Skip to content

Bump github.com/go-chi/chi/v5 to 5.3.0 - #336

Open
reinkrul wants to merge 1 commit into
mainfrom
chore/bump-chi
Open

reinkrul wants to merge 1 commit into
mainfrom
chore/bump-chi

Conversation

@reinkrul

Copy link
Copy Markdown
Member

Changes

  • github.com/go-chi/chi/v5 5.2.2 → 5.3.0.
  • chi is an indirect dependency (through github.com/markbates/goth), so Dependabot does not update it.

Vulnerabilities

Advisory Description Status before Status after
GO-2026-5777, GO-2026-5775, GO-2026-5774 IP spoofing through X-Forwarded-For in the RealIP middleware In module, not reached Fixed
GO-2026-4316 Fixed in chi 5.2.4 In module, not reached Fixed

Verification

  • go test ./oidc/... passes. oidc is the package that pulls in chi.
  • govulncheck ./...: 0 vulnerabilities reached by the code. Only GO-2026-5932 (golang.org/x/crypto, no fix available) remains at module level.

Assisted by AI

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant