build(deps): bump github.com/labstack/echo/v5 from 5.0.4 to 5.1.0

[dependabot]

Bumps github.com/labstack/echo/v5 from 5.0.4 to 5.1.0.

Release notes

Sourced from github.com/labstack/echo/v5's releases.

v5.1.0

Security

This change does not break the API contract, but it does introduce breaking changes in logic/behavior. If your application is using c.RealIP() beware and read https://echo.labstack.com/docs/ip-address

In v5 the c.RealIP() will now return request.RemoteAddr unless e.IPExtractor has been configured. No potentially spoofable headers are used by default anymore.

Configure IPExtractor with proper trust options when you want to read IP from headers. See:

• https://pkg.go.dev/github.com/labstack/echo/v5#ExtractIPFromRealIPHeader
• https://pkg.go.dev/github.com/labstack/echo/v5#ExtractIPFromXFFHeader

v4 behavior can be restored with:

e := echo.New()
e.IPExtractor = echo.LegacyIPExtractor()

Related PR: Remove legacy IP extraction logic from context.RealIP method by @​aldas in labstack/echo#2933

What's Changed

• Add echo-opentelemetry to the README.md by @​aldas in labstack/echo#2908
• fix: correct spelling mistakes in comments and field name by @​crawfordxx in labstack/echo#2916
• Add https://github.com/labstack/echo-prometheus to the middleware list in README.md by @​aldas in labstack/echo#2919
• Add StartConfig.Listener so server with custom Listener is easier to create by @​aldas in labstack/echo#2920
• Fix rate limiter documentation for default burst value by @​karesansui-u in labstack/echo#2925
• Add doc comments to clarify usage of File related methods and leading slash handling by @​aldas in labstack/echo#2928
• Add NewDefaultFS function to help create filesystem that allows absolute paths by @​aldas in labstack/echo#2931
• Do not set http.Server.WriteTimeout in StartConfig by @​aldas in labstack/echo#2932
• Remove legacy IP extraction logic from context.RealIP method by @​aldas in labstack/echo#2933

New Contributors

• @​crawfordxx made their first contribution in labstack/echo#2916
• @​karesansui-u made their first contribution in labstack/echo#2925

Full Changelog: labstack/echo@v5.0.4...v5.1.0

Changelog

Sourced from github.com/labstack/echo/v5's changelog.

v5.1.0 - 2026-03-31

Security

This change does not break the API contract, but it does introduce breaking changes in logic/behavior. If your application is using c.RealIP() beware and read https://echo.labstack.com/docs/ip-address

v4 behavior can be restored with:

e := echo.New()
e.IPExtractor = echo.LegacyIPExtractor()

• Remove legacy IP extraction logic from context.RealIP method by @​aldas in labstack/echo#2933

Enhancements

• Add echo-opentelemetry to the README.md by @​aldas in labstack/echo#2908
• fix: correct spelling mistakes in comments and field name by @​crawfordxx in labstack/echo#2916
• Add https://github.com/labstack/echo-prometheus to the middleware list in README.md by @​aldas in labstack/echo#2919
• Add StartConfig.Listener so server with custom Listener is easier to create by @​aldas in labstack/echo#2920
• Fix rate limiter documentation for default burst value by @​karesansui-u in labstack/echo#2925
• Add doc comments to clarify usage of File related methods and leading slash handling by @​aldas in labstack/echo#2928
• Add NewDefaultFS function to help create filesystem that allows absolute paths by @​aldas in labstack/echo#2931
• Do not set http.Server.WriteTimeout in StartConfig by @​aldas in labstack/echo#2932

Commits

• 597b4fa Changelog for v5.1.0
• c192e50 Merge pull request #2933 from aldas/LegacyIPExtractor
• 22e4b71 Remove legacy IP extraction logic from context.RealIP method and move it to L...
• 83e04d2 Do not set http.Server.WriteTimeout in StartConfig this is bad for SSE and st...
• a7005b2 Add NewDefaultFS function to help create filesystem that allows absolute path...
• a0e5ff7 Add doc comments to clarify usage of File related methods and leading slash h...
• 3f50cc6 Fix rate limiter documentation for default burst value
• 675712d Add StartConfig.Listener so server with custom Listener is easier to create.
• 7d228b2 Add https://github.com/labstack/echo-prometheus to the middleware list in REA...
• ec05bc8 fix: correct spelling mistakes in comments and field name
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)