build(deps): bump github.com/getkin/kin-openapi from 0.118.0 to 0.131.0 in /dev-tools (#4920)

* build(deps): bump github.com/getkin/kin-openapi in /dev-tools

Bumps [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) from 0.118.0 to 0.131.0.
- [Release notes](https://github.com/getkin/kin-openapi/releases)
- [Commits](getkin/kin-openapi@v0.118.0...v0.131.0)

---
updated-dependencies:
- dependency-name: github.com/getkin/kin-openapi
  dependency-version: 0.131.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Replace github.com/deepmap/oapi-codegen with github.com/oapi-codegen/oapi-codegen and upgrade

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shaunak Kashyap <ycombinator@gmail.com>

Author: dependabot[bot]

.golangci.yml

@@ -94,8 +94,6 @@ linters:
     gomoddirectives:
       # Allow local `replace` directives. Default is false.
       replace-local: false
-      replace-allow-list:
-        - github.com/deepmap/oapi-codegen
     gomodguard:
       blocked:
         # List of blocked modules.

dev-tools/go.mod

@@ -3,10 +3,10 @@ module github.com/elastic/fleet-server/dev-tools
 go 1.24.0
 
 tool (
-	github.com/deepmap/oapi-codegen/v2/cmd/oapi-codegen
 	github.com/elastic/go-json-schema-generate/cmd/schema-generate
 	github.com/elastic/go-licenser
 	github.com/jstemmer/go-junit-report
+	github.com/oapi-codegen/oapi-codegen/v2/cmd/oapi-codegen
 	go.elastic.co/go-licence-detector
 	golang.org/x/perf/cmd/benchstat
 )
@@ -16,23 +16,27 @@ require github.com/elastic/elastic-agent-libs v0.18.12
 require (
 	github.com/aclements/go-moremath v0.0.0-20210112150236-f10218a38794 // indirect
 	github.com/cyphar/filepath-securejoin v0.2.5 // indirect
-	github.com/deepmap/oapi-codegen/v2 v2.0.0 // indirect
+	github.com/dprotaso/go-yit v0.0.0-20220510233725-9ba8df137936 // indirect
 	github.com/elastic/go-json-schema-generate v0.0.0-20220323152209-ec19b88f6b5e // indirect
 	github.com/elastic/go-licenser v0.4.2 // indirect
 	github.com/elastic/go-ucfg v0.8.5 // indirect
 	github.com/elastic/pkcs8 v1.0.0 // indirect
-	github.com/getkin/kin-openapi v0.118.0 // indirect
-	github.com/go-openapi/jsonpointer v0.19.5 // indirect
-	github.com/go-openapi/swag v0.19.5 // indirect
+	github.com/getkin/kin-openapi v0.131.0 // indirect
+	github.com/go-openapi/jsonpointer v0.21.0 // indirect
+	github.com/go-openapi/swag v0.23.0 // indirect
 	github.com/google/licenseclassifier v0.0.0-20200402202327-879cb1424de0 // indirect
-	github.com/invopop/yaml v0.1.0 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/jstemmer/go-junit-report v1.0.0 // indirect
 	github.com/mailru/easyjson v0.7.7 // indirect
 	github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826 // indirect
-	github.com/perimeterx/marshmallow v1.1.4 // indirect
+	github.com/oapi-codegen/oapi-codegen/v2 v2.4.1 // indirect
+	github.com/oasdiff/yaml v0.0.0-20250309154309-f31be36b4037 // indirect
+	github.com/oasdiff/yaml3 v0.0.0-20250309153720-d2182401db90 // indirect
+	github.com/perimeterx/marshmallow v1.1.5 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/sergi/go-diff v1.1.0 // indirect
+	github.com/speakeasy-api/openapi-overlay v0.9.0 // indirect
+	github.com/vmware-labs/yaml-jsonpath v0.3.2 // indirect
 	go.elastic.co/ecszap v1.0.2 // indirect
 	go.elastic.co/go-licence-detector v0.7.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect