Co-authored-by: ewaostrowska <214632419+ewaostrowska@users.noreply.github.com>

Bumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.8.8 to 0.8.11.
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.8...v0.8.11)

---
updated-dependencies:
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

….5 (#2045)

Bumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.2.2 to 3.2.5.
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.2.2...surefire-3.2.5)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

#2025)

Bumps [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) from 3.6.2 to 3.6.3.
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.6.2...maven-javadoc-plugin-3.6.3)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix(converter): prevent x-nullable loss for shared $ref responses

The convert(vendorExtensions) method mutated the original map when
filtering out x-nullable, x-example, and x-examples extensions.

When multiple endpoints referenced the same response via $ref, the
first conversion removed x-nullable from the shared source object,
causing subsequent conversions to miss it and produce nullable=null.

Create a new map instead of mutating the original to preserve vendor
extensions for all endpoints sharing the same response definition.

* refactor convert method and add test

---------

Co-authored-by: Ewa Ostrowska <ewa.ostrowska@smartbear.com>

Bumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.8.11 to 0.8.14.
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.11...v0.8.14)

---
updated-dependencies:
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Prevent `StackOverflowError` in `ResolverFully`

Add guard to resolve just once to prevent loops/stack overflows.

Issue #1751.

Signed-off-by: thc202 <thc202@gmail.com>

* add schemasInProgress guard to stop cycles during resolving and extend tests

---------

Signed-off-by: thc202 <thc202@gmail.com>
Co-authored-by: Ewa Ostrowska <ewa.ostrowska@smartbear.com>

OpenAPIDereferencer31 is a singleton (via DereferencersFactory) but stored
per-call state in mutable instance fields `openAPI` and `result`. When
multiple threads parse different OpenAPI 3.1 specs concurrently, these
fields get overwritten, causing one parse to return another's result.

Fix: make `openAPI` and `result` local variables in `dereference()` instead
of instance fields, since they are only used within that method.

Also remove the unused `messages` instance field which had the same problem.

Fixes #2293

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: damian-jankowski <damian.jankowski@smartbear.com>

Co-authored-by: ewaostrowska <214632419+ewaostrowska@users.noreply.github.com>