[dependabot]

Bumps oasdiff/oasdiff-action from 0.1.20 to 0.1.21.

Release notes

Sourced from oasdiff/oasdiff-action's releases.

v0.1.21

Highlights

Upgraded to oasdiff v1.35.0

Every action now runs tufin/oasdiff:v1.35.0 (#210). What a workflow author sees:

• The diff action returns the same output on every run. Parts of the diff were built from map iteration, which Go randomizes, so the order of added, deleted and modified entries moved between runs of the same comparison. A job that diffs the same pair of specs twice now gets identical bytes.
• Two new info changes on the changelog and breaking actions, api-security-component-oauth-scope-added and api-security-component-oauth-scope-changed, because all four OAuth flows are checked now rather than only implicit. A security scheme whose authorizationCode, password or clientCredentials flow changed used to report nothing. Each finding names the flow it belongs to.
• Removing a deprecated property follows its sunset date. A removed request property or required response property that carries deprecated: true reports request-property-removed-with-deprecation or response-required-property-removed-with-deprecation at info with no x-sunset, *-removed-before-sunset at error before the date, and nothing after it. Jobs that fail on error may see a removal escalate where the spec sets a future sunset date.
• Security scheme URLs are compared by meaning. https://Login.Example.com:443/token and https://login.example.com/token no longer report a change.
• Two crashes are fixed. An x-extensible-enum holding numbers ([1, 2]) no longer panics when a value is removed, and a callback that references itself no longer overflows the stack.

Also in the image: a refused external $ref exits 123 on every load path, so a step keying off the exit code can offer the allow-external-refs remedy consistently.

Full Changelog: oasdiff/oasdiff-action@v0.1.20...v0.1.21

Commits

• 9e56cf8 Merge pull request #210 from oasdiff/bump/oasdiff-v1.35.0
• 2e6ea74 test: follow oasdiff v1.35.0 on the changelog count
• 283b116 bump: oasdiff v1.35.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)