maxpeterkaya/journel
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases 3 Packages 1 Wiki Activity Actions

chore(deps): update module github.com/labstack/echo/v4 to v5 #10

Open
renovate-bot wants to merge 1 commit from renovate/github.com-labstack-echo-v4-5.x into master
pull from: renovate/github.com-labstack-echo-v4-5.x
merge into: maxpeterkaya:master
Conversation 0 Commits 1 Files changed 2 +2
renovate-bot commented 2026-01-26 21:13:35 -05:00
Contributor
Copy link

This PR contains the following updates:

Package Type Update Change
github.com/labstack/echo/v4 require major v4.15.0 → v5.0.4

Release Notes

labstack/echo (github.com/labstack/echo/v4)

v5.0.4

Compare Source

Enhancements

v5.0.3

Compare Source

Security

  • Fix directory traversal vulnerability under Windows in Static middleware when default Echo filesystem is used. Reported by @​shblue21.

This applies to cases when:

  • Windows is used as OS
  • middleware.StaticConfig.Filesystem is nil (default)
  • echo.Filesystem is has not been set explicitly (default)

Exposure is restricted to the active process working directory and its subfolders.

v5.0.2

Compare Source

Security

  • Fix Static middleware with config.Browse=true lists all files/subfolders from config.Filesystem root and not starting from config.Root in #​2887

v5.0.1

Compare Source

v5.0.0

Compare Source

Echo v5 is maintenance release with major breaking changes

  • Context is now struct instead of interface and we can add method to it in the future in minor versions.
  • Adds new Router interface for possible new routing implementations.
  • Drops old logging interface and uses moderm log/slog instead.
  • Rearranges alot of methods/function signatures to make them more consistent.

Upgrade notes and v4 support:

  • Echo v4 is supported with security* updates and bug fixes until 2026-12-31
  • If you are using Echo in a production environment, it is recommended to wait until after 2026-03-31 before upgrading.
  • Until 2026-03-31, any critical issues requiring breaking v5 API changes will be addressed, even if this violates semantic versioning.

See API_CHANGES_V5.md for public API changes between v4 and v5, notes on upgrading.

Upgrading TLDR:

If you are using Linux you can migrate easier parts like that:

find . -type f -name "*.go" -exec sed -i 's/ echo.Context/ *echo.Context/g' {} +
find . -type f -name "*.go" -exec sed -i 's/echo\/v4/echo\/v5/g' {} +

macOS

find . -type f -name "*.go" -exec sed -i '' 's/ echo.Context/ *echo.Context/g' {} +
find . -type f -name "*.go" -exec sed -i '' 's/echo\/v4/echo\/v5/g' {} +

or in your favorite IDE

Replace all:

  1. echo.Context -> *echo.Context
  2. echo/v4 -> echo/v5

This should solve most of the issues. Probably the hardest part is updating all the tests.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/labstack/echo/v4](https://github.com/labstack/echo) | require | major | `v4.15.0` → `v5.0.4` | --- ### Release Notes <details> <summary>labstack/echo (github.com/labstack/echo/v4)</summary> ### [`v5.0.4`](https://github.com/labstack/echo/blob/HEAD/CHANGELOG.md#v504---2026-02-15) [Compare Source](https://github.com/labstack/echo/compare/v5.0.3...v5.0.4) **Enhancements** - Remove unused import 'errors' from README example by [@&#8203;kumapower17](https://github.com/kumapower17) in [#&#8203;2889](https://github.com/labstack/echo/pull/2889) - Fix Graceful shutdown: after `http.Server.Serve` returns we need to wait for graceful shutdown goroutine to finish by [@&#8203;aldas](https://github.com/aldas) in [#&#8203;2898](https://github.com/labstack/echo/pull/2898) - Update location of oapi-codegen in README by [@&#8203;mromaszewicz](https://github.com/mromaszewicz) in [#&#8203;2896](https://github.com/labstack/echo/pull/2896) - Add Go 1.26 to CI flow by [@&#8203;aldas](https://github.com/aldas) in [#&#8203;2899](https://github.com/labstack/echo/pull/2899) - Add new function `echo.StatusCode` by [@&#8203;suwakei](https://github.com/suwakei) in [#&#8203;2892](https://github.com/labstack/echo/pull/2892) - CSRF: support older token-based CSRF protection handler that want to render token into template by [@&#8203;aldas](https://github.com/aldas) in [#&#8203;2894](https://github.com/labstack/echo/pull/2894) - Add `echo.ResolveResponseStatus` function to help middleware/handlers determine HTTP status code and echo.Response by [@&#8203;aldas](https://github.com/aldas) in [#&#8203;2900](https://github.com/labstack/echo/pull/2900) ### [`v5.0.3`](https://github.com/labstack/echo/blob/HEAD/CHANGELOG.md#v503---2026-02-06) [Compare Source](https://github.com/labstack/echo/compare/v5.0.2...v5.0.3) **Security** - Fix directory traversal vulnerability under Windows in Static middleware when default Echo filesystem is used. Reported by [@&#8203;shblue21](https://github.com/shblue21). This applies to cases when: - Windows is used as OS - `middleware.StaticConfig.Filesystem` is `nil` (default) - `echo.Filesystem` is has not been set explicitly (default) Exposure is restricted to the active process working directory and its subfolders. ### [`v5.0.2`](https://github.com/labstack/echo/blob/HEAD/CHANGELOG.md#v502---2026-02-02) [Compare Source](https://github.com/labstack/echo/compare/v5.0.1...v5.0.2) **Security** - Fix Static middleware with `config.Browse=true` lists all files/subfolders from `config.Filesystem` root and not starting from `config.Root` in [#&#8203;2887](https://github.com/labstack/echo/pull/2887) ### [`v5.0.1`](https://github.com/labstack/echo/blob/HEAD/CHANGELOG.md#v501---2026-01-28) [Compare Source](https://github.com/labstack/echo/compare/v5.0.0...v5.0.1) - Panic MW: will now return a custom PanicStackError with stack trace by [@&#8203;aldas](https://github.com/aldas) in [#&#8203;2871](https://github.com/labstack/echo/pull/2871) - Docs: add missing err parameter to DenyHandler example by [@&#8203;cgalibern](https://github.com/cgalibern) in [#&#8203;2878](https://github.com/labstack/echo/pull/2878) - improve: improve websocket checks in IsWebSocket() \[per RFC 6455] by [@&#8203;raju-mechatronics](https://github.com/raju-mechatronics) in [#&#8203;2875](https://github.com/labstack/echo/pull/2875) - fix: Context.Json() should not send status code before serialization is complete by [@&#8203;aldas](https://github.com/aldas) in [#&#8203;2877](https://github.com/labstack/echo/pull/2877) ### [`v5.0.0`](https://github.com/labstack/echo/blob/HEAD/CHANGELOG.md#v500---2026-01-18) [Compare Source](https://github.com/labstack/echo/compare/v4.15.0...v5.0.0) Echo `v5` is maintenance release with **major breaking changes** - `Context` is now struct instead of interface and we can add method to it in the future in minor versions. - Adds new `Router` interface for possible new routing implementations. - Drops old logging interface and uses moderm `log/slog` instead. - Rearranges alot of methods/function signatures to make them more consistent. Upgrade notes and `v4` support: - Echo `v4` is supported with **security**\* updates and **bug** fixes until **2026-12-31** - If you are using Echo in a production environment, it is recommended to wait until after 2026-03-31 before upgrading. - Until 2026-03-31, any critical issues requiring breaking `v5` API changes will be addressed, even if this violates semantic versioning. See [API\_CHANGES\_V5.md](./API_CHANGES_V5.md) for public API changes between `v4` and `v5`, notes on **upgrading**. Upgrading TLDR: If you are using Linux you can migrate easier parts like that: ```bash find . -type f -name "*.go" -exec sed -i 's/ echo.Context/ *echo.Context/g' {} + find . -type f -name "*.go" -exec sed -i 's/echo\/v4/echo\/v5/g' {} + ``` macOS ```bash find . -type f -name "*.go" -exec sed -i '' 's/ echo.Context/ *echo.Context/g' {} + find . -type f -name "*.go" -exec sed -i '' 's/echo\/v4/echo\/v5/g' {} + ``` or in your favorite IDE Replace all: 1. ` echo.Context` -> ` *echo.Context` 2. `echo/v4` -> `echo/v5` This should solve most of the issues. Probably the hardest part is updating all the tests. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi40IiwidXBkYXRlZEluVmVyIjoiNDMuOC41IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
renovate-bot force-pushed renovate/github.com-labstack-echo-v4-5.x from 64fccf8525 to af7d07cb87 2026-01-26 22:14:21 -05:00 Compare
renovate-bot force-pushed renovate/github.com-labstack-echo-v4-5.x from af7d07cb87 to ff56991668 2026-01-28 17:39:50 -05:00 Compare
renovate-bot force-pushed renovate/github.com-labstack-echo-v4-5.x from ff56991668 to 86166b6a31 2026-01-30 10:14:26 -05:00 Compare
renovate-bot force-pushed renovate/github.com-labstack-echo-v4-5.x from 86166b6a31 to 0bc8e5b429 2026-01-31 13:16:17 -05:00 Compare
renovate-bot force-pushed renovate/github.com-labstack-echo-v4-5.x from 0bc8e5b429 to f783e05bc9 2026-02-01 15:57:56 -05:00 Compare
renovate-bot force-pushed renovate/github.com-labstack-echo-v4-5.x from f783e05bc9 to dfa5106e05 2026-02-01 22:35:05 -05:00 Compare
renovate-bot force-pushed renovate/github.com-labstack-echo-v4-5.x from dfa5106e05 to 8faf997762 2026-02-01 23:51:07 -05:00 Compare
renovate-bot force-pushed renovate/github.com-labstack-echo-v4-5.x from 8faf997762 to 5b3695835c 2026-02-02 14:41:25 -05:00 Compare
renovate-bot force-pushed renovate/github.com-labstack-echo-v4-5.x from 5b3695835c to 012cf7dd0b 2026-02-06 09:27:17 -05:00 Compare
renovate-bot force-pushed renovate/github.com-labstack-echo-v4-5.x from 012cf7dd0b to 5dce329e41 2026-02-15 11:20:52 -05:00 Compare
renovate-bot force-pushed renovate/github.com-labstack-echo-v4-5.x from 5dce329e41 to e7c8998cbe 2026-02-15 19:47:08 -05:00 Compare
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/github.com-labstack-echo-v4-5.x:renovate/github.com-labstack-echo-v4-5.x
git switch renovate/github.com-labstack-echo-v4-5.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master
git merge --no-ff renovate/github.com-labstack-echo-v4-5.x
git switch renovate/github.com-labstack-echo-v4-5.x
git rebase master
git switch master
git merge --ff-only renovate/github.com-labstack-echo-v4-5.x
git switch renovate/github.com-labstack-echo-v4-5.x
git rebase master
git switch master
git merge --no-ff renovate/github.com-labstack-echo-v4-5.x
git switch master
git merge --squash renovate/github.com-labstack-echo-v4-5.x
git switch master
git merge --ff-only renovate/github.com-labstack-echo-v4-5.x
git switch master
git merge renovate/github.com-labstack-echo-v4-5.x
git push origin master
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
maxpeterkaya/journel!10
No description provided.