What's Changed

• Use strings.Cut in a few places by @JRaspass in #971
• Fix non-constant format strings in t.Fatalf by @JRaspass in #972
• Apply fieldalignment fixes to optimize struct memory layout by @pixel365 in #974
• go 1.24 by @pkieltyka in #977
• chore: delint ioutil usage by @costela in #962
• Fixed typo in Router interface definition by @mithileshgupta12 in #958
• Add support for TinyGo by @efraimbart in #978
• Exclude middleware/profiler.go in TinyGo, as there's no net/http/pprof pkg by @cxjava in #982
• Make use of strings.Cut by @scop in #1005
• Change install command format to code block by @sglkc in #1001
• Correct documentation by @mrdomino in #992

Security fix

• Fixes GHSA-vrw8-fxc6-2r93 - "Host Header Injection Leads to Open Redirect in RedirectSlashes" commit
  • a lower-severity Open Redirect that can't be exploited in browser or email client, as it requires manipulation of a Host header
  • reported by Anuraag Baishya, @anuraagbaishya. Thank you!

New Contributors

• @pixel365 made their first contribution in #974
• @mithileshgupta12 made their first contribution in #958
• @efraimbart made their first contribution in #978
• @cxjava made their first contribution in #982
• @sglkc made their first contribution in #1001
• @mrdomino made their first contribution in #992

Full Changelog: v5.2.1...v5.2.2

⚠️ Chi supports Go 1.20+

Starting this release, we will now support the four most recent major versions of Go. See #963 for related discussion.

What's Changed

• Support the four most recent major versions of Go by @VojtechVitek in #969

Full Changelog: v5.2.0...v5.2.1

What's Changed

• update credits section to link to goji license by @pkieltyka in #944
• go 1.23 by @pkieltyka in #945
• Make Context.RoutePattern() nil-safe by @gaiaz-iusipov in #927
• govet: Fix non-constant format string by @marcofranssen in #952
• Add Find to Routes interface by @joeriddles in #872
• Fix grammar error by @AntonC9018 in #917
• feat(): add CF-Connecting-IP by @n33pm in #908
  • Revert "feat(): add CF-Connecting-IP" by @VojtechVitek in #966
• Fixed incorrect comment about routing by @jtams in #887
• Fix condition in TestRedirectSlashes by @tchssk in #856
• middleware: Add strip prefix middleware by @m1k1o in #875
• Set up go module for _examples/versions by @hongkuancn in #948
• Ability to specify response HTTP status code for Throttle middleware by @vasayxtx in #571
• Support Content-Type headers with charset/boundary parameters by @GocaMaric in #880
• Fix Mux.Find not correctly handling nested routes by @joeriddles in #954
• fix(WrapResponseWriter): allow multiple informational statuses by @costela in #961

New Contributors

• @gaiaz-iusipov made their first contribution in #927
• @marcofranssen made their first contribution in #952
• @joeriddles made their first contribution in #872
• @AntonC9018 made their first contribution in #917
• @n33pm made their first contribution in #908
• @jtams made their first contribution in #887
• @tchssk made their first contribution in #856
• @m1k1o made their first contribution in #875
• @hongkuancn made their first contribution in #948
• @GocaMaric made their first contribution in #880
• @costela made their first contribution in #961

Full Changelog: v5.1.0...v5.2.0

What's Changed

• middleware: add Discard method to WrapResponseWriter by @patrislav in #926
  • Adds Discard() method to the middleware.WrapResponseWriter interface. This is technically an API breaking change. However after some discussion at #926 (comment), we decided to move forward, and release as minor version, as we don't expect anyone to rely on this interface / implement it externally.

New Contributors

• @patrislav made their first contribution in #926

Full Changelog: v5.0.14...v5.1.0

What's Changed

• middleware: fix typo in RealIP doc by @l2dy in #903
• reduce size of Context struct from 216 bytes to 208 bytes by @juburr in #912
• Avoid possible memory leak in compress middleware by @Neurostep in #919
• docs: Update stale links in docs for contributing by @Lutherwaves in #904
• Revert "Avoid possible memory leak in compress middleware" by @VojtechVitek in #924

New Contributors

• @l2dy made their first contribution in #903
• @juburr made their first contribution in #912
• @Neurostep made their first contribution in #919
• @Lutherwaves made their first contribution in #904

Full Changelog: v5.0.12...v5.0.14

What's Changed

• middleware: fix typo in RealIP doc by @l2dy in #903
• reduce size of Context struct from 216 bytes to 208 bytes by @juburr in #912
• Avoid possible memory leak in compress middleware by @Neurostep in #919

New Contributors

• @l2dy made their first contribution in #903
• @juburr made their first contribution in #912
• @Neurostep made their first contribution in #919

Full Changelog: v5.0.12...v5.0.13

Hi everyone, thank you to all contributors + reviewers.

We present chi v5.0.12 which includes support for the new Go 1.22 mux routing features :)

Specifically, this release adds support for:

• Routing methods r.Handle("GET /users/{userID}", handler) and similarly in r.HandlerFunc with a very simple addition to chi, thank you @Spartan09 and @angelofallars for their work on the PRs to add support (#897, #901)
• Access url path parameters via request.PathValue("xyz") and request.PathValue("*") on *http.Request when using the chi router in Go 1.22+. Of course you may also use chi.URLParam(r, "xyz") and chi.URLParam(r, "*") – these are all equivalent now in Go 1.22+. Thank you @angelofallars for the PR (#901)
• For full list of changes, see v5.0.11...v5.0.12

Thank you again to all contributors and reviewers :)

• docs updates
• go 1.21 in ci
• typos in comments
• middleware: Sunset, middleware which can be used to deprecate an endpoint (#844)
• middleware: use original expvar handler for profiler middleware (#848)
• updated _examples/httplog to use "log/slog" in go 1.21+
• middleware: new SuppressNotFound
• ensure to reset methodsAllowed between requests (9dd8b4a)
• History of changes, see v5.0.10...v5.0.11

Thank you to all contributors and reviewers :)

• Use timestamps in GMT format per RFC2616 -- #772
• Update logging example to use preview version of new log/slog -- #771
• Fix duplicate fields in logging example -- #779
• chore: recoverer middleware skip write header on upgrade connection -- #795
• Request size middleware -- #809
• middleware.Compress: implement Unwrap() method to the compressResponseWriter -- #819
• Adds the Allow header on 405 response -- #776
• History of changes, see: v5.0.9...v5.0.10

• History of changes, see: v5.0.8...v5.0.9