Created by: dependabot[bot]
Bumps github.com/gin-gonic/gin from 1.7.6 to 1.7.7.
Release notes
Sourced from github.com/gin-gonic/gin's releases.
Release v1.7.7
BUGFIXES
- Fixed X-Forwarded-For unsafe handling of CVE-2020-28483 #2844, closed issue #2862
- Tree: updated the code logic for
latestNode
#2897, closed issue #2894 #2878- Tree: fixed the misplacement of adding slashes #2847, closed issue #2843
- Tree: fixed tsr with mixed static and wildcard paths #2924, closed issue #2918
ENHANCEMENTS
- TrustedProxies: make it backward-compatible #2887, closed issue #2819
- TrustedPlatform: provide custom options for another CDN services #2906
DOCS
- NoMethod: added usage annotation (#2832)
Changelog
Sourced from github.com/gin-gonic/gin's changelog.
Gin v1.7.7
BUGFIXES
- Fixed X-Forwarded-For unsafe handling of CVE-2020-28483 #2844, closed issue #2862.
- Tree: updated the code logic for
latestNode
#2897, closed issue #2894 #2878.- Tree: fixed the misplacement of adding slashes #2847, closed issue #2843.
- Tree: fixed tsr with mixed static and wildcard paths #2924, closed issue #2918.
ENHANCEMENTS
- TrustedProxies: make it backward-compatible #2887, closed issue #2819.
- TrustedPlatform: provide custom options for another CDN services #2906.
DOCS
- NoMethod: added usage annotation (#2832).
Commits
-
84d927b
chore(docs): Bump to v1.7.7 (#2952) -
2d3572a
Update version.go (#2923) -
ae6f7a3
fix tsr with mixed static and wildcard paths (#2924) -
bb945cf
fix the misplacement of adding slashes (#2847) -
a3f0872
Provide custom options of TrustedPlatform for another CDN services (#2906) -
b5ad462
Update the code logic for latestNode in tree.go (#2897) -
3b555a5
ClientIP: check every proxy for trustiness (#2844) -
fc5d6dd
Tidy: Complete TrustedProxies feature (#2887) -
7d20914
Quick Fix c.ClientIP() mistakely parsing to 127.0.0.1 for who not using r.Run... -
4ad9526
Fix grammatical and spelling errors in context.go (#2883) - Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebase
will rebase this PR -
@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it -
@dependabot merge
will merge this PR after your CI passes on it -
@dependabot squash and merge
will squash and merge this PR after your CI passes on it -
@dependabot cancel merge
will cancel a previously requested merge and block automerging -
@dependabot reopen
will reopen this PR if it is closed -
@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)