Update module github.com/gin-gonic/gin to v1.12.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/gin-gonic/gin	v1.6.3 → v1.12.0

---

Release Notes

gin-gonic/gin (github.com/gin-gonic/gin)

v1.12.0

Compare Source

Features

• feat(render): add bson protocol (#​4145)
• feat(context): add GetError and GetErrorSlice methods for error retrieval (#​4502)
• feat(binding): add support for encoding.UnmarshalText in uri/query binding (#​4203)
• feat(gin): add option to use escaped path (#​4420)
• feat(context): add Protocol Buffers support to content negotiation (#​4423)
• feat(context): implemented Delete method (#​38e7651)
• feat(logger): color latency (#​4146)

Enhancements

• perf(tree): reduce allocations in findCaseInsensitivePath (#​4417)
• perf(recovery): optimize line reading in stack function (#​4466)
• perf(path): replace regex with custom functions in redirectTrailingSlash (#​4414)
• perf(tree): optimize path parsing using strings.Count (#​4246)
• chore(logger): allow skipping query string output (#​4547)
• chore(context): always trust xff headers from unix socket (#​3359)
• chore(response): prevent Flush() panic when the underlying ResponseWriter does not implement http.Flusher (#​4479)
• refactor(recovery): smart error comparison (#​4142)
• refactor(context): replace hardcoded localhost IPs with constants (#​4481)
• refactor(utils): move util functions to utils.go (#​4467)
• refactor(binding): use maps.Copy for cleaner map handling (#​4352)
• refactor(context): using maps.Clone (#​4333)
• refactor(ginS): use sync.OnceValue to simplify engine function (#​4314)
• refactor: replace magic numbers with named constants in bodyAllowedForStatus (#​4529)
• refactor: for loop can be modernized using range over int (#​4392)

Bug Fixes

• fix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (#​4535)
• fix(render): write content length in Data.Render (#​4206)
• fix(context): ClientIP handling for multiple X-Forwarded-For header values (#​4472)
• fix(binding): empty value error (#​2169)
• fix(recover): suppress http.ErrAbortHandler in recover (#​4336)
• fix(gin): literal colon routes not working with engine.Handler() (#​4415)
• fix(gin): close os.File in RunFd to prevent resource leak (#​4422)
• fix(response): refine hijack behavior for response lifecycle (#​4373)
• fix(binding): improve empty slice/array handling in form binding (#​4380)
• fix(debug): version mismatch (#​4403)
• fix: correct typos, improve documentation clarity, and remove dead code (#​4511)

Build process updates / CI

• ci: update Go version support to 1.25+ across CI and docs (#​4550)
• chore(binding): upgrade bson dependency to mongo-driver v2 (#​4549)

v1.11.0

Compare Source

Features

• feat(gin): Experimental support for HTTP/3 using quic-go/quic-go (#​3210)
• feat(form): add array collection format in form binding (#​3986), add custom string slice for form tag unmarshal (#​3970)
• feat(binding): add BindPlain (#​3904)
• feat(fs): Export, test and document OnlyFilesFS (#​3939)
• feat(binding): add support for unixMilli and unixMicro (#​4190)
• feat(form): Support default values for collections in form binding (#​4048)
• feat(context): GetXxx added support for more go native types (#​3633)

Enhancements

• perf(context): optimize getMapFromFormData performance (#​4339)
• refactor(tree): replace string(/) with "/" in node.insertChild (#​4354)
• refactor(render): remove headers parameter from writeHeader (#​4353)
• refactor(context): simplify "GetType()" functions (#​4080)
• refactor(slice): simplify SliceValidationError Error method (#​3910)
• refactor(context):Avoid using filepath.Dir twice in SaveUploadedFile (#​4181)
• refactor(context): refactor context handling and improve test robustness (#​4066)
• refactor(binding): use strings.Cut to replace strings.Index (#​3522)
• refactor(context): add an optional permission parameter to SaveUploadedFile (#​4068)
• refactor(context): verify URL is Non-nil in initQueryCache() (#​3969)
• refactor(context): YAML judgment logic in Negotiate (#​3966)
• tree: replace the self-defined 'min' to official one (#​3975)
• context: Remove redundant filepath.Dir usage (#​4181)

Bug Fixes

• fix: prevent middleware re-entry issue in HandleContext (#​3987)
• fix(binding): prevent duplicate decoding and add validation in decodeToml (#​4193)
• fix(gin): Do not panic when handling method not allowed on empty tree (#​4003)
• fix(gin): data race warning for gin mode (#​1580)
• fix(context): verify URL is Non-nil in initQueryCache() (#​3969)
• fix(context): YAML judgment logic in Negotiate (#​3966)
• fix(context): check handler is nil (#​3413)
• fix(readme): fix broken link to English documentation (#​4222)
• fix(tree): Keep panic infos consistent when wildcard type build faild (#​4077)

Build process updates / CI

• ci: integrate Trivy vulnerability scanning into CI workflow (#​4359)
• ci: support Go 1.25 in CI/CD (#​4341)
• build(deps): upgrade github.com/bytedance/sonic from v1.13.2 to v1.14.0 (#​4342)
• ci: add Go version 1.24 to GitHub Actions (#​4154)
• build: update Gin minimum Go version to 1.21 (#​3960)
• ci(lint): enable new linters (testifylint, usestdlibvars, perfsprint, etc.) (#​4010, #​4091, #​4090)
• ci(lint): update workflows and improve test request consistency (#​4126)

Dependency updates

• chore(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#​4346, #​4356)
• chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#​4347)
• chore(deps): bump actions/setup-go from 5 to 6 (#​4351)
• chore(deps): bump github.com/quic-go/quic-go from 0.53.0 to 0.54.0 (#​4328)
• chore(deps): bump golang.org/x/net from 0.33.0 to 0.38.0 (#​4178, #​4221)
• chore(deps): bump github.com/go-playground/validator/v10 from 10.20.0 to 10.22.1 (#​4052)

Documentation updates

• docs(changelog): update release notes for Gin v1.10.1 (#​4360)
• docs: Fixing English grammar mistakes and awkward sentence structure in doc/doc.md (#​4207)
• docs: update documentation and release notes for Gin v1.10.0 (#​3953)
• docs: fix typo in Gin Quick Start (#​3997)
• docs: fix comment and link issues (#​4205, #​3938)
• docs: fix route group example code (#​4020)
• docs(readme): add Portuguese documentation (#​4078)
• docs(context): fix some function names in comment (#​4079)

---

v1.10.1

Compare Source

Features

• refactor: strengthen HTTPS security and improve code organization
• feat(binding): Support custom BindUnmarshaler for binding. (#​3933)

Enhancements

• chore(deps): bump github.com/bytedance/sonic from 1.11.3 to 1.11.6 (#​3940)
• chore(deps): bump golangci/golangci-lint-action from 4 to 5 (#​3941)
• chore: update external dependencies to latest versions (#​3950)
• chore: update various Go dependencies to latest versions (#​3901)
• chore: refactor configuration files for better readability (#​3951)
• chore: update changelog categories and improve documentation (#​3917)
• feat: update version constant to v1.10.0 (#​3952)

Build process updates

• ci(release): refactor changelog regex patterns and exclusions (#​3914)
• ci(Makefile): vet command add .PHONY (#​3915)

v1.10.0

Compare Source

Features

• feat(auth): add proxy-server authentication (#​3877) (@​EndlessParadox1)
• feat(bind): ShouldBindBodyWith shortcut and change doc (#​3871) (@​RedCrazyGhost)
• feat(binding): Support custom BindUnmarshaler for binding. (#​3933) (@​dkkb)
• feat(binding): support override default binding implement (#​3514) (@​ssfyn)
• feat(engine): Added OptionFunc and With (#​3572) (@​flc1125)
• feat(logger): ability to skip logs based on user-defined logic (#​3593) (@​palvaneh)

Bug fixes

• Revert "fix(uri): query binding bug (#​3236)" (#​3899) (@​appleboy)
• fix(binding): binding error while not upload file (#​3819) (#​3820) (@​clearcodecn)
• fix(binding): dereference pointer to struct (#​3199) (@​echovl)
• fix(context): make context Value method adhere to Go standards (#​3897) (@​FarmerChillax)
• fix(engine): fix unit test (#​3878) (@​flc1125)
• fix(header): Allow header according to RFC 7231 (HTTP 405) (#​3759) (@​Crocmagnon)
• fix(route): Add fullPath in context copy (#​3784) (@​KarthikReddyPuli)
• fix(router): catch-all conflicting wildcard (#​3812) (@​FirePing32)
• fix(sec): upgrade golang.org/x/crypto to 0.17.0 (#​3832) (@​chncaption)
• fix(tree): correctly expand the capacity of params (#​3502) (@​georgijd-form3)
• fix(uri): query binding bug (#​3236) (@​illiafox)
• fix: Add pointer support for url query params (#​3659) (#​3666) (@​omkar-foss)
• fix: protect Context.Keys map when call Copy method (#​3873) (@​kingcanfish)

Enhancements

• chore(CI): update release args (#​3595) (@​qloog)
• chore(IP): add TrustedPlatform constant for Fly.io. (#​3839) (@​ab)
• chore(debug): add ability to override the debugPrint statement (#​2337) (@​josegonzalez)
• chore(deps): update dependencies to latest versions (#​3835) (@​appleboy)
• chore(header): Add support for RFC 9512: application/yaml (#​3851) (@​vincentbernat)
• chore(http): use white color for HTTP 1XX (#​3741) (@​viralparmarme)
• chore(optimize): the ShouldBindUri method of the Context struct (#​3911) (@​1911860538)
• chore(perf): Optimize the Copy method of the Context struct (#​3859) (@​1911860538)
• chore(refactor): modify interface check way (#​3855) (@​demoManito)
• chore(request): check reader if it's nil before reading (#​3419) (@​noahyao1024)
• chore(security): upgrade Protobuf for CVE-2024-24786 (#​3893) (@​Fotkurz)
• chore: refactor CI and update dependencies (#​3848) (@​appleboy)
• chore: refactor configuration files for better readability (#​3951) (@​appleboy)
• chore: update GitHub Actions configuration (#​3792) (@​appleboy)
• chore: update changelog categories and improve documentation (#​3917) (@​appleboy)
• chore: update dependencies to latest versions (#​3694) (@​appleboy)
• chore: update external dependencies to latest versions (#​3950) (@​appleboy)
• chore: update various Go dependencies to latest versions (#​3901) (@​appleboy)

Build process updates

• build(codecov): Added a codecov configuration (#​3891) (@​flc1125)
• ci(Makefile): vet command add .PHONY (#​3915) (@​imalasong)
• ci(lint): update tooling and workflows for consistency (#​3834) (@​appleboy)
• ci(release): refactor changelog regex patterns and exclusions (#​3914) (@​appleboy)
• ci(testing): add go1.22 version (#​3842) (@​appleboy)

Documentation updates

• docs(context): Added deprecation comments to BindWith (#​3880) (@​flc1125)
• docs(middleware): comments to function BasicAuthForProxy (#​3881) (@​EndlessParadox1)
• docs: Add document to constant AuthProxyUserKey and BasicAuthForProxy. (#​3887) (@​EndlessParadox1)
• docs: fix typo in comment (#​3868) (@​testwill)
• docs: fix typo in function documentation (#​3872) (@​TotomiEcio)
• docs: remove redundant comments (#​3765) (@​WeiTheShinobi)
• feat: update version constant to v1.10.0 (#​3952) (@​appleboy)

Others

• Upgrade golang.org/x/net -> v0.13.0 (#​3684) (@​cpcf)
• test(git): gitignore add develop tools (#​3370) (@​demoManito)
• test(http): use constant instead of numeric literal (#​3863) (@​testwill)
• test(path): Optimize unit test execution results (#​3883) (@​flc1125)
• test(render): increased unit tests coverage (#​3691) (@​araujo88)

v1.9.1

Compare Source

BUG FIXES

• fix Request.Context() checks #​3512

SECURITY

• fix lack of escaping of filename in Content-Disposition #​3556

ENHANCEMENTS

• refactor: use bytes.ReplaceAll directly #​3455
• convert strings and slices using the officially recommended way #​3344
• improve render code coverage #​3525

DOCS

• docs: changed documentation link for trusted proxies #​3575
• chore: improve linting, testing, and GitHub Actions setup #​3583

v1.9.0

Compare Source

BREAK CHANGES

• Stop useless panicking in context and render #​2150

BUG FIXES

• fix(router): tree bug where loop index is not decremented. #​3460
• fix(context): panic on NegotiateFormat - index out of range #​3397
• Add escape logic for header #​3500 and #​3503

SECURITY

• Fix the GO-2022-0969 and GO-2022-0288 vulnerabilities #​3333
• fix(security): vulnerability GO-2023-1571 #​3505

ENHANCEMENTS

• feat: add sonic json support #​3184
• chore(file): Creates a directory named path #​3316
• fix: modify interface check way #​3327
• remove deprecated of package io/ioutil #​3395
• refactor: avoid calling strings.ToLower twice #​3343
• console logger HTTP status code bug fixed #​3453
• chore(yaml): upgrade dependency to v3 version #​3456
• chore(router): match method added to routergroup for multiple HTTP methods supporting #​3464
• chore(http): add support for go1.20 http.rwUnwrapper to gin.responseWriter #​3489

DOCS

• docs: update markdown format #​3260
• docs(readme): Add the TOML rendering example #​3400
• docs(readme): move more example to docs/doc.md #​3449
• docs: update markdown format #​3446

v1.8.2

Compare Source

BUG FIXES

• fix(route): redirectSlash bug (https://redirect.github.com/gin-gonic/gin/pull/3227)ic/gin/pull/3227\)))
• fix(engine): missing route params for CreateTestContext (https://redirect.github.com/gin-gonic/gin/pull/2778)ic/gin/pull/2778\))) (https://redirect.github.com/gin-gonic/gin/pull/2803)ic/gin/pull/2803\)))

SECURITY

• Fix the GO-2022-1144 vulnerability (https://redirect.github.com/gin-gonic/gin/pull/3432)ic/gin/pull/3432\)))

v1.8.1

Compare Source

ENHANCEMENTS

• feat(context): add ContextWithFallback feature flag #​3172

v1.8.0

Compare Source

BREAK CHANGES

• TrustedProxies: Add default IPv6 support and refactor #​2967. Please replace RemoteIP() (net.IP, bool) with RemoteIP() net.IP
• gin.Context with fallback value from gin.Context.Request.Context() #​2751

BUG FIXES

• Fixed SetOutput() panics on go 1.17 #​2861
• Fix: wrong when wildcard follows named param #​2983
• Fix: missing sameSite when do context.reset() #​3123

ENHANCEMENTS

• Use Header() instead of deprecated HeaderMap #​2694
• RouterGroup.Handle regular match optimization of http method #​2685
• Add support go-json, another drop-in json replacement #​2680
• Use errors.New to replace fmt.Errorf will much better #​2707
• Use Duration.Truncate for truncating precision #​2711
• Get client IP when using Cloudflare #​2723
• Optimize code adjust #​2700
• Optimize code and reduce code cyclomatic complexity #​2737
• Improve sliceValidateError.Error performance #​2765
• Support custom struct tag #​2720
• Improve router group tests #​2787
• Fallback Context.Deadline() Context.Done() Context.Err() to Context.Request.Context() #​2769
• Some codes optimize #​2830 #​2834 #​2838 #​2837 #​2788 #​2848 #​2851 #​2701
• TrustedProxies: Add default IPv6 support and refactor #​2967
• Test(route): expose performRequest func #​3012
• Support h2c with prior knowledge #​1398
• Feat attachment filename support utf8 #​3071
• Feat: add StaticFileFS #​2749
• Feat(context): return GIN Context from Value method #​2825
• Feat: automatically SetMode to TestMode when run go test #​3139
• Add TOML bining for gin #​3081
• IPv6 add default trusted proxies #​3033

DOCS

• Add note about nomsgpack tag to the readme #​2703

v1.7.7

Compare Source

BUG FIXES

• Fixed X-Forwarded-For unsafe handling of CVE-2020-28483 #​2844, closed issue #​2862.
• Tree: updated the code logic for latestNode #​2897, closed issue #​2894 #​2878.
• Tree: fixed the misplacement of adding slashes #​2847, closed issue #​2843.
• Tree: fixed tsr with mixed static and wildcard paths #​2924, closed issue #​2918.

ENHANCEMENTS

• TrustedProxies: make it backward-compatible #​2887, closed issue #​2819.
• TrustedPlatform: provide custom options for another CDN services #​2906.

DOCS

• NoMethod: added usage annotation (#​2832).

v1.7.6

BUG FIXES

• bump new release to fix v1.7.5 release error by using v1.7.4 codes.

v1.7.4

Compare Source

BUG FIXES

• bump new release to fix checksum mismatch

v1.7.3

Compare Source

BUG FIXES

• fix level 1 router match #​2767, #​2796

v1.7.2

Compare Source

BUG FIXES

• Fix conflict between param and exact path #​2706. Close issue #​2682 #​2696.

v1.7.1

Compare Source

BUG FIXES

• fix: data race with trustedCIDRs from #​2674(#​2675)

v1.7.0

Compare Source

BUG FIXES

• fix compile error from #​2572 (#​2600)
• fix: print headers without Authorization header on broken pipe (#​2528)
• fix(tree): reassign fullpath when register new node (#​2366)

ENHANCEMENTS

• Support params and exact routes without creating conflicts (#​2663)
• chore: improve render string performance (#​2365)
• Sync route tree to httprouter latest code (#​2368)
• chore: rename getQueryCache/getFormCache to initQueryCache/initFormCa (#​2375)
• chore(performance): improve countParams (#​2378)
• Remove some functions that have the same effect as the bytes package (#​2387)
• update:SetMode function (#​2321)
• remove an unused type SecureJSONPrefix (#​2391)
• Add a redirect sample for POST method (#​2389)
• Add CustomRecovery builtin middleware (#​2322)
• binding: avoid 2038 problem on 32-bit architectures (#​2450)
• Prevent panic in Context.GetQuery() when there is no Request (#​2412)
• Add GetUint and GetUint64 method on gin.context (#​2487)
• update content-disposition header to MIME-style (#​2512)
• reduce allocs and improve the render WriteString (#​2508)
• implement ".Unwrap() error" on Error type (#​2525) (#​2526)
• Allow bind with a map[string]string (#​2484)
• chore: update tree (#​2371)
• Support binding for slice/array obj [Rewrite] (#​2302)
• basic auth: fix timing oracle (#​2609)
• Add mixed param and non-param paths (port of httprouter#​329) (#​2663)
• feat(engine): add trustedproxies and remoteIP (#​2632)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.19 -> 1.23.0
github.com/gin-contrib/sse	v0.1.0 -> v1.1.0
github.com/go-playground/locales	v0.13.0 -> v0.14.1
github.com/go-playground/universal-translator	v0.17.0 -> v0.18.1
github.com/leodido/go-urn	v1.2.0 -> v1.4.0
github.com/mattn/go-isatty	v0.0.17 -> v0.0.20
github.com/pelletier/go-toml/v2	v2.1.0 -> v2.2.4
github.com/ugorji/go/codec	v1.1.7 -> v1.3.0

[renovate]

ℹ️ Artifact update notice

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 9 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.19 -> 1.25.0
github.com/gin-contrib/sse	v0.1.0 -> v1.1.0
github.com/go-playground/locales	v0.13.0 -> v0.14.1
github.com/go-playground/universal-translator	v0.17.0 -> v0.18.1
github.com/leodido/go-urn	v1.2.0 -> v1.4.0
github.com/mattn/go-isatty	v0.0.17 -> v0.0.20
github.com/pelletier/go-toml/v2	v2.1.0 -> v2.2.4
golang.org/x/sys	v0.15.0 -> v0.41.0
golang.org/x/text	v0.14.0 -> v0.34.0
google.golang.org/protobuf	v1.31.0 -> v1.36.10