fix(deps): update module github.com/gin-gonic/gin to v1.11.0

[mend-developer-platform-dev]

Note

The previously announced change to the Renovate GitHub app being renamed to mend[bot] has been cancelled.

This notice will be removed on 2025-10-07.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/gin-gonic/gin	v1.9.1 -> v1.11.0

---

Release Notes

gin-gonic/gin (github.com/gin-gonic/gin)

v1.11.0

Compare Source

Features

• feat(gin): Experimental support for HTTP/3 using quic-go/quic-go (#​3210)
• feat(form): add array collection format in form binding (#​3986), add custom string slice for form tag unmarshal (#​3970)
• feat(binding): add BindPlain (#​3904)
• feat(fs): Export, test and document OnlyFilesFS (#​3939)
• feat(binding): add support for unixMilli and unixMicro (#​4190)
• feat(form): Support default values for collections in form binding (#​4048)
• feat(context): GetXxx added support for more go native types (#​3633)

Enhancements

• perf(context): optimize getMapFromFormData performance (#​4339)
• refactor(tree): replace string(/) with "/" in node.insertChild (#​4354)
• refactor(render): remove headers parameter from writeHeader (#​4353)
• refactor(context): simplify "GetType()" functions (#​4080)
• refactor(slice): simplify SliceValidationError Error method (#​3910)
• refactor(context):Avoid using filepath.Dir twice in SaveUploadedFile (#​4181)
• refactor(context): refactor context handling and improve test robustness (#​4066)
• refactor(binding): use strings.Cut to replace strings.Index (#​3522)
• refactor(context): add an optional permission parameter to SaveUploadedFile (#​4068)
• refactor(context): verify URL is Non-nil in initQueryCache() (#​3969)
• refactor(context): YAML judgment logic in Negotiate (#​3966)
• tree: replace the self-defined 'min' to official one (#​3975)
• context: Remove redundant filepath.Dir usage (#​4181)

Bug Fixes

• fix: prevent middleware re-entry issue in HandleContext (#​3987)
• fix(binding): prevent duplicate decoding and add validation in decodeToml (#​4193)
• fix(gin): Do not panic when handling method not allowed on empty tree (#​4003)
• fix(gin): data race warning for gin mode (#​1580)
• fix(context): verify URL is Non-nil in initQueryCache() (#​3969)
• fix(context): YAML judgment logic in Negotiate (#​3966)
• fix(context): check handler is nil (#​3413)
• fix(readme): fix broken link to English documentation (#​4222)
• fix(tree): Keep panic infos consistent when wildcard type build faild (#​4077)

Build process updates / CI

• ci: integrate Trivy vulnerability scanning into CI workflow (#​4359)
• ci: support Go 1.25 in CI/CD (#​4341)
• build(deps): upgrade github.com/bytedance/sonic from v1.13.2 to v1.14.0 (#​4342)
• ci: add Go version 1.24 to GitHub Actions (#​4154)
• build: update Gin minimum Go version to 1.21 (#​3960)
• ci(lint): enable new linters (testifylint, usestdlibvars, perfsprint, etc.) (#​4010, #​4091, #​4090)
• ci(lint): update workflows and improve test request consistency (#​4126)

Dependency updates

• chore(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#​4346, #​4356)
• chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#​4347)
• chore(deps): bump actions/setup-go from 5 to 6 (#​4351)
• chore(deps): bump github.com/quic-go/quic-go from 0.53.0 to 0.54.0 (#​4328)
• chore(deps): bump golang.org/x/net from 0.33.0 to 0.38.0 (#​4178, #​4221)
• chore(deps): bump github.com/go-playground/validator/v10 from 10.20.0 to 10.22.1 (#​4052)

Documentation updates

• docs(changelog): update release notes for Gin v1.10.1 (#​4360)
• docs: Fixing English grammar mistakes and awkward sentence structure in doc/doc.md (#​4207)
• docs: update documentation and release notes for Gin v1.10.0 (#​3953)
• docs: fix typo in Gin Quick Start (#​3997)
• docs: fix comment and link issues (#​4205, #​3938)
• docs: fix route group example code (#​4020)
• docs(readme): add Portuguese documentation (#​4078)
• docs(context): fix some function names in comment (#​4079)

---

v1.10.1

Compare Source

Features

• refactor: strengthen HTTPS security and improve code organization
• feat(binding): Support custom BindUnmarshaler for binding. (#​3933)

Enhancements

• chore(deps): bump github.com/bytedance/sonic from 1.11.3 to 1.11.6 (#​3940)
• chore(deps): bump golangci/golangci-lint-action from 4 to 5 (#​3941)
• chore: update external dependencies to latest versions (#​3950)
• chore: update various Go dependencies to latest versions (#​3901)
• chore: refactor configuration files for better readability (#​3951)
• chore: update changelog categories and improve documentation (#​3917)
• feat: update version constant to v1.10.0 (#​3952)

Build process updates

• ci(release): refactor changelog regex patterns and exclusions (#​3914)
• ci(Makefile): vet command add .PHONY (#​3915)

v1.10.0

Compare Source

Features

• feat(auth): add proxy-server authentication (#​3877) (@​EndlessParadox1)
• feat(bind): ShouldBindBodyWith shortcut and change doc (#​3871) (@​RedCrazyGhost)
• feat(binding): Support custom BindUnmarshaler for binding. (#​3933) (@​dkkb)
• feat(binding): support override default binding implement (#​3514) (@​ssfyn)
• feat(engine): Added OptionFunc and With (#​3572) (@​flc1125)
• feat(logger): ability to skip logs based on user-defined logic (#​3593) (@​palvaneh)

Bug fixes

• Revert "fix(uri): query binding bug (#​3236)" (#​3899) (@​appleboy)
• fix(binding): binding error while not upload file (#​3819) (#​3820) (@​clearcodecn)
• fix(binding): dereference pointer to struct (#​3199) (@​echovl)
• fix(context): make context Value method adhere to Go standards (#​3897) (@​FarmerChillax)
• fix(engine): fix unit test (#​3878) (@​flc1125)
• fix(header): Allow header according to RFC 7231 (HTTP 405) (#​3759) (@​Crocmagnon)
• fix(route): Add fullPath in context copy (#​3784) (@​KarthikReddyPuli)
• fix(router): catch-all conflicting wildcard (#​3812) (@​FirePing32)
• fix(sec): upgrade golang.org/x/crypto to 0.17.0 (#​3832) (@​chncaption)
• fix(tree): correctly expand the capacity of params (#​3502) (@​georgijd-form3)
• fix(uri): query binding bug (#​3236) (@​illiafox)
• fix: Add pointer support for url query params (#​3659) (#​3666) (@​omkar-foss)
• fix: protect Context.Keys map when call Copy method (#​3873) (@​kingcanfish)

Enhancements

• chore(CI): update release args (#​3595) (@​qloog)
• chore(IP): add TrustedPlatform constant for Fly.io. (#​3839) (@​ab)
• chore(debug): add ability to override the debugPrint statement (#​2337) (@​josegonzalez)
• chore(deps): update dependencies to latest versions (#​3835) (@​appleboy)
• chore(header): Add support for RFC 9512: application/yaml (#​3851) (@​vincentbernat)
• chore(http): use white color for HTTP 1XX (#​3741) (@​viralparmarme)
• chore(optimize): the ShouldBindUri method of the Context struct (#​3911) (@​1911860538)
• chore(perf): Optimize the Copy method of the Context struct (#​3859) (@​1911860538)
• chore(refactor): modify interface check way (#​3855) (@​demoManito)
• chore(request): check reader if it's nil before reading (#​3419) (@​noahyao1024)
• chore(security): upgrade Protobuf for CVE-2024-24786 (#​3893) (@​Fotkurz)
• chore: refactor CI and update dependencies (#​3848) (@​appleboy)
• chore: refactor configuration files for better readability (#​3951) (@​appleboy)
• chore: update GitHub Actions configuration (#​3792) (@​appleboy)
• chore: update changelog categories and improve documentation (#​3917) (@​appleboy)
• chore: update dependencies to latest versions (#​3694) (@​appleboy)
• chore: update external dependencies to latest versions (#​3950) (@​appleboy)
• chore: update various Go dependencies to latest versions (#​3901) (@​appleboy)

Build process updates

• build(codecov): Added a codecov configuration (#​3891) (@​flc1125)
• ci(Makefile): vet command add .PHONY (#​3915) (@​imalasong)
• ci(lint): update tooling and workflows for consistency (#​3834) (@​appleboy)
• ci(release): refactor changelog regex patterns and exclusions (#​3914) (@​appleboy)
• ci(testing): add go1.22 version (#​3842) (@​appleboy)

Documentation updates

• docs(context): Added deprecation comments to BindWith (#​3880) (@​flc1125)
• docs(middleware): comments to function BasicAuthForProxy (#​3881) (@​EndlessParadox1)
• docs: Add document to constant AuthProxyUserKey and BasicAuthForProxy. (#​3887) (@​EndlessParadox1)
• docs: fix typo in comment (#​3868) (@​testwill)
• docs: fix typo in function documentation (#​3872) (@​TotomiEcio)
• docs: remove redundant comments (#​3765) (@​WeiTheShinobi)
• feat: update version constant to v1.10.0 (#​3952) (@​appleboy)

Others

• Upgrade golang.org/x/net -> v0.13.0 (#​3684) (@​cpcf)
• test(git): gitignore add develop tools (#​3370) (@​demoManito)
• test(http): use constant instead of numeric literal (#​3863) (@​testwill)
• test(path): Optimize unit test execution results (#​3883) (@​flc1125)
• test(render): increased unit tests coverage (#​3691) (@​araujo88)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[mend-developer-platform-dev]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 13 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.20 -> 1.23.0
github.com/stretchr/testify	v1.8.4 -> v1.11.1
github.com/bytedance/sonic	v1.10.0-rc3 -> v1.14.0
github.com/gabriel-vasile/mimetype	v1.4.2 -> v1.4.8
github.com/gin-contrib/sse	v0.1.0 -> v1.1.0
github.com/go-playground/validator/v10	v10.14.1 -> v10.27.0
github.com/klauspost/cpuid/v2	v2.2.5 -> v2.3.0
github.com/leodido/go-urn	v1.2.4 -> v1.4.0
github.com/pelletier/go-toml/v2	v2.0.9 -> v2.2.4
github.com/ugorji/go/codec	v1.2.11 -> v1.3.0
golang.org/x/arch	v0.4.0 -> v0.20.0
golang.org/x/crypto	v0.17.0 -> v0.40.0
golang.org/x/net	v0.19.0 -> v0.42.0
google.golang.org/protobuf	v1.31.0 -> v1.36.9