Update module github.com/go-chi/chi/v5 to v5.2.4 [SECURITY] (v14.0/forgejo) #11397

Merged

viceice merged 1 commit from renovate/v14.0/forgejo-go-github.com-go-chi-chi-v5-vulnerability into v14.0/forgejo

2026-02-22 09:12:36 +01:00

viceice-bot commented

2026-02-21 15:34:33 +01:00

Member

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/go-chi/chi/v5	`v5.2.3` -> `v5.2.4`

Open redirect vulnerability in the RedirectSlashes middleware in github.com/go-chi/chi

GHSA-mqqf-5wvp-8fh8 / GO-2026-4316

More information

Details

Open redirect vulnerability in the RedirectSlashes middleware in github.com/go-chi/chi

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).

Release Notes

go-chi/chi (github.com/go-chi/chi/v5)

`v5.2.4`

Compare Source

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `v5.2.3` -> `v5.2.4` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgo-chi%2fchi%2fv5/v5.2.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgo-chi%2fchi%2fv5/v5.2.3/v5.2.4?slim=true) | --- ### Open redirect vulnerability in the RedirectSlashes middleware in github.com/go-chi/chi [GHSA-mqqf-5wvp-8fh8](https://github.com/advisories/GHSA-mqqf-5wvp-8fh8) / [GO-2026-4316](https://pkg.go.dev/vuln/GO-2026-4316) <details> <summary>More information</summary> #### Details Open redirect vulnerability in the RedirectSlashes middleware in github.com/go-chi/chi #### Severity Unknown #### References - [https://github.com/go-chi/chi/security/advisories/GHSA-mqqf-5wvp-8fh8](https://github.com/go-chi/chi/security/advisories/GHSA-mqqf-5wvp-8fh8) - [https://github.com/go-chi/chi/commit/6eb35881c0e438ffb663ddbad3a61babaa5e5d8a](https://github.com/go-chi/chi/commit/6eb35881c0e438ffb663ddbad3a61babaa5e5d8a) - [https://github.com/go-chi/chi/issues/1037](https://github.com/go-chi/chi/issues/1037) This data is provided by [OSV](https://osv.dev/vulnerability/GO-2026-4316) and the [Go Vulnerability Database](https://github.com/golang/vulndb) ([CC-BY 4.0](https://github.com/golang/vulndb#license)). </details> --- ### Release Notes <details> <summary>go-chi/chi (github.com/go-chi/chi/v5)</summary> ### [`v5.2.4`](https://github.com/go-chi/chi/compare/v5.2.3...v5.2.4) [Compare Source](https://github.com/go-chi/chi/compare/v5.2.3...v5.2.4) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

Rows
Columns