Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 24, 2023

Bumps github.com/labstack/echo/v4 from 4.10.0 to 4.11.1.

Release notes

Sourced from github.com/labstack/echo/v4's releases.

v4.11.1

Fixes

  • Fix Gzip middleware not sending response code for no content responses (404, 301/302 redirects etc) #2481

v4.11.0

Fixes

  • Fixes the proxy middleware concurrency issue of calling the Next() proxy target on Round Robin Balancer #2409
  • Fix group.RouteNotFound not working when group has attached middlewares #2411
  • Fix global error handler return error message when message is an error #2456
  • Do not use global timeNow variables #2477

Enhancements

  • Added a optional config variable to disable centralized error handler in recovery middleware #2410
  • refactor: use strings.ReplaceAll directly #2424
  • Add support for Go1.20 http.rwUnwrapper to Response struct #2425
  • Check whether is nil before invoking centralized error handling #2429
  • Proper colon support in echo.Reverse method #2416
  • Fix misuses of a vs an in documentation comments #2436
  • Add link to slog.Handler library for Echo logging into README.md #2444
  • In proxy middleware Support retries of failed proxy requests #2414
  • gofmt fixes to comments #2452
  • gzip response only if it exceeds a minimal length #2267
  • Upgrade packages #2475

v4.10.2

Security

  • filepath.Clean behaviour has changed in Go 1.20 - adapt to it #2406
  • Add middleware.CORSConfig.UnsafeWildcardOriginWithAllowCredentials to make UNSAFE usages of wildcard origin + allow cretentials less likely #2405

Enhancements

  • Add more HTTP error values #2277

v4.10.1

Security

  • Upgrade deps due to the latest golang.org/x/net vulnerability #2402

Enhancements

  • Add new JWT repository to the README #2377
  • Return an empty string for ctx.path if there is no registered path #2385
  • Add context timeout middleware #2380
  • Update link to jaegertracing #2394
Changelog

Sourced from github.com/labstack/echo/v4's changelog.

v4.11.1 - 2023-07-16

Fixes

  • Fix Gzip middleware not sending response code for no content responses (404, 301/302 redirects etc) #2481

v4.11.0 - 2023-07-14

Fixes

  • Fixes the proxy middleware concurrency issue of calling the Next() proxy target on Round Robin Balancer #2409
  • Fix group.RouteNotFound not working when group has attached middlewares #2411
  • Fix global error handler return error message when message is an error #2456
  • Do not use global timeNow variables #2477

Enhancements

  • Added a optional config variable to disable centralized error handler in recovery middleware #2410
  • refactor: use strings.ReplaceAll directly #2424
  • Add support for Go1.20 http.rwUnwrapper to Response struct #2425
  • Check whether is nil before invoking centralized error handling #2429
  • Proper colon support in echo.Reverse method #2416
  • Fix misuses of a vs an in documentation comments #2436
  • Add link to slog.Handler library for Echo logging into README.md #2444
  • In proxy middleware Support retries of failed proxy requests #2414
  • gofmt fixes to comments #2452
  • gzip response only if it exceeds a minimal length #2267
  • Upgrade packages #2475

v4.10.2 - 2023-02-22

Security

  • filepath.Clean behaviour has changed in Go 1.20 - adapt to it #2406
  • Add middleware.CORSConfig.UnsafeWildcardOriginWithAllowCredentials to make UNSAFE usages of wildcard origin + allow cretentials less likely #2405

Enhancements

  • Add more HTTP error values #2277

v4.10.1 - 2023-02-19

Security

  • Upgrade deps due to the latest golang.org/x/net vulnerability #2402

... (truncated)

Commits
  • a2e7085 Changelog for v4.11.1
  • 130be07 fix gzip not sending response code for no content responses (404, 301/302 red...
  • 60af056 Changelog for v4.11.0
  • ac7a962 bump version to 4.10.0
  • 1ee8e22 do not use global timeNow variables (#2477)
  • 44ead54 Upgrade packages (#2475)
  • 42f07ed gzip response only if it exceeds a minimal length (#2267)
  • fbfe216 fix(DefaultHTTPErrorHandler): return error message when message is an error (...
  • 8e425c0 gofmt fixes to comments
  • 0ae7464 Support retries of failed proxy requests (#2414)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot requested a review from a team as a code owner August 24, 2023 09:45
@dependabot dependabot bot requested a review from smittal22 August 24, 2023 09:45
@dependabot dependabot bot added dependencies Dependencies only. go Pull requests that update Go code labels Aug 24, 2023
@dependabot dependabot bot assigned matmerr and rbtr Aug 24, 2023
@dependabot dependabot bot force-pushed the fef4dependabot/go_modules/github.com/labstack/echo/v4-4.11.1 branch from cd61313 to e723ce8 Compare August 28, 2023 18:51
Bumps [github.com/labstack/echo/v4](https://github.com/labstack/echo) from 4.10.0 to 4.11.1.
- [Release notes](https://github.com/labstack/echo/releases)
- [Changelog](https://github.com/labstack/echo/blob/master/CHANGELOG.md)
- [Commits](labstack/echo@v4.10.0...v4.11.1)

---
updated-dependencies:
- dependency-name: github.com/labstack/echo/v4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@rbtr rbtr force-pushed the fef4dependabot/go_modules/github.com/labstack/echo/v4-4.11.1 branch from e723ce8 to f4993a1 Compare August 29, 2023 17:45
@rbtr
Copy link
Collaborator

rbtr commented Aug 29, 2023

/azp run

@rbtr rbtr enabled auto-merge (squash) August 29, 2023 17:46
@azure-pipelines
Copy link

Azure Pipelines successfully started running 3 pipeline(s).

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 11, 2023

A newer version of github.com/labstack/echo/v4 exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@nddq
Copy link
Member

nddq commented Nov 9, 2023

@dependabot recreate

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 9, 2023

Superseded by #2373.

@dependabot dependabot bot closed this Nov 9, 2023
auto-merge was automatically disabled November 9, 2023 22:12

Pull request was closed

@dependabot dependabot bot deleted the fef4dependabot/go_modules/github.com/labstack/echo/v4-4.11.1 branch November 9, 2023 22:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependencies only. go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants