[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/daveshanley/vacuum	v0.30.6 → v0.33.0

---

Release Notes

daveshanley/vacuum (github.com/daveshanley/vacuum)

v0.33.0

Compare Source

Changelog

• 4384b03 Add Spectral-compatible or core function
• 851e42b Add native Arazzo validation and configurable lint rules
• ef60d39 Align core result paths with their Doctor models
• a1c9142 Allow Arazzo built-in rules to be enabled individually
• d4979d0 Announce v0.33 Arazzo and or support in README
• df72e49 Correct Princess Beef copyright dates
• ae89846 Enable Arazzo linting across commands reports and editor diagnostics
• b5c42f9 Fix AsyncAPI schema rule validation options
• 08de2f5 Keep external source labels and snippets in one report slot
• 810908c Preserve Arazzo paths after shared lookup changes
• b44dba2 Preserve Arazzo source context across lint and report boundaries
• d60e3d4 Preserve rejection of unsupported core option maps
• 852872f Record the direct HTML parser test dependency
• d9df352 Reject empty comma-separated or property names
• a0c7cf1 Share lazy node path indexes across rule execution
• 9a77754 docs(owasp): clarify upgrade behavior and simplify lint guidance
• e2c64f6 feat: reject unsafe OAuth flows and authentication URLs
• a7b225d fix(owasp): isolate OAuth flow checks and preserve finding ownership
• e415eb6 fix: check HTTPS across server overrides and variables
• 3c15d67 fix: check webhook and callback server transport
• cbdc1b9 fix: distinguish request object closure from map size limits
• 16bc4c1 fix: honor ancestor ignores for nested OAuth findings
• 4db724c fix: tighten write security and scope JWT documentation checks
• 35c425b refactor(owasp): share schema checks and cache composition targets

v0.32.0

Compare Source

Changelog

• c8575b6 Add execution cancellation and concurrency controls with isolated auto-fixes
• f84d230 Add overlay tag filtering and safe unused component pruning
• 4390113 Document auto-fix gate and publication protocol
• bd3f0e1 Preserve YAML presentation and share publication transform preparation
• bb8d345 Preserve publication references across examples aliases and filtered paths
• 62289f1 Preserve reusable execution configs and simplify cancellation lifecycle
• 09bc187 Preserve split-reference and recursive-schema regression coverage
• 4cc3e1d Report custom function loading failures once with accurate guidance
• 3d111cf Report invalid custom function files and flag-shaped paths
• f6ee9a0 Use shared Viper environment configuration for command flags

v0.31.0

Compare Source

Changelog

• 957c730 Attach component name findings to Doctor without rescanning keys
• c4515a0 Bound direction traversal for programmatic schema cycles
• c6c20ab Build the sample plugin with the host dependency graph
• 051f196 Classify OWASP limits by schema identity and request usage
• 0a1cce7 Cover execution timeouts across formats and JavaScript batch calls
• 67f9e6f Expand rule message templates in the shared function result path
• 1865bb7 Explain unsupported Spectral rulesets and native OWASP migration
• 4becce0 Follow reference targets with sibling schema keywords
• de3013f Index schema directions once for OWASP limit rules
• 4cc49c7 Isolate built-in rulesets and preserve HTTP-prefixed local paths
• 21c45bd Keep custom function targets when rendering message templates
• c8613ff Keep parent ruleset paths during dashboard reloads
• 59473ec Keep remote ruleset references separate from filesystem paths
• ad534fa Match equivalent JSONPath forms in wildcard ignores
• 7980dfd Preserve Doctor messages and quoted keys in rule templates
• 1c3c78b Preserve invalid ruleset errors after workspace lookup failures
• 0d05ca5 Preserve plain messages and index custom result value lookups
• 1a639a6 Preserve ruleset errors across library action forms and reports
• e8a4fdf Preserve severity behavior for Markdown summary callers
• 6bbb0fb Publish rule completion after releasing worker ownership
• 4e20d47 Publish ruleset configuration failures as editor diagnostics
• 5f0c365 Recognize string values in propertyNames schema checks
• cc87b20 Reject incomplete rulesets after extension loading fails
• ddb622a Reject unknown functions before rule execution
• 9823772 Report missing and invalid CLI flag values
• 975c420 Report threshold failures in pipeline summaries including hints
• fb17f6e Resolve extended rulesets relative to their containing document
• c78036d Resolve remote ruleset children after redirects and preserve URL queries
• cda9a7b Retain serialization for shared schema rendering
• 49778fa Reuse template indexes and skip unused message context work
• c279472 Scope schema validation caches to each rule action
• 6f43f2a Share lazy schema directions and remove repeated result processing
• 5d22d7f Simplify migration diagnostics and consolidate CLI process tests
• 9633d73 Upgrade Doctor to v0.0.83 and remove upstream JSON Schema
• f0fde4d Upgrade pb33f libraries and migrate schema and YAML forks
• e3679a8 Use execution decoding for all rule action maps
• 5891ba6 Use the lint outcome for the displayed summary status
• 2fea9fd Use validated LSP fallback on the first configuration RPC failure
• b1a36ad Validate component names and report their document locations
• 95542af Validate ruleset editor buffers without hiding API or tool errors
• 124d906 fix: carry per-rule timeout in the rule context instead of mutating JS functions

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 5 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=12 days

Details:

Package	Change
github.com/pb33f/doctor	v0.0.80 -> v0.0.83
github.com/pb33f/jsonpath	v0.8.3 -> v0.8.4
github.com/pb33f/libasyncapi	v0.0.2 -> v0.0.3-0.20261006133119-e34489c04636
github.com/pb33f/libopenapi	v0.38.7 -> v0.41.3
github.com/go-openapi/jsonpointer	v0.23.2 -> v1.0.2

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[manishsvk]

#2299 (comment)