chore(deps): update module github.com/go-chi/chi/v5 to v5.2.4 [security]

[NumaryBot]

This PR contains the following updates:

Package	Type	Update	Change
github.com/go-chi/chi/v5	indirect	patch	v5.2.3 -> v5.2.4

---

Open redirect vulnerability in the RedirectSlashes middleware in github.com/go-chi/chi

GHSA-mqqf-5wvp-8fh8 / GO-2026-4316

More information

Details

Open redirect vulnerability in the RedirectSlashes middleware in github.com/go-chi/chi

Severity

Unknown

References

• https://github.com/go-chi/chi/security/advisories/GHSA-mqqf-5wvp-8fh8
• https://github.com/go-chi/chi/commit/6eb35881c0e438ffb663ddbad3a61babaa5e5d8a
• https://github.com/go-chi/chi/issues/1037

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).

---

Release Notes

go-chi/chi (github.com/go-chi/chi/v5)

v5.2.4

Compare Source

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[coderabbitai]

Walkthrough

The Justfile is updated to add the --frozen-workflow-lockfile flag to two speakeasy run invocations in the generate-deploy-server-client and generate-membership-client targets.

Changes

Cohort / File(s)	Summary
Build Configuration Justfile	Adds --frozen-workflow-lockfile flag to speakeasy run commands in generate-deploy-server-client and generate-membership-client targets to enforce frozen workflow lockfile usage.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐰 A flag so frozen, a lockfile so true,
Two targets dance now with workflow anew,
The speakeasy sings in the just-runner's refrain,
Deploy and membership clients locked in the chain! ❄️

🚥 Pre-merge checks | ✅ 1 | ❌ 2

❌ Failed checks (2 warnings)

Check name	Status	Explanation	Resolution
Title check	⚠️ Warning	The title indicates a dependency update to go-chi/chi with a security fix, but the raw summary shows changes only to a Justfile with --frozen-workflow-lockfile flags, not a dependency update.	Update the title to accurately reflect the Justfile changes, such as 'chore: add frozen-workflow-lockfile flag to speakeasy targets' or investigate whether the actual changes match the dependency update claims.
Description check	⚠️ Warning	The description details a go-chi/chi security vulnerability update, but the raw summary shows only Justfile modifications with frozen-workflow-lockfile flags, creating a complete mismatch between described and actual changes.	Update the description to match the actual Justfile changes, or verify that the correct changeset is included in this pull request.

✅ Passed checks (1 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch renovate/go-github.com-go-chi-chi-v5-vulnerability

Warning

Review ran into problems

🔥 Problems

Errors were encountered while retrieving linked issues.

Errors (1)

• GO-2026: Authentication required, not authenticated - You need to authenticate to access this operation.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[NumaryBot]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[flemzord]

Auto-approved by script