Bump Microsoft.OpenApi from 3.5.3 to 3.5.4

[dependabot]

Updated Microsoft.OpenApi from 3.5.3 to 3.5.4.

Release notes

Sourced from Microsoft.OpenApi's releases.

3.5.4

3.5.4 (2026-05-26)

Bug Fixes

• library: handle circular schema references (b3cd42b)
• library: handle circular schema references (91a989f)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[waldekmastykarz]

@copilot fix this

[Copilot]

@copilot fix this

Fixed in 8da8cc6.

[waldekmastykarz]

@copilot fix this

[Copilot]

@copilot fix this

I’m not seeing any failing checks or open review comments on this PR. What would you like me to change?

[waldekmastykarz]

@copilot resolve conflicts

[Copilot]

@copilot resolve conflicts

Resolved in 264586f.

[waldekmastykarz]

@copilot how come there are no files changed?

[Copilot]

@copilot how come there are no files changed?

Because main already picked up the same dependency updates in 1ea74d2 (Bump Microsoft.OpenApi and Microsoft.OpenApi.YamlReader (#1688)). My follow-up 264586f only merged main into this branch to resolve conflicts, so this branch now matches main and GitHub shows no changed files.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.