r *SchemaURL) fromMap(v map[string]any) error {
 	if v == nil {
 		return nil
 	}
@@ -165,7 +165,7 @@ type SchemaProps struct {
 	Nullable             bool             `json:"nullable,omitempty"`
 	Format               string           `json:"format,omitempty"`
 	Title                string           `json:"title,omitempty"`
-	Default              interface{}      `json:"default,omitempty"`
+	Default              any              `json:"default,omitempty"`
 	Maximum              *float64         `json:"maximum,omitempty"`
 	ExclusiveMaximum     bool             `json:"exclusiveMaximum,omitempty"`
 	Minimum              *float64         `json:"minimum,omitempty"`
@@ -177,7 +177,7 @@ type SchemaProps struct {
 	MinItems             *int64           `json:"minItems,omitempty"`
 	UniqueItems          bool             `json:"uniqueItems,omitempty"`
 	MultipleOf           *float64         `json:"multipleOf,omitempty"`
-	Enum                 []interface{}    `json:"enum,omitempty"`
+	Enum                 []any            `json:"enum,omitempty"`
 	MaxProperties        *int64           `json:"maxProperties,omitempty"`
 	MinProperties        *int64           `json:"minProperties,omitempty"`
 	Required             []string         `json:"required,omitempty"`
@@ -200,7 +200,7 @@ type SwaggerSchemaProps struct {
 	ReadOnly      bool                   `json:"readOnly,omitempty"`
 	XML           *XMLObject             `json:"xml,omitempty"`
 	ExternalDocs  *ExternalDocumentation `json:"externalDocs,omitempty"`
-	Example       interface{}            `json:"example,omitempty"`
+	Example       any                    `json:"example,omitempty"`
 }
 
 // Schema the schema object allows the definition of input and output data types.
@@ -214,11 +214,12 @@ type Schema struct {
 	VendorExtensible
 	SchemaProps
 	SwaggerSchemaProps
-	ExtraProps map[string]interface{} `json:"-"`
+
+	ExtraProps map[string]any `json:"-"`
 }
 
 // JSONLookup implements an interface to customize json pointer lookup
-func (s Schema) JSONLookup(token string) (interface{}, error) {
+func (s Schema) JSONLookup(token string) (any, error) {
 	if ex, ok := s.Extensions[token]; ok {
 		return &ex, nil
 	}
@@ -316,7 +317,7 @@ func (s *Schema) CollectionOf(items Schema) *Schema {
 }
 
 // WithDefault sets the default value on this parameter
-func (s *Schema) WithDefault(defaultValue interface{}) *Schema {
+func (s *Schema) WithDefault(defaultValue any) *Schema {
 	s.Default = defaultValue
 	return s
 }
@@ -372,8 +373,8 @@ func (s *Schema) WithMinimum(minimum float64, exclusive bool) *Schema {
 }
 
 // WithEnum sets a the enum values (replace)
-func (s *Schema) WithEnum(values ...interface{}) *Schema {
-	s.Enum = append([]interface{}{}, values...)
+func (s *Schema) WithEnum(values ...any) *Schema {
+	s.Enum = append([]any{}, values...)
 	return s
 }
 
@@ -426,7 +427,7 @@ func (s *Schema) AsWritable() *Schema {
 }
 
 // WithExample sets the example for this schema
-func (s *Schema) WithExample(example interface{}) *Schema {
+func (s *Schema) WithExample(example any) *Schema {
 	s.Example = example
 	return s
 }
@@ -610,7 +611,7 @@ func (s *Schema) UnmarshalJSON(data []byte) error {
 		SwaggerSchemaProps: props.SwaggerSchemaProps,
 	}
 
-	var d map[string]interface{}
+	var d map[string]any
 	if err := json.Unmarshal(data, &d); err != nil {
 		return err
 	}
@@ -628,13 +629,13 @@ func (s *Schema) UnmarshalJSON(data []byte) error {
 		lk := strings.ToLower(k)
 		if strings.HasPrefix(lk, "x-") {
 			if sch.Extensions == nil {
-				sch.Extensions = map[string]interface{}{}
+				sch.Extensions = map[string]any{}
 			}
 			sch.Extensions[k] = vv
 			continue
 		}
 		if sch.ExtraProps == nil {
-			sch.ExtraProps = map[string]interface{}{}
+			sch.ExtraProps = map[string]any{}
 		}
 		sch.ExtraProps[k] = vv
 	}
diff --git a/schema_loader.go b/schema_loader.go
index 0059b99..3011ecd 100644
--- a/schema_loader.go
+++ b/schema_loader.go
@@ -73,12 +73,23 @@ func newResolverContext(options *ExpandOptions) *resolverContext {
 }
 
 type schemaLoader struct {
-	root    interface{}
+	root    any
 	options *ExpandOptions
 	cache   ResolutionCache
 	context *resolverContext
 }
 
+// Resolve resolves a reference against basePath and stores the result in target.
+//
+// Resolve is not in charge of following references: it only resolves ref by following its URL.
+//
+// If the schema the ref is referring to holds nested refs, Resolve doesn't resolve them.
+//
+// If basePath is an empty string, ref is resolved against the root schema stored in the schemaLoader struct
+func (r *schemaLoader) Resolve(ref *Ref, target any, basePath string) error {
+	return r.resolveRef(ref, target, basePath)
+}
+
 func (r *schemaLoader) transitiveResolver(basePath string, ref Ref) *schemaLoader {
 	if ref.IsRoot() || ref.HasFragmentOnly {
 		return r
@@ -113,7 +124,7 @@ func (r *schemaLoader) updateBasePath(transitive *schemaLoader, basePath string)
 	return basePath
 }
 
-func (r *schemaLoader) resolveRef(ref *Ref, target interface{}, basePath string) error {
+func (r *schemaLoader) resolveRef(ref *Ref, target any, basePath string) error {
 	tgt := reflect.ValueOf(target)
 	if tgt.Kind() != reflect.Ptr {
 		return ErrResolveRefNeedsAPointer
@@ -124,8 +135,8 @@ func (r *schemaLoader) resolveRef(ref *Ref, target interface{}, basePath string)
 	}
 
 	var (
-		res  interface{}
-		data interface{}
+		res  any
+		data any
 		err  error
 	)
 
@@ -158,7 +169,7 @@ func (r *schemaLoader) resolveRef(ref *Ref, target interface{}, basePath string)
 	return swag.DynamicJSONToStruct(res, target)
 }
 
-func (r *schemaLoader) load(refURL *url.URL) (interface{}, url.URL, bool, error) {
+func (r *schemaLoader) load(refURL *url.URL) (any, url.URL, bool, error) {
 	debugLog("loading schema from url: %s", refURL)
 	toFetch := *refURL
 	toFetch.Fragment = ""
@@ -178,7 +189,7 @@ func (r *schemaLoader) load(refURL *url.URL) (interface{}, url.URL, bool, error)
 		return nil, url.URL{}, false, err
 	}
 
-	var doc interface{}
+	var doc any
 	if err := json.Unmarshal(b, &doc); err != nil {
 		return nil, url.URL{}, false, err
 	}
@@ -204,18 +215,7 @@ func (r *schemaLoader) isCircular(ref *Ref, basePath string, parentRefs ...strin
 	return
 }
 
-// Resolve resolves a reference against basePath and stores the result in target.
-//
-// Resolve is not in charge of following references: it only resolves ref by following its URL.
-//
-// If the schema the ref is referring to holds nested refs, Resolve doesn't resolve them.
-//
-// If basePath is an empty string, ref is resolved against the root schema stored in the schemaLoader struct
-func (r *schemaLoader) Resolve(ref *Ref, target interface{}, basePath string) error {
-	return r.resolveRef(ref, target, basePath)
-}
-
-func (r *schemaLoader) deref(input interface{}, parentRefs []string, basePath string) error {
+func (r *schemaLoader) deref(input any, parentRefs []string, basePath string) error {
 	var ref *Ref
 	switch refable := input.(type) {
 	case *Schema:
@@ -267,7 +267,7 @@ func (r *schemaLoader) shouldStopOnError(err error) bool {
 	return false
 }
 
-func (r *schemaLoader) setSchemaID(target interface{}, id, basePath string) (string, string) {
+func (r *schemaLoader) setSchemaID(target any, id, basePath string) (string, string) {
 	debugLog("schema has ID: %s", id)
 
 	// handling the case when id is a folder
@@ -299,7 +299,7 @@ func (r *schemaLoader) setSchemaID(target interface{}, id, basePath string) (str
 }
 
 func defaultSchemaLoader(
-	root interface{},
+	root any,
 	expandOptions *ExpandOptions,
 	cache ResolutionCache,
 	context *resolverContext) *schemaLoader {
diff --git a/schema_test.go b/schema_test.go
index 038284c..8d9085c 100644
--- a/schema_test.go
+++ b/schema_test.go
@@ -215,10 +215,10 @@ func BenchmarkSchemaUnmarshal(b *testing.B) {
 
 func TestSchemaWithValidation(t *testing.T) {
 	s := new(Schema).WithValidations(SchemaValidations{CommonValidations: CommonValidations{MaxLength: swag.Int64(15)}})
-	assert.EqualValues(t, swag.Int64(15), s.MaxLength)
+	assert.Equal(t, swag.Int64(15), s.MaxLength)
 
 	val := mkVal()
 	s = new(Schema).WithValidations(val)
 
-	assert.EqualValues(t, val, s.Validations())
+	assert.Equal(t, val, s.Validations())
 }
diff --git a/spec_test.go b/spec_test.go
index ae7d492..c3a6186 100644
--- a/spec_test.go
+++ b/spec_test.go
@@ -95,7 +95,7 @@ func assertPaths1429(t testing.TB, sp *spec.Swagger) {
 			require.NotNilf(t, param.Schema, "expected param schema not to be nil")
 			// all param fixtures are body param with schema
 			// all $ref expanded
-			assert.Equal(t, "", param.Schema.Ref.String())
+			assert.Empty(t, param.Schema.Ref.String())
 		}
 
 		for code, response := range pi.Get.Responses.StatusCodeResponses {
@@ -105,7 +105,7 @@ func assertPaths1429(t testing.TB, sp *spec.Swagger) {
 				continue
 			}
 			require.NotNilf(t, response.Schema, "expected response schema not to be nil")
-			assert.Equal(t, "", response.Schema.Ref.String())
+			assert.Empty(t, response.Schema.Ref.String())
 		}
 	}
 }
@@ -119,7 +119,7 @@ func assertPaths1429SkipSchema(t testing.TB, sp *spec.Swagger) {
 			switch param.Name {
 			case "plainRequest":
 				// this one is expanded
-				assert.Equal(t, "", param.Schema.Ref.String())
+				assert.Empty(t, param.Schema.Ref.String())
 				continue
 			case "nestedBody":
 				// this one is local
@@ -144,7 +144,7 @@ func assertPaths1429SkipSchema(t testing.TB, sp *spec.Swagger) {
 				assert.Contains(t, response.Schema.Ref.String(), "remote/remote.yaml#/")
 				continue
 			case 404:
-				assert.Equal(t, "", response.Schema.Ref.String())
+				assert.Empty(t, response.Schema.Ref.String())
 				continue
 			}
 			assert.Containsf(t, response.Schema.Ref.String(), "responses.yaml#/", "expected remote ref at resp. %d", code)
diff --git a/structs_test.go b/structs_test.go
index d464b93..7f249e5 100644
--- a/structs_test.go
+++ b/structs_test.go
@@ -23,23 +23,24 @@ import (
 	"gopkg.in/yaml.v3"
 )
 
-func assertSerializeJSON(t testing.TB, actual interface{}, expected string) bool {
+func assertSerializeJSON(t testing.TB, actual any, expected string) bool {
 	ser, err := json.Marshal(actual)
 	if err != nil {
-		return assert.Fail(t, "unable to marshal to json (%s): %#v", err, actual)
+		return assert.Failf(t, "unable to marshal to json", "got: %v: %#v", err, actual)
 	}
+
 	return assert.Equal(t, expected, string(ser))
 }
 
-func assertSerializeYAML(t testing.TB, actual interface{}, expected string) bool {
+func assertSerializeYAML(t testing.TB, actual any, expected string) bool {
 	ser, err := yaml.Marshal(actual)
 	if err != nil {
-		return assert.Fail(t, "unable to marshal to yaml (%s): %#v", err, actual)
+		return assert.Failf(t, "unable to marshal to yaml", "got: %v: %#v", err, actual)
 	}
 	return assert.Equal(t, expected, string(ser))
 }
 
-func derefTypeOf(expected interface{}) (tpe reflect.Type) {
+func derefTypeOf(expected any) (tpe reflect.Type) {
 	tpe = reflect.TypeOf(expected)
 	if tpe.Kind() == reflect.Ptr {
 		tpe = tpe.Elem()
@@ -47,7 +48,7 @@ func derefTypeOf(expected interface{}) (tpe reflect.Type) {
 	return
 }
 
-func isPointed(expected interface{}) (pointed bool) {
+func isPointed(expected any) (pointed bool) {
 	tpe := reflect.TypeOf(expected)
 	if tpe.Kind() == reflect.Ptr {
 		pointed = true
@@ -55,11 +56,11 @@ func isPointed(expected interface{}) (pointed bool) {
 	return
 }
 
-func assertParsesJSON(t testing.TB, actual string, expected interface{}) bool {
+func assertParsesJSON(t testing.TB, actual string, expected any) bool {
 	parsed := reflect.New(derefTypeOf(expected))
 	err := json.Unmarshal([]byte(actual), parsed.Interface())
 	if err != nil {
-		return assert.Fail(t, "unable to unmarshal from json (%s): %s", err, actual)
+		return assert.Failf(t, "unable to unmarshal from json", "got: %v: %s", err, actual)
 	}
 	act := parsed.Interface()
 	if !isPointed(expected) {
@@ -68,17 +69,17 @@ func assertParsesJSON(t testing.TB, actual string, expected interface{}) bool {
 	return assert.Equal(t, expected, act)
 }
 
-func assertParsesYAML(t testing.TB, actual string, expected interface{}) bool {
+func assertParsesYAML(t testing.TB, actual string, expected any) bool {
 	parsed := reflect.New(derefTypeOf(expected))
 	err := yaml.Unmarshal([]byte(actual), parsed.Interface())
 	if err != nil {
-		return assert.Fail(t, "unable to unmarshal from yaml (%s): %s", err, actual)
+		return assert.Failf(t, "unable to unmarshal from yaml", "got: %v: %s", err, actual)
 	}
 	act := parsed.Interface()
 	if !isPointed(expected) {
 		act = reflect.Indirect(parsed).Interface()
 	}
-	return assert.EqualValues(t, expected, act)
+	return assert.Equal(t, expected, act)
 }
 
 func TestSerialization_SerializeJSON(t *testing.T) {
diff --git a/swagger_test.go b/swagger_test.go
index e111bb6..da260dd 100644
--- a/swagger_test.go
+++ b/swagger_test.go
@@ -243,13 +243,13 @@ func TestSwaggerSpec_Serialize(t *testing.T) {
 	require.NoError(t, err)
 	var actual map[string]interface{}
 	require.NoError(t, json.Unmarshal(b, &actual))
-	assert.EqualValues(t, expected, actual)
+	assert.Equal(t, expected, actual)
 }
 
 func TestSwaggerSpec_Deserialize(t *testing.T) {
 	var actual Swagger
 	require.NoError(t, json.Unmarshal([]byte(specJSON), &actual))
-	assert.EqualValues(t, actual, spec)
+	assert.Equal(t, actual, spec)
 }
 
 func TestVendorExtensionStringSlice(t *testing.T) {
@@ -257,7 +257,7 @@ func TestVendorExtensionStringSlice(t *testing.T) {
 	require.NoError(t, json.Unmarshal([]byte(specJSON), &actual))
 	schemes, ok := actual.Extensions.GetStringSlice("x-schemes")
 	require.True(t, ok)
-	assert.EqualValues(t, []string{"unix", "amqp"}, schemes)
+	assert.Equal(t, []string{"unix", "amqp"}, schemes)
 
 	notSlice, ok := actual.Extensions.GetStringSlice("x-some-extension")
 	assert.Nil(t, notSlice)
diff --git a/tag.go b/tag.go
index faa3d3d..33ae73d 100644
--- a/tag.go
+++ b/tag.go
@@ -28,11 +28,6 @@ type TagProps struct {
 	ExternalDocs *ExternalDocumentation `json:"externalDocs,omitempty"`
 }
 
-// NewTag creates a new tag
-func NewTag(name, description string, externalDocs *ExternalDocumentation) Tag {
-	return Tag{TagProps: TagProps{Description: description, Name: name, ExternalDocs: externalDocs}}
-}
-
 // Tag allows adding meta data to a single tag that is used by the
 // [Operation Object](http://goo.gl/8us55a#operationObject).
 // It is not mandatory to have a Tag Object per tag used there.
@@ -43,6 +38,11 @@ type Tag struct {
 	TagProps
 }
 
+// NewTag creates a new tag
+func NewTag(name, description string, externalDocs *ExternalDocumentation) Tag {
+	return Tag{TagProps: TagProps{Description: description, Name: name, ExternalDocs: externalDocs}}
+}
+
 // JSONLookup implements an interface to customize json pointer lookup
 func (t Tag) JSONLookup(token string) (interface{}, error) {
 	if ex, ok := t.Extensions[token]; ok {
diff --git a/validations_test.go b/validations_test.go
index 6582921..e2d9d8c 100644
--- a/validations_test.go
+++ b/validations_test.go
@@ -39,7 +39,7 @@ func TestValidations(t *testing.T) {
 	cv.SetValidations(val)
 
 	expectedCV := val.CommonValidations
-	require.EqualValues(t, expectedCV, cv)
+	require.Equal(t, expectedCV, cv)
 
 	require.True(t, cv.HasArrayValidations())
 	require.True(t, cv.HasNumberValidations())
@@ -78,16 +78,16 @@ func TestValidations(t *testing.T) {
 
 	val = mkVal()
 	cv.SetValidations(val)
-	require.EqualValues(t, expectedSV, cv.Validations())
+	require.Equal(t, expectedSV, cv.Validations())
 
 	var sv SchemaValidations
 	val = mkVal()
 	sv.SetValidations(val)
 
 	expectedSV = val
-	require.EqualValues(t, expectedSV, sv)
+	require.Equal(t, expectedSV, sv)
 
-	require.EqualValues(t, val, sv.Validations())
+	require.Equal(t, val, sv.Validations())
 
 	require.True(t, sv.HasObjectValidations())
 	sv.MinProperties = nil

From 7c8c5e9f5633fd54822eefc8e24c1ca36dab908b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20BIDON?= <fredbi@yahoo.com>
Date: Sun, 10 Aug 2025 15:02:57 +0200
Subject: [PATCH 14/63] ci: fixed auto-merge
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Frédéric BIDON <fredbi@yahoo.com>
---
 .github/dependabot.yaml          |  2 +-
 .github/workflows/auto-merge.yml |  2 +-
 .golangci.yml                    | 10 ++++++++++
 3 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 7dc7009..9ce426e 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -37,7 +37,7 @@ updates:
         patterns:
           - "github.com/stretchr/testify"
 
-      golang.org-dependencies:
+      golang-org-dependencies:
         patterns:
           - "golang.org/*"
 
diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index 9420058..1f18207 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -35,7 +35,7 @@ jobs:
           GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
 
       - name: Auto-merge dependabot PRs for golang.org updates
-        if: contains(steps.metadata.outputs.dependency-group, 'golang.org-dependencies')
+        if: contains(steps.metadata.outputs.dependency-group, 'golang-org-dependencies')
         run: gh pr merge --auto --rebase "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}
diff --git a/.golangci.yml b/.golangci.yml
index 015e33a..568ce16 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -16,6 +16,7 @@ linters:
     - godox
     - gosmopolitan
     - inamedparam
+    - intrange # disabled while < go1.22
     - ireturn
     - lll
     - musttag
@@ -63,3 +64,12 @@ formatters:
       - third_party$
       - builtin$
       - examples$
+issues:
+  # Maximum issues count per one linter.
+  # Set to 0 to disable.
+  # Default: 50
+  max-issues-per-linter: 0
+  # Maximum count of issues with the same text.
+  # Set to 0 to disable.
+  # Default: 3
+  max-same-issues: 0

From 47a63218030580edf7bef157a6ed58708056749a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20BIDON?= <fredbi@yahoo.com>
Date: Sun, 10 Aug 2025 15:03:33 +0200
Subject: [PATCH 15/63] fix(lint): fixed false positives in tests (testifylint)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Frédéric BIDON <fredbi@yahoo.com>
---
 schema_test.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/schema_test.go b/schema_test.go
index 8d9085c..9f83de9 100644
--- a/schema_test.go
+++ b/schema_test.go
@@ -200,9 +200,9 @@ func TestSchema(t *testing.T) {
 	exp1 := expEx[0].(map[string]interface{})
 	exp2 := expEx[1].(map[string]interface{})
 
-	assert.EqualValues(t, exp1["id"], ex1["id"])
+	assert.EqualValues(t, exp1["id"], ex1["id"]) //nolint:testifylint // false positive: types are different
 	assert.Equal(t, exp1["name"], ex1["name"])
-	assert.EqualValues(t, exp2["id"], ex2["id"])
+	assert.EqualValues(t, exp2["id"], ex2["id"]) //nolint:testifylint // false positive: types are different
 	assert.Equal(t, exp2["name"], ex2["name"])
 }
 

From e874ac91e8631f0b05f409e21b37c43b9f4ee5cc Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 10 Aug 2025 13:09:03 +0000
Subject: [PATCH 16/63] build(deps): bump github.com/go-openapi/jsonpointer

Bumps the go-openapi-dependencies group with 1 update: [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer).


Updates `github.com/go-openapi/jsonpointer` from 0.21.1 to 0.21.2
- [Commits](https://github.com/go-openapi/jsonpointer/compare/v0.21.1...v0.21.2)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 0.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index 7e12f48..d4c5de3 100644
--- a/go.mod
+++ b/go.mod
@@ -1,7 +1,7 @@
 module github.com/go-openapi/spec
 
 require (
-	github.com/go-openapi/jsonpointer v0.21.1
+	github.com/go-openapi/jsonpointer v0.21.2
 	github.com/go-openapi/jsonreference v0.21.0
 	github.com/go-openapi/swag v0.23.1
 	github.com/stretchr/testify v1.10.0
diff --git a/go.sum b/go.sum
index 1e2ed75..fca3f0c 100644
--- a/go.sum
+++ b/go.sum
@@ -1,7 +1,7 @@
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/go-openapi/jsonpointer v0.21.1 h1:whnzv/pNXtK2FbX/W9yJfRmE2gsmkfahjMKB0fZvcic=
-github.com/go-openapi/jsonpointer v0.21.1/go.mod h1:50I1STOfbY1ycR8jGz8DaMeLCdXiI6aDteEdRNNzpdk=
+github.com/go-openapi/jsonpointer v0.21.2 h1:AqQaNADVwq/VnkCmQg6ogE+M3FOsKTytwges0JdwVuA=
+github.com/go-openapi/jsonpointer v0.21.2/go.mod h1:50I1STOfbY1ycR8jGz8DaMeLCdXiI6aDteEdRNNzpdk=
 github.com/go-openapi/jsonreference v0.21.0 h1:Rs+Y7hSXT83Jacb7kFyjn4ijOuVGSvOdF2+tg1TRrwQ=
 github.com/go-openapi/jsonreference v0.21.0/go.mod h1:LmZmgsrTkVg9LG4EaHeY8cBDslNPMo06cago5JNLkm4=
 github.com/go-openapi/swag v0.23.1 h1:lpsStH0n2ittzTnbaSloVZLuB5+fvSY/+hnagBjSNZU=

From 50d4b571eae23f524564a47581a4016ed582df0d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 15 Aug 2025 10:02:14 +0000
Subject: [PATCH 17/63] build(deps): bump actions/checkout in the
 development-dependencies group

Bumps the development-dependencies group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 4 to 5
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/go-test.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 7165e0f..a723187 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -14,7 +14,7 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-go@v5
         with:
           go-version: stable
@@ -43,7 +43,7 @@ jobs:
         check-latest: true
         cache: true
 
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - name: Run unit tests
       shell: bash
       run: go test -v -race -coverprofile="coverage-${{ matrix.os }}.${{ matrix.go_version }}.out" -covermode=atomic -coverpkg=$(go list)/... ./...

From 26ddb2490e435c4de91b6fca6de9f187a4d9fc3e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 29 Aug 2025 09:01:20 +0000
Subject: [PATCH 18/63] build(deps): bump github.com/stretchr/testify

Bumps the development-dependencies group with 1 update: [github.com/stretchr/testify](https://github.com/stretchr/testify).


Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.10.0...v1.11.1)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index d4c5de3..13b7fa1 100644
--- a/go.mod
+++ b/go.mod
@@ -4,7 +4,7 @@ require (
 	github.com/go-openapi/jsonpointer v0.21.2
 	github.com/go-openapi/jsonreference v0.21.0
 	github.com/go-openapi/swag v0.23.1
-	github.com/stretchr/testify v1.10.0
+	github.com/stretchr/testify v1.11.1
 	gopkg.in/yaml.v3 v3.0.1
 )
 
diff --git a/go.sum b/go.sum
index fca3f0c..ce1c1fa 100644
--- a/go.sum
+++ b/go.sum
@@ -15,8 +15,8 @@ github.com/mailru/easyjson v0.9.0/go.mod h1:1+xMtQp2MRNVL/V1bOzuP3aP8VNwRW55fQUt
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
-github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
-github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
+github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
+github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=

From e935aa92ae13614efc42f836aebdec89d0b63a95 Mon Sep 17 00:00:00 2001
From: Frederic BIDON <fredbi@yahoo.com>
Date: Sat, 30 Aug 2025 13:27:19 +0200
Subject: [PATCH 19/63] chore: adopted swag v0.24.0 modules

go-openapi has introduced a new API to better insulate dependencies.

We move to the new modules, even though at this stage this doesn't
change our indirect dependencies.

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
---
 contact_info.go      |  4 ++--
 go.mod               | 12 +++++++++---
 go.sum               | 24 ++++++++++++++++++------
 header.go            |  4 ++--
 header_test.go       |  6 +++---
 helpers_spec_test.go |  8 ++++----
 helpers_test.go      |  4 ++--
 info.go              |  4 ++--
 items.go             |  4 ++--
 items_test.go        | 10 +++++-----
 license.go           |  4 ++--
 operation.go         |  4 ++--
 parameter.go         |  4 ++--
 parameters_test.go   |  6 +++---
 path_item.go         |  4 ++--
 paths.go             |  4 ++--
 resolver.go          |  4 ++--
 response.go          |  4 ++--
 responses.go         |  4 ++--
 schema.go            |  7 ++++---
 schema_loader.go     | 10 ++++++----
 schema_test.go       |  6 +++---
 security_scheme.go   |  4 ++--
 swagger.go           |  4 ++--
 swagger_test.go      |  4 ++--
 tag.go               |  4 ++--
 validations_test.go  | 20 ++++++++++----------
 27 files changed, 99 insertions(+), 78 deletions(-)

diff --git a/contact_info.go b/contact_info.go
index 2f7bb21..3eaa41e 100644
--- a/contact_info.go
+++ b/contact_info.go
@@ -17,7 +17,7 @@ package spec
 import (
 	"encoding/json"
 
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 // ContactInfo contact information for the exposed API.
@@ -53,5 +53,5 @@ func (c ContactInfo) MarshalJSON() ([]byte, error) {
 	if err != nil {
 		return nil, err
 	}
-	return swag.ConcatJSON(b1, b2), nil
+	return jsonutils.ConcatJSON(b1, b2), nil
 }
diff --git a/go.mod b/go.mod
index 13b7fa1..f2b30cb 100644
--- a/go.mod
+++ b/go.mod
@@ -1,15 +1,21 @@
 module github.com/go-openapi/spec
 
 require (
-	github.com/go-openapi/jsonpointer v0.21.2
-	github.com/go-openapi/jsonreference v0.21.0
-	github.com/go-openapi/swag v0.23.1
+	github.com/go-openapi/jsonpointer v0.22.0
+	github.com/go-openapi/jsonreference v0.21.1
+	github.com/go-openapi/swag/conv v0.24.0
+	github.com/go-openapi/swag/jsonname v0.24.0
+	github.com/go-openapi/swag/jsonutils v0.24.0
+	github.com/go-openapi/swag/loading v0.24.0
+	github.com/go-openapi/swag/stringutils v0.24.0
 	github.com/stretchr/testify v1.11.1
 	gopkg.in/yaml.v3 v3.0.1
 )
 
 require (
 	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/go-openapi/swag/typeutils v0.24.0 // indirect
+	github.com/go-openapi/swag/yamlutils v0.24.0 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/mailru/easyjson v0.9.0 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
diff --git a/go.sum b/go.sum
index ce1c1fa..b4a24c0 100644
--- a/go.sum
+++ b/go.sum
@@ -1,11 +1,23 @@
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/go-openapi/jsonpointer v0.21.2 h1:AqQaNADVwq/VnkCmQg6ogE+M3FOsKTytwges0JdwVuA=
-github.com/go-openapi/jsonpointer v0.21.2/go.mod h1:50I1STOfbY1ycR8jGz8DaMeLCdXiI6aDteEdRNNzpdk=
-github.com/go-openapi/jsonreference v0.21.0 h1:Rs+Y7hSXT83Jacb7kFyjn4ijOuVGSvOdF2+tg1TRrwQ=
-github.com/go-openapi/jsonreference v0.21.0/go.mod h1:LmZmgsrTkVg9LG4EaHeY8cBDslNPMo06cago5JNLkm4=
-github.com/go-openapi/swag v0.23.1 h1:lpsStH0n2ittzTnbaSloVZLuB5+fvSY/+hnagBjSNZU=
-github.com/go-openapi/swag v0.23.1/go.mod h1:STZs8TbRvEQQKUA+JZNAm3EWlgaOBGpyFDqQnDHMef0=
+github.com/go-openapi/jsonpointer v0.22.0 h1:TmMhghgNef9YXxTu1tOopo+0BGEytxA+okbry0HjZsM=
+github.com/go-openapi/jsonpointer v0.22.0/go.mod h1:xt3jV88UtExdIkkL7NloURjRQjbeUgcxFblMjq2iaiU=
+github.com/go-openapi/jsonreference v0.21.1 h1:bSKrcl8819zKiOgxkbVNRUBIr6Wwj9KYrDbMjRs0cDA=
+github.com/go-openapi/jsonreference v0.21.1/go.mod h1:PWs8rO4xxTUqKGu+lEvvCxD5k2X7QYkKAepJyCmSTT8=
+github.com/go-openapi/swag/conv v0.24.0 h1:ejB9+7yogkWly6pnruRX45D1/6J+ZxRu92YFivx54ik=
+github.com/go-openapi/swag/conv v0.24.0/go.mod h1:jbn140mZd7EW2g8a8Y5bwm8/Wy1slLySQQ0ND6DPc2c=
+github.com/go-openapi/swag/jsonname v0.24.0 h1:2wKS9bgRV/xB8c62Qg16w4AUiIrqqiniJFtZGi3dg5k=
+github.com/go-openapi/swag/jsonname v0.24.0/go.mod h1:GXqrPzGJe611P7LG4QB9JKPtUZ7flE4DOVechNaDd7Q=
+github.com/go-openapi/swag/jsonutils v0.24.0 h1:F1vE1q4pg1xtO3HTyJYRmEuJ4jmIp2iZ30bzW5XgZts=
+github.com/go-openapi/swag/jsonutils v0.24.0/go.mod h1:vBowZtF5Z4DDApIoxcIVfR8v0l9oq5PpYRUuteVu6f0=
+github.com/go-openapi/swag/loading v0.24.0 h1:ln/fWTwJp2Zkj5DdaX4JPiddFC5CHQpvaBKycOlceYc=
+github.com/go-openapi/swag/loading v0.24.0/go.mod h1:gShCN4woKZYIxPxbfbyHgjXAhO61m88tmjy0lp/LkJk=
+github.com/go-openapi/swag/stringutils v0.24.0 h1:i4Z/Jawf9EvXOLUbT97O0HbPUja18VdBxeadyAqS1FM=
+github.com/go-openapi/swag/stringutils v0.24.0/go.mod h1:5nUXB4xA0kw2df5PRipZDslPJgJut+NjL7D25zPZ/4w=
+github.com/go-openapi/swag/typeutils v0.24.0 h1:d3szEGzGDf4L2y1gYOSSLeK6h46F+zibnEas2Jm/wIw=
+github.com/go-openapi/swag/typeutils v0.24.0/go.mod h1:q8C3Kmk/vh2VhpCLaoR2MVWOGP8y7Jc8l82qCTd1DYI=
+github.com/go-openapi/swag/yamlutils v0.24.0 h1:bhw4894A7Iw6ne+639hsBNRHg9iZg/ISrOVr+sJGp4c=
+github.com/go-openapi/swag/yamlutils v0.24.0/go.mod h1:DpKv5aYuaGm/sULePoeiG8uwMpZSfReo1HR3Ik0yaG8=
 github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY=
 github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
diff --git a/header.go b/header.go
index 5957fa2..55c415e 100644
--- a/header.go
+++ b/header.go
@@ -19,7 +19,7 @@ import (
 	"strings"
 
 	"github.com/go-openapi/jsonpointer"
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 const (
@@ -161,7 +161,7 @@ func (h Header) MarshalJSON() ([]byte, error) {
 	if err != nil {
 		return nil, err
 	}
-	return swag.ConcatJSON(b1, b2, b3), nil
+	return jsonutils.ConcatJSON(b1, b2, b3), nil
 }
 
 // UnmarshalJSON unmarshals this header from JSON
diff --git a/header_test.go b/header_test.go
index 2aad150..c0753e7 100644
--- a/header_test.go
+++ b/header_test.go
@@ -18,7 +18,7 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/conv"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 )
@@ -172,6 +172,6 @@ func TestWithHeader(t *testing.T) {
 }
 
 func TestHeaderWithValidation(t *testing.T) {
-	h := new(Header).WithValidations(CommonValidations{MaxLength: swag.Int64(15)})
-	assert.Equal(t, swag.Int64(15), h.MaxLength)
+	h := new(Header).WithValidations(CommonValidations{MaxLength: conv.Pointer(int64(15))})
+	assert.Equal(t, conv.Pointer(int64(15)), h.MaxLength)
 }
diff --git a/helpers_spec_test.go b/helpers_spec_test.go
index 4dd12c5..8999f0e 100644
--- a/helpers_spec_test.go
+++ b/helpers_spec_test.go
@@ -8,7 +8,7 @@ import (
 	"testing"
 
 	"github.com/go-openapi/spec"
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/loading"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 )
@@ -21,10 +21,10 @@ var (
 func init() {
 	// mimics what the go-openapi/load does
 	testLoader = func(path string) (json.RawMessage, error) {
-		if swag.YAMLMatcher(path) {
-			return swag.YAMLDoc(path)
+		if loading.YAMLMatcher(path) {
+			return loading.YAMLDoc(path)
 		}
-		data, err := swag.LoadFromFileOrHTTP(path)
+		data, err := loading.LoadFromFileOrHTTP(path)
 		if err != nil {
 			return nil, err
 		}
diff --git a/helpers_test.go b/helpers_test.go
index f16a4dd..4eaf8b4 100644
--- a/helpers_test.go
+++ b/helpers_test.go
@@ -7,7 +7,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/loading"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 )
@@ -15,7 +15,7 @@ import (
 var rex = regexp.MustCompile(`"\$ref":\s*"(.*?)"`)
 
 func jsonDoc(path string) (json.RawMessage, error) {
-	data, err := swag.LoadFromFileOrHTTP(path)
+	data, err := loading.LoadFromFileOrHTTP(path)
 	if err != nil {
 		return nil, err
 	}
diff --git a/info.go b/info.go
index 582f0fd..695cd9a 100644
--- a/info.go
+++ b/info.go
@@ -20,7 +20,7 @@ import (
 	"strings"
 
 	"github.com/go-openapi/jsonpointer"
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 // Extensions vendor specific extensions
@@ -172,7 +172,7 @@ func (i Info) MarshalJSON() ([]byte, error) {
 	if err != nil {
 		return nil, err
 	}
-	return swag.ConcatJSON(b1, b2), nil
+	return jsonutils.ConcatJSON(b1, b2), nil
 }
 
 // UnmarshalJSON marshal this from JSON
diff --git a/items.go b/items.go
index 7404bee..0224673 100644
--- a/items.go
+++ b/items.go
@@ -19,7 +19,7 @@ import (
 	"strings"
 
 	"github.com/go-openapi/jsonpointer"
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 const (
@@ -213,7 +213,7 @@ func (i Items) MarshalJSON() ([]byte, error) {
 	if err != nil {
 		return nil, err
 	}
-	return swag.ConcatJSON(b4, b3, b1, b2), nil
+	return jsonutils.ConcatJSON(b4, b3, b1, b2), nil
 }
 
 // JSONLookup look up a value by the json property name
diff --git a/items_test.go b/items_test.go
index c1d3954..ed21795 100644
--- a/items_test.go
+++ b/items_test.go
@@ -18,7 +18,7 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/conv"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 )
@@ -142,8 +142,8 @@ func TestItemsBuilder(t *testing.T) {
 			},
 			CommonValidations: CommonValidations{
 				Enum:        []interface{}{[]string{"abc", "efg"}, []string{"hij"}},
-				MinItems:    swag.Int64(1),
-				MaxItems:    swag.Int64(4),
+				MinItems:    conv.Pointer(int64(1)),
+				MaxItems:    conv.Pointer(int64(4)),
 				UniqueItems: true,
 			},
 		},
@@ -195,6 +195,6 @@ func TestJSONLookupItems(t *testing.T) {
 }
 
 func TestItemsWithValidation(t *testing.T) {
-	i := new(Items).WithValidations(CommonValidations{MaxLength: swag.Int64(15)})
-	assert.Equal(t, swag.Int64(15), i.MaxLength)
+	i := new(Items).WithValidations(CommonValidations{MaxLength: conv.Pointer(int64(15))})
+	assert.Equal(t, conv.Pointer(int64(15)), i.MaxLength)
 }
diff --git a/license.go b/license.go
index b42f803..09f54fe 100644
--- a/license.go
+++ b/license.go
@@ -17,7 +17,7 @@ package spec
 import (
 	"encoding/json"
 
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 // License information for the exposed API.
@@ -52,5 +52,5 @@ func (l License) MarshalJSON() ([]byte, error) {
 	if err != nil {
 		return nil, err
 	}
-	return swag.ConcatJSON(b1, b2), nil
+	return jsonutils.ConcatJSON(b1, b2), nil
 }
diff --git a/operation.go b/operation.go
index 5c7b6c6..9826219 100644
--- a/operation.go
+++ b/operation.go
@@ -21,7 +21,7 @@ import (
 	"sort"
 
 	"github.com/go-openapi/jsonpointer"
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 func init() {
@@ -141,7 +141,7 @@ func (o Operation) MarshalJSON() ([]byte, error) {
 	if err != nil {
 		return nil, err
 	}
-	concated := swag.ConcatJSON(b1, b2)
+	concated := jsonutils.ConcatJSON(b1, b2)
 	return concated, nil
 }
 
diff --git a/parameter.go b/parameter.go
index 1363a2d..1dd8311 100644
--- a/parameter.go
+++ b/parameter.go
@@ -19,7 +19,7 @@ import (
 	"strings"
 
 	"github.com/go-openapi/jsonpointer"
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 // QueryParam creates a query parameter
@@ -322,5 +322,5 @@ func (p Parameter) MarshalJSON() ([]byte, error) {
 	if err != nil {
 		return nil, err
 	}
-	return swag.ConcatJSON(b3, b1, b2, b4, b5), nil
+	return jsonutils.ConcatJSON(b3, b1, b2, b4, b5), nil
 }
diff --git a/parameters_test.go b/parameters_test.go
index 04955b2..2a730ff 100644
--- a/parameters_test.go
+++ b/parameters_test.go
@@ -18,7 +18,7 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/conv"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 )
@@ -163,6 +163,6 @@ func TestParameterGobEncoding(t *testing.T) {
 }
 
 func TestParametersWithValidation(t *testing.T) {
-	p := new(Parameter).WithValidations(CommonValidations{MaxLength: swag.Int64(15)})
-	assert.Equal(t, swag.Int64(15), p.MaxLength)
+	p := new(Parameter).WithValidations(CommonValidations{MaxLength: conv.Pointer(int64(15))})
+	assert.Equal(t, conv.Pointer(int64(15)), p.MaxLength)
 }
diff --git a/path_item.go b/path_item.go
index 68fc8e9..e51b810 100644
--- a/path_item.go
+++ b/path_item.go
@@ -18,7 +18,7 @@ import (
 	"encoding/json"
 
 	"github.com/go-openapi/jsonpointer"
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 // PathItemProps the path item specific properties
@@ -82,6 +82,6 @@ func (p PathItem) MarshalJSON() ([]byte, error) {
 	if err != nil {
 		return nil, err
 	}
-	concated := swag.ConcatJSON(b3, b4, b5)
+	concated := jsonutils.ConcatJSON(b3, b4, b5)
 	return concated, nil
 }
diff --git a/paths.go b/paths.go
index 42f65ff..b95eadc 100644
--- a/paths.go
+++ b/paths.go
@@ -19,7 +19,7 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 // Paths holds the relative paths to the individual endpoints.
@@ -93,6 +93,6 @@ func (p Paths) MarshalJSON() ([]byte, error) {
 	if err != nil {
 		return nil, err
 	}
-	concated := swag.ConcatJSON(b1, b2)
+	concated := jsonutils.ConcatJSON(b1, b2)
 	return concated, nil
 }
diff --git a/resolver.go b/resolver.go
index 47d1ee1..dd577b0 100644
--- a/resolver.go
+++ b/resolver.go
@@ -3,7 +3,7 @@ package spec
 import (
 	"fmt"
 
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 func resolveAnyWithBase(root interface{}, ref *Ref, result interface{}, options *ExpandOptions) error {
@@ -45,7 +45,7 @@ func ResolveRef(root interface{}, ref *Ref) (*Schema, error) {
 		return sch, nil
 	case map[string]interface{}:
 		newSch := new(Schema)
-		if err = swag.DynamicJSONToStruct(sch, newSch); err != nil {
+		if err = jsonutils.FromDynamicJSON(sch, newSch); err != nil {
 			return nil, err
 		}
 		return newSch, nil
diff --git a/response.go b/response.go
index d71226f..edb60a5 100644
--- a/response.go
+++ b/response.go
@@ -18,7 +18,7 @@ import (
 	"encoding/json"
 
 	"github.com/go-openapi/jsonpointer"
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 // ResponseProps properties specific to a response
@@ -108,7 +108,7 @@ func (r Response) MarshalJSON() ([]byte, error) {
 	if err != nil {
 		return nil, err
 	}
-	return swag.ConcatJSON(b1, b2, b3), nil
+	return jsonutils.ConcatJSON(b1, b2, b3), nil
 }
 
 // WithDescription sets the description on this response, allows for chaining
diff --git a/responses.go b/responses.go
index c133b17..337c6b1 100644
--- a/responses.go
+++ b/responses.go
@@ -21,7 +21,7 @@ import (
 	"strconv"
 	"strings"
 
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 // Responses is a container for the expected responses of an operation.
@@ -83,7 +83,7 @@ func (r Responses) MarshalJSON() ([]byte, error) {
 	if err != nil {
 		return nil, err
 	}
-	concated := swag.ConcatJSON(b1, b2)
+	concated := jsonutils.ConcatJSON(b1, b2)
 	return concated, nil
 }
 
diff --git a/schema.go b/schema.go
index c1043bc..0a49f2d 100644
--- a/schema.go
+++ b/schema.go
@@ -20,7 +20,8 @@ import (
 	"strings"
 
 	"github.com/go-openapi/jsonpointer"
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonname"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 // BooleanProperty creates a boolean property
@@ -593,7 +594,7 @@ func (s Schema) MarshalJSON() ([]byte, error) {
 		}
 		b6 = jj
 	}
-	return swag.ConcatJSON(b1, b2, b3, b4, b5, b6), nil
+	return jsonutils.ConcatJSON(b1, b2, b3, b4, b5, b6), nil
 }
 
 // UnmarshalJSON marshal this from JSON
@@ -621,7 +622,7 @@ func (s *Schema) UnmarshalJSON(data []byte) error {
 
 	delete(d, "$ref")
 	delete(d, "$schema")
-	for _, pn := range swag.DefaultJSONNameProvider.GetJSONNames(s) {
+	for _, pn := range jsonname.DefaultJSONNameProvider.GetJSONNames(s) {
 		delete(d, pn)
 	}
 
diff --git a/schema_loader.go b/schema_loader.go
index 3011ecd..328e5b8 100644
--- a/schema_loader.go
+++ b/schema_loader.go
@@ -22,7 +22,9 @@ import (
 	"reflect"
 	"strings"
 
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
+	"github.com/go-openapi/swag/loading"
+	"github.com/go-openapi/swag/stringutils"
 )
 
 // PathLoader is a function to use when loading remote refs.
@@ -34,7 +36,7 @@ import (
 // this value with its own default (a loader to retrieve YAML documents as
 // well as JSON ones).
 var PathLoader = func(pth string) (json.RawMessage, error) {
-	data, err := swag.LoadFromFileOrHTTP(pth)
+	data, err := loading.LoadFromFileOrHTTP(pth)
 	if err != nil {
 		return nil, err
 	}
@@ -166,7 +168,7 @@ func (r *schemaLoader) resolveRef(ref *Ref, target any, basePath string) error {
 			return err
 		}
 	}
-	return swag.DynamicJSONToStruct(res, target)
+	return jsonutils.FromDynamicJSON(res, target)
 }
 
 func (r *schemaLoader) load(refURL *url.URL) (any, url.URL, bool, error) {
@@ -208,7 +210,7 @@ func (r *schemaLoader) isCircular(ref *Ref, basePath string, parentRefs ...strin
 		foundCycle = true
 		return
 	}
-	foundCycle = swag.ContainsStrings(parentRefs, normalizedRef) // normalized windows url's are lower cased
+	foundCycle = stringutils.ContainsStrings(parentRefs, normalizedRef) // normalized windows url's are lower cased
 	if foundCycle {
 		r.context.circulars[normalizedRef] = true
 	}
diff --git a/schema_test.go b/schema_test.go
index 9f83de9..9b41d37 100644
--- a/schema_test.go
+++ b/schema_test.go
@@ -18,7 +18,7 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/conv"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 )
@@ -214,8 +214,8 @@ func BenchmarkSchemaUnmarshal(b *testing.B) {
 }
 
 func TestSchemaWithValidation(t *testing.T) {
-	s := new(Schema).WithValidations(SchemaValidations{CommonValidations: CommonValidations{MaxLength: swag.Int64(15)}})
-	assert.Equal(t, swag.Int64(15), s.MaxLength)
+	s := new(Schema).WithValidations(SchemaValidations{CommonValidations: CommonValidations{MaxLength: conv.Pointer(int64(15))}})
+	assert.Equal(t, conv.Pointer(int64(15)), s.MaxLength)
 
 	val := mkVal()
 	s = new(Schema).WithValidations(val)
diff --git a/security_scheme.go b/security_scheme.go
index 9d0bdae..2dfe934 100644
--- a/security_scheme.go
+++ b/security_scheme.go
@@ -18,7 +18,7 @@ import (
 	"encoding/json"
 
 	"github.com/go-openapi/jsonpointer"
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 const (
@@ -158,7 +158,7 @@ func (s SecurityScheme) MarshalJSON() ([]byte, error) {
 	if err != nil {
 		return nil, err
 	}
-	return swag.ConcatJSON(b1, b2), nil
+	return jsonutils.ConcatJSON(b1, b2), nil
 }
 
 // UnmarshalJSON marshal this from JSON
diff --git a/swagger.go b/swagger.go
index 977c2f0..0e73759 100644
--- a/swagger.go
+++ b/swagger.go
@@ -22,7 +22,7 @@ import (
 	"strconv"
 
 	"github.com/go-openapi/jsonpointer"
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 // Swagger this is the root document object for the API specification.
@@ -54,7 +54,7 @@ func (s Swagger) MarshalJSON() ([]byte, error) {
 	if err != nil {
 		return nil, err
 	}
-	return swag.ConcatJSON(b1, b2), nil
+	return jsonutils.ConcatJSON(b1, b2), nil
 }
 
 // UnmarshalJSON unmarshals a swagger spec from json
diff --git a/swagger_test.go b/swagger_test.go
index da260dd..265311a 100644
--- a/swagger_test.go
+++ b/swagger_test.go
@@ -129,7 +129,7 @@ const specJSON = `{
 		expectedType := reflect.TypeOf(expected)
 		if reflect.TypeOf(actual).ConvertibleTo(expectedType) {
 			expectedValue := reflect.ValueOf(expected)
-			if swag.IsZero(expectedValue) && swag.IsZero(reflect.ValueOf(actual)) {
+			if typeutil.IsZero(expectedValue) && typeutils.IsZero(reflect.ValueOf(actual)) {
 				return true
 			}
 
@@ -162,7 +162,7 @@ const specJSON = `{
 		expectedType := reflect.TypeOf(expected)
 		if reflect.TypeOf(actual).ConvertibleTo(expectedType) {
 			expectedValue := reflect.ValueOf(expected)
-			if swag.IsZero(expectedValue) && swag.IsZero(reflect.ValueOf(actual)) {
+			if typeutils.IsZero(expectedValue) && typeutils.IsZero(reflect.ValueOf(actual)) {
 				return ""
 			}
 
diff --git a/tag.go b/tag.go
index 33ae73d..baf1f3d 100644
--- a/tag.go
+++ b/tag.go
@@ -18,7 +18,7 @@ import (
 	"encoding/json"
 
 	"github.com/go-openapi/jsonpointer"
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/jsonutils"
 )
 
 // TagProps describe a tag entry in the top level tags section of a swagger spec
@@ -63,7 +63,7 @@ func (t Tag) MarshalJSON() ([]byte, error) {
 	if err != nil {
 		return nil, err
 	}
-	return swag.ConcatJSON(b1, b2), nil
+	return jsonutils.ConcatJSON(b1, b2), nil
 }
 
 // UnmarshalJSON marshal this from JSON
diff --git a/validations_test.go b/validations_test.go
index e2d9d8c..2649e9f 100644
--- a/validations_test.go
+++ b/validations_test.go
@@ -3,32 +3,32 @@ package spec
 import (
 	"testing"
 
-	"github.com/go-openapi/swag"
+	"github.com/go-openapi/swag/conv"
 	"github.com/stretchr/testify/require"
 )
 
 func mkVal() SchemaValidations {
 	return SchemaValidations{
 		CommonValidations: CommonValidations{
-			Maximum:          swag.Float64(2.5),
+			Maximum:          conv.Pointer(2.5),
 			ExclusiveMaximum: true,
-			Minimum:          swag.Float64(3.4),
+			Minimum:          conv.Pointer(3.4),
 			ExclusiveMinimum: true,
-			MaxLength:        swag.Int64(15),
-			MinLength:        swag.Int64(16),
+			MaxLength:        conv.Pointer(int64(15)),
+			MinLength:        conv.Pointer(int64(16)),
 			Pattern:          "abc",
-			MaxItems:         swag.Int64(17),
-			MinItems:         swag.Int64(18),
+			MaxItems:         conv.Pointer(int64(17)),
+			MinItems:         conv.Pointer(int64(18)),
 			UniqueItems:      true,
-			MultipleOf:       swag.Float64(4.4),
+			MultipleOf:       conv.Pointer(4.4),
 			Enum:             []interface{}{"a", 12.5},
 		},
 		PatternProperties: SchemaProperties{
 			"x": *BooleanProperty(),
 			"y": *BooleanProperty(),
 		},
-		MinProperties: swag.Int64(19),
-		MaxProperties: swag.Int64(20),
+		MinProperties: conv.Pointer(int64(19)),
+		MaxProperties: conv.Pointer(int64(20)),
 	}
 }
 

From 496cf725ea8dbc0ba2f0c0b8b51aba31147dafae Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 5 Sep 2025 09:03:25 +0000
Subject: [PATCH 20/63] build(deps): bump actions/setup-go in the
 development-dependencies group

Bumps the development-dependencies group with 1 update: [actions/setup-go](https://github.com/actions/setup-go).


Updates `actions/setup-go` from 5 to 6
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/go-test.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index a723187..6c2e0a1 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version: stable
           check-latest: true
@@ -37,7 +37,7 @@ jobs:
         go_version: ['oldstable', 'stable' ]
 
     steps:
-    - uses: actions/setup-go@v5
+    - uses: actions/setup-go@v6
       with:
         go-version: '${{ matrix.go_version }}'
         check-latest: true

From 3dbaee0ae0317124e808a75da64362ee00e54afb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 26 Sep 2025 09:01:55 +0000
Subject: [PATCH 21/63] build(deps): bump the go-openapi-dependencies group
 with 5 updates

Bumps the go-openapi-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-openapi/swag/conv](https://github.com/go-openapi/swag) | `0.24.0` | `0.25.0` |
| [github.com/go-openapi/swag/jsonname](https://github.com/go-openapi/swag) | `0.24.0` | `0.25.0` |
| [github.com/go-openapi/swag/jsonutils](https://github.com/go-openapi/swag) | `0.24.0` | `0.25.0` |
| [github.com/go-openapi/swag/loading](https://github.com/go-openapi/swag) | `0.24.0` | `0.25.0` |
| [github.com/go-openapi/swag/stringutils](https://github.com/go-openapi/swag) | `0.24.0` | `0.25.0` |


Updates `github.com/go-openapi/swag/conv` from 0.24.0 to 0.25.0
- [Commits](https://github.com/go-openapi/swag/compare/v0.24.0...v0.25.0)

Updates `github.com/go-openapi/swag/jsonname` from 0.24.0 to 0.25.0
- [Commits](https://github.com/go-openapi/swag/compare/v0.24.0...v0.25.0)

Updates `github.com/go-openapi/swag/jsonutils` from 0.24.0 to 0.25.0
- [Commits](https://github.com/go-openapi/swag/compare/v0.24.0...v0.25.0)

Updates `github.com/go-openapi/swag/loading` from 0.24.0 to 0.25.0
- [Commits](https://github.com/go-openapi/swag/compare/v0.24.0...v0.25.0)

Updates `github.com/go-openapi/swag/stringutils` from 0.24.0 to 0.25.0
- [Commits](https://github.com/go-openapi/swag/compare/v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/swag/conv
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/jsonname
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/jsonutils
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/loading
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/stringutils
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-openapi-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 go.mod | 19 +++++++++----------
 go.sum | 40 ++++++++++++++++++++++------------------
 2 files changed, 31 insertions(+), 28 deletions(-)

diff --git a/go.mod b/go.mod
index f2b30cb..40d338c 100644
--- a/go.mod
+++ b/go.mod
@@ -3,22 +3,21 @@ module github.com/go-openapi/spec
 require (
 	github.com/go-openapi/jsonpointer v0.22.0
 	github.com/go-openapi/jsonreference v0.21.1
-	github.com/go-openapi/swag/conv v0.24.0
-	github.com/go-openapi/swag/jsonname v0.24.0
-	github.com/go-openapi/swag/jsonutils v0.24.0
-	github.com/go-openapi/swag/loading v0.24.0
-	github.com/go-openapi/swag/stringutils v0.24.0
+	github.com/go-openapi/swag/conv v0.25.0
+	github.com/go-openapi/swag/jsonname v0.25.0
+	github.com/go-openapi/swag/jsonutils v0.25.0
+	github.com/go-openapi/swag/loading v0.25.0
+	github.com/go-openapi/swag/stringutils v0.25.0
 	github.com/stretchr/testify v1.11.1
 	gopkg.in/yaml.v3 v3.0.1
 )
 
 require (
 	github.com/davecgh/go-spew v1.1.1 // indirect
-	github.com/go-openapi/swag/typeutils v0.24.0 // indirect
-	github.com/go-openapi/swag/yamlutils v0.24.0 // indirect
-	github.com/josharian/intern v1.0.0 // indirect
-	github.com/mailru/easyjson v0.9.0 // indirect
+	github.com/go-openapi/swag/typeutils v0.25.0 // indirect
+	github.com/go-openapi/swag/yamlutils v0.25.0 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
+	go.yaml.in/yaml/v3 v3.0.4 // indirect
 )
 
-go 1.20
+go 1.24.0
diff --git a/go.sum b/go.sum
index b4a24c0..0b6bc38 100644
--- a/go.sum
+++ b/go.sum
@@ -4,32 +4,36 @@ github.com/go-openapi/jsonpointer v0.22.0 h1:TmMhghgNef9YXxTu1tOopo+0BGEytxA+okb
 github.com/go-openapi/jsonpointer v0.22.0/go.mod h1:xt3jV88UtExdIkkL7NloURjRQjbeUgcxFblMjq2iaiU=
 github.com/go-openapi/jsonreference v0.21.1 h1:bSKrcl8819zKiOgxkbVNRUBIr6Wwj9KYrDbMjRs0cDA=
 github.com/go-openapi/jsonreference v0.21.1/go.mod h1:PWs8rO4xxTUqKGu+lEvvCxD5k2X7QYkKAepJyCmSTT8=
-github.com/go-openapi/swag/conv v0.24.0 h1:ejB9+7yogkWly6pnruRX45D1/6J+ZxRu92YFivx54ik=
-github.com/go-openapi/swag/conv v0.24.0/go.mod h1:jbn140mZd7EW2g8a8Y5bwm8/Wy1slLySQQ0ND6DPc2c=
-github.com/go-openapi/swag/jsonname v0.24.0 h1:2wKS9bgRV/xB8c62Qg16w4AUiIrqqiniJFtZGi3dg5k=
-github.com/go-openapi/swag/jsonname v0.24.0/go.mod h1:GXqrPzGJe611P7LG4QB9JKPtUZ7flE4DOVechNaDd7Q=
-github.com/go-openapi/swag/jsonutils v0.24.0 h1:F1vE1q4pg1xtO3HTyJYRmEuJ4jmIp2iZ30bzW5XgZts=
-github.com/go-openapi/swag/jsonutils v0.24.0/go.mod h1:vBowZtF5Z4DDApIoxcIVfR8v0l9oq5PpYRUuteVu6f0=
-github.com/go-openapi/swag/loading v0.24.0 h1:ln/fWTwJp2Zkj5DdaX4JPiddFC5CHQpvaBKycOlceYc=
-github.com/go-openapi/swag/loading v0.24.0/go.mod h1:gShCN4woKZYIxPxbfbyHgjXAhO61m88tmjy0lp/LkJk=
-github.com/go-openapi/swag/stringutils v0.24.0 h1:i4Z/Jawf9EvXOLUbT97O0HbPUja18VdBxeadyAqS1FM=
-github.com/go-openapi/swag/stringutils v0.24.0/go.mod h1:5nUXB4xA0kw2df5PRipZDslPJgJut+NjL7D25zPZ/4w=
-github.com/go-openapi/swag/typeutils v0.24.0 h1:d3szEGzGDf4L2y1gYOSSLeK6h46F+zibnEas2Jm/wIw=
-github.com/go-openapi/swag/typeutils v0.24.0/go.mod h1:q8C3Kmk/vh2VhpCLaoR2MVWOGP8y7Jc8l82qCTd1DYI=
-github.com/go-openapi/swag/yamlutils v0.24.0 h1:bhw4894A7Iw6ne+639hsBNRHg9iZg/ISrOVr+sJGp4c=
-github.com/go-openapi/swag/yamlutils v0.24.0/go.mod h1:DpKv5aYuaGm/sULePoeiG8uwMpZSfReo1HR3Ik0yaG8=
-github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY=
-github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y=
+github.com/go-openapi/swag/conv v0.25.0 h1:5K+e44HkOgCVE0IJTbivurzHahT62DPr2DEJqR/+4pA=
+github.com/go-openapi/swag/conv v0.25.0/go.mod h1:oa1ZZnb1jubNdZlD1iAhGXt6Ic4hHtuO23MwTgAXR88=
+github.com/go-openapi/swag/jsonname v0.25.0 h1:+fuNs9gdkb2w10hgsgOBx9jtx0pvtUaDRYxD91BEpEQ=
+github.com/go-openapi/swag/jsonname v0.25.0/go.mod h1:71Tekow6UOLBD3wS7XhdT98g5J5GR13NOTQ9/6Q11Zo=
+github.com/go-openapi/swag/jsonutils v0.25.0 h1:ELKpJT29T4N/AvmDqMeDFLx2QRZQOYFthzctbIX30+A=
+github.com/go-openapi/swag/jsonutils v0.25.0/go.mod h1:KYL8GyGoi6tek9ajpvn0le4BWmKoUVVv8yPxklViIMo=
+github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.0 h1:ca9vKxLnJegL2bzqXRWNabKdqVGxBzrnO8/UZnr5W0Y=
+github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.0/go.mod h1:kjmweouyPwRUEYMSrbAidoLMGeJ5p6zdHi9BgZiqmsg=
+github.com/go-openapi/swag/loading v0.25.0 h1:e9mjE5fJeaK0LTepHMtG0Ief+9ETXLFhWCx7ZfiI6LI=
+github.com/go-openapi/swag/loading v0.25.0/go.mod h1:2ZCWXwVY1XYuoue8Bdjbn5GJK4/ufXbCfcvoSPFQJqM=
+github.com/go-openapi/swag/stringutils v0.25.0 h1:iYfCF45GUeI/1Yrh8rQtTFCp5K1ToqWhUdzJZwvXvv8=
+github.com/go-openapi/swag/stringutils v0.25.0/go.mod h1:JLdSAq5169HaiDUbTvArA2yQxmgn4D6h4A+4HqVvAYg=
+github.com/go-openapi/swag/typeutils v0.25.0 h1:iUTsxu3F3h9v6CBzVFGXKPSBQt6d8XXgYy1YAlu+HJ8=
+github.com/go-openapi/swag/typeutils v0.25.0/go.mod h1:9McMC/oCdS4BKwk2shEB7x17P6HmMmA6dQRtAkSnNb8=
+github.com/go-openapi/swag/yamlutils v0.25.0 h1:apgy77seWLEM9HKDcieIgW8bG9aSZgH6nQ9THlHYgHA=
+github.com/go-openapi/swag/yamlutils v0.25.0/go.mod h1:0JvBRtc0mR02IqHURUeGgS9cG+Dfms4FCGXCnsgnt7c=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
+github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
-github.com/mailru/easyjson v0.9.0 h1:PrnmzHw7262yW8sTBwxi1PdJA3Iw/EKBa8psRf7d9a4=
-github.com/mailru/easyjson v0.9.0/go.mod h1:1+xMtQp2MRNVL/V1bOzuP3aP8VNwRW55fQUto+XFtTU=
+github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
+github.com/rogpeppe/go-internal v1.11.0/go.mod h1:ddIwULY96R17DhadqLgMfk9H9tvdUzkipdSkR5nkCZA=
 github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
 github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
+go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
+go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=

From df1210825d5b6e046cccddcd63511f179651d65b Mon Sep 17 00:00:00 2001
From: Frederic BIDON <fredbi@yahoo.com>
Date: Fri, 26 Sep 2025 19:16:09 +0200
Subject: [PATCH 22/63] chore(deps): updated dependencies

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
---
 go.mod | 18 +++++++++---------
 go.sum | 18 ++++++++++++++++++
 2 files changed, 27 insertions(+), 9 deletions(-)

diff --git a/go.mod b/go.mod
index 40d338c..57fb5cc 100644
--- a/go.mod
+++ b/go.mod
@@ -1,21 +1,21 @@
 module github.com/go-openapi/spec
 
 require (
-	github.com/go-openapi/jsonpointer v0.22.0
-	github.com/go-openapi/jsonreference v0.21.1
-	github.com/go-openapi/swag/conv v0.25.0
-	github.com/go-openapi/swag/jsonname v0.25.0
-	github.com/go-openapi/swag/jsonutils v0.25.0
-	github.com/go-openapi/swag/loading v0.25.0
-	github.com/go-openapi/swag/stringutils v0.25.0
+	github.com/go-openapi/jsonpointer v0.22.1
+	github.com/go-openapi/jsonreference v0.21.2
+	github.com/go-openapi/swag/conv v0.25.1
+	github.com/go-openapi/swag/jsonname v0.25.1
+	github.com/go-openapi/swag/jsonutils v0.25.1
+	github.com/go-openapi/swag/loading v0.25.1
+	github.com/go-openapi/swag/stringutils v0.25.1
 	github.com/stretchr/testify v1.11.1
 	gopkg.in/yaml.v3 v3.0.1
 )
 
 require (
 	github.com/davecgh/go-spew v1.1.1 // indirect
-	github.com/go-openapi/swag/typeutils v0.25.0 // indirect
-	github.com/go-openapi/swag/yamlutils v0.25.0 // indirect
+	github.com/go-openapi/swag/typeutils v0.25.1 // indirect
+	github.com/go-openapi/swag/yamlutils v0.25.1 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
 )
diff --git a/go.sum b/go.sum
index 0b6bc38..b3d9888 100644
--- a/go.sum
+++ b/go.sum
@@ -2,24 +2,42 @@ github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/go-openapi/jsonpointer v0.22.0 h1:TmMhghgNef9YXxTu1tOopo+0BGEytxA+okbry0HjZsM=
 github.com/go-openapi/jsonpointer v0.22.0/go.mod h1:xt3jV88UtExdIkkL7NloURjRQjbeUgcxFblMjq2iaiU=
+github.com/go-openapi/jsonpointer v0.22.1 h1:sHYI1He3b9NqJ4wXLoJDKmUmHkWy/L7rtEo92JUxBNk=
+github.com/go-openapi/jsonpointer v0.22.1/go.mod h1:pQT9OsLkfz1yWoMgYFy4x3U5GY5nUlsOn1qSBH5MkCM=
 github.com/go-openapi/jsonreference v0.21.1 h1:bSKrcl8819zKiOgxkbVNRUBIr6Wwj9KYrDbMjRs0cDA=
 github.com/go-openapi/jsonreference v0.21.1/go.mod h1:PWs8rO4xxTUqKGu+lEvvCxD5k2X7QYkKAepJyCmSTT8=
+github.com/go-openapi/jsonreference v0.21.2 h1:Wxjda4M/BBQllegefXrY/9aq1fxBA8sI5M/lFU6tSWU=
+github.com/go-openapi/jsonreference v0.21.2/go.mod h1:pp3PEjIsJ9CZDGCNOyXIQxsNuroxm8FAJ/+quA0yKzQ=
 github.com/go-openapi/swag/conv v0.25.0 h1:5K+e44HkOgCVE0IJTbivurzHahT62DPr2DEJqR/+4pA=
 github.com/go-openapi/swag/conv v0.25.0/go.mod h1:oa1ZZnb1jubNdZlD1iAhGXt6Ic4hHtuO23MwTgAXR88=
+github.com/go-openapi/swag/conv v0.25.1 h1:+9o8YUg6QuqqBM5X6rYL/p1dpWeZRhoIt9x7CCP+he0=
+github.com/go-openapi/swag/conv v0.25.1/go.mod h1:Z1mFEGPfyIKPu0806khI3zF+/EUXde+fdeksUl2NiDs=
 github.com/go-openapi/swag/jsonname v0.25.0 h1:+fuNs9gdkb2w10hgsgOBx9jtx0pvtUaDRYxD91BEpEQ=
 github.com/go-openapi/swag/jsonname v0.25.0/go.mod h1:71Tekow6UOLBD3wS7XhdT98g5J5GR13NOTQ9/6Q11Zo=
+github.com/go-openapi/swag/jsonname v0.25.1 h1:Sgx+qbwa4ej6AomWC6pEfXrA6uP2RkaNjA9BR8a1RJU=
+github.com/go-openapi/swag/jsonname v0.25.1/go.mod h1:71Tekow6UOLBD3wS7XhdT98g5J5GR13NOTQ9/6Q11Zo=
 github.com/go-openapi/swag/jsonutils v0.25.0 h1:ELKpJT29T4N/AvmDqMeDFLx2QRZQOYFthzctbIX30+A=
 github.com/go-openapi/swag/jsonutils v0.25.0/go.mod h1:KYL8GyGoi6tek9ajpvn0le4BWmKoUVVv8yPxklViIMo=
+github.com/go-openapi/swag/jsonutils v0.25.1 h1:AihLHaD0brrkJoMqEZOBNzTLnk81Kg9cWr+SPtxtgl8=
+github.com/go-openapi/swag/jsonutils v0.25.1/go.mod h1:JpEkAjxQXpiaHmRO04N1zE4qbUEg3b7Udll7AMGTNOo=
 github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.0 h1:ca9vKxLnJegL2bzqXRWNabKdqVGxBzrnO8/UZnr5W0Y=
 github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.0/go.mod h1:kjmweouyPwRUEYMSrbAidoLMGeJ5p6zdHi9BgZiqmsg=
 github.com/go-openapi/swag/loading v0.25.0 h1:e9mjE5fJeaK0LTepHMtG0Ief+9ETXLFhWCx7ZfiI6LI=
 github.com/go-openapi/swag/loading v0.25.0/go.mod h1:2ZCWXwVY1XYuoue8Bdjbn5GJK4/ufXbCfcvoSPFQJqM=
+github.com/go-openapi/swag/loading v0.25.1 h1:6OruqzjWoJyanZOim58iG2vj934TysYVptyaoXS24kw=
+github.com/go-openapi/swag/loading v0.25.1/go.mod h1:xoIe2EG32NOYYbqxvXgPzne989bWvSNoWoyQVWEZicc=
 github.com/go-openapi/swag/stringutils v0.25.0 h1:iYfCF45GUeI/1Yrh8rQtTFCp5K1ToqWhUdzJZwvXvv8=
 github.com/go-openapi/swag/stringutils v0.25.0/go.mod h1:JLdSAq5169HaiDUbTvArA2yQxmgn4D6h4A+4HqVvAYg=
+github.com/go-openapi/swag/stringutils v0.25.1 h1:Xasqgjvk30eUe8VKdmyzKtjkVjeiXx1Iz0zDfMNpPbw=
+github.com/go-openapi/swag/stringutils v0.25.1/go.mod h1:JLdSAq5169HaiDUbTvArA2yQxmgn4D6h4A+4HqVvAYg=
 github.com/go-openapi/swag/typeutils v0.25.0 h1:iUTsxu3F3h9v6CBzVFGXKPSBQt6d8XXgYy1YAlu+HJ8=
 github.com/go-openapi/swag/typeutils v0.25.0/go.mod h1:9McMC/oCdS4BKwk2shEB7x17P6HmMmA6dQRtAkSnNb8=
+github.com/go-openapi/swag/typeutils v0.25.1 h1:rD/9HsEQieewNt6/k+JBwkxuAHktFtH3I3ysiFZqukA=
+github.com/go-openapi/swag/typeutils v0.25.1/go.mod h1:9McMC/oCdS4BKwk2shEB7x17P6HmMmA6dQRtAkSnNb8=
 github.com/go-openapi/swag/yamlutils v0.25.0 h1:apgy77seWLEM9HKDcieIgW8bG9aSZgH6nQ9THlHYgHA=
 github.com/go-openapi/swag/yamlutils v0.25.0/go.mod h1:0JvBRtc0mR02IqHURUeGgS9cG+Dfms4FCGXCnsgnt7c=
+github.com/go-openapi/swag/yamlutils v0.25.1 h1:mry5ez8joJwzvMbaTGLhw8pXUnhDK91oSJLDPF1bmGk=
+github.com/go-openapi/swag/yamlutils v0.25.1/go.mod h1:cm9ywbzncy3y6uPm/97ysW8+wZ09qsks+9RS8fLWKqg=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=

From 053aef4f818d83fe94451b94d8fea0e2d673d212 Mon Sep 17 00:00:00 2001
From: Frederic BIDON <fredbi@yahoo.com>
Date: Fri, 26 Sep 2025 19:18:44 +0200
Subject: [PATCH 23/63] updated linting rules to go1.24

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
---
 .golangci.yml  |  2 +-
 schema_test.go | 28 ++++++++++++++--------------
 2 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/.golangci.yml b/.golangci.yml
index 568ce16..7cea1af 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -16,7 +16,7 @@ linters:
     - godox
     - gosmopolitan
     - inamedparam
-    - intrange # disabled while < go1.22
+    #- intrange # disabled while < go1.22
     - ireturn
     - lll
     - musttag
diff --git a/schema_test.go b/schema_test.go
index 9b41d37..78ec610 100644
--- a/schema_test.go
+++ b/schema_test.go
@@ -24,7 +24,7 @@ import (
 )
 
 var schema = Schema{
-	VendorExtensible: VendorExtensible{Extensions: map[string]interface{}{"x-framework": "go-swagger"}},
+	VendorExtensible: VendorExtensible{Extensions: map[string]any{"x-framework": "go-swagger"}},
 	SchemaProps: SchemaProps{
 		Ref:              MustCreateRef("Cat"),
 		Type:             []string{"string"},
@@ -43,7 +43,7 @@ var schema = Schema{
 		MinItems:         int64Ptr(5),
 		UniqueItems:      true,
 		MultipleOf:       float64Ptr(5),
-		Enum:             []interface{}{"hello", "world"},
+		Enum:             []any{"hello", "world"},
 		MaxProperties:    int64Ptr(5),
 		MinProperties:    int64Ptr(1),
 		Required:         []string{"id", "name"},
@@ -66,12 +66,12 @@ var schema = Schema{
 			Description: "the documentation etc",
 			URL:         "http://readthedocs.org/swagger",
 		},
-		Example: []interface{}{
-			map[string]interface{}{
+		Example: []any{
+			map[string]any{
 				"id":   1,
 				"name": "a book",
 			},
-			map[string]interface{}{
+			map[string]any{
 				"id":   2,
 				"name": "the thing",
 			},
@@ -151,12 +151,12 @@ var schemaJSON = `{
 
 func TestSchema(t *testing.T) {
 
-	expected := map[string]interface{}{}
+	expected := map[string]any{}
 	_ = json.Unmarshal([]byte(schemaJSON), &expected)
 	b, err := json.Marshal(schema)
 	require.NoError(t, err)
 
-	var actual map[string]interface{}
+	var actual map[string]any
 	require.NoError(t, json.Unmarshal(b, &actual))
 	assert.Equal(t, expected, actual)
 
@@ -193,12 +193,12 @@ func TestSchema(t *testing.T) {
 	assert.Equal(t, schema.AdditionalProperties, actual2.AdditionalProperties)
 	assert.Equal(t, schema.Extensions, actual2.Extensions)
 
-	examples := actual2.Example.([]interface{})
-	expEx := schema.Example.([]interface{})
-	ex1 := examples[0].(map[string]interface{})
-	ex2 := examples[1].(map[string]interface{})
-	exp1 := expEx[0].(map[string]interface{})
-	exp2 := expEx[1].(map[string]interface{})
+	examples := actual2.Example.([]any)
+	expEx := schema.Example.([]any)
+	ex1 := examples[0].(map[string]any)
+	ex2 := examples[1].(map[string]any)
+	exp1 := expEx[0].(map[string]any)
+	exp2 := expEx[1].(map[string]any)
 
 	assert.EqualValues(t, exp1["id"], ex1["id"]) //nolint:testifylint // false positive: types are different
 	assert.Equal(t, exp1["name"], ex1["name"])
@@ -207,7 +207,7 @@ func TestSchema(t *testing.T) {
 }
 
 func BenchmarkSchemaUnmarshal(b *testing.B) {
-	for i := 0; i < b.N; i++ {
+	for b.Loop() {
 		sch := &Schema{}
 		_ = sch.UnmarshalJSON([]byte(schemaJSON))
 	}

From e3141f6b18adf12bf92e5cd1afc103a84cc7b71e Mon Sep 17 00:00:00 2001
From: Frederic BIDON <fredbi@yahoo.com>
Date: Fri, 26 Sep 2025 19:21:25 +0200
Subject: [PATCH 24/63] updated yaml dependency to maintained package

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
---
 go.mod          |  4 ++--
 go.sum          | 22 ++--------------------
 structs_test.go |  2 +-
 3 files changed, 5 insertions(+), 23 deletions(-)

diff --git a/go.mod b/go.mod
index 57fb5cc..1137b98 100644
--- a/go.mod
+++ b/go.mod
@@ -9,7 +9,7 @@ require (
 	github.com/go-openapi/swag/loading v0.25.1
 	github.com/go-openapi/swag/stringutils v0.25.1
 	github.com/stretchr/testify v1.11.1
-	gopkg.in/yaml.v3 v3.0.1
+	go.yaml.in/yaml/v3 v3.0.4
 )
 
 require (
@@ -17,7 +17,7 @@ require (
 	github.com/go-openapi/swag/typeutils v0.25.1 // indirect
 	github.com/go-openapi/swag/yamlutils v0.25.1 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
-	go.yaml.in/yaml/v3 v3.0.4 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
 
 go 1.24.0
diff --git a/go.sum b/go.sum
index b3d9888..0b75a32 100644
--- a/go.sum
+++ b/go.sum
@@ -1,41 +1,23 @@
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/go-openapi/jsonpointer v0.22.0 h1:TmMhghgNef9YXxTu1tOopo+0BGEytxA+okbry0HjZsM=
-github.com/go-openapi/jsonpointer v0.22.0/go.mod h1:xt3jV88UtExdIkkL7NloURjRQjbeUgcxFblMjq2iaiU=
 github.com/go-openapi/jsonpointer v0.22.1 h1:sHYI1He3b9NqJ4wXLoJDKmUmHkWy/L7rtEo92JUxBNk=
 github.com/go-openapi/jsonpointer v0.22.1/go.mod h1:pQT9OsLkfz1yWoMgYFy4x3U5GY5nUlsOn1qSBH5MkCM=
-github.com/go-openapi/jsonreference v0.21.1 h1:bSKrcl8819zKiOgxkbVNRUBIr6Wwj9KYrDbMjRs0cDA=
-github.com/go-openapi/jsonreference v0.21.1/go.mod h1:PWs8rO4xxTUqKGu+lEvvCxD5k2X7QYkKAepJyCmSTT8=
 github.com/go-openapi/jsonreference v0.21.2 h1:Wxjda4M/BBQllegefXrY/9aq1fxBA8sI5M/lFU6tSWU=
 github.com/go-openapi/jsonreference v0.21.2/go.mod h1:pp3PEjIsJ9CZDGCNOyXIQxsNuroxm8FAJ/+quA0yKzQ=
-github.com/go-openapi/swag/conv v0.25.0 h1:5K+e44HkOgCVE0IJTbivurzHahT62DPr2DEJqR/+4pA=
-github.com/go-openapi/swag/conv v0.25.0/go.mod h1:oa1ZZnb1jubNdZlD1iAhGXt6Ic4hHtuO23MwTgAXR88=
 github.com/go-openapi/swag/conv v0.25.1 h1:+9o8YUg6QuqqBM5X6rYL/p1dpWeZRhoIt9x7CCP+he0=
 github.com/go-openapi/swag/conv v0.25.1/go.mod h1:Z1mFEGPfyIKPu0806khI3zF+/EUXde+fdeksUl2NiDs=
-github.com/go-openapi/swag/jsonname v0.25.0 h1:+fuNs9gdkb2w10hgsgOBx9jtx0pvtUaDRYxD91BEpEQ=
-github.com/go-openapi/swag/jsonname v0.25.0/go.mod h1:71Tekow6UOLBD3wS7XhdT98g5J5GR13NOTQ9/6Q11Zo=
 github.com/go-openapi/swag/jsonname v0.25.1 h1:Sgx+qbwa4ej6AomWC6pEfXrA6uP2RkaNjA9BR8a1RJU=
 github.com/go-openapi/swag/jsonname v0.25.1/go.mod h1:71Tekow6UOLBD3wS7XhdT98g5J5GR13NOTQ9/6Q11Zo=
-github.com/go-openapi/swag/jsonutils v0.25.0 h1:ELKpJT29T4N/AvmDqMeDFLx2QRZQOYFthzctbIX30+A=
-github.com/go-openapi/swag/jsonutils v0.25.0/go.mod h1:KYL8GyGoi6tek9ajpvn0le4BWmKoUVVv8yPxklViIMo=
 github.com/go-openapi/swag/jsonutils v0.25.1 h1:AihLHaD0brrkJoMqEZOBNzTLnk81Kg9cWr+SPtxtgl8=
 github.com/go-openapi/swag/jsonutils v0.25.1/go.mod h1:JpEkAjxQXpiaHmRO04N1zE4qbUEg3b7Udll7AMGTNOo=
-github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.0 h1:ca9vKxLnJegL2bzqXRWNabKdqVGxBzrnO8/UZnr5W0Y=
-github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.0/go.mod h1:kjmweouyPwRUEYMSrbAidoLMGeJ5p6zdHi9BgZiqmsg=
-github.com/go-openapi/swag/loading v0.25.0 h1:e9mjE5fJeaK0LTepHMtG0Ief+9ETXLFhWCx7ZfiI6LI=
-github.com/go-openapi/swag/loading v0.25.0/go.mod h1:2ZCWXwVY1XYuoue8Bdjbn5GJK4/ufXbCfcvoSPFQJqM=
+github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.1 h1:DSQGcdB6G0N9c/KhtpYc71PzzGEIc/fZ1no35x4/XBY=
+github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.1/go.mod h1:kjmweouyPwRUEYMSrbAidoLMGeJ5p6zdHi9BgZiqmsg=
 github.com/go-openapi/swag/loading v0.25.1 h1:6OruqzjWoJyanZOim58iG2vj934TysYVptyaoXS24kw=
 github.com/go-openapi/swag/loading v0.25.1/go.mod h1:xoIe2EG32NOYYbqxvXgPzne989bWvSNoWoyQVWEZicc=
-github.com/go-openapi/swag/stringutils v0.25.0 h1:iYfCF45GUeI/1Yrh8rQtTFCp5K1ToqWhUdzJZwvXvv8=
-github.com/go-openapi/swag/stringutils v0.25.0/go.mod h1:JLdSAq5169HaiDUbTvArA2yQxmgn4D6h4A+4HqVvAYg=
 github.com/go-openapi/swag/stringutils v0.25.1 h1:Xasqgjvk30eUe8VKdmyzKtjkVjeiXx1Iz0zDfMNpPbw=
 github.com/go-openapi/swag/stringutils v0.25.1/go.mod h1:JLdSAq5169HaiDUbTvArA2yQxmgn4D6h4A+4HqVvAYg=
-github.com/go-openapi/swag/typeutils v0.25.0 h1:iUTsxu3F3h9v6CBzVFGXKPSBQt6d8XXgYy1YAlu+HJ8=
-github.com/go-openapi/swag/typeutils v0.25.0/go.mod h1:9McMC/oCdS4BKwk2shEB7x17P6HmMmA6dQRtAkSnNb8=
 github.com/go-openapi/swag/typeutils v0.25.1 h1:rD/9HsEQieewNt6/k+JBwkxuAHktFtH3I3ysiFZqukA=
 github.com/go-openapi/swag/typeutils v0.25.1/go.mod h1:9McMC/oCdS4BKwk2shEB7x17P6HmMmA6dQRtAkSnNb8=
-github.com/go-openapi/swag/yamlutils v0.25.0 h1:apgy77seWLEM9HKDcieIgW8bG9aSZgH6nQ9THlHYgHA=
-github.com/go-openapi/swag/yamlutils v0.25.0/go.mod h1:0JvBRtc0mR02IqHURUeGgS9cG+Dfms4FCGXCnsgnt7c=
 github.com/go-openapi/swag/yamlutils v0.25.1 h1:mry5ez8joJwzvMbaTGLhw8pXUnhDK91oSJLDPF1bmGk=
 github.com/go-openapi/swag/yamlutils v0.25.1/go.mod h1:cm9ywbzncy3y6uPm/97ysW8+wZ09qsks+9RS8fLWKqg=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
diff --git a/structs_test.go b/structs_test.go
index 7f249e5..7992742 100644
--- a/structs_test.go
+++ b/structs_test.go
@@ -20,7 +20,7 @@ import (
 	"testing"
 
 	"github.com/stretchr/testify/assert"
-	"gopkg.in/yaml.v3"
+	yaml "go.yaml.in/yaml/v3"
 )
 
 func assertSerializeJSON(t testing.TB, actual any, expected string) bool {

From 3c1111c12ee94c95239cd995a587bcea225c9abc Mon Sep 17 00:00:00 2001
From: Frederic BIDON <fredbi@yahoo.com>
Date: Fri, 26 Sep 2025 19:48:39 +0200
Subject: [PATCH 25/63] chore(linting): removed nolint directives when the
 linter has fixed false positives

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
---
 schema_test.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/schema_test.go b/schema_test.go
index 78ec610..4209d6b 100644
--- a/schema_test.go
+++ b/schema_test.go
@@ -200,9 +200,9 @@ func TestSchema(t *testing.T) {
 	exp1 := expEx[0].(map[string]any)
 	exp2 := expEx[1].(map[string]any)
 
-	assert.EqualValues(t, exp1["id"], ex1["id"]) //nolint:testifylint // false positive: types are different
+	assert.EqualValues(t, exp1["id"], ex1["id"])
 	assert.Equal(t, exp1["name"], ex1["name"])
-	assert.EqualValues(t, exp2["id"], ex2["id"]) //nolint:testifylint // false positive: types are different
+	assert.EqualValues(t, exp2["id"], ex2["id"])
 	assert.Equal(t, exp2["name"], ex2["name"])
 }
 

From 9da6d8d6c58b254b18551a6dd6169e382c41d1e6 Mon Sep 17 00:00:00 2001
From: Frederic BIDON <fredbi@yahoo.com>
Date: Sun, 9 Nov 2025 14:00:31 +0100
Subject: [PATCH 26/63] chore: updated license marks in source files

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
---
 .golangci.yml            |  2 +-
 README.md                |  4 ++++
 auth_test.go             | 15 ++-------------
 cache.go                 | 34 +++++++++++-----------------------
 cache_test.go            |  3 +++
 circular_test.go         |  3 +++
 contact_info.go          | 15 ++-------------
 contact_info_test.go     | 17 +++--------------
 debug.go                 | 17 +++--------------
 debug_test.go            | 15 ++-------------
 embed.go                 |  3 +++
 errors.go                |  3 +++
 expander.go              | 29 +++++++++--------------------
 expander_test.go         | 35 ++++++++++++-----------------------
 external_docs.go         | 15 ++-------------
 external_docs_test.go    | 15 ++-------------
 header.go                | 23 ++++++-----------------
 header_test.go           | 15 ++-------------
 helpers_spec_test.go     |  9 ++++++---
 helpers_test.go          |  9 ++++++---
 info.go                  | 33 +++++++++++----------------------
 info_test.go             | 15 ++-------------
 items.go                 | 37 +++++++++++++------------------------
 items_test.go            | 19 ++++---------------
 license.go               | 15 ++-------------
 license_test.go          | 17 +++--------------
 normalizer.go            | 19 ++++---------------
 normalizer_nonwindows.go | 16 ++--------------
 normalizer_test.go       |  3 +++
 normalizer_windows.go    | 15 ++-------------
 operation.go             | 15 ++-------------
 operation_test.go        | 19 ++++---------------
 parameter.go             | 23 ++++++-----------------
 parameters_test.go       | 19 ++++---------------
 path_item.go             | 17 +++--------------
 path_item_test.go        | 17 +++--------------
 paths.go                 | 15 ++-------------
 paths_test.go            | 17 +++--------------
 properties.go            |  3 +++
 properties_test.go       | 15 ++-------------
 ref.go                   | 15 ++-------------
 ref_test.go              | 15 ++-------------
 resolver.go              | 27 +++++++++++++++------------
 resolver_test.go         |  5 ++++-
 response.go              | 37 +++++++++++++------------------------
 response_test.go         |  3 +++
 responses.go             | 17 +++--------------
 responses_test.go        | 11 +++++++----
 schema.go                | 15 ++-------------
 schema_loader.go         | 15 ++-------------
 schema_loader_test.go    |  3 +++
 schema_test.go           | 15 ++-------------
 security_scheme.go       | 17 +++--------------
 spec.go                  | 15 ++-------------
 spec_test.go             | 15 ++-------------
 structs_test.go          | 15 ++-------------
 swagger.go               | 33 +++++++++------------------------
 swagger_test.go          | 27 ++++++++-------------------
 tag.go                   | 17 +++--------------
 url_go19.go              |  3 +++
 validations.go           | 39 +++++++++++++++++++++------------------
 validations_test.go      |  7 +++++--
 xml_object.go            | 15 ++-------------
 xml_object_test.go       | 17 +++--------------
 64 files changed, 284 insertions(+), 744 deletions(-)

diff --git a/.golangci.yml b/.golangci.yml
index 7cea1af..1ad5adf 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -16,7 +16,7 @@ linters:
     - godox
     - gosmopolitan
     - inamedparam
-    #- intrange # disabled while < go1.22
+    - intrange
     - ireturn
     - lll
     - musttag
diff --git a/README.md b/README.md
index 7fd2810..3203bd2 100644
--- a/README.md
+++ b/README.md
@@ -7,6 +7,10 @@
 
 The object model for OpenAPI specification documents.
 
+## Licensing
+
+This library ships under the [SPDX-License-Identifier: Apache-2.0](./LICENSE).
+
 ### FAQ
 
 * What does this do?
diff --git a/auth_test.go b/auth_test.go
index a49340c..df719f2 100644
--- a/auth_test.go
+++ b/auth_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/cache.go b/cache.go
index 122993b..10fba77 100644
--- a/cache.go
+++ b/cache.go
@@ -1,40 +1,28 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
 import (
+	"maps"
 	"sync"
 )
 
 // ResolutionCache a cache for resolving urls
 type ResolutionCache interface {
-	Get(string) (interface{}, bool)
-	Set(string, interface{})
+	Get(string) (any, bool)
+	Set(string, any)
 }
 
 type simpleCache struct {
 	lock  sync.RWMutex
-	store map[string]interface{}
+	store map[string]any
 }
 
 func (s *simpleCache) ShallowClone() ResolutionCache {
-	store := make(map[string]interface{}, len(s.store))
+	store := make(map[string]any, len(s.store))
 	s.lock.RLock()
-	for k, v := range s.store {
-		store[k] = v
-	}
+	maps.Copy(store, s.store)
 	s.lock.RUnlock()
 
 	return &simpleCache{
@@ -43,7 +31,7 @@ func (s *simpleCache) ShallowClone() ResolutionCache {
 }
 
 // Get retrieves a cached URI
-func (s *simpleCache) Get(uri string) (interface{}, bool) {
+func (s *simpleCache) Get(uri string) (any, bool) {
 	s.lock.RLock()
 	v, ok := s.store[uri]
 
@@ -52,7 +40,7 @@ func (s *simpleCache) Get(uri string) (interface{}, bool) {
 }
 
 // Set caches a URI
-func (s *simpleCache) Set(uri string, data interface{}) {
+func (s *simpleCache) Set(uri string, data any) {
 	s.lock.Lock()
 	s.store[uri] = data
 	s.lock.Unlock()
@@ -80,7 +68,7 @@ func initResolutionCache() {
 }
 
 func defaultResolutionCache() *simpleCache {
-	return &simpleCache{store: map[string]interface{}{
+	return &simpleCache{store: map[string]any{
 		"http://swagger.io/v2/schema.json":       MustLoadSwagger20Schema(),
 		"http://json-schema.org/draft-04/schema": MustLoadJSONSchemaDraft04(),
 	}}
diff --git a/cache_test.go b/cache_test.go
index 8d6d274..d225fb0 100644
--- a/cache_test.go
+++ b/cache_test.go
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 package spec
 
 import (
diff --git a/circular_test.go b/circular_test.go
index c064b61..df68e23 100644
--- a/circular_test.go
+++ b/circular_test.go
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 package spec
 
 import (
diff --git a/contact_info.go b/contact_info.go
index 3eaa41e..fafe639 100644
--- a/contact_info.go
+++ b/contact_info.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/contact_info_test.go b/contact_info_test.go
index 99ce05e..3ec4da1 100644
--- a/contact_info_test.go
+++ b/contact_info_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -33,7 +22,7 @@ var contactInfo = ContactInfo{ContactInfoProps: ContactInfoProps{
 	Name:  "wordnik api team",
 	URL:   "http://developer.wordnik.com",
 	Email: "some@mailayada.dkdkd",
-}, VendorExtensible: VendorExtensible{Extensions: map[string]interface{}{"x-teams": "test team"}}}
+}, VendorExtensible: VendorExtensible{Extensions: map[string]any{"x-teams": "test team"}}}
 
 func TestIntegrationContactInfo(t *testing.T) {
 	b, err := json.MarshalIndent(contactInfo, "", "\t")
diff --git a/debug.go b/debug.go
index fc889f6..f4316c2 100644
--- a/debug.go
+++ b/debug.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -40,7 +29,7 @@ func debugOptions() {
 	specLogger = log.New(os.Stdout, "spec:", log.LstdFlags)
 }
 
-func debugLog(msg string, args ...interface{}) {
+func debugLog(msg string, args ...any) {
 	// A private, trivial trace logger, based on go-openapi/spec/expander.go:debugLog()
 	if Debug {
 		_, file1, pos1, _ := runtime.Caller(1)
diff --git a/debug_test.go b/debug_test.go
index 50edb18..4714961 100644
--- a/debug_test.go
+++ b/debug_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/embed.go b/embed.go
index 1f42847..0d0b699 100644
--- a/embed.go
+++ b/embed.go
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 package spec
 
 import (
diff --git a/errors.go b/errors.go
index 718b4ae..e39ab8b 100644
--- a/errors.go
+++ b/errors.go
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 package spec
 
 import "errors"
diff --git a/expander.go b/expander.go
index df936b3..cc4bd1c 100644
--- a/expander.go
+++ b/expander.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -104,7 +93,7 @@ const rootBase = ".root"
 
 // baseForRoot loads in the cache the root document and produces a fake ".root" base path entry
 // for further $ref resolution
-func baseForRoot(root interface{}, cache ResolutionCache) string {
+func baseForRoot(root any, cache ResolutionCache) string {
 	// cache the root document to resolve $ref's
 	normalizedBase := normalizeBase(rootBase)
 
@@ -116,7 +105,7 @@ func baseForRoot(root interface{}, cache ResolutionCache) string {
 			return normalizedBase
 		}
 
-		root = map[string]interface{}{}
+		root = map[string]any{}
 	}
 
 	cache.Set(normalizedBase, root)
@@ -132,7 +121,7 @@ func baseForRoot(root interface{}, cache ResolutionCache) string {
 // (use ExpandSchemaWithBasePath to resolve external references).
 //
 // Setting the cache is optional and this parameter may safely be left to nil.
-func ExpandSchema(schema *Schema, root interface{}, cache ResolutionCache) error {
+func ExpandSchema(schema *Schema, root any, cache ResolutionCache) error {
 	cache = cacheOrDefault(cache)
 	if root == nil {
 		root = schema
@@ -463,7 +452,7 @@ func expandOperation(op *Operation, resolver *schemaLoader, basePath string) err
 // (use ExpandResponse to resolve external references).
 //
 // Setting the cache is optional and this parameter may safely be left to nil.
-func ExpandResponseWithRoot(response *Response, root interface{}, cache ResolutionCache) error {
+func ExpandResponseWithRoot(response *Response, root any, cache ResolutionCache) error {
 	cache = cacheOrDefault(cache)
 	opts := &ExpandOptions{
 		RelativeBase: baseForRoot(root, cache),
@@ -489,7 +478,7 @@ func ExpandResponse(response *Response, basePath string) error {
 //
 // Notice that it is impossible to reference a json schema in a different document other than root
 // (use ExpandParameter to resolve external references).
-func ExpandParameterWithRoot(parameter *Parameter, root interface{}, cache ResolutionCache) error {
+func ExpandParameterWithRoot(parameter *Parameter, root any, cache ResolutionCache) error {
 	cache = cacheOrDefault(cache)
 
 	opts := &ExpandOptions{
@@ -512,7 +501,7 @@ func ExpandParameter(parameter *Parameter, basePath string) error {
 	return expandParameterOrResponse(parameter, resolver, opts.RelativeBase)
 }
 
-func getRefAndSchema(input interface{}) (*Ref, *Schema, error) {
+func getRefAndSchema(input any) (*Ref, *Schema, error) {
 	var (
 		ref *Ref
 		sch *Schema
@@ -538,7 +527,7 @@ func getRefAndSchema(input interface{}) (*Ref, *Schema, error) {
 	return ref, sch, nil
 }
 
-func expandParameterOrResponse(input interface{}, resolver *schemaLoader, basePath string) error {
+func expandParameterOrResponse(input any, resolver *schemaLoader, basePath string) error {
 	ref, sch, err := getRefAndSchema(input)
 	if err != nil {
 		return err
diff --git a/expander_test.go b/expander_test.go
index 1ba1aac..47df779 100644
--- a/expander_test.go
+++ b/expander_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -817,7 +806,7 @@ func resolutionContextServer() *httptest.Server {
 		if req.URL.Path == "/resolution.json" {
 
 			b, _ := os.ReadFile(filepath.Join(specs, "resolution.json"))
-			var ctnt map[string]interface{}
+			var ctnt map[string]any
 			_ = json.Unmarshal(b, &ctnt)
 			ctnt["id"] = servedAt
 
@@ -829,7 +818,7 @@ func resolutionContextServer() *httptest.Server {
 		}
 		if req.URL.Path == "/resolution2.json" {
 			b, _ := os.ReadFile(filepath.Join(specs, "resolution2.json"))
-			var ctnt map[string]interface{}
+			var ctnt map[string]any
 			_ = json.Unmarshal(b, &ctnt)
 			ctnt["id"] = servedAt
 
@@ -841,7 +830,7 @@ func resolutionContextServer() *httptest.Server {
 
 		if req.URL.Path == "/boolProp.json" {
 			rw.Header().Set("Content-Type", "application/json")
-			b, _ := json.Marshal(map[string]interface{}{
+			b, _ := json.Marshal(map[string]any{
 				"type": "boolean",
 			})
 			_, _ = rw.Write(b)
@@ -850,7 +839,7 @@ func resolutionContextServer() *httptest.Server {
 
 		if req.URL.Path == "/deeper/stringProp.json" {
 			rw.Header().Set("Content-Type", "application/json")
-			b, _ := json.Marshal(map[string]interface{}{
+			b, _ := json.Marshal(map[string]any{
 				"type": "string",
 			})
 			_, _ = rw.Write(b)
@@ -859,9 +848,9 @@ func resolutionContextServer() *httptest.Server {
 
 		if req.URL.Path == "/deeper/arrayProp.json" {
 			rw.Header().Set("Content-Type", "application/json")
-			b, _ := json.Marshal(map[string]interface{}{
+			b, _ := json.Marshal(map[string]any{
 				"type": "array",
-				"items": map[string]interface{}{
+				"items": map[string]any{
 					"type": "file",
 				},
 			})
@@ -1111,7 +1100,7 @@ func TestExpand_Issue145(t *testing.T) {
 		t.Run("empty root is cached", func(t *testing.T) {
 			value, ok := cache.Get(pseudoRoot)
 			require.True(t, ok) // found in cache
-			asMap, ok := value.(map[string]interface{})
+			asMap, ok := value.(map[string]any)
 			require.True(t, ok)
 			require.Empty(t, asMap)
 		})
@@ -1119,12 +1108,12 @@ func TestExpand_Issue145(t *testing.T) {
 
 	t.Run("with non-nil root, empty cache", func(t *testing.T) {
 		cache := defaultResolutionCache()
-		require.Equal(t, pseudoRoot, baseForRoot(map[string]interface{}{"key": "arbitrary"}, cache))
+		require.Equal(t, pseudoRoot, baseForRoot(map[string]any{"key": "arbitrary"}, cache))
 
 		t.Run("non-empty root is cached", func(t *testing.T) {
 			value, ok := cache.Get(pseudoRoot)
 			require.True(t, ok) // found in cache
-			asMap, ok := value.(map[string]interface{})
+			asMap, ok := value.(map[string]any)
 			require.True(t, ok)
 			require.Contains(t, asMap, "key")
 			require.Equal(t, "arbitrary", asMap["key"])
@@ -1136,7 +1125,7 @@ func TestExpand_Issue145(t *testing.T) {
 			t.Run("non-empty root is kept", func(t *testing.T) {
 				value, ok := cache.Get(pseudoRoot)
 				require.True(t, ok) // found in cache
-				asMap, ok := value.(map[string]interface{})
+				asMap, ok := value.(map[string]any)
 				require.True(t, ok)
 				require.Contains(t, asMap, "key")
 				require.Equal(t, "arbitrary", asMap["key"])
diff --git a/external_docs.go b/external_docs.go
index 88add91..17b8efb 100644
--- a/external_docs.go
+++ b/external_docs.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/external_docs_test.go b/external_docs_test.go
index 9184527..54b1e10 100644
--- a/external_docs_test.go
+++ b/external_docs_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/header.go b/header.go
index 55c415e..ab251ef 100644
--- a/header.go
+++ b/header.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -68,7 +57,7 @@ func (h *Header) CollectionOf(items *Items, format string) *Header {
 }
 
 // WithDefault sets the default value on this item
-func (h *Header) WithDefault(defaultValue interface{}) *Header {
+func (h *Header) WithDefault(defaultValue any) *Header {
 	h.Default = defaultValue
 	return h
 }
@@ -112,8 +101,8 @@ func (h *Header) WithMinimum(minimum float64, exclusive bool) *Header {
 }
 
 // WithEnum sets a the enum values (replace)
-func (h *Header) WithEnum(values ...interface{}) *Header {
-	h.Enum = append([]interface{}{}, values...)
+func (h *Header) WithEnum(values ...any) *Header {
+	h.Enum = append([]any{}, values...)
 	return h
 }
 
@@ -179,7 +168,7 @@ func (h *Header) UnmarshalJSON(data []byte) error {
 }
 
 // JSONLookup look up a value by the json property name
-func (h Header) JSONLookup(token string) (interface{}, error) {
+func (h Header) JSONLookup(token string) (any, error) {
 	if ex, ok := h.Extensions[token]; ok {
 		return &ex, nil
 	}
diff --git a/header_test.go b/header_test.go
index c0753e7..0269dee 100644
--- a/header_test.go
+++ b/header_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/helpers_spec_test.go b/helpers_spec_test.go
index 8999f0e..ebd8a10 100644
--- a/helpers_spec_test.go
+++ b/helpers_spec_test.go
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 package spec_test
 
 import (
@@ -71,7 +74,7 @@ func assertRefInJSONRegexp(t testing.TB, jazon, match string) {
 // assertRefExpand ensures that all $ref in some json doc expand properly against a root document.
 //
 // "exclude" is a regexp pattern to ignore certain $ref (e.g. some specs may embed $ref that are not processed, such as extensions).
-func assertRefExpand(t *testing.T, jazon, _ string, root interface{}, opts ...*spec.ExpandOptions) {
+func assertRefExpand(t *testing.T, jazon, _ string, root any, opts ...*spec.ExpandOptions) {
 	if len(opts) > 0 {
 		assertRefWithFunc(t, "expand-with-base", jazon, "", func(t *testing.T, match string) {
 			ref := spec.RefSchema(match)
@@ -87,7 +90,7 @@ func assertRefExpand(t *testing.T, jazon, _ string, root interface{}, opts ...*s
 	})
 }
 
-func assertRefResolve(t *testing.T, jazon, exclude string, root interface{}, opts ...*spec.ExpandOptions) {
+func assertRefResolve(t *testing.T, jazon, exclude string, root any, opts ...*spec.ExpandOptions) {
 	assertRefWithFunc(t, "resolve", jazon, exclude, func(t *testing.T, match string) {
 		ref := spec.MustCreateRef(match)
 		var (
@@ -136,7 +139,7 @@ func assertRefWithFunc(t *testing.T, name, jazon, exclude string, asserter func(
 	}
 }
 
-func asJSON(t testing.TB, sp interface{}) string {
+func asJSON(t testing.TB, sp any) string {
 	bbb, err := json.MarshalIndent(sp, "", " ")
 	require.NoError(t, err)
 
diff --git a/helpers_test.go b/helpers_test.go
index 4eaf8b4..a3df526 100644
--- a/helpers_test.go
+++ b/helpers_test.go
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 package spec
 
 import (
@@ -105,7 +108,7 @@ func assertNoRef(t testing.TB, jazon string) {
 // assertRefExpand ensures that all $ref in some json doc expand properly against a root document.
 //
 // "exclude" is a regexp pattern to ignore certain $ref (e.g. some specs may embed $ref that are not processed, such as extensions).
-func assertRefExpand(t *testing.T, jazon, _ string, root interface{}, opts ...*ExpandOptions) {
+func assertRefExpand(t *testing.T, jazon, _ string, root any, opts ...*ExpandOptions) {
 	assertRefWithFunc(t, jazon, "", func(t *testing.T, match string) {
 		ref := RefSchema(match)
 		if len(opts) > 0 {
@@ -120,7 +123,7 @@ func assertRefExpand(t *testing.T, jazon, _ string, root interface{}, opts ...*E
 // assertRefResolve ensures that all $ref in some json doc resolve properly against a root document.
 //
 // "exclude" is a regexp pattern to ignore certain $ref (e.g. some specs may embed $ref that are not processed, such as extensions).
-func assertRefResolve(t *testing.T, jazon, exclude string, root interface{}, opts ...*ExpandOptions) {
+func assertRefResolve(t *testing.T, jazon, exclude string, root any, opts ...*ExpandOptions) {
 	assertRefWithFunc(t, jazon, exclude, func(t *testing.T, match string) {
 		ref := MustCreateRef(match)
 		var (
@@ -165,7 +168,7 @@ func assertRefWithFunc(t *testing.T, jazon, exclude string, asserter func(t *tes
 	}
 }
 
-func asJSON(t testing.TB, sp interface{}) string {
+func asJSON(t testing.TB, sp any) string {
 	bbb, err := json.MarshalIndent(sp, "", " ")
 	require.NoError(t, err)
 
diff --git a/info.go b/info.go
index 695cd9a..9401065 100644
--- a/info.go
+++ b/info.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -24,10 +13,10 @@ import (
 )
 
 // Extensions vendor specific extensions
-type Extensions map[string]interface{}
+type Extensions map[string]any
 
 // Add adds a value to these extensions
-func (e Extensions) Add(key string, value interface{}) {
+func (e Extensions) Add(key string, value any) {
 	realKey := strings.ToLower(key)
 	e[realKey] = value
 }
@@ -71,7 +60,7 @@ func (e Extensions) GetBool(key string) (bool, bool) {
 // GetStringSlice gets a string value from the extensions
 func (e Extensions) GetStringSlice(key string) ([]string, bool) {
 	if v, ok := e[strings.ToLower(key)]; ok {
-		arr, isSlice := v.([]interface{})
+		arr, isSlice := v.([]any)
 		if !isSlice {
 			return nil, false
 		}
@@ -94,19 +83,19 @@ type VendorExtensible struct {
 }
 
 // AddExtension adds an extension to this extensible object
-func (v *VendorExtensible) AddExtension(key string, value interface{}) {
+func (v *VendorExtensible) AddExtension(key string, value any) {
 	if value == nil {
 		return
 	}
 	if v.Extensions == nil {
-		v.Extensions = make(map[string]interface{})
+		v.Extensions = make(map[string]any)
 	}
 	v.Extensions.Add(key, value)
 }
 
 // MarshalJSON marshals the extensions to json
 func (v VendorExtensible) MarshalJSON() ([]byte, error) {
-	toser := make(map[string]interface{})
+	toser := make(map[string]any)
 	for k, v := range v.Extensions {
 		lk := strings.ToLower(k)
 		if strings.HasPrefix(lk, "x-") {
@@ -118,7 +107,7 @@ func (v VendorExtensible) MarshalJSON() ([]byte, error) {
 
 // UnmarshalJSON for this extensible object
 func (v *VendorExtensible) UnmarshalJSON(data []byte) error {
-	var d map[string]interface{}
+	var d map[string]any
 	if err := json.Unmarshal(data, &d); err != nil {
 		return err
 	}
@@ -126,7 +115,7 @@ func (v *VendorExtensible) UnmarshalJSON(data []byte) error {
 		lk := strings.ToLower(k)
 		if strings.HasPrefix(lk, "x-") {
 			if v.Extensions == nil {
-				v.Extensions = map[string]interface{}{}
+				v.Extensions = map[string]any{}
 			}
 			v.Extensions[k] = vv
 		}
@@ -154,7 +143,7 @@ type Info struct {
 }
 
 // JSONLookup look up a value by the json property name
-func (i Info) JSONLookup(token string) (interface{}, error) {
+func (i Info) JSONLookup(token string) (any, error) {
 	if ex, ok := i.Extensions[token]; ok {
 		return &ex, nil
 	}
diff --git a/info_test.go b/info_test.go
index c54777d..e01be7b 100644
--- a/info_test.go
+++ b/info_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/items.go b/items.go
index 0224673..d30ca35 100644
--- a/items.go
+++ b/items.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -28,13 +17,13 @@ const (
 
 // SimpleSchema describe swagger simple schemas for parameters and headers
 type SimpleSchema struct {
-	Type             string      `json:"type,omitempty"`
-	Nullable         bool        `json:"nullable,omitempty"`
-	Format           string      `json:"format,omitempty"`
-	Items            *Items      `json:"items,omitempty"`
-	CollectionFormat string      `json:"collectionFormat,omitempty"`
-	Default          interface{} `json:"default,omitempty"`
-	Example          interface{} `json:"example,omitempty"`
+	Type             string `json:"type,omitempty"`
+	Nullable         bool   `json:"nullable,omitempty"`
+	Format           string `json:"format,omitempty"`
+	Items            *Items `json:"items,omitempty"`
+	CollectionFormat string `json:"collectionFormat,omitempty"`
+	Default          any    `json:"default,omitempty"`
+	Example          any    `json:"example,omitempty"`
 }
 
 // TypeName return the type (or format) of a simple schema
@@ -91,7 +80,7 @@ func (i *Items) CollectionOf(items *Items, format string) *Items {
 }
 
 // WithDefault sets the default value on this item
-func (i *Items) WithDefault(defaultValue interface{}) *Items {
+func (i *Items) WithDefault(defaultValue any) *Items {
 	i.Default = defaultValue
 	return i
 }
@@ -135,8 +124,8 @@ func (i *Items) WithMinimum(minimum float64, exclusive bool) *Items {
 }
 
 // WithEnum sets a the enum values (replace)
-func (i *Items) WithEnum(values ...interface{}) *Items {
-	i.Enum = append([]interface{}{}, values...)
+func (i *Items) WithEnum(values ...any) *Items {
+	i.Enum = append([]any{}, values...)
 	return i
 }
 
@@ -217,7 +206,7 @@ func (i Items) MarshalJSON() ([]byte, error) {
 }
 
 // JSONLookup look up a value by the json property name
-func (i Items) JSONLookup(token string) (interface{}, error) {
+func (i Items) JSONLookup(token string) (any, error) {
 	if token == jsonRef {
 		return &i.Ref, nil
 	}
diff --git a/items_test.go b/items_test.go
index ed21795..f594ffc 100644
--- a/items_test.go
+++ b/items_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -37,7 +26,7 @@ var testItems = Items{
 		MinItems:         int64Ptr(5),
 		UniqueItems:      true,
 		MultipleOf:       float64Ptr(5),
-		Enum:             []interface{}{"hello", "world"},
+		Enum:             []any{"hello", "world"},
 	},
 	SimpleSchema: SimpleSchema{
 		Type:   "string",
@@ -141,7 +130,7 @@ func TestItemsBuilder(t *testing.T) {
 				Default: []string{"default-value"},
 			},
 			CommonValidations: CommonValidations{
-				Enum:        []interface{}{[]string{"abc", "efg"}, []string{"hij"}},
+				Enum:        []any{[]string{"abc", "efg"}, []string{"hij"}},
 				MinItems:    conv.Pointer(int64(1)),
 				MaxItems:    conv.Pointer(int64(4)),
 				UniqueItems: true,
diff --git a/license.go b/license.go
index 09f54fe..286b237 100644
--- a/license.go
+++ b/license.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/license_test.go b/license_test.go
index 84ba850..fb957e1 100644
--- a/license_test.go
+++ b/license_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -31,7 +20,7 @@ func TestIntegrationLicense(t *testing.T) {
 
 	var testLicense = License{
 		LicenseProps:     LicenseProps{Name: "the name", URL: "the url"},
-		VendorExtensible: VendorExtensible{Extensions: map[string]interface{}{"x-license": "custom term"}}}
+		VendorExtensible: VendorExtensible{Extensions: map[string]any{"x-license": "custom term"}}}
 
 	// const licenseYAML = "name: the name\nurl: the url\n"
 
diff --git a/normalizer.go b/normalizer.go
index e8b6009..c3ea810 100644
--- a/normalizer.go
+++ b/normalizer.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -129,8 +118,8 @@ func rebase(ref *Ref, v *url.URL, notEqual bool) (Ref, bool) {
 
 	newBase.Fragment = u.Fragment
 
-	if strings.HasPrefix(u.Path, docPath) {
-		newBase.Path = strings.TrimPrefix(u.Path, docPath)
+	if after, ok := strings.CutPrefix(u.Path, docPath); ok {
+		newBase.Path = after
 	} else {
 		newBase.Path = strings.TrimPrefix(u.Path, v.Path)
 	}
diff --git a/normalizer_nonwindows.go b/normalizer_nonwindows.go
index f19f1a8..0d55632 100644
--- a/normalizer_nonwindows.go
+++ b/normalizer_nonwindows.go
@@ -1,19 +1,7 @@
 //go:build !windows
-// +build !windows
 
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/normalizer_test.go b/normalizer_test.go
index 8d72c28..3de465e 100644
--- a/normalizer_test.go
+++ b/normalizer_test.go
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 package spec
 
 import (
diff --git a/normalizer_windows.go b/normalizer_windows.go
index a66c532..61515c9 100644
--- a/normalizer_windows.go
+++ b/normalizer_windows.go
@@ -1,18 +1,7 @@
 // -build windows
 
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/operation.go b/operation.go
index 9826219..bbf8c75 100644
--- a/operation.go
+++ b/operation.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/operation_test.go b/operation_test.go
index 46f61c8..ea530ee 100644
--- a/operation_test.go
+++ b/operation_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -26,7 +15,7 @@ import (
 
 var operation = Operation{
 	VendorExtensible: VendorExtensible{
-		Extensions: map[string]interface{}{
+		Extensions: map[string]any{
 			"x-framework": "go-swagger",
 		},
 	},
@@ -354,7 +343,7 @@ func doTestOperationGobEncoding(t *testing.T, fixture string) {
 	doTestAnyGobEncoding(t, &src, &dst)
 }
 
-func doTestAnyGobEncoding(t *testing.T, src, dst interface{}) {
+func doTestAnyGobEncoding(t *testing.T, src, dst any) {
 	expectedJSON, _ := json.MarshalIndent(src, "", " ")
 
 	var b bytes.Buffer
diff --git a/parameter.go b/parameter.go
index 1dd8311..b94b768 100644
--- a/parameter.go
+++ b/parameter.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -116,7 +105,7 @@ type Parameter struct {
 }
 
 // JSONLookup look up a value by the json property name
-func (p Parameter) JSONLookup(token string) (interface{}, error) {
+func (p Parameter) JSONLookup(token string) (any, error) {
 	if ex, ok := p.Extensions[token]; ok {
 		return &ex, nil
 	}
@@ -176,7 +165,7 @@ func (p *Parameter) CollectionOf(items *Items, format string) *Parameter {
 }
 
 // WithDefault sets the default value on this parameter
-func (p *Parameter) WithDefault(defaultValue interface{}) *Parameter {
+func (p *Parameter) WithDefault(defaultValue any) *Parameter {
 	p.AsOptional() // with default implies optional
 	p.Default = defaultValue
 	return p
@@ -248,8 +237,8 @@ func (p *Parameter) WithMinimum(minimum float64, exclusive bool) *Parameter {
 }
 
 // WithEnum sets a the enum values (replace)
-func (p *Parameter) WithEnum(values ...interface{}) *Parameter {
-	p.Enum = append([]interface{}{}, values...)
+func (p *Parameter) WithEnum(values ...any) *Parameter {
+	p.Enum = append([]any{}, values...)
 	return p
 }
 
diff --git a/parameters_test.go b/parameters_test.go
index 2a730ff..8fc4e25 100644
--- a/parameters_test.go
+++ b/parameters_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -24,7 +13,7 @@ import (
 )
 
 var parameter = Parameter{
-	VendorExtensible: VendorExtensible{Extensions: map[string]interface{}{
+	VendorExtensible: VendorExtensible{Extensions: map[string]any{
 		"x-framework": "swagger-go",
 	}},
 	Refable: Refable{Ref: MustCreateRef("Dog")},
@@ -40,7 +29,7 @@ var parameter = Parameter{
 		MinItems:         int64Ptr(5),
 		UniqueItems:      true,
 		MultipleOf:       float64Ptr(5),
-		Enum:             []interface{}{"hello", "world"},
+		Enum:             []any{"hello", "world"},
 	},
 	SimpleSchema: SimpleSchema{
 		Type:             "string",
diff --git a/path_item.go b/path_item.go
index e51b810..c692b89 100644
--- a/path_item.go
+++ b/path_item.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -46,7 +35,7 @@ type PathItem struct {
 }
 
 // JSONLookup look up a value by the json property name
-func (p PathItem) JSONLookup(token string) (interface{}, error) {
+func (p PathItem) JSONLookup(token string) (any, error) {
 	if ex, ok := p.Extensions[token]; ok {
 		return &ex, nil
 	}
diff --git a/path_item_test.go b/path_item_test.go
index 1d0048b..b2a13c1 100644
--- a/path_item_test.go
+++ b/path_item_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -25,7 +14,7 @@ import (
 var pathItem = PathItem{
 	Refable: Refable{Ref: MustCreateRef("Dog")},
 	VendorExtensible: VendorExtensible{
-		Extensions: map[string]interface{}{
+		Extensions: map[string]any{
 			"x-framework": "go-swagger",
 		},
 	},
diff --git a/paths.go b/paths.go
index b95eadc..b9e4218 100644
--- a/paths.go
+++ b/paths.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/paths_test.go b/paths_test.go
index cbb37af..42aea8b 100644
--- a/paths_test.go
+++ b/paths_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -23,7 +12,7 @@ import (
 )
 
 var paths = Paths{
-	VendorExtensible: VendorExtensible{Extensions: map[string]interface{}{"x-framework": "go-swagger"}},
+	VendorExtensible: VendorExtensible{Extensions: map[string]any{"x-framework": "go-swagger"}},
 	Paths: map[string]PathItem{
 		"/": {
 			Refable: Refable{Ref: MustCreateRef("cats")},
diff --git a/properties.go b/properties.go
index ada68dd..4142308 100644
--- a/properties.go
+++ b/properties.go
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 package spec
 
 import (
diff --git a/properties_test.go b/properties_test.go
index d860843..2874a0d 100644
--- a/properties_test.go
+++ b/properties_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/ref.go b/ref.go
index 87b8b3a..c927926 100644
--- a/ref.go
+++ b/ref.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/ref_test.go b/ref_test.go
index 3d233e0..839c6fe 100644
--- a/ref_test.go
+++ b/ref_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/resolver.go b/resolver.go
index dd577b0..b82c182 100644
--- a/resolver.go
+++ b/resolver.go
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 package spec
 
 import (
@@ -6,7 +9,7 @@ import (
 	"github.com/go-openapi/swag/jsonutils"
 )
 
-func resolveAnyWithBase(root interface{}, ref *Ref, result interface{}, options *ExpandOptions) error {
+func resolveAnyWithBase(root any, ref *Ref, result any, options *ExpandOptions) error {
 	options = optionsOrDefault(options)
 	resolver := defaultSchemaLoader(root, options, nil, nil)
 
@@ -18,7 +21,7 @@ func resolveAnyWithBase(root interface{}, ref *Ref, result interface{}, options
 }
 
 // ResolveRefWithBase resolves a reference against a context root with preservation of base path
-func ResolveRefWithBase(root interface{}, ref *Ref, options *ExpandOptions) (*Schema, error) {
+func ResolveRefWithBase(root any, ref *Ref, options *ExpandOptions) (*Schema, error) {
 	result := new(Schema)
 
 	if err := resolveAnyWithBase(root, ref, result, options); err != nil {
@@ -32,7 +35,7 @@ func ResolveRefWithBase(root interface{}, ref *Ref, options *ExpandOptions) (*Sc
 // ref is guaranteed to be in root (no need to go to external files)
 //
 // ResolveRef is ONLY called from the code generation module
-func ResolveRef(root interface{}, ref *Ref) (*Schema, error) {
+func ResolveRef(root any, ref *Ref) (*Schema, error) {
 	res, _, err := ref.GetPointer().Get(root)
 	if err != nil {
 		return nil, err
@@ -43,7 +46,7 @@ func ResolveRef(root interface{}, ref *Ref) (*Schema, error) {
 		return &sch, nil
 	case *Schema:
 		return sch, nil
-	case map[string]interface{}:
+	case map[string]any:
 		newSch := new(Schema)
 		if err = jsonutils.FromDynamicJSON(sch, newSch); err != nil {
 			return nil, err
@@ -55,7 +58,7 @@ func ResolveRef(root interface{}, ref *Ref) (*Schema, error) {
 }
 
 // ResolveParameterWithBase resolves a parameter reference against a context root and base path
-func ResolveParameterWithBase(root interface{}, ref Ref, options *ExpandOptions) (*Parameter, error) {
+func ResolveParameterWithBase(root any, ref Ref, options *ExpandOptions) (*Parameter, error) {
 	result := new(Parameter)
 
 	if err := resolveAnyWithBase(root, &ref, result, options); err != nil {
@@ -66,12 +69,12 @@ func ResolveParameterWithBase(root interface{}, ref Ref, options *ExpandOptions)
 }
 
 // ResolveParameter resolves a parameter reference against a context root
-func ResolveParameter(root interface{}, ref Ref) (*Parameter, error) {
+func ResolveParameter(root any, ref Ref) (*Parameter, error) {
 	return ResolveParameterWithBase(root, ref, nil)
 }
 
 // ResolveResponseWithBase resolves response a reference against a context root and base path
-func ResolveResponseWithBase(root interface{}, ref Ref, options *ExpandOptions) (*Response, error) {
+func ResolveResponseWithBase(root any, ref Ref, options *ExpandOptions) (*Response, error) {
 	result := new(Response)
 
 	err := resolveAnyWithBase(root, &ref, result, options)
@@ -83,12 +86,12 @@ func ResolveResponseWithBase(root interface{}, ref Ref, options *ExpandOptions)
 }
 
 // ResolveResponse resolves response a reference against a context root
-func ResolveResponse(root interface{}, ref Ref) (*Response, error) {
+func ResolveResponse(root any, ref Ref) (*Response, error) {
 	return ResolveResponseWithBase(root, ref, nil)
 }
 
 // ResolvePathItemWithBase resolves response a path item against a context root and base path
-func ResolvePathItemWithBase(root interface{}, ref Ref, options *ExpandOptions) (*PathItem, error) {
+func ResolvePathItemWithBase(root any, ref Ref, options *ExpandOptions) (*PathItem, error) {
 	result := new(PathItem)
 
 	if err := resolveAnyWithBase(root, &ref, result, options); err != nil {
@@ -101,7 +104,7 @@ func ResolvePathItemWithBase(root interface{}, ref Ref, options *ExpandOptions)
 // ResolvePathItem resolves response a path item against a context root and base path
 //
 // Deprecated: use ResolvePathItemWithBase instead
-func ResolvePathItem(root interface{}, ref Ref, options *ExpandOptions) (*PathItem, error) {
+func ResolvePathItem(root any, ref Ref, options *ExpandOptions) (*PathItem, error) {
 	return ResolvePathItemWithBase(root, ref, options)
 }
 
@@ -109,7 +112,7 @@ func ResolvePathItem(root interface{}, ref Ref, options *ExpandOptions) (*PathIt
 //
 // NOTE: stricly speaking, this construct is not supported by Swagger 2.0.
 // Similarly, $ref are forbidden in response headers.
-func ResolveItemsWithBase(root interface{}, ref Ref, options *ExpandOptions) (*Items, error) {
+func ResolveItemsWithBase(root any, ref Ref, options *ExpandOptions) (*Items, error) {
 	result := new(Items)
 
 	if err := resolveAnyWithBase(root, &ref, result, options); err != nil {
@@ -122,6 +125,6 @@ func ResolveItemsWithBase(root interface{}, ref Ref, options *ExpandOptions) (*I
 // ResolveItems resolves parameter items reference against a context root and base path.
 //
 // Deprecated: use ResolveItemsWithBase instead
-func ResolveItems(root interface{}, ref Ref, options *ExpandOptions) (*Items, error) {
+func ResolveItems(root any, ref Ref, options *ExpandOptions) (*Items, error) {
 	return ResolveItemsWithBase(root, ref, options)
 }
diff --git a/resolver_test.go b/resolver_test.go
index b1c977a..29ac095 100644
--- a/resolver_test.go
+++ b/resolver_test.go
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 package spec
 
 import (
@@ -14,7 +17,7 @@ import (
 )
 
 func TestResolveRef(t *testing.T) {
-	var root interface{}
+	var root any
 	require.NoError(t, json.Unmarshal([]byte(PetStore20), &root))
 
 	ref, err := NewRef("#/definitions/Category")
diff --git a/response.go b/response.go
index edb60a5..e5a7e5c 100644
--- a/response.go
+++ b/response.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -23,10 +12,10 @@ import (
 
 // ResponseProps properties specific to a response
 type ResponseProps struct {
-	Description string                 `json:"description"`
-	Schema      *Schema                `json:"schema,omitempty"`
-	Headers     map[string]Header      `json:"headers,omitempty"`
-	Examples    map[string]interface{} `json:"examples,omitempty"`
+	Description string            `json:"description"`
+	Schema      *Schema           `json:"schema,omitempty"`
+	Headers     map[string]Header `json:"headers,omitempty"`
+	Examples    map[string]any    `json:"examples,omitempty"`
 }
 
 // Response describes a single response from an API Operation.
@@ -51,7 +40,7 @@ func ResponseRef(url string) *Response {
 }
 
 // JSONLookup look up a value by the json property name
-func (r Response) JSONLookup(token string) (interface{}, error) {
+func (r Response) JSONLookup(token string) (any, error) {
 	if ex, ok := r.Extensions[token]; ok {
 		return &ex, nil
 	}
@@ -86,10 +75,10 @@ func (r Response) MarshalJSON() ([]byte, error) {
 	} else {
 		// when there is $ref inside the schema, description should be omitempty-ied
 		b1, err = json.Marshal(struct {
-			Description string                 `json:"description,omitempty"`
-			Schema      *Schema                `json:"schema,omitempty"`
-			Headers     map[string]Header      `json:"headers,omitempty"`
-			Examples    map[string]interface{} `json:"examples,omitempty"`
+			Description string            `json:"description,omitempty"`
+			Schema      *Schema           `json:"schema,omitempty"`
+			Headers     map[string]Header `json:"headers,omitempty"`
+			Examples    map[string]any    `json:"examples,omitempty"`
 		}{
 			Description: r.Description,
 			Schema:      r.Schema,
@@ -143,9 +132,9 @@ func (r *Response) RemoveHeader(name string) *Response {
 }
 
 // AddExample adds an example to this response
-func (r *Response) AddExample(mediaType string, example interface{}) *Response {
+func (r *Response) AddExample(mediaType string, example any) *Response {
 	if r.Examples == nil {
-		r.Examples = make(map[string]interface{})
+		r.Examples = make(map[string]any)
 	}
 	r.Examples[mediaType] = example
 	return r
diff --git a/response_test.go b/response_test.go
index 39d9c43..4a2b7cb 100644
--- a/response_test.go
+++ b/response_test.go
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 // Copyright 2017 go-swagger maintainers
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
diff --git a/responses.go b/responses.go
index 337c6b1..733a131 100644
--- a/responses.go
+++ b/responses.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -43,7 +32,7 @@ type Responses struct {
 }
 
 // JSONLookup implements an interface to customize json pointer lookup
-func (r Responses) JSONLookup(token string) (interface{}, error) {
+func (r Responses) JSONLookup(token string) (any, error) {
 	if token == "default" {
 		return r.Default, nil
 	}
diff --git a/responses_test.go b/responses_test.go
index 4ef1e69..2c8b873 100644
--- a/responses_test.go
+++ b/responses_test.go
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 // Copyright 2017 go-swagger maintainers
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
@@ -24,7 +27,7 @@ import (
 
 var responses = Responses{
 	VendorExtensible: VendorExtensible{
-		Extensions: map[string]interface{}{
+		Extensions: map[string]any{
 			"x-go-name": "PutDogExists",
 		},
 	},
@@ -33,7 +36,7 @@ var responses = Responses{
 			200: {
 				Refable: Refable{Ref: MustCreateRef("Dog")},
 				VendorExtensible: VendorExtensible{
-					Extensions: map[string]interface{}{
+					Extensions: map[string]any{
 						"x-go-name": "PutDogExists",
 					},
 				},
@@ -89,13 +92,13 @@ func TestJSONLookupResponses(t *testing.T) {
 	require.True(t, ok)
 	assert.Equal(t, "Dog exists", def)
 
-	var x *interface{}
+	var x *any
 	res, err = responses.JSONLookup("x-go-name")
 	require.NoError(t, err)
 	require.NotNil(t, res)
 	require.IsType(t, x, res)
 
-	x, ok = res.(*interface{})
+	x, ok = res.(*any)
 	require.True(t, ok)
 	assert.EqualValues(t, "PutDogExists", *x)
 
diff --git a/schema.go b/schema.go
index 0a49f2d..6623728 100644
--- a/schema.go
+++ b/schema.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/schema_loader.go b/schema_loader.go
index 328e5b8..8d4a985 100644
--- a/schema_loader.go
+++ b/schema_loader.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/schema_loader_test.go b/schema_loader_test.go
index 67a1e79..50893ae 100644
--- a/schema_loader_test.go
+++ b/schema_loader_test.go
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 package spec
 
 import (
diff --git a/schema_test.go b/schema_test.go
index 4209d6b..9b3adb6 100644
--- a/schema_test.go
+++ b/schema_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/security_scheme.go b/security_scheme.go
index 2dfe934..46a4a7e 100644
--- a/security_scheme.go
+++ b/security_scheme.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -109,7 +98,7 @@ type SecurityScheme struct {
 }
 
 // JSONLookup implements an interface to customize json pointer lookup
-func (s SecurityScheme) JSONLookup(token string) (interface{}, error) {
+func (s SecurityScheme) JSONLookup(token string) (any, error) {
 	if ex, ok := s.Extensions[token]; ok {
 		return &ex, nil
 	}
diff --git a/spec.go b/spec.go
index 876aa12..05c3fc7 100644
--- a/spec.go
+++ b/spec.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/spec_test.go b/spec_test.go
index c3a6186..95ae437 100644
--- a/spec_test.go
+++ b/spec_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec_test
 
diff --git a/structs_test.go b/structs_test.go
index 7992742..a1c9c11 100644
--- a/structs_test.go
+++ b/structs_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/swagger.go b/swagger.go
index 0e73759..f7cd0f6 100644
--- a/swagger.go
+++ b/swagger.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -19,6 +8,7 @@ import (
 	"encoding/gob"
 	"encoding/json"
 	"fmt"
+	"slices"
 	"strconv"
 
 	"github.com/go-openapi/jsonpointer"
@@ -36,7 +26,7 @@ type Swagger struct {
 }
 
 // JSONLookup look up a value by the json property name
-func (s Swagger) JSONLookup(token string) (interface{}, error) {
+func (s Swagger) JSONLookup(token string) (any, error) {
 	if ex, ok := s.Extensions[token]; ok {
 		return &ex, nil
 	}
@@ -227,7 +217,7 @@ type SchemaOrBool struct {
 }
 
 // JSONLookup implements an interface to customize json pointer lookup
-func (s SchemaOrBool) JSONLookup(token string) (interface{}, error) {
+func (s SchemaOrBool) JSONLookup(token string) (any, error) {
 	if token == "allows" {
 		return s.Allows, nil
 	}
@@ -274,7 +264,7 @@ type SchemaOrStringArray struct {
 }
 
 // JSONLookup implements an interface to customize json pointer lookup
-func (s SchemaOrStringArray) JSONLookup(token string) (interface{}, error) {
+func (s SchemaOrStringArray) JSONLookup(token string) (any, error) {
 	r, _, err := jsonpointer.GetForToken(s.Schema, token)
 	return r, err
 }
@@ -333,16 +323,11 @@ type StringOrArray []string
 
 // Contains returns true when the value is contained in the slice
 func (s StringOrArray) Contains(value string) bool {
-	for _, str := range s {
-		if str == value {
-			return true
-		}
-	}
-	return false
+	return slices.Contains(s, value)
 }
 
 // JSONLookup implements an interface to customize json pointer lookup
-func (s SchemaOrArray) JSONLookup(token string) (interface{}, error) {
+func (s SchemaOrArray) JSONLookup(token string) (any, error) {
 	if _, err := strconv.Atoi(token); err == nil {
 		r, _, err := jsonpointer.GetForToken(s.Schemas, token)
 		return r, err
@@ -367,7 +352,7 @@ func (s *StringOrArray) UnmarshalJSON(data []byte) error {
 		return nil
 	}
 
-	var single interface{}
+	var single any
 	if err := json.Unmarshal(data, &single); err != nil {
 		return err
 	}
diff --git a/swagger_test.go b/swagger_test.go
index 265311a..2580da6 100644
--- a/swagger_test.go
+++ b/swagger_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -53,9 +42,9 @@ var spec = Swagger{
 		Tags:         []Tag{NewTag("pets", "", nil)},
 		ExternalDocs: &ExternalDocumentation{Description: "the name", URL: "the url"},
 	},
-	VendorExtensible: VendorExtensible{Extensions: map[string]interface{}{
+	VendorExtensible: VendorExtensible{Extensions: map[string]any{
 		"x-some-extension": "vendor",
-		"x-schemes":        []interface{}{"unix", "amqp"},
+		"x-schemes":        []any{"unix", "amqp"},
 	}},
 }
 
@@ -237,11 +226,11 @@ func assertSpecJSON(t testing.TB, specJSON []byte) bool {
 */
 
 func TestSwaggerSpec_Serialize(t *testing.T) {
-	expected := make(map[string]interface{})
+	expected := make(map[string]any)
 	_ = json.Unmarshal([]byte(specJSON), &expected)
 	b, err := json.MarshalIndent(spec, "", "  ")
 	require.NoError(t, err)
-	var actual map[string]interface{}
+	var actual map[string]any
 	require.NoError(t, json.Unmarshal(b, &actual))
 	assert.Equal(t, expected, actual)
 }
@@ -268,7 +257,7 @@ func TestVendorExtensionStringSlice(t *testing.T) {
 	assert.Nil(t, notString)
 	assert.False(t, ok)
 
-	actual.AddExtension("x-another-slice-ext", []interface{}{100, 100})
+	actual.AddExtension("x-another-slice-ext", []any{100, 100})
 	notStringSlice, ok := actual.Extensions.GetStringSlice("x-another-slice-ext")
 	assert.Nil(t, notStringSlice)
 	assert.False(t, ok)
@@ -303,7 +292,7 @@ func TestOptionalSwaggerProps_Serialize(t *testing.T) {
 	bytes, err := json.Marshal(&minimalSpec)
 	require.NoError(t, err)
 
-	var ms map[string]interface{}
+	var ms map[string]any
 	require.NoError(t, json.Unmarshal(bytes, &ms))
 
 	assert.NotContains(t, ms, "consumes")
diff --git a/tag.go b/tag.go
index baf1f3d..ae98fd9 100644
--- a/tag.go
+++ b/tag.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -44,7 +33,7 @@ func NewTag(name, description string, externalDocs *ExternalDocumentation) Tag {
 }
 
 // JSONLookup implements an interface to customize json pointer lookup
-func (t Tag) JSONLookup(token string) (interface{}, error) {
+func (t Tag) JSONLookup(token string) (any, error) {
 	if ex, ok := t.Extensions[token]; ok {
 		return &ex, nil
 	}
diff --git a/url_go19.go b/url_go19.go
index 5bdfe40..8d0c81a 100644
--- a/url_go19.go
+++ b/url_go19.go
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 package spec
 
 import "net/url"
diff --git a/validations.go b/validations.go
index ae80a5d..4f70e30 100644
--- a/validations.go
+++ b/validations.go
@@ -1,19 +1,22 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 package spec
 
 // CommonValidations describe common JSON-schema validations
 type CommonValidations struct {
-	Maximum          *float64      `json:"maximum,omitempty"`
-	ExclusiveMaximum bool          `json:"exclusiveMaximum,omitempty"`
-	Minimum          *float64      `json:"minimum,omitempty"`
-	ExclusiveMinimum bool          `json:"exclusiveMinimum,omitempty"`
-	MaxLength        *int64        `json:"maxLength,omitempty"`
-	MinLength        *int64        `json:"minLength,omitempty"`
-	Pattern          string        `json:"pattern,omitempty"`
-	MaxItems         *int64        `json:"maxItems,omitempty"`
-	MinItems         *int64        `json:"minItems,omitempty"`
-	UniqueItems      bool          `json:"uniqueItems,omitempty"`
-	MultipleOf       *float64      `json:"multipleOf,omitempty"`
-	Enum             []interface{} `json:"enum,omitempty"`
+	Maximum          *float64 `json:"maximum,omitempty"`
+	ExclusiveMaximum bool     `json:"exclusiveMaximum,omitempty"`
+	Minimum          *float64 `json:"minimum,omitempty"`
+	ExclusiveMinimum bool     `json:"exclusiveMinimum,omitempty"`
+	MaxLength        *int64   `json:"maxLength,omitempty"`
+	MinLength        *int64   `json:"minLength,omitempty"`
+	Pattern          string   `json:"pattern,omitempty"`
+	MaxItems         *int64   `json:"maxItems,omitempty"`
+	MinItems         *int64   `json:"minItems,omitempty"`
+	UniqueItems      bool     `json:"uniqueItems,omitempty"`
+	MultipleOf       *float64 `json:"multipleOf,omitempty"`
+	Enum             []any    `json:"enum,omitempty"`
 }
 
 // SetValidations defines all validations for a simple schema.
@@ -37,12 +40,12 @@ func (v *CommonValidations) SetValidations(val SchemaValidations) {
 
 type clearedValidation struct {
 	Validation string
-	Value      interface{}
+	Value      any
 }
 
 type clearedValidations []clearedValidation
 
-func (c clearedValidations) apply(cbs []func(string, interface{})) {
+func (c clearedValidations) apply(cbs []func(string, any)) {
 	for _, cb := range cbs {
 		for _, cleared := range c {
 			cb(cleared.Validation, cleared.Value)
@@ -53,7 +56,7 @@ func (c clearedValidations) apply(cbs []func(string, interface{})) {
 // ClearNumberValidations clears all number validations.
 //
 // Some callbacks may be set by the caller to capture changed values.
-func (v *CommonValidations) ClearNumberValidations(cbs ...func(string, interface{})) {
+func (v *CommonValidations) ClearNumberValidations(cbs ...func(string, any)) {
 	const maxNumberValidations = 5
 	done := make(clearedValidations, 0, maxNumberValidations)
 	defer func() {
@@ -85,7 +88,7 @@ func (v *CommonValidations) ClearNumberValidations(cbs ...func(string, interface
 // ClearStringValidations clears all string validations.
 //
 // Some callbacks may be set by the caller to capture changed values.
-func (v *CommonValidations) ClearStringValidations(cbs ...func(string, interface{})) {
+func (v *CommonValidations) ClearStringValidations(cbs ...func(string, any)) {
 	const maxStringValidations = 3
 	done := make(clearedValidations, 0, maxStringValidations)
 	defer func() {
@@ -109,7 +112,7 @@ func (v *CommonValidations) ClearStringValidations(cbs ...func(string, interface
 // ClearArrayValidations clears all array validations.
 //
 // Some callbacks may be set by the caller to capture changed values.
-func (v *CommonValidations) ClearArrayValidations(cbs ...func(string, interface{})) {
+func (v *CommonValidations) ClearArrayValidations(cbs ...func(string, any)) {
 	const maxArrayValidations = 3
 	done := make(clearedValidations, 0, maxArrayValidations)
 	defer func() {
@@ -197,7 +200,7 @@ func (v SchemaValidations) Validations() SchemaValidations {
 // ClearObjectValidations returns a clone of the validations with all object validations cleared.
 //
 // Some callbacks may be set by the caller to capture changed values.
-func (v *SchemaValidations) ClearObjectValidations(cbs ...func(string, interface{})) {
+func (v *SchemaValidations) ClearObjectValidations(cbs ...func(string, any)) {
 	const maxObjectValidations = 3
 	done := make(clearedValidations, 0, maxObjectValidations)
 	defer func() {
diff --git a/validations_test.go b/validations_test.go
index 2649e9f..56c22c8 100644
--- a/validations_test.go
+++ b/validations_test.go
@@ -1,3 +1,6 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
 package spec
 
 import (
@@ -21,7 +24,7 @@ func mkVal() SchemaValidations {
 			MinItems:         conv.Pointer(int64(18)),
 			UniqueItems:      true,
 			MultipleOf:       conv.Pointer(4.4),
-			Enum:             []interface{}{"a", 12.5},
+			Enum:             []any{"a", 12.5},
 		},
 		PatternProperties: SchemaProperties{
 			"x": *BooleanProperty(),
@@ -109,7 +112,7 @@ func TestValidations(t *testing.T) {
 	require.False(t, cv.HasArrayValidations())
 
 	sv.SetValidations(val)
-	sv.ClearObjectValidations(func(validation string, _ interface{}) {
+	sv.ClearObjectValidations(func(validation string, _ any) {
 		switch validation {
 		case "minProperties", "maxProperties", "patternProperties":
 			return
diff --git a/xml_object.go b/xml_object.go
index 945a467..bf2f8f1 100644
--- a/xml_object.go
+++ b/xml_object.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
diff --git a/xml_object_test.go b/xml_object_test.go
index 8573e82..abef513 100644
--- a/xml_object_test.go
+++ b/xml_object_test.go
@@ -1,16 +1,5 @@
-// Copyright 2015 go-swagger maintainers
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//    http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
 
 package spec
 
@@ -39,7 +28,7 @@ func TestXmlObject_Serialize(t *testing.T) {
 	actual, err = json.Marshal(obj2)
 	require.NoError(t, err)
 
-	var ad map[string]interface{}
+	var ad map[string]any
 	require.NoError(t, json.Unmarshal(actual, &ad))
 	assert.Equal(t, obj2.Name, ad["name"])
 	assert.Equal(t, obj2.Namespace, ad["namespace"])

From f06cfffb0300dabf0a47b700b0fb691f9486d110 Mon Sep 17 00:00:00 2001
From: Frederic BIDON <fredbi@yahoo.com>
Date: Sun, 9 Nov 2025 14:16:31 +0100
Subject: [PATCH 27/63] tests: replaced stretchr/testify by go-openapi/testify

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
---
 cache_test.go         |  2 +-
 circular_test.go      |  4 ++--
 contact_info_test.go  |  4 ++--
 debug_test.go         |  2 +-
 expander_test.go      |  4 ++--
 go.mod                |  8 +++-----
 go.sum                | 10 ++++++----
 header_test.go        |  4 ++--
 helpers_spec_test.go  |  4 ++--
 helpers_test.go       |  4 ++--
 info_test.go          |  4 ++--
 items_test.go         |  4 ++--
 license_test.go       |  4 ++--
 normalizer_test.go    |  4 ++--
 operation_test.go     |  4 ++--
 parameters_test.go    |  4 ++--
 path_item_test.go     |  4 ++--
 paths_test.go         |  4 ++--
 ref_test.go           |  4 ++--
 resolver_test.go      |  4 ++--
 response_test.go      |  4 ++--
 responses_test.go     |  4 ++--
 schema_loader_test.go |  2 +-
 schema_test.go        |  4 ++--
 spec_test.go          |  4 ++--
 structs_test.go       |  2 +-
 swagger_test.go       |  4 ++--
 validations_test.go   |  2 +-
 xml_object_test.go    |  4 ++--
 29 files changed, 58 insertions(+), 58 deletions(-)

diff --git a/cache_test.go b/cache_test.go
index d225fb0..1ef15db 100644
--- a/cache_test.go
+++ b/cache_test.go
@@ -6,7 +6,7 @@ package spec
 import (
 	"testing"
 
-	"github.com/stretchr/testify/assert"
+	"github.com/go-openapi/testify/v2/assert"
 )
 
 func TestDefaultResolutionCache(t *testing.T) {
diff --git a/circular_test.go b/circular_test.go
index df68e23..6522ce7 100644
--- a/circular_test.go
+++ b/circular_test.go
@@ -12,8 +12,8 @@ import (
 	"testing"
 	"time"
 
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 func TestExpandCircular_Issue3(t *testing.T) {
diff --git a/contact_info_test.go b/contact_info_test.go
index 3ec4da1..6159f75 100644
--- a/contact_info_test.go
+++ b/contact_info_test.go
@@ -7,8 +7,8 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 const contactInfoJSON = `{
diff --git a/debug_test.go b/debug_test.go
index 4714961..0a8ba08 100644
--- a/debug_test.go
+++ b/debug_test.go
@@ -8,7 +8,7 @@ import (
 	"sync"
 	"testing"
 
-	"github.com/stretchr/testify/assert"
+	"github.com/go-openapi/testify/v2/assert"
 )
 
 var (
diff --git a/expander_test.go b/expander_test.go
index 47df779..eb7090a 100644
--- a/expander_test.go
+++ b/expander_test.go
@@ -13,8 +13,8 @@ import (
 	"path/filepath"
 	"testing"
 
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 const (
diff --git a/go.mod b/go.mod
index 1137b98..f0d9c0b 100644
--- a/go.mod
+++ b/go.mod
@@ -2,22 +2,20 @@ module github.com/go-openapi/spec
 
 require (
 	github.com/go-openapi/jsonpointer v0.22.1
-	github.com/go-openapi/jsonreference v0.21.2
+	github.com/go-openapi/jsonreference v0.21.3
 	github.com/go-openapi/swag/conv v0.25.1
 	github.com/go-openapi/swag/jsonname v0.25.1
 	github.com/go-openapi/swag/jsonutils v0.25.1
 	github.com/go-openapi/swag/loading v0.25.1
 	github.com/go-openapi/swag/stringutils v0.25.1
-	github.com/stretchr/testify v1.11.1
+	github.com/go-openapi/testify/v2 v2.0.2
 	go.yaml.in/yaml/v3 v3.0.4
 )
 
 require (
-	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/go-openapi/swag/typeutils v0.25.1 // indirect
 	github.com/go-openapi/swag/yamlutils v0.25.1 // indirect
-	github.com/pmezard/go-difflib v1.0.0 // indirect
-	gopkg.in/yaml.v3 v3.0.1 // indirect
+	github.com/rogpeppe/go-internal v1.14.1 // indirect
 )
 
 go 1.24.0
diff --git a/go.sum b/go.sum
index 0b75a32..c76bb4a 100644
--- a/go.sum
+++ b/go.sum
@@ -2,8 +2,8 @@ github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/go-openapi/jsonpointer v0.22.1 h1:sHYI1He3b9NqJ4wXLoJDKmUmHkWy/L7rtEo92JUxBNk=
 github.com/go-openapi/jsonpointer v0.22.1/go.mod h1:pQT9OsLkfz1yWoMgYFy4x3U5GY5nUlsOn1qSBH5MkCM=
-github.com/go-openapi/jsonreference v0.21.2 h1:Wxjda4M/BBQllegefXrY/9aq1fxBA8sI5M/lFU6tSWU=
-github.com/go-openapi/jsonreference v0.21.2/go.mod h1:pp3PEjIsJ9CZDGCNOyXIQxsNuroxm8FAJ/+quA0yKzQ=
+github.com/go-openapi/jsonreference v0.21.3 h1:96Dn+MRPa0nYAR8DR1E03SblB5FJvh7W6krPI0Z7qMc=
+github.com/go-openapi/jsonreference v0.21.3/go.mod h1:RqkUP0MrLf37HqxZxrIAtTWW4ZJIK1VzduhXYBEeGc4=
 github.com/go-openapi/swag/conv v0.25.1 h1:+9o8YUg6QuqqBM5X6rYL/p1dpWeZRhoIt9x7CCP+he0=
 github.com/go-openapi/swag/conv v0.25.1/go.mod h1:Z1mFEGPfyIKPu0806khI3zF+/EUXde+fdeksUl2NiDs=
 github.com/go-openapi/swag/jsonname v0.25.1 h1:Sgx+qbwa4ej6AomWC6pEfXrA6uP2RkaNjA9BR8a1RJU=
@@ -20,14 +20,16 @@ github.com/go-openapi/swag/typeutils v0.25.1 h1:rD/9HsEQieewNt6/k+JBwkxuAHktFtH3
 github.com/go-openapi/swag/typeutils v0.25.1/go.mod h1:9McMC/oCdS4BKwk2shEB7x17P6HmMmA6dQRtAkSnNb8=
 github.com/go-openapi/swag/yamlutils v0.25.1 h1:mry5ez8joJwzvMbaTGLhw8pXUnhDK91oSJLDPF1bmGk=
 github.com/go-openapi/swag/yamlutils v0.25.1/go.mod h1:cm9ywbzncy3y6uPm/97ysW8+wZ09qsks+9RS8fLWKqg=
+github.com/go-openapi/testify/v2 v2.0.2 h1:X999g3jeLcoY8qctY/c/Z8iBHTbwLz7R2WXd6Ub6wls=
+github.com/go-openapi/testify/v2 v2.0.2/go.mod h1:HCPmvFFnheKK2BuwSA0TbbdxJ3I16pjwMkYkP4Ywn54=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
-github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
-github.com/rogpeppe/go-internal v1.11.0/go.mod h1:ddIwULY96R17DhadqLgMfk9H9tvdUzkipdSkR5nkCZA=
+github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
+github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
 github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
 github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
diff --git a/header_test.go b/header_test.go
index 0269dee..e4a27f7 100644
--- a/header_test.go
+++ b/header_test.go
@@ -8,8 +8,8 @@ import (
 	"testing"
 
 	"github.com/go-openapi/swag/conv"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 const epsilon = 1e-9
diff --git a/helpers_spec_test.go b/helpers_spec_test.go
index ebd8a10..a2c542e 100644
--- a/helpers_spec_test.go
+++ b/helpers_spec_test.go
@@ -12,8 +12,8 @@ import (
 
 	"github.com/go-openapi/spec"
 	"github.com/go-openapi/swag/loading"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 var (
diff --git a/helpers_test.go b/helpers_test.go
index a3df526..6eab8ea 100644
--- a/helpers_test.go
+++ b/helpers_test.go
@@ -11,8 +11,8 @@ import (
 	"testing"
 
 	"github.com/go-openapi/swag/loading"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 var rex = regexp.MustCompile(`"\$ref":\s*"(.*?)"`)
diff --git a/info_test.go b/info_test.go
index e01be7b..6185d64 100644
--- a/info_test.go
+++ b/info_test.go
@@ -7,8 +7,8 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 const infoJSON = `{
diff --git a/items_test.go b/items_test.go
index f594ffc..c5c585c 100644
--- a/items_test.go
+++ b/items_test.go
@@ -8,8 +8,8 @@ import (
 	"testing"
 
 	"github.com/go-openapi/swag/conv"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 var testItems = Items{
diff --git a/license_test.go b/license_test.go
index fb957e1..1a197cb 100644
--- a/license_test.go
+++ b/license_test.go
@@ -7,8 +7,8 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 func TestIntegrationLicense(t *testing.T) {
diff --git a/normalizer_test.go b/normalizer_test.go
index 3de465e..48ab6bc 100644
--- a/normalizer_test.go
+++ b/normalizer_test.go
@@ -11,8 +11,8 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 const windowsOS = "windows"
diff --git a/operation_test.go b/operation_test.go
index ea530ee..bd1d2b5 100644
--- a/operation_test.go
+++ b/operation_test.go
@@ -9,8 +9,8 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 var operation = Operation{
diff --git a/parameters_test.go b/parameters_test.go
index 8fc4e25..6f2f0f2 100644
--- a/parameters_test.go
+++ b/parameters_test.go
@@ -8,8 +8,8 @@ import (
 	"testing"
 
 	"github.com/go-openapi/swag/conv"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 var parameter = Parameter{
diff --git a/path_item_test.go b/path_item_test.go
index b2a13c1..ddb5e10 100644
--- a/path_item_test.go
+++ b/path_item_test.go
@@ -7,8 +7,8 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 var pathItem = PathItem{
diff --git a/paths_test.go b/paths_test.go
index 42aea8b..79dce17 100644
--- a/paths_test.go
+++ b/paths_test.go
@@ -7,8 +7,8 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 var paths = Paths{
diff --git a/ref_test.go b/ref_test.go
index 839c6fe..d9e238c 100644
--- a/ref_test.go
+++ b/ref_test.go
@@ -9,8 +9,8 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 // pin pointing go-swagger/go-swagger#1816 issue with cloning ref's
diff --git a/resolver_test.go b/resolver_test.go
index 29ac095..f9e20bc 100644
--- a/resolver_test.go
+++ b/resolver_test.go
@@ -12,8 +12,8 @@ import (
 	"testing"
 
 	"github.com/go-openapi/jsonpointer"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 func TestResolveRef(t *testing.T) {
diff --git a/response_test.go b/response_test.go
index 4a2b7cb..cf62d57 100644
--- a/response_test.go
+++ b/response_test.go
@@ -21,8 +21,8 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 var response = Response{
diff --git a/responses_test.go b/responses_test.go
index 2c8b873..f920ad2 100644
--- a/responses_test.go
+++ b/responses_test.go
@@ -21,8 +21,8 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 var responses = Responses{
diff --git a/schema_loader_test.go b/schema_loader_test.go
index 50893ae..cc682d7 100644
--- a/schema_loader_test.go
+++ b/schema_loader_test.go
@@ -8,7 +8,7 @@ import (
 	"path/filepath"
 	"testing"
 
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 func TestLoader_Issue145(t *testing.T) {
diff --git a/schema_test.go b/schema_test.go
index 9b3adb6..1009fbe 100644
--- a/schema_test.go
+++ b/schema_test.go
@@ -8,8 +8,8 @@ import (
 	"testing"
 
 	"github.com/go-openapi/swag/conv"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 var schema = Schema{
diff --git a/spec_test.go b/spec_test.go
index 95ae437..f072f0c 100644
--- a/spec_test.go
+++ b/spec_test.go
@@ -9,8 +9,8 @@ import (
 	"testing"
 
 	"github.com/go-openapi/spec"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 // Test unitary fixture for dev and bug fixing
diff --git a/structs_test.go b/structs_test.go
index a1c9c11..684c442 100644
--- a/structs_test.go
+++ b/structs_test.go
@@ -8,7 +8,7 @@ import (
 	"reflect"
 	"testing"
 
-	"github.com/stretchr/testify/assert"
+	"github.com/go-openapi/testify/v2/assert"
 	yaml "go.yaml.in/yaml/v3"
 )
 
diff --git a/swagger_test.go b/swagger_test.go
index 2580da6..4aad391 100644
--- a/swagger_test.go
+++ b/swagger_test.go
@@ -7,8 +7,8 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 var spec = Swagger{
diff --git a/validations_test.go b/validations_test.go
index 56c22c8..64422f4 100644
--- a/validations_test.go
+++ b/validations_test.go
@@ -7,7 +7,7 @@ import (
 	"testing"
 
 	"github.com/go-openapi/swag/conv"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 func mkVal() SchemaValidations {
diff --git a/xml_object_test.go b/xml_object_test.go
index abef513..f0c46ba 100644
--- a/xml_object_test.go
+++ b/xml_object_test.go
@@ -7,8 +7,8 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
+	"github.com/go-openapi/testify/v2/assert"
+	"github.com/go-openapi/testify/v2/require"
 )
 
 func TestXmlObject_Serialize(t *testing.T) {

From c14c0a6c2992ca2a02120dc5f2747bbc4a0a761f Mon Sep 17 00:00:00 2001
From: Oleksandr Redko <oleksandr.red+github@gmail.com>
Date: Tue, 11 Nov 2025 21:26:22 +0200
Subject: [PATCH 28/63] chore: fix typos in comments

Signed-off-by: Oleksandr Redko <oleksandr.red+github@gmail.com>
---
 normalizer.go    | 2 +-
 operation.go     | 2 +-
 ref.go           | 2 +-
 resolver.go      | 2 +-
 resolver_test.go | 4 ++--
 spec.go          | 2 +-
 spec_test.go     | 2 +-
 validations.go   | 2 +-
 8 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/normalizer.go b/normalizer.go
index c3ea810..e1d7c58 100644
--- a/normalizer.go
+++ b/normalizer.go
@@ -84,7 +84,7 @@ func denormalizeRef(ref *Ref, originalRelativeBase, id string) Ref {
 	if id != "" {
 		idBaseURL, err := parseURL(id)
 		if err == nil { // if the schema id is not usable as a URI, ignore it
-			if ref, ok := rebase(ref, idBaseURL, true); ok { // rebase, but keep references to root unchaged (do not want $ref: "")
+			if ref, ok := rebase(ref, idBaseURL, true); ok { // rebase, but keep references to root unchanged (do not want $ref: "")
 				// $ref relative to the ID of the schema in the root document
 				return ref
 			}
diff --git a/operation.go b/operation.go
index bbf8c75..29d9c4f 100644
--- a/operation.go
+++ b/operation.go
@@ -176,7 +176,7 @@ func (o *Operation) Deprecate() *Operation {
 	return o
 }
 
-// Undeprecate marks the operation as not deprected
+// Undeprecate marks the operation as not deprecated
 func (o *Operation) Undeprecate() *Operation {
 	o.Deprecated = false
 	return o
diff --git a/ref.go b/ref.go
index c927926..1d1c759 100644
--- a/ref.go
+++ b/ref.go
@@ -24,7 +24,7 @@ func (r Refable) MarshalJSON() ([]byte, error) {
 	return r.Ref.MarshalJSON()
 }
 
-// UnmarshalJSON unmarshalss the ref from json
+// UnmarshalJSON unmarshals the ref from json
 func (r *Refable) UnmarshalJSON(d []byte) error {
 	return json.Unmarshal(d, &r.Ref)
 }
diff --git a/resolver.go b/resolver.go
index b82c182..600574e 100644
--- a/resolver.go
+++ b/resolver.go
@@ -110,7 +110,7 @@ func ResolvePathItem(root any, ref Ref, options *ExpandOptions) (*PathItem, erro
 
 // ResolveItemsWithBase resolves parameter items reference against a context root and base path.
 //
-// NOTE: stricly speaking, this construct is not supported by Swagger 2.0.
+// NOTE: strictly speaking, this construct is not supported by Swagger 2.0.
 // Similarly, $ref are forbidden in response headers.
 func ResolveItemsWithBase(root any, ref Ref, options *ExpandOptions) (*Items, error) {
 	result := new(Items)
diff --git a/resolver_test.go b/resolver_test.go
index f9e20bc..e8d6311 100644
--- a/resolver_test.go
+++ b/resolver_test.go
@@ -412,7 +412,7 @@ func TestResolveExtraItem(t *testing.T) {
 
 	require.NoError(t, json.Unmarshal(specDoc, spec))
 
-	// Resolve param Items use case: here we explicitly resolve the unsuppord case
+	// Resolve param Items use case: here we explicitly resolve the unsupported case
 	parm := spec.Paths.Paths["/employees"].Get.Parameters[0]
 	parmItem, err := ResolveItems(spec, parm.Items.Ref, &ExpandOptions{RelativeBase: extraRefFixture})
 	require.NoError(t, err)
@@ -424,7 +424,7 @@ func TestResolveExtraItem(t *testing.T) {
          "format": "int32"
 			 }`, jazon)
 
-	// Resolve header Items use case: here we explicitly resolve the unsuppord case
+	// Resolve header Items use case: here we explicitly resolve the unsupported case
 	hdr := spec.Paths.Paths["/employees"].Get.Responses.StatusCodeResponses[200].Headers["X-header"]
 	hdrItem, err := ResolveItems(spec, hdr.Items.Ref, &ExpandOptions{RelativeBase: extraRefFixture})
 	require.NoError(t, err)
diff --git a/spec.go b/spec.go
index 05c3fc7..0d0aaab 100644
--- a/spec.go
+++ b/spec.go
@@ -28,7 +28,7 @@ func MustLoadJSONSchemaDraft04() *Schema {
 	return d
 }
 
-// JSONSchemaDraft04 loads the json schema document for json shema draft04
+// JSONSchemaDraft04 loads the json schema document for json schema draft04
 func JSONSchemaDraft04() (*Schema, error) {
 	b, err := jsonschemaDraft04JSONBytes()
 	if err != nil {
diff --git a/spec_test.go b/spec_test.go
index f072f0c..998c7c7 100644
--- a/spec_test.go
+++ b/spec_test.go
@@ -37,7 +37,7 @@ func TestSpec_Issue2743(t *testing.T) {
 			spec.ExpandSpec(sp, &spec.ExpandOptions{RelativeBase: path, SkipSchemas: true, PathLoader: testLoader}),
 		)
 
-		t.Run("all $ref properly reolve when expanding again", func(t *testing.T) {
+		t.Run("all $ref properly resolve when expanding again", func(t *testing.T) {
 			require.NoError(t,
 				spec.ExpandSpec(sp, &spec.ExpandOptions{RelativeBase: path, SkipSchemas: false, PathLoader: testLoader}),
 			)
diff --git a/validations.go b/validations.go
index 4f70e30..2c0dc42 100644
--- a/validations.go
+++ b/validations.go
@@ -166,7 +166,7 @@ func (v CommonValidations) HasEnum() bool {
 // SchemaValidations describes the validation properties of a schema
 //
 // NOTE: at this moment, this is not embedded in SchemaProps because this would induce a breaking change
-// in the exported members: all initializers using litterals would fail.
+// in the exported members: all initializers using literals would fail.
 type SchemaValidations struct {
 	CommonValidations
 

From 817d7f9b4e3cce9f772ab39428008f72246ff81a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 14 Nov 2025 09:02:17 +0000
Subject: [PATCH 29/63] build(deps): bump golangci/golangci-lint-action

Bumps the development-dependencies group with 1 update: [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action).


Updates `golangci/golangci-lint-action` from 8 to 9
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v8...v9)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/go-test.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 6c2e0a1..bc76544 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -21,7 +21,7 @@ jobs:
           check-latest: true
           cache: true
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v8
+        uses: golangci/golangci-lint-action@v9
         with:
           version: latest
           only-new-issues: true

From f0c3eff603c95f155dca9aa792d36a23742e9c1d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 21 Nov 2025 09:01:24 +0000
Subject: [PATCH 30/63] build(deps): bump the go-openapi-dependencies group
 with 6 updates

Bumps the go-openapi-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) | `0.22.1` | `0.22.3` |
| [github.com/go-openapi/swag/conv](https://github.com/go-openapi/swag) | `0.25.1` | `0.25.3` |
| [github.com/go-openapi/swag/jsonname](https://github.com/go-openapi/swag) | `0.25.1` | `0.25.3` |
| [github.com/go-openapi/swag/jsonutils](https://github.com/go-openapi/swag) | `0.25.1` | `0.25.3` |
| [github.com/go-openapi/swag/loading](https://github.com/go-openapi/swag) | `0.25.1` | `0.25.3` |
| [github.com/go-openapi/swag/stringutils](https://github.com/go-openapi/swag) | `0.25.1` | `0.25.3` |


Updates `github.com/go-openapi/jsonpointer` from 0.22.1 to 0.22.3
- [Release notes](https://github.com/go-openapi/jsonpointer/releases)
- [Commits](https://github.com/go-openapi/jsonpointer/compare/v0.22.1...v0.22.3)

Updates `github.com/go-openapi/swag/conv` from 0.25.1 to 0.25.3
- [Commits](https://github.com/go-openapi/swag/compare/v0.25.1...v0.25.3)

Updates `github.com/go-openapi/swag/jsonname` from 0.25.1 to 0.25.3
- [Commits](https://github.com/go-openapi/swag/compare/v0.25.1...v0.25.3)

Updates `github.com/go-openapi/swag/jsonutils` from 0.25.1 to 0.25.3
- [Commits](https://github.com/go-openapi/swag/compare/v0.25.1...v0.25.3)

Updates `github.com/go-openapi/swag/loading` from 0.25.1 to 0.25.3
- [Commits](https://github.com/go-openapi/swag/compare/v0.25.1...v0.25.3)

Updates `github.com/go-openapi/swag/stringutils` from 0.25.1 to 0.25.3
- [Commits](https://github.com/go-openapi/swag/compare/v0.25.1...v0.25.3)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 0.22.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/conv
  dependency-version: 0.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/jsonname
  dependency-version: 0.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/jsonutils
  dependency-version: 0.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/loading
  dependency-version: 0.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/stringutils
  dependency-version: 0.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 go.mod | 17 ++++++++---------
 go.sum | 46 ++++++++++++++++++++--------------------------
 2 files changed, 28 insertions(+), 35 deletions(-)

diff --git a/go.mod b/go.mod
index f0d9c0b..9ecba75 100644
--- a/go.mod
+++ b/go.mod
@@ -1,21 +1,20 @@
 module github.com/go-openapi/spec
 
 require (
-	github.com/go-openapi/jsonpointer v0.22.1
+	github.com/go-openapi/jsonpointer v0.22.3
 	github.com/go-openapi/jsonreference v0.21.3
-	github.com/go-openapi/swag/conv v0.25.1
-	github.com/go-openapi/swag/jsonname v0.25.1
-	github.com/go-openapi/swag/jsonutils v0.25.1
-	github.com/go-openapi/swag/loading v0.25.1
-	github.com/go-openapi/swag/stringutils v0.25.1
+	github.com/go-openapi/swag/conv v0.25.3
+	github.com/go-openapi/swag/jsonname v0.25.3
+	github.com/go-openapi/swag/jsonutils v0.25.3
+	github.com/go-openapi/swag/loading v0.25.3
+	github.com/go-openapi/swag/stringutils v0.25.3
 	github.com/go-openapi/testify/v2 v2.0.2
 	go.yaml.in/yaml/v3 v3.0.4
 )
 
 require (
-	github.com/go-openapi/swag/typeutils v0.25.1 // indirect
-	github.com/go-openapi/swag/yamlutils v0.25.1 // indirect
-	github.com/rogpeppe/go-internal v1.14.1 // indirect
+	github.com/go-openapi/swag/typeutils v0.25.3 // indirect
+	github.com/go-openapi/swag/yamlutils v0.25.3 // indirect
 )
 
 go 1.24.0
diff --git a/go.sum b/go.sum
index c76bb4a..b00b90e 100644
--- a/go.sum
+++ b/go.sum
@@ -1,41 +1,35 @@
-github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
-github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/go-openapi/jsonpointer v0.22.1 h1:sHYI1He3b9NqJ4wXLoJDKmUmHkWy/L7rtEo92JUxBNk=
-github.com/go-openapi/jsonpointer v0.22.1/go.mod h1:pQT9OsLkfz1yWoMgYFy4x3U5GY5nUlsOn1qSBH5MkCM=
+github.com/go-openapi/jsonpointer v0.22.3 h1:dKMwfV4fmt6Ah90zloTbUKWMD+0he+12XYAsPotrkn8=
+github.com/go-openapi/jsonpointer v0.22.3/go.mod h1:0lBbqeRsQ5lIanv3LHZBrmRGHLHcQoOXQnf88fHlGWo=
 github.com/go-openapi/jsonreference v0.21.3 h1:96Dn+MRPa0nYAR8DR1E03SblB5FJvh7W6krPI0Z7qMc=
 github.com/go-openapi/jsonreference v0.21.3/go.mod h1:RqkUP0MrLf37HqxZxrIAtTWW4ZJIK1VzduhXYBEeGc4=
-github.com/go-openapi/swag/conv v0.25.1 h1:+9o8YUg6QuqqBM5X6rYL/p1dpWeZRhoIt9x7CCP+he0=
-github.com/go-openapi/swag/conv v0.25.1/go.mod h1:Z1mFEGPfyIKPu0806khI3zF+/EUXde+fdeksUl2NiDs=
-github.com/go-openapi/swag/jsonname v0.25.1 h1:Sgx+qbwa4ej6AomWC6pEfXrA6uP2RkaNjA9BR8a1RJU=
-github.com/go-openapi/swag/jsonname v0.25.1/go.mod h1:71Tekow6UOLBD3wS7XhdT98g5J5GR13NOTQ9/6Q11Zo=
-github.com/go-openapi/swag/jsonutils v0.25.1 h1:AihLHaD0brrkJoMqEZOBNzTLnk81Kg9cWr+SPtxtgl8=
-github.com/go-openapi/swag/jsonutils v0.25.1/go.mod h1:JpEkAjxQXpiaHmRO04N1zE4qbUEg3b7Udll7AMGTNOo=
-github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.1 h1:DSQGcdB6G0N9c/KhtpYc71PzzGEIc/fZ1no35x4/XBY=
-github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.1/go.mod h1:kjmweouyPwRUEYMSrbAidoLMGeJ5p6zdHi9BgZiqmsg=
-github.com/go-openapi/swag/loading v0.25.1 h1:6OruqzjWoJyanZOim58iG2vj934TysYVptyaoXS24kw=
-github.com/go-openapi/swag/loading v0.25.1/go.mod h1:xoIe2EG32NOYYbqxvXgPzne989bWvSNoWoyQVWEZicc=
-github.com/go-openapi/swag/stringutils v0.25.1 h1:Xasqgjvk30eUe8VKdmyzKtjkVjeiXx1Iz0zDfMNpPbw=
-github.com/go-openapi/swag/stringutils v0.25.1/go.mod h1:JLdSAq5169HaiDUbTvArA2yQxmgn4D6h4A+4HqVvAYg=
-github.com/go-openapi/swag/typeutils v0.25.1 h1:rD/9HsEQieewNt6/k+JBwkxuAHktFtH3I3ysiFZqukA=
-github.com/go-openapi/swag/typeutils v0.25.1/go.mod h1:9McMC/oCdS4BKwk2shEB7x17P6HmMmA6dQRtAkSnNb8=
-github.com/go-openapi/swag/yamlutils v0.25.1 h1:mry5ez8joJwzvMbaTGLhw8pXUnhDK91oSJLDPF1bmGk=
-github.com/go-openapi/swag/yamlutils v0.25.1/go.mod h1:cm9ywbzncy3y6uPm/97ysW8+wZ09qsks+9RS8fLWKqg=
+github.com/go-openapi/swag/conv v0.25.3 h1:PcB18wwfba7MN5BVlBIV+VxvUUeC2kEuCEyJ2/t2X7E=
+github.com/go-openapi/swag/conv v0.25.3/go.mod h1:n4Ibfwhn8NJnPXNRhBO5Cqb9ez7alBR40JS4rbASUPU=
+github.com/go-openapi/swag/jsonname v0.25.3 h1:U20VKDS74HiPaLV7UZkztpyVOw3JNVsit+w+gTXRj0A=
+github.com/go-openapi/swag/jsonname v0.25.3/go.mod h1:GPVEk9CWVhNvWhZgrnvRA6utbAltopbKwDu8mXNUMag=
+github.com/go-openapi/swag/jsonutils v0.25.3 h1:kV7wer79KXUM4Ea4tBdAVTU842Rg6tWstX3QbM4fGdw=
+github.com/go-openapi/swag/jsonutils v0.25.3/go.mod h1:ILcKqe4HC1VEZmJx51cVuZQ6MF8QvdfXsQfiaCs0z9o=
+github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.3 h1:/i3E9hBujtXfHy91rjtwJ7Fgv5TuDHgnSrYjhFxwxOw=
+github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.3/go.mod h1:8kYfCR2rHyOj25HVvxL5Nm8wkfzggddgjZm6RgjT8Ao=
+github.com/go-openapi/swag/loading v0.25.3 h1:Nn65Zlzf4854MY6Ft0JdNrtnHh2bdcS/tXckpSnOb2Y=
+github.com/go-openapi/swag/loading v0.25.3/go.mod h1:xajJ5P4Ang+cwM5gKFrHBgkEDWfLcsAKepIuzTmOb/c=
+github.com/go-openapi/swag/stringutils v0.25.3 h1:nAmWq1fUTWl/XiaEPwALjp/8BPZJun70iDHRNq/sH6w=
+github.com/go-openapi/swag/stringutils v0.25.3/go.mod h1:GTsRvhJW5xM5gkgiFe0fV3PUlFm0dr8vki6/VSRaZK0=
+github.com/go-openapi/swag/typeutils v0.25.3 h1:2w4mEEo7DQt3V4veWMZw0yTPQibiL3ri2fdDV4t2TQc=
+github.com/go-openapi/swag/typeutils v0.25.3/go.mod h1:Ou7g//Wx8tTLS9vG0UmzfCsjZjKhpjxayRKTHXf2pTE=
+github.com/go-openapi/swag/yamlutils v0.25.3 h1:LKTJjCn/W1ZfMec0XDL4Vxh8kyAnv1orH5F2OREDUrg=
+github.com/go-openapi/swag/yamlutils v0.25.3/go.mod h1:Y7QN6Wc5DOBXK14/xeo1cQlq0EA0wvLoSv13gDQoCao=
+github.com/go-openapi/testify/enable/yaml/v2 v2.0.2 h1:0+Y41Pz1NkbTHz8NngxTuAXxEodtNSI1WG1c/m5Akw4=
+github.com/go-openapi/testify/enable/yaml/v2 v2.0.2/go.mod h1:kme83333GCtJQHXQ8UKX3IBZu6z8T5Dvy5+CW3NLUUg=
 github.com/go-openapi/testify/v2 v2.0.2 h1:X999g3jeLcoY8qctY/c/Z8iBHTbwLz7R2WXd6Ub6wls=
 github.com/go-openapi/testify/v2 v2.0.2/go.mod h1:HCPmvFFnheKK2BuwSA0TbbdxJ3I16pjwMkYkP4Ywn54=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
-github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
-github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
 github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
-github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
-github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
-gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
-gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=

From f5320823fccc9fb9ec1fc5dd7467cd01a3d2dd90 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 28 Nov 2025 09:01:13 +0000
Subject: [PATCH 31/63] build(deps): bump the go-openapi-dependencies group
 with 5 updates

Bumps the go-openapi-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-openapi/swag/conv](https://github.com/go-openapi/swag) | `0.25.3` | `0.25.4` |
| [github.com/go-openapi/swag/jsonname](https://github.com/go-openapi/swag) | `0.25.3` | `0.25.4` |
| [github.com/go-openapi/swag/jsonutils](https://github.com/go-openapi/swag) | `0.25.3` | `0.25.4` |
| [github.com/go-openapi/swag/loading](https://github.com/go-openapi/swag) | `0.25.3` | `0.25.4` |
| [github.com/go-openapi/swag/stringutils](https://github.com/go-openapi/swag) | `0.25.3` | `0.25.4` |


Updates `github.com/go-openapi/swag/conv` from 0.25.3 to 0.25.4
- [Commits](https://github.com/go-openapi/swag/compare/v0.25.3...v0.25.4)

Updates `github.com/go-openapi/swag/jsonname` from 0.25.3 to 0.25.4
- [Commits](https://github.com/go-openapi/swag/compare/v0.25.3...v0.25.4)

Updates `github.com/go-openapi/swag/jsonutils` from 0.25.3 to 0.25.4
- [Commits](https://github.com/go-openapi/swag/compare/v0.25.3...v0.25.4)

Updates `github.com/go-openapi/swag/loading` from 0.25.3 to 0.25.4
- [Commits](https://github.com/go-openapi/swag/compare/v0.25.3...v0.25.4)

Updates `github.com/go-openapi/swag/stringutils` from 0.25.3 to 0.25.4
- [Commits](https://github.com/go-openapi/swag/compare/v0.25.3...v0.25.4)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/swag/conv
  dependency-version: 0.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/jsonname
  dependency-version: 0.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/jsonutils
  dependency-version: 0.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/loading
  dependency-version: 0.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/stringutils
  dependency-version: 0.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 go.mod | 14 +++++++-------
 go.sum | 41 +++++++++++++++++------------------------
 2 files changed, 24 insertions(+), 31 deletions(-)

diff --git a/go.mod b/go.mod
index 9ecba75..1d26480 100644
--- a/go.mod
+++ b/go.mod
@@ -3,18 +3,18 @@ module github.com/go-openapi/spec
 require (
 	github.com/go-openapi/jsonpointer v0.22.3
 	github.com/go-openapi/jsonreference v0.21.3
-	github.com/go-openapi/swag/conv v0.25.3
-	github.com/go-openapi/swag/jsonname v0.25.3
-	github.com/go-openapi/swag/jsonutils v0.25.3
-	github.com/go-openapi/swag/loading v0.25.3
-	github.com/go-openapi/swag/stringutils v0.25.3
+	github.com/go-openapi/swag/conv v0.25.4
+	github.com/go-openapi/swag/jsonname v0.25.4
+	github.com/go-openapi/swag/jsonutils v0.25.4
+	github.com/go-openapi/swag/loading v0.25.4
+	github.com/go-openapi/swag/stringutils v0.25.4
 	github.com/go-openapi/testify/v2 v2.0.2
 	go.yaml.in/yaml/v3 v3.0.4
 )
 
 require (
-	github.com/go-openapi/swag/typeutils v0.25.3 // indirect
-	github.com/go-openapi/swag/yamlutils v0.25.3 // indirect
+	github.com/go-openapi/swag/typeutils v0.25.4 // indirect
+	github.com/go-openapi/swag/yamlutils v0.25.4 // indirect
 )
 
 go 1.24.0
diff --git a/go.sum b/go.sum
index b00b90e..278a904 100644
--- a/go.sum
+++ b/go.sum
@@ -2,34 +2,27 @@ github.com/go-openapi/jsonpointer v0.22.3 h1:dKMwfV4fmt6Ah90zloTbUKWMD+0he+12XYA
 github.com/go-openapi/jsonpointer v0.22.3/go.mod h1:0lBbqeRsQ5lIanv3LHZBrmRGHLHcQoOXQnf88fHlGWo=
 github.com/go-openapi/jsonreference v0.21.3 h1:96Dn+MRPa0nYAR8DR1E03SblB5FJvh7W6krPI0Z7qMc=
 github.com/go-openapi/jsonreference v0.21.3/go.mod h1:RqkUP0MrLf37HqxZxrIAtTWW4ZJIK1VzduhXYBEeGc4=
-github.com/go-openapi/swag/conv v0.25.3 h1:PcB18wwfba7MN5BVlBIV+VxvUUeC2kEuCEyJ2/t2X7E=
-github.com/go-openapi/swag/conv v0.25.3/go.mod h1:n4Ibfwhn8NJnPXNRhBO5Cqb9ez7alBR40JS4rbASUPU=
-github.com/go-openapi/swag/jsonname v0.25.3 h1:U20VKDS74HiPaLV7UZkztpyVOw3JNVsit+w+gTXRj0A=
-github.com/go-openapi/swag/jsonname v0.25.3/go.mod h1:GPVEk9CWVhNvWhZgrnvRA6utbAltopbKwDu8mXNUMag=
-github.com/go-openapi/swag/jsonutils v0.25.3 h1:kV7wer79KXUM4Ea4tBdAVTU842Rg6tWstX3QbM4fGdw=
-github.com/go-openapi/swag/jsonutils v0.25.3/go.mod h1:ILcKqe4HC1VEZmJx51cVuZQ6MF8QvdfXsQfiaCs0z9o=
-github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.3 h1:/i3E9hBujtXfHy91rjtwJ7Fgv5TuDHgnSrYjhFxwxOw=
-github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.3/go.mod h1:8kYfCR2rHyOj25HVvxL5Nm8wkfzggddgjZm6RgjT8Ao=
-github.com/go-openapi/swag/loading v0.25.3 h1:Nn65Zlzf4854MY6Ft0JdNrtnHh2bdcS/tXckpSnOb2Y=
-github.com/go-openapi/swag/loading v0.25.3/go.mod h1:xajJ5P4Ang+cwM5gKFrHBgkEDWfLcsAKepIuzTmOb/c=
-github.com/go-openapi/swag/stringutils v0.25.3 h1:nAmWq1fUTWl/XiaEPwALjp/8BPZJun70iDHRNq/sH6w=
-github.com/go-openapi/swag/stringutils v0.25.3/go.mod h1:GTsRvhJW5xM5gkgiFe0fV3PUlFm0dr8vki6/VSRaZK0=
-github.com/go-openapi/swag/typeutils v0.25.3 h1:2w4mEEo7DQt3V4veWMZw0yTPQibiL3ri2fdDV4t2TQc=
-github.com/go-openapi/swag/typeutils v0.25.3/go.mod h1:Ou7g//Wx8tTLS9vG0UmzfCsjZjKhpjxayRKTHXf2pTE=
-github.com/go-openapi/swag/yamlutils v0.25.3 h1:LKTJjCn/W1ZfMec0XDL4Vxh8kyAnv1orH5F2OREDUrg=
-github.com/go-openapi/swag/yamlutils v0.25.3/go.mod h1:Y7QN6Wc5DOBXK14/xeo1cQlq0EA0wvLoSv13gDQoCao=
+github.com/go-openapi/swag/conv v0.25.4 h1:/Dd7p0LZXczgUcC/Ikm1+YqVzkEeCc9LnOWjfkpkfe4=
+github.com/go-openapi/swag/conv v0.25.4/go.mod h1:3LXfie/lwoAv0NHoEuY1hjoFAYkvlqI/Bn5EQDD3PPU=
+github.com/go-openapi/swag/jsonname v0.25.4 h1:bZH0+MsS03MbnwBXYhuTttMOqk+5KcQ9869Vye1bNHI=
+github.com/go-openapi/swag/jsonname v0.25.4/go.mod h1:GPVEk9CWVhNvWhZgrnvRA6utbAltopbKwDu8mXNUMag=
+github.com/go-openapi/swag/jsonutils v0.25.4 h1:VSchfbGhD4UTf4vCdR2F4TLBdLwHyUDTd1/q4i+jGZA=
+github.com/go-openapi/swag/jsonutils v0.25.4/go.mod h1:7OYGXpvVFPn4PpaSdPHJBtF0iGnbEaTk8AvBkoWnaAY=
+github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.4 h1:IACsSvBhiNJwlDix7wq39SS2Fh7lUOCJRmx/4SN4sVo=
+github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.4/go.mod h1:Mt0Ost9l3cUzVv4OEZG+WSeoHwjWLnarzMePNDAOBiM=
+github.com/go-openapi/swag/loading v0.25.4 h1:jN4MvLj0X6yhCDduRsxDDw1aHe+ZWoLjW+9ZQWIKn2s=
+github.com/go-openapi/swag/loading v0.25.4/go.mod h1:rpUM1ZiyEP9+mNLIQUdMiD7dCETXvkkC30z53i+ftTE=
+github.com/go-openapi/swag/stringutils v0.25.4 h1:O6dU1Rd8bej4HPA3/CLPciNBBDwZj9HiEpdVsb8B5A8=
+github.com/go-openapi/swag/stringutils v0.25.4/go.mod h1:GTsRvhJW5xM5gkgiFe0fV3PUlFm0dr8vki6/VSRaZK0=
+github.com/go-openapi/swag/typeutils v0.25.4 h1:1/fbZOUN472NTc39zpa+YGHn3jzHWhv42wAJSN91wRw=
+github.com/go-openapi/swag/typeutils v0.25.4/go.mod h1:Ou7g//Wx8tTLS9vG0UmzfCsjZjKhpjxayRKTHXf2pTE=
+github.com/go-openapi/swag/yamlutils v0.25.4 h1:6jdaeSItEUb7ioS9lFoCZ65Cne1/RZtPBZ9A56h92Sw=
+github.com/go-openapi/swag/yamlutils v0.25.4/go.mod h1:MNzq1ulQu+yd8Kl7wPOut/YHAAU/H6hL91fF+E2RFwc=
 github.com/go-openapi/testify/enable/yaml/v2 v2.0.2 h1:0+Y41Pz1NkbTHz8NngxTuAXxEodtNSI1WG1c/m5Akw4=
 github.com/go-openapi/testify/enable/yaml/v2 v2.0.2/go.mod h1:kme83333GCtJQHXQ8UKX3IBZu6z8T5Dvy5+CW3NLUUg=
 github.com/go-openapi/testify/v2 v2.0.2 h1:X999g3jeLcoY8qctY/c/Z8iBHTbwLz7R2WXd6Ub6wls=
 github.com/go-openapi/testify/v2 v2.0.2/go.mod h1:HCPmvFFnheKK2BuwSA0TbbdxJ3I16pjwMkYkP4Ywn54=
-github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
-github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
-github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
-github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
-github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
-github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
-gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
-gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=

From a637b92b640309c030f2c84ccfe2b1ff13bc6218 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 5 Dec 2025 09:02:09 +0000
Subject: [PATCH 32/63] build(deps): bump actions/checkout in the
 development-dependencies group

Bumps the development-dependencies group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 5 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/go-test.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index bc76544..c98d613 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -14,7 +14,7 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-go@v6
         with:
           go-version: stable
@@ -43,7 +43,7 @@ jobs:
         check-latest: true
         cache: true
 
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - name: Run unit tests
       shell: bash
       run: go test -v -race -coverprofile="coverage-${{ matrix.os }}.${{ matrix.go_version }}.out" -covermode=atomic -coverpkg=$(go list)/... ./...

From 4f79daae877e0fa942765d18698a7ba9056c3b5a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20BIDON?= <fredbi@yahoo.com>
Date: Mon, 8 Dec 2025 20:52:19 +0100
Subject: [PATCH 33/63] ci: aligned CI and doc with go-openapi repos
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Frédéric BIDON <fredbi@yahoo.com>
---
 .cliff.toml                        | 181 +++++++++++++++++++++
 .github/CONTRIBUTING.md            | 247 ++++++++++++++++++++---------
 .github/DCO.md                     |  40 +++++
 .github/workflows/auto-merge.yml   |  46 ++----
 .github/workflows/bump-release.yml |  46 ++++++
 .github/workflows/codeql.yml       |  22 +++
 .github/workflows/contributors.yml |  18 +++
 .github/workflows/go-test.yml      |  52 +-----
 .github/workflows/release.yml      |  18 +++
 .github/workflows/scanner.yml      |  19 +++
 .github/workflows/tag-release.yml  |  19 +++
 .golangci.yml                      |  29 ++--
 README.md                          |  93 ++++++++++-
 README.old                         |  58 +++++++
 SECURITY.md                        |  19 +++
 docs/MAINTAINERS.md                | 157 ++++++++++++++++++
 docs/STYLE.md                      |  83 ++++++++++
 17 files changed, 962 insertions(+), 185 deletions(-)
 create mode 100644 .cliff.toml
 create mode 100644 .github/DCO.md
 create mode 100644 .github/workflows/bump-release.yml
 create mode 100644 .github/workflows/codeql.yml
 create mode 100644 .github/workflows/contributors.yml
 create mode 100644 .github/workflows/release.yml
 create mode 100644 .github/workflows/scanner.yml
 create mode 100644 .github/workflows/tag-release.yml
 create mode 100644 README.old
 create mode 100644 SECURITY.md
 create mode 100644 docs/MAINTAINERS.md
 create mode 100644 docs/STYLE.md

diff --git a/.cliff.toml b/.cliff.toml
new file mode 100644
index 0000000..702629f
--- /dev/null
+++ b/.cliff.toml
@@ -0,0 +1,181 @@
+# git-cliff ~ configuration file
+# https://git-cliff.org/docs/configuration
+
+[changelog]
+header = """
+"""
+
+footer = """
+
+-----
+
+**[{{ remote.github.repo }}]({{ self::remote_url() }}) license terms**
+
+[![License][license-badge]][license-url]
+
+[license-badge]: http://img.shields.io/badge/license-Apache%20v2-orange.svg
+[license-url]: {{ self::remote_url() }}/?tab=Apache-2.0-1-ov-file#readme
+
+{%- macro remote_url() -%}
+  https://github.com/{{ remote.github.owner }}/{{ remote.github.repo }}
+{%- endmacro -%}
+"""
+
+body = """
+{%- if version %}
+## [{{ version | trim_start_matches(pat="v") }}]({{ self::remote_url() }}/tree/{{ version }}) - {{ timestamp | date(format="%Y-%m-%d") }}
+{%- else %}
+## [unreleased]
+{%- endif %}
+{%- if message %}
+  {%- raw %}\n{% endraw %}
+{{ message }}
+  {%- raw %}\n{% endraw %}
+{%- endif %}
+{%- if version %}
+  {%- if previous.version %}
+
+**Full Changelog**: <{{ self::remote_url() }}/compare/{{ previous.version }}...{{ version }}>
+  {%- endif %}
+{%- else %}
+  {%- raw %}\n{% endraw %}
+{%- endif %}
+
+{%- if statistics %}{% if statistics.commit_count %}
+  {%- raw %}\n{% endraw %}
+{{ statistics.commit_count }} commits in this release.
+  {%- raw %}\n{% endraw %}
+{%- endif %}{% endif %}
+-----
+
+{%- for group, commits in commits | group_by(attribute="group") %}
+  {%- raw %}\n{% endraw %}
+### {{ group | upper_first }}
+    {%- raw %}\n{% endraw %}
+    {%- for commit in commits %}
+      {%- if commit.remote.pr_title %}
+        {%- set commit_message = commit.remote.pr_title %}
+      {%- else %}
+        {%- set commit_message = commit.message %}
+      {%- endif %}
+* {{ commit_message | split(pat="\n") | first | trim }}
+      {%- if commit.remote.username %}
+{%- raw %} {% endraw %}by [@{{ commit.remote.username }}](https://github.com/{{ commit.remote.username }})
+      {%- endif %}
+      {%- if commit.remote.pr_number %}
+{%- raw %} {% endraw %}in [#{{ commit.remote.pr_number }}]({{ self::remote_url() }}/pull/{{ commit.remote.pr_number }})
+      {%- endif %}
+{%- raw %} {% endraw %}[...]({{ self::remote_url() }}/commit/{{ commit.id }})
+  {%- endfor %}
+{%- endfor %}
+
+{%- if github %}
+{%- raw %}\n{% endraw -%}
+  {%- set all_contributors = github.contributors | length %}
+  {%- if github.contributors | filter(attribute="username", value="dependabot[bot]") | length < all_contributors %}
+-----
+
+### People who contributed to this release
+  {% endif %}
+  {%- for contributor in github.contributors | filter(attribute="username") | sort(attribute="username") %}
+    {%- if contributor.username != "dependabot[bot]" and contributor.username != "github-actions[bot]" %}
+* [@{{ contributor.username }}](https://github.com/{{ contributor.username }})
+    {%- endif %}
+  {%- endfor %}
+
+  {% if github.contributors | filter(attribute="is_first_time", value=true) | length != 0 %}
+-----
+    {%- raw %}\n{% endraw %}
+
+### New Contributors
+  {%- endif %}
+
+  {%- for contributor in github.contributors | filter(attribute="is_first_time", value=true) %}
+    {%- if contributor.username != "dependabot[bot]" and contributor.username != "github-actions[bot]" %}
+* @{{ contributor.username }} made their first contribution
+      {%- if contributor.pr_number %}
+  in [#{{ contributor.pr_number }}]({{ self::remote_url() }}/pull/{{ contributor.pr_number }}) \
+      {%- endif %}
+    {%- endif %}
+  {%- endfor %}
+{%- endif %}
+
+{%- raw %}\n{% endraw %}
+
+{%- macro remote_url() -%}
+  https://github.com/{{ remote.github.owner }}/{{ remote.github.repo }}
+{%- endmacro -%}
+"""
+# Remove leading and trailing whitespaces from the changelog's body.
+trim = true
+# Render body even when there are no releases to process.
+render_always = true
+# An array of regex based postprocessors to modify the changelog.
+postprocessors = [
+    # Replace the placeholder <REPO> with a URL.
+    #{ pattern = '<REPO>', replace = "https://github.com/orhun/git-cliff" },
+]
+# output file path
+# output = "test.md"
+
+[git]
+# Parse commits according to the conventional commits specification.
+# See https://www.conventionalcommits.org
+conventional_commits = false
+# Exclude commits that do not match the conventional commits specification.
+filter_unconventional = false
+# Require all commits to be conventional.
+# Takes precedence over filter_unconventional.
+require_conventional = false
+# Split commits on newlines, treating each line as an individual commit.
+split_commits = false
+# An array of regex based parsers to modify commit messages prior to further processing.
+commit_preprocessors = [
+    # Replace issue numbers with link templates to be updated in `changelog.postprocessors`.
+    #{ pattern = '\((\w+\s)?#([0-9]+)\)', replace = "([#${2}](<REPO>/issues/${2}))"},
+    # Check spelling of the commit message using https://github.com/crate-ci/typos.
+    # If the spelling is incorrect, it will be fixed automatically.
+    #{ pattern = '.*', replace_command = 'typos --write-changes -' }
+]
+# Prevent commits that are breaking from being excluded by commit parsers.
+protect_breaking_commits = false
+# An array of regex based parsers for extracting data from the commit message.
+# Assigns commits to groups.
+# Optionally sets the commit's scope and can decide to exclude commits from further processing.
+commit_parsers = [
+    { message = "^[Cc]hore\\([Rr]elease\\): prepare for", skip = true },
+    { message = "(^[Mm]erge)|([Mm]erge conflict)", skip = true },
+    { field = "author.name", pattern = "dependabot*", group = "<!-- 0A -->Updates" },
+    { message = "([Ss]ecurity)|([Vv]uln)", group = "<!-- 08 -->Security" },
+    { body = "(.*[Ss]ecurity)|([Vv]uln)", group = "<!-- 08 -->Security" },
+    { message = "([Cc]hore\\(lint\\))|(style)|(lint)|(codeql)|(golangci)", group = "<!-- 05 -->Code quality" },
+    { message = "(^[Dd]oc)|((?i)readme)|(badge)|(typo)|(documentation)", group = "<!-- 03 -->Documentation" },
+    { message = "(^[Ff]eat)|(^[Ee]nhancement)", group = "<!-- 00 -->Implemented enhancements" },
+    { message = "(^ci)|(\\(ci\\))|(fixup\\s+ci)|(fix\\s+ci)|(license)|(example)", group = "<!-- 07 -->Miscellaneous tasks" },
+    { message = "^test", group = "<!-- 06 -->Testing" },
+    { message = "(^fix)|(panic)", group = "<!-- 01 -->Fixed bugs" },
+    { message = "(^refact)|(rework)", group = "<!-- 02 -->Refactor" },
+    { message = "(^[Pp]erf)|(performance)", group = "<!-- 04 -->Performance" },
+    { message = "(^[Cc]hore)", group = "<!-- 07 -->Miscellaneous tasks" },
+    { message = "^[Rr]evert", group = "<!-- 09 -->Reverted changes" },
+    { message = "(upgrade.*?go)|(go\\s+version)", group = "<!-- 0A -->Updates" },
+    { message = ".*", group = "<!-- 0B -->Other" },
+]
+# Exclude commits that are not matched by any commit parser.
+filter_commits = false
+# An array of link parsers for extracting external references, and turning them into URLs, using regex.
+link_parsers = []
+# Include only the tags that belong to the current branch.
+use_branch_tags = false
+# Order releases topologically instead of chronologically.
+topo_order = false
+# Order releases topologically instead of chronologically.
+topo_order_commits = true
+# Order of commits in each group/release within the changelog.
+# Allowed values: newest, oldest
+sort_commits = "newest"
+# Process submodules commits
+recurse_submodules = false
+
+#[remote.github]
+#owner = "go-openapi"
diff --git a/.github/CONTRIBUTING.md b/.github/CONTRIBUTING.md
index 7dea424..85707f7 100644
--- a/.github/CONTRIBUTING.md
+++ b/.github/CONTRIBUTING.md
@@ -1,114 +1,211 @@
 ## Contribution Guidelines
 
+You'll find below general guidelines, which mostly correspond to standard practices for open sourced repositories.
+
+>**TL;DR**
+>
+> If you're already an experienced go developer on github, then you should just feel at home with us
+> and you may well skip the rest of this document.
+>
+> You'll essentially find the usual guideline for a go library project on github.
+
+These guidelines are general to all libraries published on github by the `go-openapi` organization.
+
+You'll find more detailed (or repo-specific) instructions in the [maintainer's docs](../docs).
+
+## How can I contribute?
+
+There are many ways in which you can contribute. Here are a few ideas:
+
+ * Reporting Issues / Bugs
+ * Suggesting Improvements
+ * Code
+   * bug fixes and new features that are within the main project scope
+   * improving test coverage
+   * addressing code quality issues
+ * Documentation
+ * Art work that makes the project look great
+
+## Questions & issues
+
+### Asking questions
+
+You may inquire about anything about this library by reporting a "Question" issue on github.
+
+### Reporting issues
+
+Reporting a problem with our libraries _is_ a valuable contribution.
+
+You can do this on the github issues page of this repository.
+
+Please be as specific as possible when describing your issue.
+
+Whenever relevant, please provide information about your environment (go version, OS).
+
+Adding a code snippet to reproduce the issue is great, and as a big time saver for maintainers.
+
+### Triaging issues
+
+You can help triage issues which may include:
+
+* reproducing bug reports
+* asking for important information, such as version numbers or reproduction instructions
+* answering questions and sharing your insight in issue comments
+
+## Code contributions
+
 ### Pull requests are always welcome
 
-We are always thrilled to receive pull requests, and do our best to
-process them as fast as possible. Not sure if that typo is worth a pull
-request? Do it! We will appreciate it.
+We are always thrilled to receive pull requests, and we do our best to
+process them as fast as possible.
+
+Not sure if that typo is worth a pull request? Do it! We will appreciate it.
+
+If your pull request is not accepted on the first try, don't be discouraged!
+If there's a problem with the implementation, hopefully you received feedback on what to improve.
+
+If you have a lot of ideas or a lot of issues to solve, try to refrain a bit and post focused
+pull requests.
+Think that they must be reviewed by a maintainer and it is easy to lost track of things on big PRs.
+
+We're trying very hard to keep the go-openapi packages lean and focused.
+These packages constitute a toolkit: it won't do everything for everybody out of the box,
+but everybody can use it to do just about everything related to OpenAPI.
+
+This means that we might decide against incorporating a new feature.
+
+However, there might be a way to implement that feature *on top of* our libraries.
+
+### Environment
+
+You just need a `go` compiler to be installed. No special tools are needed to work with our libraries.
+
+The go compiler version required is always the old stable (latest minor go version - 1).
 
-If your pull request is not accepted on the first try, don't be
-discouraged! If there's a problem with the implementation, hopefully you
-received feedback on what to improve.
+If you're already used to work with `go` you should already have everything in place.
 
-We're trying very hard to keep go-swagger lean and focused. We don't want it
-to do everything for everybody. This means that we might decide against
-incorporating a new feature. However, there might be a way to implement
-that feature *on top of* go-swagger.
+Although not required, you'll be certainly more productive with a local installation of `golangci-lint`,
+the meta-linter our CI uses.
 
+If you don't have it, you may install it like so:
+
+```sh
+go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@latest
+```
 
 ### Conventions
 
-Fork the repo and make changes on your fork in a feature branch:
+#### Git flow
+
+Fork the repo and make changes to your fork in a feature branch.
+
+To submit a pull request, push your branch to your fork (e.g. `upstream` remote):
+github will propose to open a pull request on the original repository.
+
+Typically you'd follow some common naming conventions:
+
+- if it's a bugfix branch, name it `fix/XXX-something`where XXX is the number of the
+  issue on github
+- if it's a feature branch, create an enhancement issue to announce your
+  intentions, and name it `feature/XXX-something` where XXX is the number of the issue.
+
+> NOTE: we don't enforce naming conventions on branches: it's your fork after all.
+
+#### Tests
+
+Submit unit tests for your changes.
+
+Go has a great built-in test framework ; use it!
+
+Take a look at existing tests for inspiration, and run the full test suite on your branch
+before submitting a pull request.
+
+Our CI measures test coverage and the test coverage of every patch.
+Although not a blocking step - because there are so many special cases -
+this is an indicator that maintainers consider when approving a PR.
+
+Please try your best to cover about 80% of your patch.
+
+#### Code style
 
-- If it's a bugfix branch, name it XXX-something where XXX is the number of the
-  issue
-- If it's a feature branch, create an enhancement issue to announce your
-  intentions, and name it XXX-something where XXX is the number of the issue.
+You may read our stance on code style [there](../docs/STYLE.md).
 
-Submit unit tests for your changes.  Go has a great test framework built in; use
-it! Take a look at existing tests for inspiration. Run the full test suite on
-your branch before submitting a pull request.
+#### Documentation
 
-Update the documentation when creating or modifying features. Test
-your documentation changes for clarity, concision, and correctness, as
-well as a clean documentation build. See ``docs/README.md`` for more
-information on building the docs and how docs get released.
+Don't forget to update the documentation when creating or modifying features.
 
-Write clean code. Universally formatted code promotes ease of writing, reading,
-and maintenance. Always run `gofmt -s -w file.go` on each changed file before
-committing your changes. Most editors have plugins that do this automatically.
+Most documentation for this library is directly found in code as comments for godoc.
+
+The documentation for the go-openapi packages is published on the public go docs site:
+
+<https://pkg.go.dev/github.com/go-openapi/jsonpointer>
+
+Check your documentation changes for clarity, concision, and correctness.
+
+If you want to assess the rendering of your changes when published to `pkg.go.dev`, you may
+want to install the `pkgsite` tool proposed by `golang.org`.
+
+```sh
+go install golang.org/x/pkgsite/cmd/pkgsite@latest
+```
+
+Then run on the repository folder:
+```sh
+pkgsite .
+```
+
+This wil run a godoc server locally where you may see the documentation generated from your local repository.
+
+#### Commit messages
 
 Pull requests descriptions should be as clear as possible and include a
 reference to all the issues that they address.
 
 Pull requests must not contain commits from other users or branches.
 
-Commit messages must start with a capitalized and short summary (max. 50
-chars) written in the imperative, followed by an optional, more detailed
-explanatory text which is separated from the summary by an empty line.
+Commit messages are not required to follow the "conventional commit" rule, but it's certainly a good
+thing to follow this guidelinea (e.g. "fix: blah blah", "ci: did this", "feat: did that" ...).
 
-Code review comments may be added to your pull request. Discuss, then make the
-suggested modifications and push additional commits to your feature branch. Be
-sure to post a comment after pushing. The new commits will show up in the pull
-request automatically, but the reviewers will not be notified unless you
-comment.
+The title in your commit message is used directly to produce our release notes: try to keep them neat.
 
-Before the pull request is merged, make sure that you squash your commits into
-logical units of work using `git rebase -i` and `git push -f`. After every
-commit the test suite should be passing. Include documentation changes in the
-same commit so that a revert would remove all traces of the feature or fix.
+The commit message body should detail your changes.
 
-Commits that fix or close an issue should include a reference like `Closes #XXX`
-or `Fixes #XXX`, which will automatically close the issue when merged.
+If an issue should be closed by a commit, please add this reference in the commit body:
 
-### Sign your work
+```
+* fixes #{issue number}
+```
 
-The sign-off is a simple line at the end of the explanation for the
-patch, which certifies that you wrote it or otherwise have the right to
-pass it on as an open-source patch.  The rules are pretty simple: if you
-can certify the below (from
-[developercertificate.org](http://developercertificate.org/)):
+#### Code review
 
-```
-Developer Certificate of Origin
-Version 1.1
+Code review comments may be added to your pull request.
 
-Copyright (C) 2004, 2006 The Linux Foundation and its contributors.
-660 York Street, Suite 102,
-San Francisco, CA 94110 USA
+Discuss, then make the suggested modifications and push additional commits to your feature branch.
 
-Everyone is permitted to copy and distribute verbatim copies of this
-license document, but changing it is not allowed.
+Be sure to post a comment after pushing. The new commits will show up in the pull
+request automatically, but the reviewers will not be notified unless you comment.
 
+Before the pull request is merged,
+**make sure that you squash your commits into logical units of work**
+using `git rebase -i` and `git push -f`.
 
-Developer's Certificate of Origin 1.1
+After every commit the test suite should be passing.
 
-By making a contribution to this project, I certify that:
+Include documentation changes in the same commit so that a revert would remove all traces of the feature or fix.
 
-(a) The contribution was created in whole or in part by me and I
-    have the right to submit it under the open source license
-    indicated in the file; or
+#### Sign your work
 
-(b) The contribution is based upon previous work that, to the best
-    of my knowledge, is covered under an appropriate open source
-    license and I have the right under that license to submit that
-    work with modifications, whether created in whole or in part
-    by me, under the same open source license (unless I am
-    permitted to submit under a different license), as indicated
-    in the file; or
+The sign-off is a simple line at the end of your commit message,
+which certifies that you wrote it or otherwise have the right to
+pass it on as an open-source patch.
 
-(c) The contribution was provided directly to me by some other
-    person who certified (a), (b) or (c) and I have not modified
-    it.
+We require the simple DCO below with an email signing your commit.
+PGP-signed commit are greatly appreciated but not required.
 
-(d) I understand and agree that this project and the contribution
-    are public and that a record of the contribution (including all
-    personal information I submit with it, including my sign-off) is
-    maintained indefinitely and may be redistributed consistent with
-    this project or the open source license(s) involved.
-```
+The rules are pretty simple:
 
-then you just add a line to every git commit message:
+* read our [DCO](./DCO.md) (from [developercertificate.org](http://developercertificate.org/))
+* if you agree with these terms, then you just add a line to every git commit message
 
     Signed-off-by: Joe Smith <joe@gmail.com>
 
diff --git a/.github/DCO.md b/.github/DCO.md
new file mode 100644
index 0000000..e168dc4
--- /dev/null
+++ b/.github/DCO.md
@@ -0,0 +1,40 @@
+ # Developer's Certificate of Origin
+
+```
+Developer Certificate of Origin
+Version 1.1
+
+Copyright (C) 2004, 2006 The Linux Foundation and its contributors.
+660 York Street, Suite 102,
+San Francisco, CA 94110 USA
+
+Everyone is permitted to copy and distribute verbatim copies of this
+license document, but changing it is not allowed.
+
+
+Developer's Certificate of Origin 1.1
+
+By making a contribution to this project, I certify that:
+
+(a) The contribution was created in whole or in part by me and I
+    have the right to submit it under the open source license
+    indicated in the file; or
+
+(b) The contribution is based upon previous work that, to the best
+    of my knowledge, is covered under an appropriate open source
+    license and I have the right under that license to submit that
+    work with modifications, whether created in whole or in part
+    by me, under the same open source license (unless I am
+    permitted to submit under a different license), as indicated
+    in the file; or
+
+(c) The contribution was provided directly to me by some other
+    person who certified (a), (b) or (c) and I have not modified
+    it.
+
+(d) I understand and agree that this project and the contribution
+    are public and that a record of the contribution (including all
+    personal information I submit with it, including my sign-off) is
+    maintained indefinitely and may be redistributed consistent with
+    this project or the open source license(s) involved.
+```
diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index 1f18207..81c88a6 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -1,43 +1,15 @@
 name: Dependabot auto-merge
-on: pull_request
 
 permissions:
-  contents: write
-  pull-requests: write
+  contents: read
+
+on:
+  pull_request:
 
 jobs:
   dependabot:
-    runs-on: ubuntu-latest
-    if: github.event.pull_request.user.login == 'dependabot[bot]'
-    steps:
-      - name: Dependabot metadata
-        id: metadata
-        uses: dependabot/fetch-metadata@v2
-
-      - name: Auto-approve all dependabot PRs
-        run: gh pr review --approve "$PR_URL"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
-
-      - name: Auto-merge dependabot PRs for development dependencies
-        if: contains(steps.metadata.outputs.dependency-group, 'development-dependencies')
-        run: gh pr merge --auto --rebase "$PR_URL"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
-
-      - name: Auto-merge dependabot PRs for go-openapi patches
-        if: contains(steps.metadata.outputs.dependency-group, 'go-openapi-dependencies') && (steps.metadata.outputs.update-type == 'version-update:semver-minor' || steps.metadata.outputs.update-type == 'version-update:semver-patch')
-        run: gh pr merge --auto --rebase "$PR_URL"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
-
-      - name: Auto-merge dependabot PRs for golang.org updates
-        if: contains(steps.metadata.outputs.dependency-group, 'golang-org-dependencies')
-        run: gh pr merge --auto --rebase "$PR_URL"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
-
+    permissions:
+      contents: write
+      pull-requests: write
+    uses: go-openapi/ci-workflows/.github/workflows/auto-merge.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # v0.1.1
+    secrets: inherit
diff --git a/.github/workflows/bump-release.yml b/.github/workflows/bump-release.yml
new file mode 100644
index 0000000..9d8ba9c
--- /dev/null
+++ b/.github/workflows/bump-release.yml
@@ -0,0 +1,46 @@
+name: Bump Release
+
+permissions:
+  contents: read
+
+on:
+  workflow_dispatch:
+    inputs:
+      bump-patch:
+        description: Bump a patch version release
+        type: boolean
+        required: false
+        default: true
+      bump-minor:
+        description: Bump a minor version release
+        type: boolean
+        required: false
+        default: false
+      bump-major:
+        description: Bump a major version release
+        type: boolean
+        required: false
+        default: false
+      tag-message-title:
+        description: Tag message title to prepend to the release notes
+        required: false
+        type: string
+      tag-message-body:
+        description: |
+          Tag message body to prepend to the release notes.
+          (use "|" to replace end of line).
+        required: false
+        type: string
+
+jobs:
+  bump-release:
+    permissions:
+      contents: write
+    uses: go-openapi/ci-workflows/.github/workflows/bump-release.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # v0.1.1
+    with:
+      bump-patch: ${{ inputs.bump-patch }}
+      bump-minor: ${{ inputs.bump-minor }}
+      bump-major: ${{ inputs.bump-major }}
+      tag-message-title: ${{ inputs.tag-message-title }}
+      tag-message-body: ${{ inputs.tag-message-body }}
+    secrets: inherit
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
new file mode 100644
index 0000000..5e4edac
--- /dev/null
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,22 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ "master" ]
+  pull_request:
+    branches: [ "master" ]
+    paths-ignore: # remove this clause if CodeQL is a required check
+      - '**/*.md'
+  schedule:
+    - cron: '39 19 * * 5'
+
+permissions:
+  contents: read
+
+jobs:
+  codeql:
+    permissions:
+      contents: read
+      security-events: write
+    uses: go-openapi/ci-workflows/.github/workflows/codeql.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # v0.1.1
+    secrets: inherit
diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml
new file mode 100644
index 0000000..422719d
--- /dev/null
+++ b/.github/workflows/contributors.yml
@@ -0,0 +1,18 @@
+name: Contributors
+
+on:
+  schedule:
+    - cron: '18 4 * * 6'
+
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  contributors:
+    permissions:
+      pull-requests: write
+      contents: write
+    uses: go-openapi/ci-workflows/.github/workflows/contributors.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # v0.1.1
+    secrets: inherit
diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index c98d613..cd67b1b 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -1,57 +1,17 @@
 name: go test
 
+permissions:
+  pull-requests: read
+  contents: read
+
 on:
   push:
-    tags:
-      - v*
     branches:
       - master
 
   pull_request:
 
 jobs:
-  lint:
-    name: Lint
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-go@v6
-        with:
-          go-version: stable
-          check-latest: true
-          cache: true
-      - name: golangci-lint
-        uses: golangci/golangci-lint-action@v9
-        with:
-          version: latest
-          only-new-issues: true
-          skip-cache: true
-
   test:
-    name: Unit tests
-    runs-on: ${{ matrix.os }}
-
-    strategy:
-      matrix:
-        os: [ ubuntu-latest, macos-latest, windows-latest ]
-        go_version: ['oldstable', 'stable' ]
-
-    steps:
-    - uses: actions/setup-go@v6
-      with:
-        go-version: '${{ matrix.go_version }}'
-        check-latest: true
-        cache: true
-
-    - uses: actions/checkout@v6
-    - name: Run unit tests
-      shell: bash
-      run: go test -v -race -coverprofile="coverage-${{ matrix.os }}.${{ matrix.go_version }}.out" -covermode=atomic -coverpkg=$(go list)/... ./...
-
-    - name: Upload coverage to codecov
-      uses: codecov/codecov-action@v5
-      with:
-        files: './coverage-${{ matrix.os }}.${{ matrix.go_version }}.out'
-        flags: '${{ matrix.go_version }}-${{ matrix.os }}'
-        fail_ci_if_error: false
-        verbose: true
+    uses: go-openapi/ci-workflows/.github/workflows/go-test.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # v0.1.1
+    secrets: inherit
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 0000000..cf4ed2d
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,18 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - v[0-9]+*
+
+permissions:
+  contents: read
+
+jobs:
+  release:
+    permissions:
+      contents: write
+    uses: go-openapi/ci-workflows/.github/workflows/release.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # v0.1.1
+    with:
+      tag: ${{ github.ref_name }}
+    secrets: inherit
diff --git a/.github/workflows/scanner.yml b/.github/workflows/scanner.yml
new file mode 100644
index 0000000..53a0471
--- /dev/null
+++ b/.github/workflows/scanner.yml
@@ -0,0 +1,19 @@
+name: Vulnerability scans
+
+on:
+  branch_protection_rule:
+  push:
+    branches: [ "master" ]
+  schedule:
+    - cron: '18 4 * * 3'
+
+permissions:
+  contents: read
+
+jobs:
+  scanners:
+    permissions:
+      contents: read
+      security-events: write
+    uses: go-openapi/ci-workflows/.github/workflows/scanner.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # V0.1.1
+    secrets: inherit
diff --git a/.github/workflows/tag-release.yml b/.github/workflows/tag-release.yml
new file mode 100644
index 0000000..537bd42
--- /dev/null
+++ b/.github/workflows/tag-release.yml
@@ -0,0 +1,19 @@
+name: Release on tag
+
+permissions:
+  contents: read
+
+on:
+  push:
+    tags:
+      - v[0-9]+*
+
+jobs:
+  gh-release:
+    name: Create release
+    permissions:
+      contents: write
+    uses: go-openapi/ci-workflows/.github/workflows/release.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # v0.1.1
+    with:
+      tag: ${{ github.ref_name }}
+    secrets: inherit
diff --git a/.golangci.yml b/.golangci.yml
index 1ad5adf..fdae591 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -2,34 +2,17 @@ version: "2"
 linters:
   default: all
   disable:
-    - cyclop
     - depguard
-    - errchkjson
-    - errorlint
-    - exhaustruct
-    - forcetypeassert
     - funlen
-    - gochecknoglobals
-    - gochecknoinits
-    - gocognit
-    - godot
     - godox
-    - gosmopolitan
-    - inamedparam
-    - intrange
-    - ireturn
-    - lll
-    - musttag
-    - nestif
+    - exhaustruct
     - nlreturn
     - nonamedreturns
     - noinlineerr
     - paralleltest
     - recvcheck
     - testpackage
-    - thelper
     - tparallel
-    - unparam
     - varnamelen
     - whitespace
     - wrapcheck
@@ -41,8 +24,15 @@ linters:
     goconst:
       min-len: 2
       min-occurrences: 3
+    cyclop:
+      max-complexity: 20
     gocyclo:
-      min-complexity: 45
+      min-complexity: 20
+    exhaustive:
+      default-signifies-exhaustive: true
+      default-case-required: true
+    lll:
+      line-length: 180
   exclusions:
     generated: lax
     presets:
@@ -58,6 +48,7 @@ formatters:
   enable:
     - gofmt
     - goimports
+    - gofumpt
   exclusions:
     generated: lax
     paths:
diff --git a/README.md b/README.md
index 3203bd2..5a877d2 100644
--- a/README.md
+++ b/README.md
@@ -1,15 +1,28 @@
-# OpenAPI v2 object model [![Build Status](https://github.com/go-openapi/spec/actions/workflows/go-test.yml/badge.svg)](https://github.com/go-openapi/spec/actions?query=workflow%3A"go+test") [![codecov](https://codecov.io/gh/go-openapi/spec/branch/master/graph/badge.svg)](https://codecov.io/gh/go-openapi/spec)
+# spec
 
-[![Slack Status](https://slackin.goswagger.io/badge.svg)](https://slackin.goswagger.io)
-[![license](http://img.shields.io/badge/license-Apache%20v2-orange.svg)](https://raw.githubusercontent.com/go-openapi/spec/master/LICENSE)
-[![Go Reference](https://pkg.go.dev/badge/github.com/go-openapi/spec.svg)](https://pkg.go.dev/github.com/go-openapi/spec)
-[![Go Report Card](https://goreportcard.com/badge/github.com/go-openapi/spec)](https://goreportcard.com/report/github.com/go-openapi/spec)
+<!-- Badges: status  -->
+[![Tests][test-badge]][test-url] [![Coverage][cov-badge]][cov-url] [![CI vuln scan][vuln-scan-badge]][vuln-scan-url] [![CodeQL][codeql-badge]][codeql-url]
+<!-- Badges: release & docker images  -->
+<!-- Badges: code quality  -->
+<!-- Badges: license & compliance -->
+[![Release][release-badge]][release-url] [![Go Report Card][gocard-badge]][gocard-url] [![CodeFactor Grade][codefactor-badge]][codefactor-url] [![License][license-badge]][license-url]
+<!-- Badges: documentation & support -->
+<!-- Badges: others & stats -->
+[![GoDoc][godoc-badge]][godoc-url] [![Slack Channel][slack-logo]![slack-badge]][slack-url] [![go version][goversion-badge]][goversion-url] ![Top language][top-badge] ![Commits since latest release][commits-badge]
 
-The object model for OpenAPI specification documents.
+---
 
-## Licensing
+The object model for OpenAPI v2 specification documents.
 
-This library ships under the [SPDX-License-Identifier: Apache-2.0](./LICENSE).
+## Status
+
+API is stable.
+
+## Import this library in your project
+
+```cmd
+go get github.com/go-openapi/spec
+```
 
 ### FAQ
 
@@ -56,3 +69,67 @@ This library ships under the [SPDX-License-Identifier: Apache-2.0](./LICENSE).
 > This `id` does not conflict with any property named `id`.
 >
 > See also https://github.com/go-openapi/spec/issues/23
+
+## Change log
+
+See <https://github.com/go-openapi/spec/releases>
+
+## References
+
+<https://github.com/OAI/OpenAPI-Specification/blob/main/versions/2.0.md>
+
+## Licensing
+
+This library ships under the [SPDX-License-Identifier: Apache-2.0](./LICENSE).
+
+## Other documentation
+
+* [All-time contributors](./CONTRIBUTORS.md)
+* [Contributing guidelines](.github/CONTRIBUTING.md)
+* [Maintainers documentation](docs/MAINTAINERS.md)
+* [Code style](docs/STYLE.md)
+
+## Cutting a new release
+
+Maintainers can cut a new release by either:
+
+* running [this workflow](https://github.com/go-openapi/spec/actions/workflows/bump-release.yml)
+* or pushing a semver tag
+  * signed tags are preferred
+  * The tag message is prepended to release notes
+
+<!-- Badges: status  -->
+[test-badge]: https://github.com/go-openapi/spec/actions/workflows/go-test.yml/badge.svg
+[test-url]: https://github.com/go-openapi/spec/actions/workflows/go-test.yml
+[cov-badge]: https://codecov.io/gh/go-openapi/spec/branch/master/graph/badge.svg
+[cov-url]: https://codecov.io/gh/go-openapi/spec
+[vuln-scan-badge]: https://github.com/go-openapi/spec/actions/workflows/scanner.yml/badge.svg
+[vuln-scan-url]: https://github.com/go-openapi/spec/actions/workflows/scanner.yml
+[codeql-badge]: https://github.com/go-openapi/spec/actions/workflows/codeql.yml/badge.svg
+[codeql-url]: https://github.com/go-openapi/spec/actions/workflows/codeql.yml
+<!-- Badges: release & docker images  -->
+[release-badge]: https://badge.fury.io/gh/go-openapi%2Fspec.svg
+[release-url]: https://badge.fury.io/gh/go-openapi%2Fspec
+[gomod-badge]: https://badge.fury.io/go/github.com%2Fgo-openapi%2Fspec.svg
+[gomod-url]: https://badge.fury.io/go/github.com%2Fgo-openapi%2Fspec
+<!-- Badges: code quality  -->
+[gocard-badge]: https://goreportcard.com/badge/github.com/go-openapi/spec
+[gocard-url]: https://goreportcard.com/report/github.com/go-openapi/spec
+[codefactor-badge]: https://img.shields.io/codefactor/grade/github/go-openapi/spec
+[codefactor-url]: https://www.codefactor.io/repository/github/go-openapi/spec
+<!-- Badges: documentation & support -->
+[doc-badge]: https://img.shields.io/badge/doc-site-blue?link=https%3A%2F%2Fgoswagger.io%2Fgo-openapi%2F
+[doc-url]: https://goswagger.io/go-openapi
+[godoc-badge]: https://pkg.go.dev/badge/github.com/go-openapi/spec
+[godoc-url]: http://pkg.go.dev/github.com/go-openapi/spec
+[slack-logo]: https://a.slack-edge.com/e6a93c1/img/icons/favicon-32.png
+[slack-badge]: https://img.shields.io/badge/slack-blue?link=https%3A%2F%2Fgoswagger.slack.com%2Farchives%2FC04R30YM
+[slack-url]: https://goswagger.slack.com/archives/C04R30YMU
+<!-- Badges: license & compliance -->
+[license-badge]: http://img.shields.io/badge/license-Apache%20v2-orange.svg
+[license-url]: https://github.com/go-openapi/spec/?tab=Apache-2.0-1-ov-file#readme
+<!-- Badges: others & stats -->
+[goversion-badge]: https://img.shields.io/github/go-mod/go-version/go-openapi/spec
+[goversion-url]: https://github.com/go-openapi/spec/blob/master/go.mod
+[top-badge]: https://img.shields.io/github/languages/top/go-openapi/spec
+[commits-badge]: https://img.shields.io/github/commits-since/go-openapi/spec/latest
diff --git a/README.old b/README.old
new file mode 100644
index 0000000..3203bd2
--- /dev/null
+++ b/README.old
@@ -0,0 +1,58 @@
+# OpenAPI v2 object model [![Build Status](https://github.com/go-openapi/spec/actions/workflows/go-test.yml/badge.svg)](https://github.com/go-openapi/spec/actions?query=workflow%3A"go+test") [![codecov](https://codecov.io/gh/go-openapi/spec/branch/master/graph/badge.svg)](https://codecov.io/gh/go-openapi/spec)
+
+[![Slack Status](https://slackin.goswagger.io/badge.svg)](https://slackin.goswagger.io)
+[![license](http://img.shields.io/badge/license-Apache%20v2-orange.svg)](https://raw.githubusercontent.com/go-openapi/spec/master/LICENSE)
+[![Go Reference](https://pkg.go.dev/badge/github.com/go-openapi/spec.svg)](https://pkg.go.dev/github.com/go-openapi/spec)
+[![Go Report Card](https://goreportcard.com/badge/github.com/go-openapi/spec)](https://goreportcard.com/report/github.com/go-openapi/spec)
+
+The object model for OpenAPI specification documents.
+
+## Licensing
+
+This library ships under the [SPDX-License-Identifier: Apache-2.0](./LICENSE).
+
+### FAQ
+
+* What does this do?
+
+> 1. This package knows how to marshal and unmarshal Swagger API specifications into a golang object model
+> 2. It knows how to resolve $ref and expand them to make a single root document
+
+* How does it play with the rest of the go-openapi packages ?
+
+> 1. This package is at the core of the go-openapi suite of packages and [code generator](https://github.com/go-swagger/go-swagger)
+> 2. There is a [spec loading package](https://github.com/go-openapi/loads) to fetch specs as JSON or YAML from local or remote locations
+> 3. There is a [spec validation package](https://github.com/go-openapi/validate) built on top of it
+> 4. There is a [spec analysis package](https://github.com/go-openapi/analysis) built on top of it, to analyze, flatten, fix and merge spec documents
+
+* Does this library support OpenAPI 3?
+
+> No.
+> This package currently only supports OpenAPI 2.0 (aka Swagger 2.0).
+> There is no plan to make it evolve toward supporting OpenAPI 3.x.
+> This [discussion thread](https://github.com/go-openapi/spec/issues/21) relates the full story.
+>
+> An early attempt to support Swagger 3 may be found at: https://github.com/go-openapi/spec3
+
+* Does the unmarshaling support YAML?
+
+> Not directly. The exposed types know only how to unmarshal from JSON.
+>
+> In order to load a YAML document as a Swagger spec, you need to use the loaders provided by
+> github.com/go-openapi/loads
+>
+> Take a look at the example there: https://pkg.go.dev/github.com/go-openapi/loads#example-Spec
+>
+> See also https://github.com/go-openapi/spec/issues/164
+
+* How can I validate a spec?
+
+> Validation is provided by [the validate package](http://github.com/go-openapi/validate)
+
+* Why do we have an `ID` field for `Schema` which is not part of the swagger spec?
+
+> We found jsonschema compatibility more important: since `id` in jsonschema influences
+> how `$ref` are resolved.
+> This `id` does not conflict with any property named `id`.
+>
+> See also https://github.com/go-openapi/spec/issues/23
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..2a7b6f0
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,19 @@
+# Security Policy
+
+This policy outlines the commitment and practices of the go-openapi maintainers regarding security.
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 0.22.x  | :white_check_mark: |
+
+## Reporting a vulnerability
+
+If you become aware of a security vulnerability that affects the current repository,
+please report it privately to the maintainers.
+
+Please follow the instructions provided by github to
+[Privately report a security vulnerability](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability#privately-reporting-a-security-vulnerability).
+
+TL;DR: on Github, navigate to the project's "Security" tab then click on "Report a vulnerability".
diff --git a/docs/MAINTAINERS.md b/docs/MAINTAINERS.md
new file mode 100644
index 0000000..0c73976
--- /dev/null
+++ b/docs/MAINTAINERS.md
@@ -0,0 +1,157 @@
+# Maintainer's guide
+
+## Repo structure
+
+Single go module.
+
+> **NOTE**
+>
+> Some `go-openapi` repos are mono-repos with multiple modules,
+> with adapted CI workflows.
+
+## Repo configuration
+
+* default branch: master
+* protected branches: master
+* branch protection rules:
+  * require pull requests and approval
+  * required status checks: 
+    - DCO (simple email sign-off)
+    - Lint
+    - tests completed
+* auto-merge enabled (used for dependabot updates)
+
+## Continuous Integration
+
+### Code Quality checks
+
+* meta-linter: golangci-lint
+* linter config: [`.golangci.yml`](../.golangci.yml) (see our [posture](./STYLE.md) on linters)
+
+* Code quality assessment: [CodeFactor](https://www.codefactor.io/dashboard)
+* Code quality badges
+  * go report card: <https://goreportcard.com/>
+  * CodeFactor: <https://goreportcard.com/>
+
+> **NOTES**
+>
+> codefactor inherits roles from github. There is no need to create a dedicated account.
+>
+> The codefactor app is installed at the organization level (`github.com/go-openapi`).
+>
+> There is no special token to setup in github for CI usage.
+
+### Testing
+
+* Test reports
+  * Uploaded to codecov: <https://app.codecov.io/analytics/gh/go-openapi>
+* Test coverage reports
+  * Uploaded to codecov: <https://app.codecov.io/gh/go-openapi>
+
+* Fuzz testing
+  * Fuzz tests are handled separately by CI and may reuse a cached version of the fuzzing corpus.
+    At this moment, cache may not be shared between feature branches or feature branch and master.
+    The minimized corpus produced on failure is uploaded as an artifact and should be added manually
+    to `testdata/fuzz/...`.
+
+Coverage threshold status is informative and not blocking.
+This is because the thresholds are difficult to tune and codecov oftentimes reports false negatives
+or may fail to upload coverage.
+
+All tests use our fork of `stretchr/testify`: `github.com/go-openapi/testify`.
+This allows for minimal test dependencies.
+
+> **NOTES**
+>
+> codecov inherits roles from github. There is no need to create a dedicated account.
+> However, there is only 1 maintainer allowed to be the admin of the organization on codecov
+> with their free plan.
+>
+> The codecov app is installed at the organization level (`github.com/go-openapi`).
+>
+> There is no special token to setup in github for CI usage.
+> A organization-level token used to upload coverage and test reports is managed at codecov:
+> no setup is required on github.
+
+### Automated updates
+
+* dependabot
+  * configuration: [`dependabot.yaml`](../.github/dependabot.yaml)
+
+  Principle:
+
+  * codecov applies updates and security patches to the github-actions and golang ecosystems.
+  * all updates from "trusted" dependencies (github actions, golang.org packages, go-openapi packages
+    are auto-merged if they successfully pass CI.
+
+* go version udpates
+
+  Principle:
+
+  * we support the 2 latest minor versions of the go compiler (`stable`, `oldstable`)
+  * `go.mod` should be updated (manually) whenever there is a new go minor release
+    (e.g. every 6 months).
+
+* contributors
+  * a [`CONTRIBUTORS.md`](../CONTRIBUTORS.md) file is updated weekly, with all-time contributors to the repository
+  * the `github-actions[bot]` posts a pull request to do that automatically
+  * at this moment, this pull request is not auto-approved/auto-merged (bot cannot approve its own PRs)
+
+### Vulnerability scanners
+
+There are 3 complementary scanners - obviously, there is some overlap, but each has a different focus.
+
+* github `CodeQL`
+* `trivy` <https://trivy.dev/docs/latest/getting-started>
+* `govulnscan` <https://go.dev/blog/govulncheck>
+
+None of these tools require an additional account or token.
+
+Github CodeQL configuration is set to "Advanced", so we may collect a CI status for this check (e.g. for badges).
+
+Scanners run on every commit to master and at least once a week.
+
+Reports are centralized in github security reports for code scanning tools.
+
+## Releases
+
+The release process is minimalist:
+
+* push a semver tag (i.e v{major}.{minor}.{patch}) to the master branch.
+* the CI handles this to generate a github release with release notes
+
+* release notes generator: git-cliff <https://git-cliff.org/docs/>
+* configuration: [`cliff.toml`](../.cliff.toml)
+
+Tags are preferably PGP-signed.
+
+The tag message introduces the release notes (e.g. a summary of this release).
+
+The release notes generator does not assume that commits are necessarily "conventional commits".
+
+## Other files
+
+Standard documentation:
+
+* [`CONTRIBUTING.md`](../.github/CONTRIBUTING.md) guidelines
+* [`DCO.md`](../.github/DCO.md) terms for first-time contributors to read
+* [`CODE_OF_CONDUCT.md`](../CODE_OF_CONDUCT.md)
+* [`SECURIY.md`](../SECURITY.md) policy: how to report vulnerabilities privately
+* [`LICENSE`](../LICENSE) terms
+* [`NOTICE`](../NOTICE) on supplementary license terms (original authors, copied code etc)
+
+Reference documentation (released):
+
+* [godoc](https://pkg.go/dev/go-openapi/jsonpointer)
+
+## TODOs & other ideas
+
+A few things remain ahead to ease a bit a maintainer's job:
+
+* reuse CI workflows (e.g. in `github.com/go-openapi/workflows`)
+* reusable actions with custom tools pinned  (e.g. in `github.com/go-openapi/gh-actions`)
+* open-source license checks
+* auto-merge for CONTRIBUTORS.md (requires a github app to produce tokens)
+* more automated code renovation / relinting work (possibly built with CLAUDE)
+* organization-level documentation web site
+* ...
diff --git a/docs/STYLE.md b/docs/STYLE.md
new file mode 100644
index 0000000..056fdb5
--- /dev/null
+++ b/docs/STYLE.md
@@ -0,0 +1,83 @@
+# Coding style at `go-openapi`
+
+> **TL;DR**
+>
+> Let's be honest: at `go-openapi` and `go-swagger` we've never been super-strict on code style etc.
+>
+> But perhaps now (2025) is the time to adopt a different stance.
+
+Even though our repos have been early adopters of `golangci-lint` years ago
+(we used some other metalinter before), our decade-old codebase is only realigned to new rules from time to time.
+
+Now go-openapi and go-swagger make up a really large codebase, which is taxing to maintain and keep afloat.
+
+Code quality and the harmonization of rules have thus become things that we need now.
+
+## Meta-linter
+
+Universally formatted go code promotes ease of writing, reading, and maintenance.
+
+You should run `golangci-lint run` before committing your changes.
+
+Many editors have plugins that do that automatically.
+
+> We use the `golangci-lint` meta-linter. The configuration lies in [`.golangci.yml`](../.golangci.yml).
+> You may read <https://golangci-lint.run/docs/linters/configuration/>  for additional reference.
+
+## Linting rules posture
+
+Thanks to go's original design, we developers don't have to waste much time arguing about code figures of style.
+
+However, the number of available linters has been growing to the point that we need to pick a choice.
+
+We enable all linters published by `golangci-lint` by default, then disable a few ones.
+
+Here are the reasons why they are disabled (update: Nov. 2025, `golangci-lint v2.6.1`):
+
+```yaml
+  disable:
+    - depguard              # we don't want to configure rules to constrain import. That's the reviewer's job
+    - exhaustruct           # we don't want to configure regexp's to check type name. That's the reviewer's job
+    - funlen                # we accept cognitive complexity as a meaningful metric, but function length is relevant
+    - godox                 # we don't see any value in forbidding TODO's etc in code
+    - nlreturn              # we usually apply this "blank line" rule to make code less compact. We just don't want to enforce it
+    - nonamedreturns        # we don't see any valid reason why we couldn't used named returns
+    - noinlineerr           # there is no value added forbidding inlined err
+    - paralleltest          # we like parallel tests. We just don't want them to be enforced everywhere
+    - recvcheck             # we like the idea of having pointer and non-pointer receivers
+    - testpackage           # we like test packages. We just don't want them to be enforced everywhere
+    - tparallel             # see paralleltest
+    - varnamelen            # sometimes, we like short variables. The linter doesn't catch cases when a short name is good
+    - whitespace            # no added value
+    - wrapcheck             # although there is some sense with this linter's general idea, it produces too much noise
+    - wsl                   # no added value. Noise
+    - wsl_v5                # no added value. Noise
+```
+
+As you may see, we agree with the objective of most linters, at least the principle they are supposed to enforce.
+But all linters do not support fine-grained tuning to tolerate some cases and not some others. 
+
+When this is possible, we enable linters with relaxed constraints:
+
+```yaml
+  settings:
+    dupl:
+      threshold: 200        # in a older code base such as ours, we have to be tolerant with a little redundancy
+                            # Hopefully, we'll be able to gradually get rid of those.
+    goconst:
+      min-len: 2
+      min-occurrences: 3
+    cyclop:
+      max-complexity: 20    # the default is too low for most of our functions. 20 is a nicer trade-off
+    gocyclo:
+      min-complexity: 20
+    exhaustive:             # when using default in switch, this should be good enough
+      default-signifies-exhaustive: true
+      default-case-required: true
+    lll:
+      line-length: 180      # we just want to avoid extremely long lines.
+                            # It is no big deal if a line or two don't fit on your terminal.
+```
+
+Final note: since we have switched to a forked version of `stretchr/testify`,
+we no longer benefit from the great `testifylint` linter for tests.

From b75931b12f355646c7ef87abcf8754246c35d9f4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20BIDON?= <fredbi@yahoo.com>
Date: Mon, 8 Dec 2025 21:08:44 +0100
Subject: [PATCH 34/63] fix: added guard for edge case causing potential panic
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fixes #224

Signed-off-by: Frédéric BIDON <fredbi@yahoo.com>
---
 expander.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/expander.go b/expander.go
index cc4bd1c..ff45350 100644
--- a/expander.go
+++ b/expander.go
@@ -545,6 +545,9 @@ func expandParameterOrResponse(input any, resolver *schemaLoader, basePath strin
 		}
 
 		ref, sch, _ = getRefAndSchema(input)
+		if ref == nil {
+			ref = &Ref{} // empty ref
+		}
 	}
 
 	if ref.String() != "" {

From 90bc044aa586316ea14590f1cc06b26461361e05 Mon Sep 17 00:00:00 2001
From: Frederic BIDON <fredbi@yahoo.com>
Date: Mon, 4 Dec 2023 19:15:54 +0100
Subject: [PATCH 35/63] test(readability): used embedded FS for fixtures

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
---
 circular_test.go                         |   7 +-
 expander_test.go                         | 406 +++--------------------
 fixtures/expansion/expectedExtraRef.json |  57 ++++
 fixtures/expansion/expectedPathItem.json |  27 ++
 fixtures/expansion/petstore2.0.json      | 280 ++++++++++++++++
 fixtures/specs/mini_spec.json            |  18 +
 fixtures/specs/minimal_spec.json         |  44 +++
 fixtures/specs/spec.json                 |  46 +++
 swagger_test.go                          | 156 +++------
 9 files changed, 552 insertions(+), 489 deletions(-)
 create mode 100644 fixtures/expansion/expectedExtraRef.json
 create mode 100644 fixtures/expansion/expectedPathItem.json
 create mode 100644 fixtures/expansion/petstore2.0.json
 create mode 100644 fixtures/specs/mini_spec.json
 create mode 100644 fixtures/specs/minimal_spec.json
 create mode 100644 fixtures/specs/spec.json

diff --git a/circular_test.go b/circular_test.go
index 6522ce7..cc607c2 100644
--- a/circular_test.go
+++ b/circular_test.go
@@ -266,7 +266,12 @@ func TestCircular_RemoteExpandAzure(t *testing.T) {
 	require.NotNil(t, pth1)
 
 	// check expected remaining $ref
-	assertRefInJSONRegexp(t, jazon, `^(#/definitions/)|(networkInterface.json#/definitions/)|(networkSecurityGroup.json#/definitions/)|(network.json#/definitions)|(virtualNetworkTap.json#/definitions/)|(virtualNetwork.json#/definitions/)|(privateEndpoint.json#/definitions/)|(\./examples/)`)
+	assertRefInJSONRegexp(t, jazon,
+		`^(#/definitions/)|(networkInterface.json#/definitions/)|`+
+			`(networkSecurityGroup.json#/definitions/)|(network.json#/definitions)|`+
+			`(virtualNetworkTap.json#/definitions/)|(virtualNetwork.json#/definitions/)|`+
+			`(privateEndpoint.json#/definitions/)|(\./examples/)`,
+	)
 
 	// check all $ref resolve in the expanded root
 	// (filter out the remaining $ref in x-ms-example extensions, which are not expanded)
diff --git a/expander_test.go b/expander_test.go
index eb7090a..1fc2e5b 100644
--- a/expander_test.go
+++ b/expander_test.go
@@ -4,7 +4,9 @@
 package spec
 
 import (
+	"embed"
 	"encoding/json"
+	"fmt"
 	"io"
 	"log"
 	"net/http"
@@ -25,12 +27,43 @@ const (
 	extraRefFixture     = "fixtures/expansion/extraRef.json"
 )
 
+//nolint:gochecknoglobals // it's okay to have embedded test fixtures as globals
 var (
+	//go:embed fixtures/*/*.json fixtures/*/*.yaml fixtures/*/*.yml
+	fixtureAssets embed.FS
+
+	// PetStore20 json doc for swagger 2.0 pet store.
+	PetStore20 []byte
+
 	// PetStoreJSONMessage json raw message for Petstore20
-	PetStoreJSONMessage = json.RawMessage([]byte(PetStore20))
-	specs               = filepath.Join("fixtures", "specs")
+	PetStoreJSONMessage json.RawMessage
+	expectedExtraRef    []byte
+	expectedPathItem    []byte
+
+	specs = filepath.Join("fixtures", "specs")
 )
 
+func init() { //nolint:gochecknoinits // it's okay to load embedded fixtures in init().
+	// load embedded fixtures
+
+	var err error
+	PetStore20, err = fixtureAssets.ReadFile("fixtures/expansion/petstore2.0.json")
+	if err != nil {
+		panic(fmt.Sprintf("could not find fixture: %v", err))
+	}
+	PetStoreJSONMessage = json.RawMessage(PetStore20)
+
+	expectedExtraRef, err = fixtureAssets.ReadFile("fixtures/expansion/expectedExtraRef.json")
+	if err != nil {
+		panic(fmt.Sprintf("could not find fixture: %v", err))
+	}
+
+	expectedPathItem, err = fixtureAssets.ReadFile("fixtures/expansion/expectedPathItem.json")
+	if err != nil {
+		panic(fmt.Sprintf("could not find fixture: %v", err))
+	}
+}
+
 func TestExpand_Issue148(t *testing.T) {
 	fp := filepath.Join("fixtures", "bugs", "schema-148.json")
 	b, err := jsonDoc(fp)
@@ -997,94 +1030,12 @@ func expandRootWithID(t testing.TB, root *Swagger, testcase string) {
 
 func TestExpand_PathItem(t *testing.T) {
 	jazon, _ := expandThisOrDieTrying(t, pathItemsFixture)
-	assert.JSONEq(t, `{
-         "swagger": "2.0",
-         "info": {
-          "title": "PathItems refs",
-          "version": "1.0"
-         },
-         "paths": {
-          "/todos": {
-           "get": {
-            "responses": {
-             "200": {
-              "description": "List Todos",
-              "schema": {
-               "type": "array",
-               "items": {
-                "type": "string"
-               }
-              }
-             },
-             "404": {
-              "description": "error"
-             }
-            }
-           }
-          }
-         }
-			 }`, jazon)
+	assert.JSONEq(t, string(expectedPathItem), jazon)
 }
 
 func TestExpand_ExtraItems(t *testing.T) {
 	jazon, _ := expandThisOrDieTrying(t, extraRefFixture)
-	assert.JSONEq(t, `{
-         "schemes": [
-          "http"
-         ],
-         "swagger": "2.0",
-         "info": {
-          "title": "Supported, but non Swagger 20 compliant $ref constructs",
-          "version": "2.1.0"
-         },
-         "host": "item.com",
-         "basePath": "/extraRefs",
-         "paths": {
-          "/employees": {
-           "get": {
-            "summary": "List Employee Types",
-            "operationId": "LIST-Employees",
-            "parameters": [
-             {
-							"description": "unsupported $ref in simple param",
-              "type": "array",
-              "items": {
-               "$ref": "#/definitions/arrayType"
-              },
-              "name": "myQueryParam",
-              "in": "query"
-             }
-            ],
-            "responses": {
-             "200": {
-							"description": "unsupported $ref in header",
-              "schema": {
-               "type": "string"
-              },
-              "headers": {
-               "X-header": {
-                  "type": "array",
-                  "items": {
-                    "$ref": "#/definitions/headerType"
-                  }
-							  }
-              }
-             }
-            }
-           }
-          }
-         },
-         "definitions": {
-          "arrayType": {
-           "type": "integer",
-           "format": "int32"
-          },
-          "headerType": {
-           "type": "string",
-           "format": "uuid"
-          }
-         }
-			 }`, jazon)
+	assert.JSONEq(t, string(expectedExtraRef), jazon)
 }
 
 func TestExpand_Issue145(t *testing.T) {
@@ -1133,286 +1084,3 @@ func TestExpand_Issue145(t *testing.T) {
 		})
 	})
 }
-
-// PetStore20 json doc for swagger 2.0 pet store
-const PetStore20 = `{
-  "swagger": "2.0",
-  "info": {
-    "version": "1.0.0",
-    "title": "Swagger Petstore",
-    "contact": {
-      "name": "Wordnik API Team",
-      "url": "http://developer.wordnik.com"
-    },
-    "license": {
-      "name": "Creative Commons 4.0 International",
-      "url": "http://creativecommons.org/licenses/by/4.0/"
-    }
-  },
-  "host": "petstore.swagger.wordnik.com",
-  "basePath": "/api",
-  "schemes": [
-    "http"
-  ],
-  "paths": {
-    "/pets": {
-      "get": {
-        "security": [
-          {
-            "basic": []
-          }
-        ],
-        "tags": [ "Pet Operations" ],
-        "operationId": "getAllPets",
-        "parameters": [
-          {
-            "name": "status",
-            "in": "query",
-            "description": "The status to filter by",
-            "type": "string"
-          },
-          {
-            "name": "limit",
-            "in": "query",
-            "description": "The maximum number of results to return",
-            "type": "integer",
-						"format": "int64"
-          }
-        ],
-        "summary": "Finds all pets in the system",
-        "responses": {
-          "200": {
-            "description": "Pet response",
-            "schema": {
-              "type": "array",
-              "items": {
-                "$ref": "#/definitions/Pet"
-              }
-            }
-          },
-          "default": {
-            "description": "Unexpected error",
-            "schema": {
-              "$ref": "#/definitions/Error"
-            }
-          }
-        }
-      },
-      "post": {
-        "security": [
-          {
-            "basic": []
-          }
-        ],
-        "tags": [ "Pet Operations" ],
-        "operationId": "createPet",
-        "summary": "Creates a new pet",
-        "consumes": ["application/x-yaml"],
-        "produces": ["application/x-yaml"],
-        "parameters": [
-          {
-            "name": "pet",
-            "in": "body",
-            "description": "The Pet to create",
-            "required": true,
-            "schema": {
-              "$ref": "#/definitions/newPet"
-            }
-          }
-        ],
-        "responses": {
-          "200": {
-            "description": "Created Pet response",
-            "schema": {
-              "$ref": "#/definitions/Pet"
-            }
-          },
-          "default": {
-            "description": "Unexpected error",
-            "schema": {
-              "$ref": "#/definitions/Error"
-            }
-          }
-        }
-      }
-    },
-    "/pets/{id}": {
-      "delete": {
-        "security": [
-          {
-            "apiKey": []
-          }
-        ],
-        "description": "Deletes the Pet by id",
-        "operationId": "deletePet",
-        "parameters": [
-          {
-            "name": "id",
-            "in": "path",
-            "description": "ID of pet to delete",
-            "required": true,
-            "type": "integer",
-            "format": "int64"
-          }
-        ],
-        "responses": {
-          "204": {
-            "description": "pet deleted"
-          },
-          "default": {
-            "description": "unexpected error",
-            "schema": {
-              "$ref": "#/definitions/Error"
-            }
-          }
-        }
-      },
-      "get": {
-        "tags": [ "Pet Operations" ],
-        "operationId": "getPetById",
-        "summary": "Finds the pet by id",
-        "responses": {
-          "200": {
-            "description": "Pet response",
-            "schema": {
-              "$ref": "#/definitions/Pet"
-            }
-          },
-          "default": {
-            "description": "Unexpected error",
-            "schema": {
-              "$ref": "#/definitions/Error"
-            }
-          }
-        }
-      },
-      "parameters": [
-        {
-          "name": "id",
-          "in": "path",
-          "description": "ID of pet",
-          "required": true,
-          "type": "integer",
-          "format": "int64"
-        }
-      ]
-    }
-  },
-  "definitions": {
-    "Category": {
-      "id": "Category",
-      "properties": {
-        "id": {
-          "format": "int64",
-          "type": "integer"
-        },
-        "name": {
-          "type": "string"
-        }
-      }
-    },
-    "Pet": {
-      "id": "Pet",
-      "properties": {
-        "category": {
-          "$ref": "#/definitions/Category"
-        },
-        "id": {
-          "description": "unique identifier for the pet",
-          "format": "int64",
-          "maximum": 100.0,
-          "minimum": 0.0,
-          "type": "integer"
-        },
-        "name": {
-          "type": "string"
-        },
-        "photoUrls": {
-          "items": {
-            "type": "string"
-          },
-          "type": "array"
-        },
-        "status": {
-          "description": "pet status in the store",
-          "enum": [
-            "available",
-            "pending",
-            "sold"
-          ],
-          "type": "string"
-        },
-        "tags": {
-          "items": {
-            "$ref": "#/definitions/Tag"
-          },
-          "type": "array"
-        }
-      },
-      "required": [
-        "id",
-        "name"
-      ]
-    },
-    "newPet": {
-      "anyOf": [
-        {
-          "$ref": "#/definitions/Pet"
-        },
-        {
-          "required": [
-            "name"
-          ]
-        }
-      ]
-    },
-    "Tag": {
-      "id": "Tag",
-      "properties": {
-        "id": {
-          "format": "int64",
-          "type": "integer"
-        },
-        "name": {
-          "type": "string"
-        }
-      }
-    },
-    "Error": {
-      "required": [
-        "code",
-        "message"
-      ],
-      "properties": {
-        "code": {
-          "type": "integer",
-          "format": "int32"
-        },
-        "message": {
-          "type": "string"
-        }
-      }
-    }
-  },
-  "consumes": [
-    "application/json",
-    "application/xml"
-  ],
-  "produces": [
-    "application/json",
-    "application/xml",
-    "text/plain",
-    "text/html"
-  ],
-  "securityDefinitions": {
-    "basic": {
-      "type": "basic"
-    },
-    "apiKey": {
-      "type": "apiKey",
-      "in": "header",
-      "name": "X-API-KEY"
-    }
-  }
-}
-`
diff --git a/fixtures/expansion/expectedExtraRef.json b/fixtures/expansion/expectedExtraRef.json
new file mode 100644
index 0000000..24da091
--- /dev/null
+++ b/fixtures/expansion/expectedExtraRef.json
@@ -0,0 +1,57 @@
+{
+  "schemes": [
+   "http"
+  ],
+  "swagger": "2.0",
+  "info": {
+   "title": "Supported, but non Swagger 20 compliant $ref constructs",
+   "version": "2.1.0"
+  },
+  "host": "item.com",
+  "basePath": "/extraRefs",
+  "paths": {
+   "/employees": {
+    "get": {
+     "summary": "List Employee Types",
+     "operationId": "LIST-Employees",
+     "parameters": [
+      {
+							"description": "unsupported $ref in simple param",
+       "type": "array",
+       "items": {
+        "$ref": "#/definitions/arrayType"
+       },
+       "name": "myQueryParam",
+       "in": "query"
+      }
+     ],
+     "responses": {
+      "200": {
+							"description": "unsupported $ref in header",
+       "schema": {
+        "type": "string"
+       },
+       "headers": {
+        "X-header": {
+           "type": "array",
+           "items": {
+             "$ref": "#/definitions/headerType"
+           }
+							  }
+       }
+      }
+     }
+    }
+   }
+  },
+  "definitions": {
+   "arrayType": {
+    "type": "integer",
+    "format": "int32"
+   },
+   "headerType": {
+    "type": "string",
+    "format": "uuid"
+   }
+  }
+}
diff --git a/fixtures/expansion/expectedPathItem.json b/fixtures/expansion/expectedPathItem.json
new file mode 100644
index 0000000..6eed8b6
--- /dev/null
+++ b/fixtures/expansion/expectedPathItem.json
@@ -0,0 +1,27 @@
+{
+  "swagger": "2.0",
+  "info": {
+   "title": "PathItems refs",
+   "version": "1.0"
+  },
+  "paths": {
+   "/todos": {
+    "get": {
+     "responses": {
+      "200": {
+       "description": "List Todos",
+       "schema": {
+        "type": "array",
+        "items": {
+         "type": "string"
+        }
+       }
+      },
+      "404": {
+       "description": "error"
+      }
+     }
+    }
+   }
+  }
+}
diff --git a/fixtures/expansion/petstore2.0.json b/fixtures/expansion/petstore2.0.json
new file mode 100644
index 0000000..7fc9d88
--- /dev/null
+++ b/fixtures/expansion/petstore2.0.json
@@ -0,0 +1,280 @@
+{
+  "swagger": "2.0",
+  "info": {
+    "version": "1.0.0",
+    "title": "Swagger Petstore",
+    "contact": {
+      "name": "Wordnik API Team",
+      "url": "http://developer.wordnik.com"
+    },
+    "license": {
+      "name": "Creative Commons 4.0 International",
+      "url": "http://creativecommons.org/licenses/by/4.0/"
+    }
+  },
+  "host": "petstore.swagger.wordnik.com",
+  "basePath": "/api",
+  "schemes": [
+    "http"
+  ],
+  "paths": {
+    "/pets": {
+      "get": {
+        "security": [
+          {
+            "basic": []
+          }
+        ],
+        "tags": [ "Pet Operations" ],
+        "operationId": "getAllPets",
+        "parameters": [
+          {
+            "name": "status",
+            "in": "query",
+            "description": "The status to filter by",
+            "type": "string"
+          },
+          {
+            "name": "limit",
+            "in": "query",
+            "description": "The maximum number of results to return",
+            "type": "integer",
+						"format": "int64"
+          }
+        ],
+        "summary": "Finds all pets in the system",
+        "responses": {
+          "200": {
+            "description": "Pet response",
+            "schema": {
+              "type": "array",
+              "items": {
+                "$ref": "#/definitions/Pet"
+              }
+            }
+          },
+          "default": {
+            "description": "Unexpected error",
+            "schema": {
+              "$ref": "#/definitions/Error"
+            }
+          }
+        }
+      },
+      "post": {
+        "security": [
+          {
+            "basic": []
+          }
+        ],
+        "tags": [ "Pet Operations" ],
+        "operationId": "createPet",
+        "summary": "Creates a new pet",
+        "consumes": ["application/x-yaml"],
+        "produces": ["application/x-yaml"],
+        "parameters": [
+          {
+            "name": "pet",
+            "in": "body",
+            "description": "The Pet to create",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/newPet"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Created Pet response",
+            "schema": {
+              "$ref": "#/definitions/Pet"
+            }
+          },
+          "default": {
+            "description": "Unexpected error",
+            "schema": {
+              "$ref": "#/definitions/Error"
+            }
+          }
+        }
+      }
+    },
+    "/pets/{id}": {
+      "delete": {
+        "security": [
+          {
+            "apiKey": []
+          }
+        ],
+        "description": "Deletes the Pet by id",
+        "operationId": "deletePet",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "description": "ID of pet to delete",
+            "required": true,
+            "type": "integer",
+            "format": "int64"
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "pet deleted"
+          },
+          "default": {
+            "description": "unexpected error",
+            "schema": {
+              "$ref": "#/definitions/Error"
+            }
+          }
+        }
+      },
+      "get": {
+        "tags": [ "Pet Operations" ],
+        "operationId": "getPetById",
+        "summary": "Finds the pet by id",
+        "responses": {
+          "200": {
+            "description": "Pet response",
+            "schema": {
+              "$ref": "#/definitions/Pet"
+            }
+          },
+          "default": {
+            "description": "Unexpected error",
+            "schema": {
+              "$ref": "#/definitions/Error"
+            }
+          }
+        }
+      },
+      "parameters": [
+        {
+          "name": "id",
+          "in": "path",
+          "description": "ID of pet",
+          "required": true,
+          "type": "integer",
+          "format": "int64"
+        }
+      ]
+    }
+  },
+  "definitions": {
+    "Category": {
+      "id": "Category",
+      "properties": {
+        "id": {
+          "format": "int64",
+          "type": "integer"
+        },
+        "name": {
+          "type": "string"
+        }
+      }
+    },
+    "Pet": {
+      "id": "Pet",
+      "properties": {
+        "category": {
+          "$ref": "#/definitions/Category"
+        },
+        "id": {
+          "description": "unique identifier for the pet",
+          "format": "int64",
+          "maximum": 100.0,
+          "minimum": 0.0,
+          "type": "integer"
+        },
+        "name": {
+          "type": "string"
+        },
+        "photoUrls": {
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        },
+        "status": {
+          "description": "pet status in the store",
+          "enum": [
+            "available",
+            "pending",
+            "sold"
+          ],
+          "type": "string"
+        },
+        "tags": {
+          "items": {
+            "$ref": "#/definitions/Tag"
+          },
+          "type": "array"
+        }
+      },
+      "required": [
+        "id",
+        "name"
+      ]
+    },
+    "newPet": {
+      "anyOf": [
+        {
+          "$ref": "#/definitions/Pet"
+        },
+        {
+          "required": [
+            "name"
+          ]
+        }
+      ]
+    },
+    "Tag": {
+      "id": "Tag",
+      "properties": {
+        "id": {
+          "format": "int64",
+          "type": "integer"
+        },
+        "name": {
+          "type": "string"
+        }
+      }
+    },
+    "Error": {
+      "required": [
+        "code",
+        "message"
+      ],
+      "properties": {
+        "code": {
+          "type": "integer",
+          "format": "int32"
+        },
+        "message": {
+          "type": "string"
+        }
+      }
+    }
+  },
+  "consumes": [
+    "application/json",
+    "application/xml"
+  ],
+  "produces": [
+    "application/json",
+    "application/xml",
+    "text/plain",
+    "text/html"
+  ],
+  "securityDefinitions": {
+    "basic": {
+      "type": "basic"
+    },
+    "apiKey": {
+      "type": "apiKey",
+      "in": "header",
+      "name": "X-API-KEY"
+    }
+  }
+}
diff --git a/fixtures/specs/mini_spec.json b/fixtures/specs/mini_spec.json
new file mode 100644
index 0000000..e153eaf
--- /dev/null
+++ b/fixtures/specs/mini_spec.json
@@ -0,0 +1,18 @@
+{
+	"swagger": "2.0",
+	"info": {
+		"version": "0.0.0",
+		"title": "Simple API"
+	},
+	"paths": {
+		"/": {
+			"get": {
+				"responses": {
+					"200": {
+						"description": "OK"
+					}
+				}
+			}
+		}
+	}
+}
diff --git a/fixtures/specs/minimal_spec.json b/fixtures/specs/minimal_spec.json
new file mode 100644
index 0000000..c7c2f7f
--- /dev/null
+++ b/fixtures/specs/minimal_spec.json
@@ -0,0 +1,44 @@
+{
+  "swagger": "2.0",
+  "info": {
+    "version": "0.0.0",
+    "title": "Simple API"
+  },
+  "securityDefinitions": {
+    "basic": {
+      "type": "basic"
+    },
+    "apiKey": {
+      "type": "apiKey",
+      "in": "header",
+      "name": "X-API-KEY"
+    },
+    "queryKey": {
+      "type": "apiKey",
+      "in": "query",
+      "name": "api_key"
+    }
+  },
+  "paths": {
+    "/": {
+      "get": {
+        "security": [
+          {
+            "apiKey": [],
+            "basic": []
+          },
+          {},
+          {
+            "queryKey": [],
+            "basic": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "OK"
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/fixtures/specs/spec.json b/fixtures/specs/spec.json
new file mode 100644
index 0000000..0b65bcc
--- /dev/null
+++ b/fixtures/specs/spec.json
@@ -0,0 +1,46 @@
+{
+	"id": "http://localhost:3849/api-docs",
+	"consumes": ["application/json", "application/x-yaml"],
+	"produces": ["application/json"],
+	"schemes": ["http", "https"],
+	"swagger": "2.0",
+	"info": {
+		"contact": {
+			"name": "wordnik api team",
+			"url": "http://developer.wordnik.com"
+		},
+		"description": "A sample API that uses a petstore as an example to demonstrate features in the swagger-2.0 specification",
+		"license": {
+			"name": "Creative Commons 4.0 International",
+			"url": "http://creativecommons.org/licenses/by/4.0/"
+		},
+		"termsOfService": "http://helloreverb.com/terms/",
+		"title": "Swagger Sample API",
+		"version": "1.0.9-abcd",
+		"x-framework": "go-swagger"
+	},
+	"host": "some.api.out.there",
+	"basePath": "/",
+	"paths": {"x-framework":"go-swagger","/":{"$ref":"cats"}},
+	"definitions": { "Category": { "type": "string"} },
+	"parameters": {
+		"categoryParam": {
+			"name": "category",
+			"in": "query",
+			"type": "string"
+		}
+	},
+	"responses": { "EmptyAnswer": { "description": "no data to return for this operation" } },
+	"securityDefinitions": {
+		"internalApiKey": {
+			"type": "apiKey",
+			"in": "header",
+			"name": "api_key"
+		}
+	},
+	"security": [{"internalApiKey":[]}],
+	"tags": [{"name":"pets"}],
+	"externalDocs": {"description":"the name","url":"the url"},
+	"x-some-extension": "vendor",
+	"x-schemes": ["unix","amqp"]
+}
diff --git a/swagger_test.go b/swagger_test.go
index 4aad391..5c16740 100644
--- a/swagger_test.go
+++ b/swagger_test.go
@@ -5,12 +5,40 @@ package spec
 
 import (
 	"encoding/json"
+	"fmt"
 	"testing"
 
 	"github.com/go-openapi/testify/v2/assert"
 	"github.com/go-openapi/testify/v2/require"
 )
 
+//nolint:gochecknoglobals // it's okay to have embedded test fixtures as globals
+var (
+	specJSON        []byte
+	minimalJSONSpec []byte
+	miniJSONSpec    []byte
+)
+
+func init() { //nolint:gochecknoinits // it's okay to load embedded fixtures in init().
+	// load embedded fixtures
+
+	var err error
+	specJSON, err = fixtureAssets.ReadFile("fixtures/specs/spec.json")
+	if err != nil {
+		panic(fmt.Sprintf("could not find fixture: %v", err))
+	}
+
+	minimalJSONSpec, err = fixtureAssets.ReadFile("fixtures/specs/minimal_spec.json")
+	if err != nil {
+		panic(fmt.Sprintf("could not find fixture: %v", err))
+	}
+
+	miniJSONSpec, err = fixtureAssets.ReadFile("fixtures/specs/mini_spec.json")
+	if err != nil {
+		panic(fmt.Sprintf("could not find fixture: %v", err))
+	}
+}
+
 var spec = Swagger{
 	SwaggerProps: SwaggerProps{
 		ID:          "http://localhost:3849/api-docs",
@@ -48,54 +76,6 @@ var spec = Swagger{
 	}},
 }
 
-const specJSON = `{
-	"id": "http://localhost:3849/api-docs",
-	"consumes": ["application/json", "application/x-yaml"],
-	"produces": ["application/json"],
-	"schemes": ["http", "https"],
-	"swagger": "2.0",
-	"info": {
-		"contact": {
-			"name": "wordnik api team",
-			"url": "http://developer.wordnik.com"
-		},
-		"description": "A sample API that uses a petstore as an example to demonstrate features in the swagger-2.0` +
-	` specification",
-		"license": {
-			"name": "Creative Commons 4.0 International",
-			"url": "http://creativecommons.org/licenses/by/4.0/"
-		},
-		"termsOfService": "http://helloreverb.com/terms/",
-		"title": "Swagger Sample API",
-		"version": "1.0.9-abcd",
-		"x-framework": "go-swagger"
-	},
-	"host": "some.api.out.there",
-	"basePath": "/",
-	"paths": {"x-framework":"go-swagger","/":{"$ref":"cats"}},
-	"definitions": { "Category": { "type": "string"} },
-	"parameters": {
-		"categoryParam": {
-			"name": "category",
-			"in": "query",
-			"type": "string"
-		}
-	},
-	"responses": { "EmptyAnswer": { "description": "no data to return for this operation" } },
-	"securityDefinitions": {
-		"internalApiKey": {
-			"type": "apiKey",
-			"in": "header",
-			"name": "api_key"
-		}
-	},
-	"security": [{"internalApiKey":[]}],
-	"tags": [{"name":"pets"}],
-	"externalDocs": {"description":"the name","url":"the url"},
-	"x-some-extension": "vendor",
-	"x-schemes": ["unix","amqp"]
-}`
-
 // func verifySpecSerialize(specJSON []byte, spec Swagger) {
 // 	expected := map[string]interface{}{}
 // 	json.Unmarshal(specJSON, &expected)
@@ -227,7 +207,7 @@ func assertSpecJSON(t testing.TB, specJSON []byte) bool {
 
 func TestSwaggerSpec_Serialize(t *testing.T) {
 	expected := make(map[string]any)
-	_ = json.Unmarshal([]byte(specJSON), &expected)
+	_ = json.Unmarshal(specJSON, &expected)
 	b, err := json.MarshalIndent(spec, "", "  ")
 	require.NoError(t, err)
 	var actual map[string]any
@@ -237,13 +217,13 @@ func TestSwaggerSpec_Serialize(t *testing.T) {
 
 func TestSwaggerSpec_Deserialize(t *testing.T) {
 	var actual Swagger
-	require.NoError(t, json.Unmarshal([]byte(specJSON), &actual))
+	require.NoError(t, json.Unmarshal(specJSON, &actual))
 	assert.Equal(t, actual, spec)
 }
 
 func TestVendorExtensionStringSlice(t *testing.T) {
 	var actual Swagger
-	require.NoError(t, json.Unmarshal([]byte(specJSON), &actual))
+	require.NoError(t, json.Unmarshal(specJSON, &actual))
 	schemes, ok := actual.Extensions.GetStringSlice("x-schemes")
 	require.True(t, ok)
 	assert.Equal(t, []string{"unix", "amqp"}, schemes)
@@ -267,27 +247,8 @@ func TestVendorExtensionStringSlice(t *testing.T) {
 }
 
 func TestOptionalSwaggerProps_Serialize(t *testing.T) {
-	minimalJSONSpec := []byte(`{
-	"swagger": "2.0",
-	"info": {
-		"version": "0.0.0",
-		"title": "Simple API"
-	},
-	"paths": {
-		"/": {
-			"get": {
-				"responses": {
-					"200": {
-						"description": "OK"
-					}
-				}
-			}
-		}
-	}
-}`)
-
 	var minimalSpec Swagger
-	err := json.Unmarshal(minimalJSONSpec, &minimalSpec)
+	err := json.Unmarshal(miniJSONSpec, &minimalSpec)
 	require.NoError(t, err)
 	bytes, err := json.Marshal(&minimalSpec)
 	require.NoError(t, err)
@@ -309,51 +270,6 @@ func TestOptionalSwaggerProps_Serialize(t *testing.T) {
 	assert.NotContains(t, ms, "externalDocs")
 }
 
-var minimalJSONSpec = []byte(`{
-		"swagger": "2.0",
-		"info": {
-			"version": "0.0.0",
-			"title": "Simple API"
-		},
-		"securityDefinitions": {
-			"basic": {
-				"type": "basic"
-			},
-			"apiKey": {
-				"type": "apiKey",
-				"in": "header",
-				"name": "X-API-KEY"
-			},
-			"queryKey": {
-				"type": "apiKey",
-				"in": "query",
-				"name": "api_key"
-			}
-		},
-		"paths": {
-			"/": {
-				"get": {
-					"security": [
-						{
-							"apiKey": [],
-							"basic": []
-						},
-						{},
-						{
-							"queryKey": [],
-							"basic": []
-						}
-					],
-					"responses": {
-						"200": {
-							"description": "OK"
-						}
-					}
-				}
-			}
-		}
-	}`)
-
 func TestSecurityRequirements(t *testing.T) {
 	var minimalSpec Swagger
 	require.NoError(t, json.Unmarshal(minimalJSONSpec, &minimalSpec))
@@ -370,12 +286,14 @@ func TestSecurityRequirements(t *testing.T) {
 func TestSwaggerGobEncoding(t *testing.T) {
 	doTestSwaggerGobEncoding(t, specJSON)
 
-	doTestSwaggerGobEncoding(t, string(minimalJSONSpec))
+	doTestSwaggerGobEncoding(t, minimalJSONSpec)
 }
 
-func doTestSwaggerGobEncoding(t *testing.T, fixture string) {
+func doTestSwaggerGobEncoding(t *testing.T, fixture []byte) {
+	t.Helper()
+
 	var src, dst Swagger
-	require.NoError(t, json.Unmarshal([]byte(fixture), &src))
+	require.NoError(t, json.Unmarshal(fixture, &src))
 
 	doTestAnyGobEncoding(t, &src, &dst)
 }

From 1ffcd7a81d431d70c6ece9ed869016585d1a1975 Mon Sep 17 00:00:00 2001
From: "bot-go-openapi[bot]"
 <246880138+bot-go-openapi[bot]@users.noreply.github.com>
Date: Mon, 8 Dec 2025 21:05:43 +0000
Subject: [PATCH 36/63] doc: updated contributors file

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 CONTRIBUTORS.md | 50 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 50 insertions(+)
 create mode 100644 CONTRIBUTORS.md

diff --git a/CONTRIBUTORS.md b/CONTRIBUTORS.md
new file mode 100644
index 0000000..06a4d7b
--- /dev/null
+++ b/CONTRIBUTORS.md
@@ -0,0 +1,50 @@
+# Contributors
+
+- Repository: ['go-openapi/spec']
+
+| Total Contributors | Total Contributions |
+| --- | --- |
+| 38  | 386  |
+
+| Username | All Time Contribution Count | All Commits |
+| --- | --- | --- |
+| @casualjim | 191 | https://github.com/go-openapi/spec/commits?author=casualjim |
+| @fredbi | 84 | https://github.com/go-openapi/spec/commits?author=fredbi |
+| @pytlesk4 | 26 | https://github.com/go-openapi/spec/commits?author=pytlesk4 |
+| @kul-amr | 10 | https://github.com/go-openapi/spec/commits?author=kul-amr |
+| @keramix | 10 | https://github.com/go-openapi/spec/commits?author=keramix |
+| @youyuanwu | 8 | https://github.com/go-openapi/spec/commits?author=youyuanwu |
+| @pengsrc | 7 | https://github.com/go-openapi/spec/commits?author=pengsrc |
+| @alphacentory | 5 | https://github.com/go-openapi/spec/commits?author=alphacentory |
+| @mtfelian | 4 | https://github.com/go-openapi/spec/commits?author=mtfelian |
+| @Capstan | 4 | https://github.com/go-openapi/spec/commits?author=Capstan |
+| @sdghchj | 4 | https://github.com/go-openapi/spec/commits?author=sdghchj |
+| @databus23 | 2 | https://github.com/go-openapi/spec/commits?author=databus23 |
+| @vburenin | 2 | https://github.com/go-openapi/spec/commits?author=vburenin |
+| @petrkotas | 2 | https://github.com/go-openapi/spec/commits?author=petrkotas |
+| @nikhita | 2 | https://github.com/go-openapi/spec/commits?author=nikhita |
+| @hypnoglow | 2 | https://github.com/go-openapi/spec/commits?author=hypnoglow |
+| @carvind | 2 | https://github.com/go-openapi/spec/commits?author=carvind |
+| @ujjwalsh | 1 | https://github.com/go-openapi/spec/commits?author=ujjwalsh |
+| @mbohlool | 1 | https://github.com/go-openapi/spec/commits?author=mbohlool |
+| @j2gg0s | 1 | https://github.com/go-openapi/spec/commits?author=j2gg0s |
+| @ishveda | 1 | https://github.com/go-openapi/spec/commits?author=ishveda |
+| @micln | 1 | https://github.com/go-openapi/spec/commits?author=micln |
+| @GlenDC | 1 | https://github.com/go-openapi/spec/commits?author=GlenDC |
+| @agmikhailov | 1 | https://github.com/go-openapi/spec/commits?author=agmikhailov |
+| @tgraf | 1 | https://github.com/go-openapi/spec/commits?author=tgraf |
+| @zhsj | 1 | https://github.com/go-openapi/spec/commits?author=zhsj |
+| @sebastien-rosset | 1 | https://github.com/go-openapi/spec/commits?author=sebastien-rosset |
+| @alexandear | 1 | https://github.com/go-openapi/spec/commits?author=alexandear |
+| @morlay | 1 | https://github.com/go-openapi/spec/commits?author=morlay |
+| @mikedanese | 1 | https://github.com/go-openapi/spec/commits?author=mikedanese |
+| @koron | 1 | https://github.com/go-openapi/spec/commits?author=koron |
+| @honza | 1 | https://github.com/go-openapi/spec/commits?author=honza |
+| @gbjk | 1 | https://github.com/go-openapi/spec/commits?author=gbjk |
+| @faguirre1 | 1 | https://github.com/go-openapi/spec/commits?author=faguirre1 |
+| @ethantkoenig | 1 | https://github.com/go-openapi/spec/commits?author=ethantkoenig |
+| @sttts | 1 | https://github.com/go-openapi/spec/commits?author=sttts |
+| @ChandanChainani | 1 | https://github.com/go-openapi/spec/commits?author=ChandanChainani |
+| @bvwells | 1 | https://github.com/go-openapi/spec/commits?author=bvwells |
+
+ _this file was generated by the [Contributors GitHub Action](https://github.com/github/contributors)_

From e58b9150e38aacb9c6ff7786ab837393ca55621f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20BIDON?= <fredbi@yahoo.com>
Date: Mon, 8 Dec 2025 22:53:09 +0100
Subject: [PATCH 37/63] chore: updated jsonpointer and reference
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Frédéric BIDON <fredbi@yahoo.com>
---
 go.mod | 4 ++--
 go.sum | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/go.mod b/go.mod
index 1d26480..d64d4ec 100644
--- a/go.mod
+++ b/go.mod
@@ -1,8 +1,8 @@
 module github.com/go-openapi/spec
 
 require (
-	github.com/go-openapi/jsonpointer v0.22.3
-	github.com/go-openapi/jsonreference v0.21.3
+	github.com/go-openapi/jsonpointer v0.22.4
+	github.com/go-openapi/jsonreference v0.21.4
 	github.com/go-openapi/swag/conv v0.25.4
 	github.com/go-openapi/swag/jsonname v0.25.4
 	github.com/go-openapi/swag/jsonutils v0.25.4
diff --git a/go.sum b/go.sum
index 278a904..bcc4745 100644
--- a/go.sum
+++ b/go.sum
@@ -1,7 +1,7 @@
-github.com/go-openapi/jsonpointer v0.22.3 h1:dKMwfV4fmt6Ah90zloTbUKWMD+0he+12XYAsPotrkn8=
-github.com/go-openapi/jsonpointer v0.22.3/go.mod h1:0lBbqeRsQ5lIanv3LHZBrmRGHLHcQoOXQnf88fHlGWo=
-github.com/go-openapi/jsonreference v0.21.3 h1:96Dn+MRPa0nYAR8DR1E03SblB5FJvh7W6krPI0Z7qMc=
-github.com/go-openapi/jsonreference v0.21.3/go.mod h1:RqkUP0MrLf37HqxZxrIAtTWW4ZJIK1VzduhXYBEeGc4=
+github.com/go-openapi/jsonpointer v0.22.4 h1:dZtK82WlNpVLDW2jlA1YCiVJFVqkED1MegOUy9kR5T4=
+github.com/go-openapi/jsonpointer v0.22.4/go.mod h1:elX9+UgznpFhgBuaMQ7iu4lvvX1nvNsesQ3oxmYTw80=
+github.com/go-openapi/jsonreference v0.21.4 h1:24qaE2y9bx/q3uRK/qN+TDwbok1NhbSmGjjySRCHtC8=
+github.com/go-openapi/jsonreference v0.21.4/go.mod h1:rIENPTjDbLpzQmQWCj5kKj3ZlmEh+EFVbz3RTUh30/4=
 github.com/go-openapi/swag/conv v0.25.4 h1:/Dd7p0LZXczgUcC/Ikm1+YqVzkEeCc9LnOWjfkpkfe4=
 github.com/go-openapi/swag/conv v0.25.4/go.mod h1:3LXfie/lwoAv0NHoEuY1hjoFAYkvlqI/Bn5EQDD3PPU=
 github.com/go-openapi/swag/jsonname v0.25.4 h1:bZH0+MsS03MbnwBXYhuTttMOqk+5KcQ9869Vye1bNHI=

From 324f6d9f78a4a0b35674e16bc39b524bea8a0e9b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20BIDON?= <fredbi@yahoo.com>
Date: Mon, 8 Dec 2025 23:11:20 +0100
Subject: [PATCH 38/63] doc: removed old version of the README
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Frédéric BIDON <fredbi@yahoo.com>
---
 README.old | 58 ------------------------------------------------------
 1 file changed, 58 deletions(-)
 delete mode 100644 README.old

diff --git a/README.old b/README.old
deleted file mode 100644
index 3203bd2..0000000
--- a/README.old
+++ /dev/null
@@ -1,58 +0,0 @@
-# OpenAPI v2 object model [![Build Status](https://github.com/go-openapi/spec/actions/workflows/go-test.yml/badge.svg)](https://github.com/go-openapi/spec/actions?query=workflow%3A"go+test") [![codecov](https://codecov.io/gh/go-openapi/spec/branch/master/graph/badge.svg)](https://codecov.io/gh/go-openapi/spec)
-
-[![Slack Status](https://slackin.goswagger.io/badge.svg)](https://slackin.goswagger.io)
-[![license](http://img.shields.io/badge/license-Apache%20v2-orange.svg)](https://raw.githubusercontent.com/go-openapi/spec/master/LICENSE)
-[![Go Reference](https://pkg.go.dev/badge/github.com/go-openapi/spec.svg)](https://pkg.go.dev/github.com/go-openapi/spec)
-[![Go Report Card](https://goreportcard.com/badge/github.com/go-openapi/spec)](https://goreportcard.com/report/github.com/go-openapi/spec)
-
-The object model for OpenAPI specification documents.
-
-## Licensing
-
-This library ships under the [SPDX-License-Identifier: Apache-2.0](./LICENSE).
-
-### FAQ
-
-* What does this do?
-
-> 1. This package knows how to marshal and unmarshal Swagger API specifications into a golang object model
-> 2. It knows how to resolve $ref and expand them to make a single root document
-
-* How does it play with the rest of the go-openapi packages ?
-
-> 1. This package is at the core of the go-openapi suite of packages and [code generator](https://github.com/go-swagger/go-swagger)
-> 2. There is a [spec loading package](https://github.com/go-openapi/loads) to fetch specs as JSON or YAML from local or remote locations
-> 3. There is a [spec validation package](https://github.com/go-openapi/validate) built on top of it
-> 4. There is a [spec analysis package](https://github.com/go-openapi/analysis) built on top of it, to analyze, flatten, fix and merge spec documents
-
-* Does this library support OpenAPI 3?
-
-> No.
-> This package currently only supports OpenAPI 2.0 (aka Swagger 2.0).
-> There is no plan to make it evolve toward supporting OpenAPI 3.x.
-> This [discussion thread](https://github.com/go-openapi/spec/issues/21) relates the full story.
->
-> An early attempt to support Swagger 3 may be found at: https://github.com/go-openapi/spec3
-
-* Does the unmarshaling support YAML?
-
-> Not directly. The exposed types know only how to unmarshal from JSON.
->
-> In order to load a YAML document as a Swagger spec, you need to use the loaders provided by
-> github.com/go-openapi/loads
->
-> Take a look at the example there: https://pkg.go.dev/github.com/go-openapi/loads#example-Spec
->
-> See also https://github.com/go-openapi/spec/issues/164
-
-* How can I validate a spec?
-
-> Validation is provided by [the validate package](http://github.com/go-openapi/validate)
-
-* Why do we have an `ID` field for `Schema` which is not part of the swagger spec?
-
-> We found jsonschema compatibility more important: since `id` in jsonschema influences
-> how `$ref` are resolved.
-> This `id` does not conflict with any property named `id`.
->
-> See also https://github.com/go-openapi/spec/issues/23

From ddeeaf835afce04e5f41718b1d0ca7ae5e3d8884 Mon Sep 17 00:00:00 2001
From: "bot-go-openapi[bot]"
 <246880138+bot-go-openapi[bot]@users.noreply.github.com>
Date: Sat, 13 Dec 2025 04:41:57 +0000
Subject: [PATCH 39/63] doc: updated contributors file

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 CONTRIBUTORS.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/CONTRIBUTORS.md b/CONTRIBUTORS.md
index 06a4d7b..47d6a56 100644
--- a/CONTRIBUTORS.md
+++ b/CONTRIBUTORS.md
@@ -4,12 +4,12 @@
 
 | Total Contributors | Total Contributions |
 | --- | --- |
-| 38  | 386  |
+| 38  | 388  |
 
 | Username | All Time Contribution Count | All Commits |
 | --- | --- | --- |
 | @casualjim | 191 | https://github.com/go-openapi/spec/commits?author=casualjim |
-| @fredbi | 84 | https://github.com/go-openapi/spec/commits?author=fredbi |
+| @fredbi | 86 | https://github.com/go-openapi/spec/commits?author=fredbi |
 | @pytlesk4 | 26 | https://github.com/go-openapi/spec/commits?author=pytlesk4 |
 | @kul-amr | 10 | https://github.com/go-openapi/spec/commits?author=kul-amr |
 | @keramix | 10 | https://github.com/go-openapi/spec/commits?author=keramix |

From b3b30bf333970ddbe254712d001be6f3ceecfab6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20BIDON?= <fredbi@yahoo.com>
Date: Wed, 17 Dec 2025 13:31:32 +0100
Subject: [PATCH 40/63] ci: remove redundant release workflow
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Frédéric BIDON <fredbi@yahoo.com>
---
 .github/workflows/release.yml | 18 ------------------
 1 file changed, 18 deletions(-)
 delete mode 100644 .github/workflows/release.yml

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
deleted file mode 100644
index cf4ed2d..0000000
--- a/.github/workflows/release.yml
+++ /dev/null
@@ -1,18 +0,0 @@
-name: Release
-
-on:
-  push:
-    tags:
-      - v[0-9]+*
-
-permissions:
-  contents: read
-
-jobs:
-  release:
-    permissions:
-      contents: write
-    uses: go-openapi/ci-workflows/.github/workflows/release.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # v0.1.1
-    with:
-      tag: ${{ github.ref_name }}
-    secrets: inherit

From 1beb4f37090b5c8289ae7b8d867110d78de3d35c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20BIDON?= <fredbi@yahoo.com>
Date: Wed, 17 Dec 2025 13:42:20 +0100
Subject: [PATCH 41/63] doc: fixed wrong links in docs
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Frédéric BIDON <fredbi@yahoo.com>
---
 doc.go              |  7 +++++++
 docs/MAINTAINERS.md | 12 +++++++-----
 2 files changed, 14 insertions(+), 5 deletions(-)
 create mode 100644 doc.go

diff --git a/doc.go b/doc.go
new file mode 100644
index 0000000..04eea35
--- /dev/null
+++ b/doc.go
@@ -0,0 +1,7 @@
+// SPDX-FileCopyrightText: Copyright 2015-2025 go-swagger maintainers
+// SPDX-License-Identifier: Apache-2.0
+
+// Package spec exposes an object model for OpenAPIv2 specifications (swagger).
+//
+// The exposed data structures know how to serialize to and deserialize from JSON.
+package spec
diff --git a/docs/MAINTAINERS.md b/docs/MAINTAINERS.md
index 0c73976..6c15d12 100644
--- a/docs/MAINTAINERS.md
+++ b/docs/MAINTAINERS.md
@@ -138,20 +138,22 @@ Standard documentation:
 * [`CODE_OF_CONDUCT.md`](../CODE_OF_CONDUCT.md)
 * [`SECURIY.md`](../SECURITY.md) policy: how to report vulnerabilities privately
 * [`LICENSE`](../LICENSE) terms
+<!--
 * [`NOTICE`](../NOTICE) on supplementary license terms (original authors, copied code etc)
+-->
 
 Reference documentation (released):
 
-* [godoc](https://pkg.go/dev/go-openapi/jsonpointer)
+* [godoc](https://pkg.go.dev/github.com/go-openapi/spec)
 
 ## TODOs & other ideas
 
 A few things remain ahead to ease a bit a maintainer's job:
 
-* reuse CI workflows (e.g. in `github.com/go-openapi/workflows`)
-* reusable actions with custom tools pinned  (e.g. in `github.com/go-openapi/gh-actions`)
+* [x] reuse CI workflows (e.g. in `github.com/go-openapi/workflows`)
+* [x] reusable actions with custom tools pinned  (e.g. in `github.com/go-openapi/gh-actions`)
 * open-source license checks
-* auto-merge for CONTRIBUTORS.md (requires a github app to produce tokens)
-* more automated code renovation / relinting work (possibly built with CLAUDE)
+* [x] auto-merge for CONTRIBUTORS.md (requires a github app to produce tokens)
+* [ ] more automated code renovation / relinting work (possibly built with CLAUDE) (ongoing)
 * organization-level documentation web site
 * ...

From 32a252c442702db3b1ce815c058b0ec1a44aef2f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 19 Dec 2025 09:03:03 +0000
Subject: [PATCH 42/63] build(deps): bump the development-dependencies group
 with 7 updates

Bumps the development-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [go-openapi/ci-workflows/.github/workflows/auto-merge.yml](https://github.com/go-openapi/ci-workflows) | `0.1.1` | `0.1.2` |
| [go-openapi/ci-workflows/.github/workflows/bump-release.yml](https://github.com/go-openapi/ci-workflows) | `0.1.1` | `0.1.2` |
| [go-openapi/ci-workflows/.github/workflows/codeql.yml](https://github.com/go-openapi/ci-workflows) | `0.1.1` | `0.1.2` |
| [go-openapi/ci-workflows/.github/workflows/contributors.yml](https://github.com/go-openapi/ci-workflows) | `0.1.1` | `0.1.2` |
| [go-openapi/ci-workflows/.github/workflows/go-test.yml](https://github.com/go-openapi/ci-workflows) | `0.1.1` | `0.1.2` |
| [go-openapi/ci-workflows/.github/workflows/scanner.yml](https://github.com/go-openapi/ci-workflows) | `0.1.1` | `0.1.2` |
| [go-openapi/ci-workflows/.github/workflows/release.yml](https://github.com/go-openapi/ci-workflows) | `0.1.1` | `0.1.2` |


Updates `go-openapi/ci-workflows/.github/workflows/auto-merge.yml` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/go-openapi/ci-workflows/releases)
- [Commits](https://github.com/go-openapi/ci-workflows/compare/d0b50195d14745b9a9a8a41cf3bb7ecd874af37a...9e70984764198f45640ca9f0752a51a8ca159b99)

Updates `go-openapi/ci-workflows/.github/workflows/bump-release.yml` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/go-openapi/ci-workflows/releases)
- [Commits](https://github.com/go-openapi/ci-workflows/compare/d0b50195d14745b9a9a8a41cf3bb7ecd874af37a...9e70984764198f45640ca9f0752a51a8ca159b99)

Updates `go-openapi/ci-workflows/.github/workflows/codeql.yml` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/go-openapi/ci-workflows/releases)
- [Commits](https://github.com/go-openapi/ci-workflows/compare/d0b50195d14745b9a9a8a41cf3bb7ecd874af37a...9e70984764198f45640ca9f0752a51a8ca159b99)

Updates `go-openapi/ci-workflows/.github/workflows/contributors.yml` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/go-openapi/ci-workflows/releases)
- [Commits](https://github.com/go-openapi/ci-workflows/compare/d0b50195d14745b9a9a8a41cf3bb7ecd874af37a...9e70984764198f45640ca9f0752a51a8ca159b99)

Updates `go-openapi/ci-workflows/.github/workflows/go-test.yml` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/go-openapi/ci-workflows/releases)
- [Commits](https://github.com/go-openapi/ci-workflows/compare/d0b50195d14745b9a9a8a41cf3bb7ecd874af37a...9e70984764198f45640ca9f0752a51a8ca159b99)

Updates `go-openapi/ci-workflows/.github/workflows/scanner.yml` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/go-openapi/ci-workflows/releases)
- [Commits](https://github.com/go-openapi/ci-workflows/compare/d0b50195d14745b9a9a8a41cf3bb7ecd874af37a...9e70984764198f45640ca9f0752a51a8ca159b99)

Updates `go-openapi/ci-workflows/.github/workflows/release.yml` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/go-openapi/ci-workflows/releases)
- [Commits](https://github.com/go-openapi/ci-workflows/compare/d0b50195d14745b9a9a8a41cf3bb7ecd874af37a...9e70984764198f45640ca9f0752a51a8ca159b99)

---
updated-dependencies:
- dependency-name: go-openapi/ci-workflows/.github/workflows/auto-merge.yml
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: go-openapi/ci-workflows/.github/workflows/bump-release.yml
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: go-openapi/ci-workflows/.github/workflows/codeql.yml
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: go-openapi/ci-workflows/.github/workflows/contributors.yml
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: go-openapi/ci-workflows/.github/workflows/go-test.yml
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: go-openapi/ci-workflows/.github/workflows/scanner.yml
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: go-openapi/ci-workflows/.github/workflows/release.yml
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/auto-merge.yml   | 2 +-
 .github/workflows/bump-release.yml | 2 +-
 .github/workflows/codeql.yml       | 2 +-
 .github/workflows/contributors.yml | 2 +-
 .github/workflows/go-test.yml      | 2 +-
 .github/workflows/scanner.yml      | 2 +-
 .github/workflows/tag-release.yml  | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index 81c88a6..3d5f681 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -11,5 +11,5 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
-    uses: go-openapi/ci-workflows/.github/workflows/auto-merge.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # v0.1.1
+    uses: go-openapi/ci-workflows/.github/workflows/auto-merge.yml@9e70984764198f45640ca9f0752a51a8ca159b99 # v0.1.2
     secrets: inherit
diff --git a/.github/workflows/bump-release.yml b/.github/workflows/bump-release.yml
index 9d8ba9c..7f5dfa7 100644
--- a/.github/workflows/bump-release.yml
+++ b/.github/workflows/bump-release.yml
@@ -36,7 +36,7 @@ jobs:
   bump-release:
     permissions:
       contents: write
-    uses: go-openapi/ci-workflows/.github/workflows/bump-release.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # v0.1.1
+    uses: go-openapi/ci-workflows/.github/workflows/bump-release.yml@9e70984764198f45640ca9f0752a51a8ca159b99 # v0.1.2
     with:
       bump-patch: ${{ inputs.bump-patch }}
       bump-minor: ${{ inputs.bump-minor }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 5e4edac..ba0aab9 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -18,5 +18,5 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: go-openapi/ci-workflows/.github/workflows/codeql.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # v0.1.1
+    uses: go-openapi/ci-workflows/.github/workflows/codeql.yml@9e70984764198f45640ca9f0752a51a8ca159b99 # v0.1.2
     secrets: inherit
diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml
index 422719d..375d651 100644
--- a/.github/workflows/contributors.yml
+++ b/.github/workflows/contributors.yml
@@ -14,5 +14,5 @@ jobs:
     permissions:
       pull-requests: write
       contents: write
-    uses: go-openapi/ci-workflows/.github/workflows/contributors.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # v0.1.1
+    uses: go-openapi/ci-workflows/.github/workflows/contributors.yml@9e70984764198f45640ca9f0752a51a8ca159b99 # v0.1.2
     secrets: inherit
diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index cd67b1b..f433dde 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -13,5 +13,5 @@ on:
 
 jobs:
   test:
-    uses: go-openapi/ci-workflows/.github/workflows/go-test.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # v0.1.1
+    uses: go-openapi/ci-workflows/.github/workflows/go-test.yml@9e70984764198f45640ca9f0752a51a8ca159b99 # v0.1.2
     secrets: inherit
diff --git a/.github/workflows/scanner.yml b/.github/workflows/scanner.yml
index 53a0471..7633b50 100644
--- a/.github/workflows/scanner.yml
+++ b/.github/workflows/scanner.yml
@@ -15,5 +15,5 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: go-openapi/ci-workflows/.github/workflows/scanner.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # V0.1.1
+    uses: go-openapi/ci-workflows/.github/workflows/scanner.yml@9e70984764198f45640ca9f0752a51a8ca159b99 # V0.1.2
     secrets: inherit
diff --git a/.github/workflows/tag-release.yml b/.github/workflows/tag-release.yml
index 537bd42..4ef8bdf 100644
--- a/.github/workflows/tag-release.yml
+++ b/.github/workflows/tag-release.yml
@@ -13,7 +13,7 @@ jobs:
     name: Create release
     permissions:
       contents: write
-    uses: go-openapi/ci-workflows/.github/workflows/release.yml@d0b50195d14745b9a9a8a41cf3bb7ecd874af37a # v0.1.1
+    uses: go-openapi/ci-workflows/.github/workflows/release.yml@9e70984764198f45640ca9f0752a51a8ca159b99 # v0.1.2
     with:
       tag: ${{ github.ref_name }}
     secrets: inherit

From 9aaf29be1f9a7d88fc3308db4381dd862f54eeeb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Fri, 19 Dec 2025 10:21:45 +0100
Subject: [PATCH 43/63] PMM-14577 Update go.

---
 go.mod | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index d64d4ec..b12107b 100644
--- a/go.mod
+++ b/go.mod
@@ -17,4 +17,4 @@ require (
 	github.com/go-openapi/swag/yamlutils v0.25.4 // indirect
 )
 
-go 1.24.0
+go 1.25.5

From ec798a916c7927b506c216cc6d44ddcc029d3ded Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Fri, 19 Dec 2025 11:59:27 +0100
Subject: [PATCH 44/63] PMM-14577 Lint.

---
 errors.go            | 10 ++++----
 helpers_spec_test.go |  5 ++++
 helpers_test.go      |  4 +++
 operation.go         |  4 +--
 operation_test.go    |  1 +
 ref.go               |  8 +++---
 response.go          |  4 +--
 schema.go            | 36 +++++++++++++-------------
 schema_loader.go     | 61 ++++++++++++++++++++++----------------------
 schema_test.go       | 18 ++++++++-----
 spec.go              |  4 +--
 structs_test.go      |  4 +++
 tag.go               |  2 +-
 13 files changed, 91 insertions(+), 70 deletions(-)

diff --git a/errors.go b/errors.go
index e39ab8b..4623bc8 100644
--- a/errors.go
+++ b/errors.go
@@ -7,19 +7,19 @@ import "errors"
 
 // Error codes
 var (
-	// ErrUnknownTypeForReference indicates that a resolved reference was found in an unsupported container type
+	// ErrUnknownTypeForReference indicates that a resolved reference was found in an unsupported container type.
 	ErrUnknownTypeForReference = errors.New("unknown type for the resolved reference")
 
-	// ErrResolveRefNeedsAPointer indicates that a $ref target must be a valid JSON pointer
+	// ErrResolveRefNeedsAPointer indicates that a $ref target must be a valid JSON pointer.
 	ErrResolveRefNeedsAPointer = errors.New("resolve ref: target needs to be a pointer")
 
 	// ErrDerefUnsupportedType indicates that a resolved reference was found in an unsupported container type.
-	// At the moment, $ref are supported only inside: schemas, parameters, responses, path items
+	// At the moment, $ref are supported only inside: schemas, parameters, responses, path items.
 	ErrDerefUnsupportedType = errors.New("deref: unsupported type")
 
-	// ErrExpandUnsupportedType indicates that $ref expansion is attempted on some invalid type
+	// ErrExpandUnsupportedType indicates that $ref expansion is attempted on some invalid type.
 	ErrExpandUnsupportedType = errors.New("expand: unsupported type. Input should be of type *Parameter or *Response")
 
-	// ErrSpec is an error raised by the spec package
+	// ErrSpec is an error raised by the spec package.
 	ErrSpec = errors.New("spec error")
 )
diff --git a/helpers_spec_test.go b/helpers_spec_test.go
index a2c542e..f55ab22 100644
--- a/helpers_spec_test.go
+++ b/helpers_spec_test.go
@@ -75,6 +75,7 @@ func assertRefInJSONRegexp(t testing.TB, jazon, match string) {
 //
 // "exclude" is a regexp pattern to ignore certain $ref (e.g. some specs may embed $ref that are not processed, such as extensions).
 func assertRefExpand(t *testing.T, jazon, _ string, root any, opts ...*spec.ExpandOptions) {
+	t.Helper()
 	if len(opts) > 0 {
 		assertRefWithFunc(t, "expand-with-base", jazon, "", func(t *testing.T, match string) {
 			ref := spec.RefSchema(match)
@@ -91,6 +92,7 @@ func assertRefExpand(t *testing.T, jazon, _ string, root any, opts ...*spec.Expa
 }
 
 func assertRefResolve(t *testing.T, jazon, exclude string, root any, opts ...*spec.ExpandOptions) {
+	t.Helper()
 	assertRefWithFunc(t, "resolve", jazon, exclude, func(t *testing.T, match string) {
 		ref := spec.MustCreateRef(match)
 		var (
@@ -113,6 +115,7 @@ func assertRefResolve(t *testing.T, jazon, exclude string, root any, opts ...*sp
 //
 // "exclude" is a regexp pattern to ignore certain $ref (e.g. some specs may embed $ref that are not processed, such as extensions).
 func assertRefWithFunc(t *testing.T, name, jazon, exclude string, asserter func(*testing.T, string)) {
+	t.Helper()
 	filterRex := regexp.MustCompile(exclude)
 	m := rex.FindAllStringSubmatch(jazon, -1)
 	require.NotNil(t, m)
@@ -140,6 +143,7 @@ func assertRefWithFunc(t *testing.T, name, jazon, exclude string, asserter func(
 }
 
 func asJSON(t testing.TB, sp any) string {
+	t.Helper()
 	bbb, err := json.MarshalIndent(sp, "", " ")
 	require.NoError(t, err)
 
@@ -148,6 +152,7 @@ func asJSON(t testing.TB, sp any) string {
 
 // assertNoRef ensures that no $ref is remaining in json doc
 func assertNoRef(t testing.TB, jazon string) {
+	t.Helper()
 	m := rex.FindAllStringSubmatch(jazon, -1)
 	require.Nil(t, m)
 }
diff --git a/helpers_test.go b/helpers_test.go
index 6eab8ea..86fb7c6 100644
--- a/helpers_test.go
+++ b/helpers_test.go
@@ -109,6 +109,7 @@ func assertNoRef(t testing.TB, jazon string) {
 //
 // "exclude" is a regexp pattern to ignore certain $ref (e.g. some specs may embed $ref that are not processed, such as extensions).
 func assertRefExpand(t *testing.T, jazon, _ string, root any, opts ...*ExpandOptions) {
+	t.Helper()
 	assertRefWithFunc(t, jazon, "", func(t *testing.T, match string) {
 		ref := RefSchema(match)
 		if len(opts) > 0 {
@@ -124,6 +125,7 @@ func assertRefExpand(t *testing.T, jazon, _ string, root any, opts ...*ExpandOpt
 //
 // "exclude" is a regexp pattern to ignore certain $ref (e.g. some specs may embed $ref that are not processed, such as extensions).
 func assertRefResolve(t *testing.T, jazon, exclude string, root any, opts ...*ExpandOptions) {
+	t.Helper()
 	assertRefWithFunc(t, jazon, exclude, func(t *testing.T, match string) {
 		ref := MustCreateRef(match)
 		var (
@@ -146,6 +148,7 @@ func assertRefResolve(t *testing.T, jazon, exclude string, root any, opts ...*Ex
 //
 // "exclude" is a regexp pattern to ignore certain $ref (e.g. some specs may embed $ref that are not processed, such as extensions).
 func assertRefWithFunc(t *testing.T, jazon, exclude string, asserter func(t *testing.T, match string)) {
+	t.Helper()
 	filterRex := regexp.MustCompile(exclude)
 	m := rex.FindAllStringSubmatch(jazon, -1)
 	require.NotNil(t, m)
@@ -169,6 +172,7 @@ func assertRefWithFunc(t *testing.T, jazon, exclude string, asserter func(t *tes
 }
 
 func asJSON(t testing.TB, sp any) string {
+	t.Helper()
 	bbb, err := json.MarshalIndent(sp, "", " ")
 	require.NoError(t, err)
 
diff --git a/operation.go b/operation.go
index 29d9c4f..2b7148d 100644
--- a/operation.go
+++ b/operation.go
@@ -38,10 +38,10 @@ type OperationProps struct {
 	Responses    *Responses             `json:"responses,omitempty"`
 }
 
-// MarshalJSON takes care of serializing operation properties to JSON
+// MarshalJSON takes care of serializing operation properties to JSON.
 //
 // We use a custom marhaller here to handle a special cases related to
-// the Security field. We need to preserve zero length slice
+// the Security field. We need to preserve zero length slice.
 // while omitting the field when the value is nil/unset.
 func (op OperationProps) MarshalJSON() ([]byte, error) {
 	type Alias OperationProps
diff --git a/operation_test.go b/operation_test.go
index bd1d2b5..8e813e8 100644
--- a/operation_test.go
+++ b/operation_test.go
@@ -344,6 +344,7 @@ func doTestOperationGobEncoding(t *testing.T, fixture string) {
 }
 
 func doTestAnyGobEncoding(t *testing.T, src, dst any) {
+	t.Helper()
 	expectedJSON, _ := json.MarshalIndent(src, "", " ")
 
 	var b bytes.Buffer
diff --git a/ref.go b/ref.go
index 1d1c759..18a29d7 100644
--- a/ref.go
+++ b/ref.go
@@ -24,18 +24,18 @@ func (r Refable) MarshalJSON() ([]byte, error) {
 	return r.Ref.MarshalJSON()
 }
 
-// UnmarshalJSON unmarshals the ref from json
+// UnmarshalJSON unmarshals the ref from json.
 func (r *Refable) UnmarshalJSON(d []byte) error {
 	return json.Unmarshal(d, &r.Ref)
 }
 
-// Ref represents a json reference that is potentially resolved
+// Ref represents a json reference that is potentially resolved.
 type Ref struct {
 	jsonreference.Ref
 }
 
-// NewRef creates a new instance of a ref object
-// returns an error when the reference uri is an invalid uri
+// NewRef creates a new instance of a ref object.
+// Returns an error when the reference uri is an invalid uri.
 func NewRef(refURI string) (Ref, error) {
 	ref, err := jsonreference.New(refURI)
 	if err != nil {
diff --git a/response.go b/response.go
index e5a7e5c..c5ccf96 100644
--- a/response.go
+++ b/response.go
@@ -27,12 +27,12 @@ type Response struct {
 	VendorExtensible
 }
 
-// NewResponse creates a new response instance
+// NewResponse creates a new response instance.
 func NewResponse() *Response {
 	return new(Response)
 }
 
-// ResponseRef creates a response as a json reference
+// ResponseRef creates a response as a json reference.
 func ResponseRef(url string) *Response {
 	resp := NewResponse()
 	resp.Ref = MustCreateRef(url)
diff --git a/schema.go b/schema.go
index 6623728..7418e32 100644
--- a/schema.go
+++ b/schema.go
@@ -556,31 +556,31 @@ func (s Schema) Validations() SchemaValidations {
 // MarshalJSON marshal this to JSON
 func (s Schema) MarshalJSON() ([]byte, error) {
 	b1, err := json.Marshal(s.SchemaProps)
-	if err != nil {
-		return nil, fmt.Errorf("schema props %v: %w", err, ErrSpec)
-	}
+       if err != nil {
+	       return nil, fmt.Errorf("schema props: %w: %w", err, ErrSpec)
+       }
 	b2, err := json.Marshal(s.VendorExtensible)
-	if err != nil {
-		return nil, fmt.Errorf("vendor props %v: %w", err, ErrSpec)
-	}
+       if err != nil {
+	       return nil, fmt.Errorf("vendor props: %w: %w", err, ErrSpec)
+       }
 	b3, err := s.Ref.MarshalJSON()
-	if err != nil {
-		return nil, fmt.Errorf("ref prop %v: %w", err, ErrSpec)
-	}
+       if err != nil {
+	       return nil, fmt.Errorf("ref prop: %w: %w", err, ErrSpec)
+       }
 	b4, err := s.Schema.MarshalJSON()
-	if err != nil {
-		return nil, fmt.Errorf("schema prop %v: %w", err, ErrSpec)
-	}
+       if err != nil {
+	       return nil, fmt.Errorf("schema prop: %w: %w", err, ErrSpec)
+       }
 	b5, err := json.Marshal(s.SwaggerSchemaProps)
-	if err != nil {
-		return nil, fmt.Errorf("common validations %v: %w", err, ErrSpec)
-	}
+       if err != nil {
+	       return nil, fmt.Errorf("common validations: %w: %w", err, ErrSpec)
+       }
 	var b6 []byte
 	if s.ExtraProps != nil {
 		jj, err := json.Marshal(s.ExtraProps)
-		if err != nil {
-			return nil, fmt.Errorf("extra props %v: %w", err, ErrSpec)
-		}
+	       if err != nil {
+		       return nil, fmt.Errorf("extra props: %w: %w", err, ErrSpec)
+	       }
 		b6 = jj
 	}
 	return jsonutils.ConcatJSON(b1, b2, b3, b4, b5, b6), nil
diff --git a/schema_loader.go b/schema_loader.go
index 8d4a985..8f0b4c2 100644
--- a/schema_loader.go
+++ b/schema_loader.go
@@ -134,21 +134,21 @@ func (r *schemaLoader) resolveRef(ref *Ref, target any, basePath string) error {
 	// Resolve against the root if it isn't nil, and if ref is pointing at the root, or has a fragment only which means
 	// it is pointing somewhere in the root.
 	root := r.root
-	if (ref.IsRoot() || ref.HasFragmentOnly) && root == nil && basePath != "" {
-		if baseRef, erb := NewRef(basePath); erb == nil {
-			root, _, _, _ = r.load(baseRef.GetURL())
-		}
-	}
-
-	if (ref.IsRoot() || ref.HasFragmentOnly) && root != nil {
-		data = root
-	} else {
-		baseRef := normalizeRef(ref, basePath)
-		data, _, _, err = r.load(baseRef.GetURL())
-		if err != nil {
-			return err
-		}
-	}
+       if (ref.IsRoot() || ref.HasFragmentOnly) && root == nil && basePath != "" {
+	       if baseRef, erb := NewRef(basePath); erb == nil {
+		       root, _, _ = r.load(baseRef.GetURL())
+	       }
+       }
+
+       if (ref.IsRoot() || ref.HasFragmentOnly) && root != nil {
+	       data = root
+       } else {
+	       baseRef := normalizeRef(ref, basePath)
+	       data, _, err = r.load(baseRef.GetURL())
+	       if err != nil {
+		       return err
+	       }
+       }
 
 	res = data
 	if ref.String() != "" {
@@ -160,7 +160,7 @@ func (r *schemaLoader) resolveRef(ref *Ref, target any, basePath string) error {
 	return jsonutils.FromDynamicJSON(res, target)
 }
 
-func (r *schemaLoader) load(refURL *url.URL) (any, url.URL, bool, error) {
+func (r *schemaLoader) load(refURL *url.URL) (any, bool, error) {
 	debugLog("loading schema from url: %s", refURL)
 	toFetch := *refURL
 	toFetch.Fragment = ""
@@ -170,23 +170,24 @@ func (r *schemaLoader) load(refURL *url.URL) (any, url.URL, bool, error) {
 	normalized := normalizeBase(pth)
 	debugLog("loading doc from: %s", normalized)
 
-	data, fromCache := r.cache.Get(normalized)
-	if fromCache {
-		return data, toFetch, fromCache, nil
-	}
 
-	b, err := r.context.loadDoc(normalized)
-	if err != nil {
-		return nil, url.URL{}, false, err
-	}
+       data, fromCache := r.cache.Get(normalized)
+       if fromCache {
+	       return data, fromCache, nil
+       }
 
-	var doc any
-	if err := json.Unmarshal(b, &doc); err != nil {
-		return nil, url.URL{}, false, err
-	}
-	r.cache.Set(normalized, doc)
+       b, err := r.context.loadDoc(normalized)
+       if err != nil {
+	       return nil, false, err
+       }
+
+       var doc any
+       if err := json.Unmarshal(b, &doc); err != nil {
+	       return nil, false, err
+       }
+       r.cache.Set(normalized, doc)
 
-	return doc, toFetch, fromCache, nil
+       return doc, fromCache, nil
 }
 
 // isCircular detects cycles in sequences of $ref.
diff --git a/schema_test.go b/schema_test.go
index 1009fbe..fdb5c96 100644
--- a/schema_test.go
+++ b/schema_test.go
@@ -182,12 +182,18 @@ func TestSchema(t *testing.T) {
 	assert.Equal(t, schema.AdditionalProperties, actual2.AdditionalProperties)
 	assert.Equal(t, schema.Extensions, actual2.Extensions)
 
-	examples := actual2.Example.([]any)
-	expEx := schema.Example.([]any)
-	ex1 := examples[0].(map[string]any)
-	ex2 := examples[1].(map[string]any)
-	exp1 := expEx[0].(map[string]any)
-	exp2 := expEx[1].(map[string]any)
+	examples, ok := actual2.Example.([]any)
+	assert.True(t, ok, "actual2.Example is not of type []any")
+	expEx, ok := schema.Example.([]any)
+	assert.True(t, ok, "schema.Example is not of type []any")
+	ex1, ok := examples[0].(map[string]any)
+	assert.True(t, ok, "examples[0] is not of type map[string]any")
+	ex2, ok := examples[1].(map[string]any)
+	assert.True(t, ok, "examples[1] is not of type map[string]any")
+	exp1, ok := expEx[0].(map[string]any)
+	assert.True(t, ok, "expEx[0] is not of type map[string]any")
+	exp2, ok := expEx[1].(map[string]any)
+	assert.True(t, ok, "expEx[1] is not of type map[string]any")
 
 	assert.EqualValues(t, exp1["id"], ex1["id"])
 	assert.Equal(t, exp1["name"], ex1["name"])
diff --git a/spec.go b/spec.go
index 0d0aaab..54ffcbe 100644
--- a/spec.go
+++ b/spec.go
@@ -13,9 +13,9 @@ import (
 //go:generate perl -pi -e s,Json,JSON,g bindata.go
 
 const (
-	// SwaggerSchemaURL the url for the swagger 2.0 schema to validate specs
+	// SwaggerSchemaURL the url for the swagger 2.0 schema to validate specs.
 	SwaggerSchemaURL = "http://swagger.io/v2/schema.json#"
-	// JSONSchemaURL the url for the json schema
+	// JSONSchemaURL the url for the json schema.
 	JSONSchemaURL = "http://json-schema.org/draft-04/schema#"
 )
 
diff --git a/structs_test.go b/structs_test.go
index 684c442..423b0be 100644
--- a/structs_test.go
+++ b/structs_test.go
@@ -13,6 +13,7 @@ import (
 )
 
 func assertSerializeJSON(t testing.TB, actual any, expected string) bool {
+	t.Helper()
 	ser, err := json.Marshal(actual)
 	if err != nil {
 		return assert.Failf(t, "unable to marshal to json", "got: %v: %#v", err, actual)
@@ -22,6 +23,7 @@ func assertSerializeJSON(t testing.TB, actual any, expected string) bool {
 }
 
 func assertSerializeYAML(t testing.TB, actual any, expected string) bool {
+	t.Helper()
 	ser, err := yaml.Marshal(actual)
 	if err != nil {
 		return assert.Failf(t, "unable to marshal to yaml", "got: %v: %#v", err, actual)
@@ -46,6 +48,7 @@ func isPointed(expected any) (pointed bool) {
 }
 
 func assertParsesJSON(t testing.TB, actual string, expected any) bool {
+	t.Helper()
 	parsed := reflect.New(derefTypeOf(expected))
 	err := json.Unmarshal([]byte(actual), parsed.Interface())
 	if err != nil {
@@ -59,6 +62,7 @@ func assertParsesJSON(t testing.TB, actual string, expected any) bool {
 }
 
 func assertParsesYAML(t testing.TB, actual string, expected any) bool {
+	t.Helper()
 	parsed := reflect.New(derefTypeOf(expected))
 	err := yaml.Unmarshal([]byte(actual), parsed.Interface())
 	if err != nil {
diff --git a/tag.go b/tag.go
index ae98fd9..c4578c1 100644
--- a/tag.go
+++ b/tag.go
@@ -27,7 +27,7 @@ type Tag struct {
 	TagProps
 }
 
-// NewTag creates a new tag
+// NewTag creates a new tag.
 func NewTag(name, description string, externalDocs *ExternalDocumentation) Tag {
 	return Tag{TagProps: TagProps{Description: description, Name: name, ExternalDocs: externalDocs}}
 }

From e6e6be2943069f8abba377f77bf1db95348a8151 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Fri, 19 Dec 2025 12:03:10 +0100
Subject: [PATCH 45/63] PMM-14577 Format, lint.

---
 auth_test.go          |  2 -
 debug.go              |  6 +--
 debug_test.go         |  4 +-
 expander_test.go      |  1 -
 external_docs_test.go |  2 +-
 header_test.go        |  1 +
 helpers_spec_test.go  |  6 +--
 helpers_test.go       |  6 +--
 info_test.go          |  9 +++--
 license_test.go       |  5 ++-
 operation.go          |  2 +-
 parameter.go          | 16 +++++---
 parameters_test.go    |  1 -
 paths_test.go         |  1 -
 properties_test.go    |  3 +-
 schema.go             | 42 +++++++++++----------
 schema_loader.go      | 65 ++++++++++++++++----------------
 schema_test.go        |  1 -
 spec.go               |  3 +-
 structs_test.go       | 88 ++++++++++++++++++++++---------------------
 swagger.go            |  6 ++-
 validations_test.go   |  1 -
 22 files changed, 137 insertions(+), 134 deletions(-)

diff --git a/auth_test.go b/auth_test.go
index df719f2..4f25a34 100644
--- a/auth_test.go
+++ b/auth_test.go
@@ -65,7 +65,6 @@ func TestSerialization_AuthSerialization(t *testing.T) {
 }
 
 func TestSerialization_AuthDeserialization(t *testing.T) {
-
 	assertParsesJSON(t, `{"type":"basic"}`, BasicAuth())
 
 	assertParsesJSON(
@@ -120,5 +119,4 @@ func TestSerialization_AuthDeserialization(t *testing.T) {
 		`{"authorizationUrl":"http://foo.com/authorization","flow":"accessCode","scopes":{"email":"read your email"},`+
 			`"tokenUrl":"http://foo.com/token","type":"oauth2"}`,
 		auth4)
-
 }
diff --git a/debug.go b/debug.go
index f4316c2..cdad419 100644
--- a/debug.go
+++ b/debug.go
@@ -16,10 +16,8 @@ import (
 // It enables a more verbose logging of this package.
 var Debug = os.Getenv("SWAGGER_DEBUG") != ""
 
-var (
-	// specLogger is a debug logger for this package
-	specLogger *log.Logger
-)
+// specLogger is a debug logger for this package
+var specLogger *log.Logger
 
 func init() {
 	debugOptions()
diff --git a/debug_test.go b/debug_test.go
index 0a8ba08..ef3e4f3 100644
--- a/debug_test.go
+++ b/debug_test.go
@@ -11,9 +11,7 @@ import (
 	"github.com/go-openapi/testify/v2/assert"
 )
 
-var (
-	logMutex = &sync.Mutex{}
-)
+var logMutex = &sync.Mutex{}
 
 func TestDebug(t *testing.T) {
 	// usetesting linter disabled until https://github.com/golang/go/issues/71544 is fixed for windows
diff --git a/expander_test.go b/expander_test.go
index 8804c03..d0a8ef8 100644
--- a/expander_test.go
+++ b/expander_test.go
@@ -151,7 +151,6 @@ func TestExpand_EmptySpec(t *testing.T) {
 }
 
 func TestExpand_Spec(t *testing.T) {
-
 	// expansion of a rich spec
 	specPath := filepath.Join("fixtures", "expansion", "all-the-things.json")
 	specDoc, err := jsonDoc(specPath)
diff --git a/external_docs_test.go b/external_docs_test.go
index 54b1e10..8f5d7cd 100644
--- a/external_docs_test.go
+++ b/external_docs_test.go
@@ -8,7 +8,7 @@ import (
 )
 
 func TestIntegrationExternalDocs(t *testing.T) {
-	var extDocs = ExternalDocumentation{Description: "the name", URL: "the url"}
+	extDocs := ExternalDocumentation{Description: "the name", URL: "the url"}
 	const extDocsYAML = "description: the name\nurl: the url\n"
 	const extDocsJSON = `{"description":"the name","url":"the url"}`
 	assertSerializeJSON(t, extDocs, extDocsJSON)
diff --git a/header_test.go b/header_test.go
index e4a27f7..6d642ee 100644
--- a/header_test.go
+++ b/header_test.go
@@ -17,6 +17,7 @@ const epsilon = 1e-9
 func float64Ptr(f float64) *float64 {
 	return &f
 }
+
 func int64Ptr(f int64) *int64 {
 	return &f
 }
diff --git a/helpers_spec_test.go b/helpers_spec_test.go
index f55ab22..1bfa45e 100644
--- a/helpers_spec_test.go
+++ b/helpers_spec_test.go
@@ -142,10 +142,10 @@ func assertRefWithFunc(t *testing.T, name, jazon, exclude string, asserter func(
 	}
 }
 
-func asJSON(t testing.TB, sp any) string {
-	t.Helper()
+func asJSON(tb testing.TB, sp any) string {
+	tb.Helper()
 	bbb, err := json.MarshalIndent(sp, "", " ")
-	require.NoError(t, err)
+	require.NoError(tb, err)
 
 	return string(bbb)
 }
diff --git a/helpers_test.go b/helpers_test.go
index 86fb7c6..4226c1b 100644
--- a/helpers_test.go
+++ b/helpers_test.go
@@ -171,10 +171,10 @@ func assertRefWithFunc(t *testing.T, jazon, exclude string, asserter func(t *tes
 	}
 }
 
-func asJSON(t testing.TB, sp any) string {
-	t.Helper()
+func asJSON(tb testing.TB, sp any) string {
+	tb.Helper()
 	bbb, err := json.MarshalIndent(sp, "", " ")
-	require.NoError(t, err)
+	require.NoError(tb, err)
 
 	return string(bbb)
 }
diff --git a/info_test.go b/info_test.go
index 6185d64..05b7680 100644
--- a/info_test.go
+++ b/info_test.go
@@ -36,10 +36,11 @@ var testInfo = Info{
 			"the swagger-2.0 specification",
 		TermsOfService: "http://helloreverb.com/terms/",
 		Contact:        &ContactInfo{ContactInfoProps: ContactInfoProps{Name: "wordnik api team", URL: "http://developer.wordnik.com"}},
-		License: &License{LicenseProps: LicenseProps{
-			Name: "Creative Commons 4.0 International",
-			URL:  "http://creativecommons.org/licenses/by/4.0/",
-		},
+		License: &License{
+			LicenseProps: LicenseProps{
+				Name: "Creative Commons 4.0 International",
+				URL:  "http://creativecommons.org/licenses/by/4.0/",
+			},
 		},
 	},
 	VendorExtensible: VendorExtensible{Extensions: map[string]any{"x-framework": "go-swagger"}},
diff --git a/license_test.go b/license_test.go
index 1a197cb..cdc3bce 100644
--- a/license_test.go
+++ b/license_test.go
@@ -18,9 +18,10 @@ func TestIntegrationLicense(t *testing.T) {
 	"x-license": "custom term"
 }`
 
-	var testLicense = License{
+	testLicense := License{
 		LicenseProps:     LicenseProps{Name: "the name", URL: "the url"},
-		VendorExtensible: VendorExtensible{Extensions: map[string]any{"x-license": "custom term"}}}
+		VendorExtensible: VendorExtensible{Extensions: map[string]any{"x-license": "custom term"}},
+	}
 
 	// const licenseYAML = "name: the name\nurl: the url\n"
 
diff --git a/operation.go b/operation.go
index 2b7148d..974f68a 100644
--- a/operation.go
+++ b/operation.go
@@ -176,7 +176,7 @@ func (o *Operation) Deprecate() *Operation {
 	return o
 }
 
-// Undeprecate marks the operation as not deprecated
+// Undeprecate marks the operation as not deprecated.
 func (o *Operation) Undeprecate() *Operation {
 	o.Deprecated = false
 	return o
diff --git a/parameter.go b/parameter.go
index b94b768..e0f2cc9 100644
--- a/parameter.go
+++ b/parameter.go
@@ -38,15 +38,21 @@ func FormDataParam(name string) *Parameter {
 
 // FileParam creates a body parameter
 func FileParam(name string) *Parameter {
-	return &Parameter{ParamProps: ParamProps{Name: name, In: "formData"},
-		SimpleSchema: SimpleSchema{Type: "file"}}
+	return &Parameter{
+		ParamProps:   ParamProps{Name: name, In: "formData"},
+		SimpleSchema: SimpleSchema{Type: "file"},
+	}
 }
 
 // SimpleArrayParam creates a param for a simple array (string, int, date etc)
 func SimpleArrayParam(name, tpe, fmt string) *Parameter {
-	return &Parameter{ParamProps: ParamProps{Name: name},
-		SimpleSchema: SimpleSchema{Type: jsonArray, CollectionFormat: "csv",
-			Items: &Items{SimpleSchema: SimpleSchema{Type: tpe, Format: fmt}}}}
+	return &Parameter{
+		ParamProps: ParamProps{Name: name},
+		SimpleSchema: SimpleSchema{
+			Type: jsonArray, CollectionFormat: "csv",
+			Items: &Items{SimpleSchema: SimpleSchema{Type: tpe, Format: fmt}},
+		},
+	}
 }
 
 // ParamRef creates a parameter that's a json reference
diff --git a/parameters_test.go b/parameters_test.go
index 6f2f0f2..edb33d6 100644
--- a/parameters_test.go
+++ b/parameters_test.go
@@ -142,7 +142,6 @@ func TestParameterSerialization(t *testing.T) {
 	assertSerializeJSON(t,
 		BodyParam("", ArrayProperty(RefProperty("Cat"))),
 		`{"in":"body","schema":{"type":"array","items":{"$ref":"Cat"}}}`)
-
 }
 
 func TestParameterGobEncoding(t *testing.T) {
diff --git a/paths_test.go b/paths_test.go
index 79dce17..76868f9 100644
--- a/paths_test.go
+++ b/paths_test.go
@@ -28,5 +28,4 @@ func TestIntegrationPaths(t *testing.T) {
 	assert.Equal(t, actual, paths)
 
 	assertParsesJSON(t, pathsJSON, paths)
-
 }
diff --git a/properties_test.go b/properties_test.go
index 2874a0d..61ca76c 100644
--- a/properties_test.go
+++ b/properties_test.go
@@ -18,7 +18,7 @@ func TestPropertySerialization(t *testing.T) {
 		}},
 	}}
 
-	var propSerData = []struct {
+	propSerData := []struct {
 		Schema *Schema
 		JSON   string
 	}{
@@ -43,5 +43,4 @@ func TestPropertySerialization(t *testing.T) {
 		assertSerializeJSON(t, v.Schema, v.JSON)
 		assertParsesJSON(t, v.JSON, v.Schema)
 	}
-
 }
diff --git a/schema.go b/schema.go
index 7418e32..e294153 100644
--- a/schema.go
+++ b/schema.go
@@ -78,8 +78,10 @@ func DateTimeProperty() *Schema {
 
 // MapProperty creates a map property
 func MapProperty(property *Schema) *Schema {
-	return &Schema{SchemaProps: SchemaProps{Type: []string{"object"},
-		AdditionalProperties: &SchemaOrBool{Allows: true, Schema: property}}}
+	return &Schema{SchemaProps: SchemaProps{
+		Type:                 []string{"object"},
+		AdditionalProperties: &SchemaOrBool{Allows: true, Schema: property},
+	}}
 }
 
 // RefProperty creates a ref property
@@ -556,31 +558,31 @@ func (s Schema) Validations() SchemaValidations {
 // MarshalJSON marshal this to JSON
 func (s Schema) MarshalJSON() ([]byte, error) {
 	b1, err := json.Marshal(s.SchemaProps)
-       if err != nil {
-	       return nil, fmt.Errorf("schema props: %w: %w", err, ErrSpec)
-       }
+	if err != nil {
+		return nil, fmt.Errorf("schema props: %w: %w", err, ErrSpec)
+	}
 	b2, err := json.Marshal(s.VendorExtensible)
-       if err != nil {
-	       return nil, fmt.Errorf("vendor props: %w: %w", err, ErrSpec)
-       }
+	if err != nil {
+		return nil, fmt.Errorf("vendor props: %w: %w", err, ErrSpec)
+	}
 	b3, err := s.Ref.MarshalJSON()
-       if err != nil {
-	       return nil, fmt.Errorf("ref prop: %w: %w", err, ErrSpec)
-       }
+	if err != nil {
+		return nil, fmt.Errorf("ref prop: %w: %w", err, ErrSpec)
+	}
 	b4, err := s.Schema.MarshalJSON()
-       if err != nil {
-	       return nil, fmt.Errorf("schema prop: %w: %w", err, ErrSpec)
-       }
+	if err != nil {
+		return nil, fmt.Errorf("schema prop: %w: %w", err, ErrSpec)
+	}
 	b5, err := json.Marshal(s.SwaggerSchemaProps)
-       if err != nil {
-	       return nil, fmt.Errorf("common validations: %w: %w", err, ErrSpec)
-       }
+	if err != nil {
+		return nil, fmt.Errorf("common validations: %w: %w", err, ErrSpec)
+	}
 	var b6 []byte
 	if s.ExtraProps != nil {
 		jj, err := json.Marshal(s.ExtraProps)
-	       if err != nil {
-		       return nil, fmt.Errorf("extra props: %w: %w", err, ErrSpec)
-	       }
+		if err != nil {
+			return nil, fmt.Errorf("extra props: %w: %w", err, ErrSpec)
+		}
 		b6 = jj
 	}
 	return jsonutils.ConcatJSON(b1, b2, b3, b4, b5, b6), nil
diff --git a/schema_loader.go b/schema_loader.go
index 8f0b4c2..1d67380 100644
--- a/schema_loader.go
+++ b/schema_loader.go
@@ -76,7 +76,7 @@ type schemaLoader struct {
 //
 // If the schema the ref is referring to holds nested refs, Resolve doesn't resolve them.
 //
-// If basePath is an empty string, ref is resolved against the root schema stored in the schemaLoader struct
+// If basePath is an empty string, ref is resolved against the root schema stored in the schemaLoader struct.
 func (r *schemaLoader) Resolve(ref *Ref, target any, basePath string) error {
 	return r.resolveRef(ref, target, basePath)
 }
@@ -134,21 +134,21 @@ func (r *schemaLoader) resolveRef(ref *Ref, target any, basePath string) error {
 	// Resolve against the root if it isn't nil, and if ref is pointing at the root, or has a fragment only which means
 	// it is pointing somewhere in the root.
 	root := r.root
-       if (ref.IsRoot() || ref.HasFragmentOnly) && root == nil && basePath != "" {
-	       if baseRef, erb := NewRef(basePath); erb == nil {
-		       root, _, _ = r.load(baseRef.GetURL())
-	       }
-       }
-
-       if (ref.IsRoot() || ref.HasFragmentOnly) && root != nil {
-	       data = root
-       } else {
-	       baseRef := normalizeRef(ref, basePath)
-	       data, _, err = r.load(baseRef.GetURL())
-	       if err != nil {
-		       return err
-	       }
-       }
+	if (ref.IsRoot() || ref.HasFragmentOnly) && root == nil && basePath != "" {
+		if baseRef, erb := NewRef(basePath); erb == nil {
+			root, _, _ = r.load(baseRef.GetURL())
+		}
+	}
+
+	if (ref.IsRoot() || ref.HasFragmentOnly) && root != nil {
+		data = root
+	} else {
+		baseRef := normalizeRef(ref, basePath)
+		data, _, err = r.load(baseRef.GetURL())
+		if err != nil {
+			return err
+		}
+	}
 
 	res = data
 	if ref.String() != "" {
@@ -170,24 +170,23 @@ func (r *schemaLoader) load(refURL *url.URL) (any, bool, error) {
 	normalized := normalizeBase(pth)
 	debugLog("loading doc from: %s", normalized)
 
+	data, fromCache := r.cache.Get(normalized)
+	if fromCache {
+		return data, fromCache, nil
+	}
 
-       data, fromCache := r.cache.Get(normalized)
-       if fromCache {
-	       return data, fromCache, nil
-       }
-
-       b, err := r.context.loadDoc(normalized)
-       if err != nil {
-	       return nil, false, err
-       }
+	b, err := r.context.loadDoc(normalized)
+	if err != nil {
+		return nil, false, err
+	}
 
-       var doc any
-       if err := json.Unmarshal(b, &doc); err != nil {
-	       return nil, false, err
-       }
-       r.cache.Set(normalized, doc)
+	var doc any
+	if err := json.Unmarshal(b, &doc); err != nil {
+		return nil, false, err
+	}
+	r.cache.Set(normalized, doc)
 
-       return doc, fromCache, nil
+	return doc, fromCache, nil
 }
 
 // isCircular detects cycles in sequences of $ref.
@@ -294,8 +293,8 @@ func defaultSchemaLoader(
 	root any,
 	expandOptions *ExpandOptions,
 	cache ResolutionCache,
-	context *resolverContext) *schemaLoader {
-
+	context *resolverContext,
+) *schemaLoader {
 	if expandOptions == nil {
 		expandOptions = &ExpandOptions{}
 	}
diff --git a/schema_test.go b/schema_test.go
index fdb5c96..25264e9 100644
--- a/schema_test.go
+++ b/schema_test.go
@@ -139,7 +139,6 @@ var schemaJSON = `{
 `
 
 func TestSchema(t *testing.T) {
-
 	expected := map[string]any{}
 	_ = json.Unmarshal([]byte(schemaJSON), &expected)
 	b, err := json.Marshal(schema)
diff --git a/spec.go b/spec.go
index 54ffcbe..b58ce97 100644
--- a/spec.go
+++ b/spec.go
@@ -28,7 +28,7 @@ func MustLoadJSONSchemaDraft04() *Schema {
 	return d
 }
 
-// JSONSchemaDraft04 loads the json schema document for json schema draft04
+// JSONSchemaDraft04 loads the json schema document for json schema draft04.
 func JSONSchemaDraft04() (*Schema, error) {
 	b, err := jsonschemaDraft04JSONBytes()
 	if err != nil {
@@ -53,7 +53,6 @@ func MustLoadSwagger20Schema() *Schema {
 
 // Swagger20Schema loads the swagger 2.0 schema from the embedded assets
 func Swagger20Schema() (*Schema, error) {
-
 	b, err := v2SchemaJSONBytes()
 	if err != nil {
 		return nil, err
diff --git a/structs_test.go b/structs_test.go
index 423b0be..c9d106d 100644
--- a/structs_test.go
+++ b/structs_test.go
@@ -12,23 +12,23 @@ import (
 	yaml "go.yaml.in/yaml/v3"
 )
 
-func assertSerializeJSON(t testing.TB, actual any, expected string) bool {
-	t.Helper()
-	ser, err := json.Marshal(actual)
-	if err != nil {
-		return assert.Failf(t, "unable to marshal to json", "got: %v: %#v", err, actual)
-	}
+func assertSerializeJSON(tb testing.TB, actual any, expected string) bool {
+       tb.Helper()
+       ser, err := json.Marshal(actual)
+       if err != nil {
+	       return assert.Failf(tb, "unable to marshal to json", "got: %v: %#v", err, actual)
+       }
 
-	return assert.Equal(t, expected, string(ser))
+       return assert.Equal(tb, expected, string(ser))
 }
 
-func assertSerializeYAML(t testing.TB, actual any, expected string) bool {
-	t.Helper()
-	ser, err := yaml.Marshal(actual)
-	if err != nil {
-		return assert.Failf(t, "unable to marshal to yaml", "got: %v: %#v", err, actual)
-	}
-	return assert.Equal(t, expected, string(ser))
+func assertSerializeYAML(tb testing.TB, actual any, expected string) bool {
+       tb.Helper()
+       ser, err := yaml.Marshal(actual)
+       if err != nil {
+	       return assert.Failf(tb, "unable to marshal to yaml", "got: %v: %#v", err, actual)
+       }
+       return assert.Equal(tb, expected, string(ser))
 }
 
 func derefTypeOf(expected any) (tpe reflect.Type) {
@@ -47,32 +47,32 @@ func isPointed(expected any) (pointed bool) {
 	return
 }
 
-func assertParsesJSON(t testing.TB, actual string, expected any) bool {
-	t.Helper()
-	parsed := reflect.New(derefTypeOf(expected))
-	err := json.Unmarshal([]byte(actual), parsed.Interface())
-	if err != nil {
-		return assert.Failf(t, "unable to unmarshal from json", "got: %v: %s", err, actual)
-	}
-	act := parsed.Interface()
-	if !isPointed(expected) {
-		act = reflect.Indirect(parsed).Interface()
-	}
-	return assert.Equal(t, expected, act)
+func assertParsesJSON(tb testing.TB, actual string, expected any) bool {
+       tb.Helper()
+       parsed := reflect.New(derefTypeOf(expected))
+       err := json.Unmarshal([]byte(actual), parsed.Interface())
+       if err != nil {
+	       return assert.Failf(tb, "unable to unmarshal from json", "got: %v: %s", err, actual)
+       }
+       act := parsed.Interface()
+       if !isPointed(expected) {
+	       act = reflect.Indirect(parsed).Interface()
+       }
+       return assert.Equal(tb, expected, act)
 }
 
-func assertParsesYAML(t testing.TB, actual string, expected any) bool {
-	t.Helper()
-	parsed := reflect.New(derefTypeOf(expected))
-	err := yaml.Unmarshal([]byte(actual), parsed.Interface())
-	if err != nil {
-		return assert.Failf(t, "unable to unmarshal from yaml", "got: %v: %s", err, actual)
-	}
-	act := parsed.Interface()
-	if !isPointed(expected) {
-		act = reflect.Indirect(parsed).Interface()
-	}
-	return assert.Equal(t, expected, act)
+func assertParsesYAML(tb testing.TB, actual string, expected any) bool {
+       tb.Helper()
+       parsed := reflect.New(derefTypeOf(expected))
+       err := yaml.Unmarshal([]byte(actual), parsed.Interface())
+       if err != nil {
+	       return assert.Failf(tb, "unable to unmarshal from yaml", "got: %v: %s", err, actual)
+       }
+       act := parsed.Interface()
+       if !isPointed(expected) {
+	       act = reflect.Indirect(parsed).Interface()
+       }
+       return assert.Equal(tb, expected, act)
 }
 
 func TestSerialization_SerializeJSON(t *testing.T) {
@@ -81,13 +81,15 @@ func TestSerialization_SerializeJSON(t *testing.T) {
 	assertSerializeJSON(t, StringOrArray(nil), "null")
 	assertSerializeJSON(t, SchemaOrArray{
 		Schemas: []Schema{
-			{SchemaProps: SchemaProps{Type: []string{"string"}}}},
+			{SchemaProps: SchemaProps{Type: []string{"string"}}},
+		},
 	}, "[{\"type\":\"string\"}]")
 	assertSerializeJSON(t, SchemaOrArray{
 		Schemas: []Schema{
 			{SchemaProps: SchemaProps{Type: []string{"string"}}},
 			{SchemaProps: SchemaProps{Type: []string{"string"}}},
-		}}, "[{\"type\":\"string\"},{\"type\":\"string\"}]")
+		},
+	}, "[{\"type\":\"string\"},{\"type\":\"string\"}]")
 	assertSerializeJSON(t, SchemaOrArray{}, "null")
 }
 
@@ -100,8 +102,10 @@ func TestSerialization_DeserializeJSON(t *testing.T) {
 	assertParsesJSON(t, "null", StringOrArray(nil))
 
 	// Schema
-	assertParsesJSON(t, "{\"type\":\"string\"}", SchemaOrArray{Schema: &Schema{
-		SchemaProps: SchemaProps{Type: []string{"string"}}},
+	assertParsesJSON(t, "{\"type\":\"string\"}", SchemaOrArray{
+		Schema: &Schema{
+			SchemaProps: SchemaProps{Type: []string{"string"}},
+		},
 	})
 	assertParsesJSON(t, "[{\"type\":\"string\"},{\"type\":\"string\"}]", &SchemaOrArray{
 		Schemas: []Schema{
diff --git a/swagger.go b/swagger.go
index f7cd0f6..0628b3c 100644
--- a/swagger.go
+++ b/swagger.go
@@ -225,8 +225,10 @@ func (s SchemaOrBool) JSONLookup(token string) (any, error) {
 	return r, err
 }
 
-var jsTrue = []byte("true")
-var jsFalse = []byte("false")
+var (
+	jsTrue  = []byte("true")
+	jsFalse = []byte("false")
+)
 
 // MarshalJSON convert this object to JSON
 func (s SchemaOrBool) MarshalJSON() ([]byte, error) {
diff --git a/validations_test.go b/validations_test.go
index 64422f4..15b971f 100644
--- a/validations_test.go
+++ b/validations_test.go
@@ -36,7 +36,6 @@ func mkVal() SchemaValidations {
 }
 
 func TestValidations(t *testing.T) {
-
 	var cv CommonValidations
 	val := mkVal()
 	cv.SetValidations(val)

From 5904dd8eb5ebcc1cfd049427ff26d26c5840972f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Fri, 19 Dec 2025 12:57:14 +0100
Subject: [PATCH 46/63] PMM-14577 Lint.

---
 cache.go        |   4 +-
 items_test.go   | 105 ++++++++++++++++++++++++++++++++++++------------
 structs_test.go |  68 +++++++++++++++----------------
 3 files changed, 115 insertions(+), 62 deletions(-)

diff --git a/cache.go b/cache.go
index 10fba77..cd38dcb 100644
--- a/cache.go
+++ b/cache.go
@@ -10,8 +10,8 @@ import (
 
 // ResolutionCache a cache for resolving urls
 type ResolutionCache interface {
-	Get(string) (any, bool)
-	Set(string, any)
+	Get(key string) (any, bool)
+	Set(key string, value any)
 }
 
 type simpleCache struct {
diff --git a/items_test.go b/items_test.go
index c5c585c..7e3f089 100644
--- a/items_test.go
+++ b/items_test.go
@@ -12,32 +12,7 @@ import (
 	"github.com/go-openapi/testify/v2/require"
 )
 
-var testItems = Items{
-	Refable: Refable{Ref: MustCreateRef("Dog")},
-	CommonValidations: CommonValidations{
-		Maximum:          float64Ptr(100),
-		ExclusiveMaximum: true,
-		ExclusiveMinimum: true,
-		Minimum:          float64Ptr(5),
-		MaxLength:        int64Ptr(100),
-		MinLength:        int64Ptr(5),
-		Pattern:          "\\w{1,5}\\w+",
-		MaxItems:         int64Ptr(100),
-		MinItems:         int64Ptr(5),
-		UniqueItems:      true,
-		MultipleOf:       float64Ptr(5),
-		Enum:             []any{"hello", "world"},
-	},
-	SimpleSchema: SimpleSchema{
-		Type:   "string",
-		Format: "date",
-		Items: &Items{
-			Refable: Refable{Ref: MustCreateRef("Cat")},
-		},
-		CollectionFormat: "csv",
-		Default:          "8",
-	},
-}
+// testItems is now defined inside the test function to avoid global variable.
 
 const itemsJSON = `{
 	"items": {
@@ -63,6 +38,32 @@ const itemsJSON = `{
 }`
 
 func TestIntegrationItems(t *testing.T) {
+	testItems := Items{
+		Refable: Refable{Ref: MustCreateRef("Dog")},
+		CommonValidations: CommonValidations{
+			Maximum:          float64Ptr(100),
+			ExclusiveMaximum: true,
+			ExclusiveMinimum: true,
+			Minimum:          float64Ptr(5),
+			MaxLength:        int64Ptr(100),
+			MinLength:        int64Ptr(5),
+			Pattern:          "\\w{1,5}\\w+",
+			MaxItems:         int64Ptr(100),
+			MinItems:         int64Ptr(5),
+			UniqueItems:      true,
+			MultipleOf:       float64Ptr(5),
+			Enum:             []any{"hello", "world"},
+		},
+		SimpleSchema: SimpleSchema{
+			Type:   "string",
+			Format: "date",
+			Items: &Items{
+				Refable: Refable{Ref: MustCreateRef("Cat")},
+			},
+			CollectionFormat: "csv",
+			Default:          "8",
+		},
+	}
 	var actual Items
 	require.NoError(t, json.Unmarshal([]byte(itemsJSON), &actual))
 	assert.Equal(t, actual, testItems)
@@ -74,6 +75,32 @@ func TestTypeNameItems(t *testing.T) {
 	var nilItems Items
 	assert.Empty(t, nilItems.TypeName())
 
+	testItems := Items{
+		Refable: Refable{Ref: MustCreateRef("Dog")},
+		CommonValidations: CommonValidations{
+			Maximum:          float64Ptr(100),
+			ExclusiveMaximum: true,
+			ExclusiveMinimum: true,
+			Minimum:          float64Ptr(5),
+			MaxLength:        int64Ptr(100),
+			MinLength:        int64Ptr(5),
+			Pattern:          "\\w{1,5}\\w+",
+			MaxItems:         int64Ptr(100),
+			MinItems:         int64Ptr(5),
+			UniqueItems:      true,
+			MultipleOf:       float64Ptr(5),
+			Enum:             []any{"hello", "world"},
+		},
+		SimpleSchema: SimpleSchema{
+			Type:   "string",
+			Format: "date",
+			Items: &Items{
+				Refable: Refable{Ref: MustCreateRef("Cat")},
+			},
+			CollectionFormat: "csv",
+			Default:          "8",
+		},
+	}
 	assert.Equal(t, "date", testItems.TypeName())
 	assert.Empty(t, testItems.ItemsTypeName())
 
@@ -140,6 +167,32 @@ func TestItemsBuilder(t *testing.T) {
 }
 
 func TestJSONLookupItems(t *testing.T) {
+	testItems := Items{
+		Refable: Refable{Ref: MustCreateRef("Dog")},
+		CommonValidations: CommonValidations{
+			Maximum:          float64Ptr(100),
+			ExclusiveMaximum: true,
+			ExclusiveMinimum: true,
+			Minimum:          float64Ptr(5),
+			MaxLength:        int64Ptr(100),
+			MinLength:        int64Ptr(5),
+			Pattern:          "\\w{1,5}\\w+",
+			MaxItems:         int64Ptr(100),
+			MinItems:         int64Ptr(5),
+			UniqueItems:      true,
+			MultipleOf:       float64Ptr(5),
+			Enum:             []any{"hello", "world"},
+		},
+		SimpleSchema: SimpleSchema{
+			Type:   "string",
+			Format: "date",
+			Items: &Items{
+				Refable: Refable{Ref: MustCreateRef("Cat")},
+			},
+			CollectionFormat: "csv",
+			Default:          "8",
+		},
+	}
 	t.Run(`lookup should find "$ref"`, func(t *testing.T) {
 		res, err := testItems.JSONLookup("$ref")
 		require.NoError(t, err)
diff --git a/structs_test.go b/structs_test.go
index c9d106d..d0d9837 100644
--- a/structs_test.go
+++ b/structs_test.go
@@ -13,22 +13,22 @@ import (
 )
 
 func assertSerializeJSON(tb testing.TB, actual any, expected string) bool {
-       tb.Helper()
-       ser, err := json.Marshal(actual)
-       if err != nil {
-	       return assert.Failf(tb, "unable to marshal to json", "got: %v: %#v", err, actual)
-       }
+	tb.Helper()
+	ser, err := json.Marshal(actual)
+	if err != nil {
+		return assert.Failf(tb, "unable to marshal to json", "got: %v: %#v", err, actual)
+	}
 
-       return assert.Equal(tb, expected, string(ser))
+	return assert.Equal(tb, expected, string(ser))
 }
 
 func assertSerializeYAML(tb testing.TB, actual any, expected string) bool {
-       tb.Helper()
-       ser, err := yaml.Marshal(actual)
-       if err != nil {
-	       return assert.Failf(tb, "unable to marshal to yaml", "got: %v: %#v", err, actual)
-       }
-       return assert.Equal(tb, expected, string(ser))
+	tb.Helper()
+	ser, err := yaml.Marshal(actual)
+	if err != nil {
+		return assert.Failf(tb, "unable to marshal to yaml", "got: %v: %#v", err, actual)
+	}
+	return assert.Equal(tb, expected, string(ser))
 }
 
 func derefTypeOf(expected any) (tpe reflect.Type) {
@@ -48,31 +48,31 @@ func isPointed(expected any) (pointed bool) {
 }
 
 func assertParsesJSON(tb testing.TB, actual string, expected any) bool {
-       tb.Helper()
-       parsed := reflect.New(derefTypeOf(expected))
-       err := json.Unmarshal([]byte(actual), parsed.Interface())
-       if err != nil {
-	       return assert.Failf(tb, "unable to unmarshal from json", "got: %v: %s", err, actual)
-       }
-       act := parsed.Interface()
-       if !isPointed(expected) {
-	       act = reflect.Indirect(parsed).Interface()
-       }
-       return assert.Equal(tb, expected, act)
+	tb.Helper()
+	parsed := reflect.New(derefTypeOf(expected))
+	err := json.Unmarshal([]byte(actual), parsed.Interface())
+	if err != nil {
+		return assert.Failf(tb, "unable to unmarshal from json", "got: %v: %s", err, actual)
+	}
+	act := parsed.Interface()
+	if !isPointed(expected) {
+		act = reflect.Indirect(parsed).Interface()
+	}
+	return assert.Equal(tb, expected, act)
 }
 
 func assertParsesYAML(tb testing.TB, actual string, expected any) bool {
-       tb.Helper()
-       parsed := reflect.New(derefTypeOf(expected))
-       err := yaml.Unmarshal([]byte(actual), parsed.Interface())
-       if err != nil {
-	       return assert.Failf(tb, "unable to unmarshal from yaml", "got: %v: %s", err, actual)
-       }
-       act := parsed.Interface()
-       if !isPointed(expected) {
-	       act = reflect.Indirect(parsed).Interface()
-       }
-       return assert.Equal(tb, expected, act)
+	tb.Helper()
+	parsed := reflect.New(derefTypeOf(expected))
+	err := yaml.Unmarshal([]byte(actual), parsed.Interface())
+	if err != nil {
+		return assert.Failf(tb, "unable to unmarshal from yaml", "got: %v: %s", err, actual)
+	}
+	act := parsed.Interface()
+	if !isPointed(expected) {
+		act = reflect.Indirect(parsed).Interface()
+	}
+	return assert.Equal(tb, expected, act)
 }
 
 func TestSerialization_SerializeJSON(t *testing.T) {

From 7f333b5fc2a644680f0180d28bf942708d0948e1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Fri, 19 Dec 2025 13:44:10 +0100
Subject: [PATCH 47/63] PMM-14577 Lint.

---
 debug.go         | 4 ++--
 debug_test.go    | 2 +-
 info_test.go     | 2 +-
 schema_loader.go | 2 +-
 structs_test.go  | 4 ++--
 swagger.go       | 4 ++--
 6 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/debug.go b/debug.go
index cdad419..a08422d 100644
--- a/debug.go
+++ b/debug.go
@@ -16,8 +16,8 @@ import (
 // It enables a more verbose logging of this package.
 var Debug = os.Getenv("SWAGGER_DEBUG") != ""
 
-// specLogger is a debug logger for this package
-var specLogger *log.Logger
+// specLogger is a debug logger for this package.
+var specLogger *log.Logger //nolint:gochecknoglobals
 
 func init() {
 	debugOptions()
diff --git a/debug_test.go b/debug_test.go
index ef3e4f3..bc83691 100644
--- a/debug_test.go
+++ b/debug_test.go
@@ -11,7 +11,7 @@ import (
 	"github.com/go-openapi/testify/v2/assert"
 )
 
-var logMutex = &sync.Mutex{}
+var logMutex = &sync.Mutex{} //nolint:gochecknoglobals
 
 func TestDebug(t *testing.T) {
 	// usetesting linter disabled until https://github.com/golang/go/issues/71544 is fixed for windows
diff --git a/info_test.go b/info_test.go
index 05b7680..b401861 100644
--- a/info_test.go
+++ b/info_test.go
@@ -28,7 +28,7 @@ const infoJSON = `{
 	"x-framework": "go-swagger"
 }`
 
-var testInfo = Info{
+var testInfo = Info{ //nolint:gochecknoglobals
 	InfoProps: InfoProps{
 		Version: "1.0.9-abcd",
 		Title:   "Swagger Sample API",
diff --git a/schema_loader.go b/schema_loader.go
index 1d67380..29928a1 100644
--- a/schema_loader.go
+++ b/schema_loader.go
@@ -160,7 +160,7 @@ func (r *schemaLoader) resolveRef(ref *Ref, target any, basePath string) error {
 	return jsonutils.FromDynamicJSON(res, target)
 }
 
-func (r *schemaLoader) load(refURL *url.URL) (any, bool, error) {
+func (r *schemaLoader) load(refURL *url.URL) (any, bool, error) { //nolint:unparam
 	debugLog("loading schema from url: %s", refURL)
 	toFetch := *refURL
 	toFetch.Fragment = ""
diff --git a/structs_test.go b/structs_test.go
index d0d9837..f522952 100644
--- a/structs_test.go
+++ b/structs_test.go
@@ -12,7 +12,7 @@ import (
 	yaml "go.yaml.in/yaml/v3"
 )
 
-func assertSerializeJSON(tb testing.TB, actual any, expected string) bool {
+func assertSerializeJSON(tb testing.TB, actual any, expected string) bool { //nolint:unparam
 	tb.Helper()
 	ser, err := json.Marshal(actual)
 	if err != nil {
@@ -47,7 +47,7 @@ func isPointed(expected any) (pointed bool) {
 	return
 }
 
-func assertParsesJSON(tb testing.TB, actual string, expected any) bool {
+func assertParsesJSON(tb testing.TB, actual string, expected any) bool { //nolint:unparam
 	tb.Helper()
 	parsed := reflect.New(derefTypeOf(expected))
 	err := json.Unmarshal([]byte(actual), parsed.Interface())
diff --git a/swagger.go b/swagger.go
index 0628b3c..a0119dc 100644
--- a/swagger.go
+++ b/swagger.go
@@ -226,8 +226,8 @@ func (s SchemaOrBool) JSONLookup(token string) (any, error) {
 }
 
 var (
-	jsTrue  = []byte("true")
-	jsFalse = []byte("false")
+	jsTrue  = []byte("true") //nolint:gochecknoglobals
+	jsFalse = []byte("false") //nolint:gochecknoglobals
 )
 
 // MarshalJSON convert this object to JSON

From 5ba040ad40f6a8600a0a20151daa603df54bf9a5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Fri, 19 Dec 2025 18:54:37 +0100
Subject: [PATCH 48/63] PMM-14577 Revert permissions.

---
 .github/workflows/go-test.yml | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index f433dde..0aba74f 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -1,8 +1,5 @@
 name: go test
 
-permissions:
-  pull-requests: read
-  contents: read
 
 on:
   push:

From d614918aed5ac878ae33945331f4a01376169195 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Fri, 19 Dec 2025 19:20:16 +0100
Subject: [PATCH 49/63] PMM-14577 Test.

---
 .github/workflows/go-test.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 0aba74f..0b607ed 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -1,5 +1,8 @@
 name: go test
 
+permissions:
+  pull-requests: read
+  contents: read
 
 on:
   push:
@@ -12,3 +15,12 @@ jobs:
   test:
     uses: go-openapi/ci-workflows/.github/workflows/go-test.yml@9e70984764198f45640ca9f0752a51a8ca159b99 # v0.1.2
     secrets: inherit
+    steps:
+      - name: Generate JUnit report safely
+        run: |
+          if [ -d "./reports" ] && [ "$(find ./reports -name '*.json' | wc -l)" -gt 0 ]; then
+            find ./reports -name '*.json' -print0 | xargs -0 cat | go-junit-report > ./reports/junit_report.xml
+          else
+            mkdir -p ./reports
+            echo "<testsuites></testsuites>" > ./reports/junit_report.xml
+          fi

From f4a5455ab07fa809ae821b1cb36a3360a4efccad Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Sun, 21 Dec 2025 09:18:48 +0100
Subject: [PATCH 50/63] trigger


From 03e90eb406db00e3da1c1d4d250a71177d7c00c7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Mon, 22 Dec 2025 10:08:13 +0100
Subject: [PATCH 51/63] PMM-14577 Trigger.

---
 debug_test.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/debug_test.go b/debug_test.go
index bc83691..bdc24ba 100644
--- a/debug_test.go
+++ b/debug_test.go
@@ -11,7 +11,7 @@ import (
 	"github.com/go-openapi/testify/v2/assert"
 )
 
-var logMutex = &sync.Mutex{} //nolint:gochecknoglobals
+var logMutex = &sync.Mutex{}
 
 func TestDebug(t *testing.T) {
 	// usetesting linter disabled until https://github.com/golang/go/issues/71544 is fixed for windows
@@ -24,6 +24,7 @@ func TestDebug(t *testing.T) {
 		_ = os.Remove(tmpName)
 	}()
 
+	// trigger for CI
 	// mutex for -race
 	logMutex.Lock()
 	Debug = true

From ec4a84e5843de286be345fe929b7527c3cf8d1b2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Mon, 22 Dec 2025 10:10:23 +0100
Subject: [PATCH 52/63] Revert "PMM-14577 Trigger."

This reverts commit 03e90eb406db00e3da1c1d4d250a71177d7c00c7.
---
 debug_test.go | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/debug_test.go b/debug_test.go
index bdc24ba..bc83691 100644
--- a/debug_test.go
+++ b/debug_test.go
@@ -11,7 +11,7 @@ import (
 	"github.com/go-openapi/testify/v2/assert"
 )
 
-var logMutex = &sync.Mutex{}
+var logMutex = &sync.Mutex{} //nolint:gochecknoglobals
 
 func TestDebug(t *testing.T) {
 	// usetesting linter disabled until https://github.com/golang/go/issues/71544 is fixed for windows
@@ -24,7 +24,6 @@ func TestDebug(t *testing.T) {
 		_ = os.Remove(tmpName)
 	}()
 
-	// trigger for CI
 	// mutex for -race
 	logMutex.Lock()
 	Debug = true

From 2de7cf095d9ce36f8af3d287c2ba37316a82b318 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Mon, 22 Dec 2025 10:19:50 +0100
Subject: [PATCH 53/63] PMM-14577 Put back Percona workflows.

---
 .github/workflows/auto-merge.yml | 46 +++++++++++++++++++-----
 .github/workflows/go-test.yml    | 60 ++++++++++++++++++++++++--------
 2 files changed, 83 insertions(+), 23 deletions(-)

diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index 3d5f681..b4009db 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -1,15 +1,43 @@
 name: Dependabot auto-merge
+on: pull_request
 
 permissions:
-  contents: read
-
-on:
-  pull_request:
+  contents: write
+  pull-requests: write
 
 jobs:
   dependabot:
-    permissions:
-      contents: write
-      pull-requests: write
-    uses: go-openapi/ci-workflows/.github/workflows/auto-merge.yml@9e70984764198f45640ca9f0752a51a8ca159b99 # v0.1.2
-    secrets: inherit
+    runs-on: ubuntu-latest
+    if: github.actor == 'dependabot[bot]'
+    steps:
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v1
+
+      - name: Auto-approve all dependabot PRs
+        run: gh pr review --approve "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+
+      - name: Auto-merge dependabot PRs for development dependencies
+        if: contains(steps.metadata.outputs.dependency-group, 'development-dependencies')
+        run: gh pr merge --auto --rebase "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+
+      - name: Auto-merge dependabot PRs for go-openapi patches
+        if: contains(steps.metadata.outputs.dependency-group, 'go-openapi-dependencies') && (steps.metadata.outputs.update-type == 'version-update:semver-minor' || steps.metadata.outputs.update-type == 'version-update:semver-patch')
+        run: gh pr merge --auto --rebase "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+
+      - name: Auto-merge dependabot PRs for golang.org updates
+        if: contains(steps.metadata.outputs.dependency-group, 'golang.org-dependencies')
+        run: gh pr merge --auto --rebase "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+
diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 0b607ed..e1c413e 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -1,26 +1,58 @@
 name: go test
 
-permissions:
-  pull-requests: read
-  contents: read
-
 on:
   push:
+    tags:
+      - v*
     branches:
       - master
 
   pull_request:
 
 jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version: stable
+          check-latest: true
+          cache: true
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@v4
+        with:
+          version: latest
+          only-new-issues: true
+          skip-cache: true
+
   test:
-    uses: go-openapi/ci-workflows/.github/workflows/go-test.yml@9e70984764198f45640ca9f0752a51a8ca159b99 # v0.1.2
-    secrets: inherit
+    name: Unit tests
+    runs-on: ${{ matrix.os }}
+
+    strategy:
+      matrix:
+        os: [ ubuntu-latest, macos-latest, windows-latest ]
+        go_version: ['oldstable', 'stable' ]
+
     steps:
-      - name: Generate JUnit report safely
-        run: |
-          if [ -d "./reports" ] && [ "$(find ./reports -name '*.json' | wc -l)" -gt 0 ]; then
-            find ./reports -name '*.json' -print0 | xargs -0 cat | go-junit-report > ./reports/junit_report.xml
-          else
-            mkdir -p ./reports
-            echo "<testsuites></testsuites>" > ./reports/junit_report.xml
-          fi
+    - name: Run unit tests
+      uses: actions/setup-go@v5
+      with:
+        go-version: '${{ matrix.go_version }}'
+        check-latest: true
+        cache: true
+
+    - uses: actions/checkout@v4
+
+    - run: go test -v -race -coverprofile="coverage-${{ matrix.os }}.${{ matrix.go_version }}.out" -covermode=atomic -coverpkg=$(go list)/... ./...
+
+    - name: Upload coverage to codecov
+      uses: codecov/codecov-action@v4
+      with:
+        files: './coverage-${{ matrix.os }}.${{ matrix.go_version }}.out'
+        flags: '${{ matrix.go_version }}'
+        os: '${{ matrix.os }}'
+        fail_ci_if_error: false
+        verbose: true

From 1b78e723e0996c1b7ca1059abe1e2e0708d0964b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Mon, 22 Dec 2025 10:22:59 +0100
Subject: [PATCH 54/63] PMM-14577 Update workflows Go.

---
 .github/workflows/go-test.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index e1c413e..23fda19 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -17,11 +17,11 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
-          go-version: stable
+          go-version: '1.25.5'
           check-latest: true
           cache: true
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v4
+        uses: golangci/golangci-lint-action@v5
         with:
           version: latest
           only-new-issues: true

From 56e544ff4810a4f95ca6490de2945c15589a0635 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Mon, 22 Dec 2025 10:38:05 +0100
Subject: [PATCH 55/63] PMM-14577 Lint.

---
 .github/workflows/go-test.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 23fda19..129a6b2 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -21,9 +21,9 @@ jobs:
           check-latest: true
           cache: true
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v5
+        uses: golangci/golangci-lint-action@v5.3.0
         with:
-          version: latest
+          version: v1.59.1
           only-new-issues: true
           skip-cache: true
 

From 3f8774fe60402d59faf20f2de8deccd6cd53fd53 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Mon, 22 Dec 2025 10:41:53 +0100
Subject: [PATCH 56/63] PMM-14577 Remove unsupported lints.

---
 .golangci.yml | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/.golangci.yml b/.golangci.yml
index fdae591..1a41ba1 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -8,16 +8,13 @@ linters:
     - exhaustruct
     - nlreturn
     - nonamedreturns
-    - noinlineerr
     - paralleltest
-    - recvcheck
     - testpackage
     - tparallel
     - varnamelen
     - whitespace
     - wrapcheck
     - wsl
-    - wsl_v5
   settings:
     dupl:
       threshold: 200

From 8112227825a768d15cdd7256be82aa870801ea05 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Mon, 22 Dec 2025 10:50:54 +0100
Subject: [PATCH 57/63] PMM-14577 Lint.

---
 expander_test.go | 42 +++++++++++++++++++++---------------------
 normalizer.go    | 10 +++++-----
 schema_loader.go | 42 +++++++++++++++++++++---------------------
 spec_test.go     | 22 +++++++++++-----------
 4 files changed, 58 insertions(+), 58 deletions(-)

diff --git a/expander_test.go b/expander_test.go
index d0a8ef8..900b231 100644
--- a/expander_test.go
+++ b/expander_test.go
@@ -125,7 +125,7 @@ func TestExpand_ResponseSchema(t *testing.T) {
 	sch := spec.Paths.Paths["/item"].Get.Responses.StatusCodeResponses[200].Schema
 	require.NotNil(t, sch)
 
-	assert.Empty(t, sch.Ref.String())
+	assert.Empty(t, sch.Ref.String()) //nolint:typecheck
 	assert.Contains(t, sch.Type, "object")
 	assert.Len(t, sch.Properties, 2)
 }
@@ -449,7 +449,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	// verify unmarshaled structure
 	schema := spec.Definitions["car"]
 	oldBrand := schema.Properties["brand"]
-	require.NotEmpty(t, oldBrand.Items.Schema.Ref.String()) // this is a $ref
+	require.NotEmpty(t, oldBrand.Items.Schema.Ref.String()) // this is a $ref //nolint:typecheck
 	require.NotEqual(t, spec.Definitions["brand"], oldBrand)
 
 	_, err = expandSchema(schema, []string{"#/definitions/car"}, resolver, basePath)
@@ -457,19 +457,19 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 
 	// verify expanded schema for Car, in the document passed
 	newBrand := schema.Properties["brand"]
-	assert.Empty(t, newBrand.Items.Schema.Ref.String())
+	assert.Empty(t, newBrand.Items.Schema.Ref.String()) //nolint:typecheck
 	assert.Equal(t, spec.Definitions["brand"], *newBrand.Items.Schema)
 
 	// verify expanded schema for Truck, in the returned schema
 	schema = spec.Definitions["truck"]
-	require.NotEmpty(t, schema.Items.Schema.Ref.String())
+	require.NotEmpty(t, schema.Items.Schema.Ref.String()) //nolint:typecheck
 	s, err := expandSchema(schema, []string{"#/definitions/truck"}, resolver, basePath)
 	require.NoError(t, err)
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.Items.Schema.Ref.String()) // no more a $ref
-	assert.False(t, schema.Items.Schema.Ref.IsRoot()) // no more a $ref
+	assert.Empty(t, schema.Items.Schema.Ref.String()) // no more a $ref //nolint:typecheck
+	assert.False(t, schema.Items.Schema.Ref.IsRoot()) // no more a $ref //nolint:typecheck
 	assert.Equal(t, spec.Definitions["car"], *schema.Items.Schema)
 
 	sch := new(Schema)
@@ -483,7 +483,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.Items.Schema.Items.Schema.Ref.String())
+	assert.Empty(t, schema.Items.Schema.Items.Schema.Ref.String()) //nolint:typecheck
 	assert.Equal(t, *schema.Items.Schema.Items.Schema, spec.Definitions["brand"])
 
 	// verify expanded schema for Batch2, in the returned schema
@@ -493,8 +493,8 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.Items.Schemas[0].Items.Schema.Ref.String())
-	assert.Empty(t, schema.Items.Schemas[1].Items.Schema.Ref.String())
+	assert.Empty(t, schema.Items.Schemas[0].Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, schema.Items.Schemas[1].Items.Schema.Ref.String()) //nolint:typecheck
 	assert.Equal(t, *schema.Items.Schemas[0].Items.Schema, spec.Definitions["brand"])
 	assert.Equal(t, *schema.Items.Schemas[1].Items.Schema, spec.Definitions["tag"])
 
@@ -505,8 +505,8 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.AllOf[0].Items.Schema.Ref.String())
-	assert.Empty(t, schema.AllOf[1].Items.Schema.Ref.String())
+	assert.Empty(t, schema.AllOf[0].Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, schema.AllOf[1].Items.Schema.Ref.String()) //nolint:typecheck
 	assert.Equal(t, *schema.AllOf[0].Items.Schema, spec.Definitions["brand"])
 	assert.Equal(t, *schema.AllOf[1].Items.Schema, spec.Definitions["tag"])
 
@@ -517,8 +517,8 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.AnyOf[0].Items.Schema.Ref.String())
-	assert.Empty(t, schema.AnyOf[1].Items.Schema.Ref.String())
+	assert.Empty(t, schema.AnyOf[0].Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, schema.AnyOf[1].Items.Schema.Ref.String()) //nolint:typecheck
 	assert.Equal(t, *schema.AnyOf[0].Items.Schema, spec.Definitions["brand"])
 	assert.Equal(t, *schema.AnyOf[1].Items.Schema, spec.Definitions["tag"])
 
@@ -529,8 +529,8 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.OneOf[0].Items.Schema.Ref.String())
-	assert.Empty(t, schema.OneOf[1].Items.Schema.Ref.String())
+	assert.Empty(t, schema.OneOf[0].Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, schema.OneOf[1].Items.Schema.Ref.String()) //nolint:typecheck
 	assert.Equal(t, *schema.OneOf[0].Items.Schema, spec.Definitions["brand"])
 	assert.Equal(t, *schema.OneOf[1].Items.Schema, spec.Definitions["tag"])
 
@@ -541,7 +541,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.Not.Items.Schema.Ref.String())
+	assert.Empty(t, schema.Not.Items.Schema.Ref.String()) //nolint:typecheck
 	assert.Equal(t, *schema.Not.Items.Schema, spec.Definitions["tag"])
 
 	// verify expanded schema for WithAdditional, in the returned schema [expand additionalProperties]
@@ -551,7 +551,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.AdditionalProperties.Schema.Items.Schema.Ref.String())
+	assert.Empty(t, schema.AdditionalProperties.Schema.Items.Schema.Ref.String()) //nolint:typecheck
 	assert.Equal(t, *schema.AdditionalProperties.Schema.Items.Schema, spec.Definitions["tag"])
 
 	// verify expanded schema for WithAdditionalItems, in the returned schema [expand additionalItems]
@@ -561,7 +561,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.AdditionalItems.Schema.Items.Schema.Ref.String())
+	assert.Empty(t, schema.AdditionalItems.Schema.Items.Schema.Ref.String()) //nolint:typecheck
 	assert.Equal(t, *schema.AdditionalItems.Schema.Items.Schema, spec.Definitions["tag"])
 
 	// verify expanded schema for WithPattern, in the returned schema [expand PatternProperties]
@@ -572,7 +572,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 
 	schema = *s
 	prop := schema.PatternProperties["^x-ab"]
-	assert.Empty(t, prop.Items.Schema.Ref.String())
+	assert.Empty(t, prop.Items.Schema.Ref.String()) //nolint:typecheck
 	assert.Equal(t, *prop.Items.Schema, spec.Definitions["tag"])
 
 	// verify expanded schema for Deps, in the returned schema [expand dependencies]
@@ -583,7 +583,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 
 	schema = *s
 	prop2 := schema.Dependencies["something"]
-	assert.Empty(t, prop2.Schema.Items.Schema.Ref.String())
+	assert.Empty(t, prop2.Schema.Items.Schema.Ref.String()) //nolint:typecheck
 	assert.Equal(t, *prop2.Schema.Items.Schema, spec.Definitions["tag"])
 
 	// verify expanded schema for Defined, in the returned schema [expand nested definitions]
@@ -594,7 +594,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 
 	schema = *s
 	prop = schema.Definitions["something"]
-	assert.Empty(t, prop.Items.Schema.Ref.String())
+	assert.Empty(t, prop.Items.Schema.Ref.String()) //nolint:typecheck
 	assert.Equal(t, *prop.Items.Schema, spec.Definitions["tag"])
 }
 
diff --git a/normalizer.go b/normalizer.go
index e1d7c58..c8a04a4 100644
--- a/normalizer.go
+++ b/normalizer.go
@@ -43,7 +43,7 @@ func normalizeURI(refPath, base string) string {
 	}
 
 	r := MustCreateRef(refURL.String())
-	if r.IsCanonical() {
+	if r.IsCanonical() { //nolint:typecheck
 		return refURL.String()
 	}
 
@@ -74,9 +74,9 @@ func normalizeURI(refPath, base string) string {
 // in that case, the rebasing is performed // against the id only if this is an anchor for the initial root document.
 // All other intermediate "id"'s found along the way are ignored for the purpose of rebasing.
 func denormalizeRef(ref *Ref, originalRelativeBase, id string) Ref {
-	debugLog("denormalizeRef called:\n$ref: %q\noriginal: %s\nroot ID:%s", ref.String(), originalRelativeBase, id)
+	debugLog("denormalizeRef called:\n$ref: %q\noriginal: %s\nroot ID:%s", ref.String(), originalRelativeBase, id) //nolint:typecheck
 
-	if ref.String() == "" || ref.IsRoot() || ref.HasFragmentOnly {
+	if ref.String() == "" || ref.IsRoot() || ref.HasFragmentOnly { //nolint:typecheck
 		// short circuit: $ref to current doc
 		return *ref
 	}
@@ -101,7 +101,7 @@ func denormalizeRef(ref *Ref, originalRelativeBase, id string) Ref {
 func rebase(ref *Ref, v *url.URL, notEqual bool) (Ref, bool) {
 	var newBase url.URL
 
-	u := ref.GetURL()
+	u := ref.GetURL() //nolint:typecheck
 
 	if u.Scheme != v.Scheme || u.Host != v.Host {
 		return *ref, false
@@ -140,7 +140,7 @@ func rebase(ref *Ref, v *url.URL, notEqual bool) (Ref, bool) {
 
 // normalizeRef canonicalize a Ref, using a canonical relativeBase as its absolute anchor
 func normalizeRef(ref *Ref, relativeBase string) *Ref {
-	r := MustCreateRef(normalizeURI(ref.String(), relativeBase))
+	r := MustCreateRef(normalizeURI(ref.String(), relativeBase)) //nolint:typecheck
 	return &r
 }
 
diff --git a/schema_loader.go b/schema_loader.go
index 29928a1..1caf8df 100644
--- a/schema_loader.go
+++ b/schema_loader.go
@@ -82,18 +82,18 @@ func (r *schemaLoader) Resolve(ref *Ref, target any, basePath string) error {
 }
 
 func (r *schemaLoader) transitiveResolver(basePath string, ref Ref) *schemaLoader {
-	if ref.IsRoot() || ref.HasFragmentOnly {
+	if ref.IsRoot() || ref.HasFragmentOnly { //nolint:typecheck
 		return r
 	}
 
 	baseRef := MustCreateRef(basePath)
 	currentRef := normalizeRef(&ref, basePath)
-	if strings.HasPrefix(currentRef.String(), baseRef.String()) {
+	if strings.HasPrefix(currentRef.String(), baseRef.String()) { //nolint:typecheck
 		return r
 	}
 
 	// set a new root against which to resolve
-	rootURL := currentRef.GetURL()
+	rootURL := currentRef.GetURL() //nolint:typecheck
 	rootURL.Fragment = ""
 	root, _ := r.cache.Get(rootURL.String())
 
@@ -121,7 +121,7 @@ func (r *schemaLoader) resolveRef(ref *Ref, target any, basePath string) error {
 		return ErrResolveRefNeedsAPointer
 	}
 
-	if ref.GetURL() == nil {
+	if ref.GetURL() == nil { //nolint:typecheck
 		return nil
 	}
 
@@ -134,25 +134,25 @@ func (r *schemaLoader) resolveRef(ref *Ref, target any, basePath string) error {
 	// Resolve against the root if it isn't nil, and if ref is pointing at the root, or has a fragment only which means
 	// it is pointing somewhere in the root.
 	root := r.root
-	if (ref.IsRoot() || ref.HasFragmentOnly) && root == nil && basePath != "" {
+	if (ref.IsRoot() || ref.HasFragmentOnly) && root == nil && basePath != "" { //nolint:typecheck
 		if baseRef, erb := NewRef(basePath); erb == nil {
-			root, _, _ = r.load(baseRef.GetURL())
+			root, _, _, _ = r.load(baseRef.GetURL()) //nolint:typecheck
 		}
 	}
 
-	if (ref.IsRoot() || ref.HasFragmentOnly) && root != nil {
+	if (ref.IsRoot() || ref.HasFragmentOnly) && root != nil { //nolint:typecheck
 		data = root
 	} else {
 		baseRef := normalizeRef(ref, basePath)
-		data, _, err = r.load(baseRef.GetURL())
+		data, _, _, err = r.load(baseRef.GetURL()) //nolint:typecheck
 		if err != nil {
 			return err
 		}
 	}
 
 	res = data
-	if ref.String() != "" {
-		res, _, err = ref.GetPointer().Get(data)
+	if ref.String() != "" { //nolint:typecheck
+		res, _, err = ref.GetPointer().Get(data) //nolint:typecheck
 		if err != nil {
 			return err
 		}
@@ -160,7 +160,7 @@ func (r *schemaLoader) resolveRef(ref *Ref, target any, basePath string) error {
 	return jsonutils.FromDynamicJSON(res, target)
 }
 
-func (r *schemaLoader) load(refURL *url.URL) (any, bool, error) { //nolint:unparam
+func (r *schemaLoader) load(refURL *url.URL) (any, url.URL, bool, error) {
 	debugLog("loading schema from url: %s", refURL)
 	toFetch := *refURL
 	toFetch.Fragment = ""
@@ -172,28 +172,28 @@ func (r *schemaLoader) load(refURL *url.URL) (any, bool, error) { //nolint:unpar
 
 	data, fromCache := r.cache.Get(normalized)
 	if fromCache {
-		return data, fromCache, nil
+		return data, toFetch, fromCache, nil
 	}
 
 	b, err := r.context.loadDoc(normalized)
 	if err != nil {
-		return nil, false, err
+		return nil, url.URL{}, false, err
 	}
 
 	var doc any
 	if err := json.Unmarshal(b, &doc); err != nil {
-		return nil, false, err
+		return nil, url.URL{}, false, err
 	}
 	r.cache.Set(normalized, doc)
 
-	return doc, fromCache, nil
+	return doc, toFetch, fromCache, nil
 }
 
 // isCircular detects cycles in sequences of $ref.
 //
 // It relies on a private context (which needs not be locked).
 func (r *schemaLoader) isCircular(ref *Ref, basePath string, parentRefs ...string) (foundCycle bool) {
-	normalizedRef := normalizeURI(ref.String(), basePath)
+	normalizedRef := normalizeURI(ref.String(), basePath) //nolint:typecheck
 	if _, ok := r.context.circulars[normalizedRef]; ok {
 		// circular $ref has been already detected in another explored cycle
 		foundCycle = true
@@ -221,7 +221,7 @@ func (r *schemaLoader) deref(input any, parentRefs []string, basePath string) er
 		return fmt.Errorf("unsupported type: %T: %w", input, ErrDerefUnsupportedType)
 	}
 
-	curRef := ref.String()
+	curRef := ref.String() //nolint:typecheck
 	if curRef == "" {
 		return nil
 	}
@@ -237,12 +237,12 @@ func (r *schemaLoader) deref(input any, parentRefs []string, basePath string) er
 		return err
 	}
 
-	if ref.String() == "" || ref.String() == curRef {
+	if ref.String() == "" || ref.String() == curRef { //nolint:typecheck
 		// done with rereferencing
 		return nil
 	}
 
-	parentRefs = append(parentRefs, normalizedRef.String())
+	parentRefs = append(parentRefs, normalizedRef.String()) //nolint:typecheck
 	return r.deref(input, parentRefs, normalizedBasePath)
 }
 
@@ -293,8 +293,8 @@ func defaultSchemaLoader(
 	root any,
 	expandOptions *ExpandOptions,
 	cache ResolutionCache,
-	context *resolverContext,
-) *schemaLoader {
+	context *resolverContext) *schemaLoader {
+
 	if expandOptions == nil {
 		expandOptions = &ExpandOptions{}
 	}
diff --git a/spec_test.go b/spec_test.go
index 998c7c7..f5118b0 100644
--- a/spec_test.go
+++ b/spec_test.go
@@ -74,7 +74,7 @@ func TestSpec_Issue1429(t *testing.T) {
 	assertPaths1429SkipSchema(t, sp)
 
 	for _, def := range sp.Definitions {
-		assert.Contains(t, def.Ref.String(), "responses.yaml#/definitions/")
+		assert.Contains(t, def.Ref.String(), "responses.yaml#/definitions/") //nolint:typecheck
 	}
 }
 
@@ -84,7 +84,7 @@ func assertPaths1429(t testing.TB, sp *spec.Swagger) {
 			require.NotNilf(t, param.Schema, "expected param schema not to be nil")
 			// all param fixtures are body param with schema
 			// all $ref expanded
-			assert.Empty(t, param.Schema.Ref.String())
+			   assert.Empty(t, param.Schema.Ref.String()) //nolint:typecheck
 		}
 
 		for code, response := range pi.Get.Responses.StatusCodeResponses {
@@ -94,7 +94,7 @@ func assertPaths1429(t testing.TB, sp *spec.Swagger) {
 				continue
 			}
 			require.NotNilf(t, response.Schema, "expected response schema not to be nil")
-			assert.Empty(t, response.Schema.Ref.String())
+			   assert.Empty(t, response.Schema.Ref.String()) //nolint:typecheck
 		}
 	}
 }
@@ -108,18 +108,18 @@ func assertPaths1429SkipSchema(t testing.TB, sp *spec.Swagger) {
 			switch param.Name {
 			case "plainRequest":
 				// this one is expanded
-				assert.Empty(t, param.Schema.Ref.String())
+				   assert.Empty(t, param.Schema.Ref.String()) //nolint:typecheck
 				continue
 			case "nestedBody":
 				// this one is local
-				assert.Truef(t, strings.HasPrefix(param.Schema.Ref.String(), "#/definitions/"),
-					"expected rooted definitions $ref, got: %s", param.Schema.Ref.String())
+				   assert.Truef(t, strings.HasPrefix(param.Schema.Ref.String(), "#/definitions/"),
+					   "expected rooted definitions $ref, got: %s", param.Schema.Ref.String()) //nolint:typecheck
 				continue
 			case "remoteRequest":
-				assert.Contains(t, param.Schema.Ref.String(), "remote/remote.yaml#/")
+				   assert.Contains(t, param.Schema.Ref.String(), "remote/remote.yaml#/") //nolint:typecheck
 				continue
 			}
-			assert.Contains(t, param.Schema.Ref.String(), "responses.yaml#/")
+			   assert.Contains(t, param.Schema.Ref.String(), "responses.yaml#/") //nolint:typecheck
 
 		}
 
@@ -130,13 +130,13 @@ func assertPaths1429SkipSchema(t testing.TB, sp *spec.Swagger) {
 				assert.Nilf(t, response.Schema, "expected response schema to be nil")
 				continue
 			case 204:
-				assert.Contains(t, response.Schema.Ref.String(), "remote/remote.yaml#/")
+				   assert.Contains(t, response.Schema.Ref.String(), "remote/remote.yaml#/") //nolint:typecheck
 				continue
 			case 404:
-				assert.Empty(t, response.Schema.Ref.String())
+				   assert.Empty(t, response.Schema.Ref.String()) //nolint:typecheck
 				continue
 			}
-			assert.Containsf(t, response.Schema.Ref.String(), "responses.yaml#/", "expected remote ref at resp. %d", code)
+			   assert.Containsf(t, response.Schema.Ref.String(), "responses.yaml#/", "expected remote ref at resp. %d", code) //nolint:typecheck
 		}
 	}
 }

From 63653e97dd7a6117e97f38844c869c6db1caef8a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Mon, 22 Dec 2025 10:55:33 +0100
Subject: [PATCH 58/63] PMM-14577 Disable typecheck (too many errors in
 upstream).

---
 .golangci.yml    |  1 +
 expander_test.go | 42 +++++++++++++++++++++---------------------
 normalizer.go    | 10 +++++-----
 schema_loader.go | 28 ++++++++++++++--------------
 spec_test.go     | 22 +++++++++++-----------
 5 files changed, 52 insertions(+), 51 deletions(-)

diff --git a/.golangci.yml b/.golangci.yml
index 1a41ba1..fea0b52 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -15,6 +15,7 @@ linters:
     - whitespace
     - wrapcheck
     - wsl
+    - typecheck
   settings:
     dupl:
       threshold: 200
diff --git a/expander_test.go b/expander_test.go
index 900b231..d0a8ef8 100644
--- a/expander_test.go
+++ b/expander_test.go
@@ -125,7 +125,7 @@ func TestExpand_ResponseSchema(t *testing.T) {
 	sch := spec.Paths.Paths["/item"].Get.Responses.StatusCodeResponses[200].Schema
 	require.NotNil(t, sch)
 
-	assert.Empty(t, sch.Ref.String()) //nolint:typecheck
+	assert.Empty(t, sch.Ref.String())
 	assert.Contains(t, sch.Type, "object")
 	assert.Len(t, sch.Properties, 2)
 }
@@ -449,7 +449,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	// verify unmarshaled structure
 	schema := spec.Definitions["car"]
 	oldBrand := schema.Properties["brand"]
-	require.NotEmpty(t, oldBrand.Items.Schema.Ref.String()) // this is a $ref //nolint:typecheck
+	require.NotEmpty(t, oldBrand.Items.Schema.Ref.String()) // this is a $ref
 	require.NotEqual(t, spec.Definitions["brand"], oldBrand)
 
 	_, err = expandSchema(schema, []string{"#/definitions/car"}, resolver, basePath)
@@ -457,19 +457,19 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 
 	// verify expanded schema for Car, in the document passed
 	newBrand := schema.Properties["brand"]
-	assert.Empty(t, newBrand.Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, newBrand.Items.Schema.Ref.String())
 	assert.Equal(t, spec.Definitions["brand"], *newBrand.Items.Schema)
 
 	// verify expanded schema for Truck, in the returned schema
 	schema = spec.Definitions["truck"]
-	require.NotEmpty(t, schema.Items.Schema.Ref.String()) //nolint:typecheck
+	require.NotEmpty(t, schema.Items.Schema.Ref.String())
 	s, err := expandSchema(schema, []string{"#/definitions/truck"}, resolver, basePath)
 	require.NoError(t, err)
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.Items.Schema.Ref.String()) // no more a $ref //nolint:typecheck
-	assert.False(t, schema.Items.Schema.Ref.IsRoot()) // no more a $ref //nolint:typecheck
+	assert.Empty(t, schema.Items.Schema.Ref.String()) // no more a $ref
+	assert.False(t, schema.Items.Schema.Ref.IsRoot()) // no more a $ref
 	assert.Equal(t, spec.Definitions["car"], *schema.Items.Schema)
 
 	sch := new(Schema)
@@ -483,7 +483,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.Items.Schema.Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, schema.Items.Schema.Items.Schema.Ref.String())
 	assert.Equal(t, *schema.Items.Schema.Items.Schema, spec.Definitions["brand"])
 
 	// verify expanded schema for Batch2, in the returned schema
@@ -493,8 +493,8 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.Items.Schemas[0].Items.Schema.Ref.String()) //nolint:typecheck
-	assert.Empty(t, schema.Items.Schemas[1].Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, schema.Items.Schemas[0].Items.Schema.Ref.String())
+	assert.Empty(t, schema.Items.Schemas[1].Items.Schema.Ref.String())
 	assert.Equal(t, *schema.Items.Schemas[0].Items.Schema, spec.Definitions["brand"])
 	assert.Equal(t, *schema.Items.Schemas[1].Items.Schema, spec.Definitions["tag"])
 
@@ -505,8 +505,8 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.AllOf[0].Items.Schema.Ref.String()) //nolint:typecheck
-	assert.Empty(t, schema.AllOf[1].Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, schema.AllOf[0].Items.Schema.Ref.String())
+	assert.Empty(t, schema.AllOf[1].Items.Schema.Ref.String())
 	assert.Equal(t, *schema.AllOf[0].Items.Schema, spec.Definitions["brand"])
 	assert.Equal(t, *schema.AllOf[1].Items.Schema, spec.Definitions["tag"])
 
@@ -517,8 +517,8 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.AnyOf[0].Items.Schema.Ref.String()) //nolint:typecheck
-	assert.Empty(t, schema.AnyOf[1].Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, schema.AnyOf[0].Items.Schema.Ref.String())
+	assert.Empty(t, schema.AnyOf[1].Items.Schema.Ref.String())
 	assert.Equal(t, *schema.AnyOf[0].Items.Schema, spec.Definitions["brand"])
 	assert.Equal(t, *schema.AnyOf[1].Items.Schema, spec.Definitions["tag"])
 
@@ -529,8 +529,8 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.OneOf[0].Items.Schema.Ref.String()) //nolint:typecheck
-	assert.Empty(t, schema.OneOf[1].Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, schema.OneOf[0].Items.Schema.Ref.String())
+	assert.Empty(t, schema.OneOf[1].Items.Schema.Ref.String())
 	assert.Equal(t, *schema.OneOf[0].Items.Schema, spec.Definitions["brand"])
 	assert.Equal(t, *schema.OneOf[1].Items.Schema, spec.Definitions["tag"])
 
@@ -541,7 +541,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.Not.Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, schema.Not.Items.Schema.Ref.String())
 	assert.Equal(t, *schema.Not.Items.Schema, spec.Definitions["tag"])
 
 	// verify expanded schema for WithAdditional, in the returned schema [expand additionalProperties]
@@ -551,7 +551,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.AdditionalProperties.Schema.Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, schema.AdditionalProperties.Schema.Items.Schema.Ref.String())
 	assert.Equal(t, *schema.AdditionalProperties.Schema.Items.Schema, spec.Definitions["tag"])
 
 	// verify expanded schema for WithAdditionalItems, in the returned schema [expand additionalItems]
@@ -561,7 +561,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 	require.NotNil(t, s)
 
 	schema = *s
-	assert.Empty(t, schema.AdditionalItems.Schema.Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, schema.AdditionalItems.Schema.Items.Schema.Ref.String())
 	assert.Equal(t, *schema.AdditionalItems.Schema.Items.Schema, spec.Definitions["tag"])
 
 	// verify expanded schema for WithPattern, in the returned schema [expand PatternProperties]
@@ -572,7 +572,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 
 	schema = *s
 	prop := schema.PatternProperties["^x-ab"]
-	assert.Empty(t, prop.Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, prop.Items.Schema.Ref.String())
 	assert.Equal(t, *prop.Items.Schema, spec.Definitions["tag"])
 
 	// verify expanded schema for Deps, in the returned schema [expand dependencies]
@@ -583,7 +583,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 
 	schema = *s
 	prop2 := schema.Dependencies["something"]
-	assert.Empty(t, prop2.Schema.Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, prop2.Schema.Items.Schema.Ref.String())
 	assert.Equal(t, *prop2.Schema.Items.Schema, spec.Definitions["tag"])
 
 	// verify expanded schema for Defined, in the returned schema [expand nested definitions]
@@ -594,7 +594,7 @@ func TestExpand_InternalSchemas2(t *testing.T) {
 
 	schema = *s
 	prop = schema.Definitions["something"]
-	assert.Empty(t, prop.Items.Schema.Ref.String()) //nolint:typecheck
+	assert.Empty(t, prop.Items.Schema.Ref.String())
 	assert.Equal(t, *prop.Items.Schema, spec.Definitions["tag"])
 }
 
diff --git a/normalizer.go b/normalizer.go
index c8a04a4..e1d7c58 100644
--- a/normalizer.go
+++ b/normalizer.go
@@ -43,7 +43,7 @@ func normalizeURI(refPath, base string) string {
 	}
 
 	r := MustCreateRef(refURL.String())
-	if r.IsCanonical() { //nolint:typecheck
+	if r.IsCanonical() {
 		return refURL.String()
 	}
 
@@ -74,9 +74,9 @@ func normalizeURI(refPath, base string) string {
 // in that case, the rebasing is performed // against the id only if this is an anchor for the initial root document.
 // All other intermediate "id"'s found along the way are ignored for the purpose of rebasing.
 func denormalizeRef(ref *Ref, originalRelativeBase, id string) Ref {
-	debugLog("denormalizeRef called:\n$ref: %q\noriginal: %s\nroot ID:%s", ref.String(), originalRelativeBase, id) //nolint:typecheck
+	debugLog("denormalizeRef called:\n$ref: %q\noriginal: %s\nroot ID:%s", ref.String(), originalRelativeBase, id)
 
-	if ref.String() == "" || ref.IsRoot() || ref.HasFragmentOnly { //nolint:typecheck
+	if ref.String() == "" || ref.IsRoot() || ref.HasFragmentOnly {
 		// short circuit: $ref to current doc
 		return *ref
 	}
@@ -101,7 +101,7 @@ func denormalizeRef(ref *Ref, originalRelativeBase, id string) Ref {
 func rebase(ref *Ref, v *url.URL, notEqual bool) (Ref, bool) {
 	var newBase url.URL
 
-	u := ref.GetURL() //nolint:typecheck
+	u := ref.GetURL()
 
 	if u.Scheme != v.Scheme || u.Host != v.Host {
 		return *ref, false
@@ -140,7 +140,7 @@ func rebase(ref *Ref, v *url.URL, notEqual bool) (Ref, bool) {
 
 // normalizeRef canonicalize a Ref, using a canonical relativeBase as its absolute anchor
 func normalizeRef(ref *Ref, relativeBase string) *Ref {
-	r := MustCreateRef(normalizeURI(ref.String(), relativeBase)) //nolint:typecheck
+	r := MustCreateRef(normalizeURI(ref.String(), relativeBase))
 	return &r
 }
 
diff --git a/schema_loader.go b/schema_loader.go
index 1caf8df..f7b6baf 100644
--- a/schema_loader.go
+++ b/schema_loader.go
@@ -82,18 +82,18 @@ func (r *schemaLoader) Resolve(ref *Ref, target any, basePath string) error {
 }
 
 func (r *schemaLoader) transitiveResolver(basePath string, ref Ref) *schemaLoader {
-	if ref.IsRoot() || ref.HasFragmentOnly { //nolint:typecheck
+	if ref.IsRoot() || ref.HasFragmentOnly {
 		return r
 	}
 
 	baseRef := MustCreateRef(basePath)
 	currentRef := normalizeRef(&ref, basePath)
-	if strings.HasPrefix(currentRef.String(), baseRef.String()) { //nolint:typecheck
+	if strings.HasPrefix(currentRef.String(), baseRef.String()) {
 		return r
 	}
 
 	// set a new root against which to resolve
-	rootURL := currentRef.GetURL() //nolint:typecheck
+	rootURL := currentRef.GetURL()
 	rootURL.Fragment = ""
 	root, _ := r.cache.Get(rootURL.String())
 
@@ -121,7 +121,7 @@ func (r *schemaLoader) resolveRef(ref *Ref, target any, basePath string) error {
 		return ErrResolveRefNeedsAPointer
 	}
 
-	if ref.GetURL() == nil { //nolint:typecheck
+	if ref.GetURL() == nil {
 		return nil
 	}
 
@@ -134,25 +134,25 @@ func (r *schemaLoader) resolveRef(ref *Ref, target any, basePath string) error {
 	// Resolve against the root if it isn't nil, and if ref is pointing at the root, or has a fragment only which means
 	// it is pointing somewhere in the root.
 	root := r.root
-	if (ref.IsRoot() || ref.HasFragmentOnly) && root == nil && basePath != "" { //nolint:typecheck
+	if (ref.IsRoot() || ref.HasFragmentOnly) && root == nil && basePath != "" {
 		if baseRef, erb := NewRef(basePath); erb == nil {
-			root, _, _, _ = r.load(baseRef.GetURL()) //nolint:typecheck
+			root, _, _, _ = r.load(baseRef.GetURL())
 		}
 	}
 
-	if (ref.IsRoot() || ref.HasFragmentOnly) && root != nil { //nolint:typecheck
+	if (ref.IsRoot() || ref.HasFragmentOnly) && root != nil {
 		data = root
 	} else {
 		baseRef := normalizeRef(ref, basePath)
-		data, _, _, err = r.load(baseRef.GetURL()) //nolint:typecheck
+		data, _, _, err = r.load(baseRef.GetURL())
 		if err != nil {
 			return err
 		}
 	}
 
 	res = data
-	if ref.String() != "" { //nolint:typecheck
-		res, _, err = ref.GetPointer().Get(data) //nolint:typecheck
+	if ref.String() != "" {
+		res, _, err = ref.GetPointer().Get(data)
 		if err != nil {
 			return err
 		}
@@ -193,7 +193,7 @@ func (r *schemaLoader) load(refURL *url.URL) (any, url.URL, bool, error) {
 //
 // It relies on a private context (which needs not be locked).
 func (r *schemaLoader) isCircular(ref *Ref, basePath string, parentRefs ...string) (foundCycle bool) {
-	normalizedRef := normalizeURI(ref.String(), basePath) //nolint:typecheck
+	normalizedRef := normalizeURI(ref.String(), basePath)
 	if _, ok := r.context.circulars[normalizedRef]; ok {
 		// circular $ref has been already detected in another explored cycle
 		foundCycle = true
@@ -221,7 +221,7 @@ func (r *schemaLoader) deref(input any, parentRefs []string, basePath string) er
 		return fmt.Errorf("unsupported type: %T: %w", input, ErrDerefUnsupportedType)
 	}
 
-	curRef := ref.String() //nolint:typecheck
+	curRef := ref.String()
 	if curRef == "" {
 		return nil
 	}
@@ -237,12 +237,12 @@ func (r *schemaLoader) deref(input any, parentRefs []string, basePath string) er
 		return err
 	}
 
-	if ref.String() == "" || ref.String() == curRef { //nolint:typecheck
+	if ref.String() == "" || ref.String() == curRef {
 		// done with rereferencing
 		return nil
 	}
 
-	parentRefs = append(parentRefs, normalizedRef.String()) //nolint:typecheck
+	parentRefs = append(parentRefs, normalizedRef.String())
 	return r.deref(input, parentRefs, normalizedBasePath)
 }
 
diff --git a/spec_test.go b/spec_test.go
index f5118b0..998c7c7 100644
--- a/spec_test.go
+++ b/spec_test.go
@@ -74,7 +74,7 @@ func TestSpec_Issue1429(t *testing.T) {
 	assertPaths1429SkipSchema(t, sp)
 
 	for _, def := range sp.Definitions {
-		assert.Contains(t, def.Ref.String(), "responses.yaml#/definitions/") //nolint:typecheck
+		assert.Contains(t, def.Ref.String(), "responses.yaml#/definitions/")
 	}
 }
 
@@ -84,7 +84,7 @@ func assertPaths1429(t testing.TB, sp *spec.Swagger) {
 			require.NotNilf(t, param.Schema, "expected param schema not to be nil")
 			// all param fixtures are body param with schema
 			// all $ref expanded
-			   assert.Empty(t, param.Schema.Ref.String()) //nolint:typecheck
+			assert.Empty(t, param.Schema.Ref.String())
 		}
 
 		for code, response := range pi.Get.Responses.StatusCodeResponses {
@@ -94,7 +94,7 @@ func assertPaths1429(t testing.TB, sp *spec.Swagger) {
 				continue
 			}
 			require.NotNilf(t, response.Schema, "expected response schema not to be nil")
-			   assert.Empty(t, response.Schema.Ref.String()) //nolint:typecheck
+			assert.Empty(t, response.Schema.Ref.String())
 		}
 	}
 }
@@ -108,18 +108,18 @@ func assertPaths1429SkipSchema(t testing.TB, sp *spec.Swagger) {
 			switch param.Name {
 			case "plainRequest":
 				// this one is expanded
-				   assert.Empty(t, param.Schema.Ref.String()) //nolint:typecheck
+				assert.Empty(t, param.Schema.Ref.String())
 				continue
 			case "nestedBody":
 				// this one is local
-				   assert.Truef(t, strings.HasPrefix(param.Schema.Ref.String(), "#/definitions/"),
-					   "expected rooted definitions $ref, got: %s", param.Schema.Ref.String()) //nolint:typecheck
+				assert.Truef(t, strings.HasPrefix(param.Schema.Ref.String(), "#/definitions/"),
+					"expected rooted definitions $ref, got: %s", param.Schema.Ref.String())
 				continue
 			case "remoteRequest":
-				   assert.Contains(t, param.Schema.Ref.String(), "remote/remote.yaml#/") //nolint:typecheck
+				assert.Contains(t, param.Schema.Ref.String(), "remote/remote.yaml#/")
 				continue
 			}
-			   assert.Contains(t, param.Schema.Ref.String(), "responses.yaml#/") //nolint:typecheck
+			assert.Contains(t, param.Schema.Ref.String(), "responses.yaml#/")
 
 		}
 
@@ -130,13 +130,13 @@ func assertPaths1429SkipSchema(t testing.TB, sp *spec.Swagger) {
 				assert.Nilf(t, response.Schema, "expected response schema to be nil")
 				continue
 			case 204:
-				   assert.Contains(t, response.Schema.Ref.String(), "remote/remote.yaml#/") //nolint:typecheck
+				assert.Contains(t, response.Schema.Ref.String(), "remote/remote.yaml#/")
 				continue
 			case 404:
-				   assert.Empty(t, response.Schema.Ref.String()) //nolint:typecheck
+				assert.Empty(t, response.Schema.Ref.String())
 				continue
 			}
-			   assert.Containsf(t, response.Schema.Ref.String(), "responses.yaml#/", "expected remote ref at resp. %d", code) //nolint:typecheck
+			assert.Containsf(t, response.Schema.Ref.String(), "responses.yaml#/", "expected remote ref at resp. %d", code)
 		}
 	}
 }

From 83bc57fb0017d50db523d881ac88cd01e5f5c32c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Mon, 22 Dec 2025 11:01:16 +0100
Subject: [PATCH 59/63] PMM-14577 Lint.

---
 .github/workflows/go-test.yml | 37 ++++++++++++++++-------------------
 1 file changed, 17 insertions(+), 20 deletions(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 129a6b2..809a738 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -21,7 +21,7 @@ jobs:
           check-latest: true
           cache: true
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v5.3.0
+        uses: golangci/golangci-lint-action@v6
         with:
           version: v1.59.1
           only-new-issues: true
@@ -37,22 +37,19 @@ jobs:
         go_version: ['oldstable', 'stable' ]
 
     steps:
-    - name: Run unit tests
-      uses: actions/setup-go@v5
-      with:
-        go-version: '${{ matrix.go_version }}'
-        check-latest: true
-        cache: true
-
-    - uses: actions/checkout@v4
-
-    - run: go test -v -race -coverprofile="coverage-${{ matrix.os }}.${{ matrix.go_version }}.out" -covermode=atomic -coverpkg=$(go list)/... ./...
-
-    - name: Upload coverage to codecov
-      uses: codecov/codecov-action@v4
-      with:
-        files: './coverage-${{ matrix.os }}.${{ matrix.go_version }}.out'
-        flags: '${{ matrix.go_version }}'
-        os: '${{ matrix.os }}'
-        fail_ci_if_error: false
-        verbose: true
+      - name: Run unit tests
+      - uses: actions/setup-go@v5
+        with:
+          go-version: '${{ matrix.go_version }}'
+          check-latest: true
+          cache: true
+      - uses: actions/checkout@v4
+      - run: go test -v -race -coverprofile="coverage-${{ matrix.os }}.${{ matrix.go_version }}.out" -covermode=atomic -coverpkg=$(go list)/... ./...
+      - name: Upload coverage to codecov
+        uses: codecov/codecov-action@v4
+        with:
+          files: './coverage-${{ matrix.os }}.${{ matrix.go_version }}.out'
+          flags: '${{ matrix.go_version }}'
+          os: '${{ matrix.os }}'
+          fail_ci_if_error: false
+          verbose: true

From 1e52a56eac01b647539fc0bc7a9adb2574fcc022 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Mon, 22 Dec 2025 11:04:22 +0100
Subject: [PATCH 60/63] PMM-14577 Format.

---
 .github/workflows/go-test.yml | 41 +++++++++++++++++++----------------
 1 file changed, 22 insertions(+), 19 deletions(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 809a738..3a5adaf 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -17,7 +17,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
-          go-version: '1.25.5'
+          go-version: "1.25.5"
           check-latest: true
           cache: true
       - name: golangci-lint
@@ -33,23 +33,26 @@ jobs:
 
     strategy:
       matrix:
-        os: [ ubuntu-latest, macos-latest, windows-latest ]
-        go_version: ['oldstable', 'stable' ]
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        go_version: ["oldstable", "stable"]
 
     steps:
-      - name: Run unit tests
-      - uses: actions/setup-go@v5
-        with:
-          go-version: '${{ matrix.go_version }}'
-          check-latest: true
-          cache: true
-      - uses: actions/checkout@v4
-      - run: go test -v -race -coverprofile="coverage-${{ matrix.os }}.${{ matrix.go_version }}.out" -covermode=atomic -coverpkg=$(go list)/... ./...
-      - name: Upload coverage to codecov
-        uses: codecov/codecov-action@v4
-        with:
-          files: './coverage-${{ matrix.os }}.${{ matrix.go_version }}.out'
-          flags: '${{ matrix.go_version }}'
-          os: '${{ matrix.os }}'
-          fail_ci_if_error: false
-          verbose: true
+    - name: Run unit tests
+    - uses: actions/setup-go@v5
+      with:
+        go-version: "${{ matrix.go_version }}"
+        check-latest: true
+        cache: true
+
+    - uses: actions/checkout@v4
+
+    - run: go test -v -race -coverprofile="coverage-${{ matrix.os }}.${{ matrix.go_version }}.out" -covermode=atomic -coverpkg=$(go list)/... ./...
+    - name: Upload coverage to codecov
+      uses: codecov/codecov-action@v4
+      
+      with:
+        files: "./coverage-${{ matrix.os }}.${{ matrix.go_version }}.out"
+        flags: "${{ matrix.go_version }}"
+        os: "${{ matrix.os }}"
+        fail_ci_if_error: false
+        verbose: true

From 850e37796976891da5f22146256aaccef910e27d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Mon, 22 Dec 2025 11:05:56 +0100
Subject: [PATCH 61/63] PMM-14577 Align with Percona.

---
 .github/workflows/bump-release.yml  | 46 -----------------------------
 .github/workflows/codeql.yml        | 22 --------------
 .github/workflows/contributors.yml  | 18 -----------
 .github/workflows/go-test.yml       | 16 +++++-----
 .github/workflows/reports-setup.yml |  0
 .github/workflows/scanner.yml       | 19 ------------
 .github/workflows/tag-release.yml   | 19 ------------
 7 files changed, 8 insertions(+), 132 deletions(-)
 delete mode 100644 .github/workflows/bump-release.yml
 delete mode 100644 .github/workflows/codeql.yml
 delete mode 100644 .github/workflows/contributors.yml
 create mode 100644 .github/workflows/reports-setup.yml
 delete mode 100644 .github/workflows/scanner.yml
 delete mode 100644 .github/workflows/tag-release.yml

diff --git a/.github/workflows/bump-release.yml b/.github/workflows/bump-release.yml
deleted file mode 100644
index 7f5dfa7..0000000
--- a/.github/workflows/bump-release.yml
+++ /dev/null
@@ -1,46 +0,0 @@
-name: Bump Release
-
-permissions:
-  contents: read
-
-on:
-  workflow_dispatch:
-    inputs:
-      bump-patch:
-        description: Bump a patch version release
-        type: boolean
-        required: false
-        default: true
-      bump-minor:
-        description: Bump a minor version release
-        type: boolean
-        required: false
-        default: false
-      bump-major:
-        description: Bump a major version release
-        type: boolean
-        required: false
-        default: false
-      tag-message-title:
-        description: Tag message title to prepend to the release notes
-        required: false
-        type: string
-      tag-message-body:
-        description: |
-          Tag message body to prepend to the release notes.
-          (use "|" to replace end of line).
-        required: false
-        type: string
-
-jobs:
-  bump-release:
-    permissions:
-      contents: write
-    uses: go-openapi/ci-workflows/.github/workflows/bump-release.yml@9e70984764198f45640ca9f0752a51a8ca159b99 # v0.1.2
-    with:
-      bump-patch: ${{ inputs.bump-patch }}
-      bump-minor: ${{ inputs.bump-minor }}
-      bump-major: ${{ inputs.bump-major }}
-      tag-message-title: ${{ inputs.tag-message-title }}
-      tag-message-body: ${{ inputs.tag-message-body }}
-    secrets: inherit
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
deleted file mode 100644
index ba0aab9..0000000
--- a/.github/workflows/codeql.yml
+++ /dev/null
@@ -1,22 +0,0 @@
-name: "CodeQL"
-
-on:
-  push:
-    branches: [ "master" ]
-  pull_request:
-    branches: [ "master" ]
-    paths-ignore: # remove this clause if CodeQL is a required check
-      - '**/*.md'
-  schedule:
-    - cron: '39 19 * * 5'
-
-permissions:
-  contents: read
-
-jobs:
-  codeql:
-    permissions:
-      contents: read
-      security-events: write
-    uses: go-openapi/ci-workflows/.github/workflows/codeql.yml@9e70984764198f45640ca9f0752a51a8ca159b99 # v0.1.2
-    secrets: inherit
diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml
deleted file mode 100644
index 375d651..0000000
--- a/.github/workflows/contributors.yml
+++ /dev/null
@@ -1,18 +0,0 @@
-name: Contributors
-
-on:
-  schedule:
-    - cron: '18 4 * * 6'
-
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-jobs:
-  contributors:
-    permissions:
-      pull-requests: write
-      contents: write
-    uses: go-openapi/ci-workflows/.github/workflows/contributors.yml@9e70984764198f45640ca9f0752a51a8ca159b99 # v0.1.2
-    secrets: inherit
diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 3a5adaf..5c1037d 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -17,7 +17,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
-          go-version: "1.25.5"
+          go-version: '1.25.5'
           check-latest: true
           cache: true
       - name: golangci-lint
@@ -34,25 +34,25 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
-        go_version: ["oldstable", "stable"]
+        go_version: ['oldstable', 'stable']
 
     steps:
     - name: Run unit tests
     - uses: actions/setup-go@v5
       with:
-        go-version: "${{ matrix.go_version }}"
+        go-version: '${{ matrix.go_version }}'
         check-latest: true
         cache: true
 
     - uses: actions/checkout@v4
 
-    - run: go test -v -race -coverprofile="coverage-${{ matrix.os }}.${{ matrix.go_version }}.out" -covermode=atomic -coverpkg=$(go list)/... ./...
+    - run: go test -v -race -coverprofile='coverage-${{ matrix.os }}.${{ matrix.go_version }}.out' -covermode=atomic -coverpkg=$(go list)/... ./...
     - name: Upload coverage to codecov
       uses: codecov/codecov-action@v4
-      
+
       with:
-        files: "./coverage-${{ matrix.os }}.${{ matrix.go_version }}.out"
-        flags: "${{ matrix.go_version }}"
-        os: "${{ matrix.os }}"
+        files: './coverage-${{ matrix.os }}.${{ matrix.go_version }}.out'
+        flags: '${{ matrix.go_version }}'
+        os: '${{ matrix.os }}'
         fail_ci_if_error: false
         verbose: true
diff --git a/.github/workflows/reports-setup.yml b/.github/workflows/reports-setup.yml
new file mode 100644
index 0000000..e69de29
diff --git a/.github/workflows/scanner.yml b/.github/workflows/scanner.yml
deleted file mode 100644
index 7633b50..0000000
--- a/.github/workflows/scanner.yml
+++ /dev/null
@@ -1,19 +0,0 @@
-name: Vulnerability scans
-
-on:
-  branch_protection_rule:
-  push:
-    branches: [ "master" ]
-  schedule:
-    - cron: '18 4 * * 3'
-
-permissions:
-  contents: read
-
-jobs:
-  scanners:
-    permissions:
-      contents: read
-      security-events: write
-    uses: go-openapi/ci-workflows/.github/workflows/scanner.yml@9e70984764198f45640ca9f0752a51a8ca159b99 # V0.1.2
-    secrets: inherit
diff --git a/.github/workflows/tag-release.yml b/.github/workflows/tag-release.yml
deleted file mode 100644
index 4ef8bdf..0000000
--- a/.github/workflows/tag-release.yml
+++ /dev/null
@@ -1,19 +0,0 @@
-name: Release on tag
-
-permissions:
-  contents: read
-
-on:
-  push:
-    tags:
-      - v[0-9]+*
-
-jobs:
-  gh-release:
-    name: Create release
-    permissions:
-      contents: write
-    uses: go-openapi/ci-workflows/.github/workflows/release.yml@9e70984764198f45640ca9f0752a51a8ca159b99 # v0.1.2
-    with:
-      tag: ${{ github.ref_name }}
-    secrets: inherit

From 989999f556bf7cc1b47cf61fa52377e0356d61d9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Mon, 22 Dec 2025 11:07:48 +0100
Subject: [PATCH 62/63] PMM-14577 Remove file.

---
 .github/workflows/reports-setup.yml | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 delete mode 100644 .github/workflows/reports-setup.yml

diff --git a/.github/workflows/reports-setup.yml b/.github/workflows/reports-setup.yml
deleted file mode 100644
index e69de29..0000000

From 485c12f10ee36a03e8b7de5428817c12d234bb09 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ji=C5=99=C3=AD=20=C4=8Ctvrtka?= <j.ctvrtka@gmail.com>
Date: Mon, 22 Dec 2025 11:10:11 +0100
Subject: [PATCH 63/63] PMM-14577 Align with Percona.

---
 .github/workflows/go-test.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 5c1037d..340ce07 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -17,7 +17,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
-          go-version: '1.25.5'
+          go-version: 1.25.5
           check-latest: true
           cache: true
       - name: golangci-lint
@@ -33,8 +33,8 @@ jobs:
 
     strategy:
       matrix:
-        os: [ubuntu-latest, macos-latest, windows-latest]
-        go_version: ['oldstable', 'stable']
+        os: [ ubuntu-latest, macos-latest, windows-latest ]
+        go_version: ['oldstable', 'stable' ]
 
     steps:
     - name: Run unit tests
@@ -46,7 +46,7 @@ jobs:
 
     - uses: actions/checkout@v4
 
-    - run: go test -v -race -coverprofile='coverage-${{ matrix.os }}.${{ matrix.go_version }}.out' -covermode=atomic -coverpkg=$(go list)/... ./...
+    - run: go test -v -race -coverprofile="coverage-${{ matrix.os }}.${{ matrix.go_version }}.out" -covermode=atomic -coverpkg=$(go list)/... ./...
     - name: Upload coverage to codecov
       uses: codecov/codecov-action@v4