refactor: decouple mongodb driver from root module (#222)

* refactor: decouple mongodb driver from root module

* fixes #91
* relates to #191

Drop go.mongodb.org/mongo-driver/v2 from the root go.mod by introducing
an internal minimal BSON codec (bsonlite) that is wire-compatible with
mongo-driver v2.5.0. Users who want the real driver can opt in with a
blank import: `import _ "github.com/go-openapi/strfmt/enable/mongodb"`.

- internal/bsonlite: minimal BSON encoder/decoder for string, DateTime,
  ObjectID document types (no external dependencies)
- enable/mongodb: separate Go module that replaces the lite codec with
  the real mongo-driver via init()
- ObjectId type changed from bsonprim.ObjectID to [12]byte (same
  underlying type, backward compatible)
- All BSON marshal/unmarshal methods rewritten to use bsonlite.C interface
- Convert to mono-repo: go.work, CI workflows switched to monorepo
  variants (ci-workflows v0.2.13), dependabot scans all modules
- Integration tests verify both codec paths against real MongoDB

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>

* fix(ci): use stable Go for integration tests

The go.mod directive (go 1.24) causes setup-go to install go1.24.0,
which triggers a panic in testify/v2 goroutine leak detector init().
Use go-version: stable (go1.26) until testify is patched.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Frederic BIDON <fredbi@yahoo.com>

---------

Signed-off-by: Frederic BIDON <fredbi@yahoo.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: fredbi

.github/dependabot.yaml

@@ -1,7 +1,8 @@
 version: 2
 updates:
   - package-ecosystem: "github-actions"
-    directory: "/"
+    directories:
+      - "**/*"
     schedule:
       interval: "weekly"
       day: "friday"
@@ -27,7 +28,8 @@ updates:
     # 2. golang.org-dependencies are auto-merged
     # 3. go-openapi patch updates are auto-merged. Minor/major version updates require a manual merge.
     # 4. other dependencies require a manual merge
-    directory: "/"
+    directories:
+      - "**/*"
     schedule:
       interval: "weekly"
       day: "friday"

.github/workflows/auto-merge.yml

@@ -11,5 +11,5 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
-    uses: go-openapi/ci-workflows/.github/workflows/auto-merge.yml@435746a4b72b06b6b6989c309fd2ad8150dbae5a # v0.2.11
+    uses: go-openapi/ci-workflows/.github/workflows/auto-merge.yml@34a5baa33361844b1d2c70cd4548e3cea83529d9 # v0.2.13
     secrets: inherit

.github/workflows/bump-release.yml

@@ -6,21 +6,15 @@ permissions:
 on:
   workflow_dispatch:
     inputs:
-      bump-patch:
-        description: Bump a patch version release
-        type: boolean
+      bump-type:
+        description: Type of bump (patch, minor, major)
+        type: choice
+        options:
+        - patch
+        - minor
+        - major
+        default: patch
         required: false
-        default: true
-      bump-minor:
-        description: Bump a minor version release
-        type: boolean
-        required: false
-        default: false
-      bump-major:
-        description: Bump a major version release
-        type: boolean
-        required: false
-        default: false
       tag-message-title:
         description: Tag message title to prepend to the release notes
         required: false
@@ -36,11 +30,10 @@ jobs:
   bump-release:
     permissions:
       contents: write
-    uses: go-openapi/ci-workflows/.github/workflows/bump-release.yml@435746a4b72b06b6b6989c309fd2ad8150dbae5a # v0.2.11
+      pull-requests: write
+    uses: go-openapi/ci-workflows/.github/workflows/bump-release-monorepo.yml@34a5baa33361844b1d2c70cd4548e3cea83529d9 # v0.2.13
     with:
-      bump-patch: ${{ inputs.bump-patch }}
-      bump-minor: ${{ inputs.bump-minor }}
-      bump-major: ${{ inputs.bump-major }}
+      bump-type: ${{ inputs.bump-type }}
       tag-message-title: ${{ inputs.tag-message-title }}
       tag-message-body: ${{ inputs.tag-message-body }}
     secrets: inherit

.github/workflows/codeql.yml

@@ -18,5 +18,5 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: go-openapi/ci-workflows/.github/workflows/codeql.yml@435746a4b72b06b6b6989c309fd2ad8150dbae5a # v0.2.11
+    uses: go-openapi/ci-workflows/.github/workflows/codeql.yml@34a5baa33361844b1d2c70cd4548e3cea83529d9 # v0.2.13
     secrets: inherit

.github/workflows/contributors.yml

@@ -14,5 +14,5 @@ jobs:
     permissions:
       pull-requests: write
       contents: write
-    uses: go-openapi/ci-workflows/.github/workflows/contributors.yml@435746a4b72b06b6b6989c309fd2ad8150dbae5a # v0.2.11
+    uses: go-openapi/ci-workflows/.github/workflows/contributors.yml@34a5baa33361844b1d2c70cd4548e3cea83529d9 # v0.2.13
     secrets: inherit

.github/workflows/go-test.yml

@@ -13,5 +13,5 @@ on:
 
 jobs:
   test:
-    uses: go-openapi/ci-workflows/.github/workflows/go-test.yml@435746a4b72b06b6b6989c309fd2ad8150dbae5a # v0.2.11
+    uses: go-openapi/ci-workflows/.github/workflows/go-test-monorepo.yml@34a5baa33361844b1d2c70cd4548e3cea83529d9 # v0.2.13
     secrets: inherit

.github/workflows/integration-test.yml

@@ -53,7 +53,7 @@ jobs:
 
       - uses: actions/setup-go@v5
         with:
-          go-version-file: go.mod
+          go-version: stable
 
       - name: Run integration tests
         working-directory: internal/testintegration

.github/workflows/scanner.yml

@@ -15,5 +15,5 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: go-openapi/ci-workflows/.github/workflows/scanner.yml@435746a4b72b06b6b6989c309fd2ad8150dbae5a # V0.2.11
+    uses: go-openapi/ci-workflows/.github/workflows/scanner.yml@34a5baa33361844b1d2c70cd4548e3cea83529d9 # v0.2.13
     secrets: inherit

.github/workflows/tag-release.yml

@@ -13,7 +13,8 @@ jobs:
     name: Create release
     permissions:
       contents: write
-    uses: go-openapi/ci-workflows/.github/workflows/release.yml@435746a4b72b06b6b6989c309fd2ad8150dbae5a # v0.2.11
+    uses: go-openapi/ci-workflows/.github/workflows/release.yml@34a5baa33361844b1d2c70cd4548e3cea83529d9 # v0.2.13
     with:
       tag: ${{ github.ref_name }}
+      is-monorepo: true
     secrets: inherit

README.md

@@ -24,6 +24,13 @@ You may join the discord community by clicking the invite link on the discord ba
 
 Or join our Slack channel: [![Slack Channel][slack-logo]![slack-badge]][slack-url]
 
+* **2026-03-07** : v0.26.0 **dropped dependency to the mongodb driver**
+  * mongodb users can still use this package without any change
+  * however, we have frozen the back-compatible support for mongodb driver at v2.5.0
+  * users who want to keep-up with future evolutions (possibly incompatible) of this driver
+    can do so by adding a blank import in their program: `import _ "github.com/go-openapi/strfmt/enable/mongodb"`.
+    This will switch the behavior to the actual driver, which remains regularly updated as an independent module.
+
 ## Status
 
 API is stable.
@@ -132,8 +139,9 @@ List of defined types:
 All format types implement the `database/sql` interfaces `sql.Scanner` and `driver.Valuer`,
 so they work out of the box with Go's standard `database/sql` package and any SQL driver.
 
-All format types also implement BSON marshaling/unmarshaling for use with MongoDB
-(via [`go.mongodb.org/mongo-driver/v2`](https://pkg.go.dev/go.mongodb.org/mongo-driver/v2)).
+All format types also implement BSON marshaling/unmarshaling for use with MongoDB.
+By default, a built-in minimal codec is used (compatible with mongo-driver v2.5.0).
+For full driver support, add `import _ "github.com/go-openapi/strfmt/enable/mongodb"`.
 
 > **MySQL / MariaDB caveat for `DateTime`:**
 > The `go-sql-driver/mysql` driver has hard-coded handling for `time.Time` but does not