Repository navigation
chore(deps): bump github.com/go-chi/chi/v5 from 5.3.2 to 5.4.0 - #106
Merged
ImMohammad20000 merged 1 commit intoOct 16, 2026
Merged
ImMohammad20000 merged 1 commit into
ImMohammad20000 merged 1 commit into
Conversation
Bumps [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) from 5.3.2 to 5.4.0. - [Release notes](https://github.com/go-chi/chi/releases) - [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md) - [Commits](go-chi/chi@v5.3.2...v5.4.0) --- updated-dependencies: - dependency-name: github.com/go-chi/chi/v5 dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
dependabot
Bot
deleted the
dependabot/go_modules/dev/github.com/go-chi/chi/v5-5.4.0
branch
October 16, 2026 05:53
Free-Guy-IR
added a commit
to Free-Guy-IR/node
that referenced
this pull request
Oct 30, 2026
3be63e1 is superseded by the fork's own 88162e2. 24e2b12 (PasarGuard#55), 1ae411b (PasarGuard#104) and f58fce8 (PasarGuard#106) are on upstream dev only, so under the owner rule of 2026-10-14 they wait for a node release.
Free-Guy-IR
added a commit
to Free-Guy-IR/node
that referenced
this pull request
Nov 2, 2026
Port of upstream PasarGuard#106, which is part of upstream release v0.5.5. go.mod and go.sum match upstream's hunks exactly, and both new go.sum lines match sum.golang.org. The node uses chi.NewRouter, middleware.Recoverer and middleware.NewWrapResponseWriter, so I read the 5.3.2..5.4.0 diff of mux.go, tree.go, context.go, recoverer.go and wrap_writer.go. Most of it is interface{} -> any and slices.Backward loops with the same order, plus a new panic when a router is mounted on itself, which the node never does. The one behaviour change is that the wrap writer's Flush now writes the implicit 200 status first, so Status() reports 200 instead of 0 when a handler flushes before writing. The only node handler that flushes, GetLogs, writes each line before it flushes, so its status was already 200 and the logging and successful-request middleware see the same values as before. controller/rest and controller/rpc pass on 5.3.2 and on 5.4.0, run with a patched Xray built at this head and P-256 test certificates. That includes TestREST_GetLogsStream. go build ./... and GOOS=linux go vet ./controller/... pass. Upstream: f58fce8
Free-Guy-IR
added a commit
to Free-Guy-IR/node
that referenced
this pull request
Nov 2, 2026
The drift check reports 52d5aab (PasarGuard#91, grpc 1.84.0), 1ae411b (PasarGuard#104, x/sys 0.49.0), f58fce8 (PasarGuard#106, chi 5.4.0) and 5cbcb5f (PasarGuard#108, chi 5.5.0) as PORTED through their Upstream: lines, with "the waiver for this commit is no longer needed". Those four pending waivers are removed. The parity table records the four ports, and the node section of the parity doc no longer says that grpc 1.84.0 is held. The parity doc gets the Go 1.26.10 sentence (GO-2026-6809) and F-SEC1026-V1. The constitution moves from 1.1.2 to 1.1.3 (PATCH: the Release Constraints toolchain value only), with approval pending. The gate-container image and the gate checker's Go in specs/002 and specs/003 name 1.26.10. These are prose and data changes only. This is the drift commit of the pre-linear sec1026 merge line, re-applied linearly. The bundle no longer arrives through merge commits, so that commit's two allowed-merge lines, for merges that do not exist on this line, are left out.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps github.com/go-chi/chi/v5 from 5.3.2 to 5.4.0.
Release notes
Sourced from github.com/go-chi/chi/v5's releases.
Commits
7f9b744middleware: treat RemoteAddr as the rightmost hop in ClientIPFrom* (#1214)167e1e3README: point middleware doc links to chi/v5 (#1196)3d1777amiddleware: honor Discard when flushing (#1185)b1c9ab4middleware: record response status when flushing (#1174)ae6be74Simplify chi.URLParam, call chi.URLParamFromCtx (#1168)50ef4e4Replace "interface{}" with "any" (#1167)77074b3Use slices.Backward where appropriate (#1165)756fcb8Bump minimum Go to 1.24, use b.Loop() (#1164)5ac7a82Remove superfluous import aliases (#1166)36611d2test(middleware): Improves test coverage (#700)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)