Skip to content

Bump github.com/labstack/echo/v4 from 4.13.4 to 4.14.0#72

Merged
mazrean merged 1 commit intomainfrom
dependabot/go_modules/github.com/labstack/echo/v4-4.14.0
Dec 20, 2025
Merged

Bump github.com/labstack/echo/v4 from 4.13.4 to 4.14.0#72
mazrean merged 1 commit intomainfrom
dependabot/go_modules/github.com/labstack/echo/v4-4.14.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Dec 12, 2025

Bumps github.com/labstack/echo/v4 from 4.13.4 to 4.14.0.

Release notes

Sourced from github.com/labstack/echo/v4's releases.

v4.14.0

middleware.Logger() has been deprecated. For request logging, use middleware.RequestLogger() or middleware.RequestLoggerWithConfig().

middleware.RequestLogger() replaces middleware.Logger(), offering comparable configuration while relying on the Go standard library’s new slog logger.

The previous default output format was JSON. The new default follows the standard slog logger settings. To continue emitting request logs in JSON, configure slog accordingly:

slog.SetDefault(slog.New(slog.NewJSONHandler(os.Stdout, nil)))
e.Use(middleware.RequestLogger())

If you are developing anything more substantial than a demo, use middleware.RequestLoggerWithConfig()

Security

What's Changed

New Contributors

Full Changelog: labstack/echo@v4.13.4...v4.14.0

Changelog

Sourced from github.com/labstack/echo/v4's changelog.

v4.14.0 - 2025-12-11

middleware.Logger has been deprecated. For request logging, use middleware.RequestLogger or middleware.RequestLoggerWithConfig.

middleware.RequestLogger replaces middleware.Logger, offering comparable configuration while relying on the Go standard library’s new slog logger.

The previous default output format was JSON. The new default follows the standard slog logger settings. To continue emitting request logs in JSON, configure slog accordingly:

slog.SetDefault(slog.New(slog.NewJSONHandler(os.Stdout, nil)))
e.Use(middleware.RequestLogger())

Security

Enhancements

Commits
  • 6392cb4 Changelog for 4.14.0
  • c9bd2cd Update golang.org/x/* deps (#2850)
  • c12cb08 Logger middleware json string escaping and deprecation (#2849)
  • 612967a Update deps
  • 53b692c Ensure proxy connection is closed in proxyRaw function
  • e644ff8 Replace custom private IP range check with built-in net.IP.IsPrivate() method
  • 40e2e8f Fix typo "+"
  • 55cb3b6 Optimize realm quoting to happen once during middleware creation
  • dbd583f Add comprehensive tests for realm quoting behavior
  • 432a2ad Improve BasicAuth middleware: use strings.Cut and RFC compliance
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 12, 2025
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Dec 12, 2025

Benchmark Result

goos: linux
goarch: amd64
pkg: github.com/mazrean/formstream
cpu: AMD EPYC 7763 64-Core Processor                
BenchmarkFormStreamFastPath/1MB-4 	    2622	    414436 ns/op	   10014 B/op	      64 allocs/op
BenchmarkFormStreamFastPath/10MB-4         	     301	   3918913 ns/op	   10028 B/op	      64 allocs/op
BenchmarkFormStreamFastPath/100MB-4        	      28	  41542933 ns/op	   10304 B/op	      64 allocs/op
BenchmarkFormStreamFastPath/1GB-4          	       3	 431050744 ns/op	   12906 B/op	      65 allocs/op
BenchmarkFormStreamSlowPath/1MB-4          	    2547	    463285 ns/op	   15084 B/op	      69 allocs/op
BenchmarkFormStreamSlowPath/10MB-4         	     272	   4470868 ns/op	  133538 B/op	      69 allocs/op
BenchmarkFormStreamSlowPath/100MB-4        	       6	 171752244 ns/op	44788038 B/op	      86 allocs/op
BenchmarkFormStreamSlowPath/1GB-4          	       1	1805437268 ns/op	134269664 B/op	     102 allocs/op
BenchmarkStdMultipartNextPart/1MB-4        	    2634	    424874 ns/op	   39313 B/op	      32 allocs/op
BenchmarkStdMultipartNextPart/10MB-4       	     303	   3922027 ns/op	   39316 B/op	      32 allocs/op
BenchmarkStdMultipartNextPart/100MB-4      	      27	  41474311 ns/op	   39611 B/op	      32 allocs/op
BenchmarkStdMultipartNextPart/1GB-4        	       3	 427097111 ns/op	   42202 B/op	      33 allocs/op
BenchmarkStdMultipartReadForm/1MB-4        	    1060	   1092549 ns/op	 4204209 B/op	      63 allocs/op
BenchmarkStdMultipartReadForm/10MB-4       	     127	   9413027 ns/op	33566649 B/op	      66 allocs/op
BenchmarkStdMultipartReadForm/100MB-4      	       6	 179372611 ns/op	134264337 B/op	      79 allocs/op
BenchmarkStdMultipartReadForm/1GB-4        	       1	1816525413 ns/op	134275432 B/op	      82 allocs/op
PASS
ok  	github.com/mazrean/formstream	28.433s
pprof command
gh api /repos/mazrean/formstream/actions/artifacts/4932354458/zip > /tmp/profile.zip
unzip /tmp/profile.zip -d profile
rm -rf /tmp/profile.zip
go tool pprof -http :6060 profile/cpu.out

@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Dec 12, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 51.74%. Comparing base (8da98ec) to head (6aee868).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #72   +/-   ##
=======================================
  Coverage   51.74%   51.74%           
=======================================
  Files          12       12           
  Lines         431      431           
=======================================
  Hits          223      223           
  Misses        187      187           
  Partials       21       21           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@mazrean mazrean enabled auto-merge (squash) December 20, 2025 11:40
Bumps [github.com/labstack/echo/v4](https://github.com/labstack/echo) from 4.13.4 to 4.14.0.
- [Release notes](https://github.com/labstack/echo/releases)
- [Changelog](https://github.com/labstack/echo/blob/master/CHANGELOG.md)
- [Commits](labstack/echo@v4.13.4...v4.14.0)

---
updated-dependencies:
- dependency-name: github.com/labstack/echo/v4
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/labstack/echo/v4-4.14.0 branch from c9972e5 to 6aee868 Compare December 20, 2025 11:41
@mazrean mazrean merged commit 9d97625 into main Dec 20, 2025
3 checks passed
@mazrean mazrean deleted the dependabot/go_modules/github.com/labstack/echo/v4-4.14.0 branch December 20, 2025 11:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants