{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":598307264,"defaultBranch":"master","name":"repl","ownerLogin":"jackdek11","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2023-02-06T20:47:26.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/55926128?v=4","public":true,"private":false,"isOrgOwned":false},"refInfo":{"name":"","listCacheKey":"v0:1710481423.0","currentOid":""},"activityList":{"items":[{"before":"05a2e64d07637a58c795b8e19a9f6fe392346fff","after":null,"ref":"refs/heads/dependabot/go_modules/repl/github.com/jackc/pgx/v5-5.5.4","pushedAt":"2024-03-15T05:43:43.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"jackdek11","name":"Jack de Kock","path":"/jackdek11","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/55926128?s=80&v=4"}},{"before":"45bf391c1d660f67fa933aab022e8d64c32ca1be","after":"79fb69071ccd4cc0ca5aaeb5df8fadb7ea2fc432","ref":"refs/heads/master","pushedAt":"2024-03-15T05:43:40.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"jackdek11","name":"Jack de Kock","path":"/jackdek11","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/55926128?s=80&v=4"},"commit":{"message":"Bump github.com/jackc/pgx/v5 from 5.4.3 to 5.5.4 in /repl (#21)\n\nBumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.4.3\r\nto 5.5.4.\r\n Sourced from github.com/jackc/pgx/v5's\r\nchangelog. Fix CVE-2024-27304 SQL injection can occur if an attacker can cause a single query or\r\nbind message to exceed 4 GB in size. An integer\r\noverflow in the calculated message size can cause the one large message\r\nto be sent as multiple messages under the\r\nattacker's control. Thanks to Paul Gerste for reporting this issue. ... (truncated) Sourced from github.com/gofiber/fiber/v2's\r\nreleases. https://docs.gofiber.io/api/middleware/cors Full Changelog: https://github.com/gofiber/fiber/compare/v2.52.0...v2.52.1 Thank you // Or extend your config for customization\r\napp.Use(healthcheck.New(healthcheck.Config{\r\nLivenessEndpoint: "/live",\r\nLivenessProbe: func(c *fiber.Ctx) bool {\r\nreturn true\r\n},\r\nReadinessEndpoint: "/ready",\r\nReadinessProbe: func(c *fiber.Ctx) bool {\r\nreturn serviceA.Ready() && serviceB.Ready() && ...\r\n},\r\n}))\r\nChangelog
\r\n\r\n
\r\n5.5.4 (March 4, 2024)
\r\n\r\n
\r\n5.5.3 (February 3, 2024)
\r\n\r\n
\r\n5.5.2 (January 13, 2024)
\r\n\r\n
\r\n5.5.1 (December 9, 2023)
\r\n\r\n
\r\n5.5.0 (November 4, 2023)
\r\n\r\nCommits
\r\n\r\n
\r\nda6f2c9
\r\nUpdate changelogc543134
\r\nSQL sanitizer wraps arguments in parentheses20344df
\r\nCheck for overflow on uint16 sizes in pgproto3adbb38f
\r\nDo not allow protocol messages larger than ~1GBc1b0a01
\r\nFix behavior of CollectRows to return empty slice if Rows are empty88dfc22
\r\nFix simple protocol encoding of json.RawMessage2e84dcc
\r\n*Pipeline.getResults should close pipeline on errord149d3f
\r\nFix panic in TryFindUnderlyingTypeScanPlan046f497
\r\ndeallocateInvalidatedCachedStatements now runs in transactions8896bd6
\r\nHandle invalid sslkey file
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jackc/pgx/v5&package-manager=go_modules&previous-version=5.4.3&new-version=5.5.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\nDependabot commands and options
\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show Release notes
\r\n\r\n
v2.52.1
\r\n👮 Security
\r\n\r\n🐛 Fixes
\r\n\r\n
\r\n📚 Documentation
\r\n\r\n
\r\n@luk3skyw4lker
,\r\n@CAEL0
, @grivera64
, @gaby
and @sixcolors
for\r\nmaking this update possible.v2.52.0
\r\n🚀 New
\r\n\r\n
\r\n// Direct usage with default config\r\napp.Use(healthcheck.New())\r\n
... (truncated)
\r\n\r\n70f21d5
\r\nfix cors domain normalizef9fcb02
\r\nUpdate app.gof0cd3b4
\r\nMerge pull request from GHSA-fmg4-x8pw-hjhg5e30112
\r\nfix: healthcheck middleware not working with route group (#2863)cf54c25
\r\nMerge pull request #2867\r\nfrom grivera64/v2a84a7ce
\r\n:books: Doc: Fix code snippet indentation in\r\n/docs/api/middleware/keyauth.md4e0f180
\r\nUpdate routing.md56d2ec7
\r\nUpdate ctx.md8325ed0
\r\nupdate queryParser confige524b73
\r\nFix default value to false in docs of QueryBool (#2811)9d2ee97
\r\nssh: implement strict KEX protocol changes4e5a261
\r\nssh: close net.Conn on all NewServerConn errors152cdb1
\r\nx509roots/fallback: update bundlefdfe1f8
\r\nssh: defer channel window adjustmentb8ffc16
\r\nblake2b: drop Go 1.6, Go 1.8 compatibility7e6fbd8
\r\nssh: wrap errors from client handshakebda2f3f
\r\nargon2: avoid clobbering BP325b735
\r\nssh/test: skip TestSSHCLIAuth on Windows1eadac5
\r\ngo.mod: update golang.org/x dependenciesb2d7c26
\r\nssh: add (*Client).DialContext methodSourced from github.com/gofiber/fiber/v2's\r\nreleases.
\r\n\r\n\r\nv2.50.0
\r\n❗ Breaking Changes
\r\n\r\n
\r\n- Change signatures of GetReqHeaders and GetRespHeaders (#2650)
\r\n\r\n\r\nTo allow single and list values under headers according to the rfc\r\nstandard
\r\n\r\n- func (c *Ctx) GetReqHeaders() map[string]string\r\n+ func (c *Ctx) GetReqHeaders() map[string][]string\r\n
\r\n- func (c *Ctx) GetRespHeaders()\r\nmap[string]string\r\n+ func (c *Ctx) GetRespHeaders() map[string][]string\r\n
👮 Security
\r\n\r\nhttps://docs.gofiber.io/api/middleware/csrf
\r\n🚀 Improvements to the CSRF middleware:
\r\n\r\n
\r\n- Added support for single-use tokens through the\r\n
\r\nSingleUseToken
configuration option.- Optional integration with GoFiber session middleware through the\r\n
\r\nSession
andSessionKey
configuration\r\noptions.- Introduction of origin checks for HTTPS connections to verify\r\nreferer headers.
\r\n- Implementation of a Double Submit Cookie approach for CSRF token\r\ngeneration and validation when used without
\r\nSession
.- Enhancement of error handling with more descriptive error\r\nmessages.
\r\n- The documentation for the CSRF middleware has been enhanced with the\r\naddition of the new options and best practices to improve security.
\r\nThank you
\r\n\r\n@sixcolors
🚀 New
\r\n\r\n
\r\n- Cookie parser (#2656)\r\nhttps://docs.gofiber.io/api/ctx#cookieparser
\r\n\r\n// Field names should start with an uppercase\r\nletter\r\ntype Person struct {\r\n Name string `cookie:"name"`\r\n Age int `cookie:"age"`\r\n Job bool `cookie:"job"`\r\n}\r\n// Example route\r\napp.Get("/", func(c *fiber.Ctx) error {\r\n p := new(Person)\r\n // This method is similar to BodyParser, but for cookie parameters\r\n if err := c.CookieParser(p); err != nil {\r\n</tr></table> \r\n
... (truncated)
\r\naf39998
\r\nAdd more description to GetClientInfoc864da0
\r\nprepare release v2.50.08c3916d
\r\nMerge pull request from GHSA-94w9-97p3-p368d736d3a
\r\n:bug: bug: fix path checking on route naming (#2676)cb89cce
\r\nMerge pull request #2675\r\nfrom jscappini/patch-1d974cf3
\r\nFix typo in requestid.mde70b2e2
\r\nCookie parser (#2656)bb90fc1
\r\nfix lint errorsb50d91d
\r\nMerge pull request from GHSA-94w9-97p3-p3689292a36
\r\n:bug: bug: fix nil pointer dereference issue on idempotency middleware\r\n(#2668)