Commit Graph

1788 Commits

Author SHA1 Message Date
Motoyasu Saburi
2d4bbec941
fix lack of escaping of filename in Content-Disposition (#3556)
* fix lack of escaping of filename in Content-Disposition

* add test for Content-Disposition filename escaping process

* fix filename escape bypass problem
fix backslashes before backquotes were not properly escaped problem.
2023-05-29 09:57:53 +08:00
dependabot[bot]
9f5ecd4be4
chore(deps): bump actions/setup-go from 3 to 4 (#3543)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3 to 4.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-26 11:50:31 +08:00
dependabot[bot]
20cd6bcfc4
chore(deps): bump github.com/go-playground/validator/v10 (#3610)
Bumps [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) from 10.12.0 to 10.14.0.
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](https://github.com/go-playground/validator/compare/v10.12.0...v10.14.0)

---
updated-dependencies:
- dependency-name: github.com/go-playground/validator/v10
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-26 11:47:59 +08:00
Hiroki Nakano
6bdc725c8d
Fix typos in ISSUE_TEMPLATE.md (#3616) 2023-05-26 11:45:46 +08:00
dependabot[bot]
1ab268989d
chore(deps): bump golang.org/x/net from 0.9.0 to 0.10.0 (#3599)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.9.0 to 0.10.0.
- [Commits](https://github.com/golang/net/compare/v0.9.0...v0.10.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-24 16:45:22 +08:00
ccpro
6a0556ed5a
improve render code coverage (#3525) 2023-05-10 17:19:26 +08:00
Bo-Yi Wu
eac2daac64
chore: update dependencies for various packages and libraries (#3585)
- Update bytedance/sonic to v1.8.8
- Update go-playground/validator/v10 to v10.12.0
- Update goccy/go-json to v0.10.2
- Update mattn/go-isatty to v0.0.18
- Update pelletier/go-toml/v2 to v2.0.7
- Update ugorji/go/codec to v1.2.11
- Update golang.org/x/net to v0.9.0
- Update google.golang.org/protobuf to v1.30.0
- Update klauspost/cpuid/v2 to v2.2.4
- Update leodido/go-urn to v1.2.3
- Update modern-go/concurrent to v0.0.0-20180306012644-bacd9c7ef1dd
- Update golang.org/x/arch to v0.3.0
- Update golang.org/x/crypto to v0.8.0
- Update golang.org/x/sys to v0.7.0
- Update golang.org/x/text to v0.9.0

Signed-off-by: appleboy <appleboy.tw@gmail.com>
2023-04-27 10:16:59 +08:00
Bo-Yi Wu
757a638b7b
chore: improve linting, testing, and GitHub Actions setup (#3583)
- Update golangci-lint version from `v1.48.0` to `v1.52.2`
- Remove Gitter notifications from GitHub Actions workflow
- Add gosec linter settings and include specific rules
- Exclude revive linter for test files
- Remove Gitter badge from README.md
- Delete codecov.yml file
- Change function parameter name in fs.go
- Remove unused parameter in defaultHandleRecovery function

Signed-off-by: appleboy <appleboy.tw@gmail.com>
2023-04-26 14:13:56 +08:00
Dylan Maassen van den Brink
fe989b6a6f
docs: changed documentation link for trusted proxies (#3575) 2023-04-26 11:18:22 +08:00
hopehook
a889c58de7
Convert strings and slices using the officially recommended way (#3344)
* Feat: Convert strings and slices using the officially recommended way.

Go official is expected to provide unsafe.{SliceData, Slice, StringData,
String} series methods in version 1.20 for conversion of strings and
slices.

* chore: add reference documentation link to comment of code

* chore: update Copyright

* chore: remove build tag "+build !go1.20"
2023-03-02 08:12:20 +08:00
lgbgbl
de1c4ec546
refactor: use bytes.ReplaceAll directly (#3455) 2023-03-01 13:57:15 +08:00
dependabot[bot]
457fabd7e1
chore(deps): bump github.com/bytedance/sonic from 1.8.1 to 1.8.2 (#3516)
Bumps [github.com/bytedance/sonic](https://github.com/bytedance/sonic) from 1.8.1 to 1.8.2.
- [Release notes](https://github.com/bytedance/sonic/releases)
- [Commits](https://github.com/bytedance/sonic/compare/v1.8.1...v1.8.2)

---
updated-dependencies:
- dependency-name: github.com/bytedance/sonic
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-01 10:05:28 +08:00
dependabot[bot]
d1b2408027
chore(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#3515)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.1 to 1.8.2.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.1...v1.8.2)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-01 10:04:56 +08:00
thinkerou
1e1f0b1e76
chore: support min go version 1.18 (#3511)
* chore: min go version 1.18

* fix build tag error

* remove build tag

* fix word

* remove any.go

* replace interface{} instead of any
2023-03-01 10:03:48 +08:00
dependabot[bot]
943e93cba0
chore(deps): bump github.com/ugorji/go/codec from 1.2.9 to 1.2.10 (#3509)
Bumps [github.com/ugorji/go/codec](https://github.com/ugorji/go) from 1.2.9 to 1.2.10.
- [Release notes](https://github.com/ugorji/go/releases)
- [Commits](https://github.com/ugorji/go/compare/v1.2.9...v1.2.10)

---
updated-dependencies:
- dependency-name: github.com/ugorji/go/codec
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-21 17:43:24 +08:00
dependabot[bot]
0b5df9fc39
chore(deps): bump github.com/bytedance/sonic from 1.7.1 to 1.8.1 (#3508)
Bumps [github.com/bytedance/sonic](https://github.com/bytedance/sonic) from 1.7.1 to 1.8.1.
- [Release notes](https://github.com/bytedance/sonic/releases)
- [Commits](https://github.com/bytedance/sonic/compare/v1.7.1...v1.8.1)

---
updated-dependencies:
- dependency-name: github.com/bytedance/sonic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-21 17:42:49 +08:00
thinkerou
ea03e10384
docs(readme): release v1.9.0 version (#3474) 2023-02-21 17:20:32 +08:00
t0rchwo0d
4cee78f538
Fix #3500 Add escape logic for header (#3503) 2023-02-19 21:25:48 +08:00
Kevin Chen
fc1c43298d
fix(security): vulnerability GO-2023-1571 (#3505) 2023-02-18 14:43:39 +08:00
t0rchwo0d
81ac7d55a0
Add escape logic for header (#3500) 2023-02-17 10:00:19 +08:00
dependabot[bot]
d07db174ac
chore(deps): bump golang.org/x/net from 0.5.0 to 0.6.0 (#3498)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.5.0 to 0.6.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](https://github.com/golang/net/compare/v0.5.0...v0.6.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-14 10:59:36 +08:00
David Desmarais-Michaud
c1d06e3d08
add supprt for go1.20 http.rwUnwrapper to gin.responseWriter (#3489) 2023-02-12 13:01:43 +08:00
mstmdev
bd82c9e351
chore(go): Add support go 1.20 (#3484)
* chore(go): Add support go 1.20

* Surround the go version parameters with single quotes

* chore(deps): bump github.com/bytedance/sonic from v1.7.0 to v1.7.1
2023-02-12 13:01:05 +08:00
Vladislav Dmitriyev
0c96a20209
Stop useless panicking in context and render (#2150)
Co-authored-by: Bo-Yi Wu <appleboy.tw@gmail.com>
2023-02-12 10:01:33 +08:00
dependabot[bot]
153b229fcc
chore(deps): bump github.com/ugorji/go/codec from 1.2.8 to 1.2.9 (#3491)
Bumps [github.com/ugorji/go/codec](https://github.com/ugorji/go) from 1.2.8 to 1.2.9.
- [Release notes](https://github.com/ugorji/go/releases)
- [Commits](https://github.com/ugorji/go/compare/v1.2.8...v1.2.9)

---
updated-dependencies:
- dependency-name: github.com/ugorji/go/codec
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-07 16:37:36 +08:00
Alireza (Pure)
e02ae6ae61
chore(router): match method added to routergroup for multiple HTTP methods supporting (#3464) 2023-02-06 15:46:42 +08:00
dependabot[bot]
c5fd06361b
chore(deps): bump github.com/go-playground/validator/v10 (#3482)
Bumps [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) from 10.11.1 to 10.11.2.
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](https://github.com/go-playground/validator/compare/v10.11.1...v10.11.2)

---
updated-dependencies:
- dependency-name: github.com/go-playground/validator/v10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-31 19:53:45 +08:00
dependabot[bot]
ea17875035
chore(deps): bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (#3478)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 3.3.1 to 3.4.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v3.3.1...v3.4.0)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-31 19:53:10 +08:00
hopehook
b2d4185eec
Replace bytes.Buffer with strings.Builder where appropriate (#3347)
To build strings more efficiently, use strings.Builder instead.
2023-01-20 09:51:42 +08:00
mstmdev
8cd11c82e4
chore(docs): Remove the Brigade project, because the Gin is no longer used in the latest version and the Brigade is an archived CNCF project now (#3378) 2023-01-17 14:26:27 +08:00
Heliner
1660995a04
Adjust the position of some functions (#3385)
Co-authored-by: fredhan <fredhan@futunn.com>
2023-01-17 14:23:54 +08:00
dependabot[bot]
97082f8acc
chore(deps): bump github.com/bytedance/sonic from 1.6.1 to 1.7.0 (#3473)
Bumps [github.com/bytedance/sonic](https://github.com/bytedance/sonic) from 1.6.1 to 1.7.0.
- [Release notes](https://github.com/bytedance/sonic/releases)
- [Commits](https://github.com/bytedance/sonic/compare/v1.6.1...v1.7.0)

---
updated-dependencies:
- dependency-name: github.com/bytedance/sonic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-17 09:58:28 +08:00
adrianiacobghiula
7cb151bb4c
fix(context): panic on NegotiateFormat - index out of range (#3397) 2023-01-16 22:50:07 +08:00
dependabot[bot]
3010cbd7f4
chore(deps): bump github.com/bytedance/sonic from 1.6.0 to 1.6.1 (#3467)
Bumps [github.com/bytedance/sonic](https://github.com/bytedance/sonic) from 1.6.0 to 1.6.1.
- [Release notes](https://github.com/bytedance/sonic/releases)
- [Commits](https://github.com/bytedance/sonic/compare/v1.6.0...v1.6.1)

---
updated-dependencies:
- dependency-name: github.com/bytedance/sonic
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-10 10:12:12 +08:00
dependabot[bot]
47ae6ee386
chore(deps): bump golang.org/x/net from 0.4.0 to 0.5.0 (#3466)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.4.0 to 0.5.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](https://github.com/golang/net/compare/v0.4.0...v0.5.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-10 10:11:45 +08:00
Kristian Svalland
8eb5f832ba
fix(router): tree bug where loop index is not decremented. (#3460)
fixes https://github.com/gin-gonic/gin/issues/3459
2023-01-07 08:57:54 +08:00
apriil15
c58e0d59ca
docs: update markdown format (#3446)
* docs: update markdown format

* fix: resolve conflict

* docs: update markdown format

* docs: update

* docs: update

* Revert "docs: update"

This reverts commit 82716193b753dbcad6fee85973790727b7a31ae5.
2023-01-05 10:15:29 +08:00
dependabot[bot]
79a61b9032
chore(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17 (#3457)
Bumps [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty) from 0.0.16 to 0.0.17.
- [Release notes](https://github.com/mattn/go-isatty/releases)
- [Commits](https://github.com/mattn/go-isatty/compare/v0.0.16...v0.0.17)

---
updated-dependencies:
- dependency-name: github.com/mattn/go-isatty
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-03 11:39:57 +08:00
dependabot[bot]
7626361587
chore(deps): bump github.com/ugorji/go/codec from 1.2.7 to 1.2.8 (#3458)
Bumps [github.com/ugorji/go/codec](https://github.com/ugorji/go) from 1.2.7 to 1.2.8.
- [Release notes](https://github.com/ugorji/go/releases)
- [Commits](https://github.com/ugorji/go/compare/v1.2.7...v1.2.8)

---
updated-dependencies:
- dependency-name: github.com/ugorji/go/codec
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-03 10:40:53 +08:00
thinkerou
c9b27249fb
chore(yaml): upgrade dependency to v3 version (#3456)
fixes https://github.com/gin-gonic/gin/issues/3451
fixes https://github.com/gin-gonic/gin/issues/3306
fixes https://github.com/gin-gonic/gin/issues/3362
fixes https://github.com/gin-gonic/gin/issues/2581
2023-01-02 12:40:48 +08:00
youngxhui
7d8fc1563b
update context.go Get/Set method use defer (#3429)
Using defer to unlock  is more in line with go standards
2023-01-02 11:39:26 +08:00
Alireza (Pure)
41f2669ebc
console logger HTTP status bug fixed and the corresponding unit test added (#3453) 2023-01-02 11:38:53 +08:00
thinkerou
82e1c53cc0
docs(readme): move more example to docs/doc.md (#3449) 2023-01-02 10:40:25 +08:00
dependabot[bot]
8659ab573c
chore(deps): bump github.com/goccy/go-json from 0.9.11 to 0.10.0 (#3424)
Bumps [github.com/goccy/go-json](https://github.com/goccy/go-json) from 0.9.11 to 0.10.0.
- [Release notes](https://github.com/goccy/go-json/releases)
- [Changelog](https://github.com/goccy/go-json/blob/master/CHANGELOG.md)
- [Commits](https://github.com/goccy/go-json/compare/v0.9.11...v0.10.0)

---
updated-dependencies:
- dependency-name: github.com/goccy/go-json
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-25 13:49:44 +08:00
mstmdev
e868fd1d3d
test(TOML): Add some tests for the TOML render (#3401) 2022-12-22 23:18:47 +08:00
lgbgbl
297b664cf8
refactor: avoid calling strings.ToLower twice (#3433) 2022-12-22 23:17:19 +08:00
Bo-Yi Wu
2285aa5430
docs(readme): release v1.8.2 version (#3420)
* docs(readme): release v1.8.2 version

* Update CHANGELOG.md
2022-12-21 15:02:00 +08:00
mstmdev
d4caeee7c7
Fix the GO-2022-1144 vulnerability (#3432) 2022-12-21 14:44:36 +08:00
dependabot[bot]
f551d7d8c2
chore(deps): bump github.com/bytedance/sonic from 1.4.0 to 1.6.0 (#3442)
Bumps [github.com/bytedance/sonic](https://github.com/bytedance/sonic) from 1.4.0 to 1.6.0.
- [Release notes](https://github.com/bytedance/sonic/releases)
- [Commits](https://github.com/bytedance/sonic/compare/v1.4.0...v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/bytedance/sonic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-21 14:43:42 +08:00
dependabot[bot]
483ac2a63b
chore(deps): bump goreleaser/goreleaser-action from 3 to 4 (#3441)
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 3 to 4.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-21 14:43:06 +08:00