github.com/labstack/echo/v4

Releases

1. v4.11.3-0.20231105160101-c7d6d4373fdf5 Nov 2023pre-release

   Nothing published for this version

2. v4.11.3-0.20231024181213-69a0de84158f24 Oct 2023pre-release

   Nothing published for this version

3. v4.11.211 Oct 2023
   Release notes2 sources agree

   Security

   • Bump golang.org/x/net to prevent CVE-2023-39325 / CVE-2023-44487 HTTP/2 Rapid Reset Attack #2527
   • fix(sec): randomString bias introduced by #2490 #2492
   • CSRF/RequestID mw: switch math/random usage to crypto/random #2490

   Enhancements

   • Delete unused context in body_limit.go #2483
   • Use Go 1.21 in CI #2505
   • Fix some typos #2511
   • Allow CORS middleware to send Access-Control-Max-Age: 0 #2518
   • Bump dependancies #2522

   Open source →
4. v4.11.2-0.20231011053223-98a523756d8711 Oct 2023pre-release

   Nothing published for this version

5. v4.11.2-0.20230919052447-4bc3e475e31319 Sept 2023pre-release

   Nothing published for this version

6. v4.11.2-0.20230913194158-3950c444b72613 Sept 2023pre-release

   Nothing published for this version

7. v4.11.2-0.20230812060130-77d5ae6a917312 Aug 2023pre-release

   Nothing published for this version

8. v4.11.2-0.20230722204735-e6b96f8873fe22 Jul 2023pre-release

   Nothing published for this version

9. v4.11.2-0.20230721101056-626f13e3383021 Jul 2023pre-release

   Nothing published for this version

10. v4.11.2-0.20230718162005-4598a4a7458f18 Jul 2023pre-release

    Nothing published for this version

11. v4.11.116 Jul 2023
    Release notes2 sources agree

    Fixes

    • Fix Gzip middleware not sending response code for no content responses (404, 301/302 redirects etc) #2481

    Open source →
12. v4.11.1-0.20230716174157-a2e7085094bd16 Jul 2023pre-release

    Nothing published for this version

13. v4.11.014 Jul 2023
    Release notes2 sources agree

    Fixes

    • Fixes the proxy middleware concurrency issue of calling the Next() proxy target on Round Robin Balancer #2409
    • Fix group.RouteNotFound not working when group has attached middlewares #2411
    • Fix global error handler return error message when message is an error #2456
    • Do not use global timeNow variables #2477

    Enhancements

    • Added a optional config variable to disable centralized error handler in recovery middleware #2410
    • refactor: use strings.ReplaceAll directly #2424
    • Add support for Go1.20 http.rwUnwrapper to Response struct #2425
    • Check whether is nil before invoking centralized error handling #2429
    • Proper colon support in echo.Reverse method #2416
    • Fix misuses of a vs an in documentation comments #2436
    • Add link to slog.Handler library for Echo logging into README.md #2444
    • In proxy middleware Support retries of failed proxy requests #2414
    • gofmt fixes to comments #2452
    • gzip response only if it exceeds a minimal length #2267
    • Upgrade packages #2475

    Open source →
14. v4.10.3-0.20230714201822-60af056959d514 Jul 2023pre-release

    Nothing published for this version

15. v4.10.3-0.20230711203605-1ee8e22faa4e11 Jul 2023pre-release

    Nothing published for this version

16. v4.10.3-0.20230710092439-44ead54c8c9910 Jul 2023pre-release

    Nothing published for this version

17. v4.10.3-0.20230531055333-42f07ed8804031 May 2023pre-release

    Nothing published for this version

18. v4.10.3-0.20230529202653-fbfe2167f1d229 May 2023pre-release

    Nothing published for this version

19. v4.10.3-0.20230512191429-8e425c04311c12 May 2023pre-release

    Nothing published for this version

20. v4.10.3-0.20230501060136-deb17d2388a71 May 2023pre-release

    Nothing published for this version

21. v4.10.3-0.20230422183745-0d47b7e6a93d22 Apr 2023pre-release

    Nothing published for this version

22. v4.10.3-0.20230416181347-7d54690cdc4b16 Apr 2023pre-release

    Nothing published for this version

23. v4.10.3-0.20230415184833-de1c798143d315 Apr 2023pre-release

    Nothing published for this version

24. v4.10.3-0.20230406103741-a7802ea523e56 Apr 2023pre-release

    Nothing published for this version

25. v4.10.3-0.20230331175908-c0bc886b78b831 Mar 2023pre-release

    Nothing published for this version

26. v4.10.3-0.20230316054603-f22ba6725c6616 Mar 2023pre-release

    Nothing published for this version

27. v4.10.3-0.20230302211452-ec642f7df11b2 Mar 2023pre-release

    Nothing published for this version

28. v4.10.3-0.20230224183241-5b36ce36127b24 Feb 2023pre-release

    Nothing published for this version

29. v4.10.3-0.20230224110940-1e575b7b56d724 Feb 2023pre-release

    Nothing published for this version

30. v4.10.221 Feb 2023
    Release notes2 sources agree

    Security

    • filepath.Clean behaviour has changed in Go 1.20 - adapt to it #2406
    • Add middleware.CORSConfig.UnsafeWildcardOriginWithAllowCredentials to make UNSAFE usages of wildcard origin + allow cretentials less likely #2405

    Enhancements

    • Add more HTTP error values #2277

    Open source →
31. v4.10.119 Feb 2023
    Release notes2 sources agree

    Security

    • Upgrade deps due to the latest golang.org/x/net vulnerability #2402

    Enhancements

    • Add new JWT repository to the README #2377
    • Return an empty string for ctx.path if there is no registered path #2385
    • Add context timeout middleware #2380
    • Update link to jaegertracing #2394

    Open source →
32. v4.10.1-0.20230219191217-b888a30fe39419 Feb 2023pre-release

    Nothing published for this version

33. v4.10.1-0.20230210124325-6b09f3ffeb5010 Feb 2023pre-release

    Nothing published for this version

34. v4.10.1-0.20230201203820-82a964c657e21 Feb 2023pre-release

    Nothing published for this version

35. v4.10.1-0.20230128161549-08093a4a1dbd28 Jan 2023pre-release

    Nothing published for this version

36. v4.10.1-0.20230103220930-24a30611dfc03 Jan 2023pre-release

    Nothing published for this version

37. v4.10.027 Dec 2022
    Release notes2 sources agree

    Security

    • We are deprecating JWT middleware in this repository. Please use https://github.com/labstack/echo-jwt instead.

      JWT middleware is moved to separate repository to allow us to bump/upgrade version of JWT implementation (github.com/golang-jwt/jwt) we are using which we can not do in Echo core because this would break backwards compatibility guarantees we try to maintain.

    • This minor version bumps minimum Go version to 1.17 (from 1.16) due golang.org/x/ packages we depend on. There are several vulnerabilities fixed in these libraries.

      Echo still tries to support last 4 Go versions but there are occasions we can not guarantee this promise.

    Enhancements

    • Bump x/text to 0.3.8 #2305
    • Bump dependencies and add notes about Go releases we support #2336
    • Add helper interface for ProxyBalancer interface #2316
    • Expose middleware.CreateExtractors function so we can use it from echo-contrib repository #2338
    • Refactor func(Context) error to HandlerFunc #2315
    • Improve function comments #2329
    • Add new method HTTPError.WithInternal #2340
    • Replace io/ioutil package usages #2342
    • Add staticcheck to CI flow #2343
    • Replace relative path determination from proprietary to std #2345
    • Remove square brackets from ipv6 addresses in XFF (X-Forwarded-For header) #2182
    • Add testcases for some BodyLimit middleware configuration options #2350
    • Additional configuration options for RequestLogger and Logger middleware #2341
    • Add route to request log #2162
    • GitHub Workflows security hardening #2358
    • Add govulncheck to CI and bump dependencies #2362
    • Fix rate limiter docs #2366
    • Refactor how e.Routes() work and introduce e.OnAddRouteHandler callback #2337

    Open source →
38. v4.9.2-0.20221225201915-0056cc8ec00f25 Dec 2022pre-release

    Nothing published for this version

39. v4.9.2-0.20221217091600-895121d1780117 Dec 2022pre-release

    Nothing published for this version

40. v4.9.2-0.20221214133113-abecadcbdc3814 Dec 2022pre-release

    Nothing published for this version

41. v4.9.2-0.20221208194816-40eb889d14008 Dec 2022pre-release

    Nothing published for this version

42. v4.9.2-0.20221204183845-135c511f5dd14 Dec 2022pre-release

    Nothing published for this version

43. v4.9.2-0.20221130134723-8d4ac4c9076930 Nov 2022pre-release

    Nothing published for this version

44. v4.9.2-0.20221125112752-466bf80e418b25 Nov 2022pre-release

    Nothing published for this version

45. v4.9.2-0.20221124201731-75447969469424 Nov 2022pre-release

    Nothing published for this version

46. v4.9.2-0.20221123074240-36ff0b3fbd9b23 Nov 2022pre-release

    Nothing published for this version

47. v4.9.2-0.20221121142613-a0c211542ccf21 Nov 2022pre-release

    Nothing published for this version

48. v4.9.2-0.20221119210516-be23ab67ccdc19 Nov 2022pre-release

    Nothing published for this version

49. v4.9.2-0.20221112215647-fd2b102d3ee112 Nov 2022pre-release

    Nothing published for this version

50. v4.9.2-0.20221029185423-0ce73028d08129 Oct 2022pre-release

    Nothing published for this version

51. v4.9.2-0.20221018085153-8f2bf82982a618 Oct 2022pre-release

    Nothing published for this version

52. v4.9.112 Oct 2022
    Release notes2 sources agree

    Fixes

    • Fix logger panicing (when template is set to empty) by bumping dependency version #2295

    Enhancements

    • Improve CORS documentation #2272
    • Update readme about supported Go versions #2291
    • Tests: improve error handling on closing body #2254
    • Tests: refactor some of the assertions in tests #2275
    • Tests: refactor assertions #2301

    Open source →
53. v4.9.1-0.20221006083400-4c44305b23756 Oct 2022pre-release

    Nothing published for this version

54. v4.9.1-0.20221005033612-79221d91cadc5 Oct 2022pre-release

    Nothing published for this version

55. v4.9.1-0.20220914054039-666938e523c614 Sept 2022pre-release

    Nothing published for this version

56. v4.9.1-0.20220912194613-50e7e569f06612 Sept 2022pre-release

    Nothing published for this version

57. v4.9.04 Sept 2022
    Release notes2 sources agree

    Security

    • Fix open redirect vulnerability in handlers serving static directories (e.Static, e.StaticFs, echo.StaticDirectoryHandler) #2260

    Enhancements

    • Allow configuring ErrorHandler in CSRF middleware #2257
    • Replace HTTP method constants in tests with stdlib constants #2247

    Open source →
58. v4.8.1-0.20220904195054-0ac4d74402394 Sept 2022pre-release

    Nothing published for this version

59. v4.8.1-0.20220901075155-d77e8c09b21b1 Sept 2022pre-release

    Nothing published for this version

60. v4.8.1-0.20220820192545-fb57d96a6dc020 Aug 2022pre-release

    Nothing published for this version