AlinsRan opened a new pull request, #13728: URL: https://github.com/apache/apisix/pull/13728
### What Bump `lua-resty-openapi-validator` `1.0.5-1` → `1.0.6-1`. ### Why 1.0.6 drops the transitive `lua-cjson` dependency. That declaration pulled a separate, luarocks-built `cjson.so` into `deps/`, which — because `deps/` precedes OpenResty's `lualib` in `package.cpath` — shadowed the bundled cjson. On arm64 the pulled copy (2.1.0.10) re-encodes empty arrays as invalid JSON (#13593). In OpenResty cjson is always provided by the bundle, so the dependency was redundant to begin with. Upstream diff (api7/lua-resty-openapi-validator v1.0.5...v1.0.6) is packaging-only — it removes the `lua-cjson` line, no code change — so this is a safe bump. The runtime cpath guard in `patch.lua` (from the #13593 fix) stays as defense-in-depth; this bump removes the source that trips it so `deps/` no longer carries a shadowing cjson. Ref #13593 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
