Skip to content

chore(deps): bump github.com/go-chi/chi/v5 from 5.4.0 to 5.5.0 - #108

Merged
ImMohammad20000 merged 1 commit into
devfrom
dependabot/go_modules/dev/github.com/go-chi/chi/v5-5.5.0
Oct 19, 2026
Merged

ImMohammad20000 merged 1 commit into
devfrom
dependabot/go_modules/dev/github.com/go-chi/chi/v5-5.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/go-chi/chi/v5 from 5.4.0 to 5.5.0.

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.5.0

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.4.0...v5.5.0

Commits
  • 3a33ba5 middleware: SupressNotFound must not mutate the request's route context (#1220)
  • 6075570 middleware: parse quoted ContentCharset media parameters (#1218)
  • 46295d0 middleware: test Retry-After rounding in one table test (#1217)
  • c6e33a1 middleware: build Maybe handler once (#1197)
  • c9744a3 middleware: test ClientIPFromHeader does not fall back to other headers (#1208)
  • fff8bb2 middleware: add Deprecation (RFC 9745), make Sunset RFC 8594 only (#1195)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) from 5.4.0 to 5.5.0.
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](go-chi/chi@v5.4.0...v5.5.0)

---
updated-dependencies:
- dependency-name: github.com/go-chi/chi/v5
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 19, 2026
@coderabbitai

coderabbitai Bot commented Oct 19, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 85f51a39-5ae7-421e-bedd-5bafae6eed98

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@ImMohammad20000
ImMohammad20000 merged commit 5cbcb5f into dev Oct 19, 2026
2 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/dev/github.com/go-chi/chi/v5-5.5.0 branch October 19, 2026 06:03
Free-Guy-IR added a commit to Free-Guy-IR/node that referenced this pull request Nov 2, 2026
Port of upstream PasarGuard#108, which is part of upstream release v0.5.5. go.mod and
go.sum match upstream's hunks exactly, and both new go.sum lines match
sum.golang.org.

The 5.4.0..5.5.0 diff touches only middleware the node does not use:
content_charset, maybe, sunset, supress_notfound, throttle and a new
deprecation.go. The router and the wrap writer and recoverer the node uses
are unchanged.

controller/rest passes on 5.5.0, run with a patched Xray built at this head
and P-256 test certificates. go build ./... and GOOS=linux go vet
./controller/... pass. controller/rpc does not import chi (go list -deps
-test finds no go-chi package). On this Mac its backend start began timing
out after 5 s at 13:57, and it times out the same way with 5.4.0, the
version it passed with at 13:52. So the cause is in the Mac environment, not
in this change; the macOS free-port check F-M1 is one candidate.

Upstream: 5cbcb5f
Free-Guy-IR added a commit to Free-Guy-IR/node that referenced this pull request Nov 2, 2026
The drift check reports 52d5aab (PasarGuard#91, grpc 1.84.0), 1ae411b (PasarGuard#104, x/sys
0.49.0), f58fce8 (PasarGuard#106, chi 5.4.0) and 5cbcb5f (PasarGuard#108, chi 5.5.0) as PORTED
through their Upstream: lines, with "the waiver for this commit is no longer
needed". Those four pending waivers are removed. The parity table records the
four ports, and the node section of the parity doc no longer says that grpc
1.84.0 is held.

The parity doc gets the Go 1.26.10 sentence (GO-2026-6809) and F-SEC1026-V1.
The constitution moves from 1.1.2 to 1.1.3 (PATCH: the Release Constraints
toolchain value only), with approval pending. The gate-container image and
the gate checker's Go in specs/002 and specs/003 name 1.26.10. These are prose
and data changes only.

This is the drift commit of the pre-linear sec1026 merge line, re-applied
linearly. The bundle no longer arrives through merge commits, so that
commit's two allowed-merge lines, for merges that do not exist on this line,
are left out.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant