build(deps): bump github.com/gookit/rux/v2 from 2.0.2 to 2.1.2

[dependabot]

Bumps github.com/gookit/rux/v2 from 2.0.2 to 2.1.2.

Release notes

Sourced from github.com/gookit/rux/v2's releases.

v2.1.2

Change Log

Fixed

• fix(binding): bind multipart uploads into struct fields gookit/rux@2d1a0fa

Feature

• feat(binding): pick the binder from the parsed media type gookit/rux@96eeee0
• feat(binding): add a request-aware validator hook gookit/rux@cacf5cc

Other

• chore(fmt): gofmt the drifted internal/core test files gookit/rux@9256c9f
• chore(fmt): gofmt the remaining drifted files gookit/rux@5e800d3
• docs(changelog): mark v2.1.2 (2026-09-24) gookit/rux@26014d1

v2.1.1

Change Log

Feature

• feat(core): let Use run any time before the router freezes gookit/rux@01fb1e5

Other

• docs(server,core,sse): make the Use ordering rule and the SSE defaults explicit gookit/rux@493c591
• docs(changelog): add Unreleased, v2.1.0, v2.0.2 and v2.0.1 entries gookit/rux@f37c826
• docs(changelog): mark the next release as v2.1.1 (2026-09-24) gookit/rux@1641a14

v2.1.0

Change Log

Fixed

• fix(sse): Non-ASCII characters garbled (#185) gookit/rux@e27fac9
• fix(server): report the resolved listen address for port 0 / --open gookit/rux@6dc915b
• fix(core): run the global middleware chain for 404/405 responses gookit/rux@80fa55f
• fix(ci): clear the CodeQL reflected-XSS alert on the response writer gookit/rux@852536f
• fix(bench): stop reflecting the path parameter in the chi/gorilla fixtures gookit/rux@857436a
• fix(ci): drop the stale config-file input from the CodeQL workflow gookit/rux@5b4f326

Feature

• feat(server,sse): long-lived responses escape WriteTimeout, serve on your own listener gookit/rux@0d88309
• feat(handlers,core): ParamRegex middleware and value-taking router options gookit/rux@1569547
• feat(core): Bind/ServeListener and the resolved listen address gookit/rux@474ce52
• feat(core): Group value (NewGroup) alongside the closure form gookit/rux@63bc573

... (truncated)

Changelog

Sourced from github.com/gookit/rux/v2's changelog.

v2.1.2 — 2026-09-24

Added

• binding: RequestValidator, an optional extension of DataValidator whose ValidateRequest(r, obj) also receives the request. Auto, the Form / Query / Header / JSON / XML binders and Context.Validate use it when installed, so a rule can inspect the raw request (an uploaded file, for example) instead of only the bound struct. Validate(obj) and the *Values / *Bytes helpers keep the struct-only path, and a validator that implements only DataValidator is unaffected
• binding: uploaded files are bound into struct fields now. Auto and Form.Bind fill multipart.FileHeader / *multipart.FileHeader fields (slices and arrays of either included) from a multipart/form-data request, plus the new File binder, DecodeFiles and DecodeMultipart for direct use. Field names follow the form value rules: the form tag (first comma part) or the field name, a dotted path for nested structs, flattened embedded structs and - to opt out

Changed

• binding: Auto picks the binder from the parsed media type instead of a substring match on the raw header. A +json / +xml structured suffix now binds (application/vnd.api+json, application/problem+json, application/atom+xml), parameters are ignored as before, and a malformed header still reaches the right branch so the real parse error surfaces instead of cannot auto binding

Fixed

• binding: a multipart request dropped its uploads (issue #186). Auto only handed r.PostForm to the value decoder, and Form.Bind bound nothing at all because r.ParseForm() ignores a multipart body
• binding: the validator now runs once, after both the form values and the uploads are bound, so a rule on a file field sees the file

v2.1.1 — 2026-09-24

Changed

• core: Use may be called at any point before the first request, not only before route registration. The global chain is merged when the router freezes, so a late Use also covers routes registered earlier (v1's retroactive behaviour), which removes the trap where a helper such as server.MountHealthChecks() registered routes and made a later Use panic. Registering middleware after the first request still panics, and note that Use inside a Group closure is global rather than group-scoped.

Documentation

• middleware ordering (including route-registering helpers) and the pkg/sse defaults (SendConnected=true, KeepaliveInterval=0, Hooks=nil) are spelled out in both READMEs, the package docs and the migration guide

... (truncated)

Commits

• 26014d1 docs(changelog): mark v2.1.2 (2026-09-24)
• 5e800d3 chore(fmt): gofmt the remaining drifted files
• cacf5cc feat(binding): add a request-aware validator hook
• 96eeee0 feat(binding): pick the binder from the parsed media type
• 9256c9f chore(fmt): gofmt the drifted internal/core test files
• 2d1a0fa fix(binding): bind multipart uploads into struct fields
• 1641a14 docs(changelog): mark the next release as v2.1.1 (2026-09-24)
• f37c826 docs(changelog): add Unreleased, v2.1.0, v2.0.2 and v2.0.1 entries
• 01fb1e5 feat(core): let Use run any time before the router freezes
• 493c591 docs(server,core,sse): make the Use ordering rule and the SSE defaults explicit
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)