Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump github.com/labstack/echo/v4 from 4.1.17 to 4.5.0 in /instrumentation/github.com/labstack/echo/otelecho/example #583

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Aug 8, 2021

Bumps github.com/labstack/echo/v4 from 4.1.17 to 4.5.0.

Release notes

Sourced from github.com/labstack/echo/v4's releases.

v4.5.0

Important notes

A BREAKING CHANGE is introduced for JWT middleware users.

The JWT library used for the JWT middleware had to be changed from github.com/dgrijalva/jwt-go to github.com/golang-jwt/jwt due former library being unmaintained and affected by security issues. The github.com/golang-jwt/jwt project is a drop-in replacement, but supports only the latest 2 Go versions. So for JWT middleware users Go 1.15+ is required. For detailed information please read #1940

To change the library imports in all .go files in your project replace all occurrences of dgrijalva/jwt-go with golang-jwt/jwt.

For Linux CLI you can use:

find -type f -name "*.go" -exec sed -i "s/dgrijalva\/jwt-go/golang-jwt\/jwt/g" {} \;
go mod tidy

Fixes

  • Change JWT library to github.com/golang-jwt/jwt #1946

v4.4.0

Fixes

  • Split HeaderXForwardedFor header only by comma #1878
  • Fix Timeout middleware Context propagation #1910

Enhancements

  • Allow for custom JSON encoding implementations #1880
  • Adds JWTConfig.ParseTokenFunc to JWT middleware to allow different libraries implementing JWT parsing. #1887
  • Adds RequestIDHandler function to RequestID middleware #1898
  • Bind data using headers as source #1866
  • Adding tests for Echo#Host #1895

v4.3.0

Important notes

  • Route matching has improvements for following cases:
    1. Correctly match routes with parameter part as last part of route (with trailing backslash)
    2. Considering handlers when resolving routes and search for matching http method handler
  • Echo minimal Go version is now 1.13.

Fixes

  • When url ends with slash first param route is the match #1804
  • Router should check if node is suitable as matching route by path+method and if not then continue search in tree #1808
  • Fix timeout middleware not writing response correctly when handler panics #1864
  • Fix binder not working with embedded pointer structs #1861

... (truncated)

Changelog

Sourced from github.com/labstack/echo/v4's changelog.

v4.5.0 - 2021-08-01

Important notes

A BREAKING CHANGE is introduced for JWT middleware users. The JWT library used for the JWT middleware had to be changed from github.com/dgrijalva/jwt-go to github.com/golang-jwt/jwt due former library being unmaintained and affected by security issues. The github.com/golang-jwt/jwt project is a drop-in replacement, but supports only the latest 2 Go versions. So for JWT middleware users Go 1.15+ is required. For detailed information please read #1940

To change the library imports in all .go files in your project replace all occurrences of dgrijalva/jwt-go with golang-jwt/jwt.

For Linux CLI you can use:

find -type f -name "*.go" -exec sed -i "s/dgrijalva\/jwt-go/golang-jwt\/jwt/g" {} \;
go mod tidy

Fixes

  • Change JWT library to github.com/golang-jwt/jwt #1946

v4.4.0 - 2021-07-12

Fixes

  • Split HeaderXForwardedFor header only by comma #1878
  • Fix Timeout middleware Context propagation #1910

Enhancements

  • Bind data using headers as source #1866
  • Adds JWTConfig.ParseTokenFunc to JWT middleware to allow different libraries implementing JWT parsing. #1887
  • Adding tests for Echo#Host #1895
  • Adds RequestIDHandler function to RequestID middleware #1898
  • Allow for custom JSON encoding implementations #1880

v4.3.0 - 2021-05-08

Important notes

  • Route matching has improvements for following cases:
    1. Correctly match routes with parameter part as last part of route (with trailing backslash)
    2. Considering handlers when resolving routes and search for matching http method handler
  • Echo minimal Go version is now 1.13.

Fixes

  • When url ends with slash first param route is the match #1804

... (truncated)

Commits
  • 5b8fa69 Update version and changelog for 4.5.0
  • 647af2a JWT middleware has been changed from github.com/dgrijalva/jwt-go to github....
  • 58366f9 Update version and changelog for 4.4.0 (#1919)
  • 02de901 Fixing Timeout middleware Context propagation (#1910)
  • 5e791b0 Allow for custom JSON encoding implementations (#1880)
  • fd7a8a9 Adds RequestIDHandler function to RequestID middleware
  • f20820c Adding tests for Echo#Host (#1895)
  • 1ac4a8f Adds JWTConfig.ParseTokenFunc to JWT middleware to allow different libraries ...
  • fdacff0 Split XFF header only by comma
  • 1c24ab8 fix rateLimiteDoc
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/labstack/echo/v4](https://github.com/labstack/echo) from 4.1.17 to 4.5.0.
- [Release notes](https://github.com/labstack/echo/releases)
- [Changelog](https://github.com/labstack/echo/blob/master/CHANGELOG.md)
- [Commits](labstack/echo@v4.1.17...v4.5.0)

---
updated-dependencies:
- dependency-name: github.com/labstack/echo/v4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Aug 8, 2021

The following labels could not be found: Skip Changelog.

@dependabot dependabot bot requested a review from jmacd as a code owner August 8, 2021 06:03
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 8, 2021
@codecov-commenter
Copy link

codecov-commenter commented Aug 8, 2021

Codecov Report

Merging #583 (96c9a52) into master (cd07cf3) will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master     #583   +/-   ##
=======================================
  Coverage   77.61%   77.61%           
=======================================
  Files          54       54           
  Lines        2586     2586           
=======================================
  Hits         2007     2007           
  Misses        443      443           
  Partials      136      136           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update cd07cf3...96c9a52. Read the comment docs.

jmacd pushed a commit that referenced this pull request Sep 7, 2021
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Sep 26, 2021

Superseded by #590.

@dependabot dependabot bot closed this Sep 26, 2021
@dependabot dependabot bot deleted the dependabot/go_modules/instrumentation/github.com/labstack/echo/otelecho/example/github.com/labstack/echo/v4-4.5.0 branch September 26, 2021 06:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant