From 4e1f96a7165eff645fdcc924d9a3d738c6a3b6c6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 7 Aug 2026 01:29:42 +0300
Subject: [PATCH] build(deps): bump github.com/danielgtaylor/huma/v2 from
 2.39.0 to 2.39.1 (#1489)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[github.com/danielgtaylor/huma/v2](https://github.com/danielgtaylor/huma)
from 2.39.0 to 2.39.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/danielgtaylor/huma/releases">github.com/danielgtaylor/huma/v2's
releases</a>.</em></p>
<blockquote>
<h1>v2.39.1</h1>
<h2>Overview</h2>
<p>A patch release: correctness fixes for resolvers, validation, and
response handling, plus a dependency refresh.</p>
<h3>Response Status Visible to Middleware Again</h3>
<p><code>WithContext</code> context propagation in v2.39.0 copied the
response status by value, so middleware that called
<code>WithContext</code> and then read <code>Status()</code> after
<code>next()</code> always saw <code>0</code> instead of the status the
handler set, breaking access logging and telemetry. The status is now
shared by every context copy across all adapters, restoring the pre-2.39
invariant while keeping context propagation intact. (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1081">#1081</a>)</p>
<h3>Resolvers &amp; Defaults in Arrays and Maps</h3>
<ul>
<li>Nested resolvers now run for fixed-size arrays
(<code>[2]Item</code>), not just slices (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1076">#1076</a>)</li>
<li>A resolver on a named collection type (e.g. <code>type Coords
[2]float64</code>) no longer panics, and is no longer conflated with a
resolver on its element type, which previously ran the element's
resolver twice and the collection's never (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1082">#1082</a>)</li>
<li>Values reached through a map are now written back after being
walked, so applying a default no longer panics with <code>reflect:
reflect.Value.Set using unaddressable value</code> and resolver
mutations are no longer silently discarded (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1082">#1082</a>)</li>
</ul>
<h3>Stricter <code>email</code> and <code>uri</code> Formats</h3>
<p>Validation for two string formats is tighter, so payloads that
previously passed may now return <code>422</code>:</p>
<ul>
<li><code>email</code> / <code>idn-email</code> accept an addr-spec
only; full mailbox forms with a display name (<code>Name
&lt;user@example.com&gt;</code>) are rejected</li>
<li><code>uri</code> / <code>iri</code> require an absolute URI with a
non-empty scheme, while relative references remain valid under
<code>uri-reference</code> / <code>iri-reference</code> (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1068">#1068</a>)</li>
</ul>
<h3>Validation Robustness</h3>
<ul>
<li>An unresolvable schema <code>$ref</code> during
<code>Validate</code> now reports <code>expected schema $ref to resolve:
...</code> instead of panicking on a nil dereference, covering
discriminators and <code>map[string]any</code> /
<code>map[any]any</code> values (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1065">#1065</a>)</li>
<li>Named numeric slice parameters (e.g. <code>type IDs []int64</code>)
are built with their declared element type and validated with item,
length, and uniqueness constraints intact (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1074">#1074</a>)</li>
</ul>
<h2>Other Fixes</h2>
<ul>
<li>Resolver errors that wrap a <code>HeadersError</code> now contribute
their headers to the response, matching the handler error path (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1070">#1070</a>)</li>
<li>A nil interface response body no longer panics in the schema link
transformer (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1072">#1072</a>)</li>
<li>Dependencies updated (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1066">#1066</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>fix: do not panic on unresolved schema $ref during Validate by <a
href="https://github.com/baiyuxi930826"><code>@​baiyuxi930826</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1065">danielgtaylor/huma#1065</a></li>
<li>chore: update dependencies by <a
href="https://github.com/wolveix"><code>@​wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1066">danielgtaylor/huma#1066</a></li>
<li>fix: tighten format email and uri validation by <a
href="https://github.com/baiyuxi930826"><code>@​baiyuxi930826</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1068">danielgtaylor/huma#1068</a></li>
<li>fix: preserve wrapped resolver error metadata by <a
href="https://github.com/ggmolly"><code>@​ggmolly</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1070">danielgtaylor/huma#1070</a></li>
<li>fix: handle nil interface response bodies by <a
href="https://github.com/ggmolly"><code>@​ggmolly</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1072">danielgtaylor/huma#1072</a></li>
<li>fix: parse named numeric slice parameters by <a
href="https://github.com/ggmolly"><code>@​ggmolly</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1074">danielgtaylor/huma#1074</a></li>
<li>fix: share response status across WithContext copies by <a
href="https://github.com/wolveix"><code>@​wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1081">danielgtaylor/huma#1081</a></li>
<li>fix: run nested resolvers in fixed arrays by <a
href="https://github.com/ggmolly"><code>@​ggmolly</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1076">danielgtaylor/huma#1076</a></li>
<li>fix: distinguish collection and element matches when walking input
by <a href="https://github.com/wolveix"><code>@​wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1082">danielgtaylor/huma#1082</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/baiyuxi930826"><code>@​baiyuxi930826</code></a>
made their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1065">danielgtaylor/huma#1065</a></li>
<li><a href="https://github.com/ggmolly"><code>@​ggmolly</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1070">danielgtaylor/huma#1070</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/danielgtaylor/huma/compare/v2.39.0...v2.39.1">https://github.com/danielgtaylor/huma/compare/v2.39.0...v2.39.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/danielgtaylor/huma/commit/198225eaac0c8be4aaa1962d5a9a075d3a6fd062"><code>198225e</code></a>
fix: distinguish collection and element matches when walking input (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1082">#1082</a>)</li>
<li><a
href="https://github.com/danielgtaylor/huma/commit/5961f0a01d593638f7f67ebb7c2f8d465d831e03"><code>5961f0a</code></a>
fix: run nested resolvers in fixed arrays (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1076">#1076</a>)</li>
<li><a
href="https://github.com/danielgtaylor/huma/commit/85aad8ffbd1b0dc9670848310b47439e32a24d61"><code>85aad8f</code></a>
fix: share response status across WithContext copies (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1081">#1081</a>)</li>
<li><a
href="https://github.com/danielgtaylor/huma/commit/22a3cb0100462fff045d6d115eb5781887c0f561"><code>22a3cb0</code></a>
fix: parse named numeric slice parameters (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1074">#1074</a>)</li>
<li><a
href="https://github.com/danielgtaylor/huma/commit/ac9959c059bdf49ccfc837bc6c30329e0ccdf28e"><code>ac9959c</code></a>
fix: handle nil interface response bodies (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1072">#1072</a>)</li>
<li><a
href="https://github.com/danielgtaylor/huma/commit/b659c7472cb60dbf2535f5d23d1e7e63d178b31b"><code>b659c74</code></a>
fix: preserve wrapped resolver error metadata (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1070">#1070</a>)</li>
<li><a
href="https://github.com/danielgtaylor/huma/commit/14aea2fe3d963b34701b6ab449ac32736063a6e2"><code>14aea2f</code></a>
fix: tighten format email and uri validation (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1068">#1068</a>)</li>
<li><a
href="https://github.com/danielgtaylor/huma/commit/bba0d542c40579a89e3542eae063b980a1718072"><code>bba0d54</code></a>
chore: update dependencies (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1066">#1066</a>)</li>
<li><a
href="https://github.com/danielgtaylor/huma/commit/e114668342030691b884c9e37df9bcd6e7583d40"><code>e114668</code></a>
fix: do not panic on unresolved schema $ref during Validate (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1065">#1065</a>)</li>
<li>See full diff in <a
href="https://github.com/danielgtaylor/huma/compare/v2.39.0...v2.39.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/danielgtaylor/huma/v2&package-manager=go_modules&previous-version=2.39.0&new-version=2.39.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/go.mod b/go.mod
index 74c327a..1fc7e8a 100644
--- a/go.mod
+++ b/go.mod
@@ -8,7 +8,7 @@ require (
 	github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.5.0
 	github.com/caarlos0/env/v11 v11.4.1
 	github.com/coreos/go-oidc/v3 v3.20.0
-	github.com/danielgtaylor/huma/v2 v2.39.0
+	github.com/danielgtaylor/huma/v2 v2.39.1
 	github.com/golang-jwt/jwt/v5 v5.3.1
 	github.com/google/go-containerregistry v0.21.8
 	github.com/jackc/pgx/v5 v5.10.0
diff --git a/go.sum b/go.sum
index 8bb4c79..4b4ab93 100644
--- a/go.sum
+++ b/go.sum
@@ -38,8 +38,8 @@ github.com/cncf/xds/go v0.0.0-20260202195803-dba9d589def2 h1:aBangftG7EVZoUb69Os
 github.com/cncf/xds/go v0.0.0-20260202195803-dba9d589def2/go.mod h1:qwXFYgsP6T7XnJtbKlf1HP8AjxZZyzxMmc+Lq5GjlU4=
 github.com/coreos/go-oidc/v3 v3.20.0 h1:EtE0WIBHk03N+DqGkY4+UONzzZHk7amKt6IyNd7OsZE=
 github.com/coreos/go-oidc/v3 v3.20.0/go.mod h1:DYCf24+ncYi+XkIH97GY1+dqoRlbaSI26KVTCI9SrY4=
-github.com/danielgtaylor/huma/v2 v2.39.0 h1:YiXbzhJBSeQVkKbhn8adZR48Ei4XFx/K6jShQ3O92qU=
-github.com/danielgtaylor/huma/v2 v2.39.0/go.mod h1:pGstQdMhQnP9ZBnrqPRb9goqOWs1HU1uQewKWmkJOAY=
+github.com/danielgtaylor/huma/v2 v2.39.1 h1:0kwF4ltQoYZ+IU55VPy+BcGekzgF44R64daTGde1H+g=
+github.com/danielgtaylor/huma/v2 v2.39.1/go.mod h1:zcnQ38duIJ3VUHwFaBoZ6x8T+KN/mr33oyqxcj0HTug=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
@@ -56,8 +56,8 @@ github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2
 github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=
 github.com/fxamacker/cbor/v2 v2.9.2 h1:X4Ksno9+x3cz0TZv69ec1hxP/+tymuR8PXQJyDwfh78=
 github.com/fxamacker/cbor/v2 v2.9.2/go.mod h1:vM4b+DJCtHn+zz7h3FFp/hDAI9WNWCsZj23V5ytsSxQ=
-github.com/go-chi/chi/v5 v5.3.0 h1:halUjDxhshgXHMrao5bB8eNBXo/rnzwr8m5m36glehM=
-github.com/go-chi/chi/v5 v5.3.0/go.mod h1:R+tYY2hNuVUUjxoPtqUdgBqevM9s9njzkTLutVsOCto=
+github.com/go-chi/chi/v5 v5.3.1 h1:3j4HZLGZQ3JpMCrPJF/Jl3mYJfWLKBfNJ6quurUGCf8=
+github.com/go-chi/chi/v5 v5.3.1/go.mod h1:R+tYY2hNuVUUjxoPtqUdgBqevM9s9njzkTLutVsOCto=
 github.com/go-jose/go-jose/v4 v4.1.4 h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA=
 github.com/go-jose/go-jose/v4 v4.1.4/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08=
 github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=