v0.38.7

v0.38.7 improves composed bundling by correctly lifting external Security Scheme references—including bare-file and component-fragment refs—into components.securitySchemes, with safeguards against misclassifying wrapper maps or complete OpenAPI documents. Arazzo engines can now inject a context-aware SleepFunc through EngineConfig, enabling replay-safe retry delays in durable workflow runtimes and deterministic tests while preserving existing behavior by default. This release also adds regression coverage for empty Security Requirement objects and updates golang.org/x/sync to v0.22.0.

@kriptoburak @khalidDaoud

v0.38.6

Fixes daveshanley/vacuum#928

v0.38.5

Fixes #597

v0.38.4

Just an internal refactor and deduplication of code, and build speed upgrades. No fixes, no features, no breaking changes,

v0.38.3

Fixes concurrent rendering issues stemming from changes in how the YAML lib has changed between RCs

#594

@gnuletik

v0.38.2

Bumps to rc6 on yaml and fixed $def handling in bundler.

v0.38.1

Fixes #590 and moved to our own fork of testify

v0.38.0

Improves parse/index performance and memory use with lazy SpecInfo JSON generation, lower-allocation node indexing, faster component-path conversion, and reduced goroutine overhead in small translation/schema paths.

Adds SkipMetadataCollection for consumers that do not need diagnostic index metadata, allowing faster/lighter parsing for large documents.

Tightens YAML handling around duplicate keys, merge/root errors, empty overlays, and YAML v4 rc.5 rendering behavior.

Fixes OpenAPI 3.0 webhooks extraction so same-named scalar values no longer create empty webhook maps.

Improves change detection and generator metadata fidelity, including anchor-insensitive YAML comparisons and preserved/inferred

YAML tags for generated enum/const metadata.

@asadtariq96

v0.37.3

Address issue #581

v0.37.2

Provides a deeper fix for #575