[dependabot]

Bumps github.com/go-chi/chi/v5 from 5.3.1 to 5.4.0.

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.4.0

What's Changed

• Improve godoc: add links and titles by @​dolmen in go-chi/chi#1027
• Add Clone method to Context by @​VojtechVitek in go-chi/chi#1157
• middleware: ContentCharset should skip requests without a body by @​VojtechVitek in go-chi/chi#1158
• Update compress middleware support Brotli support documentation by @​sm3142 in go-chi/chi#1007
• fix: panic on Mount() when a router is mounted onto itself by @​sk-sanjay01 in go-chi/chi#1159
• test(middleware): Improves test coverage by @​nszilard in go-chi/chi#700
• Remove superfluous import aliases by @​JRaspass in go-chi/chi#1166
• Bump minimum Go to 1.24, use b.Loop() by @​JRaspass in go-chi/chi#1164
• Use slices.Backward where appropriate by @​JRaspass in go-chi/chi#1165
• Replace "interface{}" with "any" by @​JRaspass in go-chi/chi#1167
• Simplify chi.URLParam, call chi.URLParamFromCtx by @​JRaspass in go-chi/chi#1168
• middleware: record response status when flushing by @​jakezwang in go-chi/chi#1174
• middleware: honor Discard when flushing by @​LeulTew in go-chi/chi#1185
• README: point middleware doc links to chi/v5 by @​VojtechVitek in go-chi/chi#1196
• middleware: treat RemoteAddr as the rightmost hop in ClientIPFrom* by @​VojtechVitek in go-chi/chi#1214
  • Fixes GHSA-j6qf-3m9c-vwj3

New Contributors

• @​dolmen made their first contribution in go-chi/chi#1027
• @​sm3142 made their first contribution in go-chi/chi#1007
• @​sk-sanjay01 made their first contribution in go-chi/chi#1159
• @​nszilard made their first contribution in go-chi/chi#700
• @​jakezwang made their first contribution in go-chi/chi#1174
• @​LeulTew made their first contribution in go-chi/chi#1185

Full Changelog: go-chi/chi@v5.3.2...v5.4.0

v5.3.2

What's Changed

• feat(middleware): add text/markdown, text/csv, text/vtt to default compressible types by @​VojtechVitek in go-chi/chi#1151
• docs: deployment recipe for middleware.ClientIPFromXFFTrustedProxies() by @​VojtechVitek in go-chi/chi#1111
• fix: don't drop handlers that collide with a Mount()/Route() pattern by @​VojtechVitek in go-chi/chi#1148
• Don't duplicate methods in Allow: header for 405 responses by @​flimzy in go-chi/chi#1029
• fix(middleware): reject catch-all compress wildcards by @​VojtechVitek in go-chi/chi#1156
  • middleware.NewCompressor(level, "/*") never worked and silently compressed nothing. Instead of turning it into a compress-everything catch-all (as proposed in go-chi/chi#868 and go-chi/chi#1121), we decided to reject both "/" and "/*" at construction and panic. Compressing every response wastes CPU on already-compressed types (zip, jpeg, png), which is why the middleware keeps a curated default list. Users should pass explicit content types.

Full Changelog: go-chi/chi@v5.3.1...v5.3.2

Commits

• 7f9b744 middleware: treat RemoteAddr as the rightmost hop in ClientIPFrom* (#1214)
• 167e1e3 README: point middleware doc links to chi/v5 (#1196)
• 3d1777a middleware: honor Discard when flushing (#1185)
• b1c9ab4 middleware: record response status when flushing (#1174)
• ae6be74 Simplify chi.URLParam, call chi.URLParamFromCtx (#1168)
• 50ef4e4 Replace "interface{}" with "any" (#1167)
• 77074b3 Use slices.Backward where appropriate (#1165)
• 756fcb8 Bump minimum Go to 1.24, use b.Loop() (#1164)
• 5ac7a82 Remove superfluous import aliases (#1166)
• 36611d2 test(middleware): Improves test coverage (#700)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: f25225c3-e61f-4e9b-91df-09f2fb7586a6

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}