Skip to content

chore(deps): update module github.com/go-chi/chi/v5 to v5.2.4 [security]#1239

Merged
NumaryBot merged 1 commit intomainfrom
renovate/go-gitlite.zycloud.tk-go-chi-chi-v5-vulnerability
Jan 26, 2026
Merged

chore(deps): update module github.com/go-chi/chi/v5 to v5.2.4 [security]#1239
NumaryBot merged 1 commit intomainfrom
renovate/go-gitlite.zycloud.tk-go-chi-chi-v5-vulnerability

Conversation

@NumaryBot
Copy link
Contributor

This PR contains the following updates:

Package Type Update Change
github.com/go-chi/chi/v5 indirect patch v5.2.3 -> v5.2.4
github.com/go-chi/chi/v5 require patch v5.2.3 -> v5.2.4

Open redirect vulnerability in the RedirectSlashes middleware in github.com/go-chi/chi

GHSA-mqqf-5wvp-8fh8 / GO-2026-4316

More information

Details

Open redirect vulnerability in the RedirectSlashes middleware in github.com/go-chi/chi

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).


Release Notes

go-chi/chi (github.com/go-chi/chi/v5)

v5.2.4

Compare Source


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@NumaryBot NumaryBot requested a review from a team as a code owner January 24, 2026 02:37
@NumaryBot NumaryBot enabled auto-merge January 24, 2026 02:37
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Jan 24, 2026

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (6)
  • go.mod is excluded by !**/*.mod
  • go.sum is excluded by !**/*.sum, !**/*.sum
  • tools/generator/go.mod is excluded by !**/*.mod
  • tools/generator/go.sum is excluded by !**/*.sum, !**/*.sum
  • tools/provisioner/go.mod is excluded by !**/*.mod
  • tools/provisioner/go.sum is excluded by !**/*.sum, !**/*.sum

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch renovate/go-gitlite.zycloud.tk-go-chi-chi-v5-vulnerability

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@codecov
Copy link

codecov bot commented Jan 24, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.64%. Comparing base (1cfd498) to head (95589bc).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1239      +/-   ##
==========================================
+ Coverage   74.63%   74.64%   +0.01%     
==========================================
  Files         198      198              
  Lines       10410    10410              
==========================================
+ Hits         7769     7771       +2     
+ Misses       1512     1511       -1     
+ Partials     1129     1128       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@NumaryBot NumaryBot added this pull request to the merge queue Jan 26, 2026
Merged via the queue into main with commit 7d6d64d Jan 26, 2026
14 of 15 checks passed
@NumaryBot NumaryBot deleted the renovate/go-gitlite.zycloud.tk-go-chi-chi-v5-vulnerability branch January 26, 2026 09:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants