# oapi-codegen Published articles for oapi-codegen. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Week Notes 26#25 DevFeed: [Week Notes 26#25]() Original publisher: [Read original article]() Author: Jamie Tanna Published: 2026-06-21T22:28:17Z Content type: article Language: en Sources: [Jamie Tanna]() Topics: [OpenAPI Specification](), [Code generation](), [Artificial Intelligence]() Tags: [ai](), [codegen](), [go](), [oapi-codegen](), [openapi](), [priority](), [product](), [week-notes]() ### AI overview Personal week notes covering work on rootly-go and oapi-codegen, initial OpenAPI 3.1 support, backlog evaluation, an AI image-summary feature, travel, games, reading, and television. ### Source excerpt Enjoyed the last of the Selkirk Bannock A busy week catching up, dealing with a bit of fallout while I was OOO, picking up a few high-priority bits and doing some product-y evaluation of our backlog Some more good work on rootly-go this week oapi-codegen's now - on main - got initial OpenAPI 3.1 support, which we'll release in a few weeks One night, Morph was wailing at something - it turns out another cat was in one of our flower beds, and didn't want to leave, but don't worry, Cookie helped 🀭 Bit weird that Blink is now doing an AI summary of the image - but also good to now be getting a live image while there's a recording, which is something To get us used to hiring a car for some travel in a few weeks, did a 24 hour car rental of an automatic car, and was worrying how much we preferred it compared to our manual πŸ˜… Had a nice lunch with Anna's parents on Saturday A toastier end to the week, and it's gonna be quite warm over the next few days Playing: A lot of Clair Obscur: Expedition 33 And now Carol's finished Act 2, we can talk about it some more πŸ€“ (as usual) Kingshot Unfortunately didn't win KvK but 36 overall is pretty good! A bit of Apex Legends Reading: Tiamat's Wrath Inspired: How To Create Tech Products Customers Love Watched: (No The Expanse (Season 4)) Succession (Season 4) Star Trek: Beyond (2016) Veep (Series 1) Veep (Series 2) ## Week Notes 26#20 DevFeed: [Week Notes 26#20]() Original publisher: [Read original article]() Author: Jamie Tanna Published: 2026-05-17T20:17:22Z Content type: opinion Language: en Sources: [Jamie Tanna]() Topics: [renovate](), [Open Source](), [GitHub](), [npm](), [Job](), [Code generation]() Tags: [codegen](), [developer](), [github](), [job](), [npm](), [oapi-codegen](), [open-source](), [renovate](), [senior-developer](), [week-notes]() ### AI overview A personal weekly note covering a changed job title, work as a Senior Developer and Open Source Project Maintainer, Renovate project leadership, npm release support issues, webinar preparation, open-source writing, and work on oapi-codegen and rootly-go, alongside personal activities and media. ### Source excerpt Got my job title changed at work, covering the role I do have and the work I'm doing (but no update to /salary/) which is cool! It's also a lot easier to say: -Senior Developer and Open Source Project Maintainer +Renovate Project Lead Another busy week with a lot of stuff going on, but some good bits done Preparing for a webinar I'm doing next-next week Still waiting for GitHub/npm support to help us unpublish a number of old npm releases so we can publish new package versions for Renovate Had a nice catch-up with Ellie and Linh Another episode of Fallthrough - still many things left unsaid! In Kingshot, excited for KvK against 521 (my old server) and hoping there's not much drama πŸ˜… Finally wrote up why Libyears is a metric to be careful about Wayne came to patch up where the beasties have been 🐿 Did some bits on oapi-codegen and rootly-go this weekend Wrote a slightly clickbait post about the rise of using "open-source" - I'm still not super happy with the wording of the title as it feels a little clunky The Hacker News discussion was pretty standard for them, and was fun to get the thread flagged because of one of the commenters 🫠 Cookie had great fun time when she found a squirrel hiding behind the compost bin and getting very close to catching it - I stopped her and tried to get the squirrel to run away, but it ended up running towards me/through my legs, but decided to start climbing on me 😳😳😳 I yelped a little and it jumped off, and I got Cookie into the conservatory so it could try and get free. She spent a lot of the rest of the day being very detective-like in trying to find where it was Had a nice dinner at Myeong Dong - albeit it wasn't quite as DIY as when I'd been to a Korean BBQ place in London - and a very sweet Cookie Dough at Creams afterwards Booked flights for our holiday πŸ‘€ Reading: Persepolis Rising Watched: The Expanse (Season 4) Succession (Season 2) Succession (Season 3) Star Trek: Into Darkness (2013) Star Trek: Beyond (2016) Saturday Night ## Automagically updating \`oapi-codegen\` JSON Schema version bumps with Renovate DevFeed: [Automagically updating \`oapi-codegen\` JSON Schema version bumps with Renovate]() Original publisher: [Read original article]() Author: Jamie Tanna Published: 2026-03-01T17:53:32Z Content type: tutorial Language: en Sources: [Jamie Tanna]() Topics: [JSON Schema](), [renovate](), [configuration](), [version]() Tags: [blogumentation](), [config](), [configuration](), [json-schema](), [oapi-codegen](), [renovate](), [schema](), [version](), [yaml]() ### AI overview A tutorial showing how to use Renovate Custom Managers to automatically update pinned oapi-codegen JSON Schema versions in configuration files. It provides a regex-based manager configuration and an alternative preset. ### Source excerpt A number of releases ago, I introduced a JSON Schema for oapi-codegen's configuration file format, to aid with editor-driven autocomplete. It's best if you pin this, so you're not trying to use features that don't yet exist, like so: # yaml-language-server: $schema=https://raw.githubusercontent.com/oapi-codegen/oapi-codegen/v2.6.0/configuration-schema.json package: api # ... But if so, how do you update that? Do you need to do it manually after each release? Y'all will be unsurprised to know that you can do this in a straightforward means, using Renovate. Using the following renovate.json with a Custom Manager: { "$schema": "https://docs.renovatebot.com/renovate-schema.json", "customManagers": [ { "customType": "regex", "managerFilePatterns": [ "**/config.yaml" ], "matchStrings": [ "# yaml-language-server: \\$schema=https://raw.githubusercontent.com/oapi-codegen/oapi-codegen/(?[^/]+)/configuration-schema.json" ], "depNameTemplate": "github.com/oapi-codegen/oapi-codegen/v2", "datasourceTemplate": "go" } ] } This will now detect the version accordingly, and new version bumps to oapi-codegen will also bump in the configuration file - test it out! Alternatively, you can use our pre-built preset: { "$schema": "https://docs.renovatebot.com/renovate-schema.json", "extends": [ "github>oapi-codegen/renovate-config:user" ] } ## Lessons learned from \`oapi-codegen\`'s time in the GitHub Secure Open Source Fund DevFeed: [Lessons learned from \`oapi-codegen\`'s time in the GitHub Secure Open Source Fund]() Original publisher: [Read original article]() Author: Jamie Tanna Published: 2026-02-17T19:16:50Z Content type: article Language: en Sources: [Jamie Tanna]() Topics: [OpenAPI Specification](), [Code generation](), [Go Language](), [Security](), [Open Source](), [GitHub]() Tags: [codegen](), [github](), [go](), [maintenance](), [oapi-codegen](), [openapi-specification](), [secure-open-source](), [sensitive-data](), [source](), [supply-chain-security]() ### AI overview A reflection on oapi-codegen's participation in GitHub's Secure Open Source Fund. It discusses securing the OpenAPI-based Go code generator, maintaining generated code and related projects, and expanding the maintainer pool safely. ### Source excerpt As noted in GitHub's post, oapi-codegen was one of the projects taking part in the third GitHub Secure Open Source Fund session. I'd like to take a moment to reflect on the program, and some learnings I've taken from it. One of the quotes I shared at the end of the program summed up my time: Having time dedicated to following best practices has been invaluableβ˜†(well, $10k) Why did we join the fund? oapi-codegen is a project that takes an OpenAPI specification and generates Go code for either interacting with that API via an autogenerated client, or generates scaffolding for a number of HTTP servers and web frameworks to reduce the implementation burden, as well as generating types for API request/responses. Given the project is in a fairly privileged position - interacting with every HTTP request/response on either client or server-side, and likely exposed to sensitive data and credentials - securing the project is very important. As a code generator, oapi-codegen can generate a fair bit of code for you to commit to your project. But does everyone review the generated code? Hopefully yes 🫣 But given we can't guarantee it, we want to make sure that nothing dodgy could land in folks' codebases. Extending the maintainer pool On top of this, for the last ~2 years, I've been effectively maintaining oapi-codegen on my own. As I've written about a couple of times, maintaining a large project like this is fairly time consuming and difficult, especially if it's only you. Additionally, oapi-codegen isn't a single project, and other child projects, such as middleware for request/response validation, or conversions between types at runtime, also need maintenance. The project is sufficiently complex, led by user examples, and has a lot of usage that can make it hard to maintain for $0/month. Over the last few years I've been very appreciative of a few companies sponsoring the work, but the project requires more hours of work, especially given the many large companies using it, b