chore(deps): Bump github.com/go-chi/httprate from 0.9.0 to 0.16.0

[dependabot]

Bumps github.com/go-chi/httprate from 0.9.0 to 0.16.0.

Release notes

Sourced from github.com/go-chi/httprate's releases.

v0.16.0

What's Changed

• perf: replace fmt with strconv to reduce allocations by @​EricGusmao in go-chi/httprate#55
• local counter: align windows to reset at sub-millisecond counter start by @​VojtechVitek in go-chi/httprate#58
• test: drop golang.org/x/sync dependency (errgroup → sync.WaitGroup) by @​VojtechVitek in go-chi/httprate#59
• perf: use zero-alloc xxh3.HashString on the local counter hot path by @​VojtechVitek in go-chi/httprate#60
• Deprecate spoofable RealIP rate-limiting; add LimitBy + KeyFromContext and modernize the key API by @​VojtechVitek in go-chi/httprate#61

New Contributors

• @​EricGusmao made their first contribution in go-chi/httprate#55

Full Changelog: go-chi/httprate@v0.15.0...v0.16.0

v0.15.0

• upgrade to xxhash v3

v0.14.0

What's Changed

• Implement rate-limiting from HTTP handler (e.g. by request payload) by @​VojtechVitek in go-chi/httprate#42
• Export http.RateLimiter type by @​VojtechVitek in go-chi/httprate#43
• Introduce RespondOnLimit() vs. OnLimit() methods by @​VojtechVitek in go-chi/httprate#44

Add support to rate-limit by custom key from HTTP handler (e.g. by request payload fields)

// Rate-limiter for login endpoint.
loginRateLimiter := httprate.NewRateLimiter(5, time.Minute)
r.Post("/login", func(w http.ResponseWriter, r *http.Request) {
var payload struct {
Username string json:"username"
Password string json:"password"
}
err := json.NewDecoder(r.Body).Decode(&payload)
if err != nil || payload.Username == "" || payload.Password == "" {
w.WriteHeader(400)
return
}
// Rate-limit login at 5 req/min.
if loginRateLimiter.RespondOnLimit(w, r, payload.Username) {
	return
}
w.Write([]byte("login at 5 req/min\n"))

})

Full Changelog: go-chi/httprate@v0.12.1...v0.14.0

v0.13.1

... (truncated)

Commits

• 741b4a5 Deprecate spoofable RealIP rate-limiting; add LimitBy + KeyFromContext and mo...
• 81255de perf: use zero-alloc xxh3.HashString on the local counter hot path (#60)
• 0c2093a test: replace golang.org/x/sync/errgroup with sync.WaitGroup (#59)
• 89e5cca local counter: align windows to reset at sub-millisecond counter start (#58)
• be2ba84 replace fmt with strconv to reduce allocations (#55)
• c0b6272 upgrade to xxh3 hashing pkg (#54)
• 9d627fb Update README.md: add missing 'time' import in code example (#49)
• 24ebb38 Try to fix Github action access issue (#51)
• ae11543 Add httpate.Key(string) helper for static keys (#45)
• 5e681e3 Introduce RespondOnLimit() vs. OnLimit() (#44)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.