Bump Microsoft.OpenApi from 2.0.0 to 2.3.7

[dependabot]

Updated Microsoft.OpenApi from 2.0.0 to 2.3.7.

Release notes

Sourced from Microsoft.OpenApi's releases.

2.3.7

2.3.7 (2025-10-24)

Bug Fixes

• adds a null value sentinel to enable roundtrip serializations of JsonNode typed properties (337c6eb)
• adds a null value sentinel to enable roundtrip serializations of JsonNode typed properties (63b2b98)
• fixes a bug where yaml null values would end up as a string "null" during roundtrip serialization (6e62de2)
• fixes a bug where yaml null values would end up as a string "null" during roundtrip serialization (994184b)
• YamlConverter adding extra quotes to string values when converting from JSON to YAML (ccfebc8)

Performance Improvements

• do not duplicate nodes when indexing (dbbbf13)
• only initialize map node nodes on demand (bdb5264)
• reduce allocations in mapnode (f58aad2)
• removes the lazy initialization since the node is always enumerated (1c96521)
• switches to lazy instantiation (d3c758b)
• use deep equals for comparison to reduce allocations (6ce3214)

2.3.6

2.3.6 (2025-10-20)

Bug Fixes

• a bug where empty collections would not be serialized for default values (4c4d257)

2.3.5

2.3.5 (2025-10-14)

Bug Fixes

• use settings for terse output in serialization extension methods (246039b)
• use settings for terse output in serialization extension methods (8b91278)

2.3.4

2.3.4 (2025-10-06)

Bug Fixes

• Improve server creation and URL handling logic to maintain port (3e6ee80)
• missing deserialization for header content property in 3.1 and 3.0 (717f154)
• missing deserialization for header content property in 3.1 and 3.0 (0fdfae1)

2.3.3

2.3.3 (2025-10-02)

Bug Fixes

• typo in allowReserved property name for deserialization (1633453)
• typo in allowReserved property name for deserialization (f7e34be)

2.3.2

2.3.2 (2025-09-19)

Bug Fixes

• Fix URL processing in InternalLoad method would not detect the filename/scheme properly in some scenarios (d93689c)
• OpenApiEncoding explode property serialization defaults with form style (ae03eab)

2.3.1

2.3.1 (2025-09-08)

Bug Fixes

• file access for "file" URI scheme with special characters (6dded81)

2.3.0

2.3.0 (2025-08-29)

Features

• adds the detected format as part of the diagnostic (#​2482) (59d7c81)
• adds the detected format to the diagnostics (59d7c81)

2.2.0

2.2.0 (2025-08-25)

Features

• add Validation Rule for path operations to not have a request body (d101fc3)

Bug Fixes

• missing examples when one example is with an empty array. (cb1c496)

2.1.0

2.1.0 (2025-08-20)

Features

• adds a default validation rule for unresolved references (90b3966)

Bug Fixes

• Improve OpenApiWalker performance (a007c03)
• Validate schema property is not null (3326022)

2.0.1

2.0.1 (2025-08-18)

Bug Fixes

• add missing disposable for stream (0c1ccbd)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #7048.