build(deps): bump github.com/labstack/echo/v5 from 5.1.1 to 5.3.0

[dependabot]

Bumps github.com/labstack/echo/v5 from 5.1.1 to 5.3.0.

Release notes

Sourced from github.com/labstack/echo/v5's releases.

v5.3.0

Group middleware logic changes

PR #2996 reverts back to v4 behavior for a group registering implicit 404 handlers.

If you do not want this behavior, you do not want implicit 404 handlers for groups, use:

e :=  echo.NewWithConfig(echo.Config{NoGroupAutoRegister404Routes: true})
g := e.Group("/api")

Other noteworthy echancements:

• Adds first-class support for the QUERY HTTP method RFC 10008 in labstack/echo#3038

e.QUERY("/", func(c *Context) error {
  return c.String(http.StatusTeapot, "OK")
})

• Router: automatically handle HEAD request by GET handlers in labtack/echo#2949

e := echo.NewWithConfig(echo.Config{
  Router: echo.NewRouter(echo.RouterConfig{
    AutoHandleHEAD: true,
  }),
})

What's Changed

• perf(json): pooled-buffer JSON deserialize by @​vishr in labstack/echo#3023
• perf(router): cache-friendly static child lookup by @​vishr in labstack/echo#3024
• update golang.org/x deps to latest versions by @​aldas in labstack/echo#3034
• pin GitHub Actions to full commit SHAs and rework actions SHAs to own variables by @​aldas in labstack/echo#3035
• docs(csrf): fix godoc typo in Generator default (tp -> to) by @​DucMinhNe in labstack/echo#3026
• docs(cors): note reverse-proxy header duplication by @​vishr in labstack/echo#3027
• feat: add support for HTTP QUERY method by @​thdxg in labstack/echo#3038
• docs: fix typos in API_CHANGES_V5.md by @​maxtaran2010 in labstack/echo#3039
• Router: auto HEAD to GET by @​aldas in labstack/echo#2949
• Revert back to v4 behavior for group registering implicit 404 handler… by @​aldas in labstack/echo#2996
• Changelog for v5.3.0 by @​aldas in labstack/echo#3040

New Contributors

• @​DucMinhNe made their first contribution in labstack/echo#3026
• @​thdxg made their first contribution in labstack/echo#3038
• @​maxtaran2010 made their first contribution in labstack/echo#3039

Full Changelog: labstack/echo@v5.2.1...v5.3.0

v5.2.1

Security

... (truncated)

Changelog

Sourced from github.com/labstack/echo/v5's changelog.

v5.3.0 - 2026-07-12

Logic changes PR #2996 revert back to v4 behavior for a group registering implicit 404 handlers.

If you do not want this behavior, can do not want implicit 404 handlers for groups, use:

e :=  echo.NewWithConfig(echo.Config{NoGroupAutoRegister404Routes: true})
g := e.Group("/api")

some other noteworthy echancements:

• Adds first-class support for the QUERY HTTP method RFC 10008 in labstack/echo#3038

e.QUERY("/", func(c *Context) error {
  return c.String(http.StatusTeapot, "OK")
})

• Router: automatically handle HEAD request by GET handlers in labtack/echo#2949

e := echo.NewWithConfig(echo.Config{
  Router: echo.NewRouter(echo.RouterConfig{
    AutoHandleHEAD: true,
  }),
})

Enhancements

• perf(json): pooled-buffer JSON deserialize by @​vishr in labstack/echo#3023
• perf(router): cache-friendly static child lookup by @​vishr in labstack/echo#3024
• update golang.org/x deps to latest versions by @​aldas in labstack/echo#3034
• pin GitHub Actions to full commit SHAs and rework actions SHAs to own variables by @​aldas in labstack/echo#3035
• docs(csrf): fix godoc typo in Generator default (tp -> to) by @​DucMinhNe in labstack/echo#3026
• docs(cors): note reverse-proxy header duplication by @​vishr in labstack/echo#3027
• feat: add support for HTTP QUERY method by @​thdxg in labstack/echo#3038
• docs: fix typos in API_CHANGES_V5.md by @​maxtaran2010 in labstack/echo#3039
• Router: auto HEAD to GET by @​aldas in labstack/echo#2949
• Revert back to v4 behavior for group registering implicit 404 handler… by @​aldas in labstack/echo#2996

v5.2.1 - 2026-06-15

Security

Make serving static file releated methods and middleware not unescape path by default - so how the way Router interprets paths and Static methods/middleware is consistent.

Given following situation:

</tr></table> 

... (truncated)

Commits

• caa0182 Changelog for v5.3.0
• 2d9b2aa Revert back to v4 behavior for group registering implicit 404 handlers. This ...
• 222be90 AutoHandleHEAD enables automatic handling of HTTP HEAD requests by falling ba...
• 030f1b3 docs: fix typos moderm->modern and alot->a lot in API_CHANGES_V5.md
• abbb92e feat: add support for HTTP QUERY method (#3036)
• 11aa371 docs(cors): note reverse-proxy header duplication on CORS godoc
• c9cfc21 docs(csrf): fix godoc typo in Generator default (tp -> to)
• 54abc47 pin GitHub Actions to full commit SHAs and rework actions shas to own block
• a09a027 update golang.org/x deps to latest versions
• 5aa876b perf(router): cache-friendly static child lookup + dedupe leaf check (#3024)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)