Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

…ies with 3 updates

Bumps the go-openapi-dependencies group with 2 updates in the / directory: [github.com/go-openapi/strfmt](https://github.com/go-openapi/strfmt) and [github.com/go-openapi/testify/enable/yaml/v2](https://github.com/go-openapi/testify).
Bumps the go-openapi-dependencies group with 2 updates in the /client-middleware/opentracing directory: [github.com/go-openapi/strfmt](https://github.com/go-openapi/strfmt) and [github.com/go-openapi/testify/v2](https://github.com/go-openapi/testify).


Updates `github.com/go-openapi/strfmt` from 0.26.1 to 0.26.2
- [Release notes](https://github.com/go-openapi/strfmt/releases)
- [Commits](go-openapi/strfmt@v0.26.1...v0.26.2)

Updates `github.com/go-openapi/testify/enable/yaml/v2` from 2.4.2 to 2.5.0
- [Release notes](https://github.com/go-openapi/testify/releases)
- [Commits](go-openapi/testify@v2.4.2...v2.5.0)

Updates `github.com/go-openapi/testify/v2` from 2.4.2 to 2.5.0
- [Release notes](https://github.com/go-openapi/testify/releases)
- [Commits](go-openapi/testify@v2.4.2...v2.5.0)

Updates `github.com/go-openapi/strfmt` from 0.26.1 to 0.26.2
- [Release notes](https://github.com/go-openapi/strfmt/releases)
- [Commits](go-openapi/strfmt@v0.26.1...v0.26.2)

Updates `github.com/go-openapi/testify/v2` from 2.4.2 to 2.5.0
- [Release notes](https://github.com/go-openapi/testify/releases)
- [Commits](go-openapi/testify@v2.4.2...v2.5.0)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/strfmt
  dependency-version: 0.26.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/testify/enable/yaml/v2
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/testify/v2
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/strfmt
  dependency-version: 0.26.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/testify/v2
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-openapi-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>

* fix: handle literal colons in URL paths for denco router

The denco router uses ':' as a parameter delimiter, but ':' is a valid
character in URL path segments per RFC 3986. Routes like
'/allow/{serverName}/tokenlist:add' were being misinterpreted.

Added escapeLiteralColons() to encode literal ':' as '%3A' before the
router's parameter detection runs. Applied in AddRoute(), Lookup(), and
OtherMethods().

Fixes #352

Signed-off-by: KuaaMU <[email protected]>

* ci: re-trigger Windows artifact upload

Signed-off-by: KuaaMU <[email protected]>

---------

Signed-off-by: KuaaMU <[email protected]>

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Signed-off-by: Frédéric BIDON <[email protected]>

* fixes #147

Signed-off-by: Frédéric BIDON <[email protected]>

`consumes` entries that carry MIME parameters (e.g. `text/plain;charset=utf-8`)
were rejecting all client content types because validation compared the bare
parsed media type against the raw allowed string. Parse both sides and accept
when the bare types match and every client parameter is present on the allowed
entry with the same value (allowed entry may carry extra parameters; an entry
without parameters accepts any).

Fixes #136

Signed-off-by: Frédéric BIDON <[email protected]>
Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>

This concerns dodgy status code 451, now realigned to its current
definitions.

* fixes #122

Signed-off-by: Frédéric BIDON <[email protected]>

…428)

When an operation advertises both multipart/form-data and
application/x-www-form-urlencoded in `consumes`, the runtime now prefers
multipart regardless of the order produced by codegen. This avoids silently
falling into the URL-encoded path (which doesn't stream and drops per-file
Content-Type) just because it happened to be listed first.

When the caller does explicitly select application/x-www-form-urlencoded
(e.g. via go-swagger's `WithContentType` option from go-swagger/go-swagger#3042),
file fields are now properly URL-encoded as form values instead of producing a
multipart body advertised under a urlencoded Content-Type. Removed the
unreachable / non-conformant branch in mangleContentType that emitted
"application/x-www-form-urlencoded; boundary=...".

Fixes #286

Signed-off-by: Frédéric BIDON <[email protected]>
Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>