* fix: return HTTP 405 when request method mismatch

When a route is correctly matched, but the HTTP method used does not, we
should return an HTTP 405 Method Not Allowed.

However, in our previous implementation, we would always return an HTTP
404 Not Found, which is incorrect.

Instead, we can match on whether we have received an
`ErrMethodNotAllowed` and if so, return the correct HTTP 405.


* chore: remove references to Swagger

As it's been OpenAPI for a while.

Related: https://togithub.com/oapi-codegen/oapi-codegen/issues/672

* style: use `any` over `interface{}`

* chore: use new organization URL

* chore: remove outdated licensing comments

The code at the time was still copyright to DeepMap, but since the move,
is updated to the oapi-codegen contributors.

* docs: add package documentation

* docs: improve comments for exported types

* docs: add example test

As a means to provide a full example of usage, we can use a testable
example.

* docs: rewrite README


* feat: allow not validating `Servers` at all

As some folks may not want to perform the workaround of having to mangle
their `spec.Servers`, as well as removing potentially noisy log lines.

* build: build against recent Go versions

* build: indicate which versions of Go are supported vs "supported"

But we won't really indicate /what/ "supported" means at this time.

Add a Prefix field to Options that strips a path prefix before OpenAPI
validation. This allows APIs mounted under a sub-path (e.g. "/api") to
validate correctly against specs whose paths don't include the prefix.

The request is cloned before modification so downstream handlers still
see the original path.

Closes #11
Supersedes #15

Co-authored-by: GreyXor <greyxor@protonmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

gorillamux uses UseEncodedPath(), so FindRoute() returns path parameters
in percent-encoded form. openapi3filter expects decoded values, which
causes validation of constraints like maxLength and pattern to fail on
encoded input (e.g. %2B is 3 chars but decodes to 1 char).

Unescape path parameters after route matching and before passing them
to openapi3filter.

Fixes #17
Supersedes #18

Co-authored-by: Florent CHAUVEAU <florentch@pm.me>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

- Update go.mod to require Go 1.24.4
- Update direct dependencies: kin-openapi to v0.134.0, echo/v4 to
  v4.15.1, testify to v1.11.1
- Replace individual CI workflow files (generate, lint, tidy) with
  the shared oapi-codegen/actions reusable workflow
- Add Renovate Go 1.24 constraint to prevent dependency updates
  requiring newer Go versions

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Update Go to 1.25 and all related dependencies, so that we can
use an OpenAPI 3.1 version of kin-openapi.

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>