{"id":6623,"name":"github.com/valyala/fasthttp","ecosystem":"go","repository_url":"https://github.com/valyala/fasthttp","issues_count":590,"created_at":"2025-06-06T22:05:01.010Z","updated_at":"2025-06-06T22:05:01.010Z","purl":"pkg:golang/github.com/valyala/fasthttp","metadata":{"id":3494529,"name":"github.com/valyala/fasthttp","ecosystem":"go","description":"Package fasthttp provides fast HTTP server and client API.\n\nFasthttp provides the following features:\n\nOptimized for speed. Easily handles more than 100K qps and more than 1M\nconcurrent keep-alive connections on modern hardware.\n\nOptimized for low memory usage.\n\nEasy 'Connection: Upgrade' support via RequestCtx.Hijack.\n\nServer provides the following anti-DoS limits:\n\n- The number of concurrent connections.\n\n- The number of concurrent connections per client IP.\n\n- The number of requests per connection.\n\n- Request read timeout.\n\n- Response write timeout.\n\n- Maximum request header size.\n\n- Maximum request body size.\n\n- Maximum request execution time.\n\n- Maximum keep-alive connection lifetime.\n\n- Early filtering out non-GET requests.\n\nA lot of additional useful info is exposed to request handler:\n\n- Server and client address.\n\n- Per-request logger.\n\n- Unique request id.\n\n- Request start time.\n\n- Connection start time.\n\n- Request sequence number for the current connection.\n\nClient supports automatic retry on idempotent requests' failure.\n\nFasthttp API is designed with the ability to extend existing client\nand server implementations or to write custom client and server\nimplementations from scratch.","homepage":"https://github.com/valyala/fasthttp","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/valyala/fasthttp","keywords_array":[],"namespace":"github.com/valyala","versions_count":67,"first_release_published_at":"2020-04-28T22:01:55.000Z","latest_release_published_at":"2025-05-07T05:14:06.000Z","latest_release_number":"v1.62.0","last_synced_at":"2025-06-07T04:30:29.383Z","created_at":"2022-04-10T19:25:20.361Z","updated_at":"2025-06-07T04:30:29.383Z","registry_url":"https://pkg.go.dev/github.com/valyala/fasthttp","install_command":"go get github.com/valyala/fasthttp","documentation_url":"https://pkg.go.dev/github.com/valyala/fasthttp#section-documentation","metadata":{},"repo_metadata":{"uuid":"44498957","full_name":"valyala/fasthttp","owner":"valyala","description":"Fast HTTP package for Go. Tuned for high performance. Zero memory allocations in hot paths. Up to 10x faster than net/http","archived":false,"fork":false,"pushed_at":"2023-03-11T19:11:14.000Z","size":3208,"stargazers_count":19201,"open_issues_count":68,"forks_count":1598,"subscribers_count":397,"default_branch":"master","last_synced_at":"2023-03-13T14:16:32.450Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"logo_url":null,"metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null}},"created_at":"2015-10-18T22:19:57.000Z","updated_at":"2023-03-13T14:13:46.000Z","dependencies_parsed_at":"2023-02-17T02:31:33.394Z","dependency_job_id":null,"html_url":"https://github.com/valyala/fasthttp","commit_stats":null,"repository_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/valyala%2Ffasthttp","tags_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/valyala%2Ffasthttp/tags","manifests_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/valyala%2Ffasthttp/manifests","owner_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/valyala","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":108921946,"host_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names"},"owner_record":{"login":"valyala","name":"Aliaksandr Valialkin","uuid":"283442","kind":"user","description":"Working on @VictoriaMetrics ","email":"","website":"https://victoriametrics.com","location":"United states","twitter":"valyala","company":"@VictoriaMetrics ","avatar_url":"https://avatars.githubusercontent.com/u/283442?u=67106821805b9a7143b2794352fd87df04b060e4\u0026v=4","repositories_count":32,"last_synced_at":"2023-03-12T12:20:46.959Z","metadata":{"has_sponsors_listing":false},"owner_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/valyala"},"tags":[{"name":"v1.44.0","sha":"fc2d704c1f4b8377f4578d68fa486a81ea97ec52","kind":"commit","published_at":"2023-01-10T07:46:18.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.44.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.44.0"},{"name":"v1.43.0","sha":"dbf457ee662b32e0677fcfc37b30462a057afac8","kind":"commit","published_at":"2022-11-28T10:52:30.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.43.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.43.0"},{"name":"v1.42.0","sha":"49951353c83ac7b3ca9a78570dbea0c970b6d801","kind":"commit","published_at":"2022-11-20T11:26:36.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.42.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.42.0"},{"name":"v1.41.0","sha":"128e9b35c48610a2c23c5ed56a8a2c413fd43609","kind":"commit","published_at":"2022-10-22T10:04:46.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.41.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.41.0"},{"name":"v1.40.0","sha":"2f1e949d91d0ba1817afd80d7c981fafe7154774","kind":"commit","published_at":"2022-09-03T09:02:32.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.40.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.40.0"},{"name":"v1.39.0","sha":"ea6052464e7221956dedf9b9a523f8f9892c3d3b","kind":"commit","published_at":"2022-08-14T09:31:57.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.39.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.39.0"},{"name":"v1.38.0","sha":"16d30c474cea55710ff9a550f1b20b7b974053d9","kind":"commit","published_at":"2022-06-26T08:08:47.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.38.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.38.0"},{"name":"v1.37.0","sha":"66bc61ee646a8c1bdd7121afe1cd9c27ecc682a9","kind":"commit","published_at":"2022-05-16T10:33:47.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.37.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.37.0"},{"name":"v1.36.0","sha":"7cc6f4c513f9e0d3686142e0a1a5aa2f76b3194a","kind":"commit","published_at":"2022-04-25T22:45:51.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.36.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.36.0"},{"name":"v1.35.0","sha":"7a5afddf5b805a022f8e81281c772c11600da2f4","kind":"commit","published_at":"2022-04-01T16:11:16.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.35.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.35.0"},{"name":"v1.34.0","sha":"59f94a3f7137d0ad215bd262df7082d1e632a1f7","kind":"commit","published_at":"2022-03-06T12:33:58.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.34.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.34.0"},{"name":"v1.33.0","sha":"61aa8b17a240b66ead927f945a3e8a96c3f0ec40","kind":"commit","published_at":"2022-01-27T02:17:00.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.33.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.33.0"},{"name":"v1.32.0","sha":"7eeb00e1ccc54b29a6a165c6a27d5dfa96b416ca","kind":"commit","published_at":"2022-01-10T04:15:30.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.32.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.32.0"},{"name":"v1.31.0","sha":"81fc96827033a5ee92d8a098ab1cdb9827e1eb8d","kind":"commit","published_at":"2021-10-09T18:39:05.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.31.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.31.0"},{"name":"v1.30.0","sha":"713da4e33f2b5af08241edc5712cf43d7e3b0e65","kind":"commit","published_at":"2021-09-07T08:03:41.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.30.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.30.0"},{"name":"v1.29.0","sha":"97e1319927eed0d94976971280e7ed0ef4ec9777","kind":"commit","published_at":"2021-08-16T16:09:31.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.29.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.29.0"},{"name":"v1.28.0","sha":"1504a84ed76bfa638364cf82d241201bac468ab9","kind":"commit","published_at":"2021-06-29T07:36:30.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.28.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.28.0"},{"name":"v1.27.0","sha":"874c8cad76f8bb0a0ee59cf7f749016e7b4cfcf4","kind":"commit","published_at":"2021-06-18T13:46:40.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.27.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.27.0"},{"name":"v1.26.0","sha":"6233fbc08ea58da4f846ae3c4fd4bfd6feabb55b","kind":"commit","published_at":"2021-06-01T08:52:35.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.26.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.26.0"},{"name":"v1.25.0","sha":"fa3e5d85f29586ec8fbc8a93508c57f98a1ee476","kind":"commit","published_at":"2021-05-17T08:45:11.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.25.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.25.0"},{"name":"v1.24.0","sha":"620f0c83adb3d72021545ecbb47ff1bef42fbd0c","kind":"commit","published_at":"2021-04-23T11:25:02.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.24.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.24.0"},{"name":"v1.23.0","sha":"2a6f7db5bbc4d7c11f1ccc0cb827e145b9b7d7ea","kind":"commit","published_at":"2021-03-26T09:46:57.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.23.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.23.0"},{"name":"v1.22.0","sha":"4637395dd7bcf16ad812036bb465fbc34d2697a0","kind":"commit","published_at":"2021-02-26T11:04:52.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.22.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.22.0"},{"name":"v1.21.0","sha":"3cd0862fbb17abb02d43e538e41819e22ffd512a","kind":"commit","published_at":"2021-02-16T20:53:53.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.21.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.21.0"},{"name":"v1.20.0","sha":"a88030b8fbcabe7010ff0a8f037e46c64475e56e","kind":"commit","published_at":"2021-02-07T20:13:36.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.20.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.20.0"},{"name":"v1.19.0","sha":"6234776e7cc4d66f235fc4814aace2c9b7099ce7","kind":"commit","published_at":"2021-01-02T20:14:25.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.19.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.19.0"},{"name":"v1.18.0","sha":"d0dfbd4494632e4bf398d1c0098e4c389a1c4356","kind":"commit","published_at":"2020-12-09T15:59:57.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.18.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.18.0"},{"name":"v1.17.0","sha":"74bd13a169aebf95983bd28a22d69ff5969665cc","kind":"commit","published_at":"2020-11-05T08:32:07.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.17.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.17.0"},{"name":"v1.16.0","sha":"434c48ba7e3a0dafb32964b8971fb1448a39ceee","kind":"commit","published_at":"2020-08-16T09:35:22.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.16.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.16.0"},{"name":"v1.15.1","sha":"4cffe1a510b21e2a2502d16657f7fe8497cd1ac5","kind":"commit","published_at":"2020-07-15T09:29:34.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.15.1","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.15.1"},{"name":"v1.15.0","sha":"607743cb8e3fcba11cb2fcbe093d7eb5f8fcba55","kind":"commit","published_at":"2020-07-12T16:25:46.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.15.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.15.0"},{"name":"v1.14.0","sha":"b98999e8e0fa5a82792d5553a71d7d4304eb6474","kind":"commit","published_at":"2020-06-01T09:46:14.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.14.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.14.0"},{"name":"v1.13.1","sha":"2f92c68a07ac46ce741a7fa898a786db7f44beef","kind":"commit","published_at":"2020-05-25T18:44:04.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.13.1","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.13.1"},{"name":"v1.13.0","sha":"2f92c68a07ac46ce741a7fa898a786db7f44beef","kind":"commit","published_at":"2020-05-25T18:44:04.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.13.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.13.0"},{"name":"v0.1.0","sha":"b8112eef9a25c75e3eafc96e7917262a479c2e6c","kind":"tag","published_at":"2020-04-28T22:03:29.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v0.1.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v0.1.0"},{"name":"v1.12.0","sha":"54df169029f1c9f03afe9c830c9aa4ab0ad025d7","kind":"commit","published_at":"2020-04-20T16:32:19.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.12.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.12.0"},{"name":"v1.11.0","sha":"f9ef8fc47b5ed2d733442012d0356ba3dc34b5d6","kind":"commit","published_at":"2020-04-18T21:44:47.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.11.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.11.0"},{"name":"v1.10.0","sha":"db18810c877736b680b559f870349bf48e41aec5","kind":"commit","published_at":"2020-04-14T16:17:57.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.10.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.10.0"},{"name":"v1.9.0","sha":"69d5c3721a71f33ed6be8cc8bb5d8a476efedea8","kind":"commit","published_at":"2020-01-31T21:21:00.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.9.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.9.0"},{"name":"v1.8.0","sha":"03813ae4bce8b5984118f62d5f017da3e87c9189","kind":"commit","published_at":"2020-01-12T11:59:21.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.8.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.8.0"},{"name":"v1.7.1","sha":"958ed361941dca1fcb353fae6d8ef12e0d794eff","kind":"commit","published_at":"2019-12-29T10:34:55.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.7.1","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.7.1"},{"name":"v1.7.0","sha":"415e5fc531692d7533e08d7addf33a26b0b8f99a","kind":"commit","published_at":"2019-12-14T21:20:09.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.7.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.7.0"},{"name":"v1.6.0","sha":"4489df89cb8e5101dc1e80a2bc0f1e55b2295e31","kind":"commit","published_at":"2019-10-28T04:01:28.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.6.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.6.0"},{"name":"v1.5.0","sha":"8b0b919f2655baaef640d8c2a63e690b07c08e60","kind":"commit","published_at":"2019-09-13T19:47:26.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.5.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.5.0"},{"name":"v1.4.0","sha":"1bd0404cedf0148dca83663870e12cf8b156c7f7","kind":"commit","published_at":"2019-07-03T21:40:48.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.4.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.4.0"},{"name":"v1.3.0","sha":"46469b532d0621287a2184a890564a59a3d528f3","kind":"commit","published_at":"2019-05-15T06:31:18.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.3.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.3.0"},{"name":"v1.2.0","sha":"ed3793a1e1602989ba50bd20823e8521a4da84af","kind":"commit","published_at":"2019-02-17T10:11:45.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.2.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.2.0"},{"name":"v1.1.0","sha":"c88be72d77e6deede478719f77f7b83df75531e8","kind":"commit","published_at":"2019-01-04T15:38:56.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.1.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.1.0"},{"name":"v1.0.0","sha":"4087354082e1ab9a610705ec9f7949603d3c46ab","kind":"commit","published_at":"2018-10-01T07:33:33.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v1.0.0","html_url":"https://github.com/valyala/fasthttp/releases/tag/v1.0.0"},{"name":"v20180529","sha":"e5f51c11919d4f66400334047b897ef0a94c6f3c","kind":"commit","published_at":"2017-12-07T12:09:41.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v20180529","html_url":"https://github.com/valyala/fasthttp/releases/tag/v20180529"},{"name":"v20160617","sha":"d42167fd04f636e20b005e9934159e95454233c7","kind":"commit","published_at":"2016-06-17T10:13:04.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v20160617","html_url":"https://github.com/valyala/fasthttp/releases/tag/v20160617"},{"name":"v20160419","sha":"229698876475fef591fb04fabba5479fc3182291","kind":"tag","published_at":"2016-04-19T09:32:10.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v20160419","html_url":"https://github.com/valyala/fasthttp/releases/tag/v20160419"},{"name":"v20160316","sha":"2b172da53920a126cfc2532eced9400864bdacd9","kind":"tag","published_at":"2016-03-16T14:32:33.000Z","download_url":"https://codeload.github.com/valyala/fasthttp/tar.gz/v20160316","html_url":"https://github.com/valyala/fasthttp/releases/tag/v20160316"}]},"repo_metadata_updated_at":"2023-03-21T18:38:24.982Z","dependent_packages_count":8579,"downloads":null,"downloads_period":null,"dependent_repos_count":25287,"rankings":{"downloads":null,"dependent_repos_count":0.03899096363677843,"dependent_packages_count":0.022710256532568994,"stargazers_count":0.23840485478977025,"forks_count":0.6154557691071276,"docker_downloads_count":0.22150277604368662,"average":0.22741292402198637},"purl":"pkg:golang/github.com/valyala/fasthttp","advisories":[{"uuid":"GSA_kwCzR0hTQS1meDk1LTg4M3YtNHE0aM0z9A","url":"https://github.com/advisories/GHSA-fx95-883v-4q4h","title":"Path traversal in github.com/valyala/fasthttp","description":"The package github.com/valyala/fasthttp before 1.34.0 is vulnerable to Directory Traversal via the ServeFile function, due to improper sanitization. It is possible to be exploited by using a backslash %5c character in the path. **Note:** This security issue impacts Windows users only.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-03-18T00:01:11.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2022-21221","https://github.com/valyala/fasthttp/issues/1226","https://github.com/valyala/fasthttp/commit/15262ecf3c602364639d465daba1e7f3604d00e8","https://github.com/valyala/fasthttp/commit/6b5bc7bb304975147b4af68df54ac214ed2554c1","https://github.com/valyala/fasthttp/releases/tag/v1.34.0","https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMVALYALAFASTHTTP-2407866","https://pkg.go.dev/vuln/GO-2022-0355","https://github.com/advisories/GHSA-fx95-883v-4q4h"],"source_kind":"github","identifiers":["GHSA-fx95-883v-4q4h","CVE-2022-21221"],"repository_url":"https://github.com/valyala/fasthttp","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"1.34.0","vulnerable_version_range":"\u003c 1.34.0"}],"ecosystem":"go","package_name":"github.com/valyala/fasthttp"}],"created_at":"2022-12-21T16:12:33.013Z","updated_at":"2025-04-12T01:09:24.680Z","epss_percentage":0.00575,"epss_percentile":0.66308}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/valyala/fasthttp","docker_dependents_count":1100,"docker_downloads_count":2532583268,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/valyala/fasthttp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/valyala/fasthttp/dependencies","status":null,"funding_links":[],"critical":true,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fvalyala%2Ffasthttp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fvalyala%2Ffasthttp/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fvalyala%2Ffasthttp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fvalyala%2Ffasthttp/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1882895,"maintainers_count":0,"namespaces_count":723926,"keywords_count":97872,"github":"golang","metadata":{"funded_packages_count":39346},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-06-06T05:22:27.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},"unique_repositories_count":157,"unique_repositories_count_past_30_days":5,"recent_issues":[{"uuid":"5980053685","node_id":"PR_kwDOG7IA588AAAABKB2OPA","number":320,"state":"open","title":"chore(deps): bump github.com/valyala/fasthttp from 1.74.0 to 1.76.0 in /benchmarks","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-22T13:14:25.000Z","updated_at":"2026-10-22T13:16:56.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.74.0","new_version":"1.76.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":"/benchmarks","ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.74.0 to 1.76.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.76.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003ev1.76.0\u003c/code\u003e strengthens HTTP message framing, static-file isolation, and server connection handling. It also improves HTTP compatibility, avoids quadratic work when parsing large trailer sets, and adds configurable TCP keep-alives to \u003ccode\u003eTCPDialer\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eSecurity fixes and hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eMultipart parsing consumes the entire declared body.\u003c/strong\u003e Bytes after the closing multipart boundary are drained before the connection is reused, preventing a multipart epilogue from being interpreted as another request. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2336\"\u003e#2336\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eOutgoing messages preserve framing.\u003c/strong\u003e Raw \u003ccode\u003eContent-Length\u003c/code\u003e headers are synchronized with the outgoing body, duplicate or conflicting framing headers are rejected, and fixed-length request and response streams cannot write beyond their declared size. \u003ccode\u003eFS\u003c/code\u003e and \u003ccode\u003eSendFile\u003c/code\u003e also stop at the advertised \u003ccode\u003eContent-Length\u003c/code\u003e when a file grows during serving. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2470\"\u003e#2470\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2462\"\u003e#2462\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRequests with both \u003ccode\u003eContent-Length\u003c/code\u003e and \u003ccode\u003eTransfer-Encoding\u003c/code\u003e close the connection.\u003c/strong\u003e The connection is no longer reused after a request containing both framing headers. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2476\"\u003e#2476\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eVirtual-host file serving preserves directory isolation.\u003c/strong\u003e \u003ccode\u003eNewVHostPathRewriter\u003c/code\u003e avoids decoding the host and path twice and handles invalid hosts safely, preventing crafted requests from escaping the virtual-host directory and accessing files directly under \u003ccode\u003eFS.Root\u003c/code\u003e. This affects \u003ccode\u003eFS\u003c/code\u003e handlers using \u003ccode\u003eNewVHostPathRewriter\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2487\"\u003e#2487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRejected TLS connections no longer block the accept loop.\u003c/strong\u003e Connections rejected by \u003ccode\u003eMaxConnsPerIP\u003c/code\u003e or \u003ccode\u003eConcurrency\u003c/code\u003e are closed without attempting an HTTP error response, which could otherwise trigger a TLS handshake and stall while waiting for a \u003ccode\u003eClientHello\u003c/code\u003e. IPv6 clients are now also counted against \u003ccode\u003eMaxConnsPerIP\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2486\"\u003e#2486\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2468\"\u003e#2468\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ePerformance improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eTrailer parsing avoids quadratic work.\u003c/strong\u003e Large sets of trailer names use indexed membership checks instead of repeatedly scanning all previously recorded names. This reduces CPU amplification from crafted \u003ccode\u003eTrailer\u003c/code\u003e headers and chunked trailer sections while preserving trailer order. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2465\"\u003e#2465\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eHTTP compatibility and features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eStatic files handle range and conditional requests more accurately.\u003c/strong\u003e Unsupported range units and multiple ranges are ignored instead of returning \u003ccode\u003e416\u003c/code\u003e; invalid single byte ranges still return \u003ccode\u003e416\u003c/code\u003e. \u003ccode\u003eRange\u003c/code\u003e is also ignored when \u003ccode\u003eIf-Range\u003c/code\u003e does not match, and both \u003ccode\u003eRange\u003c/code\u003e and \u003ccode\u003eIf-Modified-Since\u003c/code\u003e are ignored for methods other than GET and HEAD. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2467\"\u003e#2467\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2473\"\u003e#2473\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2474\"\u003e#2474\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2475\"\u003e#2475\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePipeline clients handle HEAD responses without reading a body.\u003c/strong\u003e \u003ccode\u003ePipelineClient\u003c/code\u003e skips the response body for HEAD requests. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2469\"\u003e#2469\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP parsing accepts valid legacy formats and matches tokens correctly.\u003c/strong\u003e \u003ccode\u003eParseHTTPDate\u003c/code\u003e accepts obsolete HTTP-date formats, cookies with an invalid \u003ccode\u003eExpires\u003c/code\u003e attribute remain parseable, \u003ccode\u003eExpect: 100-continue\u003c/code\u003e is matched case-insensitively, and \u003ccode\u003eAccept-Encoding\u003c/code\u003e matches complete tokens. Asterisk-form request targets are rejected for methods other than OPTIONS. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2466\"\u003e#2466\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2481\"\u003e#2481\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2482\"\u003e#2482\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2479\"\u003e#2479\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2463\"\u003e#2463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTCP keep-alives are configurable.\u003c/strong\u003e The new \u003ccode\u003eTCPDialer.KeepAlive\u003c/code\u003e field sets the keep-alive period for connections created by the dialer; a negative value disables keep-alives. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2484\"\u003e#2484\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eSecurity and hardening\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003econsume the rest of the declared body in readMultipartForm by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2336\"\u003evalyala/fasthttp#2336\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: validate outgoing request framing by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2470\"\u003evalyala/fasthttp#2470\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estop FS and SendFile at Content-Length when the file has grown by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2462\"\u003evalyala/fasthttp#2462\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close the connection after a request with both Content-Length and Transfer-Encoding by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2476\"\u003evalyala/fasthttp#2476\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): preserve vhost isolation during path rewriting by \u003ca href=\"https://github.com/koyokr\"\u003e\u003ccode\u003e@​koyokr\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2487\"\u003evalyala/fasthttp#2487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix TLS connection rejection blocking the accept loop by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2486\"\u003evalyala/fasthttp#2486\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecount IPv6 clients against MaxConnsPerIP by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2468\"\u003evalyala/fasthttp#2468\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake addTrailerKey linear in the size of the trailer set by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2465\"\u003evalyala/fasthttp#2465\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add KeepAlive option to TCPDialer by \u003ca href=\"https://github.com/littfed\"\u003e\u003ccode\u003e@​littfed\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2484\"\u003evalyala/fasthttp#2484\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(header): reject asterisk-form request-target for non-OPTIONS methods by \u003ca href=\"https://github.com/aadieng100\"\u003e\u003ccode\u003e@​aadieng100\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2463\"\u003evalyala/fasthttp#2463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: accept the obsolete HTTP-date formats in ParseHTTPDate by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2466\"\u003evalyala/fasthttp#2466\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): ignore Range headers FS can't serve instead of replying 416 by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2467\"\u003evalyala/fasthttp#2467\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eskip the response body for HEAD requests in PipelineClient by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2469\"\u003evalyala/fasthttp#2469\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): ignore If-Modified-Since for methods other than GET and HEAD by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2474\"\u003evalyala/fasthttp#2474\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): ignore Range when the If-Range validator doesn't match by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2473\"\u003evalyala/fasthttp#2473\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/634ef44b2cf373160197fa2794f2568b94462909\"\u003e\u003ccode\u003e634ef44\u003c/code\u003e\u003c/a\u003e fix(fs): preserve vhost isolation during path rewriting (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2487\"\u003e#2487\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7aea37996b5f8edc2fe68f7107b4e0369c983d7c\"\u003e\u003ccode\u003e7aea379\u003c/code\u003e\u003c/a\u003e feat: add KeepAlive option to TCPDialer (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2484\"\u003e#2484\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/89a91a8866e8a81eefcc7de4f45221d660f9d4a4\"\u003e\u003ccode\u003e89a91a8\u003c/code\u003e\u003c/a\u003e fix: match complete Accept-Encoding tokens (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2479\"\u003e#2479\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/414aa591c449fee8f9bc66c1c1df5ab20a8a1ef7\"\u003e\u003ccode\u003e414aa59\u003c/code\u003e\u003c/a\u003e Fix TLS connection rejection blocking the accept loop (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/08807279a0675a85a68fceebee59d11aa16243fb\"\u003e\u003ccode\u003e0880727\u003c/code\u003e\u003c/a\u003e consume the rest of the declared body in readMultipartForm (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2336\"\u003e#2336\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/14a24068bc9046f1cc45cb664d8bfdd8fbc2889a\"\u003e\u003ccode\u003e14a2406\u003c/code\u003e\u003c/a\u003e fix flaky TestStreamBodyRequestContentLength\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/24922f6ee470a4a64d91ab705550be77987c465f\"\u003e\u003ccode\u003e24922f6\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.20.1 to 1.20.3 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/260b43825f850596075d3d6f61532e812d67cff0\"\u003e\u003ccode\u003e260b438\u003c/code\u003e\u003c/a\u003e fix: match the Expect: 100-continue value case-insensitively (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2482\"\u003e#2482\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/95bdd1c53f8b5e0b1dbed2956e7419f10019e674\"\u003e\u003ccode\u003e95bdd1c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/molecule-man/go-brrr from 1.2.0 to 1.3.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2483\"\u003e#2483\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/4e0f08c6b18c983469721ab0320ff7fe2e4ca475\"\u003e\u003ccode\u003e4e0f08c\u003c/code\u003e\u003c/a\u003e fix(cookie): ignore an invalid Expires attribute instead of failing to parse ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.74.0...v1.76.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.74.0\u0026new-version=1.76.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/abemedia/go-don/pull/320","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/abemedia%2Fgo-don/issues/320","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/320/packages"},{"uuid":"5977938225","node_id":"PR_kwDOVKqn_88AAAABKAIwoQ","number":4,"state":"open","title":"chore(bench): Bump github.com/valyala/fasthttp from 1.75.0 to 1.76.0 in /benchmarks in the go-modules group","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-22T10:54:39.000Z","updated_at":"2026-10-22T10:55:46.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(bench): Bump","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.75.0","new_version":"1.76.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":"/benchmarks in the go-modules group","ecosystem":"go"},"body":"Bumps the go-modules group in /benchmarks with 1 update: [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp).\n\nUpdates `github.com/valyala/fasthttp` from 1.75.0 to 1.76.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.76.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003ev1.76.0\u003c/code\u003e strengthens HTTP message framing, static-file isolation, and server connection handling. It also improves HTTP compatibility, avoids quadratic work when parsing large trailer sets, and adds configurable TCP keep-alives to \u003ccode\u003eTCPDialer\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eSecurity fixes and hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eMultipart parsing consumes the entire declared body.\u003c/strong\u003e Bytes after the closing multipart boundary are drained before the connection is reused, preventing a multipart epilogue from being interpreted as another request. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2336\"\u003e#2336\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eOutgoing messages preserve framing.\u003c/strong\u003e Raw \u003ccode\u003eContent-Length\u003c/code\u003e headers are synchronized with the outgoing body, duplicate or conflicting framing headers are rejected, and fixed-length request and response streams cannot write beyond their declared size. \u003ccode\u003eFS\u003c/code\u003e and \u003ccode\u003eSendFile\u003c/code\u003e also stop at the advertised \u003ccode\u003eContent-Length\u003c/code\u003e when a file grows during serving. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2470\"\u003e#2470\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2462\"\u003e#2462\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRequests with both \u003ccode\u003eContent-Length\u003c/code\u003e and \u003ccode\u003eTransfer-Encoding\u003c/code\u003e close the connection.\u003c/strong\u003e The connection is no longer reused after a request containing both framing headers. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2476\"\u003e#2476\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eVirtual-host file serving preserves directory isolation.\u003c/strong\u003e \u003ccode\u003eNewVHostPathRewriter\u003c/code\u003e avoids decoding the host and path twice and handles invalid hosts safely, preventing crafted requests from escaping the virtual-host directory and accessing files directly under \u003ccode\u003eFS.Root\u003c/code\u003e. This affects \u003ccode\u003eFS\u003c/code\u003e handlers using \u003ccode\u003eNewVHostPathRewriter\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2487\"\u003e#2487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRejected TLS connections no longer block the accept loop.\u003c/strong\u003e Connections rejected by \u003ccode\u003eMaxConnsPerIP\u003c/code\u003e or \u003ccode\u003eConcurrency\u003c/code\u003e are closed without attempting an HTTP error response, which could otherwise trigger a TLS handshake and stall while waiting for a \u003ccode\u003eClientHello\u003c/code\u003e. IPv6 clients are now also counted against \u003ccode\u003eMaxConnsPerIP\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2486\"\u003e#2486\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2468\"\u003e#2468\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ePerformance improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eTrailer parsing avoids quadratic work.\u003c/strong\u003e Large sets of trailer names use indexed membership checks instead of repeatedly scanning all previously recorded names. This reduces CPU amplification from crafted \u003ccode\u003eTrailer\u003c/code\u003e headers and chunked trailer sections while preserving trailer order. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2465\"\u003e#2465\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eHTTP compatibility and features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eStatic files handle range and conditional requests more accurately.\u003c/strong\u003e Unsupported range units and multiple ranges are ignored instead of returning \u003ccode\u003e416\u003c/code\u003e; invalid single byte ranges still return \u003ccode\u003e416\u003c/code\u003e. \u003ccode\u003eRange\u003c/code\u003e is also ignored when \u003ccode\u003eIf-Range\u003c/code\u003e does not match, and both \u003ccode\u003eRange\u003c/code\u003e and \u003ccode\u003eIf-Modified-Since\u003c/code\u003e are ignored for methods other than GET and HEAD. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2467\"\u003e#2467\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2473\"\u003e#2473\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2474\"\u003e#2474\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2475\"\u003e#2475\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePipeline clients handle HEAD responses without reading a body.\u003c/strong\u003e \u003ccode\u003ePipelineClient\u003c/code\u003e skips the response body for HEAD requests. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2469\"\u003e#2469\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP parsing accepts valid legacy formats and matches tokens correctly.\u003c/strong\u003e \u003ccode\u003eParseHTTPDate\u003c/code\u003e accepts obsolete HTTP-date formats, cookies with an invalid \u003ccode\u003eExpires\u003c/code\u003e attribute remain parseable, \u003ccode\u003eExpect: 100-continue\u003c/code\u003e is matched case-insensitively, and \u003ccode\u003eAccept-Encoding\u003c/code\u003e matches complete tokens. Asterisk-form request targets are rejected for methods other than OPTIONS. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2466\"\u003e#2466\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2481\"\u003e#2481\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2482\"\u003e#2482\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2479\"\u003e#2479\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2463\"\u003e#2463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTCP keep-alives are configurable.\u003c/strong\u003e The new \u003ccode\u003eTCPDialer.KeepAlive\u003c/code\u003e field sets the keep-alive period for connections created by the dialer; a negative value disables keep-alives. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2484\"\u003e#2484\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eSecurity and hardening\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003econsume the rest of the declared body in readMultipartForm by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2336\"\u003evalyala/fasthttp#2336\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: validate outgoing request framing by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2470\"\u003evalyala/fasthttp#2470\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estop FS and SendFile at Content-Length when the file has grown by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2462\"\u003evalyala/fasthttp#2462\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close the connection after a request with both Content-Length and Transfer-Encoding by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2476\"\u003evalyala/fasthttp#2476\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): preserve vhost isolation during path rewriting by \u003ca href=\"https://github.com/koyokr\"\u003e\u003ccode\u003e@​koyokr\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2487\"\u003evalyala/fasthttp#2487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix TLS connection rejection blocking the accept loop by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2486\"\u003evalyala/fasthttp#2486\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecount IPv6 clients against MaxConnsPerIP by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2468\"\u003evalyala/fasthttp#2468\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake addTrailerKey linear in the size of the trailer set by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2465\"\u003evalyala/fasthttp#2465\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add KeepAlive option to TCPDialer by \u003ca href=\"https://github.com/littfed\"\u003e\u003ccode\u003e@​littfed\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2484\"\u003evalyala/fasthttp#2484\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(header): reject asterisk-form request-target for non-OPTIONS methods by \u003ca href=\"https://github.com/aadieng100\"\u003e\u003ccode\u003e@​aadieng100\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2463\"\u003evalyala/fasthttp#2463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: accept the obsolete HTTP-date formats in ParseHTTPDate by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2466\"\u003evalyala/fasthttp#2466\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): ignore Range headers FS can't serve instead of replying 416 by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2467\"\u003evalyala/fasthttp#2467\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eskip the response body for HEAD requests in PipelineClient by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2469\"\u003evalyala/fasthttp#2469\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): ignore If-Modified-Since for methods other than GET and HEAD by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2474\"\u003evalyala/fasthttp#2474\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): ignore Range when the If-Range validator doesn't match by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2473\"\u003evalyala/fasthttp#2473\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/634ef44b2cf373160197fa2794f2568b94462909\"\u003e\u003ccode\u003e634ef44\u003c/code\u003e\u003c/a\u003e fix(fs): preserve vhost isolation during path rewriting (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2487\"\u003e#2487\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7aea37996b5f8edc2fe68f7107b4e0369c983d7c\"\u003e\u003ccode\u003e7aea379\u003c/code\u003e\u003c/a\u003e feat: add KeepAlive option to TCPDialer (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2484\"\u003e#2484\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/89a91a8866e8a81eefcc7de4f45221d660f9d4a4\"\u003e\u003ccode\u003e89a91a8\u003c/code\u003e\u003c/a\u003e fix: match complete Accept-Encoding tokens (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2479\"\u003e#2479\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/414aa591c449fee8f9bc66c1c1df5ab20a8a1ef7\"\u003e\u003ccode\u003e414aa59\u003c/code\u003e\u003c/a\u003e Fix TLS connection rejection blocking the accept loop (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/08807279a0675a85a68fceebee59d11aa16243fb\"\u003e\u003ccode\u003e0880727\u003c/code\u003e\u003c/a\u003e consume the rest of the declared body in readMultipartForm (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2336\"\u003e#2336\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/14a24068bc9046f1cc45cb664d8bfdd8fbc2889a\"\u003e\u003ccode\u003e14a2406\u003c/code\u003e\u003c/a\u003e fix flaky TestStreamBodyRequestContentLength\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/24922f6ee470a4a64d91ab705550be77987c465f\"\u003e\u003ccode\u003e24922f6\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.20.1 to 1.20.3 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/260b43825f850596075d3d6f61532e812d67cff0\"\u003e\u003ccode\u003e260b438\u003c/code\u003e\u003c/a\u003e fix: match the Expect: 100-continue value case-insensitively (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2482\"\u003e#2482\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/95bdd1c53f8b5e0b1dbed2956e7419f10019e674\"\u003e\u003ccode\u003e95bdd1c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/molecule-man/go-brrr from 1.2.0 to 1.3.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2483\"\u003e#2483\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/4e0f08c6b18c983469721ab0320ff7fe2e4ca475\"\u003e\u003ccode\u003e4e0f08c\u003c/code\u003e\u003c/a\u003e fix(cookie): ignore an invalid Expires attribute instead of failing to parse ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.75.0...v1.76.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.75.0\u0026new-version=1.76.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/darxnet/gourl/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/darxnet%2Fgourl/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"},{"uuid":"5794503775","node_id":"PR_kwDOUM6sL88AAAABHu0TPg","number":199,"state":"closed","title":"chore(deps): bump the go-minor-and-patch group with 3 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-10T20:59:11.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-10T19:23:02.000Z","updated_at":"2026-10-10T20:59:19.000Z","time_to_close":5769,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-minor-and-patch","update_count":3,"packages":[{"name":"github.com/go-ldap/ldap/v3","old_version":"3.4.14","new_version":"3.4.15","repository_url":"https://github.com/go-ldap/ldap"},{"name":"github.com/spf13/pflag","old_version":"1.0.9","new_version":"1.0.10","repository_url":"https://github.com/spf13/pflag"},{"name":"github.com/valyala/fasthttp","old_version":"1.70.0","new_version":"1.75.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-and-patch group with 3 updates: [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap), [github.com/spf13/pflag](https://github.com/spf13/pflag) and [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp).\n\nUpdates `github.com/go-ldap/ldap/v3` from 3.4.14 to 3.4.15\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-ldap/ldap/releases\"\u003egithub.com/go-ldap/ldap/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.4.15\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eguard malformed attribute in unpackAttributes by \u003ca href=\"https://github.com/netliomax25-code\"\u003e\u003ccode\u003e@​netliomax25-code\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/612\"\u003ego-ldap/ldap#612\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebump Go to 1.26/1.27 in CI and update GitHub Actions to latest major versions by \u003ca href=\"https://github.com/t2y\"\u003e\u003ccode\u003e@​t2y\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/624\"\u003ego-ldap/ldap#624\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: identify RFC 4533 sync control members by tag, not by count by \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/625\"\u003ego-ldap/ldap#625\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: resolve staticcheck findings and repair the make targets by \u003ca href=\"https://github.com/t2y\"\u003e\u003ccode\u003e@​t2y\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/631\"\u003ego-ldap/ldap#631\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eextended: wrap requestValue as RFC 4511 [1] OCTET STRING by \u003ca href=\"https://github.com/team-humaki\"\u003e\u003ccode\u003e@​team-humaki\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/628\"\u003ego-ldap/ldap#628\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: validate closing parenthesis in compound and grouped filters (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/633\"\u003e#633\u003c/a\u003e) by \u003ca href=\"https://github.com/littfed\"\u003e\u003ccode\u003e@​littfed\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/635\"\u003ego-ldap/ldap#635\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject malformed packets via shared child-count and bounds checks by \u003ca href=\"https://github.com/cpuschma\"\u003e\u003ccode\u003e@​cpuschma\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/632\"\u003ego-ldap/ldap#632\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpose ResultCode and DiagnosticMessage on SearchResult by \u003ca href=\"https://github.com/Pujathacker2210\"\u003e\u003ccode\u003e@​Pujathacker2210\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/626\"\u003ego-ldap/ldap#626\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: navigate LDAPMessage envelope in parseLDAPResult by \u003ca href=\"https://github.com/cpuschma\"\u003e\u003ccode\u003e@​cpuschma\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/636\"\u003ego-ldap/ldap#636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject out-of-range resultCode in GetLDAPError by \u003ca href=\"https://github.com/netliomax25-code\"\u003e\u003ccode\u003e@​netliomax25-code\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/640\"\u003ego-ldap/ldap#640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: return error for unexpected response in ModifyWithResult by \u003ca href=\"https://github.com/netliomax25-code\"\u003e\u003ccode\u003e@​netliomax25-code\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/639\"\u003ego-ldap/ldap#639\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/625\"\u003ego-ldap/ldap#625\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/team-humaki\"\u003e\u003ccode\u003e@​team-humaki\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/628\"\u003ego-ldap/ldap#628\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/littfed\"\u003e\u003ccode\u003e@​littfed\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/635\"\u003ego-ldap/ldap#635\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pujathacker2210\"\u003e\u003ccode\u003e@​Pujathacker2210\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/626\"\u003ego-ldap/ldap#626\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-ldap/ldap/compare/v3.4.14...v3.4.15\"\u003ehttps://github.com/go-ldap/ldap/compare/v3.4.14...v3.4.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/e614cf998727f9417bfa4d3681b1dee5d36c2ede\"\u003e\u003ccode\u003ee614cf9\u003c/code\u003e\u003c/a\u003e fix: return error for unexpected response in ModifyWithResult (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/639\"\u003e#639\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/f3f015323bd819b097024298cfbe1c9a16554ab4\"\u003e\u003ccode\u003ef3f0153\u003c/code\u003e\u003c/a\u003e fix: reject out-of-range resultCode before narrowing to uint16 (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/640\"\u003e#640\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/f8db69e5ab800d173687104a11a26c261ef3d0dc\"\u003e\u003ccode\u003ef8db69e\u003c/code\u003e\u003c/a\u003e Modify README for testing and server commands\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/05f305f2813dc3d18a886d8f927d9ac9ca18a986\"\u003e\u003ccode\u003e05f305f\u003c/code\u003e\u003c/a\u003e fix: navigate LDAPMessage envelope in parseLDAPResult (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/636\"\u003e#636\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/ca8bcfaf155dd46c8a7c06b5fe0fba4ad6a933cb\"\u003e\u003ccode\u003eca8bcfa\u003c/code\u003e\u003c/a\u003e feat: expose ResultCode and DiagnosticMessage on SearchResult (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/f3d20705130c2f00f828dd2d0b053e652d58b408\"\u003e\u003ccode\u003ef3d2070\u003c/code\u003e\u003c/a\u003e fix: export ErrMalformedPacket sentinel\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/0c9a7995a27fa30dad047bff0c3ae9b2572e650f\"\u003e\u003ccode\u003e0c9a799\u003c/code\u003e\u003c/a\u003e fix: address review feedback on malformed-packet hardening\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/b73a2ec4e1f62ea3b61a467ca17f8f8050605396\"\u003e\u003ccode\u003eb73a2ec\u003c/code\u003e\u003c/a\u003e fix: reject malformed packets via shared child-count and bounds checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/e4851f65b8460e9d5c3ffe6c1d8e346d93c14ab3\"\u003e\u003ccode\u003ee4851f6\u003c/code\u003e\u003c/a\u003e fix: validate closing parenthesis in compound and grouped filters (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/633\"\u003e#633\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/635\"\u003e#635\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/90c6466c614416e673d88e9a351bf7c3105ad131\"\u003e\u003ccode\u003e90c6466\u003c/code\u003e\u003c/a\u003e extended: wrap requestValue as RFC 4511 [1] OCTET STRING (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/628\"\u003e#628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-ldap/ldap/compare/v3.4.14...v3.4.15\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/spf13/pflag` from 1.0.9 to 1.0.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/spf13/pflag/releases\"\u003egithub.com/spf13/pflag's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.0.10\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix deprecation comment for (FlagSet.)ParseErrorsWhitelist by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/447\"\u003espf13/pflag#447\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremove uses of errors.Is, which requires go1.13, move go1.16/go1.21 tests to separate file by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/448\"\u003espf13/pflag#448\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/447\"\u003espf13/pflag#447\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/spf13/pflag/compare/v1.0.9...v1.0.10\"\u003ehttps://github.com/spf13/pflag/compare/v1.0.9...v1.0.10\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/pflag/commit/0491e5702ad2bb108bc519a5221bcc0f52aa9564\"\u003e\u003ccode\u003e0491e57\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/spf13/pflag/issues/448\"\u003e#448\u003c/a\u003e from thaJeztah/fix_go_version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/pflag/commit/72abab1d978352c34a7274f374d30f413e1c83f3\"\u003e\u003ccode\u003e72abab1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/spf13/pflag/issues/447\"\u003e#447\u003c/a\u003e from thaJeztah/fix_deprecation_comment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/pflag/commit/7e4dfb1e325ce429e29994933210abe53de7041d\"\u003e\u003ccode\u003e7e4dfb1\u003c/code\u003e\u003c/a\u003e Test on Go 1.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/pflag/commit/18a9d17d0ee8bd64d5c2071fc031be86fa2cd328\"\u003e\u003ccode\u003e18a9d17\u003c/code\u003e\u003c/a\u003e move Func, BoolFunc, tests as they require go1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/pflag/commit/c5b9e989df31c5d19573e50d6188550ad51a971e\"\u003e\u003ccode\u003ec5b9e98\u003c/code\u003e\u003c/a\u003e remove uses of errors.Is, which requires go1.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/pflag/commit/45a48733e35ba296a5f4dcc2b01996b89dc91a06\"\u003e\u003ccode\u003e45a4873\u003c/code\u003e\u003c/a\u003e fix deprecation comment for (FlagSet.)ParseErrorsWhitelist\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/spf13/pflag/compare/v1.0.9...v1.0.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/valyala/fasthttp` from 1.70.0 to 1.75.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.75.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003ev1.75.0\u003c/code\u003e improves HTTP parsing and serialization, URI processing, cached file serving, and client connection handling. It also fixes cookie injection, request/response framing problems, and excessive CPU or memory consumption from certain inputs.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eGo 1.26 or newer is now required.\u003c/strong\u003e \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2395\"\u003e#2395\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ePerformance improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP parsing:\u003c/strong\u003e request headers are parsed and validated in one pass, with common methods and HTTP/1.1 recognized directly. Header values, case conversion, host validation, and control-byte checks process multiple bytes at a time. The parser also avoids repeatedly scanning the same incomplete header block when data arrives in small reads. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2413\"\u003e#2413\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2414\"\u003e#2414\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2428\"\u003e#2428\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2423\"\u003e#2423\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2412\"\u003e#2412\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2438\"\u003e#2438\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP writing:\u003c/strong\u003e fewer header and response copies, cached serialized \u003ccode\u003eServer\u003c/code\u003e and \u003ccode\u003eDate\u003c/code\u003e lines, faster HTTP date formatting, and fewer flushes around chunked trailers. Large buffered responses can use \u003ccode\u003ewritev\u003c/code\u003e on TCP and Unix connections; TLS and streamed bodies retain the buffered path. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2425\"\u003e#2425\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2415\"\u003e#2415\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2434\"\u003e#2434\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2426\"\u003e#2426\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2433\"\u003e#2433\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eURI processing:\u003c/strong\u003e memoized authority parsing, a fast path for \u003ccode\u003e/\u003c/code\u003e, faster quoting and validation, and linear-time path normalization. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2411\"\u003e#2411\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2423\"\u003e#2423\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2453\"\u003e#2453\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eStatic files:\u003c/strong\u003e cached files of up to 8 KiB can be served from memory, avoiding a file read on each cache hit and releasing the file descriptor. The new small-file content cache is bounded to 4096 files, or at most 32 MiB per \u003ccode\u003eFS\u003c/code\u003e; the existing cache metadata is separate. Changes to these files become visible after cache expiration (\u003ccode\u003eCacheDuration\u003c/code\u003e, 10 seconds by default). \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2446\"\u003e#2446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eClient and server overhead:\u003c/strong\u003e clients avoid redundant deadline updates when no timeout is active. The opt-in \u003ccode\u003eServer.LazyRequestTime\u003c/code\u003e avoids reading the clock until \u003ccode\u003eRequestCtx.Time()\u003c/code\u003e is called; with this option, the returned time is the time of the first call. The benchmark comparison below uses the default setting. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2439\"\u003e#2439\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2404\"\u003e#2404\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity fixes and hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eStreamed request bodies are drained before connection reuse.\u003c/strong\u003e With \u003ccode\u003eStreamRequestBody\u003c/code\u003e enabled, the server drains unread body data before reusing the connection, with a 256 KiB drain limit, or closes the connection when safe draining is not possible. Responses are flushed before draining so early replies reach clients still uploading, and response streams can consume the request body before its remaining size is checked. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2368\"\u003e#2368\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2461\"\u003e#2461\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRejected \u003ccode\u003e100-continue\u003c/code\u003e requests close the connection.\u003c/strong\u003e A denied request could previously leave its body unread and have those bytes interpreted as the next request, desynchronizing a reused connection. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2450\"\u003e#2450\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eCookie setters prevent additional-cookie injection.\u003c/strong\u003e \u003ccode\u003eRequestHeader.SetCookie\u003c/code\u003e and its byte variants now sanitize semicolons in names and values, so one logical cookie cannot become multiple cookies on the wire. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2393\"\u003e#2393\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBounded zstd decoding limits decoder memory demand as well as output.\u003c/strong\u003e A small compressed frame could previously declare a large decoder window even when a decoded-body limit was configured. Positive \u003ccode\u003eBodyUnzstdWithLimit\u003c/code\u003e limits now select a memory-limited decoder, with caps rounded up in 8 MiB buckets; exceeding the decoder limit returns \u003ccode\u003eErrBodyTooLarge\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2407\"\u003e#2407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePath normalization avoids quadratic work.\u003c/strong\u003e Repeated separators and dot segments are processed in linear time, reducing the CPU amplification possible with crafted request targets. Incomplete headers arriving one byte at a time also avoid repeated full-block scans. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2453\"\u003e#2453\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2413\"\u003e#2413\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBodyless responses preserve framing.\u003c/strong\u003e HEAD and status-defined bodyless responses no longer emit trailer bytes that can be mistaken for the next response. Serialization suppresses forbidden \u003ccode\u003eContent-Length\u003c/code\u003e and \u003ccode\u003eTransfer-Encoding\u003c/code\u003e on 1xx/204 responses. Explicit content-type metadata and permitted 304 metadata remain supported. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2441\"\u003e#2441\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2447\"\u003e#2447\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2457\"\u003e#2457\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePipeline clients gain a response-body limit and better failure cleanup.\u003c/strong\u003e Set the new \u003ccode\u003ePipelineClient.MaxResponseBodySize\u003c/code\u003e to a positive value to reject oversized responses, including with \u003ccode\u003eResponse.StreamBody\u003c/code\u003e; the default remains unlimited. Idle workers now retire after errors, abandoned requests release their streams, and failed connection establishment is throttled. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2427\"\u003e#2427\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2458\"\u003e#2458\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eArgument sorting now honors any negative comparator result in \u003ccode\u003eArgs.Sort\u003c/code\u003e and \u003ccode\u003eArgs.SortKeys\u003c/code\u003e, and static-file serving rejects zero-length suffix byte ranges (\u003ccode\u003ebytes=-0\u003c/code\u003e) with \u003ccode\u003e416 Range Not Satisfiable\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2459\"\u003e#2459\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2460\"\u003e#2460\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eOther significant changes include opt-in ETags for \u003ccode\u003eFS\u003c/code\u003e, a \u003ccode\u003enet/http\u003c/code\u003e request conversion function, improved adaptor handling of flushes, aborts and trailers, and fixes to shutdown and per-IP connection lifetimes. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2399\"\u003e#2399\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2104\"\u003e#2104\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2429\"\u003e#2429\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2445\"\u003e#2445\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2352\"\u003e#2352\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2402\"\u003e#2402\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eBenchmark results\u003c/h2\u003e\n\u003cp\u003eCompared \u003ccode\u003ev1.74.0\u003c/code\u003e with master \u003ccode\u003e6141d3a\u003c/code\u003e on Ubuntu 26.04, an AMD EPYC 9454, and Go 1.27.1. Each benchmark has ten samples per revision, run alternately with the same inputs and CPU affinity. Negative percentages mean less time per operation. All rows below have p \u0026lt; 0.001.\u003c/p\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eBenchmark\u003c/th\u003e\n\u003cth align=\"right\"\u003ev1.74.0\u003c/th\u003e\n\u003cth align=\"right\"\u003eRelease candidate\u003c/th\u003e\n\u003cth align=\"right\"\u003eTime/op change\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eMinimal GET, pipeline depth 64\u003c/td\u003e\n\u003ctd align=\"right\"\u003e484.30 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e278.05 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-42.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eBrowser-shaped GET, pipeline depth 16\u003c/td\u003e\n\u003ctd align=\"right\"\u003e1.080 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e722.55 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-33.1%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eRequest-header parsing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e561.80 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e348.15 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-38.0%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eResponse-header parsing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e466.95 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e277.55 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-40.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eRequest-header writing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e49.84 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e37.45 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-24.8%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eResponse-header writing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e68.64 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e40.99 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-40.3%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eCached 1 KiB file, directory\u003c/td\u003e\n\u003ctd align=\"right\"\u003e2.324 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e611.85 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-73.7%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eCached 1 KiB file, \u003ccode\u003eos.DirFS\u003c/code\u003e\u003c/td\u003e\n\u003ctd align=\"right\"\u003e3.805 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e612.30 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-83.9%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eURI path with query string\u003c/td\u003e\n\u003ctd align=\"right\"\u003e91.39 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e46.06 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-49.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eHTTP date formatting\u003c/td\u003e\n\u003ctd align=\"right\"\u003e108.25 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e28.59 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-73.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eTrickled ~4 KiB headers, one byte per read\u003c/td\u003e\n\u003ctd align=\"right\"\u003e1385.784 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e191.257 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-86.2%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e8 KiB path of repeated \u003ccode\u003e/\u003c/code\u003e\u003c/td\u003e\n\u003ctd align=\"right\"\u003e352.529 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e54.330 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-84.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e~8 KiB path of repeated \u003ccode\u003e/a/..\u003c/code\u003e\u003c/td\u003e\n\u003ctd align=\"right\"\u003e96.733 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e22.253 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-77.0%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eTCP client/server round trips, small response\u003c/td\u003e\n\u003ctd align=\"right\"\u003e5.193 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e5.030 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-3.1%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eTCP client/server round trips, 64 KiB response\u003c/td\u003e\n\u003ctd align=\"right\"\u003e15.302 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e13.478 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-11.9%\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003cp\u003eThe pipelined serving and file benchmarks use an in-memory connection with writes discarded. The two TCP rows include real loopback networking. These results describe the selected workloads; TCP gains are smaller than the gains in parsing and serialization. \u003ccode\u003eServer.LazyRequestTime\u003c/code\u003e remains disabled in this comparison.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/818be799bc0b086b5df262d6382bf5875fbd58f4\"\u003e\u003ccode\u003e818be79\u003c/code\u003e\u003c/a\u003e fix: preserve response behavior while draining streamed requests (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2461\"\u003e#2461\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/741bd4144c2a57c82499ceecb7648b0cbd6456d6\"\u003e\u003ccode\u003e741bd41\u003c/code\u003e\u003c/a\u003e fix(fs): reject zero-length suffix byte ranges (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2460\"\u003e#2460\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/06d8ae84c6bea09350e2fd67fbb86e2095d36057\"\u003e\u003ccode\u003e06d8ae8\u003c/code\u003e\u003c/a\u003e discard unread streamed request body before the next request (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2368\"\u003e#2368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/54759cc7bed45435350e4ae525986b96ac2900e7\"\u003e\u003ccode\u003e54759cc\u003c/code\u003e\u003c/a\u003e fix(args): use comparator sign in Sort and SortKeys (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2459\"\u003e#2459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/6141d3a6205bec7f51225a058fbcc578efdd9a17\"\u003e\u003ccode\u003e6141d3a\u003c/code\u003e\u003c/a\u003e fix: stop idle PipelineClient workers after errors (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2458\"\u003e#2458\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c7861c0abbdc5fa042b27fa005dad36e4419f49d\"\u003e\u003ccode\u003ec7861c0\u003c/code\u003e\u003c/a\u003e Omit Transfer-Encoding on 1xx and 204 responses (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2457\"\u003e#2457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9242984426b10bca0d7e40e3002796576c669a21\"\u003e\u003ccode\u003e9242984\u003c/code\u003e\u003c/a\u003e leave an empty upfront Server or User-Agent out of PeekAll (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2443\"\u003e#2443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/a0690e59fb50658ef5c8f1763fc625c55958e2e9\"\u003e\u003ccode\u003ea0690e5\u003c/code\u003e\u003c/a\u003e fix(request): warn when Request.Body() is called on streamed requests (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2350\"\u003e#2350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7ae14bec2191f359f6d974697dccfdce07cb9985\"\u003e\u003ccode\u003e7ae14be\u003c/code\u003e\u003c/a\u003e Preserve NoDefaultContentType across client response resets (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2455\"\u003e#2455\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c997615ad95bf6c0b2c2898011c7807883860558\"\u003e\u003ccode\u003ec997615\u003c/code\u003e\u003c/a\u003e perf: serve small cached files from memory in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2446\"\u003e#2446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.70.0...v1.75.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/Hazame-hub/alder/pull/199","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Hazame-hub%2Falder/issues/199","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/199/packages"},{"uuid":"5772093772","node_id":"PR_kwDOEY_MZc8AAAABHdRHtg","number":643,"state":"closed","title":"Bump github.com/valyala/fasthttp from 1.73.0 to 1.75.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-22T03:03:05.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-09T03:03:35.000Z","updated_at":"2026-10-22T03:03:07.000Z","time_to_close":1123170,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.73.0","new_version":"1.75.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.73.0 to 1.75.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.75.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003ev1.75.0\u003c/code\u003e improves HTTP parsing and serialization, URI processing, cached file serving, and client connection handling. It also fixes cookie injection, request/response framing problems, and excessive CPU or memory consumption from certain inputs.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eGo 1.26 or newer is now required.\u003c/strong\u003e \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2395\"\u003e#2395\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ePerformance improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP parsing:\u003c/strong\u003e request headers are parsed and validated in one pass, with common methods and HTTP/1.1 recognized directly. Header values, case conversion, host validation, and control-byte checks process multiple bytes at a time. The parser also avoids repeatedly scanning the same incomplete header block when data arrives in small reads. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2413\"\u003e#2413\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2414\"\u003e#2414\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2428\"\u003e#2428\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2423\"\u003e#2423\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2412\"\u003e#2412\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2438\"\u003e#2438\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP writing:\u003c/strong\u003e fewer header and response copies, cached serialized \u003ccode\u003eServer\u003c/code\u003e and \u003ccode\u003eDate\u003c/code\u003e lines, faster HTTP date formatting, and fewer flushes around chunked trailers. Large buffered responses can use \u003ccode\u003ewritev\u003c/code\u003e on TCP and Unix connections; TLS and streamed bodies retain the buffered path. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2425\"\u003e#2425\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2415\"\u003e#2415\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2434\"\u003e#2434\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2426\"\u003e#2426\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2433\"\u003e#2433\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eURI processing:\u003c/strong\u003e memoized authority parsing, a fast path for \u003ccode\u003e/\u003c/code\u003e, faster quoting and validation, and linear-time path normalization. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2411\"\u003e#2411\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2423\"\u003e#2423\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2453\"\u003e#2453\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eStatic files:\u003c/strong\u003e cached files of up to 8 KiB can be served from memory, avoiding a file read on each cache hit and releasing the file descriptor. The new small-file content cache is bounded to 4096 files, or at most 32 MiB per \u003ccode\u003eFS\u003c/code\u003e; the existing cache metadata is separate. Changes to these files become visible after cache expiration (\u003ccode\u003eCacheDuration\u003c/code\u003e, 10 seconds by default). \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2446\"\u003e#2446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eClient and server overhead:\u003c/strong\u003e clients avoid redundant deadline updates when no timeout is active. The opt-in \u003ccode\u003eServer.LazyRequestTime\u003c/code\u003e avoids reading the clock until \u003ccode\u003eRequestCtx.Time()\u003c/code\u003e is called; with this option, the returned time is the time of the first call. The benchmark comparison below uses the default setting. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2439\"\u003e#2439\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2404\"\u003e#2404\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity fixes and hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eStreamed request bodies are drained before connection reuse.\u003c/strong\u003e With \u003ccode\u003eStreamRequestBody\u003c/code\u003e enabled, the server drains unread body data before reusing the connection, with a 256 KiB drain limit, or closes the connection when safe draining is not possible. Responses are flushed before draining so early replies reach clients still uploading, and response streams can consume the request body before its remaining size is checked. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2368\"\u003e#2368\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2461\"\u003e#2461\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRejected \u003ccode\u003e100-continue\u003c/code\u003e requests close the connection.\u003c/strong\u003e A denied request could previously leave its body unread and have those bytes interpreted as the next request, desynchronizing a reused connection. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2450\"\u003e#2450\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eCookie setters prevent additional-cookie injection.\u003c/strong\u003e \u003ccode\u003eRequestHeader.SetCookie\u003c/code\u003e and its byte variants now sanitize semicolons in names and values, so one logical cookie cannot become multiple cookies on the wire. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2393\"\u003e#2393\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBounded zstd decoding limits decoder memory demand as well as output.\u003c/strong\u003e A small compressed frame could previously declare a large decoder window even when a decoded-body limit was configured. Positive \u003ccode\u003eBodyUnzstdWithLimit\u003c/code\u003e limits now select a memory-limited decoder, with caps rounded up in 8 MiB buckets; exceeding the decoder limit returns \u003ccode\u003eErrBodyTooLarge\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2407\"\u003e#2407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePath normalization avoids quadratic work.\u003c/strong\u003e Repeated separators and dot segments are processed in linear time, reducing the CPU amplification possible with crafted request targets. Incomplete headers arriving one byte at a time also avoid repeated full-block scans. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2453\"\u003e#2453\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2413\"\u003e#2413\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBodyless responses preserve framing.\u003c/strong\u003e HEAD and status-defined bodyless responses no longer emit trailer bytes that can be mistaken for the next response. Serialization suppresses forbidden \u003ccode\u003eContent-Length\u003c/code\u003e and \u003ccode\u003eTransfer-Encoding\u003c/code\u003e on 1xx/204 responses. Explicit content-type metadata and permitted 304 metadata remain supported. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2441\"\u003e#2441\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2447\"\u003e#2447\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2457\"\u003e#2457\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePipeline clients gain a response-body limit and better failure cleanup.\u003c/strong\u003e Set the new \u003ccode\u003ePipelineClient.MaxResponseBodySize\u003c/code\u003e to a positive value to reject oversized responses, including with \u003ccode\u003eResponse.StreamBody\u003c/code\u003e; the default remains unlimited. Idle workers now retire after errors, abandoned requests release their streams, and failed connection establishment is throttled. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2427\"\u003e#2427\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2458\"\u003e#2458\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eArgument sorting now honors any negative comparator result in \u003ccode\u003eArgs.Sort\u003c/code\u003e and \u003ccode\u003eArgs.SortKeys\u003c/code\u003e, and static-file serving rejects zero-length suffix byte ranges (\u003ccode\u003ebytes=-0\u003c/code\u003e) with \u003ccode\u003e416 Range Not Satisfiable\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2459\"\u003e#2459\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2460\"\u003e#2460\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eOther significant changes include opt-in ETags for \u003ccode\u003eFS\u003c/code\u003e, a \u003ccode\u003enet/http\u003c/code\u003e request conversion function, improved adaptor handling of flushes, aborts and trailers, and fixes to shutdown and per-IP connection lifetimes. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2399\"\u003e#2399\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2104\"\u003e#2104\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2429\"\u003e#2429\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2445\"\u003e#2445\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2352\"\u003e#2352\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2402\"\u003e#2402\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eBenchmark results\u003c/h2\u003e\n\u003cp\u003eCompared \u003ccode\u003ev1.74.0\u003c/code\u003e with master \u003ccode\u003e6141d3a\u003c/code\u003e on Ubuntu 26.04, an AMD EPYC 9454, and Go 1.27.1. Each benchmark has ten samples per revision, run alternately with the same inputs and CPU affinity. Negative percentages mean less time per operation. All rows below have p \u0026lt; 0.001.\u003c/p\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eBenchmark\u003c/th\u003e\n\u003cth align=\"right\"\u003ev1.74.0\u003c/th\u003e\n\u003cth align=\"right\"\u003eRelease candidate\u003c/th\u003e\n\u003cth align=\"right\"\u003eTime/op change\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eMinimal GET, pipeline depth 64\u003c/td\u003e\n\u003ctd align=\"right\"\u003e484.30 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e278.05 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-42.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eBrowser-shaped GET, pipeline depth 16\u003c/td\u003e\n\u003ctd align=\"right\"\u003e1.080 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e722.55 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-33.1%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eRequest-header parsing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e561.80 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e348.15 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-38.0%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eResponse-header parsing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e466.95 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e277.55 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-40.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eRequest-header writing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e49.84 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e37.45 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-24.8%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eResponse-header writing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e68.64 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e40.99 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-40.3%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eCached 1 KiB file, directory\u003c/td\u003e\n\u003ctd align=\"right\"\u003e2.324 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e611.85 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-73.7%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eCached 1 KiB file, \u003ccode\u003eos.DirFS\u003c/code\u003e\u003c/td\u003e\n\u003ctd align=\"right\"\u003e3.805 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e612.30 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-83.9%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eURI path with query string\u003c/td\u003e\n\u003ctd align=\"right\"\u003e91.39 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e46.06 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-49.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eHTTP date formatting\u003c/td\u003e\n\u003ctd align=\"right\"\u003e108.25 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e28.59 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-73.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eTrickled ~4 KiB headers, one byte per read\u003c/td\u003e\n\u003ctd align=\"right\"\u003e1385.784 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e191.257 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-86.2%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e8 KiB path of repeated \u003ccode\u003e/\u003c/code\u003e\u003c/td\u003e\n\u003ctd align=\"right\"\u003e352.529 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e54.330 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-84.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e~8 KiB path of repeated \u003ccode\u003e/a/..\u003c/code\u003e\u003c/td\u003e\n\u003ctd align=\"right\"\u003e96.733 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e22.253 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-77.0%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eTCP client/server round trips, small response\u003c/td\u003e\n\u003ctd align=\"right\"\u003e5.193 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e5.030 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-3.1%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eTCP client/server round trips, 64 KiB response\u003c/td\u003e\n\u003ctd align=\"right\"\u003e15.302 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e13.478 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-11.9%\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003cp\u003eThe pipelined serving and file benchmarks use an in-memory connection with writes discarded. The two TCP rows include real loopback networking. These results describe the selected workloads; TCP gains are smaller than the gains in parsing and serialization. \u003ccode\u003eServer.LazyRequestTime\u003c/code\u003e remains disabled in this comparison.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/818be799bc0b086b5df262d6382bf5875fbd58f4\"\u003e\u003ccode\u003e818be79\u003c/code\u003e\u003c/a\u003e fix: preserve response behavior while draining streamed requests (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2461\"\u003e#2461\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/741bd4144c2a57c82499ceecb7648b0cbd6456d6\"\u003e\u003ccode\u003e741bd41\u003c/code\u003e\u003c/a\u003e fix(fs): reject zero-length suffix byte ranges (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2460\"\u003e#2460\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/06d8ae84c6bea09350e2fd67fbb86e2095d36057\"\u003e\u003ccode\u003e06d8ae8\u003c/code\u003e\u003c/a\u003e discard unread streamed request body before the next request (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2368\"\u003e#2368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/54759cc7bed45435350e4ae525986b96ac2900e7\"\u003e\u003ccode\u003e54759cc\u003c/code\u003e\u003c/a\u003e fix(args): use comparator sign in Sort and SortKeys (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2459\"\u003e#2459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/6141d3a6205bec7f51225a058fbcc578efdd9a17\"\u003e\u003ccode\u003e6141d3a\u003c/code\u003e\u003c/a\u003e fix: stop idle PipelineClient workers after errors (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2458\"\u003e#2458\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c7861c0abbdc5fa042b27fa005dad36e4419f49d\"\u003e\u003ccode\u003ec7861c0\u003c/code\u003e\u003c/a\u003e Omit Transfer-Encoding on 1xx and 204 responses (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2457\"\u003e#2457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9242984426b10bca0d7e40e3002796576c669a21\"\u003e\u003ccode\u003e9242984\u003c/code\u003e\u003c/a\u003e leave an empty upfront Server or User-Agent out of PeekAll (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2443\"\u003e#2443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/a0690e59fb50658ef5c8f1763fc625c55958e2e9\"\u003e\u003ccode\u003ea0690e5\u003c/code\u003e\u003c/a\u003e fix(request): warn when Request.Body() is called on streamed requests (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2350\"\u003e#2350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7ae14bec2191f359f6d974697dccfdce07cb9985\"\u003e\u003ccode\u003e7ae14be\u003c/code\u003e\u003c/a\u003e Preserve NoDefaultContentType across client response resets (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2455\"\u003e#2455\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c997615ad95bf6c0b2c2898011c7807883860558\"\u003e\u003ccode\u003ec997615\u003c/code\u003e\u003c/a\u003e perf: serve small cached files from memory in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2446\"\u003e#2446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.75.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.73.0\u0026new-version=1.75.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/oidc-mytoken/server/pull/643","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/oidc-mytoken%2Fserver/issues/643","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/643/packages"},{"uuid":"5657036791","node_id":"PR_kwDOG7IA588AAAABGBq6uA","number":316,"state":"open","title":"chore(deps): bump github.com/valyala/fasthttp from 1.73.0 to 1.74.0 in /benchmarks","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-01T04:36:52.000Z","updated_at":"2026-10-01T04:38:15.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.73.0","new_version":"1.74.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":"/benchmarks","ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.73.0 to 1.74.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.74.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(fasthttpproxy): select proxies from the request scheme by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2334\"\u003evalyala/fasthttp#2334\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: scale short timeouts with testTimeout to reduce -race flakiness by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2339\"\u003evalyala/fasthttp#2339\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: drop zeroed entries from the perIPConnCounter map by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2337\"\u003evalyala/fasthttp#2337\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip the unusable per-call file cache in ServeFS by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2338\"\u003evalyala/fasthttp#2338\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: return after a failed Dial instead of dereferencing a nil conn by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2341\"\u003evalyala/fasthttp#2341\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't recycle an idle timestamp its connection still owns by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2342\"\u003evalyala/fasthttp#2342\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject Transfer-Encoding on HTTP/1.0 requests by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2330\"\u003evalyala/fasthttp#2330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eonly treat \u0026quot;//\u0026quot; in URI.Update as an authority after a scheme by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2345\"\u003evalyala/fasthttp#2345\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: consume informational responses before the final response by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2333\"\u003evalyala/fasthttp#2333\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject out-of-range Content-Length instead of wrapping it by \u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: zero-copy chunked body writes via io.WriterTo by \u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't close the shutdown done channel twice by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2340\"\u003evalyala/fasthttp#2340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename ChunkedBodyWriterTo to BodyWriterTo and use in more places by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2348\"\u003evalyala/fasthttp#2348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2349\"\u003evalyala/fasthttp#2349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: small read buffer error doesn't match the ignored string anymore by \u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd canonical header lookup by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2361\"\u003evalyala/fasthttp#2361\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2360\"\u003evalyala/fasthttp#2360\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a pooled timer panic and a test data race by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: send / as the path when the request-target is query-only by \u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: try to avoid reallocations while reading zstd compressed requests by \u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add the QUERY method (RFC 10008) by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2358\"\u003evalyala/fasthttp#2358\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for streaming reads before releasing pooled resources by \u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr by \u003ca href=\"https://github.com/gaby\"\u003e\u003ccode\u003e@​gaby\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2366\"\u003evalyala/fasthttp#2366\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAlways stream response bodies when requested by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2373\"\u003evalyala/fasthttp#2373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.28.0 to 2.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2375\"\u003evalyala/fasthttp#2375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: let request timeouts override client timeouts by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2372\"\u003evalyala/fasthttp#2372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid race condition for closing the streaming connection at EOF by \u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGive TestClientHeadWithBody a CI-proof read timeout by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2374\"\u003evalyala/fasthttp#2374\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent stale query string after clearing query args by \u003ca href=\"https://github.com/cuishuang\"\u003e\u003ccode\u003e@​cuishuang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2380\"\u003evalyala/fasthttp#2380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(examples): add zero-allocation server example by \u003ca href=\"https://github.com/aabishkaryal\"\u003e\u003ccode\u003e@​aabishkaryal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2362\"\u003evalyala/fasthttp#2362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2384\"\u003evalyala/fasthttp#2384\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/17ba63c6627f56fd77bd54a6ccd51f2e550fc231\"\u003e\u003ccode\u003e17ba63c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/559991a01a7c5d9f93971def53e9dbe80432a484\"\u003e\u003ccode\u003e559991a\u003c/code\u003e\u003c/a\u003e feat(examples): add zero-allocation server example (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2362\"\u003e#2362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/1900e5343bc0a52887a36c6dddb07619809f75b6\"\u003e\u003ccode\u003e1900e53\u003c/code\u003e\u003c/a\u003e fix: prevent stale query string after clearing query args (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2380\"\u003e#2380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fde5d95922be86c50e4f5622e744757dc20c68d9\"\u003e\u003ccode\u003efde5d95\u003c/code\u003e\u003c/a\u003e give TestClientHeadWithBody a CI-proof read timeout (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2374\"\u003e#2374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/395442ae68e51f99cd00e31f3533817d970c81d9\"\u003e\u003ccode\u003e395442a\u003c/code\u003e\u003c/a\u003e fix: keep a chunked requestStream at EOF once the body ends (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2379\"\u003e#2379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c19f9cf9334dd3e248bfab005bc1817e2d84ba39\"\u003e\u003ccode\u003ec19f9cf\u003c/code\u003e\u003c/a\u003e fix: let request timeouts override client timeouts (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2372\"\u003e#2372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c96f600972c6f4a7a30d664257b340ebe9d60124\"\u003e\u003ccode\u003ec96f600\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.28.0 to 2.29.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2375\"\u003e#2375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d47d2c91328f8eb14a56dbcca3c5bae1f996c04d\"\u003e\u003ccode\u003ed47d2c9\u003c/code\u003e\u003c/a\u003e Always stream response bodies when requested (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2373\"\u003e#2373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0d9439b8d369f38bd7356c11da4f7dffb8960642\"\u003e\u003ccode\u003e0d9439b\u003c/code\u003e\u003c/a\u003e Replace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fb3b29ece936327cb25142eae6ea447eba3aa257\"\u003e\u003ccode\u003efb3b29e\u003c/code\u003e\u003c/a\u003e fix: wait for streaming reads before releasing pooled resources (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2353\"\u003e#2353\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.73.0\u0026new-version=1.74.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/abemedia/go-don/pull/316","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/abemedia%2Fgo-don/issues/316","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/316/packages"},{"uuid":"5613483431","node_id":"PR_kwDOLmBl1M8AAAABFevvSg","number":1168,"state":"closed","title":"chore: bump github.com/valyala/fasthttp from 1.52.0 to 1.74.0","user":"dependabot[bot]","labels":["stale","dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-10T03:40:54.000Z","author_association":null,"state_reason":null,"created_at":"2026-09-28T11:04:37.000Z","updated_at":"2026-10-10T03:41:04.000Z","time_to_close":1010177,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.52.0","new_version":"1.74.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.52.0 to 1.74.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.74.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(fasthttpproxy): select proxies from the request scheme by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2334\"\u003evalyala/fasthttp#2334\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: scale short timeouts with testTimeout to reduce -race flakiness by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2339\"\u003evalyala/fasthttp#2339\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: drop zeroed entries from the perIPConnCounter map by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2337\"\u003evalyala/fasthttp#2337\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip the unusable per-call file cache in ServeFS by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2338\"\u003evalyala/fasthttp#2338\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: return after a failed Dial instead of dereferencing a nil conn by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2341\"\u003evalyala/fasthttp#2341\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't recycle an idle timestamp its connection still owns by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2342\"\u003evalyala/fasthttp#2342\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject Transfer-Encoding on HTTP/1.0 requests by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2330\"\u003evalyala/fasthttp#2330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eonly treat \u0026quot;//\u0026quot; in URI.Update as an authority after a scheme by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2345\"\u003evalyala/fasthttp#2345\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: consume informational responses before the final response by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2333\"\u003evalyala/fasthttp#2333\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject out-of-range Content-Length instead of wrapping it by \u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: zero-copy chunked body writes via io.WriterTo by \u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't close the shutdown done channel twice by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2340\"\u003evalyala/fasthttp#2340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename ChunkedBodyWriterTo to BodyWriterTo and use in more places by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2348\"\u003evalyala/fasthttp#2348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2349\"\u003evalyala/fasthttp#2349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: small read buffer error doesn't match the ignored string anymore by \u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd canonical header lookup by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2361\"\u003evalyala/fasthttp#2361\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2360\"\u003evalyala/fasthttp#2360\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a pooled timer panic and a test data race by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: send / as the path when the request-target is query-only by \u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: try to avoid reallocations while reading zstd compressed requests by \u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add the QUERY method (RFC 10008) by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2358\"\u003evalyala/fasthttp#2358\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for streaming reads before releasing pooled resources by \u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr by \u003ca href=\"https://github.com/gaby\"\u003e\u003ccode\u003e@​gaby\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2366\"\u003evalyala/fasthttp#2366\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAlways stream response bodies when requested by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2373\"\u003evalyala/fasthttp#2373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.28.0 to 2.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2375\"\u003evalyala/fasthttp#2375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: let request timeouts override client timeouts by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2372\"\u003evalyala/fasthttp#2372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid race condition for closing the streaming connection at EOF by \u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGive TestClientHeadWithBody a CI-proof read timeout by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2374\"\u003evalyala/fasthttp#2374\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent stale query string after clearing query args by \u003ca href=\"https://github.com/cuishuang\"\u003e\u003ccode\u003e@​cuishuang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2380\"\u003evalyala/fasthttp#2380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(examples): add zero-allocation server example by \u003ca href=\"https://github.com/aabishkaryal\"\u003e\u003ccode\u003e@​aabishkaryal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2362\"\u003evalyala/fasthttp#2362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2384\"\u003evalyala/fasthttp#2384\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/17ba63c6627f56fd77bd54a6ccd51f2e550fc231\"\u003e\u003ccode\u003e17ba63c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/559991a01a7c5d9f93971def53e9dbe80432a484\"\u003e\u003ccode\u003e559991a\u003c/code\u003e\u003c/a\u003e feat(examples): add zero-allocation server example (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2362\"\u003e#2362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/1900e5343bc0a52887a36c6dddb07619809f75b6\"\u003e\u003ccode\u003e1900e53\u003c/code\u003e\u003c/a\u003e fix: prevent stale query string after clearing query args (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2380\"\u003e#2380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fde5d95922be86c50e4f5622e744757dc20c68d9\"\u003e\u003ccode\u003efde5d95\u003c/code\u003e\u003c/a\u003e give TestClientHeadWithBody a CI-proof read timeout (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2374\"\u003e#2374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/395442ae68e51f99cd00e31f3533817d970c81d9\"\u003e\u003ccode\u003e395442a\u003c/code\u003e\u003c/a\u003e fix: keep a chunked requestStream at EOF once the body ends (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2379\"\u003e#2379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c19f9cf9334dd3e248bfab005bc1817e2d84ba39\"\u003e\u003ccode\u003ec19f9cf\u003c/code\u003e\u003c/a\u003e fix: let request timeouts override client timeouts (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2372\"\u003e#2372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c96f600972c6f4a7a30d664257b340ebe9d60124\"\u003e\u003ccode\u003ec96f600\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.28.0 to 2.29.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2375\"\u003e#2375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d47d2c91328f8eb14a56dbcca3c5bae1f996c04d\"\u003e\u003ccode\u003ed47d2c9\u003c/code\u003e\u003c/a\u003e Always stream response bodies when requested (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2373\"\u003e#2373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0d9439b8d369f38bd7356c11da4f7dffb8960642\"\u003e\u003ccode\u003e0d9439b\u003c/code\u003e\u003c/a\u003e Replace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fb3b29ece936327cb25142eae6ea447eba3aa257\"\u003e\u003ccode\u003efb3b29e\u003c/code\u003e\u003c/a\u003e fix: wait for streaming reads before releasing pooled resources (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2353\"\u003e#2353\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.52.0...v1.74.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.52.0\u0026new-version=1.74.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Txim0520/https-github.com-coder-coder/pull/1168","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Txim0520%2Fhttps-github.com-coder-coder/issues/1168","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1168/packages"},{"uuid":"5452944218","node_id":"PR_kwDOM-UaAs8AAAABDflYPA","number":239,"state":"open","title":"deps: bump github.com/valyala/fasthttp from 1.73.0 to 1.74.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-09-14T18:14:09.000Z","updated_at":"2026-09-14T18:14:10.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.73.0","new_version":"1.74.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.73.0 to 1.74.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.74.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(fasthttpproxy): select proxies from the request scheme by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2334\"\u003evalyala/fasthttp#2334\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: scale short timeouts with testTimeout to reduce -race flakiness by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2339\"\u003evalyala/fasthttp#2339\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: drop zeroed entries from the perIPConnCounter map by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2337\"\u003evalyala/fasthttp#2337\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip the unusable per-call file cache in ServeFS by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2338\"\u003evalyala/fasthttp#2338\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: return after a failed Dial instead of dereferencing a nil conn by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2341\"\u003evalyala/fasthttp#2341\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't recycle an idle timestamp its connection still owns by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2342\"\u003evalyala/fasthttp#2342\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject Transfer-Encoding on HTTP/1.0 requests by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2330\"\u003evalyala/fasthttp#2330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eonly treat \u0026quot;//\u0026quot; in URI.Update as an authority after a scheme by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2345\"\u003evalyala/fasthttp#2345\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: consume informational responses before the final response by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2333\"\u003evalyala/fasthttp#2333\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject out-of-range Content-Length instead of wrapping it by \u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: zero-copy chunked body writes via io.WriterTo by \u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't close the shutdown done channel twice by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2340\"\u003evalyala/fasthttp#2340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename ChunkedBodyWriterTo to BodyWriterTo and use in more places by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2348\"\u003evalyala/fasthttp#2348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2349\"\u003evalyala/fasthttp#2349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: small read buffer error doesn't match the ignored string anymore by \u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd canonical header lookup by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2361\"\u003evalyala/fasthttp#2361\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2360\"\u003evalyala/fasthttp#2360\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a pooled timer panic and a test data race by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: send / as the path when the request-target is query-only by \u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: try to avoid reallocations while reading zstd compressed requests by \u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add the QUERY method (RFC 10008) by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2358\"\u003evalyala/fasthttp#2358\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for streaming reads before releasing pooled resources by \u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr by \u003ca href=\"https://github.com/gaby\"\u003e\u003ccode\u003e@​gaby\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2366\"\u003evalyala/fasthttp#2366\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAlways stream response bodies when requested by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2373\"\u003evalyala/fasthttp#2373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.28.0 to 2.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2375\"\u003evalyala/fasthttp#2375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: let request timeouts override client timeouts by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2372\"\u003evalyala/fasthttp#2372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid race condition for closing the streaming connection at EOF by \u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGive TestClientHeadWithBody a CI-proof read timeout by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2374\"\u003evalyala/fasthttp#2374\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent stale query string after clearing query args by \u003ca href=\"https://github.com/cuishuang\"\u003e\u003ccode\u003e@​cuishuang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2380\"\u003evalyala/fasthttp#2380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(examples): add zero-allocation server example by \u003ca href=\"https://github.com/aabishkaryal\"\u003e\u003ccode\u003e@​aabishkaryal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2362\"\u003evalyala/fasthttp#2362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2384\"\u003evalyala/fasthttp#2384\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/17ba63c6627f56fd77bd54a6ccd51f2e550fc231\"\u003e\u003ccode\u003e17ba63c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/559991a01a7c5d9f93971def53e9dbe80432a484\"\u003e\u003ccode\u003e559991a\u003c/code\u003e\u003c/a\u003e feat(examples): add zero-allocation server example (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2362\"\u003e#2362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/1900e5343bc0a52887a36c6dddb07619809f75b6\"\u003e\u003ccode\u003e1900e53\u003c/code\u003e\u003c/a\u003e fix: prevent stale query string after clearing query args (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2380\"\u003e#2380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fde5d95922be86c50e4f5622e744757dc20c68d9\"\u003e\u003ccode\u003efde5d95\u003c/code\u003e\u003c/a\u003e give TestClientHeadWithBody a CI-proof read timeout (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2374\"\u003e#2374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/395442ae68e51f99cd00e31f3533817d970c81d9\"\u003e\u003ccode\u003e395442a\u003c/code\u003e\u003c/a\u003e fix: keep a chunked requestStream at EOF once the body ends (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2379\"\u003e#2379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c19f9cf9334dd3e248bfab005bc1817e2d84ba39\"\u003e\u003ccode\u003ec19f9cf\u003c/code\u003e\u003c/a\u003e fix: let request timeouts override client timeouts (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2372\"\u003e#2372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c96f600972c6f4a7a30d664257b340ebe9d60124\"\u003e\u003ccode\u003ec96f600\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.28.0 to 2.29.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2375\"\u003e#2375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d47d2c91328f8eb14a56dbcca3c5bae1f996c04d\"\u003e\u003ccode\u003ed47d2c9\u003c/code\u003e\u003c/a\u003e Always stream response bodies when requested (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2373\"\u003e#2373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0d9439b8d369f38bd7356c11da4f7dffb8960642\"\u003e\u003ccode\u003e0d9439b\u003c/code\u003e\u003c/a\u003e Replace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fb3b29ece936327cb25142eae6ea447eba3aa257\"\u003e\u003ccode\u003efb3b29e\u003c/code\u003e\u003c/a\u003e fix: wait for streaming reads before releasing pooled resources (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2353\"\u003e#2353\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.73.0\u0026new-version=1.74.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/sunhailin-Leo/data-pipeline-go/pull/239","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sunhailin-Leo%2Fdata-pipeline-go/issues/239","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/239/packages"},{"uuid":"5420273013","node_id":"PR_kwDOFrKK988AAAABDF46MA","number":371,"state":"open","title":"Bump github.com/valyala/fasthttp from 1.73.0 to 1.74.0","user":"dependabot[bot]","labels":[":shamrock: Dependencies",":hamster: Go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-09-11T04:12:51.000Z","updated_at":"2026-09-11T04:14:38.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.73.0","new_version":"1.74.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.73.0 to 1.74.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.74.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(fasthttpproxy): select proxies from the request scheme by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2334\"\u003evalyala/fasthttp#2334\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: scale short timeouts with testTimeout to reduce -race flakiness by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2339\"\u003evalyala/fasthttp#2339\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: drop zeroed entries from the perIPConnCounter map by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2337\"\u003evalyala/fasthttp#2337\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip the unusable per-call file cache in ServeFS by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2338\"\u003evalyala/fasthttp#2338\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: return after a failed Dial instead of dereferencing a nil conn by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2341\"\u003evalyala/fasthttp#2341\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't recycle an idle timestamp its connection still owns by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2342\"\u003evalyala/fasthttp#2342\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject Transfer-Encoding on HTTP/1.0 requests by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2330\"\u003evalyala/fasthttp#2330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eonly treat \u0026quot;//\u0026quot; in URI.Update as an authority after a scheme by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2345\"\u003evalyala/fasthttp#2345\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: consume informational responses before the final response by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2333\"\u003evalyala/fasthttp#2333\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject out-of-range Content-Length instead of wrapping it by \u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: zero-copy chunked body writes via io.WriterTo by \u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't close the shutdown done channel twice by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2340\"\u003evalyala/fasthttp#2340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename ChunkedBodyWriterTo to BodyWriterTo and use in more places by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2348\"\u003evalyala/fasthttp#2348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2349\"\u003evalyala/fasthttp#2349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: small read buffer error doesn't match the ignored string anymore by \u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd canonical header lookup by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2361\"\u003evalyala/fasthttp#2361\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2360\"\u003evalyala/fasthttp#2360\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a pooled timer panic and a test data race by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: send / as the path when the request-target is query-only by \u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: try to avoid reallocations while reading zstd compressed requests by \u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add the QUERY method (RFC 10008) by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2358\"\u003evalyala/fasthttp#2358\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for streaming reads before releasing pooled resources by \u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr by \u003ca href=\"https://github.com/gaby\"\u003e\u003ccode\u003e@​gaby\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2366\"\u003evalyala/fasthttp#2366\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAlways stream response bodies when requested by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2373\"\u003evalyala/fasthttp#2373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.28.0 to 2.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2375\"\u003evalyala/fasthttp#2375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: let request timeouts override client timeouts by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2372\"\u003evalyala/fasthttp#2372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid race condition for closing the streaming connection at EOF by \u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGive TestClientHeadWithBody a CI-proof read timeout by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2374\"\u003evalyala/fasthttp#2374\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent stale query string after clearing query args by \u003ca href=\"https://github.com/cuishuang\"\u003e\u003ccode\u003e@​cuishuang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2380\"\u003evalyala/fasthttp#2380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(examples): add zero-allocation server example by \u003ca href=\"https://github.com/aabishkaryal\"\u003e\u003ccode\u003e@​aabishkaryal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2362\"\u003evalyala/fasthttp#2362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2384\"\u003evalyala/fasthttp#2384\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/17ba63c6627f56fd77bd54a6ccd51f2e550fc231\"\u003e\u003ccode\u003e17ba63c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/559991a01a7c5d9f93971def53e9dbe80432a484\"\u003e\u003ccode\u003e559991a\u003c/code\u003e\u003c/a\u003e feat(examples): add zero-allocation server example (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2362\"\u003e#2362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/1900e5343bc0a52887a36c6dddb07619809f75b6\"\u003e\u003ccode\u003e1900e53\u003c/code\u003e\u003c/a\u003e fix: prevent stale query string after clearing query args (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2380\"\u003e#2380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fde5d95922be86c50e4f5622e744757dc20c68d9\"\u003e\u003ccode\u003efde5d95\u003c/code\u003e\u003c/a\u003e give TestClientHeadWithBody a CI-proof read timeout (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2374\"\u003e#2374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/395442ae68e51f99cd00e31f3533817d970c81d9\"\u003e\u003ccode\u003e395442a\u003c/code\u003e\u003c/a\u003e fix: keep a chunked requestStream at EOF once the body ends (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2379\"\u003e#2379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c19f9cf9334dd3e248bfab005bc1817e2d84ba39\"\u003e\u003ccode\u003ec19f9cf\u003c/code\u003e\u003c/a\u003e fix: let request timeouts override client timeouts (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2372\"\u003e#2372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c96f600972c6f4a7a30d664257b340ebe9d60124\"\u003e\u003ccode\u003ec96f600\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.28.0 to 2.29.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2375\"\u003e#2375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d47d2c91328f8eb14a56dbcca3c5bae1f996c04d\"\u003e\u003ccode\u003ed47d2c9\u003c/code\u003e\u003c/a\u003e Always stream response bodies when requested (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2373\"\u003e#2373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0d9439b8d369f38bd7356c11da4f7dffb8960642\"\u003e\u003ccode\u003e0d9439b\u003c/code\u003e\u003c/a\u003e Replace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fb3b29ece936327cb25142eae6ea447eba3aa257\"\u003e\u003ccode\u003efb3b29e\u003c/code\u003e\u003c/a\u003e fix: wait for streaming reads before releasing pooled resources (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2353\"\u003e#2353\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.73.0\u0026new-version=1.74.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/mymmrac/telego/pull/371","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mymmrac%2Ftelego/issues/371","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/371/packages"},{"uuid":"5420148157","node_id":"PR_kwDONyRwr88AAAABDFymDQ","number":204,"state":"closed","title":"build(deps): bump github.com/valyala/fasthttp from 1.73.0 to 1.74.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-09-15T07:46:58.000Z","author_association":null,"state_reason":null,"created_at":"2026-09-11T03:52:56.000Z","updated_at":"2026-09-15T07:47:00.000Z","time_to_close":359642,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.73.0","new_version":"1.74.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.73.0 to 1.74.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.74.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(fasthttpproxy): select proxies from the request scheme by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2334\"\u003evalyala/fasthttp#2334\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: scale short timeouts with testTimeout to reduce -race flakiness by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2339\"\u003evalyala/fasthttp#2339\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: drop zeroed entries from the perIPConnCounter map by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2337\"\u003evalyala/fasthttp#2337\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip the unusable per-call file cache in ServeFS by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2338\"\u003evalyala/fasthttp#2338\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: return after a failed Dial instead of dereferencing a nil conn by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2341\"\u003evalyala/fasthttp#2341\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't recycle an idle timestamp its connection still owns by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2342\"\u003evalyala/fasthttp#2342\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject Transfer-Encoding on HTTP/1.0 requests by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2330\"\u003evalyala/fasthttp#2330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eonly treat \u0026quot;//\u0026quot; in URI.Update as an authority after a scheme by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2345\"\u003evalyala/fasthttp#2345\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: consume informational responses before the final response by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2333\"\u003evalyala/fasthttp#2333\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject out-of-range Content-Length instead of wrapping it by \u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: zero-copy chunked body writes via io.WriterTo by \u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't close the shutdown done channel twice by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2340\"\u003evalyala/fasthttp#2340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename ChunkedBodyWriterTo to BodyWriterTo and use in more places by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2348\"\u003evalyala/fasthttp#2348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2349\"\u003evalyala/fasthttp#2349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: small read buffer error doesn't match the ignored string anymore by \u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd canonical header lookup by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2361\"\u003evalyala/fasthttp#2361\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2360\"\u003evalyala/fasthttp#2360\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a pooled timer panic and a test data race by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: send / as the path when the request-target is query-only by \u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: try to avoid reallocations while reading zstd compressed requests by \u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add the QUERY method (RFC 10008) by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2358\"\u003evalyala/fasthttp#2358\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for streaming reads before releasing pooled resources by \u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr by \u003ca href=\"https://github.com/gaby\"\u003e\u003ccode\u003e@​gaby\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2366\"\u003evalyala/fasthttp#2366\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAlways stream response bodies when requested by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2373\"\u003evalyala/fasthttp#2373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.28.0 to 2.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2375\"\u003evalyala/fasthttp#2375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: let request timeouts override client timeouts by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2372\"\u003evalyala/fasthttp#2372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid race condition for closing the streaming connection at EOF by \u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGive TestClientHeadWithBody a CI-proof read timeout by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2374\"\u003evalyala/fasthttp#2374\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent stale query string after clearing query args by \u003ca href=\"https://github.com/cuishuang\"\u003e\u003ccode\u003e@​cuishuang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2380\"\u003evalyala/fasthttp#2380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(examples): add zero-allocation server example by \u003ca href=\"https://github.com/aabishkaryal\"\u003e\u003ccode\u003e@​aabishkaryal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2362\"\u003evalyala/fasthttp#2362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2384\"\u003evalyala/fasthttp#2384\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/17ba63c6627f56fd77bd54a6ccd51f2e550fc231\"\u003e\u003ccode\u003e17ba63c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/559991a01a7c5d9f93971def53e9dbe80432a484\"\u003e\u003ccode\u003e559991a\u003c/code\u003e\u003c/a\u003e feat(examples): add zero-allocation server example (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2362\"\u003e#2362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/1900e5343bc0a52887a36c6dddb07619809f75b6\"\u003e\u003ccode\u003e1900e53\u003c/code\u003e\u003c/a\u003e fix: prevent stale query string after clearing query args (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2380\"\u003e#2380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fde5d95922be86c50e4f5622e744757dc20c68d9\"\u003e\u003ccode\u003efde5d95\u003c/code\u003e\u003c/a\u003e give TestClientHeadWithBody a CI-proof read timeout (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2374\"\u003e#2374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/395442ae68e51f99cd00e31f3533817d970c81d9\"\u003e\u003ccode\u003e395442a\u003c/code\u003e\u003c/a\u003e fix: keep a chunked requestStream at EOF once the body ends (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2379\"\u003e#2379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c19f9cf9334dd3e248bfab005bc1817e2d84ba39\"\u003e\u003ccode\u003ec19f9cf\u003c/code\u003e\u003c/a\u003e fix: let request timeouts override client timeouts (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2372\"\u003e#2372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c96f600972c6f4a7a30d664257b340ebe9d60124\"\u003e\u003ccode\u003ec96f600\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.28.0 to 2.29.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2375\"\u003e#2375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d47d2c91328f8eb14a56dbcca3c5bae1f996c04d\"\u003e\u003ccode\u003ed47d2c9\u003c/code\u003e\u003c/a\u003e Always stream response bodies when requested (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2373\"\u003e#2373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0d9439b8d369f38bd7356c11da4f7dffb8960642\"\u003e\u003ccode\u003e0d9439b\u003c/code\u003e\u003c/a\u003e Replace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fb3b29ece936327cb25142eae6ea447eba3aa257\"\u003e\u003ccode\u003efb3b29e\u003c/code\u003e\u003c/a\u003e fix: wait for streaming reads before releasing pooled resources (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2353\"\u003e#2353\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.73.0\u0026new-version=1.74.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Incognito-Coder/tx-ui/pull/204","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Incognito-Coder%2Ftx-ui/issues/204","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/204/packages"},{"uuid":"5360204612","node_id":"PR_kwDOUPimeM8AAAABCWJ9aQ","number":3,"state":"open","title":"Bump github.com/valyala/fasthttp from 1.51.0 to 1.73.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-09-05T18:50:35.000Z","updated_at":"2026-09-05T18:50:35.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.51.0","new_version":"1.73.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.51.0 to 1.73.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix host comparison in FuzzURIParse by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2313\"\u003evalyala/fasthttp#2313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: avoid redundant scans when parsing request headers by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2312\"\u003evalyala/fasthttp#2312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix temp file leak in SaveMultipartFile on cross-device rename failure by \u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ere-enable forcetypeassert by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: normalize Go test names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2317\"\u003evalyala/fasthttp#2317\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: prefix sentinel error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2319\"\u003evalyala/fasthttp#2319\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pprofhandler): use exact path matching to prevent debug data exposure by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2302\"\u003evalyala/fasthttp#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid following a symlink when writing the FS compressed cache by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2321\"\u003evalyala/fasthttp#2321\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: improve internal interface names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2318\"\u003evalyala/fasthttp#2318\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: lowercase error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2320\"\u003evalyala/fasthttp#2320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce redundant scans and allocations in hot paths by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2322\"\u003evalyala/fasthttp#2322\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate domain and path cookie attribute values on parse by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2315\"\u003evalyala/fasthttp#2315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2328\"\u003evalyala/fasthttp#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2329\"\u003evalyala/fasthttp#2329\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve pre-set status code in NewFastHTTPHandler by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2323\"\u003evalyala/fasthttp#2323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2331\"\u003evalyala/fasthttp#2331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject backslash '..' traversal in fs handler on windows by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2327\"\u003evalyala/fasthttp#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject Windows alternate data stream paths in FS by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2307\"\u003evalyala/fasthttp#2307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2308\"\u003evalyala/fasthttp#2308\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2309\"\u003evalyala/fasthttp#2309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2314\"\u003evalyala/fasthttp#2314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2326\"\u003evalyala/fasthttp#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2324\"\u003evalyala/fasthttp#2324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2325\"\u003evalyala/fasthttp#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.72.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to go1.25 as minimal version by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2205\"\u003evalyala/fasthttp#2205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eclient: add aggregate connection count metrics by \u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2201\"\u003evalyala/fasthttp#2201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(server): return ErrMissingFile when MultipartForm.File is nil by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2260\"\u003evalyala/fasthttp#2260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: FS cache cleaner goroutine leaks when CleanStop is nil (default) (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2218\"\u003e#2218\u003c/a\u003e), \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2247\"\u003e#2247\u003c/a\u003e by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2271\"\u003evalyala/fasthttp#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: data race on pipeline client c.chR during worker drain (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2220\"\u003e#2220\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2272\"\u003evalyala/fasthttp#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: TCPDialer.tcpAddrsClean() goroutine leaks — no shutdown mechanism (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2222\"\u003e#2222\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2273\"\u003evalyala/fasthttp#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: double concurrency counter increment in ServeConn causes counter leak (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2238\"\u003e#2238\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2275\"\u003evalyala/fasthttp#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: body stream leak in compression methods when response is discarded (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2244\"\u003e#2244\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2276\"\u003evalyala/fasthttp#2276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: InMemoryListener deadlock under high concurrency (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2245\"\u003e#2245\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2277\"\u003evalyala/fasthttp#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpadaptor writer leak, data race, and crash on handler panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2246\"\u003e#2246\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2278\"\u003evalyala/fasthttp#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpproxy dialers return nil DialFunc on error, causing panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2248\"\u003e#2248\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2279\"\u003evalyala/fasthttp#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: closeIdleConns TOCTOU race with serveConn idle timestamp (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2250\"\u003e#2250\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2280\"\u003evalyala/fasthttp#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: AppendCert/AppendCertEmbed not thread-safe (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2251\"\u003e#2251\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2281\"\u003evalyala/fasthttp#2281\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2\"\u003e\u003ccode\u003ef83ac8c\u003c/code\u003e\u003c/a\u003e Optimize bounds checks in hot paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f\"\u003e\u003ccode\u003ed9babd9\u003c/code\u003e\u003c/a\u003e fix: reject Windows alternate data stream paths in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2335\"\u003e#2335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd\"\u003e\u003ccode\u003ee7cf856\u003c/code\u003e\u003c/a\u003e reject backslash '..' traversal in fs handler on windows (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e\"\u003e\u003ccode\u003e165a4c8\u003c/code\u003e\u003c/a\u003e Improve AppendUnquotedArg with optimised bounds check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1\"\u003e\u003ccode\u003e7a1349d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c\"\u003e\u003ccode\u003ef1ad91d\u003c/code\u003e\u003c/a\u003e fix: preserve pre-set status code in NewFastHTTPHandler (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2323\"\u003e#2323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347\"\u003e\u003ccode\u003e5f57d8f\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6 to 7 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d\"\u003e\u003ccode\u003e3aa940d\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40\"\u003e\u003ccode\u003e7a012e9\u003c/code\u003e\u003c/a\u003e validate domain and path cookie attribute values on parse (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2315\"\u003e#2315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03\"\u003e\u003ccode\u003e9cf733f\u003c/code\u003e\u003c/a\u003e perf: reduce redundant scans and allocations in hot paths (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2322\"\u003e#2322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.51.0...v1.73.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.51.0\u0026new-version=1.73.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/ampfit2-lab/ampfit2-lab--gofiber--fiber/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ampfit2-lab%2Fampfit2-lab--gofiber--fiber/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"},{"uuid":"5356008023","node_id":"PR_kwDOUMn2CM8AAAABCS9fUQ","number":3,"state":"closed","title":"deps: bump the go-minor-and-patch group across 1 directory with 13 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-09-05T07:36:30.000Z","author_association":null,"state_reason":null,"created_at":"2026-09-05T05:59:36.000Z","updated_at":"2026-09-05T07:36:37.000Z","time_to_close":5814,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps: bump","group_name":"go-minor-and-patch","update_count":13,"packages":[{"name":"github.com/gofiber/fiber/v2","old_version":"2.52.12","new_version":"2.52.15","repository_url":"https://github.com/gofiber/fiber"},{"name":"github.com/prometheus/client_golang","old_version":"1.20.5","new_version":"1.24.1","repository_url":"https://github.com/prometheus/client_golang"},{"name":"github.com/valyala/fasthttp","old_version":"1.51.0","new_version":"1.73.0","repository_url":"https://github.com/valyala/fasthttp"},{"name":"github.com/mattn/go-colorable","old_version":"0.1.13","new_version":"0.1.15","repository_url":"https://github.com/mattn/go-colorable"},{"name":"github.com/mattn/go-isatty","old_version":"0.0.20","new_version":"0.0.24","repository_url":"https://github.com/mattn/go-isatty"},{"name":"github.com/mattn/go-runewidth","old_version":"0.0.16","new_version":"0.0.29","repository_url":"https://github.com/mattn/go-runewidth"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-and-patch group with 6 updates in the /gateway directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/gofiber/fiber/v2](https://github.com/gofiber/fiber) | `2.52.12` | `2.52.15` |\n| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.5` | `1.24.1` |\n| [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) | `1.51.0` | `1.73.0` |\n| [github.com/mattn/go-colorable](https://github.com/mattn/go-colorable) | `0.1.13` | `0.1.15` |\n| [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty) | `0.0.20` | `0.0.24` |\n| [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.16` | `0.0.29` |\n\n\nUpdates `github.com/gofiber/fiber/v2` from 2.52.12 to 2.52.15\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gofiber/fiber/releases\"\u003egithub.com/gofiber/fiber/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.52.15\u003c/h2\u003e\n\u003ch1\u003e🐛 Bug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eidempotency: release MemoryLock keys on unlock \u003ca href=\"https://redirect.github.com/gofiber/fiber/issues/4569\"\u003e#4569\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/gofiber/fiber/compare/v2.52.14...v2.52.15\"\u003ehttps://github.com/gofiber/fiber/compare/v2.52.14...v2.52.15\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.52.14\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebackport BalancerForward X-Real-IP overwrite fix to v2 by \u003ca href=\"https://github.com/terraincognita07\"\u003e\u003ccode\u003e@​terraincognita07\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/gofiber/fiber/pull/4495\"\u003egofiber/fiber#4495\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/terraincognita07\"\u003e\u003ccode\u003e@​terraincognita07\u003c/code\u003e\u003c/a\u003e made their first contribution\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/gofiber/fiber/compare/v2.52.13...v2.52.14\"\u003ehttps://github.com/gofiber/fiber/compare/v2.52.13...v2.52.14\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.52.13\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEscape HTML output in Ctx.Format by \u003ca href=\"https://github.com/gaby\"\u003e\u003ccode\u003e@​gaby\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/gofiber/fiber/pull/4232\"\u003egofiber/fiber#4232\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/gofiber/fiber/compare/v2.52.12...v2.52.13\"\u003ehttps://github.com/gofiber/fiber/compare/v2.52.12...v2.52.13\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/5c7a80b327c130e93041e569e685825f804d5f15\"\u003e\u003ccode\u003e5c7a80b\u003c/code\u003e\u003c/a\u003e Update app.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/a76710f0dbb6d5d8f7beb5dfeec5d24371ec4c4f\"\u003e\u003ccode\u003ea76710f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/gofiber/fiber/issues/4569\"\u003e#4569\u003c/a\u003e from gofiber/fix/v2-idempotency-memorylock-leak\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/4d1617b6930dba14e1458d41662c0dc0cdcc0b87\"\u003e\u003ccode\u003e4d1617b\u003c/code\u003e\u003c/a\u003e fix(idempotency): release MemoryLock keys on unlock (GHSA-c5qf-v26h-rp5r)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/bdc46e73e60b6eca430ea2e2bfe1b417771d52a7\"\u003e\u003ccode\u003ebdc46e7\u003c/code\u003e\u003c/a\u003e ci(v2): remove the benchmark workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/35f9baf392349e6d8bf8dd50f33f25d3326a52b3\"\u003e\u003ccode\u003e35f9baf\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/gofiber/fiber/issues/4504\"\u003e#4504\u003c/a\u003e from gofiber/claude/v2-remove-release-drafter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/b747589d261b50314cbbba602f9c496e455981b7\"\u003e\u003ccode\u003eb747589\u003c/code\u003e\u003c/a\u003e ci: remove release drafter from v2 branch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/a74500f6335abc020023d3581a46ba56a893edc3\"\u003e\u003ccode\u003ea74500f\u003c/code\u003e\u003c/a\u003e Update fiber package version to 2.52.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/33c9501288ab47a429c8b5e701493f0c3c0af37d\"\u003e\u003ccode\u003e33c9501\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/gofiber/fiber/issues/4495\"\u003e#4495\u003c/a\u003e from terraincognita07/backport-v2-balancer-forward-x...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/1b071e1ff0b69028f9b8747e4518dac049b59bab\"\u003e\u003ccode\u003e1b071e1\u003c/code\u003e\u003c/a\u003e Merge branch 'v2' into backport-v2-balancer-forward-x-real-ip\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/67721213ceee19fd2f9717d1cb8b5c5ef7fec97a\"\u003e\u003ccode\u003e6772121\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/gofiber/fiber/issues/4498\"\u003e#4498\u003c/a\u003e from gofiber/fix/v2-parser-decoder-global-leak\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/gofiber/fiber/compare/v2.52.12...v2.52.15\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/prometheus/client_golang` from 1.20.5 to 1.24.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prometheus/client_golang/releases\"\u003egithub.com/prometheus/client_golang's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.24.1 / 2026-07-23\u003c/h2\u003e\n\u003cp\u003eSmall bugfix release for promhttp.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003e[BUGFIX] promhttp: Fix panic on requests with nil URL. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2065\"\u003e#2065\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/prometheus/client_golang/compare/v1.24.0...v1.24.1\"\u003ehttps://github.com/prometheus/client_golang/compare/v1.24.0...v1.24.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.24.0 - 2026-07-20\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1862\"\u003e#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated \u003ccode\u003emodel.NameValidationScheme\u003c/code\u003e global. Default behavior is unchanged; code that set \u003ccode\u003eNameValidationScheme = LegacyValidation\u003c/code\u003e no longer gets legacy enforcement at metric, label, and push-grouping construction. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2051\"\u003e#2051\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] api/prometheus/v1: Support matchers (\u003ccode\u003ematches[]\u003c/code\u003e parameter) in \u003ccode\u003eRules\u003c/code\u003e method (\u003ccode\u003eRules(ctx context.Context, matches []string) (RulesResult, error)\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1843\"\u003e#1843\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] api/prometheus/v1: Refactor \u003ccode\u003eLabelNames\u003c/code\u003e method to return \u003ccode\u003emodel.LabelNames\u003c/code\u003e instead of \u003ccode\u003e[]string\u003c/code\u003e for consistency across the API. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1850\"\u003e#1850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] exp/api/remote: Simplify \u003ccode\u003eStore\u003c/code\u003e interface, rename \u003ccode\u003eHandler\u003c/code\u003e to \u003ccode\u003eWriteHandler\u003c/code\u003e, and encapsulate write response handling. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1855\"\u003e#1855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] prometheus: Add new Go 1.26 runtime metrics (\u003ccode\u003e/sched/goroutines-created:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/not-in-go:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/runnable:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/running:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/waiting:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/threads/total:threads\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1942\"\u003e#1942\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] prometheus: Add \u003ccode\u003eWithUnit(unit string)\u003c/code\u003e option and explicit OpenMetrics unit support in \u003ccode\u003eCounterOpts\u003c/code\u003e, \u003ccode\u003eGaugeOpts\u003c/code\u003e, \u003ccode\u003eSummaryOpts\u003c/code\u003e, and \u003ccode\u003eHistogramOpts\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1392\"\u003e#1392\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] prometheus: Expose descriptor construction error through public \u003ccode\u003eErr()\u003c/code\u003e method on \u003ccode\u003eDesc\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1902\"\u003e#1902\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] promhttp: Add opt-in \u003ccode\u003eHandlerOpts.CoalesceGather\u003c/code\u003e to deduplicate concurrent \u003ccode\u003eGather\u003c/code\u003e calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1969\"\u003e#1969\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] promhttp: HTTP handlers created by \u003ccode\u003epromhttp\u003c/code\u003e package now support metrics filtering by providing one or more \u003ccode\u003ename[]\u003c/code\u003e query parameters. The default behavior when none are provided remains the same, returning all metrics. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1925\"\u003e#1925\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] api/prometheus/v1: Add query formatting endpoint support (\u003ccode\u003e/format_query\u003c/code\u003e) and \u003ccode\u003eFormatQuery(ctx context.Context, query string) (string, error)\u003c/code\u003e method. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1846\"\u003e#1846\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1856\"\u003e#1856\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] api/prometheus/v1: Add support for \u003ccode\u003e/status/tsdb/blocks\u003c/code\u003e endpoint via \u003ccode\u003eTSDBBlocks(ctx context.Context) ([]TSDBBlock, error)\u003c/code\u003e method. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1896\"\u003e#1896\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] exp/api/remote: Export \u003ccode\u003eBackoffConfig\u003c/code\u003e to allow customization when using \u003ccode\u003eWithAPIBackoff\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1895\"\u003e#1895\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] exp/api/remote: Add \u003ccode\u003eRetryCallBack\u003c/code\u003e to allow custom logging or handling on retry attempts in the remote write client. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1888\"\u003e#1888\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1890\"\u003e#1890\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1860\"\u003e#1860\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] api: Use cloned \u003ccode\u003ehttp.DefaultTransport\u003c/code\u003e when constructing default HTTP clients to prevent accidental mutations of shared global transport state. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1885\"\u003e#1885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] prometheus: Recover from collector panics during \u003ccode\u003eGather()\u003c/code\u003e and return an error instead of crashing the process. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1961\"\u003e#1961\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] prometheus: Fix \u003ccode\u003ecpu-seconds\u003c/code\u003e unit suffix handling for metric \u003ccode\u003ego_cpu_classes_gc_mark_assist_cpu_seconds\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1991\"\u003e#1991\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] promhttp: \u003ccode\u003eInstrumentHandlerDuration\u003c/code\u003e and \u003ccode\u003eInstrumentHandlerCounter\u003c/code\u003e no longer panic when given an observer/counter that does not implement \u003ccode\u003eExemplarObserver\u003c/code\u003e/\u003ccode\u003eExemplarAdder\u003c/code\u003e (e.g. a \u003ccode\u003eSummaryVec\u003c/code\u003e). The exemplar is dropped and the value is recorded via the plain \u003ccode\u003eObserve\u003c/code\u003e/\u003ccode\u003eAdd\u003c/code\u003e path, matching the safe-cast already used by \u003ccode\u003eTimer.ObserveDurationWithExemplar\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2005\"\u003e#2005\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] api/prometheus/v1: Fall back to \u003ccode\u003eGET\u003c/code\u003e requests when \u003ccode\u003ePOST\u003c/code\u003e requests return \u003ccode\u003e403 Forbidden\u003c/code\u003e or method not allowed. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2030\"\u003e#2030\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] api: Respect context cancellation inside \u003ccode\u003ehttpClient.Do\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1971\"\u003e#1971\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1889\"\u003e#1889\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1917\"\u003e#1917\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1927\"\u003e#1927\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/prometheus/procfs from 0.16.1 to 0.17.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1839\"\u003eprometheus/client_golang#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1838\"\u003eprometheus/client_golang#1838\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprometheus/collectors: use godoc link for runtime/metrics supported metrics by \u003ca href=\"https://github.com/xieyuschen\"\u003e\u003ccode\u003e@​xieyuschen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1844\"\u003eprometheus/client_golang#1844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix doc typo by \u003ca href=\"https://github.com/torrca\"\u003e\u003ccode\u003e@​torrca\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1849\"\u003eprometheus/client_golang#1849\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMerge release-1.23 into main by \u003ca href=\"https://github.com/vesari\"\u003e\u003ccode\u003e@​vesari\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1851\"\u003eprometheus/client_golang#1851\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 in the github-actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1852\"\u003eprometheus/client_golang#1852\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactor LabelNames to return model.LabelNames type for consistency by \u003ca href=\"https://github.com/yshngg\"\u003e\u003ccode\u003e@​yshngg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1850\"\u003eprometheus/client_golang#1850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: simplified Store interface; renamed Handler to WriteHandler by \u003ca href=\"https://github.com/bwplotka\"\u003e\u003ccode\u003e@​bwplotka\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1855\"\u003eprometheus/client_golang#1855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(api/prometheus): add format_query endpoint for query formatting by \u003ca href=\"https://github.com/yshngg\"\u003e\u003ccode\u003e@​yshngg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1846\"\u003eprometheus/client_golang#1846\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(api): add FormatQuery method to Prometheus v1 API by \u003ca href=\"https://github.com/yshngg\"\u003e\u003ccode\u003e@​yshngg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1856\"\u003eprometheus/client_golang#1856\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md\"\u003egithub.com/prometheus/client_golang's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.24.1 / 2026-07-23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[BUGFIX] promhttp: Fix panic on requests with nil URL. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2065\"\u003e#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.24.0 / 2026-07-20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1862\"\u003e#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated \u003ccode\u003emodel.NameValidationScheme\u003c/code\u003e global. Default behavior is unchanged; code that set \u003ccode\u003eNameValidationScheme = LegacyValidation\u003c/code\u003e no longer gets legacy enforcement at metric, label, and push-grouping construction. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2051\"\u003e#2051\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] api/prometheus/v1: Support matchers (\u003ccode\u003ematches[]\u003c/code\u003e parameter) in \u003ccode\u003eRules\u003c/code\u003e method (\u003ccode\u003eRules(ctx context.Context, matches []string) (RulesResult, error)\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1843\"\u003e#1843\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] api/prometheus/v1: Refactor \u003ccode\u003eLabelNames\u003c/code\u003e method to return \u003ccode\u003emodel.LabelNames\u003c/code\u003e instead of \u003ccode\u003e[]string\u003c/code\u003e for consistency across the API. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1850\"\u003e#1850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] exp/api/remote: Simplify \u003ccode\u003eStore\u003c/code\u003e interface, rename \u003ccode\u003eHandler\u003c/code\u003e to \u003ccode\u003eWriteHandler\u003c/code\u003e, and encapsulate write response handling. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1855\"\u003e#1855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] prometheus: Add new Go 1.26 runtime metrics (\u003ccode\u003e/sched/goroutines-created:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/not-in-go:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/runnable:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/running:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/waiting:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/threads/total:threads\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1942\"\u003e#1942\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] prometheus: Add \u003ccode\u003eWithUnit(unit string)\u003c/code\u003e option and explicit OpenMetrics unit support in \u003ccode\u003eCounterOpts\u003c/code\u003e, \u003ccode\u003eGaugeOpts\u003c/code\u003e, \u003ccode\u003eSummaryOpts\u003c/code\u003e, and \u003ccode\u003eHistogramOpts\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1392\"\u003e#1392\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] prometheus: Expose descriptor construction error through public \u003ccode\u003eErr()\u003c/code\u003e method on \u003ccode\u003eDesc\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1902\"\u003e#1902\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] promhttp: Add opt-in \u003ccode\u003eHandlerOpts.CoalesceGather\u003c/code\u003e to deduplicate concurrent \u003ccode\u003eGather\u003c/code\u003e calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1969\"\u003e#1969\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] promhttp: HTTP handlers created by \u003ccode\u003epromhttp\u003c/code\u003e package now support metrics filtering by providing one or more \u003ccode\u003ename[]\u003c/code\u003e query parameters. The default behavior when none are provided remains the same, returning all metrics. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1925\"\u003e#1925\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] api/prometheus/v1: Add query formatting endpoint support (\u003ccode\u003e/format_query\u003c/code\u003e) and \u003ccode\u003eFormatQuery(ctx context.Context, query string) (string, error)\u003c/code\u003e method. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1846\"\u003e#1846\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1856\"\u003e#1856\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] api/prometheus/v1: Add support for \u003ccode\u003e/status/tsdb/blocks\u003c/code\u003e endpoint via \u003ccode\u003eTSDBBlocks(ctx context.Context) ([]TSDBBlock, error)\u003c/code\u003e method. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1896\"\u003e#1896\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] exp/api/remote: Export \u003ccode\u003eBackoffConfig\u003c/code\u003e to allow customization when using \u003ccode\u003eWithAPIBackoff\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1895\"\u003e#1895\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] exp/api/remote: Add \u003ccode\u003eRetryCallBack\u003c/code\u003e to allow custom logging or handling on retry attempts in the remote write client. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1888\"\u003e#1888\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1890\"\u003e#1890\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1860\"\u003e#1860\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] api: Use cloned \u003ccode\u003ehttp.DefaultTransport\u003c/code\u003e when constructing default HTTP clients to prevent accidental mutations of shared global transport state. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1885\"\u003e#1885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] prometheus: Recover from collector panics during \u003ccode\u003eGather()\u003c/code\u003e and return an error instead of crashing the process. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1961\"\u003e#1961\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] prometheus: Fix \u003ccode\u003ecpu-seconds\u003c/code\u003e unit suffix handling for metric \u003ccode\u003ego_cpu_classes_gc_mark_assist_cpu_seconds\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1991\"\u003e#1991\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] promhttp: \u003ccode\u003eInstrumentHandlerDuration\u003c/code\u003e and \u003ccode\u003eInstrumentHandlerCounter\u003c/code\u003e no longer panic when given an observer/counter that does not implement \u003ccode\u003eExemplarObserver\u003c/code\u003e/\u003ccode\u003eExemplarAdder\u003c/code\u003e (e.g. a \u003ccode\u003eSummaryVec\u003c/code\u003e). The exemplar is dropped and the value is recorded via the plain \u003ccode\u003eObserve\u003c/code\u003e/\u003ccode\u003eAdd\u003c/code\u003e path, matching the safe-cast already used by \u003ccode\u003eTimer.ObserveDurationWithExemplar\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2005\"\u003e#2005\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] api/prometheus/v1: Fall back to \u003ccode\u003eGET\u003c/code\u003e requests when \u003ccode\u003ePOST\u003c/code\u003e requests return \u003ccode\u003e403 Forbidden\u003c/code\u003e or method not allowed. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2030\"\u003e#2030\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] api: Respect context cancellation inside \u003ccode\u003ehttpClient.Do\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1971\"\u003e#1971\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1889\"\u003e#1889\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1917\"\u003e#1917\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1927\"\u003e#1927\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.23.2 / 2025-09-05\u003c/h2\u003e\n\u003cp\u003eThis release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).\nThere are no functional changes.\u003c/p\u003e\n\u003ch2\u003e1.23.1 / 2025-09-04\u003c/h2\u003e\n\u003cp\u003eThis release is made to be compatible with a backwards incompatible API change\nin prometheus/common v0.66.0. There are no functional changes.\u003c/p\u003e\n\u003ch2\u003e1.23.0 / 2025-07-30\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1812\"\u003e#1812\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1766\"\u003e#1766\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] Add exemplars for native histograms \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1686\"\u003e#1686\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] exp/api: Bubble up status code from writeResponse \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1823\"\u003e#1823\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1833\"\u003e#1833\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api: client prompt return on context cancellation \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1729\"\u003e#1729\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/d6087ee482e06716ee21dc03819432d5d40f72db\"\u003e\u003ccode\u003ed6087ee\u003c/code\u003e\u003c/a\u003e release: cut v1.24.1 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2076\"\u003e#2076\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/48dd383f94cc36bb0179724166383effd9f64847\"\u003e\u003ccode\u003e48dd383\u003c/code\u003e\u003c/a\u003e Cut v1.24.0 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2061\"\u003e#2061\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/a7253054383fd6702034c16194117d37727cd5fc\"\u003e\u003ccode\u003ea725305\u003c/code\u003e\u003c/a\u003e Cut v1.24.0-rc.0 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2058\"\u003e#2058\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/77c584f2501bf3726bb39b83a89b70c0e6f9ab0c\"\u003e\u003ccode\u003e77c584f\u003c/code\u003e\u003c/a\u003e build(deps): update all Go dependencies in all go.mod files (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2059\"\u003e#2059\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/78262a77b89922f94a19ecd25eaeb849fb58f2cc\"\u003e\u003ccode\u003e78262a7\u003c/code\u003e\u003c/a\u003e feat(promhttp): add CoalesceGather option to deduplicate concurrent Gather ca...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/34e9a7fe186a7a3ff47694f127d44d5641ff388f\"\u003e\u003ccode\u003e34e9a7f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2055\"\u003e#2055\u003c/a\u003e from prombot/repo_sync\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/43749bc83131a4af24527351aabb47dc58590c85\"\u003e\u003ccode\u003e43749bc\u003c/code\u003e\u003c/a\u003e Update common Prometheus files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/de192175ccd6f6d4894cd9ceb804712c982e4958\"\u003e\u003ccode\u003ede19217\u003c/code\u003e\u003c/a\u003e examples: improve simple main.go example (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1999\"\u003e#1999\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/20355eb4487c108a6ed54d9ebc6893bd649c10d0\"\u003e\u003ccode\u003e20355eb\u003c/code\u003e\u003c/a\u003e fix: correct typos in comments and test error messages (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2049\"\u003e#2049\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/4cd2d3a57eccc893f00e23eb765f62e970e61f33\"\u003e\u003ccode\u003e4cd2d3a\u003c/code\u003e\u003c/a\u003e test: fix two flaky tests (darwin start_time regex, memstats HeapReleased dri...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/prometheus/client_golang/compare/v1.20.5...v1.24.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/prometheus/client_model` from 0.6.1 to 0.6.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prometheus/client_model/releases\"\u003egithub.com/prometheus/client_model's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/89\"\u003eprometheus/client_model#89\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.33.0 to 1.34.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/88\"\u003eprometheus/client_model#88\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/90\"\u003eprometheus/client_model#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.34.0 to 1.34.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/91\"\u003eprometheus/client_model#91\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/92\"\u003eprometheus/client_model#92\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/93\"\u003eprometheus/client_model#93\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.34.1 to 1.34.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/94\"\u003eprometheus/client_model#94\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/95\"\u003eprometheus/client_model#95\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/96\"\u003eprometheus/client_model#96\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/97\"\u003eprometheus/client_model#97\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/98\"\u003eprometheus/client_model#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/99\"\u003eprometheus/client_model#99\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/100\"\u003eprometheus/client_model#100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/101\"\u003eprometheus/client_model#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/103\"\u003eprometheus/client_model#103\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate google.golang.org/protobuf to v1.35.1 by \u003ca href=\"https://github.com/beorn7\"\u003e\u003ccode\u003e@​beorn7\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/104\"\u003eprometheus/client_model#104\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/105\"\u003eprometheus/client_model#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/106\"\u003eprometheus/client_model#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.35.1 to 1.35.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/107\"\u003eprometheus/client_model#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/108\"\u003eprometheus/client_model#108\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.35.2 to 1.36.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/109\"\u003eprometheus/client_model#109\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/110\"\u003eprometheus/client_model#110\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.36.1 to 1.36.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/111\"\u003eprometheus/client_model#111\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/112\"\u003eprometheus/client_model#112\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.36.4 to 1.36.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/113\"\u003eprometheus/client_model#113\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/114\"\u003eprometheus/client_model#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/115\"\u003eprometheus/client_model#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/116\"\u003eprometheus/client_model#116\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.36.5 to 1.36.6 by \u003ca href=\"https://github.com/SuperQ\"\u003e\u003ccode\u003e@​SuperQ\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/119\"\u003eprometheus/client_model#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/prometheus/client_model/compare/v0.6.1...v0.6.2\"\u003ehttps://github.com/prometheus/client_model/compare/v0.6.1...v0.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/eb136e513d419e0c31ad750922f0a6f7675c2dee\"\u003e\u003ccode\u003eeb136e5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/prometheus/client_model/issues/119\"\u003e#119\u003c/a\u003e from prometheus/superq/google.golang.org/protobuf\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/bf7f2ca4b601c87da3e4bf28e64c5386511a0bfc\"\u003e\u003ccode\u003ebf7f2ca\u003c/code\u003e\u003c/a\u003e Update golanci-lint to v2.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/7e9b56c6a570a6dca83ff2d2c425b6dafd7e7338\"\u003e\u003ccode\u003e7e9b56c\u003c/code\u003e\u003c/a\u003e Bump google.golang.org/protobuf from 1.36.5 to 1.36.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/ef699ce1c4dd0fe87d4ed44d5457cea731ad92b0\"\u003e\u003ccode\u003eef699ce\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/prometheus/client_model/issues/116\"\u003e#116\u003c/a\u003e from prometheus/repo_sync\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/bf8b12ebfaf1a573f88c60e0d8bbda7d2225ad94\"\u003e\u003ccode\u003ebf8b12e\u003c/code\u003e\u003c/a\u003e Update common Prometheus files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/5b939685734c5009fb5cdbb2572cf650ec0f0147\"\u003e\u003ccode\u003e5b93968\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/prometheus/client_model/issues/115\"\u003e#115\u003c/a\u003e from prometheus/repo_sync\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/ae83ddc062246f4acd9341798ad68f9488c7540c\"\u003e\u003ccode\u003eae83ddc\u003c/code\u003e\u003c/a\u003e Update common Prometheus files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/afe0b21197864688348dfd1cfd3010afd1ebb485\"\u003e\u003ccode\u003eafe0b21\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/prometheus/client_model/issues/114\"\u003e#114\u003c/a\u003e from prometheus/repo_sync\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/75e1daffce92961f7ccf81f69d368aaa984ea411\"\u003e\u003ccode\u003e75e1daf\u003c/code\u003e\u003c/a\u003e Update common Prometheus files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/73608e20e866edadc15d12cf3cdb441721dd475c\"\u003e\u003ccode\u003e73608e2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/prometheus/client_model/issues/113\"\u003e#113\u003c/a\u003e from prometheus/dependabot/go_modules/google.golang.o...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/prometheus/client_model/compare/v0.6.1...v0.6.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/valyala/fasthttp` from 1.51.0 to 1.73.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix host comparison in FuzzURIParse by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2313\"\u003evalyala/fasthttp#2313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: avoid redundant scans when parsing request headers by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2312\"\u003evalyala/fasthttp#2312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix temp file leak in SaveMultipartFile on cross-device rename failure by \u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ere-enable forcetypeassert by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: normalize Go test names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2317\"\u003evalyala/fasthttp#2317\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: prefix sentinel error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2319\"\u003evalyala/fasthttp#2319\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pprofhandler): use exact path matching to prevent debug data exposure by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2302\"\u003evalyala/fasthttp#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid following a symlink when writing the FS compressed cache by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2321\"\u003evalyala/fasthttp#2321\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: improve internal interface names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2318\"\u003evalyala/fasthttp#2318\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: lowercase error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2320\"\u003evalyala/fasthttp#2320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce redundant scans and allocations in hot paths by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2322\"\u003evalyala/fasthttp#2322\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate domain and path cookie attribute values on parse by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2315\"\u003evalyala/fasthttp#2315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2328\"\u003evalyala/fasthttp#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2329\"\u003evalyala/fasthttp#2329\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve pre-set status code in NewFastHTTPHandler by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2323\"\u003evalyala/fasthttp#2323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2331\"\u003evalyala/fasthttp#2331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject backslash '..' traversal in fs handler on windows by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2327\"\u003evalyala/fasthttp#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject Windows alternate data stream paths in FS by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2307\"\u003evalyala/fasthttp#2307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2308\"\u003evalyala/fasthttp#2308\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2309\"\u003evalyala/fasthttp#2309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2314\"\u003evalyala/fasthttp#2314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2326\"\u003evalyala/fasthttp#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2324\"\u003evalyala/fasthttp#2324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2325\"\u003evalyala/fasthttp#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.72.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to go1.25 as minimal version by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2205\"\u003evalyala/fasthttp#2205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eclient: add aggregate connection count metrics by \u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2201\"\u003evalyala/fasthttp#2201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(server): return ErrMissingFile when MultipartForm.File is nil by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2260\"\u003evalyala/fasthttp#2260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: FS cache cleaner goroutine leaks when CleanStop is nil (default) (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2218\"\u003e#2218\u003c/a\u003e), \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2247\"\u003e#2247\u003c/a\u003e by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2271\"\u003evalyala/fasthttp#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: data race on pipeline client c.chR during worker drain (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2220\"\u003e#2220\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2272\"\u003evalyala/fasthttp#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: TCPDialer.tcpAddrsClean() goroutine leaks — no shutdown mechanism (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2222\"\u003e#2222\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2273\"\u003evalyala/fasthttp#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: double concurrency counter increment in ServeConn causes counter leak (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2238\"\u003e#2238\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2275\"\u003evalyala/fasthttp#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: body stream leak in compression methods when response is discarded (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2244\"\u003e#2244\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2276\"\u003evalyala/fasthttp#2276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: InMemoryListener deadlock under high concurrency (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2245\"\u003e#2245\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2277\"\u003evalyala/fasthttp#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpadaptor writer leak, data race, and crash on handler panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2246\"\u003e#2246\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2278\"\u003evalyala/fasthttp#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpproxy dialers return nil DialFunc on error, causing panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2248\"\u003e#2248\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2279\"\u003evalyala/fasthttp#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: closeIdleConns TOCTOU race with serveConn idle timestamp (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2250\"\u003e#2250\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2280\"\u003evalyala/fasthttp#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: AppendCert/AppendCertEmbed not thread-safe (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2251\"\u003e#2251\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2281\"\u003evalyala/fasthttp#2281\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2\"\u003e\u003ccode\u003ef83ac8c\u003c/code\u003e\u003c/a\u003e Optimize bounds checks in hot paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f\"\u003e\u003ccode\u003ed9babd9\u003c/code\u003e\u003c/a\u003e fix: reject Windows alternate data stream paths in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2335\"\u003e#2335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd\"\u003e\u003ccode\u003ee7cf856\u003c/code\u003e\u003c/a\u003e reject backslash '..' traversal in fs handler on windows (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e\"\u003e\u003ccode\u003e165a4c8\u003c/code\u003e\u003c/a\u003e Improve AppendUnquotedArg with optimised bounds check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1\"\u003e\u003ccode\u003e7a1349d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c\"\u003e\u003ccode\u003ef1ad91d\u003c/code\u003e\u003c/a\u003e fix: preserve pre-set status code in NewFastHTTPHandler (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2323\"\u003e#2323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347\"\u003e\u003ccode\u003e5f57d8f\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6 to 7 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d\"\u003e\u003ccode\u003e3aa940d\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40\"\u003e\u003ccode\u003e7a012e9\u003c/code\u003e\u003c/a\u003e validate domain and path cookie attribute values on parse (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2315\"\u003e#2315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03\"\u003e\u003ccode\u003e9cf733f\u003c/code\u003e\u003c/a\u003e perf: reduce redundant scans and allocations in hot paths (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2322\"\u003e#2322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.51.0...v1.73.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/andybalholm/brotli` from 1.1.0 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/785aba538b2118979d2c573eccb287c4da157faf\"\u003e\u003ccode\u003e785aba5\u003c/code\u003e\u003c/a\u003e reuse hgroups\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/b797a3535cbdd227ce3520cb0dfe01d83c2eeda9\"\u003e\u003ccode\u003eb797a35\u003c/code\u003e\u003c/a\u003e reuse block_type_trees\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/0675b242cf45dcdd51ed6fb600876b570bea329b\"\u003e\u003ccode\u003e0675b24\u003c/code\u003e\u003c/a\u003e Remove unnecessary nil checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/946c3e4071198a86d6c037ffcd138968dd4fc68e\"\u003e\u003ccode\u003e946c3e4\u003c/code\u003e\u003c/a\u003e matchfinder: verify candidate matches against source data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/014fb9c9e8f7e87e7996309844260b1f8d890528\"\u003e\u003ccode\u003e014fb9c\u003c/code\u003e\u003c/a\u003e Add Bargain3 MatchFinder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/deb905c53b5bcb9fa2d20ccb66890fa941c883cf\"\u003e\u003ccode\u003edeb905c\u003c/code\u003e\u003c/a\u003e Trio: vary hash table sizes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/b84bddd64ee4c9ca21b98009bc212e14fd7b5bd4\"\u003e\u003ccode\u003eb84bddd\u003c/code\u003e\u003c/a\u003e M4: fix updating chain for long history\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/a7ad41202f4421be4299ea5c911b41396c6170bf\"\u003e\u003ccode\u003ea7ad412\u003c/code\u003e\u003c/a\u003e Bargain1 \u0026amp; Bargain2: check for matches less often\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/6c6ca8c2a86a6448ef2b7986e6c8ecf5e8a9e29c\"\u003e\u003ccode\u003e6c6ca8c\u003c/code\u003e\u003c/a\u003e Add Bargain1 MatchFinder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/01c485509d026342053502adc6c3b692dcbf2003\"\u003e\u003ccode\u003e01c4855\u003c/code\u003e\u003c/a\u003e Add Bargain2 MatchFinder\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/andybalholm/brotli/compare/v1.1.0...v1.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/klauspost/compress` from 1.17.9 to 1.19.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/klauspost/compress/releases\"\u003egithub.com/klauspost/compress's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.19.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ezstd: Validate SnappyConverter literal copies by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1170\"\u003eklauspost/compress#1170\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eflate: use \u003ccode\u003ePeek\u003c/code\u003e instead of \u003ccode\u003eReadByte\u003c/code\u003e for the \u003ccode\u003ebufio.Reader\u003c/code\u003e decode path by \u003ca href=\"https://github.com/joechenrh\"\u003e\u003ccode\u003e@​joechenrh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1169\"\u003eklauspost/compress#1169\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ezstd: bump avo pin, regenerate arm64 asm by \u003ca href=\"https://github.com/lizthegrey\"\u003e\u003ccode\u003e@​lizthegrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1167\"\u003eklauspost/compress#1167\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/joechenrh\"\u003e\u003ccode\u003e@​joechenrh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1169\"\u003eklauspost/compress#1169\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/klauspost/compress/compare/v1.19.0...v1.19.1\"\u003ehttps://github.com/klauspost/compress/compare/v1.19.0...v1.19.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ezstd: Add true concurrent stream encoding by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1136\"\u003eklauspost/compress#1136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ezstd: arm64 decoder asm by \u003ca href=\"https://github.com/lizthegrey\"\u003e\u003ccode\u003e@​lizthegrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1160\"\u003eklauspost/compress#1160\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ezstd: avoid unused BuildDict encoder allocation by \u003ca href=\"https://github.com/snissn\"\u003e\u003ccode\u003e@​snissn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1147\"\u003eklauspost/compress#1147\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eflate: Add inflate checkpoints by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1154\"\u003eklauspost/compress#1154\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esnappy/s2: Limit length of varint in \u003ccode\u003edecodedLen\u003c/code\u003e by \u003ca href=\"https://github.com/eustas\"\u003e\u003ccode\u003e@​eustas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1148\"\u003eklauspost/compress#1148\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egzhttp: match qvalue parameter case-insensitively (RFC 7231) by \u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1149\"\u003eklauspost/compress#1149\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ezip: add NameDecoder callback for legacy encoding rewrite by \u003ca href=\"https://github.com/SAY-5\"\u003e\u003ccode\u003e@​SAY-5\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1150\"\u003eklauspost/compress#1150\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ehuff0: Allow building tables from histogram. by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1155\"\u003eklauspost/compress#1155\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ehuff0: Allow building table from oversized histogram. by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1156\"\u003eklauspost/compress#1156\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003es2sx: Clean symlink targets by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1163\"\u003eklauspost/compress#1163\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/snissn\"\u003e\u003ccode\u003e@​snissn\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1147\"\u003eklauspost/compress#1147\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eustas\"\u003e\u003ccode\u003e@​eustas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1148\"\u003eklauspost/compress#1148\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1149\"\u003eklauspost/compress#1149\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SAY-5\"\u003e\u003ccode\u003e@​SAY-5\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1150\"\u003eklauspost/compress#1150\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/HNO3Miracle\"\u003e\u003ccode\u003e@​HNO3Miracle\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1165\"\u003eklauspost/compress#1165\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/klauspost/compress/compare/v1.18.6...v1.19.0\"\u003ehttps://github.com/klauspost/compress/compare/v1.18.6...v1.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.18.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix s2.NewDict OOB read.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSecurity release without other changes.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/klauspost/compress/compare/v1.18.6...v1.18.7\"\u003ehttps://github.com/klauspost/compress/compare/v1.18.6...v1.18.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.18.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003es2: Fix amd64 stack frame corruption by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1145\"\u003eklauspost/compress#1145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egzhttp: Canonicalize ETag header by \u003ca href=\"https://github.com/justinmayhew\"\u003e\u003ccode\u003e@​justinmayhew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1139\"\u003eklauspost/compress#1139\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: pool hash tables in Go encode paths to reduce allocations by \u003ca href=\"https://github.com/huynhanx03\"\u003e\u003ccode\u003e@​huynhanx03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1143\"\u003eklauspost/compress#1143\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/justinmayhew\"\u003e\u003ccode\u003e@​justinmayhew\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1139\"\u003eklauspost/compress#1139\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/huynhanx03\"\u003e\u003ccode\u003e@​huynhanx03\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1143\"\u003eklauspost/compress#1143\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1144\"\u003eklauspost/compress#1144\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/2602f4afea09fe72f2b58d4ed04d43a6047a0131\"\u003e\u003ccode\u003e2602f4a\u003c/code\u003e\u003c/a\u003e Update changelog for version 1.19.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/983acec6dacb98c0d721ca53eb5a904c3c6bec67\"\u003e\u003ccode\u003e983acec\u003c/code\u003e\u003c/a\u003e add defensive checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/9960386c58450bc4ae5fd67411c394b6a7f23c4c\"\u003e\u003ccode\u003e9960386\u003c/code\u003e\u003c/a\u003e zstd: Validate SnappyConverter literal copies (\u003ca href=\"https://redirect.github.com/klauspost/compress/issues/1170\"\u003e#1170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/e29d4d389f0e7806e1e84392d0c43453a5048a0f\"\u003e\u003ccode\u003ee29d4d3\u003c/code\u003e\u003c/a\u003e flate: use \u003ccode\u003ePeek\u003c/code\u003e instead of \u003ccode\u003eReadByte\u003c/code\u003e for the \u003ccode\u003ebufio.Reader\u003c/code\u003e decode path (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/c0bbc84762b7d178fe7b1e3a75140793179e9e37\"\u003e\u003ccode\u003ec0bbc84\u003c/code\u003e\u003c/a\u003e zstd: bump avo pin, regenerate arm64 asm (\u003ca href=\"https://redirect.github.com/klauspost/compress/issues/1167\"\u003e#1167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/efdb6ed96c4b5d23f9bd6c3e739414789c871a9d\"\u003e\u003ccode\u003eefdb6ed\u003c/code\u003e\u003c/a\u003e build(deps): bump the github-actions group with 6 updates (\u003ca href=\"https://redirect.github.com/klauspost/compress/issues/1166\"\u003e#1166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/f0953f938f77977980c3b9f8c09eec06f2e88a69\"\u003e\u003ccode\u003ef0953f9\u003c/code\u003e\u003c/a\u003e flate: fix buffer formatting in tests (\u003ca href=\"https://redirect.github.com/klauspost/compress/issues/1165\"\u003e#1165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/ab2e3cc7ab261c8f287639760d8532afb7125425\"\u003e\u003ccode\u003eab2e3cc\u003c/code\u003e\u003c/a\u003e zstd: Add arm64 decoder asm (\u003ca href=\"https://redirect.github.com/klauspost/compress/issues/1160\"\u003e#1160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/bb2723d55de85353fd5a1817cbc382997a6a75aa\"\u003e\u003ccode\u003ebb2723d\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536\"\u003e\u003ccode\u003e539243b\u003c/code\u003e\u003c/a\u003e s2sx: Clean symlink targets (\u003ca href=\"https://redirect.github.com/klauspost/compress/issues/1163\"\u003e#1163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/klauspost/compress/compare/v1.17.9...v1.19.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/mattn/go-colorable` from 0.1.13 to 0.1.15\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/8bf39a204f13f0cfcf86ab9b297c3d6e0668e54a\"\u003e\u003ccode\u003e8bf39a2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mattn/go-colorable/issues/78\"\u003e#78\u003c/a\u003e from mattn/windows-write-fastpath\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/d7a88e01afba9f8b52844aa5a9cf3572de1dd526\"\u003e\u003ccode\u003ed7a88e0\u003c/code\u003e\u003c/a\u003e Bump checkout to v4 and setup-go to v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/4dd1c6d9cadd77ffcc9f7b6198b11ac276a69fd9\"\u003e\u003ccode\u003e4dd1c6d\u003c/code\u003e\u003c/a\u003e Update CI matrix to Go 1.24-1.26\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/09158f853728212e5a01cb8d455777c8d3862e01\"\u003e\u003ccode\u003e09158f8\u003c/code\u003e\u003c/a\u003e Fast path for plaintext writes and cache text attribute on Windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/171d5b40f7bf2f0b9e320924b52fd68926b10d1d\"\u003e\u003ccode\u003e171d5b4\u003c/code\u003e\u003c/a\u003e Add Windows writer benchmarks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/74f8ed12817631baea5d0912bca21e09eee04d9d\"\u003e\u003ccode\u003e74f8ed1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mattn/go-colorable/issues/72\"\u003e#72\u003c/a\u003e from alexandear/fix-test-typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/1f71342c1ee78c126bcb69cd26ed8c2be7e016b3\"\u003e\u003ccode\u003e1f71342\u003c/code\u003e\u003c/a\u003e update deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/4503567acadfc8967131e7708f241b77589eb28b\"\u003e\u003ccode\u003e4503567\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mattn/go-colorable/issues/73\"\u003e#73\u003c/a\u003e from whereswaldon/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/40e70a5010a4844b4c1030a31cebdd52b2e96589\"\u003e\u003ccode\u003e40e70a5\u003c/code\u003e\u003c/a\u003e [Windows] harden system DLL loading\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/50c5b535976d400c961beb3e147096209f5be59a\"\u003e\u003ccode\u003e50c5b53\u003c/code\u003e\u003c/a\u003e Fix typo in TestNonColorableNil\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mattn/go-colorable/compare/v0.1.13...v0.1.15\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/mattn/go-isatty` from 0.0.20 to 0.0.24\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/c44dc0b9c702c76577fdb7898032969e0611efc2\"\u003e\u003ccode\u003ec44dc0b\u003c/code\u003e\u003c/a\u003e Use TIOCGWINSZ instead of TCGETS to detect terminals (\u003ca href=\"https://redirect.github.com/mattn/go-isatty/issues/97\"\u003e#97\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/4bc9b75fc8738b40f30b420ad17c00e8a151c3bf\"\u003e\u003ccode\u003e4bc9b75\u003c/code\u003e\u003c/a\u003e Lower go directive to 1.20 for Windows 7 users (\u003ca href=\"https://redirect.github.com/mattn/go-isatty/issues/94\"\u003e#94\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/4e061da6e858a19c96c6e88818c69c88d7d8b07e\"\u003e\u003ccode\u003e4e061da\u003c/code\u003e\u003c/a\u003e add stub for haiku os (\u003ca href=\"https://redirect.github.com/mattn/go-isatty/issues/93\"\u003e#93\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/9a68506e239465d922dc18c0cd331c49b411fdb2\"\u003e\u003ccode\u003e9a68506\u003c/code\u003e\u003c/a\u003e Fix isCygwinPipeName to accept Windows 7 trailing suffix (\u003ca href=\"https://redirect.github.com/mattn/go-isatty/issues/90\"\u003e#90\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/4237fb15069af3284b50e5d91bcdd5403e584605\"\u003e\u003ccode\u003e4237fb1\u003c/code\u003e\u003c/a\u003e Update Go test matrix to current versions (1.24-1.26)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/433c12b4c9fae46e4a42ac50d6d716325dc1dfba\"\u003e\u003ccode\u003e433c12b\u003c/code\u003e\u003c/a\u003e Update GitHub Actions to latest versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/1cf5589a67b03170478da248b107c10185ec558c\"\u003e\u003ccode\u003e1cf5589\u003c/code\u003e\u003c/a\u003e Add wasip1 and wasip2 to build constraints in isatty_others.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/1237245029e6b02f17caa944c946c6f51d384e8b\"\u003e\u003ccode\u003e1237245\u003c/code\u003e\u003c/a\u003e Update dependencies: go 1.15 -\u0026gt; 1.21, golang.org/x/sys v0.6.0 -\u0026gt; v0.28.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/ac9c88d7970a4a6690f8560b6ff20b595beb4e34\"\u003e\u003ccode\u003eac9c88d\u003c/code\u003e\u003c/a\u003e Fix typo in comment: undocomented -\u0026gt; undocumented\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/8b7124ee585ccf9c0b3b3246b7c6a27bce54ab6f\"\u003e\u003ccode\u003e8b7124e\u003c/code\u003e\u003c/a\u003e Add availability check for NtQueryObject in init\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mattn/go-isatty/compare/v0.0.20...v0.0.24\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/mattn/go-runewidth` from...\n\n_Description has been truncated_","html_url":"https://github.com/Life-Experimentalist/CogniGate/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Life-Experimentalist%2FCogniGate/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"},{"uuid":"5234063067","node_id":"PR_kwDOTBc-gc8AAAABAychfA","number":87,"state":"closed","title":"chore: Bump github.com/valyala/fasthttp from 1.71.0 to 1.73.0","user":"dependabot[bot]","labels":["dependencies","go","stale"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-09-05T01:58:54.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-24T11:12:28.000Z","updated_at":"2026-09-05T01:59:04.000Z","time_to_close":1003586,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore: Bump","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.71.0","new_version":"1.73.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.71.0 to 1.73.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix host comparison in FuzzURIParse by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2313\"\u003evalyala/fasthttp#2313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: avoid redundant scans when parsing request headers by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2312\"\u003evalyala/fasthttp#2312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix temp file leak in SaveMultipartFile on cross-device rename failure by \u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ere-enable forcetypeassert by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: normalize Go test names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2317\"\u003evalyala/fasthttp#2317\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: prefix sentinel error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2319\"\u003evalyala/fasthttp#2319\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pprofhandler): use exact path matching to prevent debug data exposure by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2302\"\u003evalyala/fasthttp#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid following a symlink when writing the FS compressed cache by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2321\"\u003evalyala/fasthttp#2321\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: improve internal interface names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2318\"\u003evalyala/fasthttp#2318\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: lowercase error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2320\"\u003evalyala/fasthttp#2320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce redundant scans and allocations in hot paths by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2322\"\u003evalyala/fasthttp#2322\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate domain and path cookie attribute values on parse by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2315\"\u003evalyala/fasthttp#2315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2328\"\u003evalyala/fasthttp#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2329\"\u003evalyala/fasthttp#2329\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve pre-set status code in NewFastHTTPHandler by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2323\"\u003evalyala/fasthttp#2323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2331\"\u003evalyala/fasthttp#2331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject backslash '..' traversal in fs handler on windows by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2327\"\u003evalyala/fasthttp#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject Windows alternate data stream paths in FS by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2307\"\u003evalyala/fasthttp#2307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2308\"\u003evalyala/fasthttp#2308\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2309\"\u003evalyala/fasthttp#2309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2314\"\u003evalyala/fasthttp#2314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2326\"\u003evalyala/fasthttp#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2324\"\u003evalyala/fasthttp#2324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2325\"\u003evalyala/fasthttp#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.72.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to go1.25 as minimal version by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2205\"\u003evalyala/fasthttp#2205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eclient: add aggregate connection count metrics by \u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2201\"\u003evalyala/fasthttp#2201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(server): return ErrMissingFile when MultipartForm.File is nil by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2260\"\u003evalyala/fasthttp#2260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: FS cache cleaner goroutine leaks when CleanStop is nil (default) (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2218\"\u003e#2218\u003c/a\u003e), \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2247\"\u003e#2247\u003c/a\u003e by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2271\"\u003evalyala/fasthttp#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: data race on pipeline client c.chR during worker drain (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2220\"\u003e#2220\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2272\"\u003evalyala/fasthttp#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: TCPDialer.tcpAddrsClean() goroutine leaks — no shutdown mechanism (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2222\"\u003e#2222\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2273\"\u003evalyala/fasthttp#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: double concurrency counter increment in ServeConn causes counter leak (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2238\"\u003e#2238\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2275\"\u003evalyala/fasthttp#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: body stream leak in compression methods when response is discarded (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2244\"\u003e#2244\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2276\"\u003evalyala/fasthttp#2276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: InMemoryListener deadlock under high concurrency (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2245\"\u003e#2245\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2277\"\u003evalyala/fasthttp#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpadaptor writer leak, data race, and crash on handler panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2246\"\u003e#2246\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2278\"\u003evalyala/fasthttp#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpproxy dialers return nil DialFunc on error, causing panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2248\"\u003e#2248\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2279\"\u003evalyala/fasthttp#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: closeIdleConns TOCTOU race with serveConn idle timestamp (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2250\"\u003e#2250\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2280\"\u003evalyala/fasthttp#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: AppendCert/AppendCertEmbed not thread-safe (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2251\"\u003e#2251\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2281\"\u003evalyala/fasthttp#2281\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2\"\u003e\u003ccode\u003ef83ac8c\u003c/code\u003e\u003c/a\u003e Optimize bounds checks in hot paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f\"\u003e\u003ccode\u003ed9babd9\u003c/code\u003e\u003c/a\u003e fix: reject Windows alternate data stream paths in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2335\"\u003e#2335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd\"\u003e\u003ccode\u003ee7cf856\u003c/code\u003e\u003c/a\u003e reject backslash '..' traversal in fs handler on windows (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e\"\u003e\u003ccode\u003e165a4c8\u003c/code\u003e\u003c/a\u003e Improve AppendUnquotedArg with optimised bounds check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1\"\u003e\u003ccode\u003e7a1349d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c\"\u003e\u003ccode\u003ef1ad91d\u003c/code\u003e\u003c/a\u003e fix: preserve pre-set status code in NewFastHTTPHandler (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2323\"\u003e#2323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347\"\u003e\u003ccode\u003e5f57d8f\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6 to 7 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d\"\u003e\u003ccode\u003e3aa940d\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40\"\u003e\u003ccode\u003e7a012e9\u003c/code\u003e\u003c/a\u003e validate domain and path cookie attribute values on parse (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2315\"\u003e#2315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03\"\u003e\u003ccode\u003e9cf733f\u003c/code\u003e\u003c/a\u003e perf: reduce redundant scans and allocations in hot paths (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2322\"\u003e#2322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.71.0...v1.73.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.71.0\u0026new-version=1.73.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/swami086/coder/pull/87","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/swami086%2Fcoder/issues/87","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/87/packages"},{"uuid":"5127821573","node_id":"PR_kwDOT1-9Vc795SB6","number":3,"state":"open","title":"build(deps): bump github.com/valyala/fasthttp from 1.69.0 to 1.73.0 in the fasthttp-modules group","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-08-12T06:15:40.000Z","updated_at":"2026-08-12T06:15:41.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.69.0","new_version":"1.73.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":"the fasthttp-modules group","ecosystem":"go"},"body":"Bumps the fasthttp-modules group with 1 update: [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp).\n\nUpdates `github.com/valyala/fasthttp` from 1.69.0 to 1.73.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix host comparison in FuzzURIParse by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2313\"\u003evalyala/fasthttp#2313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: avoid redundant scans when parsing request headers by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2312\"\u003evalyala/fasthttp#2312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix temp file leak in SaveMultipartFile on cross-device rename failure by \u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ere-enable forcetypeassert by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: normalize Go test names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2317\"\u003evalyala/fasthttp#2317\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: prefix sentinel error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2319\"\u003evalyala/fasthttp#2319\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pprofhandler): use exact path matching to prevent debug data exposure by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2302\"\u003evalyala/fasthttp#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid following a symlink when writing the FS compressed cache by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2321\"\u003evalyala/fasthttp#2321\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: improve internal interface names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2318\"\u003evalyala/fasthttp#2318\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: lowercase error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2320\"\u003evalyala/fasthttp#2320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce redundant scans and allocations in hot paths by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2322\"\u003evalyala/fasthttp#2322\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate domain and path cookie attribute values on parse by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2315\"\u003evalyala/fasthttp#2315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2328\"\u003evalyala/fasthttp#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2329\"\u003evalyala/fasthttp#2329\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve pre-set status code in NewFastHTTPHandler by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2323\"\u003evalyala/fasthttp#2323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2331\"\u003evalyala/fasthttp#2331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject backslash '..' traversal in fs handler on windows by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2327\"\u003evalyala/fasthttp#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject Windows alternate data stream paths in FS by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2307\"\u003evalyala/fasthttp#2307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2308\"\u003evalyala/fasthttp#2308\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2309\"\u003evalyala/fasthttp#2309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2314\"\u003evalyala/fasthttp#2314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2326\"\u003evalyala/fasthttp#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2324\"\u003evalyala/fasthttp#2324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2325\"\u003evalyala/fasthttp#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.72.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to go1.25 as minimal version by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2205\"\u003evalyala/fasthttp#2205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eclient: add aggregate connection count metrics by \u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2201\"\u003evalyala/fasthttp#2201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(server): return ErrMissingFile when MultipartForm.File is nil by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2260\"\u003evalyala/fasthttp#2260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: FS cache cleaner goroutine leaks when CleanStop is nil (default) (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2218\"\u003e#2218\u003c/a\u003e), \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2247\"\u003e#2247\u003c/a\u003e by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2271\"\u003evalyala/fasthttp#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: data race on pipeline client c.chR during worker drain (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2220\"\u003e#2220\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2272\"\u003evalyala/fasthttp#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: TCPDialer.tcpAddrsClean() goroutine leaks — no shutdown mechanism (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2222\"\u003e#2222\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2273\"\u003evalyala/fasthttp#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: double concurrency counter increment in ServeConn causes counter leak (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2238\"\u003e#2238\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2275\"\u003evalyala/fasthttp#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: body stream leak in compression methods when response is discarded (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2244\"\u003e#2244\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2276\"\u003evalyala/fasthttp#2276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: InMemoryListener deadlock under high concurrency (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2245\"\u003e#2245\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2277\"\u003evalyala/fasthttp#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpadaptor writer leak, data race, and crash on handler panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2246\"\u003e#2246\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2278\"\u003evalyala/fasthttp#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpproxy dialers return nil DialFunc on error, causing panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2248\"\u003e#2248\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2279\"\u003evalyala/fasthttp#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: closeIdleConns TOCTOU race with serveConn idle timestamp (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2250\"\u003e#2250\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2280\"\u003evalyala/fasthttp#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: AppendCert/AppendCertEmbed not thread-safe (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2251\"\u003e#2251\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2281\"\u003evalyala/fasthttp#2281\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2\"\u003e\u003ccode\u003ef83ac8c\u003c/code\u003e\u003c/a\u003e Optimize bounds checks in hot paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f\"\u003e\u003ccode\u003ed9babd9\u003c/code\u003e\u003c/a\u003e fix: reject Windows alternate data stream paths in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2335\"\u003e#2335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd\"\u003e\u003ccode\u003ee7cf856\u003c/code\u003e\u003c/a\u003e reject backslash '..' traversal in fs handler on windows (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e\"\u003e\u003ccode\u003e165a4c8\u003c/code\u003e\u003c/a\u003e Improve AppendUnquotedArg with optimised bounds check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1\"\u003e\u003ccode\u003e7a1349d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c\"\u003e\u003ccode\u003ef1ad91d\u003c/code\u003e\u003c/a\u003e fix: preserve pre-set status code in NewFastHTTPHandler (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2323\"\u003e#2323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347\"\u003e\u003ccode\u003e5f57d8f\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6 to 7 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d\"\u003e\u003ccode\u003e3aa940d\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40\"\u003e\u003ccode\u003e7a012e9\u003c/code\u003e\u003c/a\u003e validate domain and path cookie attribute values on parse (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2315\"\u003e#2315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03\"\u003e\u003ccode\u003e9cf733f\u003c/code\u003e\u003c/a\u003e perf: reduce redundant scans and allocations in hot paths (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2322\"\u003e#2322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.69.0...v1.73.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.69.0\u0026new-version=1.73.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/s1044025646-collab/go-bugfix-fiber-001/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/s1044025646-collab%2Fgo-bugfix-fiber-001/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"},{"uuid":"5049118416","node_id":"PR_kwDOIPpCRM759wkp","number":847,"state":"closed","title":"chore: bump github.com/valyala/fasthttp from 1.63.0 to 1.73.0","user":"dependabot[bot]","labels":["stale","dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-08-14T02:23:42.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-03T11:09:08.000Z","updated_at":"2026-08-14T02:23:52.000Z","time_to_close":918874,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.63.0","new_version":"1.73.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.63.0 to 1.73.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix host comparison in FuzzURIParse by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2313\"\u003evalyala/fasthttp#2313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: avoid redundant scans when parsing request headers by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2312\"\u003evalyala/fasthttp#2312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix temp file leak in SaveMultipartFile on cross-device rename failure by \u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ere-enable forcetypeassert by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: normalize Go test names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2317\"\u003evalyala/fasthttp#2317\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: prefix sentinel error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2319\"\u003evalyala/fasthttp#2319\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pprofhandler): use exact path matching to prevent debug data exposure by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2302\"\u003evalyala/fasthttp#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid following a symlink when writing the FS compressed cache by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2321\"\u003evalyala/fasthttp#2321\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: improve internal interface names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2318\"\u003evalyala/fasthttp#2318\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: lowercase error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2320\"\u003evalyala/fasthttp#2320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce redundant scans and allocations in hot paths by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2322\"\u003evalyala/fasthttp#2322\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate domain and path cookie attribute values on parse by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2315\"\u003evalyala/fasthttp#2315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2328\"\u003evalyala/fasthttp#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2329\"\u003evalyala/fasthttp#2329\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve pre-set status code in NewFastHTTPHandler by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2323\"\u003evalyala/fasthttp#2323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2331\"\u003evalyala/fasthttp#2331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject backslash '..' traversal in fs handler on windows by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2327\"\u003evalyala/fasthttp#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject Windows alternate data stream paths in FS by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2307\"\u003evalyala/fasthttp#2307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2308\"\u003evalyala/fasthttp#2308\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2309\"\u003evalyala/fasthttp#2309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2314\"\u003evalyala/fasthttp#2314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2326\"\u003evalyala/fasthttp#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2324\"\u003evalyala/fasthttp#2324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2325\"\u003evalyala/fasthttp#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.72.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to go1.25 as minimal version by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2205\"\u003evalyala/fasthttp#2205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eclient: add aggregate connection count metrics by \u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2201\"\u003evalyala/fasthttp#2201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(server): return ErrMissingFile when MultipartForm.File is nil by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2260\"\u003evalyala/fasthttp#2260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: FS cache cleaner goroutine leaks when CleanStop is nil (default) (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2218\"\u003e#2218\u003c/a\u003e), \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2247\"\u003e#2247\u003c/a\u003e by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2271\"\u003evalyala/fasthttp#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: data race on pipeline client c.chR during worker drain (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2220\"\u003e#2220\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2272\"\u003evalyala/fasthttp#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: TCPDialer.tcpAddrsClean() goroutine leaks — no shutdown mechanism (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2222\"\u003e#2222\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2273\"\u003evalyala/fasthttp#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: double concurrency counter increment in ServeConn causes counter leak (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2238\"\u003e#2238\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2275\"\u003evalyala/fasthttp#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: body stream leak in compression methods when response is discarded (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2244\"\u003e#2244\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2276\"\u003evalyala/fasthttp#2276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: InMemoryListener deadlock under high concurrency (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2245\"\u003e#2245\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2277\"\u003evalyala/fasthttp#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpadaptor writer leak, data race, and crash on handler panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2246\"\u003e#2246\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2278\"\u003evalyala/fasthttp#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpproxy dialers return nil DialFunc on error, causing panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2248\"\u003e#2248\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2279\"\u003evalyala/fasthttp#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: closeIdleConns TOCTOU race with serveConn idle timestamp (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2250\"\u003e#2250\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2280\"\u003evalyala/fasthttp#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: AppendCert/AppendCertEmbed not thread-safe (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2251\"\u003e#2251\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2281\"\u003evalyala/fasthttp#2281\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2\"\u003e\u003ccode\u003ef83ac8c\u003c/code\u003e\u003c/a\u003e Optimize bounds checks in hot paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f\"\u003e\u003ccode\u003ed9babd9\u003c/code\u003e\u003c/a\u003e fix: reject Windows alternate data stream paths in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2335\"\u003e#2335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd\"\u003e\u003ccode\u003ee7cf856\u003c/code\u003e\u003c/a\u003e reject backslash '..' traversal in fs handler on windows (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e\"\u003e\u003ccode\u003e165a4c8\u003c/code\u003e\u003c/a\u003e Improve AppendUnquotedArg with optimised bounds check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1\"\u003e\u003ccode\u003e7a1349d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c\"\u003e\u003ccode\u003ef1ad91d\u003c/code\u003e\u003c/a\u003e fix: preserve pre-set status code in NewFastHTTPHandler (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2323\"\u003e#2323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347\"\u003e\u003ccode\u003e5f57d8f\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6 to 7 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d\"\u003e\u003ccode\u003e3aa940d\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40\"\u003e\u003ccode\u003e7a012e9\u003c/code\u003e\u003c/a\u003e validate domain and path cookie attribute values on parse (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2315\"\u003e#2315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03\"\u003e\u003ccode\u003e9cf733f\u003c/code\u003e\u003c/a\u003e perf: reduce redundant scans and allocations in hot paths (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2322\"\u003e#2322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.63.0...v1.73.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.63.0\u0026new-version=1.73.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/officialmofabs/codeserver/pull/847","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/officialmofabs%2Fcodeserver/issues/847","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/847/packages"},{"uuid":"5000024723","node_id":"PR_kwDOQZ5VeM73g5x-","number":138,"state":"open","title":"chore(deps): bump the gomod-all group with 2 updates","user":"dependabot[bot]","labels":["automerge","chore","dependencies","dependabot","gomod","size/S","prod-dependency","minor-update"],"assignees":["mrz1836"],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-28T15:03:55.000Z","updated_at":"2026-07-28T15:04:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"gomod-all","update_count":2,"packages":[{"name":"github.com/bsv-blockchain/go-sdk","old_version":"1.3.1","new_version":"1.3.2","repository_url":"https://github.com/bsv-blockchain/go-sdk"},{"name":"github.com/valyala/fasthttp","old_version":"1.72.0","new_version":"1.73.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps the gomod-all group with 2 updates: [github.com/bsv-blockchain/go-sdk](https://github.com/bsv-blockchain/go-sdk) and [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp).\n\nUpdates `github.com/bsv-blockchain/go-sdk` from 1.3.1 to 1.3.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bsv-blockchain/go-sdk/releases\"\u003egithub.com/bsv-blockchain/go-sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v1.3.2\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e6963ca59c4756f867279af3ad5512ae4ebbd1ba0 fix(auth): make concurrent requests on one AuthFetch/session safe (\u003ca href=\"https://redirect.github.com/bsv-blockchain/go-sdk/issues/338\"\u003e#338\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea581e407ca7de41c2eb5b18e2961c69925479cec sync(ci): update actions/checkout to v7.0.1 in 20 workflows (\u003ca href=\"https://redirect.github.com/bsv-blockchain/go-sdk/issues/337\"\u003e#337\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bsv-blockchain/go-sdk/commit/6963ca59c4756f867279af3ad5512ae4ebbd1ba0\"\u003e\u003ccode\u003e6963ca5\u003c/code\u003e\u003c/a\u003e fix(auth): make concurrent requests on one AuthFetch/session safe (\u003ca href=\"https://redirect.github.com/bsv-blockchain/go-sdk/issues/338\"\u003e#338\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bsv-blockchain/go-sdk/commit/a581e407ca7de41c2eb5b18e2961c69925479cec\"\u003e\u003ccode\u003ea581e40\u003c/code\u003e\u003c/a\u003e sync(ci): update actions/checkout to v7.0.1 in 20 workflows (\u003ca href=\"https://redirect.github.com/bsv-blockchain/go-sdk/issues/337\"\u003e#337\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/bsv-blockchain/go-sdk/compare/v1.3.1...v1.3.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/valyala/fasthttp` from 1.72.0 to 1.73.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix host comparison in FuzzURIParse by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2313\"\u003evalyala/fasthttp#2313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: avoid redundant scans when parsing request headers by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2312\"\u003evalyala/fasthttp#2312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix temp file leak in SaveMultipartFile on cross-device rename failure by \u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ere-enable forcetypeassert by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: normalize Go test names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2317\"\u003evalyala/fasthttp#2317\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: prefix sentinel error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2319\"\u003evalyala/fasthttp#2319\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pprofhandler): use exact path matching to prevent debug data exposure by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2302\"\u003evalyala/fasthttp#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid following a symlink when writing the FS compressed cache by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2321\"\u003evalyala/fasthttp#2321\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: improve internal interface names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2318\"\u003evalyala/fasthttp#2318\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: lowercase error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2320\"\u003evalyala/fasthttp#2320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce redundant scans and allocations in hot paths by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2322\"\u003evalyala/fasthttp#2322\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate domain and path cookie attribute values on parse by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2315\"\u003evalyala/fasthttp#2315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2328\"\u003evalyala/fasthttp#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2329\"\u003evalyala/fasthttp#2329\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve pre-set status code in NewFastHTTPHandler by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2323\"\u003evalyala/fasthttp#2323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2331\"\u003evalyala/fasthttp#2331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject backslash '..' traversal in fs handler on windows by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2327\"\u003evalyala/fasthttp#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject Windows alternate data stream paths in FS by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2307\"\u003evalyala/fasthttp#2307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2308\"\u003evalyala/fasthttp#2308\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2309\"\u003evalyala/fasthttp#2309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2314\"\u003evalyala/fasthttp#2314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2326\"\u003evalyala/fasthttp#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2324\"\u003evalyala/fasthttp#2324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2325\"\u003evalyala/fasthttp#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2\"\u003e\u003ccode\u003ef83ac8c\u003c/code\u003e\u003c/a\u003e Optimize bounds checks in hot paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f\"\u003e\u003ccode\u003ed9babd9\u003c/code\u003e\u003c/a\u003e fix: reject Windows alternate data stream paths in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2335\"\u003e#2335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd\"\u003e\u003ccode\u003ee7cf856\u003c/code\u003e\u003c/a\u003e reject backslash '..' traversal in fs handler on windows (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e\"\u003e\u003ccode\u003e165a4c8\u003c/code\u003e\u003c/a\u003e Improve AppendUnquotedArg with optimised bounds check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1\"\u003e\u003ccode\u003e7a1349d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c\"\u003e\u003ccode\u003ef1ad91d\u003c/code\u003e\u003c/a\u003e fix: preserve pre-set status code in NewFastHTTPHandler (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2323\"\u003e#2323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347\"\u003e\u003ccode\u003e5f57d8f\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6 to 7 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d\"\u003e\u003ccode\u003e3aa940d\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40\"\u003e\u003ccode\u003e7a012e9\u003c/code\u003e\u003c/a\u003e validate domain and path cookie attribute values on parse (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2315\"\u003e#2315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03\"\u003e\u003ccode\u003e9cf733f\u003c/code\u003e\u003c/a\u003e perf: reduce redundant scans and allocations in hot paths (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2322\"\u003e#2322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/bsv-blockchain/go-chaintracks/pull/138","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/bsv-blockchain%2Fgo-chaintracks/issues/138","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/138/packages"},{"uuid":"4994762599","node_id":"PR_kwDOJ6JaVc73P0BF","number":156,"state":"closed","title":"chore(deps): bump github.com/valyala/fasthttp from 1.72.0 to 1.73.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-09-11T04:04:15.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-28T04:03:59.000Z","updated_at":"2026-09-11T04:04:17.000Z","time_to_close":3888016,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.72.0","new_version":"1.73.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.72.0 to 1.73.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix host comparison in FuzzURIParse by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2313\"\u003evalyala/fasthttp#2313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: avoid redundant scans when parsing request headers by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2312\"\u003evalyala/fasthttp#2312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix temp file leak in SaveMultipartFile on cross-device rename failure by \u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ere-enable forcetypeassert by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: normalize Go test names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2317\"\u003evalyala/fasthttp#2317\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: prefix sentinel error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2319\"\u003evalyala/fasthttp#2319\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pprofhandler): use exact path matching to prevent debug data exposure by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2302\"\u003evalyala/fasthttp#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid following a symlink when writing the FS compressed cache by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2321\"\u003evalyala/fasthttp#2321\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: improve internal interface names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2318\"\u003evalyala/fasthttp#2318\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: lowercase error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2320\"\u003evalyala/fasthttp#2320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce redundant scans and allocations in hot paths by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2322\"\u003evalyala/fasthttp#2322\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate domain and path cookie attribute values on parse by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2315\"\u003evalyala/fasthttp#2315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2328\"\u003evalyala/fasthttp#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2329\"\u003evalyala/fasthttp#2329\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve pre-set status code in NewFastHTTPHandler by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2323\"\u003evalyala/fasthttp#2323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2331\"\u003evalyala/fasthttp#2331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject backslash '..' traversal in fs handler on windows by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2327\"\u003evalyala/fasthttp#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject Windows alternate data stream paths in FS by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2307\"\u003evalyala/fasthttp#2307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2308\"\u003evalyala/fasthttp#2308\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2309\"\u003evalyala/fasthttp#2309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2314\"\u003evalyala/fasthttp#2314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2326\"\u003evalyala/fasthttp#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2324\"\u003evalyala/fasthttp#2324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2325\"\u003evalyala/fasthttp#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2\"\u003e\u003ccode\u003ef83ac8c\u003c/code\u003e\u003c/a\u003e Optimize bounds checks in hot paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f\"\u003e\u003ccode\u003ed9babd9\u003c/code\u003e\u003c/a\u003e fix: reject Windows alternate data stream paths in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2335\"\u003e#2335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd\"\u003e\u003ccode\u003ee7cf856\u003c/code\u003e\u003c/a\u003e reject backslash '..' traversal in fs handler on windows (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e\"\u003e\u003ccode\u003e165a4c8\u003c/code\u003e\u003c/a\u003e Improve AppendUnquotedArg with optimised bounds check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1\"\u003e\u003ccode\u003e7a1349d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c\"\u003e\u003ccode\u003ef1ad91d\u003c/code\u003e\u003c/a\u003e fix: preserve pre-set status code in NewFastHTTPHandler (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2323\"\u003e#2323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347\"\u003e\u003ccode\u003e5f57d8f\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6 to 7 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d\"\u003e\u003ccode\u003e3aa940d\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40\"\u003e\u003ccode\u003e7a012e9\u003c/code\u003e\u003c/a\u003e validate domain and path cookie attribute values on parse (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2315\"\u003e#2315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03\"\u003e\u003ccode\u003e9cf733f\u003c/code\u003e\u003c/a\u003e perf: reduce redundant scans and allocations in hot paths (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2322\"\u003e#2322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.72.0\u0026new-version=1.73.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/katallaxie/fiber-ws-relay/pull/156","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/katallaxie%2Ffiber-ws-relay/issues/156","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/156/packages"},{"uuid":"4813874692","node_id":"PR_kwDOTOcX8s7uFW00","number":5,"state":"open","title":"chore(deps): bump github.com/valyala/fasthttp from 1.71.0 to 1.72.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-05T17:59:32.000Z","updated_at":"2026-07-05T17:59:32.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.71.0","new_version":"1.72.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.71.0 to 1.72.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.72.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to go1.25 as minimal version by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2205\"\u003evalyala/fasthttp#2205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eclient: add aggregate connection count metrics by \u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2201\"\u003evalyala/fasthttp#2201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(server): return ErrMissingFile when MultipartForm.File is nil by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2260\"\u003evalyala/fasthttp#2260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: FS cache cleaner goroutine leaks when CleanStop is nil (default) (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2218\"\u003e#2218\u003c/a\u003e), \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2247\"\u003e#2247\u003c/a\u003e by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2271\"\u003evalyala/fasthttp#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: data race on pipeline client c.chR during worker drain (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2220\"\u003e#2220\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2272\"\u003evalyala/fasthttp#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: TCPDialer.tcpAddrsClean() goroutine leaks — no shutdown mechanism (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2222\"\u003e#2222\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2273\"\u003evalyala/fasthttp#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: double concurrency counter increment in ServeConn causes counter leak (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2238\"\u003e#2238\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2275\"\u003evalyala/fasthttp#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: body stream leak in compression methods when response is discarded (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2244\"\u003e#2244\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2276\"\u003evalyala/fasthttp#2276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: InMemoryListener deadlock under high concurrency (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2245\"\u003e#2245\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2277\"\u003evalyala/fasthttp#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpadaptor writer leak, data race, and crash on handler panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2246\"\u003e#2246\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2278\"\u003evalyala/fasthttp#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpproxy dialers return nil DialFunc on error, causing panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2248\"\u003e#2248\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2279\"\u003evalyala/fasthttp#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: closeIdleConns TOCTOU race with serveConn idle timestamp (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2250\"\u003e#2250\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2280\"\u003evalyala/fasthttp#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: AppendCert/AppendCertEmbed not thread-safe (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2251\"\u003e#2251\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2281\"\u003evalyala/fasthttp#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: SetBodySizePoolLimit data race — plain int written without synchronization (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2252\"\u003e#2252\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2282\"\u003evalyala/fasthttp#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: file descriptor leak in prefork parent process (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2253\"\u003e#2253\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2283\"\u003evalyala/fasthttp#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esecurity: SO_REUSEADDR on Windows enables port hijacking (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2254\"\u003e#2254\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2284\"\u003evalyala/fasthttp#2284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: file descriptor leak on z/OS s390x when FcntlInt fails (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2255\"\u003e#2255\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2285\"\u003evalyala/fasthttp#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: filesLockMap grows unboundedly, leaking memory (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2256\"\u003e#2256\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2286\"\u003evalyala/fasthttp#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esecurity: TLS verification silently disabled for malformed addresses (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2236\"\u003e#2236\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2274\"\u003evalyala/fasthttp#2274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): remove temporary file when compression fails by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2264\"\u003evalyala/fasthttp#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix double release of streamed client response body by \u003ca href=\"https://github.com/Mereng\"\u003e\u003ccode\u003e@​Mereng\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2211\"\u003evalyala/fasthttp#2211\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(client): switch to GET on 303 redirect per RFC 9110 by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2265\"\u003evalyala/fasthttp#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: re-enable gocritic deferInLoop check for non-test code by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2288\"\u003evalyala/fasthttp#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix flaky race tests by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2292\"\u003evalyala/fasthttp#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(lbclient): prevent deadlock when all clients are removed by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2287\"\u003evalyala/fasthttp#2287\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject duplicate Content-Length in response header parser by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2294\"\u003evalyala/fasthttp#2294\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estrip cr/lf from header keys in normalizeHeaderKey by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2295\"\u003evalyala/fasthttp#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(client): guard nil waiter in decConnsCount by \u003ca href=\"https://github.com/SAY-5\"\u003e\u003ccode\u003e@​SAY-5\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2266\"\u003evalyala/fasthttp#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estrip semicolons from cookie setters to block attribute injection by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2298\"\u003evalyala/fasthttp#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(prefork): graceful shutdown, leak fixes, hook robustness (re-open of \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2180\"\u003e#2180\u003c/a\u003e follow-up) by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2199\"\u003evalyala/fasthttp#2199\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent data race on FSCompressedFileSuffixes map by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2300\"\u003evalyala/fasthttp#2300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject duplicate Transfer-Encoding in request header parser by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2303\"\u003evalyala/fasthttp#2303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epreserve duplicate request headers in ConvertRequest by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2305\"\u003evalyala/fasthttp#2305\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(server): close listener on serve error in ListenAndServe helpers by \u003ca href=\"https://github.com/fereidani\"\u003e\u003ccode\u003e@​fereidani\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2304\"\u003evalyala/fasthttp#2304\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate trailer values in parseTrailer by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2301\"\u003evalyala/fasthttp#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid default content type for empty requests by \u003ca href=\"https://github.com/nkgotcode\"\u003e\u003ccode\u003e@​nkgotcode\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2296\"\u003evalyala/fasthttp#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2210\"\u003evalyala/fasthttp#2210\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2209\"\u003evalyala/fasthttp#2209\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2208\"\u003evalyala/fasthttp#2208\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2207\"\u003evalyala/fasthttp#2207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.26.1 to 2.27.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2261\"\u003evalyala/fasthttp#2261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.0 to 2.27.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2267\"\u003evalyala/fasthttp#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2289\"\u003evalyala/fasthttp#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2290\"\u003evalyala/fasthttp#2290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2291\"\u003evalyala/fasthttp#2291\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2297\"\u003evalyala/fasthttp#2297\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/37a31d78c5d221b24b9cb6652481b5acd4dd674f\"\u003e\u003ccode\u003e37a31d7\u003c/code\u003e\u003c/a\u003e Avoid default content type for empty requests (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2296\"\u003e#2296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d93cb94af2c31641d00025140785609ddd746eb3\"\u003e\u003ccode\u003ed93cb94\u003c/code\u003e\u003c/a\u003e validate trailer values in parseTrailer (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9d21d3546ab1d8422b0b5b2801e46aef568619ce\"\u003e\u003ccode\u003e9d21d35\u003c/code\u003e\u003c/a\u003e Remove unused uint322ip, inline ip2uint32\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/eb82c9a13addbe488f69cbf530444bb2561fd083\"\u003e\u003ccode\u003eeb82c9a\u003c/code\u003e\u003c/a\u003e Reject invalid cookie values during parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/598e2e06218dbcaf4da6b3723477effd9d7b6233\"\u003e\u003ccode\u003e598e2e0\u003c/code\u003e\u003c/a\u003e fix(server): close listener on serve error in ListenAndServe helpers (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2304\"\u003e#2304\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/134a8fedab6eb02fda4b8d96c48d2a72082d2e0c\"\u003e\u003ccode\u003e134a8fe\u003c/code\u003e\u003c/a\u003e preserve duplicate request headers in ConvertRequest (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2305\"\u003e#2305\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7bca504536636cf77726f3018365626a8b975b5f\"\u003e\u003ccode\u003e7bca504\u003c/code\u003e\u003c/a\u003e reject duplicate Transfer-Encoding in request header parser (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2303\"\u003e#2303\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9ee3c15997f8ab21519c2728017e9fbff03fe142\"\u003e\u003ccode\u003e9ee3c15\u003c/code\u003e\u003c/a\u003e docs: document FSCompressedFileSuffixes is not safe for concurrent modificati...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/2c1590038fa5d0e04896c8b0aafc138ce286bfa7\"\u003e\u003ccode\u003e2c15900\u003c/code\u003e\u003c/a\u003e feat(prefork): graceful shutdown, leak fixes, hook robustness (re-open of \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/ec58c6e67ee8f608a673cc01f07f045d04fa17b5\"\u003e\u003ccode\u003eec58c6e\u003c/code\u003e\u003c/a\u003e strip semicolons from cookie setters to block attribute injection (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.71.0...v1.72.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.71.0\u0026new-version=1.72.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/zhuyandong/gatus-cn/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/zhuyandong%2Fgatus-cn/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"},{"uuid":"4627031675","node_id":"PR_kwDOOWhOy87kojM1","number":543,"state":"closed","title":"deps(go): bump the go-dependencies group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-24T01:23:47.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-10T01:24:09.000Z","updated_at":"2026-06-24T01:23:49.000Z","time_to_close":1209578,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(go): bump","group_name":"go-dependencies","update_count":8,"packages":[{"name":"github.com/llm-d/llm-d-kv-cache","old_version":"0.7.1","new_version":"0.8.1","repository_url":"https://github.com/llm-d/llm-d-kv-cache"},{"name":"github.com/onsi/ginkgo/v2","old_version":"2.28.3","new_version":"2.31.0","repository_url":"https://github.com/onsi/ginkgo"},{"name":"github.com/onsi/gomega","old_version":"1.40.0","new_version":"1.42.0","repository_url":"https://github.com/onsi/gomega"},{"name":"github.com/openai/openai-go/v3","old_version":"3.33.0","new_version":"3.39.0","repository_url":"https://github.com/openai/openai-go"},{"name":"github.com/valyala/fasthttp","old_version":"1.70.0","new_version":"1.71.0","repository_url":"https://github.com/valyala/fasthttp"},{"name":"golang.org/x/sync","old_version":"0.20.0","new_version":"0.21.0","repository_url":"https://github.com/golang/sync"},{"name":"google.golang.org/grpc","old_version":"1.80.0","new_version":"1.81.1","repository_url":"https://github.com/grpc/grpc-go"},{"name":"modernc.org/sqlite","old_version":"1.50.0","new_version":"1.52.0"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-dependencies group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/llm-d/llm-d-kv-cache](https://github.com/llm-d/llm-d-kv-cache) | `0.7.1` | `0.8.1` |\n| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.28.3` | `2.31.0` |\n| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.40.0` | `1.42.0` |\n| [github.com/openai/openai-go/v3](https://github.com/openai/openai-go) | `3.33.0` | `3.39.0` |\n| [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) | `1.70.0` | `1.71.0` |\n| [golang.org/x/sync](https://github.com/golang/sync) | `0.20.0` | `0.21.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.80.0` | `1.81.1` |\n| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.50.0` | `1.52.0` |\n\n\nUpdates `github.com/llm-d/llm-d-kv-cache` from 0.7.1 to 0.8.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/releases\"\u003egithub.com/llm-d/llm-d-kv-cache's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.8.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/compare/v0.8.0...v0.8.1\"\u003ehttps://github.com/llm-d/llm-d-kv-cache/compare/v0.8.0...v0.8.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.8.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: resolve data race in ZMQ subscriber by removing redundant auto-reconnect by \u003ca href=\"https://github.com/gyliu513\"\u003e\u003ccode\u003e@​gyliu513\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/480\"\u003ellm-d/llm-d-kv-cache#480\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: bump fs-connector to v0.18 with vLLM 0.18.x support by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/486\"\u003ellm-d/llm-d-kv-cache#486\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add size label to prs by \u003ca href=\"https://github.com/sagearc\"\u003e\u003ccode\u003e@​sagearc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/487\"\u003ellm-d/llm-d-kv-cache#487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(ci): Add nightly race detector CI job by \u003ca href=\"https://github.com/gyliu513\"\u003e\u003ccode\u003e@​gyliu513\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/479\"\u003ellm-d/llm-d-kv-cache#479\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update examples to use UDS tokenizer Docker image by \u003ca href=\"https://github.com/sagearc\"\u003e\u003ccode\u003e@​sagearc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/471\"\u003ellm-d/llm-d-kv-cache#471\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Add trivy scan for uds tokenizer by \u003ca href=\"https://github.com/gyliu513\"\u003e\u003ccode\u003e@​gyliu513\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/458\"\u003ellm-d/llm-d-kv-cache#458\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix/mm extra keys bare strings by \u003ca href=\"https://github.com/vMaroon\"\u003e\u003ccode\u003e@​vMaroon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/495\"\u003ellm-d/llm-d-kv-cache#495\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd dockerfile for fsconnector dev on k8s by \u003ca href=\"https://github.com/saikat-royc\"\u003e\u003ccode\u003e@​saikat-royc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/468\"\u003ellm-d/llm-d-kv-cache#468\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: validate ZMQ sequence frame length before decoding by \u003ca href=\"https://github.com/wenhug\"\u003e\u003ccode\u003e@​wenhug\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/492\"\u003ellm-d/llm-d-kv-cache#492\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: test imports and missing gds_mode arg by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/497\"\u003ellm-d/llm-d-kv-cache#497\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: statically link libstdc++ in fs_connector wheel by \u003ca href=\"https://github.com/natoscott\"\u003e\u003ccode\u003e@​natoscott\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/498\"\u003ellm-d/llm-d-kv-cache#498\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: statically link libstdc++ in fs_connector wheel for v0.17.1 by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/505\"\u003ellm-d/llm-d-kv-cache#505\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eenable toolcalling from renderer by \u003ca href=\"https://github.com/Gregory-Pereira\"\u003e\u003ccode\u003e@​Gregory-Pereira\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/507\"\u003ellm-d/llm-d-kv-cache#507\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate: triv-action SHA1 by \u003ca href=\"https://github.com/zdtsw\"\u003e\u003ccode\u003e@​zdtsw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/494\"\u003ellm-d/llm-d-kv-cache#494\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ci): harden nightly race detector job by \u003ca href=\"https://github.com/gyliu513\"\u003e\u003ccode\u003e@​gyliu513\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/493\"\u003ellm-d/llm-d-kv-cache#493\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(concurrency): add concurrency stress tests for KV-cache index operations by \u003ca href=\"https://github.com/gyliu513\"\u003e\u003ccode\u003e@​gyliu513\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/488\"\u003ellm-d/llm-d-kv-cache#488\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Heterogeneous BlockSize support by \u003ca href=\"https://github.com/albertoperdomo2\"\u003e\u003ccode\u003e@​albertoperdomo2\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/511\"\u003ellm-d/llm-d-kv-cache#511\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(docs): correct scoring return type and add device-tier weighting description by \u003ca href=\"https://github.com/yankay\"\u003e\u003ccode\u003e@​yankay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/523\"\u003ellm-d/llm-d-kv-cache#523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: align default pod label selector to kebab-case inference-serving by \u003ca href=\"https://github.com/yankay\"\u003e\u003ccode\u003e@​yankay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/525\"\u003ellm-d/llm-d-kv-cache#525\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: deprecate embedded tokenizers by \u003ca href=\"https://github.com/sagearc\"\u003e\u003ccode\u003e@​sagearc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/473\"\u003ellm-d/llm-d-kv-cache#473\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs_backend): suffix offload metrics via vllm.general_plugins by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/522\"\u003ellm-d/llm-d-kv-cache#522\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Upgrade golangci-lint to v2.9.0 by \u003ca href=\"https://github.com/gyliu513\"\u003e\u003ccode\u003e@​gyliu513\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/439\"\u003ellm-d/llm-d-kv-cache#439\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erevamp docs by \u003ca href=\"https://github.com/vMaroon\"\u003e\u003ccode\u003e@​vMaroon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/528\"\u003ellm-d/llm-d-kv-cache#528\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: register MaxPodHitCount metric in Collectors() by \u003ca href=\"https://github.com/wenhug\"\u003e\u003ccode\u003e@​wenhug\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/509\"\u003ellm-d/llm-d-kv-cache#509\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Move fs-connector to use vllm v0.19.1 by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/540\"\u003ellm-d/llm-d-kv-cache#540\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebump uds-tokenizer vllm 0.19.1 by \u003ca href=\"https://github.com/vMaroon\"\u003e\u003ccode\u003e@​vMaroon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/539\"\u003ellm-d/llm-d-kv-cache#539\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Add golden test case for multi-modal by \u003ca href=\"https://github.com/gyliu513\"\u003e\u003ccode\u003e@​gyliu513\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/485\"\u003ellm-d/llm-d-kv-cache#485\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(fs_backend): add performance and stress tests by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/527\"\u003ellm-d/llm-d-kv-cache#527\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(fs_connector): add cu130 wheel variant for vLLM 0.19.x by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/542\"\u003ellm-d/llm-d-kv-cache#542\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[1/3] deprecating internal tokenization on the lookup path by \u003ca href=\"https://github.com/vMaroon\"\u003e\u003ccode\u003e@​vMaroon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/543\"\u003ellm-d/llm-d-kv-cache#543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(fs_backend): make -static-libstdc++ opt-in via FS_PORTABLE_WHEEL by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/550\"\u003ellm-d/llm-d-kv-cache#550\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent write queue deadlock under high concurrency by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/512\"\u003ellm-d/llm-d-kv-cache#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd object store support to llm-d storage offloading by \u003ca href=\"https://github.com/effi-ofer\"\u003e\u003ccode\u003e@​effi-ofer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/499\"\u003ellm-d/llm-d-kv-cache#499\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(fs-connector): enable pip install via PEP 503 Pages index by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/551\"\u003ellm-d/llm-d-kv-cache#551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocumentation by \u003ca href=\"https://github.com/effi-ofer\"\u003e\u003ccode\u003e@​effi-ofer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/555\"\u003ellm-d/llm-d-kv-cache#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps(go): bump the kubernetes group across 1 directory with 3 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/412\"\u003ellm-d/llm-d-kv-cache#412\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/saikat-royc\"\u003e\u003ccode\u003e@​saikat-royc\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/468\"\u003ellm-d/llm-d-kv-cache#468\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wenhug\"\u003e\u003ccode\u003e@​wenhug\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/492\"\u003ellm-d/llm-d-kv-cache#492\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/effi-ofer\"\u003e\u003ccode\u003e@​effi-ofer\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/499\"\u003ellm-d/llm-d-kv-cache#499\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/compare/v0.7.0...v0.8.0\"\u003ehttps://github.com/llm-d/llm-d-kv-cache/compare/v0.7.0...v0.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.8.0-fs-v0.20\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/0030c3ba64e13a0894d8e1b105a266039a24e756\"\u003e\u003ccode\u003e0030c3b\u003c/code\u003e\u003c/a\u003e fix(tokenization): preserve assistant tool calls in UDS rendering (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/577\"\u003e#577\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/225efda2f8bab42f16762eddd1c61dad429de840\"\u003e\u003ccode\u003e225efda\u003c/code\u003e\u003c/a\u003e Fix CPU offloading for precise-prefix-cache-aware (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/561\"\u003e#561\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/482dc7c9368c28a7b7051a804d5dd6a2c7f36428\"\u003e\u003ccode\u003e482dc7c\u003c/code\u003e\u003c/a\u003e Replace BlockSize with BlockSizeTokens (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/564\"\u003e#564\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/f6a98c138313ce553b4c8976c0e564d3751d376c\"\u003e\u003ccode\u003ef6a98c1\u003c/code\u003e\u003c/a\u003e fix: render error (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/554\"\u003e#554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/1fac0a1c1f8cbe5ce12b9dc5c2fb5c1016699e7b\"\u003e\u003ccode\u003e1fac0a1\u003c/code\u003e\u003c/a\u003e deps(go): bump the kubernetes group across 1 directory with 3 updates (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/412\"\u003e#412\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/9956c22925055ad2158b0f1d7ed8152c3f6d404f\"\u003e\u003ccode\u003e9956c22\u003c/code\u003e\u003c/a\u003e documentation (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/555\"\u003e#555\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/6b006117c8f583e8020c5f2649e3b0e6b35daf3a\"\u003e\u003ccode\u003e6b00611\u003c/code\u003e\u003c/a\u003e build(fs-connector): enable pip install via PEP 503 Pages index (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/551\"\u003e#551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/2cad5946afc35d68ae9356c7b3a9a61d6d208cea\"\u003e\u003ccode\u003e2cad594\u003c/code\u003e\u003c/a\u003e Add object store support to llm-d storage offloading (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/499\"\u003e#499\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/ffb6ec6f02d7b312e89095a434cffb1032fa61df\"\u003e\u003ccode\u003effb6ec6\u003c/code\u003e\u003c/a\u003e fix: prevent write queue deadlock under high concurrency (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/512\"\u003e#512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/4c8edc16b6ad163b86d633b55670b727a0df05a7\"\u003e\u003ccode\u003e4c8edc1\u003c/code\u003e\u003c/a\u003e build(fs_backend): make -static-libstdc++ opt-in via FS_PORTABLE_WHEEL (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/550\"\u003e#550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/compare/v0.7.1...v0.8.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/onsi/ginkgo/v2` from 2.28.3 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/ginkgo/releases\"\u003egithub.com/onsi/ginkgo/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.31.0\u003c/h2\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003eAdd a bunch of Claude Skills via the marketplace:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e/plugin marketplace add onsi/ginkgo\n/plugin install ginkgo@ginkgo\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003ev2.30.0\u003c/h2\u003e\n\u003ch2\u003e2.30.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cp\u003eGinkgo now allows \u003ccode\u003eextentions/global.Reset\u003c/code\u003e to support running multiple suites from within a single process.  This may take some massaging on your part (see \u003ca href=\"https://redirect.github.com/onsi/ginkgo/issues/1672\"\u003e1672\u003c/a\u003e) but can dramatically speed up codebases with O(hundreds) of test suites.\u003c/p\u003e\n\u003cp\u003eThanks \u003ca href=\"https://github.com/lawrencejones\"\u003e\u003ccode\u003e@​lawrencejones\u003c/code\u003e\u003c/a\u003e !\u003c/p\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested --github-output group for progress report nested inside timeline [4f62d7a]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.29.0\u003c/h2\u003e\n\u003ch2\u003e2.29.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003eGinkgoHelperGo\u003c/code\u003e makes it easier to write test helpers that need to run in goroutines.  Specifically, it makes managing the failure state and capturing failure panics correctly straightforward.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eginkgo outline\u003c/code\u003e now includes entries defined in \u003ccode\u003eDescribeTableSubtree\u003c/code\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md\"\u003egithub.com/onsi/ginkgo/v2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003eAdd a bunch of Claude Skills via the marketplace:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e/plugin marketplace add onsi/ginkgo\n/plugin install ginkgo@ginkgo\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003e2.30.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cp\u003eGinkgo now allows \u003ccode\u003eextentions/global.Reset\u003c/code\u003e to support running multiple suites from within a single process.  This may take some massaging on your part (see \u003ca href=\"https://redirect.github.com/onsi/ginkgo/issues/1672\"\u003e1672\u003c/a\u003e) but can dramatically speed up codebases with O(hundreds) of test suites.\u003c/p\u003e\n\u003cp\u003eThanks \u003ca href=\"https://github.com/lawrencejones\"\u003e\u003ccode\u003e@​lawrencejones\u003c/code\u003e\u003c/a\u003e !\u003c/p\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested --github-output group for progress report nested inside timeline [4f62d7a]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.29.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003eGinkgoHelperGo\u003c/code\u003e makes it easier to write test helpers that need to run in goroutines.  Specifically, it makes managing the failure state and capturing failure panics correctly straightforward.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eginkgo outline\u003c/code\u003e now includes entries defined in \u003ccode\u003eDescribeTableSubtree\u003c/code\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/3c7bde4e56b079f4ce636d238daadaa94d32de12\"\u003e\u003ccode\u003e3c7bde4\u003c/code\u003e\u003c/a\u003e v2.31.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/e479459ad98fd7e56c92733b8915cf17f7b4a217\"\u003e\u003ccode\u003ee479459\u003c/code\u003e\u003c/a\u003e add claude skills\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/31e99120691330a79003ad95329cf896e4fb1051\"\u003e\u003ccode\u003e31e9912\u003c/code\u003e\u003c/a\u003e v2.30.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/a79cdbb03469c0dedde57cc481c78c8284ee0387\"\u003e\u003ccode\u003ea79cdbb\u003c/code\u003e\u003c/a\u003e Document running multiple suites in a single test process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/800291af09d4f6da0927e7326b8b58c17c322b97\"\u003e\u003ccode\u003e800291a\u003c/code\u003e\u003c/a\u003e Allow extensions/globals.Reset to support re-running RunSpecs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/4f62d7a74752034222d97d911f904d9be47ff7aa\"\u003e\u003ccode\u003e4f62d7a\u003c/code\u003e\u003c/a\u003e Fix nested --github-output group for progress report nested inside timeline\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/04b5bcbe4eee911a1baf506eda1e7e811c978937\"\u003e\u003ccode\u003e04b5bcb\u003c/code\u003e\u003c/a\u003e v2.29.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/124232a4531c77a7f31a036e0150e06fa78b2af8\"\u003e\u003ccode\u003e124232a\u003c/code\u003e\u003c/a\u003e docs: GinkgoHelperGo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/ad9cee80bdfda573e94f1b05f2bd4afa1a2fe815\"\u003e\u003ccode\u003ead9cee8\u003c/code\u003e\u003c/a\u003e feat: GinkgoHelperGo, with integration tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/9e56a0a2a090eb83af696381161bdb996c69bcac\"\u003e\u003ccode\u003e9e56a0a\u003c/code\u003e\u003c/a\u003e chore: refactor devcontainer for better maintenance\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/onsi/ginkgo/compare/v2.28.3...v2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/onsi/gomega` from 1.40.0 to 1.42.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/gomega/releases\"\u003egithub.com/onsi/gomega's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.42.0\u003c/h2\u003e\n\u003ch2\u003e1.42.0\u003c/h2\u003e\n\u003cp\u003eAdd a set of Claude skill as a marketplace plugin\u003c/p\u003e\n\u003ch2\u003ev1.41.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/gomega/blob/master/CHANGELOG.md\"\u003egithub.com/onsi/gomega's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.42.0\u003c/h2\u003e\n\u003cp\u003eAdd a set of Claude skill as a marketplace plugin\u003c/p\u003e\n\u003ch2\u003e1.41.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cp\u003eAdd \u003ccode\u003eBeASlice\u003c/code\u003e and \u003ccode\u003eBeAnArray\u003c/code\u003e matchers\u003c/p\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cp\u003eObject formatting now detects pointer cycles to avoid runaway formatting output.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/35ca084ebed8e3f9966e0d4a53384c022d78c1a8\"\u003e\u003ccode\u003e35ca084\u003c/code\u003e\u003c/a\u003e v1.42.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/d72697b90777dcb0813622b58827d27e4a9d3f22\"\u003e\u003ccode\u003ed72697b\u003c/code\u003e\u003c/a\u003e v1.42.0 (full)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/1f95d86efdd3ea0f791ce6573f3f6b0de02f5991\"\u003e\u003ccode\u003e1f95d86\u003c/code\u003e\u003c/a\u003e add a set of claude skills as a marketplace plugin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/af2bccb5831cbcc56cfc16ca3056077cdec4798b\"\u003e\u003ccode\u003eaf2bccb\u003c/code\u003e\u003c/a\u003e v1.41.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/73e81f6f054c825d1743bf4090ac0a9e1d5605af\"\u003e\u003ccode\u003e73e81f6\u003c/code\u003e\u003c/a\u003e v1.41.0 (full)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e35a84f24113255aaeea62fe7c47e09adf39109b\"\u003e\u003ccode\u003ee35a84f\u003c/code\u003e\u003c/a\u003e feat: devcontainer configuration with local pkgsite and GH pages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/f12e5e1bc7167fae21ef37b0d9d358d51063ff5e\"\u003e\u003ccode\u003ef12e5e1\u003c/code\u003e\u003c/a\u003e fix(format): detect pointer cycles to avoid runaway formatting output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e14831fefa86313f2b01fb803b2ac937e49d08b6\"\u003e\u003ccode\u003ee14831f\u003c/code\u003e\u003c/a\u003e Add optionalDescription docs to AsyncAssertion and Assertion interfaces\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/344b94dae7e0df0e2d087574b4c2b1b1597a6943\"\u003e\u003ccode\u003e344b94d\u003c/code\u003e\u003c/a\u003e Add BeASlice and BeAnArray matchers\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/onsi/gomega/compare/v1.40.0...v1.42.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/openai/openai-go/v3` from 3.33.0 to 3.39.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openai/openai-go/releases\"\u003egithub.com/openai/openai-go/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.39.0\u003c/h2\u003e\n\u003ch2\u003e3.39.0 (2026-06-03)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-%5Bgo/compare/v3.38.0...v3.39.0%5D(https://www.golinks.io/compare/v3.38.0...v3.39.0?trackSource=github)\"\u003ev3.38.0...v3.39.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e responses.moderation and chat_completions.moderation (\u003ca href=\"https://github.com/openai/openai-%5Bgo/commit/7a2dac0ddf6b92dfcaa45b190dbe7f51368e199c%5D(https://www.golinks.io/commit/7a2dac0ddf6b92dfcaa45b190dbe7f51368e199c?trackSource=github)\"\u003e7a2dac0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.38.0\u003c/h2\u003e\n\u003ch2\u003e3.38.0 (2026-06-01)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-go/compare/v3.37.0...v3.38.0\"\u003ev3.37.0...v3.38.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e manual updates (\u003ca href=\"https://github.com/openai/openai-go/commit/d7dac8192c292d882cb765d3379e10427930979e\"\u003ed7dac81\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e workload identity in audit logs, additional_tools item in responses, fix ActionSearch.query to be optional. (\u003ca href=\"https://github.com/openai/openai-go/commit/4c3981cfabc98ec1d67c2baf7c6a891ef6640f96\"\u003e4c3981c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.37.0\u003c/h2\u003e\n\u003ch2\u003e3.37.0 (2026-05-21)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-go/compare/v3.36.0...v3.37.0\"\u003ev3.36.0...v3.37.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e api update (\u003ca href=\"https://github.com/openai/openai-go/commit/7f7416ea4f6953a2861189dee6391515c3b995a9\"\u003e7f7416e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e manual updates (\u003ca href=\"https://github.com/openai/openai-go/commit/d6465620413df87d971e7e37ae74bef4c70076b1\"\u003ed646562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e update OpenAPI spec or Stainless config (\u003ca href=\"https://github.com/openai/openai-go/commit/b34b78a83433003a6168fffd175cc963ad719495\"\u003eb34b78a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e optimize json encoder for internal types (\u003ca href=\"https://github.com/openai/openai-go/commit/93adc6e6247e8ce830152c3df0980a3154aa098a\"\u003e93adc6e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ego:\u003c/strong\u003e format generated admin paths (\u003ca href=\"https://github.com/openai/openai-go/commit/1dd8f5ec0adeeefef6a56068b5532ba5e3b3290e\"\u003e1dd8f5e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ego:\u003c/strong\u003e format generated project permission paths (\u003ca href=\"https://github.com/openai/openai-go/commit/b751c37ce2d6348545d75451dfc253dd7dda0f4f\"\u003eb751c37\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e docs updates (\u003ca href=\"https://github.com/openai/openai-go/commit/08bc80ea58a19ba0725942c1f3afbcfb043851a0\"\u003e08bc80e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.36.0\u003c/h2\u003e\n\u003ch2\u003e3.36.0 (2026-05-13)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-go/compare/v3.35.0...v3.36.0\"\u003ev3.35.0...v3.36.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add service_tier parameter to response compact method (\u003ca href=\"https://github.com/openai/openai-go/commit/bacd2c0bcf980e8d424d67446fb4d9c4ea897d24\"\u003ebacd2c0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openai/openai-go/blob/main/CHANGELOG.md\"\u003egithub.com/openai/openai-go/v3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.39.0 (2026-06-03)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-go/compare/v3.38.0...v3.39.0\"\u003ev3.38.0...v3.39.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e responses.moderation and chat_completions.moderation (\u003ca href=\"https://github.com/openai/openai-go/commit/7a2dac0ddf6b92dfcaa45b190dbe7f51368e199c\"\u003e7a2dac0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.38.0 (2026-06-01)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-go/compare/v3.37.0...v3.38.0\"\u003ev3.37.0...v3.38.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e manual updates (\u003ca href=\"https://github.com/openai/openai-go/commit/d7dac8192c292d882cb765d3379e10427930979e\"\u003ed7dac81\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e workload identity in audit logs, additional_tools item in responses, fix ActionSearch.query to be optional. (\u003ca href=\"https://github.com/openai/openai-go/commit/4c3981cfabc98ec1d67c2baf7c6a891ef6640f96\"\u003e4c3981c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.37.0 (2026-05-21)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-go/compare/v3.36.0...v3.37.0\"\u003ev3.36.0...v3.37.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e api update (\u003ca href=\"https://github.com/openai/openai-go/commit/7f7416ea4f6953a2861189dee6391515c3b995a9\"\u003e7f7416e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e manual updates (\u003ca href=\"https://github.com/openai/openai-go/commit/d6465620413df87d971e7e37ae74bef4c70076b1\"\u003ed646562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e update OpenAPI spec or Stainless config (\u003ca href=\"https://github.com/openai/openai-go/commit/b34b78a83433003a6168fffd175cc963ad719495\"\u003eb34b78a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e optimize json encoder for internal types (\u003ca href=\"https://github.com/openai/openai-go/commit/93adc6e6247e8ce830152c3df0980a3154aa098a\"\u003e93adc6e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ego:\u003c/strong\u003e format generated admin paths (\u003ca href=\"https://github.com/openai/openai-go/commit/1dd8f5ec0adeeefef6a56068b5532ba5e3b3290e\"\u003e1dd8f5e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ego:\u003c/strong\u003e format generated project permission paths (\u003ca href=\"https://github.com/openai/openai-go/commit/b751c37ce2d6348545d75451dfc253dd7dda0f4f\"\u003eb751c37\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e docs updates (\u003ca href=\"https://github.com/openai/openai-go/commit/08bc80ea58a19ba0725942c1f3afbcfb043851a0\"\u003e08bc80e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.36.0 (2026-05-13)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-go/compare/v3.35.0...v3.36.0\"\u003ev3.35.0...v3.36.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add service_tier parameter to response compact method (\u003ca href=\"https://github.com/openai/openai-go/commit/bacd2c0bcf980e8d424d67446fb4d9c4ea897d24\"\u003ebacd2c0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/bfe92982d403b8eae7a355eb6a86650ee20b3570\"\u003e\u003ccode\u003ebfe9298\u003c/code\u003e\u003c/a\u003e release: 3.39.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/b256c9a1cf224ae0cad685e9072968dba7932693\"\u003e\u003ccode\u003eb256c9a\u003c/code\u003e\u003c/a\u003e feat(api): responses.moderation and chat_completions.moderation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/fd8c615caa0b247c5a9de7318f457df1a014ea22\"\u003e\u003ccode\u003efd8c615\u003c/code\u003e\u003c/a\u003e codegen metadata\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/f25b030d119ec829f5dd78db9e05eff31b8f178d\"\u003e\u003ccode\u003ef25b030\u003c/code\u003e\u003c/a\u003e release: 3.38.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/08e89a6fc0acbacf4645e16183e1130486e8a5de\"\u003e\u003ccode\u003e08e89a6\u003c/code\u003e\u003c/a\u003e feat(api): workload identity in audit logs, additional_tools item in response...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/8f01a93893a51fc300850dc311aa66c96467f47b\"\u003e\u003ccode\u003e8f01a93\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/openai/openai-go/issues/676\"\u003e#676\u003c/a\u003e from openai/release-please--branches--main--changes--...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/2db0d86948259932a76fe8df25a3a513c132f242\"\u003e\u003ccode\u003e2db0d86\u003c/code\u003e\u003c/a\u003e release: 3.37.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/ea245d8115372e980d442072c79436f991366348\"\u003e\u003ccode\u003eea245d8\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/openai/openai-go/issues/991\"\u003e#991\u003c/a\u003e from stainless-sdks/dev/xuanqi/public-api-docs-enterp...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/1dd8f5ec0adeeefef6a56068b5532ba5e3b3290e\"\u003e\u003ccode\u003e1dd8f5e\u003c/code\u003e\u003c/a\u003e fix(go): format generated admin paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/7f7416ea4f6953a2861189dee6391515c3b995a9\"\u003e\u003ccode\u003e7f7416e\u003c/code\u003e\u003c/a\u003e feat(api): api update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/openai/openai-go/compare/v3.33.0...v3.39.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/valyala/fasthttp` from 1.70.0 to 1.71.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.71.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(client): add RetryIfErrUpstream function to handle upstream information by \u003ca href=\"https://github.com/mdenushev\"\u003e\u003ccode\u003e@​mdenushev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2176\"\u003evalyala/fasthttp#2176\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMatch net/http sensitive header redirect policy by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2181\"\u003evalyala/fasthttp#2181\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize first-line header setters to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2182\"\u003evalyala/fasthttp#2182\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eserver: apply ReadTimeout before first byte with ReduceMemoryUsage by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2183\"\u003evalyala/fasthttp#2183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject invalid trailer names by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2188\"\u003evalyala/fasthttp#2188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject pre-colon whitespace in request headers by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2187\"\u003evalyala/fasthttp#2187\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize redirect Location header to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2186\"\u003evalyala/fasthttp#2186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eserver: keep hijacked reader out of pool by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2184\"\u003evalyala/fasthttp#2184\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize cookie setters to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2185\"\u003evalyala/fasthttp#2185\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add ExpectHandler for richer Expect: 100-continue handling by \u003ca href=\"https://github.com/miretskiy\"\u003e\u003ccode\u003e@​miretskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2175\"\u003evalyala/fasthttp#2175\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ehttp: reject whitespace before chunk extensions by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2193\"\u003evalyala/fasthttp#2193\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject unsupported response Transfer-Encoding by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2192\"\u003evalyala/fasthttp#2192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: match net/http CL+TE handling by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2190\"\u003evalyala/fasthttp#2190\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.25.0 to 2.26.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2195\"\u003evalyala/fasthttp#2195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2196\"\u003evalyala/fasthttp#2196\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(prefork): Enhance prefork management with WatchMaster, CommandProducer, and Windows support by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2180\"\u003evalyala/fasthttp#2180\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/miretskiy\"\u003e\u003ccode\u003e@​miretskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2175\"\u003evalyala/fasthttp#2175\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e9208ecebf0c102176bb0635043c17333b10401d\"\u003e\u003ccode\u003ee9208ec\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;feat(prefork): graceful shutdown, leak fixes, hook robustness\u0026quot; commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/481e579af9e7d79f9ce27909edd2c42ef9dce173\"\u003e\u003ccode\u003e481e579\u003c/code\u003e\u003c/a\u003e feat(prefork): Enhance prefork management with WatchMaster, CommandProducer, ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/805cd1046567aa8a8b97a8bfe9e7b411621f68b2\"\u003e\u003ccode\u003e805cd10\u003c/code\u003e\u003c/a\u003e Add note on MaxResponseBodySize compatibility with StreamResponseBody\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5b5c1be52ca382dcea0ed86931b3f1d2aba9dce6\"\u003e\u003ccode\u003e5b5c1be\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2196\"\u003e#2196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d6a99db432025de9ae13051cb42b3e6c3d6568a3\"\u003e\u003ccode\u003ed6a99db\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.25.0 to 2.26.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2195\"\u003e#2195\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f36c9009027f81f4fbf304822f96752517b08949\"\u003e\u003ccode\u003ef36c900\u003c/code\u003e\u003c/a\u003e header: match net/http CL+TE handling (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2190\"\u003e#2190\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0b4cede30fa0eb22f9d10999e23ebaabba15e107\"\u003e\u003ccode\u003e0b4cede\u003c/code\u003e\u003c/a\u003e header: reject unsupported response Transfer-Encoding (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2192\"\u003e#2192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c497746f7d52ab88597dc88310e7f797cc7755aa\"\u003e\u003ccode\u003ec497746\u003c/code\u003e\u003c/a\u003e http: reject whitespace before chunk extensions (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2193\"\u003e#2193\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/97b38d3a4884b7c3d8891750a4c752073bc3c152\"\u003e\u003ccode\u003e97b38d3\u003c/code\u003e\u003c/a\u003e server: document SaveMultipartFile path trust requirement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/19e4b24955fb0ef764229802378a5e36ae7a822b\"\u003e\u003ccode\u003e19e4b24\u003c/code\u003e\u003c/a\u003e feat: add ExpectHandler for richer Expect: 100-continue handling (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2175\"\u003e#2175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/sync` from 0.20.0 to 0.21.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sync/commit/5071ed6a9f1617117556b66384f765c934de3698\"\u003e\u003ccode\u003e5071ed6\u003c/code\u003e\u003c/a\u003e all: fix some comments to improve readability\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/sync/compare/v0.20.0...v0.21.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.80.0 to 1.81.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.81.1\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per \u003ca href=\"https://github.com/grpc/proposal/blob/master/A41-xds-rbac.md\"\u003egRFC A41\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/al4an444\"\u003e\u003ccode\u003e@​al4an444\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eotel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.81.0\u003c/h2\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8808\"\u003e#8808\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eDependencies\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eMinimum supported Go version is now 1.25. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8969\"\u003e#8969\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8956\"\u003e#8956\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Send a \u003ccode\u003eRST_STREAM\u003c/code\u003e when receiving an \u003ccode\u003eEND_STREAM\u003c/code\u003e when the stream is not already half-closed. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8832\"\u003e#8832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Fix ADS resource name validation to prevent a panic. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8970\"\u003e#8970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc/stats: Add support for custom labels in per-call metrics (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A108-otel-custom-per-call-label.md\"\u003egRFC A108\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9008\"\u003e#9008\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Add support for Server Name Indication (SNI) and SAN validation (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A101-SNI-setting-and-SNI-SAN-validation.md\"\u003egRFC A101\u003c/a\u003e). Disabled by default. To enable, set \u003ccode\u003eGRPC_EXPERIMENTAL_XDS_SNI=true\u003c/code\u003e environment variable. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9016\"\u003e#9016\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A85-lrs-custom-metrics-changes.md\"\u003egRFC A85\u003c/a\u003e). Disabled by default. To enable, set \u003ccode\u003eGRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9005\"\u003e#9005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Add metrics to track xDS client connectivity and cached resource state (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A78-grpc-metrics-wrr-pf-xds.md\"\u003egRFC A78\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8807\"\u003e#8807\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003estats/otel: Enhance \u003ccode\u003egrpc.subchannel.disconnections\u003c/code\u003e metric by adding disconnection reason to the \u003ccode\u003egrpc.disconnect_error\u003c/code\u003e label (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A94-subchannel-otel-metrics.md\"\u003egRFC A94\u003c/a\u003e). This provides granular insights into why subchannels are closing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8973\"\u003e#8973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Add \u003ccode\u003emem.Buffer.Slice()\u003c/code\u003e API to slice the buffer like a slice. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8977\"\u003e#8977\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/ash2k\"\u003e\u003ccode\u003e@​ash2k\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ealts: Pool read buffers to lower memory utilization when sockets are unreadable. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8964\"\u003e#8964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set \u003ccode\u003eGRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false\u003c/code\u003e and report any issues. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9032\"\u003e#9032\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/caf0772c2bcb8bc15d43eb53448e921f34f0b7e8\"\u003e\u003ccode\u003ecaf0772\u003c/code\u003e\u003c/a\u003e Change version from 1.81.1-dev to 1.81.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9122\"\u003e#9122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/6ccbeebf058ede71e43a5ac28fada2a736573215\"\u003e\u003ccode\u003e6ccbeeb\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9121\"\u003e#9121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/b33c29e41b438e371c8504de9bdf64a80098cc29\"\u003e\u003ccode\u003eb33c29e\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9102\"\u003e#9102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/c45fae6d06a5c192b7b96418a2bc26a96b856834\"\u003e\u003ccode\u003ec45fae6\u003c/code\u003e\u003c/a\u003e Change version to 1.81.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9063\"\u003e#9063\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/cb18228317ff523e63d931b4058b0329585b7dcd\"\u003e\u003ccode\u003ecb18228\u003c/code\u003e\u003c/a\u003e Change version to 1.81.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9062\"\u003e#9062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/96748f973e20bbfcafa19a8bdffc85ad5da138d1\"\u003e\u003ccode\u003e96748f9\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9105\"\u003e#9105\u003c/a\u003e to 1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9106\"\u003e#9106\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/91832222f0144f76527b630ca55cfea6e1aa015a\"\u003e\u003ccode\u003e9183222\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9055\"\u003e#9055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9032\"\u003e#9032\u003c/a\u003e to v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9095\"\u003e#9095\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/5cba6da4211f3b130238c792937f5921741b616a\"\u003e\u003ccode\u003e5cba6da\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;deps: update dependencies for all modules (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9065\"\u003e#9065\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9067\"\u003e#9067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/af8a9364aa7523ab24d214e9ef13e6ad64d5c5f9\"\u003e\u003ccode\u003eaf8a936\u003c/code\u003e\u003c/a\u003e deps: update dependencies for all modules (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9065\"\u003e#9065\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/cdc60dfaaadde45e16aa3c28237c0e655a722c1a\"\u003e\u003ccode\u003ecdc60df\u003c/code\u003e\u003c/a\u003e transport: optimize heap allocations in ready reader and update syscall conne...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.80.0...v1.81.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `modernc.org/sqlite` from 1.50.0 to 1.52.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md\"\u003emodernc.org/sqlite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e2026-06-14 v1.53.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003cstrong\u003eexperimental\u003c/strong\u003e \u003ccode\u003enetbsd/amd64\u003c/code\u003e support, resolving the long-standing build break in [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/246\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/246\u003c/a\u003e). This target is intentionally \u003cstrong\u003enot yet listed among the supported platforms\u003c/strong\u003e in the package documentation: the port had been broken for years and is only now revived, and there is as yet no real-world experience running it under production workloads. Green CI is not the same as battle-tested — so while the full test suite (including the \u003ccode\u003epcache\u003c/code\u003e and \u003ccode\u003evec\u003c/code\u003e packages and the \u003ccode\u003e-race\u003c/code\u003e concurrency test) passes on NetBSD 10.1 / Go 1.26.3, and the entire upstream toolchain (\u003ccode\u003elibc\u003c/code\u003e, \u003ccode\u003ecc\u003c/code\u003e, \u003ccode\u003eccgo\u003c/code\u003e, \u003ccode\u003elibz\u003c/code\u003e, \u003ccode\u003elibtcl8.6\u003c/code\u003e, \u003ccode\u003elibsqlite3\u003c/code\u003e, \u003ccode\u003elibsqlite_vec\u003c/code\u003e) is green on the NetBSD CI builder, the target is offered for evaluation only. If you run NetBSD, please exercise it with your own workloads and report back via \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e; the intent is to promote it to a fully supported platform after a period of broader real-world testing (on the order of a month) elapses without surprises.\u003c/li\u003e\n\u003cli\u003eImplementation notes: the previously shipped \u003ccode\u003elib/sqlite_netbsd_amd64.go\u003c/code\u003e was a stale old-generator transpile that no longer compiled (the \u003ccode\u003emu.enter\u003c/code\u003e/\u003ccode\u003emu.leave\u003c/code\u003e break in \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e); it is replaced by a fresh new-generator transpile consistent with every other platform, and \u003ccode\u003emodernc.org/sqlite/vec\u003c/code\u003e (sqlite-vec) is vendored and auto-registers on netbsd. Correct operation requires the matching pinned \u003ccode\u003emodernc.org/libc\u003c/code\u003e, which carries two NetBSD-specific fixes found during this work: the \u003ccode\u003emmap(2)\u003c/code\u003e \u003ccode\u003ePAD\u003c/code\u003e-argument ABI (without it, concurrent WAL access faults with SIGBUS in the WAL-index shared memory) and a working \u003ccode\u003eabort(3)\u003c/code\u003e (the prior stub left SQLite's crash-recovery \u003ccode\u003ewritecrash\u003c/code\u003e test unable to terminate by signal). As usual, downstream modules must pin the exact \u003ccode\u003emodernc.org/libc\u003c/code\u003e version this module's \u003ccode\u003ego.mod\u003c/code\u003e pins.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/82\"\u003e#82\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/82\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/82\u003c/a\u003e), thanks Leonardo Taccari (\u003ca href=\"https://github.com/iamleot\"\u003e\u003ccode\u003e@​iamleot\u003c/code\u003e\u003c/a\u003e) and Thomas Klausner (@\u003cem\u003ewiz\u003c/em\u003e)!\u003c/li\u003e\n\u003cli\u003eAdd a Go-facing wrapper for \u003ccode\u003eSQLITE_CONFIG_PCACHE2\u003c/code\u003e. \u003ccode\u003ePageCache\u003c/code\u003e is the factory and \u003ccode\u003eCache\u003c/code\u003e the per-database instance, both idiomatic Go interfaces; \u003ccode\u003ePage\u003c/code\u003e exposes the raw \u003ccode\u003eBuf\u003c/code\u003e and \u003ccode\u003eExtra\u003c/code\u003e pointers that SQLite reads through the C pcache contract. \u003ccode\u003eRegisterPageCache\u003c/code\u003e and \u003ccode\u003eMustRegisterPageCache\u003c/code\u003e install the module process-globally before the first \u003ccode\u003esql.Open\u003c/code\u003e; subsequent Open calls are gated through a one-shot \u003ccode\u003eXsqlite3_config(SQLITE_CONFIG_PCACHE2)\u003c/code\u003e so a too-late Register returns \u003ccode\u003eErrPageCacheTooLate\u003c/code\u003e rather than silently falling through to the built-in pcache1. The binding owns the \u003ccode\u003esqlite3_pcache_page\u003c/code\u003e stub and re-consults the implementation on every Fetch, reusing the stub only when the returned \u003ccode\u003ePage\u003c/code\u003e value is unchanged, which keeps a bounded/evicting purgeable cache safe by construction.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/126\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/126\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e, the reference page-cache implementation that accompanies the \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e \u003ccode\u003eSQLITE_CONFIG_PCACHE2\u003c/code\u003e wrapper. \u003ccode\u003epcache.New\u003c/code\u003e returns a \u003ccode\u003e*Pool\u003c/code\u003e satisfying the \u003ccode\u003ePageCache\u003c/code\u003e interface; register it once with \u003ccode\u003esqlite.MustRegisterPageCache(pcache.New())\u003c/code\u003e and every connection opened afterwards draws its pages from it. Each \u003ccode\u003ePool.Create\u003c/code\u003e mints a fresh per-database \u003ccode\u003eCache\u003c/code\u003e: a bounded, LRU-evicting page store that honours the \u003ccode\u003ePRAGMA cache_size\u003c/code\u003e soft cap and releases the least-recently-unpinned page when it must make room. Page memory — the \u003ccode\u003eBuf\u003c/code\u003e and \u003ccode\u003eExtra\u003c/code\u003e buffers SQLite reads through — is allocated with \u003ccode\u003elibc.Xmalloc\u003c/code\u003e/\u003ccode\u003elibc.Xcalloc\u003c/code\u003e and therefore lives off the Go heap, which keeps SQLite's interior pointer arithmetic on the page extras from tripping the race detector's checkptr enforcement. \u003ccode\u003ePool.Stats\u003c/code\u003e reports aggregate lifetime counters (hits, misses, allocs, evictions, rekeys, truncates, caches) across every cache a Pool has created, so hit/miss/eviction behaviour is observable without instrumenting individual caches. Cross-connection page sharing is out of scope for now; each \u003ccode\u003eCreate\u003c/code\u003e returns an independent per-database cache.\u003c/li\u003e\n\u003cli\u003eValidated end-to-end against the \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e stress workload (\u003ccode\u003ecache_size=16\u003c/code\u003e, 4000 BLOB rows with DELETE and \u003ccode\u003eincremental_vacuum\u003c/code\u003e, \u003ccode\u003eintegrity_check\u003c/code\u003e clean under \u003ccode\u003e-race\u003c/code\u003e) and benchmarked for the memory-utilization goal tracked in [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/204\"\u003e#204\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/204\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/204\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/127\"\u003e#127\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/127\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/127\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eTighten the \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e reference implementation per cznic's !127 review follow-ups. Adds \u003ccode\u003eStats.EasyRefusals\u003c/code\u003e, a per-Pool counter for the cases where \u003ccode\u003eFetchCreateEasy\u003c/code\u003e returns nil at cap; SQLite reacts to a refusal by spilling dirty pages and retrying with \u003ccode\u003eFetchCreateForce\u003c/code\u003e, so the new field is a direct proxy for the I/O pressure the strict Easy contract imposes vs pcache1's recycle-without-spill behavior. \u003ccode\u003eBenchmarkPoolEvictionChurn\u003c/code\u003e was reworked to drive a rotating-residue DELETE (\u003ccode\u003ek % 3 = i % 3\u003c/code\u003e) and re-insert a matching batch each cycle so the spill pressure recurs and \u003ccode\u003eeasy-refusals/op\u003c/code\u003e scales with \u003ccode\u003eb.N\u003c/code\u003e instead of capping at the seed's one-time first-cycle cost; both existing benchmarks now report \u003ccode\u003eeasy-refusals/op\u003c/code\u003e alongside the page-allocs/evictions metrics. \u003ccode\u003eStats.Evictions\u003c/code\u003e documentation was tightened to match the actual behavior (counts LRU eviction, \u003ccode\u003eUnpin(discard=true)\u003c/code\u003e, \u003ccode\u003eShrink\u003c/code\u003e releases, and \u003ccode\u003eUnpin(discard=false)\u003c/code\u003e trimming back to target after a \u003ccode\u003eFetchCreateForce\u003c/code\u003e overcommit; bulk frees from \u003ccode\u003eTruncate\u003c/code\u003e, \u003ccode\u003eRekey\u003c/code\u003e collisions, and \u003ccode\u003eDestroy\u003c/code\u003e are not counted). The \u003ccode\u003eTestPoolRoundTripIntegrity\u003c/code\u003e comment claiming the workload exercises \u003ccode\u003exRekey\u003c/code\u003e ~15 times has been corrected; the SQL surface does not reliably emit xRekey here, and that codepath is covered by the unit tests instead.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/130\"\u003e#130\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/130\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/130\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eMake \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e \u003ccode\u003e-race\u003c/code\u003e-clean under SQLite's \u003ccode\u003ecache=shared\u003c/code\u003e mode. The pool already runs correctly under shared-cache because every callback into a given \u003ccode\u003eCache\u003c/code\u003e is serialised internally by SQLite's \u003ccode\u003esqlite3BtreeEnter\u003c/code\u003e on the \u003ccode\u003eBtShared\u003c/code\u003e mutex; verified empirically with a lock-free in-flight probe (max-in-flight = 1 on the canonical two-connection workload, 4 on a positive control with goroutines hitting the cache directly). However the Go race detector does not recognise SQLite's libc mutex as a happens-before edge and reports false-positive races on \u003ccode\u003eFetch\u003c/code\u003e vs \u003ccode\u003eUnpin\u003c/code\u003e reads/writes of the per-cache state, which surfaces as \u003ccode\u003eDATA RACE\u003c/code\u003e failures for any user who registers the pool and runs their suite under \u003ccode\u003e-race\u003c/code\u003e. A \u003ccode\u003esync.Mutex\u003c/code\u003e on the \u003ccode\u003ecache\u003c/code\u003e type is now taken on every public method (\u003ccode\u003eSetSize\u003c/code\u003e, \u003ccode\u003ePageCount\u003c/code\u003e, \u003ccode\u003eFetch\u003c/code\u003e, \u003ccode\u003eUnpin\u003c/code\u003e, \u003ccode\u003eRekey\u003c/code\u003e, \u003ccode\u003eTruncate\u003c/code\u003e, \u003ccode\u003eDestroy\u003c/code\u003e, \u003ccode\u003eShrink\u003c/code\u003e), always. On the common non-shared-cache path the lock is uncontended (one atomic CAS per Lock/Unlock pair, negligible next to the SQLite work it bookends); on the shared-cache path it just rubber-stamps the order SQLite's \u003ccode\u003eBtShared\u003c/code\u003e mutex already established. A new \u003ccode\u003ee2e_test.go\u003c/code\u003e \u003ccode\u003eTestSharedCacheTwoConns_Integrity\u003c/code\u003e drives two \u003ccode\u003esql.Conn\u003c/code\u003e against the same \u003ccode\u003ecache=shared\u003c/code\u003e URI with concurrent writers and asserts \u003ccode\u003ePRAGMA integrity_check = ok\u003c/code\u003e under \u003ccode\u003e-race\u003c/code\u003e; passes cleanly with the lock, would surface the false-positive without it. Design notes live in \u003ccode\u003epcache/sharing.go\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/131\"\u003e#131\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/131\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/131\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd a Go wrapper for \u003ccode\u003esqlite3_db_status\u003c/code\u003e, the per-connection runtime counters (cache hit/miss/write/spill rates, schema and prepared-statement memory, lookaside usage, deferred foreign keys). \u003ccode\u003eDBStatus\u003c/code\u003e is an interface implemented by the driver connection and reached through the \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, mirroring the existing \u003ccode\u003eFileControl\u003c/code\u003e surface; \u003ccode\u003eDBStatusOp\u003c/code\u003e is a distinct typed enum of the \u003ccode\u003eSQLITE_DBSTATUS_*\u003c/code\u003e verbs so a counter from a different op family will not compile in its place. \u003ccode\u003eStatus(op, reset)\u003c/code\u003e returns the \u003ccode\u003e(current, high)\u003c/code\u003e pair and optionally resets the counter. This also lets \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e measure real I/O instead of the \u003ccode\u003eEasyRefusals\u003c/code\u003e proxy: the new \u003ccode\u003eBenchmarkPoolSpillIO\u003c/code\u003e reads the pager-level \u003ccode\u003eSQLITE_DBSTATUS_CACHE_SPILL\u003c/code\u003e/\u003ccode\u003e_CACHE_WRITE\u003c/code\u003e counters, which the pager maintains identically for pcache1 and the pool, making the pcache1-vs-pool comparison cznic raised on the !127 review a genuine apples-to-apples measurement. On the rotating-residue eviction-churn workload at \u003ccode\u003ecache_size=16\u003c/code\u003e the pool spills ~3.5x more than pcache1 (cache-spill/op 31.96 vs 8.96) for ~3% more page writes (cache-write/op 450 vs 436) at identical hit/miss, quantifying the I/O cost of the strict Easy contract that \u003ccode\u003eEasyRefusals\u003c/code\u003e only proxied.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/132\"\u003e#132\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/132\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/132\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003e_dqs\u003c/code\u003e DSN query parameter that disables SQLite's double-quoted string literal compatibility quirk on a per-connection basis. When \u003ccode\u003e_dqs=0\u003c/code\u003e (or any \u003ccode\u003estrconv.ParseBool\u003c/code\u003e false value) is supplied, the driver calls \u003ccode\u003esqlite3_db_config\u003c/code\u003e with \u003ccode\u003eSQLITE_DBCONFIG_DQS_DDL\u003c/code\u003e and \u003ccode\u003eSQLITE_DBCONFIG_DQS_DML\u003c/code\u003e set to off before any statement is prepared, so a double-quoted identifier that fails to resolve raises a parse error instead of silently falling back to a string literal. Absence of the parameter, or \u003ccode\u003e_dqs=1\u003c/code\u003e, leaves SQLite's default behavior unchanged; existing DSNs continue to work byte-for-byte. Resolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/61\"\u003e#61\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/61\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/61\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/128\"\u003e#128\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/128\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/128\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003e_error_rc\u003c/code\u003e DSN query parameter for clearer error reporting on open-time failures. When \u003ccode\u003e_error_rc=1\u003c/code\u003e (or any \u003ccode\u003estrconv.ParseBool\u003c/code\u003e true value) is supplied, error strings synthesised from a \u003ccode\u003e(rc, db)\u003c/code\u003e pair only append \u003ccode\u003esqlite3_errmsg(db)\u003c/code\u003e when \u003ccode\u003esqlite3_extended_errcode(db)\u003c/code\u003e is consistent with the operation rc (full match first, primary code \u003ccode\u003e\u0026amp;0xff\u003c/code\u003e as fallback). On mismatch the canonical \u003ccode\u003esqlite3_errstr(rc)\u003c/code\u003e is used alone, so an open-time \u003ccode\u003eSQLITE_CANTOPEN\u003c/code\u003e no longer carries the temporary handle's stale \u0026quot;out of memory\u0026quot; errmsg. Absence of the parameter, or \u003ccode\u003e_error_rc=0\u003c/code\u003e, preserves the legacy \u0026quot;errstr: errmsg\u0026quot; form byte-for-byte; existing callers that parse error strings are unaffected. The driver's \u003ccode\u003e*Error.Code()\u003c/code\u003e returns the same SQLite result code in both modes. Parsed before \u003ccode\u003esqlite3_open_v2\u003c/code\u003e so open-time errors are covered. Resolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/230\"\u003e#230\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/230\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/230\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/129\"\u003e#129\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/129\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/129\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-06-06 v1.52.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to \u003ca href=\"https://sqlite.org/releaselog/3_53_2.html\"\u003eSQLite 3.53.2\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eBackup.Remaining\u003c/code\u003e and \u003ccode\u003eBackup.PageCount\u003c/code\u003e, thin wrappers around the existing \u003ccode\u003esqlite3_backup_remaining\u003c/code\u003e and \u003ccode\u003esqlite3_backup_pagecount\u003c/code\u003e C symbols. Together they expose the per-\u003ccode\u003eStep\u003c/code\u003e progress counters that the underlying backup object already maintains, enabling progress reporting during online backups without dropping to \u003ccode\u003emodernc.org/sqlite/lib\u003c/code\u003e directly.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/122\"\u003e#122\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/122\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/122\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eDrop the redundant second copy in \u003ccode\u003e(*conn).columnText\u003c/code\u003e, the path that backs every \u003ccode\u003eRows.Scan\u003c/code\u003e into a Go \u003ccode\u003estring\u003c/code\u003e for a TEXT column. The value's bytes are still copied once out of SQLite-owned memory into a fresh Go buffer; that buffer is then reinterpreted as the result string with \u003ccode\u003eunsafe.String\u003c/code\u003e rather than copied a second time by the implicit \u003ccode\u003estring([]byte)\u003c/code\u003e conversion. This removes one allocation per TEXT value per row and roughly halves the bytes allocated on that path; on the new \u003ccode\u003eBenchmarkColumnTextScan\u003c/code\u003e cases it is ~13–20% faster for payloads of 256 B and larger, with no measurable change for very short strings. Purely internal: no API or behavioral change, and the returned string never aliases SQLite's buffer.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/123\"\u003e#123\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/123\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/123\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eCache each result column's declared type once per result set in \u003ccode\u003enewRows\u003c/code\u003e instead of recomputing it on every row. The TEXT branch of \u003ccode\u003eRows.Next\u003c/code\u003e calls \u003ccode\u003eColumnTypeDatabaseTypeName\u003c/code\u003e for every TEXT column on every row (independent of any DSN flag), which previously did a \u003ccode\u003elibc.GoString\u003c/code\u003e + \u003ccode\u003estrings.ToUpper\u003c/code\u003e each time; that lookup is now a single index into a cached, pre-uppercased \u003ccode\u003e[]string\u003c/code\u003e, and \u003ccode\u003eColumnTypeScanType\u003c/code\u003e reads the same cache and drops its per-call \u003ccode\u003estrings.ToLower\u003c/code\u003e. The declared type is fixed for the lifetime of a prepared statement, so the C round-trip is paid once per column rather than once per column per row, removing exactly 1 alloc + 8 B per TEXT column per row from the \u003ccode\u003eNext\u003c/code\u003e hot path. The new \u003ccode\u003eBenchmarkTextToTimeScan\u003c/code\u003e cases show ~7% faster on a 1000-row DATETIME SELECT under \u003ccode\u003e_texttotime=1\u003c/code\u003e. Purely internal: \u003ccode\u003eColumnTypeDatabaseTypeName\u003c/code\u003e and \u003ccode\u003eColumnTypeScanType\u003c/code\u003e return identical values, no API or behavioral change.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/124\"\u003e#124\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/124\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/124\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eCache, per result column, the \u003ccode\u003eparseTimeFormats\u003c/code\u003e index that first parsed a TEXT-stored DATE/DATETIME/TIMESTAMP value, and try that format first on later rows instead of re-walking the list from the top. \u003ccode\u003e(*conn).parseTime\u003c/code\u003e previously ran \u003ccode\u003etime.Parse\u003c/code\u003e down the format list on every such row; for the canonical SQLite TEXT datetime format every row paid two failed \u003ccode\u003etime.Parse\u003c/code\u003e attempts — each allocating a \u003ccode\u003e*time.ParseError\u003c/code\u003e — before the match. On a 1000-row DATETIME TEXT SELECT this cuts ~50% of allocs/op and ~57% of B/op and is ~37% faster. The fall-through chain is preserved exactly: the seven formats are mutually exclusive, so the cached hint can never select a different match than the in-order scan, and the parsed \u003ccode\u003edriver.Value\u003c/code\u003e is identical to before. Purely internal: no API or behavioral change.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/125\"\u003e#125\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/125\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/125\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-05-28 v1.51.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePool the \u003ccode\u003e[]driver.Value\u003c/code\u003e slice passed to scalar/aggregate UDF callbacks and to vtab \u003ccode\u003eFilter\u003c/code\u003e/\u003ccode\u003eInsert\u003c/code\u003e/\u003ccode\u003eUpdate\u003c/code\u003e callbacks, eliminating the dominant per-row allocation on UDF-heavy queries. Benchmarks on a 1000-row, 3-arg noop scalar UDF show ~40% fewer bytes/op and ~15% fewer allocs/op.\u003c/li\u003e\n\u003cli\u003eDocument the matching \u0026quot;arguments are not valid past return\u0026quot; contract on \u003ccode\u003evtab.Cursor.Filter\u003c/code\u003e and \u003ccode\u003evtab.Updater.Insert\u003c/code\u003e/\u003ccode\u003eUpdate\u003c/code\u003e, consistent with the existing rule for \u003ccode\u003eFunctionImpl.Scalar\u003c/code\u003e / \u003ccode\u003eAggregateFunction.Step\u003c/code\u003e / \u003ccode\u003eWindowInverse\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eResolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/226\"\u003e#226\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/226\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/226\u003c/a\u003e). See [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/114\"\u003e#114\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/114\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/114\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eFileControl.FileControlDataVersion\u003c/code\u003e, a wrapper around \u003ccode\u003eSQLITE_FCNTL_DATA_VERSION\u003c/code\u003e for observing pager-cache data-version changes, including those made on the same connection. Useful as a primitive for application-level cache invalidation.\u003c/li\u003e\n\u003cli\u003eExposed via the idiomatic \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, consistent with the existing \u003ccode\u003eFileControlPersistWAL\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/115\"\u003e#115\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/115\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/115\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eFix a regression where in-memory connections (\u003ccode\u003e:memory:\u003c/code\u003e, \u003ccode\u003efile::memory:\u003c/code\u003e, shared-cache memory URIs) were discarded by \u003ccode\u003edatabase/sql\u003c/code\u003e after a context-cancelled query, taking the entire in-memory store with them. The fix for \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/198\"\u003e#198\u003c/a\u003e had added an \u003ccode\u003esqlite3_is_interrupted\u003c/code\u003e check to the connection validator that mistakenly applied to in-memory connections too, re-introducing the bug originally fixed by !74. File-backed connections keep the existing behaviour and are still discarded after an interrupt.\u003c/li\u003e\n\u003cli\u003eResolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/196\"\u003e#196\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/196\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/196\u003c/a\u003e). See [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/116\"\u003e#116\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/116\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/116\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003eFunctionImpl.VolatileArgs\u003c/code\u003e flag that hands TEXT and BLOB arguments to scalar and aggregate UDF callbacks as zero-copy views (\u003ccode\u003eunsafe.String\u003c/code\u003e...\n\n_Description has been truncated_","html_url":"https://github.com/llm-d/llm-d-inference-sim/pull/543","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/llm-d%2Fllm-d-inference-sim/issues/543","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/543/packages"},{"uuid":"4422799933","node_id":"PR_kwDOIPpCRM7aWWvE","number":731,"state":"open","title":"chore: bump github.com/valyala/fasthttp from 1.63.0 to 1.71.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-11T17:13:21.000Z","updated_at":"2026-05-11T17:15:48.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.63.0","new_version":"1.71.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.63.0 to 1.71.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.71.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(client): add RetryIfErrUpstream function to handle upstream information by \u003ca href=\"https://github.com/mdenushev\"\u003e\u003ccode\u003e@​mdenushev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2176\"\u003evalyala/fasthttp#2176\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMatch net/http sensitive header redirect policy by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2181\"\u003evalyala/fasthttp#2181\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize first-line header setters to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2182\"\u003evalyala/fasthttp#2182\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eserver: apply ReadTimeout before first byte with ReduceMemoryUsage by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2183\"\u003evalyala/fasthttp#2183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject invalid trailer names by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2188\"\u003evalyala/fasthttp#2188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject pre-colon whitespace in request headers by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2187\"\u003evalyala/fasthttp#2187\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize redirect Location header to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2186\"\u003evalyala/fasthttp#2186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eserver: keep hijacked reader out of pool by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2184\"\u003evalyala/fasthttp#2184\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize cookie setters to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2185\"\u003evalyala/fasthttp#2185\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add ExpectHandler for richer Expect: 100-continue handling by \u003ca href=\"https://github.com/miretskiy\"\u003e\u003ccode\u003e@​miretskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2175\"\u003evalyala/fasthttp#2175\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ehttp: reject whitespace before chunk extensions by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2193\"\u003evalyala/fasthttp#2193\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject unsupported response Transfer-Encoding by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2192\"\u003evalyala/fasthttp#2192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: match net/http CL+TE handling by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2190\"\u003evalyala/fasthttp#2190\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.25.0 to 2.26.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2195\"\u003evalyala/fasthttp#2195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2196\"\u003evalyala/fasthttp#2196\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(prefork): Enhance prefork management with WatchMaster, CommandProducer, and Windows support by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2180\"\u003evalyala/fasthttp#2180\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/miretskiy\"\u003e\u003ccode\u003e@​miretskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2175\"\u003evalyala/fasthttp#2175\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.70.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eGo 1.26 and golangci-lint updates by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2146\"\u003evalyala/fasthttp#2146\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd WithLimit methods for uncompression by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2147\"\u003evalyala/fasthttp#2147\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHonor Root for fs.FS and normalize fs-style roots by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2145\"\u003evalyala/fasthttp#2145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize header values in all setter paths to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2162\"\u003evalyala/fasthttp#2162\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd ServeFileLiteral, ServeFSLiteral and SendFileLiteral by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2163\"\u003evalyala/fasthttp#2163\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrevent chunk extension request smuggling by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2165\"\u003evalyala/fasthttp#2165\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate request URI format during header parsing to reject malformed requests by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2168\"\u003evalyala/fasthttp#2168\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP1/1 requires exactly one Host header by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2164\"\u003evalyala/fasthttp#2164\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStrict HTTP version validation and simplified first line parsing by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2167\"\u003evalyala/fasthttp#2167\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOnly normalize pre-colon whitespace for HTTP headers by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2172\"\u003evalyala/fasthttp#2172\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efs: reject '..' path segments in rewritten paths by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2173\"\u003evalyala/fasthttp#2173\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efasthttpproxy: reject CRLF in HTTP proxy CONNECT target by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2174\"\u003evalyala/fasthttp#2174\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efasthttpproxy: scope proxy auth cache to GetDialFunc by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2144\"\u003evalyala/fasthttp#2144\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: enhance performance by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2135\"\u003evalyala/fasthttp#2135\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexport ErrConnectionClosed by \u003ca href=\"https://github.com/pjebs\"\u003e\u003ccode\u003e@​pjebs\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2152\"\u003evalyala/fasthttp#2152\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: detect master process death in prefork children by \u003ca href=\"https://github.com/meruiden\"\u003e\u003ccode\u003e@​meruiden\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2158\"\u003evalyala/fasthttp#2158\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereturn prev values by \u003ca href=\"https://github.com/pjebs\"\u003e\u003ccode\u003e@​pjebs\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2123\"\u003evalyala/fasthttp#2123\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: added httpgo to related projects by \u003ca href=\"https://github.com/MUlt1mate\"\u003e\u003ccode\u003e@​MUlt1mate\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2169\"\u003evalyala/fasthttp#2169\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/upload-artifact from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2149\"\u003evalyala/fasthttp#2149\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.0 to 1.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2170\"\u003evalyala/fasthttp#2170\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.2 to 1.18.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2129\"\u003evalyala/fasthttp#2129\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.3 to 1.18.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2140\"\u003evalyala/fasthttp#2140\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.4 to 1.18.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2166\"\u003evalyala/fasthttp#2166\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e9208ecebf0c102176bb0635043c17333b10401d\"\u003e\u003ccode\u003ee9208ec\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;feat(prefork): graceful shutdown, leak fixes, hook robustness\u0026quot; commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/481e579af9e7d79f9ce27909edd2c42ef9dce173\"\u003e\u003ccode\u003e481e579\u003c/code\u003e\u003c/a\u003e feat(prefork): Enhance prefork management with WatchMaster, CommandProducer, ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/805cd1046567aa8a8b97a8bfe9e7b411621f68b2\"\u003e\u003ccode\u003e805cd10\u003c/code\u003e\u003c/a\u003e Add note on MaxResponseBodySize compatibility with StreamResponseBody\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5b5c1be52ca382dcea0ed86931b3f1d2aba9dce6\"\u003e\u003ccode\u003e5b5c1be\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2196\"\u003e#2196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d6a99db432025de9ae13051cb42b3e6c3d6568a3\"\u003e\u003ccode\u003ed6a99db\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.25.0 to 2.26.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2195\"\u003e#2195\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f36c9009027f81f4fbf304822f96752517b08949\"\u003e\u003ccode\u003ef36c900\u003c/code\u003e\u003c/a\u003e header: match net/http CL+TE handling (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2190\"\u003e#2190\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0b4cede30fa0eb22f9d10999e23ebaabba15e107\"\u003e\u003ccode\u003e0b4cede\u003c/code\u003e\u003c/a\u003e header: reject unsupported response Transfer-Encoding (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2192\"\u003e#2192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c497746f7d52ab88597dc88310e7f797cc7755aa\"\u003e\u003ccode\u003ec497746\u003c/code\u003e\u003c/a\u003e http: reject whitespace before chunk extensions (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2193\"\u003e#2193\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/97b38d3a4884b7c3d8891750a4c752073bc3c152\"\u003e\u003ccode\u003e97b38d3\u003c/code\u003e\u003c/a\u003e server: document SaveMultipartFile path trust requirement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/19e4b24955fb0ef764229802378a5e36ae7a822b\"\u003e\u003ccode\u003e19e4b24\u003c/code\u003e\u003c/a\u003e feat: add ExpectHandler for richer Expect: 100-continue handling (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2175\"\u003e#2175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.63.0...v1.71.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.63.0\u0026new-version=1.71.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/officialmofabs/codeserver/pull/731","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/officialmofabs%2Fcodeserver/issues/731","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/731/packages"},{"uuid":"4418158280","node_id":"PR_kwDOFrKK987aHIx1","number":350,"state":"open","title":"Bump github.com/valyala/fasthttp from 1.70.0 to 1.71.0 in /examples","user":"dependabot[bot]","labels":[":hamster: Go",":shamrock: Examples dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-11T04:53:03.000Z","updated_at":"2026-05-11T04:54:14.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.70.0","new_version":"1.71.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":"/examples","ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.70.0 to 1.71.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.71.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(client): add RetryIfErrUpstream function to handle upstream information by \u003ca href=\"https://github.com/mdenushev\"\u003e\u003ccode\u003e@​mdenushev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2176\"\u003evalyala/fasthttp#2176\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMatch net/http sensitive header redirect policy by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2181\"\u003evalyala/fasthttp#2181\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize first-line header setters to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2182\"\u003evalyala/fasthttp#2182\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eserver: apply ReadTimeout before first byte with ReduceMemoryUsage by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2183\"\u003evalyala/fasthttp#2183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject invalid trailer names by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2188\"\u003evalyala/fasthttp#2188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject pre-colon whitespace in request headers by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2187\"\u003evalyala/fasthttp#2187\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize redirect Location header to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2186\"\u003evalyala/fasthttp#2186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eserver: keep hijacked reader out of pool by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2184\"\u003evalyala/fasthttp#2184\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize cookie setters to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2185\"\u003evalyala/fasthttp#2185\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add ExpectHandler for richer Expect: 100-continue handling by \u003ca href=\"https://github.com/miretskiy\"\u003e\u003ccode\u003e@​miretskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2175\"\u003evalyala/fasthttp#2175\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ehttp: reject whitespace before chunk extensions by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2193\"\u003evalyala/fasthttp#2193\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject unsupported response Transfer-Encoding by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2192\"\u003evalyala/fasthttp#2192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: match net/http CL+TE handling by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2190\"\u003evalyala/fasthttp#2190\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.25.0 to 2.26.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2195\"\u003evalyala/fasthttp#2195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2196\"\u003evalyala/fasthttp#2196\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(prefork): Enhance prefork management with WatchMaster, CommandProducer, and Windows support by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2180\"\u003evalyala/fasthttp#2180\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/miretskiy\"\u003e\u003ccode\u003e@​miretskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2175\"\u003evalyala/fasthttp#2175\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e9208ecebf0c102176bb0635043c17333b10401d\"\u003e\u003ccode\u003ee9208ec\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;feat(prefork): graceful shutdown, leak fixes, hook robustness\u0026quot; commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/481e579af9e7d79f9ce27909edd2c42ef9dce173\"\u003e\u003ccode\u003e481e579\u003c/code\u003e\u003c/a\u003e feat(prefork): Enhance prefork management with WatchMaster, CommandProducer, ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/805cd1046567aa8a8b97a8bfe9e7b411621f68b2\"\u003e\u003ccode\u003e805cd10\u003c/code\u003e\u003c/a\u003e Add note on MaxResponseBodySize compatibility with StreamResponseBody\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5b5c1be52ca382dcea0ed86931b3f1d2aba9dce6\"\u003e\u003ccode\u003e5b5c1be\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2196\"\u003e#2196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d6a99db432025de9ae13051cb42b3e6c3d6568a3\"\u003e\u003ccode\u003ed6a99db\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.25.0 to 2.26.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2195\"\u003e#2195\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f36c9009027f81f4fbf304822f96752517b08949\"\u003e\u003ccode\u003ef36c900\u003c/code\u003e\u003c/a\u003e header: match net/http CL+TE handling (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2190\"\u003e#2190\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0b4cede30fa0eb22f9d10999e23ebaabba15e107\"\u003e\u003ccode\u003e0b4cede\u003c/code\u003e\u003c/a\u003e header: reject unsupported response Transfer-Encoding (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2192\"\u003e#2192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c497746f7d52ab88597dc88310e7f797cc7755aa\"\u003e\u003ccode\u003ec497746\u003c/code\u003e\u003c/a\u003e http: reject whitespace before chunk extensions (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2193\"\u003e#2193\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/97b38d3a4884b7c3d8891750a4c752073bc3c152\"\u003e\u003ccode\u003e97b38d3\u003c/code\u003e\u003c/a\u003e server: document SaveMultipartFile path trust requirement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/19e4b24955fb0ef764229802378a5e36ae7a822b\"\u003e\u003ccode\u003e19e4b24\u003c/code\u003e\u003c/a\u003e feat: add ExpectHandler for richer Expect: 100-continue handling (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2175\"\u003e#2175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.70.0\u0026new-version=1.71.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/mymmrac/telego/pull/350","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mymmrac%2Ftelego/issues/350","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/350/packages"}],"issue_packages":[{"old_version":"1.74.0","new_version":"1.76.0","update_type":"minor","path":"/benchmarks","pr_created_at":"2026-10-22T13:14:25.000Z","version_change":"1.74.0 → 1.76.0","issue":{"uuid":"5980053685","node_id":"PR_kwDOG7IA588AAAABKB2OPA","number":320,"state":"open","title":"chore(deps): bump github.com/valyala/fasthttp from 1.74.0 to 1.76.0 in /benchmarks","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-22T13:14:25.000Z","updated_at":"2026-10-22T13:16:56.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.74.0","new_version":"1.76.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":"/benchmarks","ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.74.0 to 1.76.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.76.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003ev1.76.0\u003c/code\u003e strengthens HTTP message framing, static-file isolation, and server connection handling. It also improves HTTP compatibility, avoids quadratic work when parsing large trailer sets, and adds configurable TCP keep-alives to \u003ccode\u003eTCPDialer\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eSecurity fixes and hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eMultipart parsing consumes the entire declared body.\u003c/strong\u003e Bytes after the closing multipart boundary are drained before the connection is reused, preventing a multipart epilogue from being interpreted as another request. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2336\"\u003e#2336\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eOutgoing messages preserve framing.\u003c/strong\u003e Raw \u003ccode\u003eContent-Length\u003c/code\u003e headers are synchronized with the outgoing body, duplicate or conflicting framing headers are rejected, and fixed-length request and response streams cannot write beyond their declared size. \u003ccode\u003eFS\u003c/code\u003e and \u003ccode\u003eSendFile\u003c/code\u003e also stop at the advertised \u003ccode\u003eContent-Length\u003c/code\u003e when a file grows during serving. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2470\"\u003e#2470\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2462\"\u003e#2462\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRequests with both \u003ccode\u003eContent-Length\u003c/code\u003e and \u003ccode\u003eTransfer-Encoding\u003c/code\u003e close the connection.\u003c/strong\u003e The connection is no longer reused after a request containing both framing headers. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2476\"\u003e#2476\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eVirtual-host file serving preserves directory isolation.\u003c/strong\u003e \u003ccode\u003eNewVHostPathRewriter\u003c/code\u003e avoids decoding the host and path twice and handles invalid hosts safely, preventing crafted requests from escaping the virtual-host directory and accessing files directly under \u003ccode\u003eFS.Root\u003c/code\u003e. This affects \u003ccode\u003eFS\u003c/code\u003e handlers using \u003ccode\u003eNewVHostPathRewriter\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2487\"\u003e#2487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRejected TLS connections no longer block the accept loop.\u003c/strong\u003e Connections rejected by \u003ccode\u003eMaxConnsPerIP\u003c/code\u003e or \u003ccode\u003eConcurrency\u003c/code\u003e are closed without attempting an HTTP error response, which could otherwise trigger a TLS handshake and stall while waiting for a \u003ccode\u003eClientHello\u003c/code\u003e. IPv6 clients are now also counted against \u003ccode\u003eMaxConnsPerIP\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2486\"\u003e#2486\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2468\"\u003e#2468\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ePerformance improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eTrailer parsing avoids quadratic work.\u003c/strong\u003e Large sets of trailer names use indexed membership checks instead of repeatedly scanning all previously recorded names. This reduces CPU amplification from crafted \u003ccode\u003eTrailer\u003c/code\u003e headers and chunked trailer sections while preserving trailer order. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2465\"\u003e#2465\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eHTTP compatibility and features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eStatic files handle range and conditional requests more accurately.\u003c/strong\u003e Unsupported range units and multiple ranges are ignored instead of returning \u003ccode\u003e416\u003c/code\u003e; invalid single byte ranges still return \u003ccode\u003e416\u003c/code\u003e. \u003ccode\u003eRange\u003c/code\u003e is also ignored when \u003ccode\u003eIf-Range\u003c/code\u003e does not match, and both \u003ccode\u003eRange\u003c/code\u003e and \u003ccode\u003eIf-Modified-Since\u003c/code\u003e are ignored for methods other than GET and HEAD. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2467\"\u003e#2467\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2473\"\u003e#2473\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2474\"\u003e#2474\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2475\"\u003e#2475\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePipeline clients handle HEAD responses without reading a body.\u003c/strong\u003e \u003ccode\u003ePipelineClient\u003c/code\u003e skips the response body for HEAD requests. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2469\"\u003e#2469\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP parsing accepts valid legacy formats and matches tokens correctly.\u003c/strong\u003e \u003ccode\u003eParseHTTPDate\u003c/code\u003e accepts obsolete HTTP-date formats, cookies with an invalid \u003ccode\u003eExpires\u003c/code\u003e attribute remain parseable, \u003ccode\u003eExpect: 100-continue\u003c/code\u003e is matched case-insensitively, and \u003ccode\u003eAccept-Encoding\u003c/code\u003e matches complete tokens. Asterisk-form request targets are rejected for methods other than OPTIONS. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2466\"\u003e#2466\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2481\"\u003e#2481\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2482\"\u003e#2482\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2479\"\u003e#2479\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2463\"\u003e#2463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTCP keep-alives are configurable.\u003c/strong\u003e The new \u003ccode\u003eTCPDialer.KeepAlive\u003c/code\u003e field sets the keep-alive period for connections created by the dialer; a negative value disables keep-alives. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2484\"\u003e#2484\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eSecurity and hardening\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003econsume the rest of the declared body in readMultipartForm by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2336\"\u003evalyala/fasthttp#2336\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: validate outgoing request framing by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2470\"\u003evalyala/fasthttp#2470\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estop FS and SendFile at Content-Length when the file has grown by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2462\"\u003evalyala/fasthttp#2462\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close the connection after a request with both Content-Length and Transfer-Encoding by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2476\"\u003evalyala/fasthttp#2476\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): preserve vhost isolation during path rewriting by \u003ca href=\"https://github.com/koyokr\"\u003e\u003ccode\u003e@​koyokr\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2487\"\u003evalyala/fasthttp#2487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix TLS connection rejection blocking the accept loop by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2486\"\u003evalyala/fasthttp#2486\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecount IPv6 clients against MaxConnsPerIP by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2468\"\u003evalyala/fasthttp#2468\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake addTrailerKey linear in the size of the trailer set by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2465\"\u003evalyala/fasthttp#2465\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add KeepAlive option to TCPDialer by \u003ca href=\"https://github.com/littfed\"\u003e\u003ccode\u003e@​littfed\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2484\"\u003evalyala/fasthttp#2484\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(header): reject asterisk-form request-target for non-OPTIONS methods by \u003ca href=\"https://github.com/aadieng100\"\u003e\u003ccode\u003e@​aadieng100\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2463\"\u003evalyala/fasthttp#2463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: accept the obsolete HTTP-date formats in ParseHTTPDate by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2466\"\u003evalyala/fasthttp#2466\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): ignore Range headers FS can't serve instead of replying 416 by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2467\"\u003evalyala/fasthttp#2467\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eskip the response body for HEAD requests in PipelineClient by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2469\"\u003evalyala/fasthttp#2469\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): ignore If-Modified-Since for methods other than GET and HEAD by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2474\"\u003evalyala/fasthttp#2474\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): ignore Range when the If-Range validator doesn't match by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2473\"\u003evalyala/fasthttp#2473\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/634ef44b2cf373160197fa2794f2568b94462909\"\u003e\u003ccode\u003e634ef44\u003c/code\u003e\u003c/a\u003e fix(fs): preserve vhost isolation during path rewriting (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2487\"\u003e#2487\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7aea37996b5f8edc2fe68f7107b4e0369c983d7c\"\u003e\u003ccode\u003e7aea379\u003c/code\u003e\u003c/a\u003e feat: add KeepAlive option to TCPDialer (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2484\"\u003e#2484\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/89a91a8866e8a81eefcc7de4f45221d660f9d4a4\"\u003e\u003ccode\u003e89a91a8\u003c/code\u003e\u003c/a\u003e fix: match complete Accept-Encoding tokens (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2479\"\u003e#2479\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/414aa591c449fee8f9bc66c1c1df5ab20a8a1ef7\"\u003e\u003ccode\u003e414aa59\u003c/code\u003e\u003c/a\u003e Fix TLS connection rejection blocking the accept loop (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/08807279a0675a85a68fceebee59d11aa16243fb\"\u003e\u003ccode\u003e0880727\u003c/code\u003e\u003c/a\u003e consume the rest of the declared body in readMultipartForm (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2336\"\u003e#2336\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/14a24068bc9046f1cc45cb664d8bfdd8fbc2889a\"\u003e\u003ccode\u003e14a2406\u003c/code\u003e\u003c/a\u003e fix flaky TestStreamBodyRequestContentLength\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/24922f6ee470a4a64d91ab705550be77987c465f\"\u003e\u003ccode\u003e24922f6\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.20.1 to 1.20.3 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/260b43825f850596075d3d6f61532e812d67cff0\"\u003e\u003ccode\u003e260b438\u003c/code\u003e\u003c/a\u003e fix: match the Expect: 100-continue value case-insensitively (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2482\"\u003e#2482\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/95bdd1c53f8b5e0b1dbed2956e7419f10019e674\"\u003e\u003ccode\u003e95bdd1c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/molecule-man/go-brrr from 1.2.0 to 1.3.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2483\"\u003e#2483\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/4e0f08c6b18c983469721ab0320ff7fe2e4ca475\"\u003e\u003ccode\u003e4e0f08c\u003c/code\u003e\u003c/a\u003e fix(cookie): ignore an invalid Expires attribute instead of failing to parse ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.74.0...v1.76.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.74.0\u0026new-version=1.76.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/abemedia/go-don/pull/320","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/abemedia%2Fgo-don/issues/320","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/320/packages"}},{"old_version":"1.75.0","new_version":"1.76.0","update_type":"minor","path":"/benchmarks in the go-modules group","pr_created_at":"2026-10-22T10:54:39.000Z","version_change":"1.75.0 → 1.76.0","issue":{"uuid":"5977938225","node_id":"PR_kwDOVKqn_88AAAABKAIwoQ","number":4,"state":"open","title":"chore(bench): Bump github.com/valyala/fasthttp from 1.75.0 to 1.76.0 in /benchmarks in the go-modules group","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-22T10:54:39.000Z","updated_at":"2026-10-22T10:55:46.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(bench): Bump","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.75.0","new_version":"1.76.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":"/benchmarks in the go-modules group","ecosystem":"go"},"body":"Bumps the go-modules group in /benchmarks with 1 update: [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp).\n\nUpdates `github.com/valyala/fasthttp` from 1.75.0 to 1.76.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.76.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003ev1.76.0\u003c/code\u003e strengthens HTTP message framing, static-file isolation, and server connection handling. It also improves HTTP compatibility, avoids quadratic work when parsing large trailer sets, and adds configurable TCP keep-alives to \u003ccode\u003eTCPDialer\u003c/code\u003e.\u003c/p\u003e\n\u003ch2\u003eSecurity fixes and hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eMultipart parsing consumes the entire declared body.\u003c/strong\u003e Bytes after the closing multipart boundary are drained before the connection is reused, preventing a multipart epilogue from being interpreted as another request. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2336\"\u003e#2336\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eOutgoing messages preserve framing.\u003c/strong\u003e Raw \u003ccode\u003eContent-Length\u003c/code\u003e headers are synchronized with the outgoing body, duplicate or conflicting framing headers are rejected, and fixed-length request and response streams cannot write beyond their declared size. \u003ccode\u003eFS\u003c/code\u003e and \u003ccode\u003eSendFile\u003c/code\u003e also stop at the advertised \u003ccode\u003eContent-Length\u003c/code\u003e when a file grows during serving. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2470\"\u003e#2470\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2462\"\u003e#2462\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRequests with both \u003ccode\u003eContent-Length\u003c/code\u003e and \u003ccode\u003eTransfer-Encoding\u003c/code\u003e close the connection.\u003c/strong\u003e The connection is no longer reused after a request containing both framing headers. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2476\"\u003e#2476\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eVirtual-host file serving preserves directory isolation.\u003c/strong\u003e \u003ccode\u003eNewVHostPathRewriter\u003c/code\u003e avoids decoding the host and path twice and handles invalid hosts safely, preventing crafted requests from escaping the virtual-host directory and accessing files directly under \u003ccode\u003eFS.Root\u003c/code\u003e. This affects \u003ccode\u003eFS\u003c/code\u003e handlers using \u003ccode\u003eNewVHostPathRewriter\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2487\"\u003e#2487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRejected TLS connections no longer block the accept loop.\u003c/strong\u003e Connections rejected by \u003ccode\u003eMaxConnsPerIP\u003c/code\u003e or \u003ccode\u003eConcurrency\u003c/code\u003e are closed without attempting an HTTP error response, which could otherwise trigger a TLS handshake and stall while waiting for a \u003ccode\u003eClientHello\u003c/code\u003e. IPv6 clients are now also counted against \u003ccode\u003eMaxConnsPerIP\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2486\"\u003e#2486\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2468\"\u003e#2468\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ePerformance improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eTrailer parsing avoids quadratic work.\u003c/strong\u003e Large sets of trailer names use indexed membership checks instead of repeatedly scanning all previously recorded names. This reduces CPU amplification from crafted \u003ccode\u003eTrailer\u003c/code\u003e headers and chunked trailer sections while preserving trailer order. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2465\"\u003e#2465\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eHTTP compatibility and features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eStatic files handle range and conditional requests more accurately.\u003c/strong\u003e Unsupported range units and multiple ranges are ignored instead of returning \u003ccode\u003e416\u003c/code\u003e; invalid single byte ranges still return \u003ccode\u003e416\u003c/code\u003e. \u003ccode\u003eRange\u003c/code\u003e is also ignored when \u003ccode\u003eIf-Range\u003c/code\u003e does not match, and both \u003ccode\u003eRange\u003c/code\u003e and \u003ccode\u003eIf-Modified-Since\u003c/code\u003e are ignored for methods other than GET and HEAD. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2467\"\u003e#2467\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2473\"\u003e#2473\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2474\"\u003e#2474\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2475\"\u003e#2475\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePipeline clients handle HEAD responses without reading a body.\u003c/strong\u003e \u003ccode\u003ePipelineClient\u003c/code\u003e skips the response body for HEAD requests. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2469\"\u003e#2469\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP parsing accepts valid legacy formats and matches tokens correctly.\u003c/strong\u003e \u003ccode\u003eParseHTTPDate\u003c/code\u003e accepts obsolete HTTP-date formats, cookies with an invalid \u003ccode\u003eExpires\u003c/code\u003e attribute remain parseable, \u003ccode\u003eExpect: 100-continue\u003c/code\u003e is matched case-insensitively, and \u003ccode\u003eAccept-Encoding\u003c/code\u003e matches complete tokens. Asterisk-form request targets are rejected for methods other than OPTIONS. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2466\"\u003e#2466\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2481\"\u003e#2481\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2482\"\u003e#2482\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2479\"\u003e#2479\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2463\"\u003e#2463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eTCP keep-alives are configurable.\u003c/strong\u003e The new \u003ccode\u003eTCPDialer.KeepAlive\u003c/code\u003e field sets the keep-alive period for connections created by the dialer; a negative value disables keep-alives. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2484\"\u003e#2484\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003eSecurity and hardening\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003econsume the rest of the declared body in readMultipartForm by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2336\"\u003evalyala/fasthttp#2336\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: validate outgoing request framing by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2470\"\u003evalyala/fasthttp#2470\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estop FS and SendFile at Content-Length when the file has grown by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2462\"\u003evalyala/fasthttp#2462\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: close the connection after a request with both Content-Length and Transfer-Encoding by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2476\"\u003evalyala/fasthttp#2476\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): preserve vhost isolation during path rewriting by \u003ca href=\"https://github.com/koyokr\"\u003e\u003ccode\u003e@​koyokr\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2487\"\u003evalyala/fasthttp#2487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix TLS connection rejection blocking the accept loop by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2486\"\u003evalyala/fasthttp#2486\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecount IPv6 clients against MaxConnsPerIP by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2468\"\u003evalyala/fasthttp#2468\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003ePerformance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003emake addTrailerKey linear in the size of the trailer set by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2465\"\u003evalyala/fasthttp#2465\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efeat: add KeepAlive option to TCPDialer by \u003ca href=\"https://github.com/littfed\"\u003e\u003ccode\u003e@​littfed\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2484\"\u003evalyala/fasthttp#2484\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(header): reject asterisk-form request-target for non-OPTIONS methods by \u003ca href=\"https://github.com/aadieng100\"\u003e\u003ccode\u003e@​aadieng100\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2463\"\u003evalyala/fasthttp#2463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: accept the obsolete HTTP-date formats in ParseHTTPDate by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2466\"\u003evalyala/fasthttp#2466\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): ignore Range headers FS can't serve instead of replying 416 by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2467\"\u003evalyala/fasthttp#2467\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eskip the response body for HEAD requests in PipelineClient by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2469\"\u003evalyala/fasthttp#2469\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): ignore If-Modified-Since for methods other than GET and HEAD by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2474\"\u003evalyala/fasthttp#2474\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): ignore Range when the If-Range validator doesn't match by \u003ca href=\"https://github.com/LuisFigueroaG\"\u003e\u003ccode\u003e@​LuisFigueroaG\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2473\"\u003evalyala/fasthttp#2473\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/634ef44b2cf373160197fa2794f2568b94462909\"\u003e\u003ccode\u003e634ef44\u003c/code\u003e\u003c/a\u003e fix(fs): preserve vhost isolation during path rewriting (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2487\"\u003e#2487\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7aea37996b5f8edc2fe68f7107b4e0369c983d7c\"\u003e\u003ccode\u003e7aea379\u003c/code\u003e\u003c/a\u003e feat: add KeepAlive option to TCPDialer (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2484\"\u003e#2484\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/89a91a8866e8a81eefcc7de4f45221d660f9d4a4\"\u003e\u003ccode\u003e89a91a8\u003c/code\u003e\u003c/a\u003e fix: match complete Accept-Encoding tokens (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2479\"\u003e#2479\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/414aa591c449fee8f9bc66c1c1df5ab20a8a1ef7\"\u003e\u003ccode\u003e414aa59\u003c/code\u003e\u003c/a\u003e Fix TLS connection rejection blocking the accept loop (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2486\"\u003e#2486\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/08807279a0675a85a68fceebee59d11aa16243fb\"\u003e\u003ccode\u003e0880727\u003c/code\u003e\u003c/a\u003e consume the rest of the declared body in readMultipartForm (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2336\"\u003e#2336\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/14a24068bc9046f1cc45cb664d8bfdd8fbc2889a\"\u003e\u003ccode\u003e14a2406\u003c/code\u003e\u003c/a\u003e fix flaky TestStreamBodyRequestContentLength\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/24922f6ee470a4a64d91ab705550be77987c465f\"\u003e\u003ccode\u003e24922f6\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.20.1 to 1.20.3 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2485\"\u003e#2485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/260b43825f850596075d3d6f61532e812d67cff0\"\u003e\u003ccode\u003e260b438\u003c/code\u003e\u003c/a\u003e fix: match the Expect: 100-continue value case-insensitively (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2482\"\u003e#2482\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/95bdd1c53f8b5e0b1dbed2956e7419f10019e674\"\u003e\u003ccode\u003e95bdd1c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/molecule-man/go-brrr from 1.2.0 to 1.3.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2483\"\u003e#2483\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/4e0f08c6b18c983469721ab0320ff7fe2e4ca475\"\u003e\u003ccode\u003e4e0f08c\u003c/code\u003e\u003c/a\u003e fix(cookie): ignore an invalid Expires attribute instead of failing to parse ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.75.0...v1.76.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.75.0\u0026new-version=1.76.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/darxnet/gourl/pull/4","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/darxnet%2Fgourl/issues/4","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4/packages"}},{"old_version":"1.70.0","new_version":"1.75.0","update_type":"minor","path":null,"pr_created_at":"2026-10-10T19:23:02.000Z","version_change":"1.70.0 → 1.75.0","issue":{"uuid":"5794503775","node_id":"PR_kwDOUM6sL88AAAABHu0TPg","number":199,"state":"closed","title":"chore(deps): bump the go-minor-and-patch group with 3 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-10-10T20:59:11.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-10T19:23:02.000Z","updated_at":"2026-10-10T20:59:19.000Z","time_to_close":5769,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"go-minor-and-patch","update_count":3,"packages":[{"name":"github.com/go-ldap/ldap/v3","old_version":"3.4.14","new_version":"3.4.15","repository_url":"https://github.com/go-ldap/ldap"},{"name":"github.com/spf13/pflag","old_version":"1.0.9","new_version":"1.0.10","repository_url":"https://github.com/spf13/pflag"},{"name":"github.com/valyala/fasthttp","old_version":"1.70.0","new_version":"1.75.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-and-patch group with 3 updates: [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap), [github.com/spf13/pflag](https://github.com/spf13/pflag) and [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp).\n\nUpdates `github.com/go-ldap/ldap/v3` from 3.4.14 to 3.4.15\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-ldap/ldap/releases\"\u003egithub.com/go-ldap/ldap/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.4.15\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eguard malformed attribute in unpackAttributes by \u003ca href=\"https://github.com/netliomax25-code\"\u003e\u003ccode\u003e@​netliomax25-code\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/612\"\u003ego-ldap/ldap#612\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebump Go to 1.26/1.27 in CI and update GitHub Actions to latest major versions by \u003ca href=\"https://github.com/t2y\"\u003e\u003ccode\u003e@​t2y\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/624\"\u003ego-ldap/ldap#624\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: identify RFC 4533 sync control members by tag, not by count by \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/625\"\u003ego-ldap/ldap#625\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: resolve staticcheck findings and repair the make targets by \u003ca href=\"https://github.com/t2y\"\u003e\u003ccode\u003e@​t2y\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/631\"\u003ego-ldap/ldap#631\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eextended: wrap requestValue as RFC 4511 [1] OCTET STRING by \u003ca href=\"https://github.com/team-humaki\"\u003e\u003ccode\u003e@​team-humaki\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/628\"\u003ego-ldap/ldap#628\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: validate closing parenthesis in compound and grouped filters (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/633\"\u003e#633\u003c/a\u003e) by \u003ca href=\"https://github.com/littfed\"\u003e\u003ccode\u003e@​littfed\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/635\"\u003ego-ldap/ldap#635\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject malformed packets via shared child-count and bounds checks by \u003ca href=\"https://github.com/cpuschma\"\u003e\u003ccode\u003e@​cpuschma\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/632\"\u003ego-ldap/ldap#632\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpose ResultCode and DiagnosticMessage on SearchResult by \u003ca href=\"https://github.com/Pujathacker2210\"\u003e\u003ccode\u003e@​Pujathacker2210\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/626\"\u003ego-ldap/ldap#626\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: navigate LDAPMessage envelope in parseLDAPResult by \u003ca href=\"https://github.com/cpuschma\"\u003e\u003ccode\u003e@​cpuschma\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/636\"\u003ego-ldap/ldap#636\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject out-of-range resultCode in GetLDAPError by \u003ca href=\"https://github.com/netliomax25-code\"\u003e\u003ccode\u003e@​netliomax25-code\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/640\"\u003ego-ldap/ldap#640\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: return error for unexpected response in ModifyWithResult by \u003ca href=\"https://github.com/netliomax25-code\"\u003e\u003ccode\u003e@​netliomax25-code\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/639\"\u003ego-ldap/ldap#639\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/625\"\u003ego-ldap/ldap#625\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/team-humaki\"\u003e\u003ccode\u003e@​team-humaki\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/628\"\u003ego-ldap/ldap#628\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/littfed\"\u003e\u003ccode\u003e@​littfed\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/635\"\u003ego-ldap/ldap#635\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pujathacker2210\"\u003e\u003ccode\u003e@​Pujathacker2210\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-ldap/ldap/pull/626\"\u003ego-ldap/ldap#626\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-ldap/ldap/compare/v3.4.14...v3.4.15\"\u003ehttps://github.com/go-ldap/ldap/compare/v3.4.14...v3.4.15\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/e614cf998727f9417bfa4d3681b1dee5d36c2ede\"\u003e\u003ccode\u003ee614cf9\u003c/code\u003e\u003c/a\u003e fix: return error for unexpected response in ModifyWithResult (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/639\"\u003e#639\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/f3f015323bd819b097024298cfbe1c9a16554ab4\"\u003e\u003ccode\u003ef3f0153\u003c/code\u003e\u003c/a\u003e fix: reject out-of-range resultCode before narrowing to uint16 (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/640\"\u003e#640\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/f8db69e5ab800d173687104a11a26c261ef3d0dc\"\u003e\u003ccode\u003ef8db69e\u003c/code\u003e\u003c/a\u003e Modify README for testing and server commands\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/05f305f2813dc3d18a886d8f927d9ac9ca18a986\"\u003e\u003ccode\u003e05f305f\u003c/code\u003e\u003c/a\u003e fix: navigate LDAPMessage envelope in parseLDAPResult (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/636\"\u003e#636\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/ca8bcfaf155dd46c8a7c06b5fe0fba4ad6a933cb\"\u003e\u003ccode\u003eca8bcfa\u003c/code\u003e\u003c/a\u003e feat: expose ResultCode and DiagnosticMessage on SearchResult (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/f3d20705130c2f00f828dd2d0b053e652d58b408\"\u003e\u003ccode\u003ef3d2070\u003c/code\u003e\u003c/a\u003e fix: export ErrMalformedPacket sentinel\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/0c9a7995a27fa30dad047bff0c3ae9b2572e650f\"\u003e\u003ccode\u003e0c9a799\u003c/code\u003e\u003c/a\u003e fix: address review feedback on malformed-packet hardening\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/b73a2ec4e1f62ea3b61a467ca17f8f8050605396\"\u003e\u003ccode\u003eb73a2ec\u003c/code\u003e\u003c/a\u003e fix: reject malformed packets via shared child-count and bounds checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/e4851f65b8460e9d5c3ffe6c1d8e346d93c14ab3\"\u003e\u003ccode\u003ee4851f6\u003c/code\u003e\u003c/a\u003e fix: validate closing parenthesis in compound and grouped filters (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/633\"\u003e#633\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/635\"\u003e#635\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-ldap/ldap/commit/90c6466c614416e673d88e9a351bf7c3105ad131\"\u003e\u003ccode\u003e90c6466\u003c/code\u003e\u003c/a\u003e extended: wrap requestValue as RFC 4511 [1] OCTET STRING (\u003ca href=\"https://redirect.github.com/go-ldap/ldap/issues/628\"\u003e#628\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-ldap/ldap/compare/v3.4.14...v3.4.15\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/spf13/pflag` from 1.0.9 to 1.0.10\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/spf13/pflag/releases\"\u003egithub.com/spf13/pflag's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.0.10\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix deprecation comment for (FlagSet.)ParseErrorsWhitelist by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/447\"\u003espf13/pflag#447\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremove uses of errors.Is, which requires go1.13, move go1.16/go1.21 tests to separate file by \u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/448\"\u003espf13/pflag#448\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/spf13/pflag/pull/447\"\u003espf13/pflag#447\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/spf13/pflag/compare/v1.0.9...v1.0.10\"\u003ehttps://github.com/spf13/pflag/compare/v1.0.9...v1.0.10\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/pflag/commit/0491e5702ad2bb108bc519a5221bcc0f52aa9564\"\u003e\u003ccode\u003e0491e57\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/spf13/pflag/issues/448\"\u003e#448\u003c/a\u003e from thaJeztah/fix_go_version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/pflag/commit/72abab1d978352c34a7274f374d30f413e1c83f3\"\u003e\u003ccode\u003e72abab1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/spf13/pflag/issues/447\"\u003e#447\u003c/a\u003e from thaJeztah/fix_deprecation_comment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/pflag/commit/7e4dfb1e325ce429e29994933210abe53de7041d\"\u003e\u003ccode\u003e7e4dfb1\u003c/code\u003e\u003c/a\u003e Test on Go 1.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/pflag/commit/18a9d17d0ee8bd64d5c2071fc031be86fa2cd328\"\u003e\u003ccode\u003e18a9d17\u003c/code\u003e\u003c/a\u003e move Func, BoolFunc, tests as they require go1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/pflag/commit/c5b9e989df31c5d19573e50d6188550ad51a971e\"\u003e\u003ccode\u003ec5b9e98\u003c/code\u003e\u003c/a\u003e remove uses of errors.Is, which requires go1.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/spf13/pflag/commit/45a48733e35ba296a5f4dcc2b01996b89dc91a06\"\u003e\u003ccode\u003e45a4873\u003c/code\u003e\u003c/a\u003e fix deprecation comment for (FlagSet.)ParseErrorsWhitelist\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/spf13/pflag/compare/v1.0.9...v1.0.10\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/valyala/fasthttp` from 1.70.0 to 1.75.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.75.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003ev1.75.0\u003c/code\u003e improves HTTP parsing and serialization, URI processing, cached file serving, and client connection handling. It also fixes cookie injection, request/response framing problems, and excessive CPU or memory consumption from certain inputs.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eGo 1.26 or newer is now required.\u003c/strong\u003e \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2395\"\u003e#2395\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ePerformance improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP parsing:\u003c/strong\u003e request headers are parsed and validated in one pass, with common methods and HTTP/1.1 recognized directly. Header values, case conversion, host validation, and control-byte checks process multiple bytes at a time. The parser also avoids repeatedly scanning the same incomplete header block when data arrives in small reads. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2413\"\u003e#2413\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2414\"\u003e#2414\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2428\"\u003e#2428\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2423\"\u003e#2423\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2412\"\u003e#2412\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2438\"\u003e#2438\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP writing:\u003c/strong\u003e fewer header and response copies, cached serialized \u003ccode\u003eServer\u003c/code\u003e and \u003ccode\u003eDate\u003c/code\u003e lines, faster HTTP date formatting, and fewer flushes around chunked trailers. Large buffered responses can use \u003ccode\u003ewritev\u003c/code\u003e on TCP and Unix connections; TLS and streamed bodies retain the buffered path. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2425\"\u003e#2425\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2415\"\u003e#2415\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2434\"\u003e#2434\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2426\"\u003e#2426\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2433\"\u003e#2433\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eURI processing:\u003c/strong\u003e memoized authority parsing, a fast path for \u003ccode\u003e/\u003c/code\u003e, faster quoting and validation, and linear-time path normalization. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2411\"\u003e#2411\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2423\"\u003e#2423\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2453\"\u003e#2453\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eStatic files:\u003c/strong\u003e cached files of up to 8 KiB can be served from memory, avoiding a file read on each cache hit and releasing the file descriptor. The new small-file content cache is bounded to 4096 files, or at most 32 MiB per \u003ccode\u003eFS\u003c/code\u003e; the existing cache metadata is separate. Changes to these files become visible after cache expiration (\u003ccode\u003eCacheDuration\u003c/code\u003e, 10 seconds by default). \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2446\"\u003e#2446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eClient and server overhead:\u003c/strong\u003e clients avoid redundant deadline updates when no timeout is active. The opt-in \u003ccode\u003eServer.LazyRequestTime\u003c/code\u003e avoids reading the clock until \u003ccode\u003eRequestCtx.Time()\u003c/code\u003e is called; with this option, the returned time is the time of the first call. The benchmark comparison below uses the default setting. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2439\"\u003e#2439\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2404\"\u003e#2404\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity fixes and hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eStreamed request bodies are drained before connection reuse.\u003c/strong\u003e With \u003ccode\u003eStreamRequestBody\u003c/code\u003e enabled, the server drains unread body data before reusing the connection, with a 256 KiB drain limit, or closes the connection when safe draining is not possible. Responses are flushed before draining so early replies reach clients still uploading, and response streams can consume the request body before its remaining size is checked. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2368\"\u003e#2368\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2461\"\u003e#2461\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRejected \u003ccode\u003e100-continue\u003c/code\u003e requests close the connection.\u003c/strong\u003e A denied request could previously leave its body unread and have those bytes interpreted as the next request, desynchronizing a reused connection. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2450\"\u003e#2450\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eCookie setters prevent additional-cookie injection.\u003c/strong\u003e \u003ccode\u003eRequestHeader.SetCookie\u003c/code\u003e and its byte variants now sanitize semicolons in names and values, so one logical cookie cannot become multiple cookies on the wire. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2393\"\u003e#2393\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBounded zstd decoding limits decoder memory demand as well as output.\u003c/strong\u003e A small compressed frame could previously declare a large decoder window even when a decoded-body limit was configured. Positive \u003ccode\u003eBodyUnzstdWithLimit\u003c/code\u003e limits now select a memory-limited decoder, with caps rounded up in 8 MiB buckets; exceeding the decoder limit returns \u003ccode\u003eErrBodyTooLarge\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2407\"\u003e#2407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePath normalization avoids quadratic work.\u003c/strong\u003e Repeated separators and dot segments are processed in linear time, reducing the CPU amplification possible with crafted request targets. Incomplete headers arriving one byte at a time also avoid repeated full-block scans. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2453\"\u003e#2453\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2413\"\u003e#2413\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBodyless responses preserve framing.\u003c/strong\u003e HEAD and status-defined bodyless responses no longer emit trailer bytes that can be mistaken for the next response. Serialization suppresses forbidden \u003ccode\u003eContent-Length\u003c/code\u003e and \u003ccode\u003eTransfer-Encoding\u003c/code\u003e on 1xx/204 responses. Explicit content-type metadata and permitted 304 metadata remain supported. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2441\"\u003e#2441\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2447\"\u003e#2447\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2457\"\u003e#2457\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePipeline clients gain a response-body limit and better failure cleanup.\u003c/strong\u003e Set the new \u003ccode\u003ePipelineClient.MaxResponseBodySize\u003c/code\u003e to a positive value to reject oversized responses, including with \u003ccode\u003eResponse.StreamBody\u003c/code\u003e; the default remains unlimited. Idle workers now retire after errors, abandoned requests release their streams, and failed connection establishment is throttled. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2427\"\u003e#2427\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2458\"\u003e#2458\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eArgument sorting now honors any negative comparator result in \u003ccode\u003eArgs.Sort\u003c/code\u003e and \u003ccode\u003eArgs.SortKeys\u003c/code\u003e, and static-file serving rejects zero-length suffix byte ranges (\u003ccode\u003ebytes=-0\u003c/code\u003e) with \u003ccode\u003e416 Range Not Satisfiable\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2459\"\u003e#2459\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2460\"\u003e#2460\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eOther significant changes include opt-in ETags for \u003ccode\u003eFS\u003c/code\u003e, a \u003ccode\u003enet/http\u003c/code\u003e request conversion function, improved adaptor handling of flushes, aborts and trailers, and fixes to shutdown and per-IP connection lifetimes. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2399\"\u003e#2399\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2104\"\u003e#2104\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2429\"\u003e#2429\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2445\"\u003e#2445\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2352\"\u003e#2352\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2402\"\u003e#2402\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eBenchmark results\u003c/h2\u003e\n\u003cp\u003eCompared \u003ccode\u003ev1.74.0\u003c/code\u003e with master \u003ccode\u003e6141d3a\u003c/code\u003e on Ubuntu 26.04, an AMD EPYC 9454, and Go 1.27.1. Each benchmark has ten samples per revision, run alternately with the same inputs and CPU affinity. Negative percentages mean less time per operation. All rows below have p \u0026lt; 0.001.\u003c/p\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eBenchmark\u003c/th\u003e\n\u003cth align=\"right\"\u003ev1.74.0\u003c/th\u003e\n\u003cth align=\"right\"\u003eRelease candidate\u003c/th\u003e\n\u003cth align=\"right\"\u003eTime/op change\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eMinimal GET, pipeline depth 64\u003c/td\u003e\n\u003ctd align=\"right\"\u003e484.30 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e278.05 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-42.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eBrowser-shaped GET, pipeline depth 16\u003c/td\u003e\n\u003ctd align=\"right\"\u003e1.080 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e722.55 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-33.1%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eRequest-header parsing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e561.80 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e348.15 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-38.0%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eResponse-header parsing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e466.95 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e277.55 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-40.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eRequest-header writing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e49.84 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e37.45 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-24.8%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eResponse-header writing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e68.64 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e40.99 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-40.3%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eCached 1 KiB file, directory\u003c/td\u003e\n\u003ctd align=\"right\"\u003e2.324 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e611.85 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-73.7%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eCached 1 KiB file, \u003ccode\u003eos.DirFS\u003c/code\u003e\u003c/td\u003e\n\u003ctd align=\"right\"\u003e3.805 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e612.30 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-83.9%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eURI path with query string\u003c/td\u003e\n\u003ctd align=\"right\"\u003e91.39 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e46.06 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-49.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eHTTP date formatting\u003c/td\u003e\n\u003ctd align=\"right\"\u003e108.25 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e28.59 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-73.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eTrickled ~4 KiB headers, one byte per read\u003c/td\u003e\n\u003ctd align=\"right\"\u003e1385.784 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e191.257 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-86.2%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e8 KiB path of repeated \u003ccode\u003e/\u003c/code\u003e\u003c/td\u003e\n\u003ctd align=\"right\"\u003e352.529 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e54.330 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-84.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e~8 KiB path of repeated \u003ccode\u003e/a/..\u003c/code\u003e\u003c/td\u003e\n\u003ctd align=\"right\"\u003e96.733 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e22.253 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-77.0%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eTCP client/server round trips, small response\u003c/td\u003e\n\u003ctd align=\"right\"\u003e5.193 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e5.030 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-3.1%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eTCP client/server round trips, 64 KiB response\u003c/td\u003e\n\u003ctd align=\"right\"\u003e15.302 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e13.478 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-11.9%\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003cp\u003eThe pipelined serving and file benchmarks use an in-memory connection with writes discarded. The two TCP rows include real loopback networking. These results describe the selected workloads; TCP gains are smaller than the gains in parsing and serialization. \u003ccode\u003eServer.LazyRequestTime\u003c/code\u003e remains disabled in this comparison.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/818be799bc0b086b5df262d6382bf5875fbd58f4\"\u003e\u003ccode\u003e818be79\u003c/code\u003e\u003c/a\u003e fix: preserve response behavior while draining streamed requests (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2461\"\u003e#2461\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/741bd4144c2a57c82499ceecb7648b0cbd6456d6\"\u003e\u003ccode\u003e741bd41\u003c/code\u003e\u003c/a\u003e fix(fs): reject zero-length suffix byte ranges (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2460\"\u003e#2460\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/06d8ae84c6bea09350e2fd67fbb86e2095d36057\"\u003e\u003ccode\u003e06d8ae8\u003c/code\u003e\u003c/a\u003e discard unread streamed request body before the next request (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2368\"\u003e#2368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/54759cc7bed45435350e4ae525986b96ac2900e7\"\u003e\u003ccode\u003e54759cc\u003c/code\u003e\u003c/a\u003e fix(args): use comparator sign in Sort and SortKeys (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2459\"\u003e#2459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/6141d3a6205bec7f51225a058fbcc578efdd9a17\"\u003e\u003ccode\u003e6141d3a\u003c/code\u003e\u003c/a\u003e fix: stop idle PipelineClient workers after errors (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2458\"\u003e#2458\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c7861c0abbdc5fa042b27fa005dad36e4419f49d\"\u003e\u003ccode\u003ec7861c0\u003c/code\u003e\u003c/a\u003e Omit Transfer-Encoding on 1xx and 204 responses (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2457\"\u003e#2457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9242984426b10bca0d7e40e3002796576c669a21\"\u003e\u003ccode\u003e9242984\u003c/code\u003e\u003c/a\u003e leave an empty upfront Server or User-Agent out of PeekAll (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2443\"\u003e#2443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/a0690e59fb50658ef5c8f1763fc625c55958e2e9\"\u003e\u003ccode\u003ea0690e5\u003c/code\u003e\u003c/a\u003e fix(request): warn when Request.Body() is called on streamed requests (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2350\"\u003e#2350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7ae14bec2191f359f6d974697dccfdce07cb9985\"\u003e\u003ccode\u003e7ae14be\u003c/code\u003e\u003c/a\u003e Preserve NoDefaultContentType across client response resets (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2455\"\u003e#2455\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c997615ad95bf6c0b2c2898011c7807883860558\"\u003e\u003ccode\u003ec997615\u003c/code\u003e\u003c/a\u003e perf: serve small cached files from memory in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2446\"\u003e#2446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.70.0...v1.75.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/Hazame-hub/alder/pull/199","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Hazame-hub%2Falder/issues/199","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/199/packages"}},{"old_version":"1.73.0","new_version":"1.75.0","update_type":"minor","path":null,"pr_created_at":"2026-10-09T03:03:35.000Z","version_change":"1.73.0 → 1.75.0","issue":{"uuid":"5772093772","node_id":"PR_kwDOEY_MZc8AAAABHdRHtg","number":643,"state":"closed","title":"Bump github.com/valyala/fasthttp from 1.73.0 to 1.75.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-22T03:03:05.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-09T03:03:35.000Z","updated_at":"2026-10-22T03:03:07.000Z","time_to_close":1123170,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.73.0","new_version":"1.75.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.73.0 to 1.75.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.75.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003ev1.75.0\u003c/code\u003e improves HTTP parsing and serialization, URI processing, cached file serving, and client connection handling. It also fixes cookie injection, request/response framing problems, and excessive CPU or memory consumption from certain inputs.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eGo 1.26 or newer is now required.\u003c/strong\u003e \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2395\"\u003e#2395\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ePerformance improvements\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP parsing:\u003c/strong\u003e request headers are parsed and validated in one pass, with common methods and HTTP/1.1 recognized directly. Header values, case conversion, host validation, and control-byte checks process multiple bytes at a time. The parser also avoids repeatedly scanning the same incomplete header block when data arrives in small reads. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2413\"\u003e#2413\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2414\"\u003e#2414\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2428\"\u003e#2428\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2423\"\u003e#2423\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2412\"\u003e#2412\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2438\"\u003e#2438\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eHTTP writing:\u003c/strong\u003e fewer header and response copies, cached serialized \u003ccode\u003eServer\u003c/code\u003e and \u003ccode\u003eDate\u003c/code\u003e lines, faster HTTP date formatting, and fewer flushes around chunked trailers. Large buffered responses can use \u003ccode\u003ewritev\u003c/code\u003e on TCP and Unix connections; TLS and streamed bodies retain the buffered path. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2425\"\u003e#2425\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2415\"\u003e#2415\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2434\"\u003e#2434\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2426\"\u003e#2426\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2433\"\u003e#2433\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eURI processing:\u003c/strong\u003e memoized authority parsing, a fast path for \u003ccode\u003e/\u003c/code\u003e, faster quoting and validation, and linear-time path normalization. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2411\"\u003e#2411\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2423\"\u003e#2423\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2453\"\u003e#2453\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eStatic files:\u003c/strong\u003e cached files of up to 8 KiB can be served from memory, avoiding a file read on each cache hit and releasing the file descriptor. The new small-file content cache is bounded to 4096 files, or at most 32 MiB per \u003ccode\u003eFS\u003c/code\u003e; the existing cache metadata is separate. Changes to these files become visible after cache expiration (\u003ccode\u003eCacheDuration\u003c/code\u003e, 10 seconds by default). \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2446\"\u003e#2446\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eClient and server overhead:\u003c/strong\u003e clients avoid redundant deadline updates when no timeout is active. The opt-in \u003ccode\u003eServer.LazyRequestTime\u003c/code\u003e avoids reading the clock until \u003ccode\u003eRequestCtx.Time()\u003c/code\u003e is called; with this option, the returned time is the time of the first call. The benchmark comparison below uses the default setting. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2439\"\u003e#2439\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2404\"\u003e#2404\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSecurity fixes and hardening\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eStreamed request bodies are drained before connection reuse.\u003c/strong\u003e With \u003ccode\u003eStreamRequestBody\u003c/code\u003e enabled, the server drains unread body data before reusing the connection, with a 256 KiB drain limit, or closes the connection when safe draining is not possible. Responses are flushed before draining so early replies reach clients still uploading, and response streams can consume the request body before its remaining size is checked. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2368\"\u003e#2368\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2461\"\u003e#2461\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eRejected \u003ccode\u003e100-continue\u003c/code\u003e requests close the connection.\u003c/strong\u003e A denied request could previously leave its body unread and have those bytes interpreted as the next request, desynchronizing a reused connection. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2450\"\u003e#2450\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eCookie setters prevent additional-cookie injection.\u003c/strong\u003e \u003ccode\u003eRequestHeader.SetCookie\u003c/code\u003e and its byte variants now sanitize semicolons in names and values, so one logical cookie cannot become multiple cookies on the wire. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2393\"\u003e#2393\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBounded zstd decoding limits decoder memory demand as well as output.\u003c/strong\u003e A small compressed frame could previously declare a large decoder window even when a decoded-body limit was configured. Positive \u003ccode\u003eBodyUnzstdWithLimit\u003c/code\u003e limits now select a memory-limited decoder, with caps rounded up in 8 MiB buckets; exceeding the decoder limit returns \u003ccode\u003eErrBodyTooLarge\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2407\"\u003e#2407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePath normalization avoids quadratic work.\u003c/strong\u003e Repeated separators and dot segments are processed in linear time, reducing the CPU amplification possible with crafted request targets. Incomplete headers arriving one byte at a time also avoid repeated full-block scans. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2453\"\u003e#2453\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2413\"\u003e#2413\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eBodyless responses preserve framing.\u003c/strong\u003e HEAD and status-defined bodyless responses no longer emit trailer bytes that can be mistaken for the next response. Serialization suppresses forbidden \u003ccode\u003eContent-Length\u003c/code\u003e and \u003ccode\u003eTransfer-Encoding\u003c/code\u003e on 1xx/204 responses. Explicit content-type metadata and permitted 304 metadata remain supported. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2441\"\u003e#2441\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2447\"\u003e#2447\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2457\"\u003e#2457\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ePipeline clients gain a response-body limit and better failure cleanup.\u003c/strong\u003e Set the new \u003ccode\u003ePipelineClient.MaxResponseBodySize\u003c/code\u003e to a positive value to reject oversized responses, including with \u003ccode\u003eResponse.StreamBody\u003c/code\u003e; the default remains unlimited. Idle workers now retire after errors, abandoned requests release their streams, and failed connection establishment is throttled. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2427\"\u003e#2427\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2458\"\u003e#2458\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eArgument sorting now honors any negative comparator result in \u003ccode\u003eArgs.Sort\u003c/code\u003e and \u003ccode\u003eArgs.SortKeys\u003c/code\u003e, and static-file serving rejects zero-length suffix byte ranges (\u003ccode\u003ebytes=-0\u003c/code\u003e) with \u003ccode\u003e416 Range Not Satisfiable\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2459\"\u003e#2459\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2460\"\u003e#2460\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eOther significant changes include opt-in ETags for \u003ccode\u003eFS\u003c/code\u003e, a \u003ccode\u003enet/http\u003c/code\u003e request conversion function, improved adaptor handling of flushes, aborts and trailers, and fixes to shutdown and per-IP connection lifetimes. \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2399\"\u003e#2399\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2104\"\u003e#2104\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2429\"\u003e#2429\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2445\"\u003e#2445\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2352\"\u003e#2352\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2402\"\u003e#2402\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eBenchmark results\u003c/h2\u003e\n\u003cp\u003eCompared \u003ccode\u003ev1.74.0\u003c/code\u003e with master \u003ccode\u003e6141d3a\u003c/code\u003e on Ubuntu 26.04, an AMD EPYC 9454, and Go 1.27.1. Each benchmark has ten samples per revision, run alternately with the same inputs and CPU affinity. Negative percentages mean less time per operation. All rows below have p \u0026lt; 0.001.\u003c/p\u003e\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eBenchmark\u003c/th\u003e\n\u003cth align=\"right\"\u003ev1.74.0\u003c/th\u003e\n\u003cth align=\"right\"\u003eRelease candidate\u003c/th\u003e\n\u003cth align=\"right\"\u003eTime/op change\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eMinimal GET, pipeline depth 64\u003c/td\u003e\n\u003ctd align=\"right\"\u003e484.30 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e278.05 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-42.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eBrowser-shaped GET, pipeline depth 16\u003c/td\u003e\n\u003ctd align=\"right\"\u003e1.080 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e722.55 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-33.1%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eRequest-header parsing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e561.80 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e348.15 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-38.0%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eResponse-header parsing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e466.95 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e277.55 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-40.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eRequest-header writing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e49.84 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e37.45 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-24.8%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eResponse-header writing\u003c/td\u003e\n\u003ctd align=\"right\"\u003e68.64 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e40.99 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-40.3%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eCached 1 KiB file, directory\u003c/td\u003e\n\u003ctd align=\"right\"\u003e2.324 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e611.85 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-73.7%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eCached 1 KiB file, \u003ccode\u003eos.DirFS\u003c/code\u003e\u003c/td\u003e\n\u003ctd align=\"right\"\u003e3.805 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e612.30 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-83.9%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eURI path with query string\u003c/td\u003e\n\u003ctd align=\"right\"\u003e91.39 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e46.06 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-49.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eHTTP date formatting\u003c/td\u003e\n\u003ctd align=\"right\"\u003e108.25 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e28.59 ns\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-73.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eTrickled ~4 KiB headers, one byte per read\u003c/td\u003e\n\u003ctd align=\"right\"\u003e1385.784 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e191.257 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-86.2%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e8 KiB path of repeated \u003ccode\u003e/\u003c/code\u003e\u003c/td\u003e\n\u003ctd align=\"right\"\u003e352.529 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e54.330 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-84.6%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e~8 KiB path of repeated \u003ccode\u003e/a/..\u003c/code\u003e\u003c/td\u003e\n\u003ctd align=\"right\"\u003e96.733 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e22.253 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-77.0%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eTCP client/server round trips, small response\u003c/td\u003e\n\u003ctd align=\"right\"\u003e5.193 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e5.030 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-3.1%\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eTCP client/server round trips, 64 KiB response\u003c/td\u003e\n\u003ctd align=\"right\"\u003e15.302 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e13.478 µs\u003c/td\u003e\n\u003ctd align=\"right\"\u003e-11.9%\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\u003cp\u003eThe pipelined serving and file benchmarks use an in-memory connection with writes discarded. The two TCP rows include real loopback networking. These results describe the selected workloads; TCP gains are smaller than the gains in parsing and serialization. \u003ccode\u003eServer.LazyRequestTime\u003c/code\u003e remains disabled in this comparison.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/818be799bc0b086b5df262d6382bf5875fbd58f4\"\u003e\u003ccode\u003e818be79\u003c/code\u003e\u003c/a\u003e fix: preserve response behavior while draining streamed requests (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2461\"\u003e#2461\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/741bd4144c2a57c82499ceecb7648b0cbd6456d6\"\u003e\u003ccode\u003e741bd41\u003c/code\u003e\u003c/a\u003e fix(fs): reject zero-length suffix byte ranges (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2460\"\u003e#2460\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/06d8ae84c6bea09350e2fd67fbb86e2095d36057\"\u003e\u003ccode\u003e06d8ae8\u003c/code\u003e\u003c/a\u003e discard unread streamed request body before the next request (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2368\"\u003e#2368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/54759cc7bed45435350e4ae525986b96ac2900e7\"\u003e\u003ccode\u003e54759cc\u003c/code\u003e\u003c/a\u003e fix(args): use comparator sign in Sort and SortKeys (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2459\"\u003e#2459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/6141d3a6205bec7f51225a058fbcc578efdd9a17\"\u003e\u003ccode\u003e6141d3a\u003c/code\u003e\u003c/a\u003e fix: stop idle PipelineClient workers after errors (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2458\"\u003e#2458\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c7861c0abbdc5fa042b27fa005dad36e4419f49d\"\u003e\u003ccode\u003ec7861c0\u003c/code\u003e\u003c/a\u003e Omit Transfer-Encoding on 1xx and 204 responses (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2457\"\u003e#2457\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9242984426b10bca0d7e40e3002796576c669a21\"\u003e\u003ccode\u003e9242984\u003c/code\u003e\u003c/a\u003e leave an empty upfront Server or User-Agent out of PeekAll (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2443\"\u003e#2443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/a0690e59fb50658ef5c8f1763fc625c55958e2e9\"\u003e\u003ccode\u003ea0690e5\u003c/code\u003e\u003c/a\u003e fix(request): warn when Request.Body() is called on streamed requests (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2350\"\u003e#2350\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7ae14bec2191f359f6d974697dccfdce07cb9985\"\u003e\u003ccode\u003e7ae14be\u003c/code\u003e\u003c/a\u003e Preserve NoDefaultContentType across client response resets (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2455\"\u003e#2455\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c997615ad95bf6c0b2c2898011c7807883860558\"\u003e\u003ccode\u003ec997615\u003c/code\u003e\u003c/a\u003e perf: serve small cached files from memory in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2446\"\u003e#2446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.75.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.73.0\u0026new-version=1.75.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/oidc-mytoken/server/pull/643","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/oidc-mytoken%2Fserver/issues/643","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/643/packages"}},{"old_version":"1.73.0","new_version":"1.74.0","update_type":"minor","path":"/benchmarks","pr_created_at":"2026-10-01T04:36:52.000Z","version_change":"1.73.0 → 1.74.0","issue":{"uuid":"5657036791","node_id":"PR_kwDOG7IA588AAAABGBq6uA","number":316,"state":"open","title":"chore(deps): bump github.com/valyala/fasthttp from 1.73.0 to 1.74.0 in /benchmarks","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-10-01T04:36:52.000Z","updated_at":"2026-10-01T04:38:15.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.73.0","new_version":"1.74.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":"/benchmarks","ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.73.0 to 1.74.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.74.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(fasthttpproxy): select proxies from the request scheme by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2334\"\u003evalyala/fasthttp#2334\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: scale short timeouts with testTimeout to reduce -race flakiness by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2339\"\u003evalyala/fasthttp#2339\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: drop zeroed entries from the perIPConnCounter map by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2337\"\u003evalyala/fasthttp#2337\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip the unusable per-call file cache in ServeFS by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2338\"\u003evalyala/fasthttp#2338\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: return after a failed Dial instead of dereferencing a nil conn by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2341\"\u003evalyala/fasthttp#2341\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't recycle an idle timestamp its connection still owns by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2342\"\u003evalyala/fasthttp#2342\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject Transfer-Encoding on HTTP/1.0 requests by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2330\"\u003evalyala/fasthttp#2330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eonly treat \u0026quot;//\u0026quot; in URI.Update as an authority after a scheme by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2345\"\u003evalyala/fasthttp#2345\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: consume informational responses before the final response by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2333\"\u003evalyala/fasthttp#2333\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject out-of-range Content-Length instead of wrapping it by \u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: zero-copy chunked body writes via io.WriterTo by \u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't close the shutdown done channel twice by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2340\"\u003evalyala/fasthttp#2340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename ChunkedBodyWriterTo to BodyWriterTo and use in more places by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2348\"\u003evalyala/fasthttp#2348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2349\"\u003evalyala/fasthttp#2349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: small read buffer error doesn't match the ignored string anymore by \u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd canonical header lookup by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2361\"\u003evalyala/fasthttp#2361\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2360\"\u003evalyala/fasthttp#2360\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a pooled timer panic and a test data race by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: send / as the path when the request-target is query-only by \u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: try to avoid reallocations while reading zstd compressed requests by \u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add the QUERY method (RFC 10008) by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2358\"\u003evalyala/fasthttp#2358\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for streaming reads before releasing pooled resources by \u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr by \u003ca href=\"https://github.com/gaby\"\u003e\u003ccode\u003e@​gaby\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2366\"\u003evalyala/fasthttp#2366\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAlways stream response bodies when requested by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2373\"\u003evalyala/fasthttp#2373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.28.0 to 2.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2375\"\u003evalyala/fasthttp#2375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: let request timeouts override client timeouts by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2372\"\u003evalyala/fasthttp#2372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid race condition for closing the streaming connection at EOF by \u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGive TestClientHeadWithBody a CI-proof read timeout by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2374\"\u003evalyala/fasthttp#2374\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent stale query string after clearing query args by \u003ca href=\"https://github.com/cuishuang\"\u003e\u003ccode\u003e@​cuishuang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2380\"\u003evalyala/fasthttp#2380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(examples): add zero-allocation server example by \u003ca href=\"https://github.com/aabishkaryal\"\u003e\u003ccode\u003e@​aabishkaryal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2362\"\u003evalyala/fasthttp#2362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2384\"\u003evalyala/fasthttp#2384\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/17ba63c6627f56fd77bd54a6ccd51f2e550fc231\"\u003e\u003ccode\u003e17ba63c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/559991a01a7c5d9f93971def53e9dbe80432a484\"\u003e\u003ccode\u003e559991a\u003c/code\u003e\u003c/a\u003e feat(examples): add zero-allocation server example (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2362\"\u003e#2362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/1900e5343bc0a52887a36c6dddb07619809f75b6\"\u003e\u003ccode\u003e1900e53\u003c/code\u003e\u003c/a\u003e fix: prevent stale query string after clearing query args (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2380\"\u003e#2380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fde5d95922be86c50e4f5622e744757dc20c68d9\"\u003e\u003ccode\u003efde5d95\u003c/code\u003e\u003c/a\u003e give TestClientHeadWithBody a CI-proof read timeout (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2374\"\u003e#2374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/395442ae68e51f99cd00e31f3533817d970c81d9\"\u003e\u003ccode\u003e395442a\u003c/code\u003e\u003c/a\u003e fix: keep a chunked requestStream at EOF once the body ends (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2379\"\u003e#2379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c19f9cf9334dd3e248bfab005bc1817e2d84ba39\"\u003e\u003ccode\u003ec19f9cf\u003c/code\u003e\u003c/a\u003e fix: let request timeouts override client timeouts (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2372\"\u003e#2372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c96f600972c6f4a7a30d664257b340ebe9d60124\"\u003e\u003ccode\u003ec96f600\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.28.0 to 2.29.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2375\"\u003e#2375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d47d2c91328f8eb14a56dbcca3c5bae1f996c04d\"\u003e\u003ccode\u003ed47d2c9\u003c/code\u003e\u003c/a\u003e Always stream response bodies when requested (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2373\"\u003e#2373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0d9439b8d369f38bd7356c11da4f7dffb8960642\"\u003e\u003ccode\u003e0d9439b\u003c/code\u003e\u003c/a\u003e Replace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fb3b29ece936327cb25142eae6ea447eba3aa257\"\u003e\u003ccode\u003efb3b29e\u003c/code\u003e\u003c/a\u003e fix: wait for streaming reads before releasing pooled resources (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2353\"\u003e#2353\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.73.0\u0026new-version=1.74.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/abemedia/go-don/pull/316","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/abemedia%2Fgo-don/issues/316","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/316/packages"}},{"old_version":"1.52.0","new_version":"1.74.0","update_type":"minor","path":null,"pr_created_at":"2026-09-28T11:04:37.000Z","version_change":"1.52.0 → 1.74.0","issue":{"uuid":"5613483431","node_id":"PR_kwDOLmBl1M8AAAABFevvSg","number":1168,"state":"closed","title":"chore: bump github.com/valyala/fasthttp from 1.52.0 to 1.74.0","user":"dependabot[bot]","labels":["stale","dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-10T03:40:54.000Z","author_association":null,"state_reason":null,"created_at":"2026-09-28T11:04:37.000Z","updated_at":"2026-10-10T03:41:04.000Z","time_to_close":1010177,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.52.0","new_version":"1.74.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.52.0 to 1.74.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.74.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(fasthttpproxy): select proxies from the request scheme by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2334\"\u003evalyala/fasthttp#2334\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: scale short timeouts with testTimeout to reduce -race flakiness by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2339\"\u003evalyala/fasthttp#2339\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: drop zeroed entries from the perIPConnCounter map by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2337\"\u003evalyala/fasthttp#2337\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip the unusable per-call file cache in ServeFS by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2338\"\u003evalyala/fasthttp#2338\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: return after a failed Dial instead of dereferencing a nil conn by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2341\"\u003evalyala/fasthttp#2341\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't recycle an idle timestamp its connection still owns by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2342\"\u003evalyala/fasthttp#2342\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject Transfer-Encoding on HTTP/1.0 requests by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2330\"\u003evalyala/fasthttp#2330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eonly treat \u0026quot;//\u0026quot; in URI.Update as an authority after a scheme by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2345\"\u003evalyala/fasthttp#2345\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: consume informational responses before the final response by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2333\"\u003evalyala/fasthttp#2333\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject out-of-range Content-Length instead of wrapping it by \u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: zero-copy chunked body writes via io.WriterTo by \u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't close the shutdown done channel twice by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2340\"\u003evalyala/fasthttp#2340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename ChunkedBodyWriterTo to BodyWriterTo and use in more places by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2348\"\u003evalyala/fasthttp#2348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2349\"\u003evalyala/fasthttp#2349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: small read buffer error doesn't match the ignored string anymore by \u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd canonical header lookup by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2361\"\u003evalyala/fasthttp#2361\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2360\"\u003evalyala/fasthttp#2360\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a pooled timer panic and a test data race by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: send / as the path when the request-target is query-only by \u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: try to avoid reallocations while reading zstd compressed requests by \u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add the QUERY method (RFC 10008) by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2358\"\u003evalyala/fasthttp#2358\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for streaming reads before releasing pooled resources by \u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr by \u003ca href=\"https://github.com/gaby\"\u003e\u003ccode\u003e@​gaby\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2366\"\u003evalyala/fasthttp#2366\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAlways stream response bodies when requested by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2373\"\u003evalyala/fasthttp#2373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.28.0 to 2.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2375\"\u003evalyala/fasthttp#2375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: let request timeouts override client timeouts by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2372\"\u003evalyala/fasthttp#2372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid race condition for closing the streaming connection at EOF by \u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGive TestClientHeadWithBody a CI-proof read timeout by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2374\"\u003evalyala/fasthttp#2374\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent stale query string after clearing query args by \u003ca href=\"https://github.com/cuishuang\"\u003e\u003ccode\u003e@​cuishuang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2380\"\u003evalyala/fasthttp#2380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(examples): add zero-allocation server example by \u003ca href=\"https://github.com/aabishkaryal\"\u003e\u003ccode\u003e@​aabishkaryal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2362\"\u003evalyala/fasthttp#2362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2384\"\u003evalyala/fasthttp#2384\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/17ba63c6627f56fd77bd54a6ccd51f2e550fc231\"\u003e\u003ccode\u003e17ba63c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/559991a01a7c5d9f93971def53e9dbe80432a484\"\u003e\u003ccode\u003e559991a\u003c/code\u003e\u003c/a\u003e feat(examples): add zero-allocation server example (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2362\"\u003e#2362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/1900e5343bc0a52887a36c6dddb07619809f75b6\"\u003e\u003ccode\u003e1900e53\u003c/code\u003e\u003c/a\u003e fix: prevent stale query string after clearing query args (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2380\"\u003e#2380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fde5d95922be86c50e4f5622e744757dc20c68d9\"\u003e\u003ccode\u003efde5d95\u003c/code\u003e\u003c/a\u003e give TestClientHeadWithBody a CI-proof read timeout (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2374\"\u003e#2374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/395442ae68e51f99cd00e31f3533817d970c81d9\"\u003e\u003ccode\u003e395442a\u003c/code\u003e\u003c/a\u003e fix: keep a chunked requestStream at EOF once the body ends (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2379\"\u003e#2379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c19f9cf9334dd3e248bfab005bc1817e2d84ba39\"\u003e\u003ccode\u003ec19f9cf\u003c/code\u003e\u003c/a\u003e fix: let request timeouts override client timeouts (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2372\"\u003e#2372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c96f600972c6f4a7a30d664257b340ebe9d60124\"\u003e\u003ccode\u003ec96f600\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.28.0 to 2.29.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2375\"\u003e#2375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d47d2c91328f8eb14a56dbcca3c5bae1f996c04d\"\u003e\u003ccode\u003ed47d2c9\u003c/code\u003e\u003c/a\u003e Always stream response bodies when requested (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2373\"\u003e#2373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0d9439b8d369f38bd7356c11da4f7dffb8960642\"\u003e\u003ccode\u003e0d9439b\u003c/code\u003e\u003c/a\u003e Replace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fb3b29ece936327cb25142eae6ea447eba3aa257\"\u003e\u003ccode\u003efb3b29e\u003c/code\u003e\u003c/a\u003e fix: wait for streaming reads before releasing pooled resources (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2353\"\u003e#2353\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.52.0...v1.74.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.52.0\u0026new-version=1.74.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Txim0520/https-github.com-coder-coder/pull/1168","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Txim0520%2Fhttps-github.com-coder-coder/issues/1168","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/1168/packages"}},{"old_version":"1.73.0","new_version":"1.74.0","update_type":"minor","path":null,"pr_created_at":"2026-09-14T18:14:09.000Z","version_change":"1.73.0 → 1.74.0","issue":{"uuid":"5452944218","node_id":"PR_kwDOM-UaAs8AAAABDflYPA","number":239,"state":"open","title":"deps: bump github.com/valyala/fasthttp from 1.73.0 to 1.74.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-09-14T18:14:09.000Z","updated_at":"2026-09-14T18:14:10.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.73.0","new_version":"1.74.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.73.0 to 1.74.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.74.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(fasthttpproxy): select proxies from the request scheme by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2334\"\u003evalyala/fasthttp#2334\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: scale short timeouts with testTimeout to reduce -race flakiness by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2339\"\u003evalyala/fasthttp#2339\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: drop zeroed entries from the perIPConnCounter map by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2337\"\u003evalyala/fasthttp#2337\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip the unusable per-call file cache in ServeFS by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2338\"\u003evalyala/fasthttp#2338\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: return after a failed Dial instead of dereferencing a nil conn by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2341\"\u003evalyala/fasthttp#2341\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't recycle an idle timestamp its connection still owns by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2342\"\u003evalyala/fasthttp#2342\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject Transfer-Encoding on HTTP/1.0 requests by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2330\"\u003evalyala/fasthttp#2330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eonly treat \u0026quot;//\u0026quot; in URI.Update as an authority after a scheme by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2345\"\u003evalyala/fasthttp#2345\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: consume informational responses before the final response by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2333\"\u003evalyala/fasthttp#2333\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject out-of-range Content-Length instead of wrapping it by \u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: zero-copy chunked body writes via io.WriterTo by \u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't close the shutdown done channel twice by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2340\"\u003evalyala/fasthttp#2340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename ChunkedBodyWriterTo to BodyWriterTo and use in more places by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2348\"\u003evalyala/fasthttp#2348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2349\"\u003evalyala/fasthttp#2349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: small read buffer error doesn't match the ignored string anymore by \u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd canonical header lookup by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2361\"\u003evalyala/fasthttp#2361\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2360\"\u003evalyala/fasthttp#2360\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a pooled timer panic and a test data race by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: send / as the path when the request-target is query-only by \u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: try to avoid reallocations while reading zstd compressed requests by \u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add the QUERY method (RFC 10008) by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2358\"\u003evalyala/fasthttp#2358\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for streaming reads before releasing pooled resources by \u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr by \u003ca href=\"https://github.com/gaby\"\u003e\u003ccode\u003e@​gaby\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2366\"\u003evalyala/fasthttp#2366\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAlways stream response bodies when requested by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2373\"\u003evalyala/fasthttp#2373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.28.0 to 2.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2375\"\u003evalyala/fasthttp#2375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: let request timeouts override client timeouts by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2372\"\u003evalyala/fasthttp#2372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid race condition for closing the streaming connection at EOF by \u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGive TestClientHeadWithBody a CI-proof read timeout by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2374\"\u003evalyala/fasthttp#2374\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent stale query string after clearing query args by \u003ca href=\"https://github.com/cuishuang\"\u003e\u003ccode\u003e@​cuishuang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2380\"\u003evalyala/fasthttp#2380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(examples): add zero-allocation server example by \u003ca href=\"https://github.com/aabishkaryal\"\u003e\u003ccode\u003e@​aabishkaryal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2362\"\u003evalyala/fasthttp#2362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2384\"\u003evalyala/fasthttp#2384\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/17ba63c6627f56fd77bd54a6ccd51f2e550fc231\"\u003e\u003ccode\u003e17ba63c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/559991a01a7c5d9f93971def53e9dbe80432a484\"\u003e\u003ccode\u003e559991a\u003c/code\u003e\u003c/a\u003e feat(examples): add zero-allocation server example (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2362\"\u003e#2362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/1900e5343bc0a52887a36c6dddb07619809f75b6\"\u003e\u003ccode\u003e1900e53\u003c/code\u003e\u003c/a\u003e fix: prevent stale query string after clearing query args (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2380\"\u003e#2380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fde5d95922be86c50e4f5622e744757dc20c68d9\"\u003e\u003ccode\u003efde5d95\u003c/code\u003e\u003c/a\u003e give TestClientHeadWithBody a CI-proof read timeout (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2374\"\u003e#2374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/395442ae68e51f99cd00e31f3533817d970c81d9\"\u003e\u003ccode\u003e395442a\u003c/code\u003e\u003c/a\u003e fix: keep a chunked requestStream at EOF once the body ends (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2379\"\u003e#2379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c19f9cf9334dd3e248bfab005bc1817e2d84ba39\"\u003e\u003ccode\u003ec19f9cf\u003c/code\u003e\u003c/a\u003e fix: let request timeouts override client timeouts (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2372\"\u003e#2372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c96f600972c6f4a7a30d664257b340ebe9d60124\"\u003e\u003ccode\u003ec96f600\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.28.0 to 2.29.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2375\"\u003e#2375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d47d2c91328f8eb14a56dbcca3c5bae1f996c04d\"\u003e\u003ccode\u003ed47d2c9\u003c/code\u003e\u003c/a\u003e Always stream response bodies when requested (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2373\"\u003e#2373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0d9439b8d369f38bd7356c11da4f7dffb8960642\"\u003e\u003ccode\u003e0d9439b\u003c/code\u003e\u003c/a\u003e Replace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fb3b29ece936327cb25142eae6ea447eba3aa257\"\u003e\u003ccode\u003efb3b29e\u003c/code\u003e\u003c/a\u003e fix: wait for streaming reads before releasing pooled resources (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2353\"\u003e#2353\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.73.0\u0026new-version=1.74.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/sunhailin-Leo/data-pipeline-go/pull/239","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sunhailin-Leo%2Fdata-pipeline-go/issues/239","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/239/packages"}},{"old_version":"1.73.0","new_version":"1.74.0","update_type":"minor","path":null,"pr_created_at":"2026-09-11T04:12:51.000Z","version_change":"1.73.0 → 1.74.0","issue":{"uuid":"5420273013","node_id":"PR_kwDOFrKK988AAAABDF46MA","number":371,"state":"open","title":"Bump github.com/valyala/fasthttp from 1.73.0 to 1.74.0","user":"dependabot[bot]","labels":[":shamrock: Dependencies",":hamster: Go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-09-11T04:12:51.000Z","updated_at":"2026-09-11T04:14:38.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.73.0","new_version":"1.74.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.73.0 to 1.74.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.74.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(fasthttpproxy): select proxies from the request scheme by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2334\"\u003evalyala/fasthttp#2334\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: scale short timeouts with testTimeout to reduce -race flakiness by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2339\"\u003evalyala/fasthttp#2339\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: drop zeroed entries from the perIPConnCounter map by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2337\"\u003evalyala/fasthttp#2337\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip the unusable per-call file cache in ServeFS by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2338\"\u003evalyala/fasthttp#2338\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: return after a failed Dial instead of dereferencing a nil conn by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2341\"\u003evalyala/fasthttp#2341\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't recycle an idle timestamp its connection still owns by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2342\"\u003evalyala/fasthttp#2342\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject Transfer-Encoding on HTTP/1.0 requests by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2330\"\u003evalyala/fasthttp#2330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eonly treat \u0026quot;//\u0026quot; in URI.Update as an authority after a scheme by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2345\"\u003evalyala/fasthttp#2345\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: consume informational responses before the final response by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2333\"\u003evalyala/fasthttp#2333\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject out-of-range Content-Length instead of wrapping it by \u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: zero-copy chunked body writes via io.WriterTo by \u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't close the shutdown done channel twice by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2340\"\u003evalyala/fasthttp#2340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename ChunkedBodyWriterTo to BodyWriterTo and use in more places by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2348\"\u003evalyala/fasthttp#2348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2349\"\u003evalyala/fasthttp#2349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: small read buffer error doesn't match the ignored string anymore by \u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd canonical header lookup by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2361\"\u003evalyala/fasthttp#2361\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2360\"\u003evalyala/fasthttp#2360\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a pooled timer panic and a test data race by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: send / as the path when the request-target is query-only by \u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: try to avoid reallocations while reading zstd compressed requests by \u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add the QUERY method (RFC 10008) by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2358\"\u003evalyala/fasthttp#2358\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for streaming reads before releasing pooled resources by \u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr by \u003ca href=\"https://github.com/gaby\"\u003e\u003ccode\u003e@​gaby\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2366\"\u003evalyala/fasthttp#2366\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAlways stream response bodies when requested by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2373\"\u003evalyala/fasthttp#2373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.28.0 to 2.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2375\"\u003evalyala/fasthttp#2375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: let request timeouts override client timeouts by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2372\"\u003evalyala/fasthttp#2372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid race condition for closing the streaming connection at EOF by \u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGive TestClientHeadWithBody a CI-proof read timeout by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2374\"\u003evalyala/fasthttp#2374\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent stale query string after clearing query args by \u003ca href=\"https://github.com/cuishuang\"\u003e\u003ccode\u003e@​cuishuang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2380\"\u003evalyala/fasthttp#2380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(examples): add zero-allocation server example by \u003ca href=\"https://github.com/aabishkaryal\"\u003e\u003ccode\u003e@​aabishkaryal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2362\"\u003evalyala/fasthttp#2362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2384\"\u003evalyala/fasthttp#2384\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/17ba63c6627f56fd77bd54a6ccd51f2e550fc231\"\u003e\u003ccode\u003e17ba63c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/559991a01a7c5d9f93971def53e9dbe80432a484\"\u003e\u003ccode\u003e559991a\u003c/code\u003e\u003c/a\u003e feat(examples): add zero-allocation server example (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2362\"\u003e#2362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/1900e5343bc0a52887a36c6dddb07619809f75b6\"\u003e\u003ccode\u003e1900e53\u003c/code\u003e\u003c/a\u003e fix: prevent stale query string after clearing query args (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2380\"\u003e#2380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fde5d95922be86c50e4f5622e744757dc20c68d9\"\u003e\u003ccode\u003efde5d95\u003c/code\u003e\u003c/a\u003e give TestClientHeadWithBody a CI-proof read timeout (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2374\"\u003e#2374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/395442ae68e51f99cd00e31f3533817d970c81d9\"\u003e\u003ccode\u003e395442a\u003c/code\u003e\u003c/a\u003e fix: keep a chunked requestStream at EOF once the body ends (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2379\"\u003e#2379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c19f9cf9334dd3e248bfab005bc1817e2d84ba39\"\u003e\u003ccode\u003ec19f9cf\u003c/code\u003e\u003c/a\u003e fix: let request timeouts override client timeouts (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2372\"\u003e#2372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c96f600972c6f4a7a30d664257b340ebe9d60124\"\u003e\u003ccode\u003ec96f600\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.28.0 to 2.29.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2375\"\u003e#2375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d47d2c91328f8eb14a56dbcca3c5bae1f996c04d\"\u003e\u003ccode\u003ed47d2c9\u003c/code\u003e\u003c/a\u003e Always stream response bodies when requested (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2373\"\u003e#2373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0d9439b8d369f38bd7356c11da4f7dffb8960642\"\u003e\u003ccode\u003e0d9439b\u003c/code\u003e\u003c/a\u003e Replace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fb3b29ece936327cb25142eae6ea447eba3aa257\"\u003e\u003ccode\u003efb3b29e\u003c/code\u003e\u003c/a\u003e fix: wait for streaming reads before releasing pooled resources (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2353\"\u003e#2353\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.73.0\u0026new-version=1.74.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/mymmrac/telego/pull/371","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mymmrac%2Ftelego/issues/371","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/371/packages"}},{"old_version":"1.73.0","new_version":"1.74.0","update_type":"minor","path":null,"pr_created_at":"2026-09-11T03:52:56.000Z","version_change":"1.73.0 → 1.74.0","issue":{"uuid":"5420148157","node_id":"PR_kwDONyRwr88AAAABDFymDQ","number":204,"state":"closed","title":"build(deps): bump github.com/valyala/fasthttp from 1.73.0 to 1.74.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-09-15T07:46:58.000Z","author_association":null,"state_reason":null,"created_at":"2026-09-11T03:52:56.000Z","updated_at":"2026-09-15T07:47:00.000Z","time_to_close":359642,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.73.0","new_version":"1.74.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.73.0 to 1.74.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.74.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(fasthttpproxy): select proxies from the request scheme by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2334\"\u003evalyala/fasthttp#2334\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: scale short timeouts with testTimeout to reduce -race flakiness by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2339\"\u003evalyala/fasthttp#2339\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: drop zeroed entries from the perIPConnCounter map by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2337\"\u003evalyala/fasthttp#2337\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: skip the unusable per-call file cache in ServeFS by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2338\"\u003evalyala/fasthttp#2338\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: return after a failed Dial instead of dereferencing a nil conn by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2341\"\u003evalyala/fasthttp#2341\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't recycle an idle timestamp its connection still owns by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2342\"\u003evalyala/fasthttp#2342\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject Transfer-Encoding on HTTP/1.0 requests by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2330\"\u003evalyala/fasthttp#2330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eonly treat \u0026quot;//\u0026quot; in URI.Update as an authority after a scheme by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2345\"\u003evalyala/fasthttp#2345\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: consume informational responses before the final response by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2333\"\u003evalyala/fasthttp#2333\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject out-of-range Content-Length instead of wrapping it by \u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: zero-copy chunked body writes via io.WriterTo by \u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: don't close the shutdown done channel twice by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2340\"\u003evalyala/fasthttp#2340\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRename ChunkedBodyWriterTo to BodyWriterTo and use in more places by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2348\"\u003evalyala/fasthttp#2348\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2349\"\u003evalyala/fasthttp#2349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: small read buffer error doesn't match the ignored string anymore by \u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd canonical header lookup by \u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2361\"\u003evalyala/fasthttp#2361\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2360\"\u003evalyala/fasthttp#2360\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix a pooled timer panic and a test data race by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: send / as the path when the request-target is query-only by \u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: try to avoid reallocations while reading zstd compressed requests by \u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add the QUERY method (RFC 10008) by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2358\"\u003evalyala/fasthttp#2358\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: wait for streaming reads before releasing pooled resources by \u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReplace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr by \u003ca href=\"https://github.com/gaby\"\u003e\u003ccode\u003e@​gaby\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2366\"\u003evalyala/fasthttp#2366\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAlways stream response bodies when requested by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2373\"\u003evalyala/fasthttp#2373\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.28.0 to 2.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2375\"\u003evalyala/fasthttp#2375\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: let request timeouts override client timeouts by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2372\"\u003evalyala/fasthttp#2372\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid race condition for closing the streaming connection at EOF by \u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGive TestClientHeadWithBody a CI-proof read timeout by \u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2374\"\u003evalyala/fasthttp#2374\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent stale query string after clearing query args by \u003ca href=\"https://github.com/cuishuang\"\u003e\u003ccode\u003e@​cuishuang\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2380\"\u003evalyala/fasthttp#2380\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(examples): add zero-allocation server example by \u003ca href=\"https://github.com/aabishkaryal\"\u003e\u003ccode\u003e@​aabishkaryal\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2362\"\u003evalyala/fasthttp#2362\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2384\"\u003evalyala/fasthttp#2384\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/lenamonj\"\u003e\u003ccode\u003e@​lenamonj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2343\"\u003evalyala/fasthttp#2343\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sasgas\"\u003e\u003ccode\u003e@​sasgas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2310\"\u003evalyala/fasthttp#2310\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Pedr0Rocha\"\u003e\u003ccode\u003e@​Pedr0Rocha\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2356\"\u003evalyala/fasthttp#2356\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/fzlzjerry\"\u003e\u003ccode\u003e@​fzlzjerry\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2354\"\u003evalyala/fasthttp#2354\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/h2zi\"\u003e\u003ccode\u003e@​h2zi\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2351\"\u003evalyala/fasthttp#2351\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/official-burak\"\u003e\u003ccode\u003e@​official-burak\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2371\"\u003evalyala/fasthttp#2371\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ethercrow\"\u003e\u003ccode\u003e@​ethercrow\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2357\"\u003evalyala/fasthttp#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tbphp\"\u003e\u003ccode\u003e@​tbphp\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2353\"\u003evalyala/fasthttp#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/akshaydeo\"\u003e\u003ccode\u003e@​akshaydeo\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2379\"\u003evalyala/fasthttp#2379\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/17ba63c6627f56fd77bd54a6ccd51f2e550fc231\"\u003e\u003ccode\u003e17ba63c\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2384\"\u003e#2384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/559991a01a7c5d9f93971def53e9dbe80432a484\"\u003e\u003ccode\u003e559991a\u003c/code\u003e\u003c/a\u003e feat(examples): add zero-allocation server example (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2362\"\u003e#2362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/1900e5343bc0a52887a36c6dddb07619809f75b6\"\u003e\u003ccode\u003e1900e53\u003c/code\u003e\u003c/a\u003e fix: prevent stale query string after clearing query args (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2380\"\u003e#2380\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fde5d95922be86c50e4f5622e744757dc20c68d9\"\u003e\u003ccode\u003efde5d95\u003c/code\u003e\u003c/a\u003e give TestClientHeadWithBody a CI-proof read timeout (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2374\"\u003e#2374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/395442ae68e51f99cd00e31f3533817d970c81d9\"\u003e\u003ccode\u003e395442a\u003c/code\u003e\u003c/a\u003e fix: keep a chunked requestStream at EOF once the body ends (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2379\"\u003e#2379\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c19f9cf9334dd3e248bfab005bc1817e2d84ba39\"\u003e\u003ccode\u003ec19f9cf\u003c/code\u003e\u003c/a\u003e fix: let request timeouts override client timeouts (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2372\"\u003e#2372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c96f600972c6f4a7a30d664257b340ebe9d60124\"\u003e\u003ccode\u003ec96f600\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.28.0 to 2.29.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2375\"\u003e#2375\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d47d2c91328f8eb14a56dbcca3c5bae1f996c04d\"\u003e\u003ccode\u003ed47d2c9\u003c/code\u003e\u003c/a\u003e Always stream response bodies when requested (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2373\"\u003e#2373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0d9439b8d369f38bd7356c11da4f7dffb8960642\"\u003e\u003ccode\u003e0d9439b\u003c/code\u003e\u003c/a\u003e Replace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/fb3b29ece936327cb25142eae6ea447eba3aa257\"\u003e\u003ccode\u003efb3b29e\u003c/code\u003e\u003c/a\u003e fix: wait for streaming reads before releasing pooled resources (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2353\"\u003e#2353\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.73.0\u0026new-version=1.74.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Incognito-Coder/tx-ui/pull/204","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Incognito-Coder%2Ftx-ui/issues/204","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/204/packages"}},{"old_version":"1.51.0","new_version":"1.73.0","update_type":"minor","path":null,"pr_created_at":"2026-09-05T18:50:35.000Z","version_change":"1.51.0 → 1.73.0","issue":{"uuid":"5360204612","node_id":"PR_kwDOUPimeM8AAAABCWJ9aQ","number":3,"state":"open","title":"Bump github.com/valyala/fasthttp from 1.51.0 to 1.73.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-09-05T18:50:35.000Z","updated_at":"2026-09-05T18:50:35.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.51.0","new_version":"1.73.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.51.0 to 1.73.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix host comparison in FuzzURIParse by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2313\"\u003evalyala/fasthttp#2313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: avoid redundant scans when parsing request headers by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2312\"\u003evalyala/fasthttp#2312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix temp file leak in SaveMultipartFile on cross-device rename failure by \u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ere-enable forcetypeassert by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: normalize Go test names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2317\"\u003evalyala/fasthttp#2317\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: prefix sentinel error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2319\"\u003evalyala/fasthttp#2319\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pprofhandler): use exact path matching to prevent debug data exposure by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2302\"\u003evalyala/fasthttp#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid following a symlink when writing the FS compressed cache by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2321\"\u003evalyala/fasthttp#2321\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: improve internal interface names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2318\"\u003evalyala/fasthttp#2318\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: lowercase error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2320\"\u003evalyala/fasthttp#2320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce redundant scans and allocations in hot paths by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2322\"\u003evalyala/fasthttp#2322\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate domain and path cookie attribute values on parse by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2315\"\u003evalyala/fasthttp#2315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2328\"\u003evalyala/fasthttp#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2329\"\u003evalyala/fasthttp#2329\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve pre-set status code in NewFastHTTPHandler by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2323\"\u003evalyala/fasthttp#2323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2331\"\u003evalyala/fasthttp#2331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject backslash '..' traversal in fs handler on windows by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2327\"\u003evalyala/fasthttp#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject Windows alternate data stream paths in FS by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2307\"\u003evalyala/fasthttp#2307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2308\"\u003evalyala/fasthttp#2308\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2309\"\u003evalyala/fasthttp#2309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2314\"\u003evalyala/fasthttp#2314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2326\"\u003evalyala/fasthttp#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2324\"\u003evalyala/fasthttp#2324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2325\"\u003evalyala/fasthttp#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.72.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to go1.25 as minimal version by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2205\"\u003evalyala/fasthttp#2205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eclient: add aggregate connection count metrics by \u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2201\"\u003evalyala/fasthttp#2201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(server): return ErrMissingFile when MultipartForm.File is nil by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2260\"\u003evalyala/fasthttp#2260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: FS cache cleaner goroutine leaks when CleanStop is nil (default) (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2218\"\u003e#2218\u003c/a\u003e), \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2247\"\u003e#2247\u003c/a\u003e by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2271\"\u003evalyala/fasthttp#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: data race on pipeline client c.chR during worker drain (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2220\"\u003e#2220\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2272\"\u003evalyala/fasthttp#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: TCPDialer.tcpAddrsClean() goroutine leaks — no shutdown mechanism (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2222\"\u003e#2222\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2273\"\u003evalyala/fasthttp#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: double concurrency counter increment in ServeConn causes counter leak (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2238\"\u003e#2238\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2275\"\u003evalyala/fasthttp#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: body stream leak in compression methods when response is discarded (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2244\"\u003e#2244\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2276\"\u003evalyala/fasthttp#2276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: InMemoryListener deadlock under high concurrency (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2245\"\u003e#2245\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2277\"\u003evalyala/fasthttp#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpadaptor writer leak, data race, and crash on handler panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2246\"\u003e#2246\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2278\"\u003evalyala/fasthttp#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpproxy dialers return nil DialFunc on error, causing panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2248\"\u003e#2248\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2279\"\u003evalyala/fasthttp#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: closeIdleConns TOCTOU race with serveConn idle timestamp (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2250\"\u003e#2250\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2280\"\u003evalyala/fasthttp#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: AppendCert/AppendCertEmbed not thread-safe (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2251\"\u003e#2251\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2281\"\u003evalyala/fasthttp#2281\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2\"\u003e\u003ccode\u003ef83ac8c\u003c/code\u003e\u003c/a\u003e Optimize bounds checks in hot paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f\"\u003e\u003ccode\u003ed9babd9\u003c/code\u003e\u003c/a\u003e fix: reject Windows alternate data stream paths in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2335\"\u003e#2335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd\"\u003e\u003ccode\u003ee7cf856\u003c/code\u003e\u003c/a\u003e reject backslash '..' traversal in fs handler on windows (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e\"\u003e\u003ccode\u003e165a4c8\u003c/code\u003e\u003c/a\u003e Improve AppendUnquotedArg with optimised bounds check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1\"\u003e\u003ccode\u003e7a1349d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c\"\u003e\u003ccode\u003ef1ad91d\u003c/code\u003e\u003c/a\u003e fix: preserve pre-set status code in NewFastHTTPHandler (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2323\"\u003e#2323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347\"\u003e\u003ccode\u003e5f57d8f\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6 to 7 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d\"\u003e\u003ccode\u003e3aa940d\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40\"\u003e\u003ccode\u003e7a012e9\u003c/code\u003e\u003c/a\u003e validate domain and path cookie attribute values on parse (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2315\"\u003e#2315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03\"\u003e\u003ccode\u003e9cf733f\u003c/code\u003e\u003c/a\u003e perf: reduce redundant scans and allocations in hot paths (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2322\"\u003e#2322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.51.0...v1.73.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.51.0\u0026new-version=1.73.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/ampfit2-lab/ampfit2-lab--gofiber--fiber/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ampfit2-lab%2Fampfit2-lab--gofiber--fiber/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"}},{"old_version":"1.51.0","new_version":"1.73.0","update_type":"minor","path":null,"pr_created_at":"2026-09-05T05:59:36.000Z","version_change":"1.51.0 → 1.73.0","issue":{"uuid":"5356008023","node_id":"PR_kwDOUMn2CM8AAAABCS9fUQ","number":3,"state":"closed","title":"deps: bump the go-minor-and-patch group across 1 directory with 13 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-09-05T07:36:30.000Z","author_association":null,"state_reason":null,"created_at":"2026-09-05T05:59:36.000Z","updated_at":"2026-09-05T07:36:37.000Z","time_to_close":5814,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps: bump","group_name":"go-minor-and-patch","update_count":13,"packages":[{"name":"github.com/gofiber/fiber/v2","old_version":"2.52.12","new_version":"2.52.15","repository_url":"https://github.com/gofiber/fiber"},{"name":"github.com/prometheus/client_golang","old_version":"1.20.5","new_version":"1.24.1","repository_url":"https://github.com/prometheus/client_golang"},{"name":"github.com/valyala/fasthttp","old_version":"1.51.0","new_version":"1.73.0","repository_url":"https://github.com/valyala/fasthttp"},{"name":"github.com/mattn/go-colorable","old_version":"0.1.13","new_version":"0.1.15","repository_url":"https://github.com/mattn/go-colorable"},{"name":"github.com/mattn/go-isatty","old_version":"0.0.20","new_version":"0.0.24","repository_url":"https://github.com/mattn/go-isatty"},{"name":"github.com/mattn/go-runewidth","old_version":"0.0.16","new_version":"0.0.29","repository_url":"https://github.com/mattn/go-runewidth"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-minor-and-patch group with 6 updates in the /gateway directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/gofiber/fiber/v2](https://github.com/gofiber/fiber) | `2.52.12` | `2.52.15` |\n| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.5` | `1.24.1` |\n| [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) | `1.51.0` | `1.73.0` |\n| [github.com/mattn/go-colorable](https://github.com/mattn/go-colorable) | `0.1.13` | `0.1.15` |\n| [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty) | `0.0.20` | `0.0.24` |\n| [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.16` | `0.0.29` |\n\n\nUpdates `github.com/gofiber/fiber/v2` from 2.52.12 to 2.52.15\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/gofiber/fiber/releases\"\u003egithub.com/gofiber/fiber/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.52.15\u003c/h2\u003e\n\u003ch1\u003e🐛 Bug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eidempotency: release MemoryLock keys on unlock \u003ca href=\"https://redirect.github.com/gofiber/fiber/issues/4569\"\u003e#4569\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/gofiber/fiber/compare/v2.52.14...v2.52.15\"\u003ehttps://github.com/gofiber/fiber/compare/v2.52.14...v2.52.15\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.52.14\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ebackport BalancerForward X-Real-IP overwrite fix to v2 by \u003ca href=\"https://github.com/terraincognita07\"\u003e\u003ccode\u003e@​terraincognita07\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/gofiber/fiber/pull/4495\"\u003egofiber/fiber#4495\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/terraincognita07\"\u003e\u003ccode\u003e@​terraincognita07\u003c/code\u003e\u003c/a\u003e made their first contribution\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/gofiber/fiber/compare/v2.52.13...v2.52.14\"\u003ehttps://github.com/gofiber/fiber/compare/v2.52.13...v2.52.14\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.52.13\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEscape HTML output in Ctx.Format by \u003ca href=\"https://github.com/gaby\"\u003e\u003ccode\u003e@​gaby\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/gofiber/fiber/pull/4232\"\u003egofiber/fiber#4232\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/gofiber/fiber/compare/v2.52.12...v2.52.13\"\u003ehttps://github.com/gofiber/fiber/compare/v2.52.12...v2.52.13\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/5c7a80b327c130e93041e569e685825f804d5f15\"\u003e\u003ccode\u003e5c7a80b\u003c/code\u003e\u003c/a\u003e Update app.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/a76710f0dbb6d5d8f7beb5dfeec5d24371ec4c4f\"\u003e\u003ccode\u003ea76710f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/gofiber/fiber/issues/4569\"\u003e#4569\u003c/a\u003e from gofiber/fix/v2-idempotency-memorylock-leak\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/4d1617b6930dba14e1458d41662c0dc0cdcc0b87\"\u003e\u003ccode\u003e4d1617b\u003c/code\u003e\u003c/a\u003e fix(idempotency): release MemoryLock keys on unlock (GHSA-c5qf-v26h-rp5r)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/bdc46e73e60b6eca430ea2e2bfe1b417771d52a7\"\u003e\u003ccode\u003ebdc46e7\u003c/code\u003e\u003c/a\u003e ci(v2): remove the benchmark workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/35f9baf392349e6d8bf8dd50f33f25d3326a52b3\"\u003e\u003ccode\u003e35f9baf\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/gofiber/fiber/issues/4504\"\u003e#4504\u003c/a\u003e from gofiber/claude/v2-remove-release-drafter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/b747589d261b50314cbbba602f9c496e455981b7\"\u003e\u003ccode\u003eb747589\u003c/code\u003e\u003c/a\u003e ci: remove release drafter from v2 branch\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/a74500f6335abc020023d3581a46ba56a893edc3\"\u003e\u003ccode\u003ea74500f\u003c/code\u003e\u003c/a\u003e Update fiber package version to 2.52.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/33c9501288ab47a429c8b5e701493f0c3c0af37d\"\u003e\u003ccode\u003e33c9501\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/gofiber/fiber/issues/4495\"\u003e#4495\u003c/a\u003e from terraincognita07/backport-v2-balancer-forward-x...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/1b071e1ff0b69028f9b8747e4518dac049b59bab\"\u003e\u003ccode\u003e1b071e1\u003c/code\u003e\u003c/a\u003e Merge branch 'v2' into backport-v2-balancer-forward-x-real-ip\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gofiber/fiber/commit/67721213ceee19fd2f9717d1cb8b5c5ef7fec97a\"\u003e\u003ccode\u003e6772121\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/gofiber/fiber/issues/4498\"\u003e#4498\u003c/a\u003e from gofiber/fix/v2-parser-decoder-global-leak\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/gofiber/fiber/compare/v2.52.12...v2.52.15\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/prometheus/client_golang` from 1.20.5 to 1.24.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prometheus/client_golang/releases\"\u003egithub.com/prometheus/client_golang's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.24.1 / 2026-07-23\u003c/h2\u003e\n\u003cp\u003eSmall bugfix release for promhttp.\u003c/p\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cp\u003e[BUGFIX] promhttp: Fix panic on requests with nil URL. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2065\"\u003e#2065\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/prometheus/client_golang/compare/v1.24.0...v1.24.1\"\u003ehttps://github.com/prometheus/client_golang/compare/v1.24.0...v1.24.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.24.0 - 2026-07-20\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1862\"\u003e#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated \u003ccode\u003emodel.NameValidationScheme\u003c/code\u003e global. Default behavior is unchanged; code that set \u003ccode\u003eNameValidationScheme = LegacyValidation\u003c/code\u003e no longer gets legacy enforcement at metric, label, and push-grouping construction. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2051\"\u003e#2051\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] api/prometheus/v1: Support matchers (\u003ccode\u003ematches[]\u003c/code\u003e parameter) in \u003ccode\u003eRules\u003c/code\u003e method (\u003ccode\u003eRules(ctx context.Context, matches []string) (RulesResult, error)\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1843\"\u003e#1843\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] api/prometheus/v1: Refactor \u003ccode\u003eLabelNames\u003c/code\u003e method to return \u003ccode\u003emodel.LabelNames\u003c/code\u003e instead of \u003ccode\u003e[]string\u003c/code\u003e for consistency across the API. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1850\"\u003e#1850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] exp/api/remote: Simplify \u003ccode\u003eStore\u003c/code\u003e interface, rename \u003ccode\u003eHandler\u003c/code\u003e to \u003ccode\u003eWriteHandler\u003c/code\u003e, and encapsulate write response handling. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1855\"\u003e#1855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] prometheus: Add new Go 1.26 runtime metrics (\u003ccode\u003e/sched/goroutines-created:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/not-in-go:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/runnable:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/running:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/waiting:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/threads/total:threads\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1942\"\u003e#1942\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] prometheus: Add \u003ccode\u003eWithUnit(unit string)\u003c/code\u003e option and explicit OpenMetrics unit support in \u003ccode\u003eCounterOpts\u003c/code\u003e, \u003ccode\u003eGaugeOpts\u003c/code\u003e, \u003ccode\u003eSummaryOpts\u003c/code\u003e, and \u003ccode\u003eHistogramOpts\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1392\"\u003e#1392\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] prometheus: Expose descriptor construction error through public \u003ccode\u003eErr()\u003c/code\u003e method on \u003ccode\u003eDesc\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1902\"\u003e#1902\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] promhttp: Add opt-in \u003ccode\u003eHandlerOpts.CoalesceGather\u003c/code\u003e to deduplicate concurrent \u003ccode\u003eGather\u003c/code\u003e calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1969\"\u003e#1969\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] promhttp: HTTP handlers created by \u003ccode\u003epromhttp\u003c/code\u003e package now support metrics filtering by providing one or more \u003ccode\u003ename[]\u003c/code\u003e query parameters. The default behavior when none are provided remains the same, returning all metrics. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1925\"\u003e#1925\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] api/prometheus/v1: Add query formatting endpoint support (\u003ccode\u003e/format_query\u003c/code\u003e) and \u003ccode\u003eFormatQuery(ctx context.Context, query string) (string, error)\u003c/code\u003e method. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1846\"\u003e#1846\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1856\"\u003e#1856\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] api/prometheus/v1: Add support for \u003ccode\u003e/status/tsdb/blocks\u003c/code\u003e endpoint via \u003ccode\u003eTSDBBlocks(ctx context.Context) ([]TSDBBlock, error)\u003c/code\u003e method. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1896\"\u003e#1896\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] exp/api/remote: Export \u003ccode\u003eBackoffConfig\u003c/code\u003e to allow customization when using \u003ccode\u003eWithAPIBackoff\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1895\"\u003e#1895\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] exp/api/remote: Add \u003ccode\u003eRetryCallBack\u003c/code\u003e to allow custom logging or handling on retry attempts in the remote write client. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1888\"\u003e#1888\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1890\"\u003e#1890\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1860\"\u003e#1860\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] api: Use cloned \u003ccode\u003ehttp.DefaultTransport\u003c/code\u003e when constructing default HTTP clients to prevent accidental mutations of shared global transport state. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1885\"\u003e#1885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] prometheus: Recover from collector panics during \u003ccode\u003eGather()\u003c/code\u003e and return an error instead of crashing the process. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1961\"\u003e#1961\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] prometheus: Fix \u003ccode\u003ecpu-seconds\u003c/code\u003e unit suffix handling for metric \u003ccode\u003ego_cpu_classes_gc_mark_assist_cpu_seconds\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1991\"\u003e#1991\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] promhttp: \u003ccode\u003eInstrumentHandlerDuration\u003c/code\u003e and \u003ccode\u003eInstrumentHandlerCounter\u003c/code\u003e no longer panic when given an observer/counter that does not implement \u003ccode\u003eExemplarObserver\u003c/code\u003e/\u003ccode\u003eExemplarAdder\u003c/code\u003e (e.g. a \u003ccode\u003eSummaryVec\u003c/code\u003e). The exemplar is dropped and the value is recorded via the plain \u003ccode\u003eObserve\u003c/code\u003e/\u003ccode\u003eAdd\u003c/code\u003e path, matching the safe-cast already used by \u003ccode\u003eTimer.ObserveDurationWithExemplar\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2005\"\u003e#2005\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] api/prometheus/v1: Fall back to \u003ccode\u003eGET\u003c/code\u003e requests when \u003ccode\u003ePOST\u003c/code\u003e requests return \u003ccode\u003e403 Forbidden\u003c/code\u003e or method not allowed. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2030\"\u003e#2030\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] api: Respect context cancellation inside \u003ccode\u003ehttpClient.Do\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1971\"\u003e#1971\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1889\"\u003e#1889\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1917\"\u003e#1917\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1927\"\u003e#1927\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump github.com/prometheus/procfs from 0.16.1 to 0.17.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1839\"\u003eprometheus/client_golang#1839\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1838\"\u003eprometheus/client_golang#1838\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eprometheus/collectors: use godoc link for runtime/metrics supported metrics by \u003ca href=\"https://github.com/xieyuschen\"\u003e\u003ccode\u003e@​xieyuschen\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1844\"\u003eprometheus/client_golang#1844\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix doc typo by \u003ca href=\"https://github.com/torrca\"\u003e\u003ccode\u003e@​torrca\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1849\"\u003eprometheus/client_golang#1849\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMerge release-1.23 into main by \u003ca href=\"https://github.com/vesari\"\u003e\u003ccode\u003e@​vesari\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1851\"\u003eprometheus/client_golang#1851\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.2 to 3.29.5 in the github-actions group by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1852\"\u003eprometheus/client_golang#1852\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRefactor LabelNames to return model.LabelNames type for consistency by \u003ca href=\"https://github.com/yshngg\"\u003e\u003ccode\u003e@​yshngg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1850\"\u003eprometheus/client_golang#1850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eremote: simplified Store interface; renamed Handler to WriteHandler by \u003ca href=\"https://github.com/bwplotka\"\u003e\u003ccode\u003e@​bwplotka\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1855\"\u003eprometheus/client_golang#1855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(api/prometheus): add format_query endpoint for query formatting by \u003ca href=\"https://github.com/yshngg\"\u003e\u003ccode\u003e@​yshngg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1846\"\u003eprometheus/client_golang#1846\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(api): add FormatQuery method to Prometheus v1 API by \u003ca href=\"https://github.com/yshngg\"\u003e\u003ccode\u003e@​yshngg\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_golang/pull/1856\"\u003eprometheus/client_golang#1856\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md\"\u003egithub.com/prometheus/client_golang's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.24.1 / 2026-07-23\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[BUGFIX] promhttp: Fix panic on requests with nil URL. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2065\"\u003e#2065\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.24.0 / 2026-07-20\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1862\"\u003e#1862\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated \u003ccode\u003emodel.NameValidationScheme\u003c/code\u003e global. Default behavior is unchanged; code that set \u003ccode\u003eNameValidationScheme = LegacyValidation\u003c/code\u003e no longer gets legacy enforcement at metric, label, and push-grouping construction. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2051\"\u003e#2051\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] api/prometheus/v1: Support matchers (\u003ccode\u003ematches[]\u003c/code\u003e parameter) in \u003ccode\u003eRules\u003c/code\u003e method (\u003ccode\u003eRules(ctx context.Context, matches []string) (RulesResult, error)\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1843\"\u003e#1843\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] api/prometheus/v1: Refactor \u003ccode\u003eLabelNames\u003c/code\u003e method to return \u003ccode\u003emodel.LabelNames\u003c/code\u003e instead of \u003ccode\u003e[]string\u003c/code\u003e for consistency across the API. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1850\"\u003e#1850\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[CHANGE] exp/api/remote: Simplify \u003ccode\u003eStore\u003c/code\u003e interface, rename \u003ccode\u003eHandler\u003c/code\u003e to \u003ccode\u003eWriteHandler\u003c/code\u003e, and encapsulate write response handling. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1855\"\u003e#1855\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] prometheus: Add new Go 1.26 runtime metrics (\u003ccode\u003e/sched/goroutines-created:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/not-in-go:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/runnable:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/running:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/goroutines/waiting:goroutines\u003c/code\u003e, \u003ccode\u003e/sched/threads/total:threads\u003c/code\u003e). \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1942\"\u003e#1942\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] prometheus: Add \u003ccode\u003eWithUnit(unit string)\u003c/code\u003e option and explicit OpenMetrics unit support in \u003ccode\u003eCounterOpts\u003c/code\u003e, \u003ccode\u003eGaugeOpts\u003c/code\u003e, \u003ccode\u003eSummaryOpts\u003c/code\u003e, and \u003ccode\u003eHistogramOpts\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1392\"\u003e#1392\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] prometheus: Expose descriptor construction error through public \u003ccode\u003eErr()\u003c/code\u003e method on \u003ccode\u003eDesc\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1902\"\u003e#1902\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] promhttp: Add opt-in \u003ccode\u003eHandlerOpts.CoalesceGather\u003c/code\u003e to deduplicate concurrent \u003ccode\u003eGather\u003c/code\u003e calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1969\"\u003e#1969\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] promhttp: HTTP handlers created by \u003ccode\u003epromhttp\u003c/code\u003e package now support metrics filtering by providing one or more \u003ccode\u003ename[]\u003c/code\u003e query parameters. The default behavior when none are provided remains the same, returning all metrics. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1925\"\u003e#1925\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] api/prometheus/v1: Add query formatting endpoint support (\u003ccode\u003e/format_query\u003c/code\u003e) and \u003ccode\u003eFormatQuery(ctx context.Context, query string) (string, error)\u003c/code\u003e method. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1846\"\u003e#1846\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1856\"\u003e#1856\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] api/prometheus/v1: Add support for \u003ccode\u003e/status/tsdb/blocks\u003c/code\u003e endpoint via \u003ccode\u003eTSDBBlocks(ctx context.Context) ([]TSDBBlock, error)\u003c/code\u003e method. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1896\"\u003e#1896\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] exp/api/remote: Export \u003ccode\u003eBackoffConfig\u003c/code\u003e to allow customization when using \u003ccode\u003eWithAPIBackoff\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1895\"\u003e#1895\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] exp/api/remote: Add \u003ccode\u003eRetryCallBack\u003c/code\u003e to allow custom logging or handling on retry attempts in the remote write client. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1888\"\u003e#1888\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1890\"\u003e#1890\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1860\"\u003e#1860\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] api: Use cloned \u003ccode\u003ehttp.DefaultTransport\u003c/code\u003e when constructing default HTTP clients to prevent accidental mutations of shared global transport state. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1885\"\u003e#1885\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] prometheus: Recover from collector panics during \u003ccode\u003eGather()\u003c/code\u003e and return an error instead of crashing the process. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1961\"\u003e#1961\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] prometheus: Fix \u003ccode\u003ecpu-seconds\u003c/code\u003e unit suffix handling for metric \u003ccode\u003ego_cpu_classes_gc_mark_assist_cpu_seconds\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1991\"\u003e#1991\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] promhttp: \u003ccode\u003eInstrumentHandlerDuration\u003c/code\u003e and \u003ccode\u003eInstrumentHandlerCounter\u003c/code\u003e no longer panic when given an observer/counter that does not implement \u003ccode\u003eExemplarObserver\u003c/code\u003e/\u003ccode\u003eExemplarAdder\u003c/code\u003e (e.g. a \u003ccode\u003eSummaryVec\u003c/code\u003e). The exemplar is dropped and the value is recorded via the plain \u003ccode\u003eObserve\u003c/code\u003e/\u003ccode\u003eAdd\u003c/code\u003e path, matching the safe-cast already used by \u003ccode\u003eTimer.ObserveDurationWithExemplar\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2005\"\u003e#2005\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] api/prometheus/v1: Fall back to \u003ccode\u003eGET\u003c/code\u003e requests when \u003ccode\u003ePOST\u003c/code\u003e requests return \u003ccode\u003e403 Forbidden\u003c/code\u003e or method not allowed. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2030\"\u003e#2030\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] api: Respect context cancellation inside \u003ccode\u003ehttpClient.Do\u003c/code\u003e. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1971\"\u003e#1971\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1889\"\u003e#1889\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1917\"\u003e#1917\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1927\"\u003e#1927\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.23.2 / 2025-09-05\u003c/h2\u003e\n\u003cp\u003eThis release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).\nThere are no functional changes.\u003c/p\u003e\n\u003ch2\u003e1.23.1 / 2025-09-04\u003c/h2\u003e\n\u003cp\u003eThis release is made to be compatible with a backwards incompatible API change\nin prometheus/common v0.66.0. There are no functional changes.\u003c/p\u003e\n\u003ch2\u003e1.23.0 / 2025-07-30\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1812\"\u003e#1812\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1766\"\u003e#1766\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[FEATURE] Add exemplars for native histograms \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1686\"\u003e#1686\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] exp/api: Bubble up status code from writeResponse \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1823\"\u003e#1823\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1833\"\u003e#1833\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[BUGFIX] exp/api: client prompt return on context cancellation \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1729\"\u003e#1729\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/d6087ee482e06716ee21dc03819432d5d40f72db\"\u003e\u003ccode\u003ed6087ee\u003c/code\u003e\u003c/a\u003e release: cut v1.24.1 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2076\"\u003e#2076\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/48dd383f94cc36bb0179724166383effd9f64847\"\u003e\u003ccode\u003e48dd383\u003c/code\u003e\u003c/a\u003e Cut v1.24.0 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2061\"\u003e#2061\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/a7253054383fd6702034c16194117d37727cd5fc\"\u003e\u003ccode\u003ea725305\u003c/code\u003e\u003c/a\u003e Cut v1.24.0-rc.0 (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2058\"\u003e#2058\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/77c584f2501bf3726bb39b83a89b70c0e6f9ab0c\"\u003e\u003ccode\u003e77c584f\u003c/code\u003e\u003c/a\u003e build(deps): update all Go dependencies in all go.mod files (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2059\"\u003e#2059\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/78262a77b89922f94a19ecd25eaeb849fb58f2cc\"\u003e\u003ccode\u003e78262a7\u003c/code\u003e\u003c/a\u003e feat(promhttp): add CoalesceGather option to deduplicate concurrent Gather ca...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/34e9a7fe186a7a3ff47694f127d44d5641ff388f\"\u003e\u003ccode\u003e34e9a7f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2055\"\u003e#2055\u003c/a\u003e from prombot/repo_sync\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/43749bc83131a4af24527351aabb47dc58590c85\"\u003e\u003ccode\u003e43749bc\u003c/code\u003e\u003c/a\u003e Update common Prometheus files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/de192175ccd6f6d4894cd9ceb804712c982e4958\"\u003e\u003ccode\u003ede19217\u003c/code\u003e\u003c/a\u003e examples: improve simple main.go example (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/1999\"\u003e#1999\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/20355eb4487c108a6ed54d9ebc6893bd649c10d0\"\u003e\u003ccode\u003e20355eb\u003c/code\u003e\u003c/a\u003e fix: correct typos in comments and test error messages (\u003ca href=\"https://redirect.github.com/prometheus/client_golang/issues/2049\"\u003e#2049\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_golang/commit/4cd2d3a57eccc893f00e23eb765f62e970e61f33\"\u003e\u003ccode\u003e4cd2d3a\u003c/code\u003e\u003c/a\u003e test: fix two flaky tests (darwin start_time regex, memstats HeapReleased dri...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/prometheus/client_golang/compare/v1.20.5...v1.24.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/prometheus/client_model` from 0.6.1 to 0.6.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/prometheus/client_model/releases\"\u003egithub.com/prometheus/client_model's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/89\"\u003eprometheus/client_model#89\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.33.0 to 1.34.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/88\"\u003eprometheus/client_model#88\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/90\"\u003eprometheus/client_model#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.34.0 to 1.34.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/91\"\u003eprometheus/client_model#91\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/92\"\u003eprometheus/client_model#92\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/93\"\u003eprometheus/client_model#93\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.34.1 to 1.34.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/94\"\u003eprometheus/client_model#94\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/95\"\u003eprometheus/client_model#95\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/96\"\u003eprometheus/client_model#96\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/97\"\u003eprometheus/client_model#97\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/98\"\u003eprometheus/client_model#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/99\"\u003eprometheus/client_model#99\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/100\"\u003eprometheus/client_model#100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/101\"\u003eprometheus/client_model#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/103\"\u003eprometheus/client_model#103\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate google.golang.org/protobuf to v1.35.1 by \u003ca href=\"https://github.com/beorn7\"\u003e\u003ccode\u003e@​beorn7\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/104\"\u003eprometheus/client_model#104\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/105\"\u003eprometheus/client_model#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/106\"\u003eprometheus/client_model#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.35.1 to 1.35.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/107\"\u003eprometheus/client_model#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/108\"\u003eprometheus/client_model#108\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.35.2 to 1.36.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/109\"\u003eprometheus/client_model#109\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/110\"\u003eprometheus/client_model#110\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.36.1 to 1.36.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/111\"\u003eprometheus/client_model#111\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/112\"\u003eprometheus/client_model#112\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.36.4 to 1.36.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/113\"\u003eprometheus/client_model#113\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/114\"\u003eprometheus/client_model#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/115\"\u003eprometheus/client_model#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSynchronize common files from prometheus/prometheus by \u003ca href=\"https://github.com/prombot\"\u003e\u003ccode\u003e@​prombot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/116\"\u003eprometheus/client_model#116\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump google.golang.org/protobuf from 1.36.5 to 1.36.6 by \u003ca href=\"https://github.com/SuperQ\"\u003e\u003ccode\u003e@​SuperQ\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/prometheus/client_model/pull/119\"\u003eprometheus/client_model#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/prometheus/client_model/compare/v0.6.1...v0.6.2\"\u003ehttps://github.com/prometheus/client_model/compare/v0.6.1...v0.6.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/eb136e513d419e0c31ad750922f0a6f7675c2dee\"\u003e\u003ccode\u003eeb136e5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/prometheus/client_model/issues/119\"\u003e#119\u003c/a\u003e from prometheus/superq/google.golang.org/protobuf\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/bf7f2ca4b601c87da3e4bf28e64c5386511a0bfc\"\u003e\u003ccode\u003ebf7f2ca\u003c/code\u003e\u003c/a\u003e Update golanci-lint to v2.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/7e9b56c6a570a6dca83ff2d2c425b6dafd7e7338\"\u003e\u003ccode\u003e7e9b56c\u003c/code\u003e\u003c/a\u003e Bump google.golang.org/protobuf from 1.36.5 to 1.36.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/ef699ce1c4dd0fe87d4ed44d5457cea731ad92b0\"\u003e\u003ccode\u003eef699ce\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/prometheus/client_model/issues/116\"\u003e#116\u003c/a\u003e from prometheus/repo_sync\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/bf8b12ebfaf1a573f88c60e0d8bbda7d2225ad94\"\u003e\u003ccode\u003ebf8b12e\u003c/code\u003e\u003c/a\u003e Update common Prometheus files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/5b939685734c5009fb5cdbb2572cf650ec0f0147\"\u003e\u003ccode\u003e5b93968\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/prometheus/client_model/issues/115\"\u003e#115\u003c/a\u003e from prometheus/repo_sync\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/ae83ddc062246f4acd9341798ad68f9488c7540c\"\u003e\u003ccode\u003eae83ddc\u003c/code\u003e\u003c/a\u003e Update common Prometheus files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/afe0b21197864688348dfd1cfd3010afd1ebb485\"\u003e\u003ccode\u003eafe0b21\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/prometheus/client_model/issues/114\"\u003e#114\u003c/a\u003e from prometheus/repo_sync\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/75e1daffce92961f7ccf81f69d368aaa984ea411\"\u003e\u003ccode\u003e75e1daf\u003c/code\u003e\u003c/a\u003e Update common Prometheus files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/prometheus/client_model/commit/73608e20e866edadc15d12cf3cdb441721dd475c\"\u003e\u003ccode\u003e73608e2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/prometheus/client_model/issues/113\"\u003e#113\u003c/a\u003e from prometheus/dependabot/go_modules/google.golang.o...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/prometheus/client_model/compare/v0.6.1...v0.6.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/valyala/fasthttp` from 1.51.0 to 1.73.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix host comparison in FuzzURIParse by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2313\"\u003evalyala/fasthttp#2313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: avoid redundant scans when parsing request headers by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2312\"\u003evalyala/fasthttp#2312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix temp file leak in SaveMultipartFile on cross-device rename failure by \u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ere-enable forcetypeassert by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: normalize Go test names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2317\"\u003evalyala/fasthttp#2317\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: prefix sentinel error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2319\"\u003evalyala/fasthttp#2319\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pprofhandler): use exact path matching to prevent debug data exposure by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2302\"\u003evalyala/fasthttp#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid following a symlink when writing the FS compressed cache by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2321\"\u003evalyala/fasthttp#2321\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: improve internal interface names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2318\"\u003evalyala/fasthttp#2318\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: lowercase error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2320\"\u003evalyala/fasthttp#2320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce redundant scans and allocations in hot paths by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2322\"\u003evalyala/fasthttp#2322\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate domain and path cookie attribute values on parse by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2315\"\u003evalyala/fasthttp#2315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2328\"\u003evalyala/fasthttp#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2329\"\u003evalyala/fasthttp#2329\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve pre-set status code in NewFastHTTPHandler by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2323\"\u003evalyala/fasthttp#2323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2331\"\u003evalyala/fasthttp#2331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject backslash '..' traversal in fs handler on windows by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2327\"\u003evalyala/fasthttp#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject Windows alternate data stream paths in FS by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2307\"\u003evalyala/fasthttp#2307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2308\"\u003evalyala/fasthttp#2308\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2309\"\u003evalyala/fasthttp#2309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2314\"\u003evalyala/fasthttp#2314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2326\"\u003evalyala/fasthttp#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2324\"\u003evalyala/fasthttp#2324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2325\"\u003evalyala/fasthttp#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.72.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to go1.25 as minimal version by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2205\"\u003evalyala/fasthttp#2205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eclient: add aggregate connection count metrics by \u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2201\"\u003evalyala/fasthttp#2201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(server): return ErrMissingFile when MultipartForm.File is nil by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2260\"\u003evalyala/fasthttp#2260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: FS cache cleaner goroutine leaks when CleanStop is nil (default) (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2218\"\u003e#2218\u003c/a\u003e), \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2247\"\u003e#2247\u003c/a\u003e by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2271\"\u003evalyala/fasthttp#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: data race on pipeline client c.chR during worker drain (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2220\"\u003e#2220\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2272\"\u003evalyala/fasthttp#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: TCPDialer.tcpAddrsClean() goroutine leaks — no shutdown mechanism (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2222\"\u003e#2222\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2273\"\u003evalyala/fasthttp#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: double concurrency counter increment in ServeConn causes counter leak (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2238\"\u003e#2238\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2275\"\u003evalyala/fasthttp#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: body stream leak in compression methods when response is discarded (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2244\"\u003e#2244\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2276\"\u003evalyala/fasthttp#2276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: InMemoryListener deadlock under high concurrency (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2245\"\u003e#2245\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2277\"\u003evalyala/fasthttp#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpadaptor writer leak, data race, and crash on handler panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2246\"\u003e#2246\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2278\"\u003evalyala/fasthttp#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpproxy dialers return nil DialFunc on error, causing panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2248\"\u003e#2248\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2279\"\u003evalyala/fasthttp#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: closeIdleConns TOCTOU race with serveConn idle timestamp (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2250\"\u003e#2250\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2280\"\u003evalyala/fasthttp#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: AppendCert/AppendCertEmbed not thread-safe (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2251\"\u003e#2251\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2281\"\u003evalyala/fasthttp#2281\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2\"\u003e\u003ccode\u003ef83ac8c\u003c/code\u003e\u003c/a\u003e Optimize bounds checks in hot paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f\"\u003e\u003ccode\u003ed9babd9\u003c/code\u003e\u003c/a\u003e fix: reject Windows alternate data stream paths in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2335\"\u003e#2335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd\"\u003e\u003ccode\u003ee7cf856\u003c/code\u003e\u003c/a\u003e reject backslash '..' traversal in fs handler on windows (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e\"\u003e\u003ccode\u003e165a4c8\u003c/code\u003e\u003c/a\u003e Improve AppendUnquotedArg with optimised bounds check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1\"\u003e\u003ccode\u003e7a1349d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c\"\u003e\u003ccode\u003ef1ad91d\u003c/code\u003e\u003c/a\u003e fix: preserve pre-set status code in NewFastHTTPHandler (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2323\"\u003e#2323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347\"\u003e\u003ccode\u003e5f57d8f\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6 to 7 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d\"\u003e\u003ccode\u003e3aa940d\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40\"\u003e\u003ccode\u003e7a012e9\u003c/code\u003e\u003c/a\u003e validate domain and path cookie attribute values on parse (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2315\"\u003e#2315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03\"\u003e\u003ccode\u003e9cf733f\u003c/code\u003e\u003c/a\u003e perf: reduce redundant scans and allocations in hot paths (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2322\"\u003e#2322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.51.0...v1.73.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/andybalholm/brotli` from 1.1.0 to 1.2.2\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/785aba538b2118979d2c573eccb287c4da157faf\"\u003e\u003ccode\u003e785aba5\u003c/code\u003e\u003c/a\u003e reuse hgroups\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/b797a3535cbdd227ce3520cb0dfe01d83c2eeda9\"\u003e\u003ccode\u003eb797a35\u003c/code\u003e\u003c/a\u003e reuse block_type_trees\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/0675b242cf45dcdd51ed6fb600876b570bea329b\"\u003e\u003ccode\u003e0675b24\u003c/code\u003e\u003c/a\u003e Remove unnecessary nil checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/946c3e4071198a86d6c037ffcd138968dd4fc68e\"\u003e\u003ccode\u003e946c3e4\u003c/code\u003e\u003c/a\u003e matchfinder: verify candidate matches against source data\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/014fb9c9e8f7e87e7996309844260b1f8d890528\"\u003e\u003ccode\u003e014fb9c\u003c/code\u003e\u003c/a\u003e Add Bargain3 MatchFinder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/deb905c53b5bcb9fa2d20ccb66890fa941c883cf\"\u003e\u003ccode\u003edeb905c\u003c/code\u003e\u003c/a\u003e Trio: vary hash table sizes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/b84bddd64ee4c9ca21b98009bc212e14fd7b5bd4\"\u003e\u003ccode\u003eb84bddd\u003c/code\u003e\u003c/a\u003e M4: fix updating chain for long history\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/a7ad41202f4421be4299ea5c911b41396c6170bf\"\u003e\u003ccode\u003ea7ad412\u003c/code\u003e\u003c/a\u003e Bargain1 \u0026amp; Bargain2: check for matches less often\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/6c6ca8c2a86a6448ef2b7986e6c8ecf5e8a9e29c\"\u003e\u003ccode\u003e6c6ca8c\u003c/code\u003e\u003c/a\u003e Add Bargain1 MatchFinder\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/andybalholm/brotli/commit/01c485509d026342053502adc6c3b692dcbf2003\"\u003e\u003ccode\u003e01c4855\u003c/code\u003e\u003c/a\u003e Add Bargain2 MatchFinder\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/andybalholm/brotli/compare/v1.1.0...v1.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/klauspost/compress` from 1.17.9 to 1.19.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/klauspost/compress/releases\"\u003egithub.com/klauspost/compress's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.19.1\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ezstd: Validate SnappyConverter literal copies by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1170\"\u003eklauspost/compress#1170\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eflate: use \u003ccode\u003ePeek\u003c/code\u003e instead of \u003ccode\u003eReadByte\u003c/code\u003e for the \u003ccode\u003ebufio.Reader\u003c/code\u003e decode path by \u003ca href=\"https://github.com/joechenrh\"\u003e\u003ccode\u003e@​joechenrh\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1169\"\u003eklauspost/compress#1169\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ezstd: bump avo pin, regenerate arm64 asm by \u003ca href=\"https://github.com/lizthegrey\"\u003e\u003ccode\u003e@​lizthegrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1167\"\u003eklauspost/compress#1167\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/joechenrh\"\u003e\u003ccode\u003e@​joechenrh\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1169\"\u003eklauspost/compress#1169\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/klauspost/compress/compare/v1.19.0...v1.19.1\"\u003ehttps://github.com/klauspost/compress/compare/v1.19.0...v1.19.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.19.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ezstd: Add true concurrent stream encoding by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1136\"\u003eklauspost/compress#1136\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ezstd: arm64 decoder asm by \u003ca href=\"https://github.com/lizthegrey\"\u003e\u003ccode\u003e@​lizthegrey\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1160\"\u003eklauspost/compress#1160\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ezstd: avoid unused BuildDict encoder allocation by \u003ca href=\"https://github.com/snissn\"\u003e\u003ccode\u003e@​snissn\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1147\"\u003eklauspost/compress#1147\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eflate: Add inflate checkpoints by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1154\"\u003eklauspost/compress#1154\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esnappy/s2: Limit length of varint in \u003ccode\u003edecodedLen\u003c/code\u003e by \u003ca href=\"https://github.com/eustas\"\u003e\u003ccode\u003e@​eustas\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1148\"\u003eklauspost/compress#1148\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egzhttp: match qvalue parameter case-insensitively (RFC 7231) by \u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1149\"\u003eklauspost/compress#1149\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ezip: add NameDecoder callback for legacy encoding rewrite by \u003ca href=\"https://github.com/SAY-5\"\u003e\u003ccode\u003e@​SAY-5\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1150\"\u003eklauspost/compress#1150\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ehuff0: Allow building tables from histogram. by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1155\"\u003eklauspost/compress#1155\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ehuff0: Allow building table from oversized histogram. by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1156\"\u003eklauspost/compress#1156\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003es2sx: Clean symlink targets by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1163\"\u003eklauspost/compress#1163\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/snissn\"\u003e\u003ccode\u003e@​snissn\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1147\"\u003eklauspost/compress#1147\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/eustas\"\u003e\u003ccode\u003e@​eustas\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1148\"\u003eklauspost/compress#1148\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1149\"\u003eklauspost/compress#1149\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/SAY-5\"\u003e\u003ccode\u003e@​SAY-5\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1150\"\u003eklauspost/compress#1150\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/HNO3Miracle\"\u003e\u003ccode\u003e@​HNO3Miracle\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1165\"\u003eklauspost/compress#1165\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/klauspost/compress/compare/v1.18.6...v1.19.0\"\u003ehttps://github.com/klauspost/compress/compare/v1.18.6...v1.19.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.18.7\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix s2.NewDict OOB read.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSecurity release without other changes.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/klauspost/compress/compare/v1.18.6...v1.18.7\"\u003ehttps://github.com/klauspost/compress/compare/v1.18.6...v1.18.7\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.18.6\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003es2: Fix amd64 stack frame corruption by \u003ca href=\"https://github.com/klauspost\"\u003e\u003ccode\u003e@​klauspost\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1145\"\u003eklauspost/compress#1145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egzhttp: Canonicalize ETag header by \u003ca href=\"https://github.com/justinmayhew\"\u003e\u003ccode\u003e@​justinmayhew\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1139\"\u003eklauspost/compress#1139\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: pool hash tables in Go encode paths to reduce allocations by \u003ca href=\"https://github.com/huynhanx03\"\u003e\u003ccode\u003e@​huynhanx03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1143\"\u003eklauspost/compress#1143\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/justinmayhew\"\u003e\u003ccode\u003e@​justinmayhew\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1139\"\u003eklauspost/compress#1139\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/huynhanx03\"\u003e\u003ccode\u003e@​huynhanx03\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1143\"\u003eklauspost/compress#1143\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/thaJeztah\"\u003e\u003ccode\u003e@​thaJeztah\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/klauspost/compress/pull/1144\"\u003eklauspost/compress#1144\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/2602f4afea09fe72f2b58d4ed04d43a6047a0131\"\u003e\u003ccode\u003e2602f4a\u003c/code\u003e\u003c/a\u003e Update changelog for version 1.19.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/983acec6dacb98c0d721ca53eb5a904c3c6bec67\"\u003e\u003ccode\u003e983acec\u003c/code\u003e\u003c/a\u003e add defensive checks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/9960386c58450bc4ae5fd67411c394b6a7f23c4c\"\u003e\u003ccode\u003e9960386\u003c/code\u003e\u003c/a\u003e zstd: Validate SnappyConverter literal copies (\u003ca href=\"https://redirect.github.com/klauspost/compress/issues/1170\"\u003e#1170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/e29d4d389f0e7806e1e84392d0c43453a5048a0f\"\u003e\u003ccode\u003ee29d4d3\u003c/code\u003e\u003c/a\u003e flate: use \u003ccode\u003ePeek\u003c/code\u003e instead of \u003ccode\u003eReadByte\u003c/code\u003e for the \u003ccode\u003ebufio.Reader\u003c/code\u003e decode path (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/c0bbc84762b7d178fe7b1e3a75140793179e9e37\"\u003e\u003ccode\u003ec0bbc84\u003c/code\u003e\u003c/a\u003e zstd: bump avo pin, regenerate arm64 asm (\u003ca href=\"https://redirect.github.com/klauspost/compress/issues/1167\"\u003e#1167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/efdb6ed96c4b5d23f9bd6c3e739414789c871a9d\"\u003e\u003ccode\u003eefdb6ed\u003c/code\u003e\u003c/a\u003e build(deps): bump the github-actions group with 6 updates (\u003ca href=\"https://redirect.github.com/klauspost/compress/issues/1166\"\u003e#1166\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/f0953f938f77977980c3b9f8c09eec06f2e88a69\"\u003e\u003ccode\u003ef0953f9\u003c/code\u003e\u003c/a\u003e flate: fix buffer formatting in tests (\u003ca href=\"https://redirect.github.com/klauspost/compress/issues/1165\"\u003e#1165\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/ab2e3cc7ab261c8f287639760d8532afb7125425\"\u003e\u003ccode\u003eab2e3cc\u003c/code\u003e\u003c/a\u003e zstd: Add arm64 decoder asm (\u003ca href=\"https://redirect.github.com/klauspost/compress/issues/1160\"\u003e#1160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/bb2723d55de85353fd5a1817cbc382997a6a75aa\"\u003e\u003ccode\u003ebb2723d\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536\"\u003e\u003ccode\u003e539243b\u003c/code\u003e\u003c/a\u003e s2sx: Clean symlink targets (\u003ca href=\"https://redirect.github.com/klauspost/compress/issues/1163\"\u003e#1163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/klauspost/compress/compare/v1.17.9...v1.19.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/mattn/go-colorable` from 0.1.13 to 0.1.15\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/8bf39a204f13f0cfcf86ab9b297c3d6e0668e54a\"\u003e\u003ccode\u003e8bf39a2\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mattn/go-colorable/issues/78\"\u003e#78\u003c/a\u003e from mattn/windows-write-fastpath\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/d7a88e01afba9f8b52844aa5a9cf3572de1dd526\"\u003e\u003ccode\u003ed7a88e0\u003c/code\u003e\u003c/a\u003e Bump checkout to v4 and setup-go to v5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/4dd1c6d9cadd77ffcc9f7b6198b11ac276a69fd9\"\u003e\u003ccode\u003e4dd1c6d\u003c/code\u003e\u003c/a\u003e Update CI matrix to Go 1.24-1.26\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/09158f853728212e5a01cb8d455777c8d3862e01\"\u003e\u003ccode\u003e09158f8\u003c/code\u003e\u003c/a\u003e Fast path for plaintext writes and cache text attribute on Windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/171d5b40f7bf2f0b9e320924b52fd68926b10d1d\"\u003e\u003ccode\u003e171d5b4\u003c/code\u003e\u003c/a\u003e Add Windows writer benchmarks\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/74f8ed12817631baea5d0912bca21e09eee04d9d\"\u003e\u003ccode\u003e74f8ed1\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mattn/go-colorable/issues/72\"\u003e#72\u003c/a\u003e from alexandear/fix-test-typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/1f71342c1ee78c126bcb69cd26ed8c2be7e016b3\"\u003e\u003ccode\u003e1f71342\u003c/code\u003e\u003c/a\u003e update deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/4503567acadfc8967131e7708f241b77589eb28b\"\u003e\u003ccode\u003e4503567\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/mattn/go-colorable/issues/73\"\u003e#73\u003c/a\u003e from whereswaldon/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/40e70a5010a4844b4c1030a31cebdd52b2e96589\"\u003e\u003ccode\u003e40e70a5\u003c/code\u003e\u003c/a\u003e [Windows] harden system DLL loading\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-colorable/commit/50c5b535976d400c961beb3e147096209f5be59a\"\u003e\u003ccode\u003e50c5b53\u003c/code\u003e\u003c/a\u003e Fix typo in TestNonColorableNil\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mattn/go-colorable/compare/v0.1.13...v0.1.15\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/mattn/go-isatty` from 0.0.20 to 0.0.24\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/c44dc0b9c702c76577fdb7898032969e0611efc2\"\u003e\u003ccode\u003ec44dc0b\u003c/code\u003e\u003c/a\u003e Use TIOCGWINSZ instead of TCGETS to detect terminals (\u003ca href=\"https://redirect.github.com/mattn/go-isatty/issues/97\"\u003e#97\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/4bc9b75fc8738b40f30b420ad17c00e8a151c3bf\"\u003e\u003ccode\u003e4bc9b75\u003c/code\u003e\u003c/a\u003e Lower go directive to 1.20 for Windows 7 users (\u003ca href=\"https://redirect.github.com/mattn/go-isatty/issues/94\"\u003e#94\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/4e061da6e858a19c96c6e88818c69c88d7d8b07e\"\u003e\u003ccode\u003e4e061da\u003c/code\u003e\u003c/a\u003e add stub for haiku os (\u003ca href=\"https://redirect.github.com/mattn/go-isatty/issues/93\"\u003e#93\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/9a68506e239465d922dc18c0cd331c49b411fdb2\"\u003e\u003ccode\u003e9a68506\u003c/code\u003e\u003c/a\u003e Fix isCygwinPipeName to accept Windows 7 trailing suffix (\u003ca href=\"https://redirect.github.com/mattn/go-isatty/issues/90\"\u003e#90\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/4237fb15069af3284b50e5d91bcdd5403e584605\"\u003e\u003ccode\u003e4237fb1\u003c/code\u003e\u003c/a\u003e Update Go test matrix to current versions (1.24-1.26)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/433c12b4c9fae46e4a42ac50d6d716325dc1dfba\"\u003e\u003ccode\u003e433c12b\u003c/code\u003e\u003c/a\u003e Update GitHub Actions to latest versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/1cf5589a67b03170478da248b107c10185ec558c\"\u003e\u003ccode\u003e1cf5589\u003c/code\u003e\u003c/a\u003e Add wasip1 and wasip2 to build constraints in isatty_others.go\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/1237245029e6b02f17caa944c946c6f51d384e8b\"\u003e\u003ccode\u003e1237245\u003c/code\u003e\u003c/a\u003e Update dependencies: go 1.15 -\u0026gt; 1.21, golang.org/x/sys v0.6.0 -\u0026gt; v0.28.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/ac9c88d7970a4a6690f8560b6ff20b595beb4e34\"\u003e\u003ccode\u003eac9c88d\u003c/code\u003e\u003c/a\u003e Fix typo in comment: undocomented -\u0026gt; undocumented\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattn/go-isatty/commit/8b7124ee585ccf9c0b3b3246b7c6a27bce54ab6f\"\u003e\u003ccode\u003e8b7124e\u003c/code\u003e\u003c/a\u003e Add availability check for NtQueryObject in init\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mattn/go-isatty/compare/v0.0.20...v0.0.24\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/mattn/go-runewidth` from...\n\n_Description has been truncated_","html_url":"https://github.com/Life-Experimentalist/CogniGate/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Life-Experimentalist%2FCogniGate/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"}},{"old_version":"1.71.0","new_version":"1.73.0","update_type":"minor","path":null,"pr_created_at":"2026-08-24T11:12:28.000Z","version_change":"1.71.0 → 1.73.0","issue":{"uuid":"5234063067","node_id":"PR_kwDOTBc-gc8AAAABAychfA","number":87,"state":"closed","title":"chore: Bump github.com/valyala/fasthttp from 1.71.0 to 1.73.0","user":"dependabot[bot]","labels":["dependencies","go","stale"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-09-05T01:58:54.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-24T11:12:28.000Z","updated_at":"2026-09-05T01:59:04.000Z","time_to_close":1003586,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore: Bump","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.71.0","new_version":"1.73.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.71.0 to 1.73.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix host comparison in FuzzURIParse by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2313\"\u003evalyala/fasthttp#2313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: avoid redundant scans when parsing request headers by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2312\"\u003evalyala/fasthttp#2312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix temp file leak in SaveMultipartFile on cross-device rename failure by \u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ere-enable forcetypeassert by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: normalize Go test names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2317\"\u003evalyala/fasthttp#2317\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: prefix sentinel error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2319\"\u003evalyala/fasthttp#2319\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pprofhandler): use exact path matching to prevent debug data exposure by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2302\"\u003evalyala/fasthttp#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid following a symlink when writing the FS compressed cache by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2321\"\u003evalyala/fasthttp#2321\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: improve internal interface names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2318\"\u003evalyala/fasthttp#2318\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: lowercase error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2320\"\u003evalyala/fasthttp#2320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce redundant scans and allocations in hot paths by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2322\"\u003evalyala/fasthttp#2322\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate domain and path cookie attribute values on parse by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2315\"\u003evalyala/fasthttp#2315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2328\"\u003evalyala/fasthttp#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2329\"\u003evalyala/fasthttp#2329\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve pre-set status code in NewFastHTTPHandler by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2323\"\u003evalyala/fasthttp#2323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2331\"\u003evalyala/fasthttp#2331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject backslash '..' traversal in fs handler on windows by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2327\"\u003evalyala/fasthttp#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject Windows alternate data stream paths in FS by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2307\"\u003evalyala/fasthttp#2307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2308\"\u003evalyala/fasthttp#2308\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2309\"\u003evalyala/fasthttp#2309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2314\"\u003evalyala/fasthttp#2314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2326\"\u003evalyala/fasthttp#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2324\"\u003evalyala/fasthttp#2324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2325\"\u003evalyala/fasthttp#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.72.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to go1.25 as minimal version by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2205\"\u003evalyala/fasthttp#2205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eclient: add aggregate connection count metrics by \u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2201\"\u003evalyala/fasthttp#2201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(server): return ErrMissingFile when MultipartForm.File is nil by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2260\"\u003evalyala/fasthttp#2260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: FS cache cleaner goroutine leaks when CleanStop is nil (default) (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2218\"\u003e#2218\u003c/a\u003e), \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2247\"\u003e#2247\u003c/a\u003e by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2271\"\u003evalyala/fasthttp#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: data race on pipeline client c.chR during worker drain (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2220\"\u003e#2220\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2272\"\u003evalyala/fasthttp#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: TCPDialer.tcpAddrsClean() goroutine leaks — no shutdown mechanism (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2222\"\u003e#2222\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2273\"\u003evalyala/fasthttp#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: double concurrency counter increment in ServeConn causes counter leak (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2238\"\u003e#2238\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2275\"\u003evalyala/fasthttp#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: body stream leak in compression methods when response is discarded (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2244\"\u003e#2244\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2276\"\u003evalyala/fasthttp#2276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: InMemoryListener deadlock under high concurrency (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2245\"\u003e#2245\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2277\"\u003evalyala/fasthttp#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpadaptor writer leak, data race, and crash on handler panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2246\"\u003e#2246\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2278\"\u003evalyala/fasthttp#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpproxy dialers return nil DialFunc on error, causing panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2248\"\u003e#2248\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2279\"\u003evalyala/fasthttp#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: closeIdleConns TOCTOU race with serveConn idle timestamp (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2250\"\u003e#2250\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2280\"\u003evalyala/fasthttp#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: AppendCert/AppendCertEmbed not thread-safe (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2251\"\u003e#2251\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2281\"\u003evalyala/fasthttp#2281\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2\"\u003e\u003ccode\u003ef83ac8c\u003c/code\u003e\u003c/a\u003e Optimize bounds checks in hot paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f\"\u003e\u003ccode\u003ed9babd9\u003c/code\u003e\u003c/a\u003e fix: reject Windows alternate data stream paths in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2335\"\u003e#2335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd\"\u003e\u003ccode\u003ee7cf856\u003c/code\u003e\u003c/a\u003e reject backslash '..' traversal in fs handler on windows (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e\"\u003e\u003ccode\u003e165a4c8\u003c/code\u003e\u003c/a\u003e Improve AppendUnquotedArg with optimised bounds check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1\"\u003e\u003ccode\u003e7a1349d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c\"\u003e\u003ccode\u003ef1ad91d\u003c/code\u003e\u003c/a\u003e fix: preserve pre-set status code in NewFastHTTPHandler (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2323\"\u003e#2323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347\"\u003e\u003ccode\u003e5f57d8f\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6 to 7 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d\"\u003e\u003ccode\u003e3aa940d\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40\"\u003e\u003ccode\u003e7a012e9\u003c/code\u003e\u003c/a\u003e validate domain and path cookie attribute values on parse (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2315\"\u003e#2315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03\"\u003e\u003ccode\u003e9cf733f\u003c/code\u003e\u003c/a\u003e perf: reduce redundant scans and allocations in hot paths (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2322\"\u003e#2322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.71.0...v1.73.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.71.0\u0026new-version=1.73.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/swami086/coder/pull/87","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/swami086%2Fcoder/issues/87","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/87/packages"}},{"old_version":"1.69.0","new_version":"1.73.0","update_type":"minor","path":"the fasthttp-modules group","pr_created_at":"2026-08-12T06:15:40.000Z","version_change":"1.69.0 → 1.73.0","issue":{"uuid":"5127821573","node_id":"PR_kwDOT1-9Vc795SB6","number":3,"state":"open","title":"build(deps): bump github.com/valyala/fasthttp from 1.69.0 to 1.73.0 in the fasthttp-modules group","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-08-12T06:15:40.000Z","updated_at":"2026-08-12T06:15:41.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.69.0","new_version":"1.73.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":"the fasthttp-modules group","ecosystem":"go"},"body":"Bumps the fasthttp-modules group with 1 update: [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp).\n\nUpdates `github.com/valyala/fasthttp` from 1.69.0 to 1.73.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix host comparison in FuzzURIParse by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2313\"\u003evalyala/fasthttp#2313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: avoid redundant scans when parsing request headers by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2312\"\u003evalyala/fasthttp#2312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix temp file leak in SaveMultipartFile on cross-device rename failure by \u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ere-enable forcetypeassert by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: normalize Go test names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2317\"\u003evalyala/fasthttp#2317\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: prefix sentinel error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2319\"\u003evalyala/fasthttp#2319\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pprofhandler): use exact path matching to prevent debug data exposure by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2302\"\u003evalyala/fasthttp#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid following a symlink when writing the FS compressed cache by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2321\"\u003evalyala/fasthttp#2321\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: improve internal interface names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2318\"\u003evalyala/fasthttp#2318\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: lowercase error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2320\"\u003evalyala/fasthttp#2320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce redundant scans and allocations in hot paths by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2322\"\u003evalyala/fasthttp#2322\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate domain and path cookie attribute values on parse by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2315\"\u003evalyala/fasthttp#2315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2328\"\u003evalyala/fasthttp#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2329\"\u003evalyala/fasthttp#2329\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve pre-set status code in NewFastHTTPHandler by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2323\"\u003evalyala/fasthttp#2323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2331\"\u003evalyala/fasthttp#2331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject backslash '..' traversal in fs handler on windows by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2327\"\u003evalyala/fasthttp#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject Windows alternate data stream paths in FS by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2307\"\u003evalyala/fasthttp#2307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2308\"\u003evalyala/fasthttp#2308\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2309\"\u003evalyala/fasthttp#2309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2314\"\u003evalyala/fasthttp#2314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2326\"\u003evalyala/fasthttp#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2324\"\u003evalyala/fasthttp#2324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2325\"\u003evalyala/fasthttp#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.72.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to go1.25 as minimal version by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2205\"\u003evalyala/fasthttp#2205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eclient: add aggregate connection count metrics by \u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2201\"\u003evalyala/fasthttp#2201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(server): return ErrMissingFile when MultipartForm.File is nil by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2260\"\u003evalyala/fasthttp#2260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: FS cache cleaner goroutine leaks when CleanStop is nil (default) (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2218\"\u003e#2218\u003c/a\u003e), \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2247\"\u003e#2247\u003c/a\u003e by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2271\"\u003evalyala/fasthttp#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: data race on pipeline client c.chR during worker drain (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2220\"\u003e#2220\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2272\"\u003evalyala/fasthttp#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: TCPDialer.tcpAddrsClean() goroutine leaks — no shutdown mechanism (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2222\"\u003e#2222\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2273\"\u003evalyala/fasthttp#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: double concurrency counter increment in ServeConn causes counter leak (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2238\"\u003e#2238\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2275\"\u003evalyala/fasthttp#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: body stream leak in compression methods when response is discarded (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2244\"\u003e#2244\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2276\"\u003evalyala/fasthttp#2276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: InMemoryListener deadlock under high concurrency (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2245\"\u003e#2245\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2277\"\u003evalyala/fasthttp#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpadaptor writer leak, data race, and crash on handler panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2246\"\u003e#2246\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2278\"\u003evalyala/fasthttp#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpproxy dialers return nil DialFunc on error, causing panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2248\"\u003e#2248\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2279\"\u003evalyala/fasthttp#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: closeIdleConns TOCTOU race with serveConn idle timestamp (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2250\"\u003e#2250\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2280\"\u003evalyala/fasthttp#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: AppendCert/AppendCertEmbed not thread-safe (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2251\"\u003e#2251\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2281\"\u003evalyala/fasthttp#2281\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2\"\u003e\u003ccode\u003ef83ac8c\u003c/code\u003e\u003c/a\u003e Optimize bounds checks in hot paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f\"\u003e\u003ccode\u003ed9babd9\u003c/code\u003e\u003c/a\u003e fix: reject Windows alternate data stream paths in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2335\"\u003e#2335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd\"\u003e\u003ccode\u003ee7cf856\u003c/code\u003e\u003c/a\u003e reject backslash '..' traversal in fs handler on windows (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e\"\u003e\u003ccode\u003e165a4c8\u003c/code\u003e\u003c/a\u003e Improve AppendUnquotedArg with optimised bounds check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1\"\u003e\u003ccode\u003e7a1349d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c\"\u003e\u003ccode\u003ef1ad91d\u003c/code\u003e\u003c/a\u003e fix: preserve pre-set status code in NewFastHTTPHandler (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2323\"\u003e#2323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347\"\u003e\u003ccode\u003e5f57d8f\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6 to 7 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d\"\u003e\u003ccode\u003e3aa940d\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40\"\u003e\u003ccode\u003e7a012e9\u003c/code\u003e\u003c/a\u003e validate domain and path cookie attribute values on parse (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2315\"\u003e#2315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03\"\u003e\u003ccode\u003e9cf733f\u003c/code\u003e\u003c/a\u003e perf: reduce redundant scans and allocations in hot paths (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2322\"\u003e#2322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.69.0...v1.73.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.69.0\u0026new-version=1.73.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/s1044025646-collab/go-bugfix-fiber-001/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/s1044025646-collab%2Fgo-bugfix-fiber-001/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"}},{"old_version":"1.63.0","new_version":"1.73.0","update_type":"minor","path":null,"pr_created_at":"2026-08-03T11:09:08.000Z","version_change":"1.63.0 → 1.73.0","issue":{"uuid":"5049118416","node_id":"PR_kwDOIPpCRM759wkp","number":847,"state":"closed","title":"chore: bump github.com/valyala/fasthttp from 1.63.0 to 1.73.0","user":"dependabot[bot]","labels":["stale","dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-08-14T02:23:42.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-03T11:09:08.000Z","updated_at":"2026-08-14T02:23:52.000Z","time_to_close":918874,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.63.0","new_version":"1.73.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.63.0 to 1.73.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix host comparison in FuzzURIParse by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2313\"\u003evalyala/fasthttp#2313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: avoid redundant scans when parsing request headers by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2312\"\u003evalyala/fasthttp#2312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix temp file leak in SaveMultipartFile on cross-device rename failure by \u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ere-enable forcetypeassert by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: normalize Go test names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2317\"\u003evalyala/fasthttp#2317\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: prefix sentinel error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2319\"\u003evalyala/fasthttp#2319\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pprofhandler): use exact path matching to prevent debug data exposure by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2302\"\u003evalyala/fasthttp#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid following a symlink when writing the FS compressed cache by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2321\"\u003evalyala/fasthttp#2321\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: improve internal interface names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2318\"\u003evalyala/fasthttp#2318\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: lowercase error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2320\"\u003evalyala/fasthttp#2320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce redundant scans and allocations in hot paths by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2322\"\u003evalyala/fasthttp#2322\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate domain and path cookie attribute values on parse by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2315\"\u003evalyala/fasthttp#2315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2328\"\u003evalyala/fasthttp#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2329\"\u003evalyala/fasthttp#2329\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve pre-set status code in NewFastHTTPHandler by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2323\"\u003evalyala/fasthttp#2323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2331\"\u003evalyala/fasthttp#2331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject backslash '..' traversal in fs handler on windows by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2327\"\u003evalyala/fasthttp#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject Windows alternate data stream paths in FS by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2307\"\u003evalyala/fasthttp#2307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2308\"\u003evalyala/fasthttp#2308\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2309\"\u003evalyala/fasthttp#2309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2314\"\u003evalyala/fasthttp#2314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2326\"\u003evalyala/fasthttp#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2324\"\u003evalyala/fasthttp#2324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2325\"\u003evalyala/fasthttp#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.72.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to go1.25 as minimal version by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2205\"\u003evalyala/fasthttp#2205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eclient: add aggregate connection count metrics by \u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2201\"\u003evalyala/fasthttp#2201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(server): return ErrMissingFile when MultipartForm.File is nil by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2260\"\u003evalyala/fasthttp#2260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: FS cache cleaner goroutine leaks when CleanStop is nil (default) (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2218\"\u003e#2218\u003c/a\u003e), \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2247\"\u003e#2247\u003c/a\u003e by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2271\"\u003evalyala/fasthttp#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: data race on pipeline client c.chR during worker drain (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2220\"\u003e#2220\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2272\"\u003evalyala/fasthttp#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: TCPDialer.tcpAddrsClean() goroutine leaks — no shutdown mechanism (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2222\"\u003e#2222\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2273\"\u003evalyala/fasthttp#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: double concurrency counter increment in ServeConn causes counter leak (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2238\"\u003e#2238\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2275\"\u003evalyala/fasthttp#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: body stream leak in compression methods when response is discarded (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2244\"\u003e#2244\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2276\"\u003evalyala/fasthttp#2276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: InMemoryListener deadlock under high concurrency (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2245\"\u003e#2245\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2277\"\u003evalyala/fasthttp#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpadaptor writer leak, data race, and crash on handler panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2246\"\u003e#2246\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2278\"\u003evalyala/fasthttp#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpproxy dialers return nil DialFunc on error, causing panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2248\"\u003e#2248\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2279\"\u003evalyala/fasthttp#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: closeIdleConns TOCTOU race with serveConn idle timestamp (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2250\"\u003e#2250\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2280\"\u003evalyala/fasthttp#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: AppendCert/AppendCertEmbed not thread-safe (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2251\"\u003e#2251\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2281\"\u003evalyala/fasthttp#2281\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2\"\u003e\u003ccode\u003ef83ac8c\u003c/code\u003e\u003c/a\u003e Optimize bounds checks in hot paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f\"\u003e\u003ccode\u003ed9babd9\u003c/code\u003e\u003c/a\u003e fix: reject Windows alternate data stream paths in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2335\"\u003e#2335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd\"\u003e\u003ccode\u003ee7cf856\u003c/code\u003e\u003c/a\u003e reject backslash '..' traversal in fs handler on windows (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e\"\u003e\u003ccode\u003e165a4c8\u003c/code\u003e\u003c/a\u003e Improve AppendUnquotedArg with optimised bounds check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1\"\u003e\u003ccode\u003e7a1349d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c\"\u003e\u003ccode\u003ef1ad91d\u003c/code\u003e\u003c/a\u003e fix: preserve pre-set status code in NewFastHTTPHandler (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2323\"\u003e#2323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347\"\u003e\u003ccode\u003e5f57d8f\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6 to 7 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d\"\u003e\u003ccode\u003e3aa940d\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40\"\u003e\u003ccode\u003e7a012e9\u003c/code\u003e\u003c/a\u003e validate domain and path cookie attribute values on parse (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2315\"\u003e#2315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03\"\u003e\u003ccode\u003e9cf733f\u003c/code\u003e\u003c/a\u003e perf: reduce redundant scans and allocations in hot paths (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2322\"\u003e#2322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.63.0...v1.73.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.63.0\u0026new-version=1.73.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/officialmofabs/codeserver/pull/847","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/officialmofabs%2Fcodeserver/issues/847","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/847/packages"}},{"old_version":"1.72.0","new_version":"1.73.0","update_type":"minor","path":null,"pr_created_at":"2026-07-28T15:03:55.000Z","version_change":"1.72.0 → 1.73.0","issue":{"uuid":"5000024723","node_id":"PR_kwDOQZ5VeM73g5x-","number":138,"state":"open","title":"chore(deps): bump the gomod-all group with 2 updates","user":"dependabot[bot]","labels":["automerge","chore","dependencies","dependabot","gomod","size/S","prod-dependency","minor-update"],"assignees":["mrz1836"],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-28T15:03:55.000Z","updated_at":"2026-07-28T15:04:19.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"gomod-all","update_count":2,"packages":[{"name":"github.com/bsv-blockchain/go-sdk","old_version":"1.3.1","new_version":"1.3.2","repository_url":"https://github.com/bsv-blockchain/go-sdk"},{"name":"github.com/valyala/fasthttp","old_version":"1.72.0","new_version":"1.73.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps the gomod-all group with 2 updates: [github.com/bsv-blockchain/go-sdk](https://github.com/bsv-blockchain/go-sdk) and [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp).\n\nUpdates `github.com/bsv-blockchain/go-sdk` from 1.3.1 to 1.3.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/bsv-blockchain/go-sdk/releases\"\u003egithub.com/bsv-blockchain/go-sdk's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease v1.3.2\u003c/h2\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e6963ca59c4756f867279af3ad5512ae4ebbd1ba0 fix(auth): make concurrent requests on one AuthFetch/session safe (\u003ca href=\"https://redirect.github.com/bsv-blockchain/go-sdk/issues/338\"\u003e#338\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ea581e407ca7de41c2eb5b18e2961c69925479cec sync(ci): update actions/checkout to v7.0.1 in 20 workflows (\u003ca href=\"https://redirect.github.com/bsv-blockchain/go-sdk/issues/337\"\u003e#337\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bsv-blockchain/go-sdk/commit/6963ca59c4756f867279af3ad5512ae4ebbd1ba0\"\u003e\u003ccode\u003e6963ca5\u003c/code\u003e\u003c/a\u003e fix(auth): make concurrent requests on one AuthFetch/session safe (\u003ca href=\"https://redirect.github.com/bsv-blockchain/go-sdk/issues/338\"\u003e#338\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/bsv-blockchain/go-sdk/commit/a581e407ca7de41c2eb5b18e2961c69925479cec\"\u003e\u003ccode\u003ea581e40\u003c/code\u003e\u003c/a\u003e sync(ci): update actions/checkout to v7.0.1 in 20 workflows (\u003ca href=\"https://redirect.github.com/bsv-blockchain/go-sdk/issues/337\"\u003e#337\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/bsv-blockchain/go-sdk/compare/v1.3.1...v1.3.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/valyala/fasthttp` from 1.72.0 to 1.73.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix host comparison in FuzzURIParse by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2313\"\u003evalyala/fasthttp#2313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: avoid redundant scans when parsing request headers by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2312\"\u003evalyala/fasthttp#2312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix temp file leak in SaveMultipartFile on cross-device rename failure by \u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ere-enable forcetypeassert by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: normalize Go test names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2317\"\u003evalyala/fasthttp#2317\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: prefix sentinel error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2319\"\u003evalyala/fasthttp#2319\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pprofhandler): use exact path matching to prevent debug data exposure by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2302\"\u003evalyala/fasthttp#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid following a symlink when writing the FS compressed cache by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2321\"\u003evalyala/fasthttp#2321\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: improve internal interface names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2318\"\u003evalyala/fasthttp#2318\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: lowercase error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2320\"\u003evalyala/fasthttp#2320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce redundant scans and allocations in hot paths by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2322\"\u003evalyala/fasthttp#2322\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate domain and path cookie attribute values on parse by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2315\"\u003evalyala/fasthttp#2315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2328\"\u003evalyala/fasthttp#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2329\"\u003evalyala/fasthttp#2329\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve pre-set status code in NewFastHTTPHandler by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2323\"\u003evalyala/fasthttp#2323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2331\"\u003evalyala/fasthttp#2331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject backslash '..' traversal in fs handler on windows by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2327\"\u003evalyala/fasthttp#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject Windows alternate data stream paths in FS by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2307\"\u003evalyala/fasthttp#2307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2308\"\u003evalyala/fasthttp#2308\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2309\"\u003evalyala/fasthttp#2309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2314\"\u003evalyala/fasthttp#2314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2326\"\u003evalyala/fasthttp#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2324\"\u003evalyala/fasthttp#2324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2325\"\u003evalyala/fasthttp#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2\"\u003e\u003ccode\u003ef83ac8c\u003c/code\u003e\u003c/a\u003e Optimize bounds checks in hot paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f\"\u003e\u003ccode\u003ed9babd9\u003c/code\u003e\u003c/a\u003e fix: reject Windows alternate data stream paths in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2335\"\u003e#2335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd\"\u003e\u003ccode\u003ee7cf856\u003c/code\u003e\u003c/a\u003e reject backslash '..' traversal in fs handler on windows (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e\"\u003e\u003ccode\u003e165a4c8\u003c/code\u003e\u003c/a\u003e Improve AppendUnquotedArg with optimised bounds check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1\"\u003e\u003ccode\u003e7a1349d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c\"\u003e\u003ccode\u003ef1ad91d\u003c/code\u003e\u003c/a\u003e fix: preserve pre-set status code in NewFastHTTPHandler (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2323\"\u003e#2323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347\"\u003e\u003ccode\u003e5f57d8f\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6 to 7 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d\"\u003e\u003ccode\u003e3aa940d\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40\"\u003e\u003ccode\u003e7a012e9\u003c/code\u003e\u003c/a\u003e validate domain and path cookie attribute values on parse (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2315\"\u003e#2315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03\"\u003e\u003ccode\u003e9cf733f\u003c/code\u003e\u003c/a\u003e perf: reduce redundant scans and allocations in hot paths (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2322\"\u003e#2322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/bsv-blockchain/go-chaintracks/pull/138","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/bsv-blockchain%2Fgo-chaintracks/issues/138","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/138/packages"}},{"old_version":"1.72.0","new_version":"1.73.0","update_type":"minor","path":null,"pr_created_at":"2026-07-28T04:03:59.000Z","version_change":"1.72.0 → 1.73.0","issue":{"uuid":"4994762599","node_id":"PR_kwDOJ6JaVc73P0BF","number":156,"state":"closed","title":"chore(deps): bump github.com/valyala/fasthttp from 1.72.0 to 1.73.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-09-11T04:04:15.000Z","author_association":null,"state_reason":null,"created_at":"2026-07-28T04:03:59.000Z","updated_at":"2026-09-11T04:04:17.000Z","time_to_close":3888016,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.72.0","new_version":"1.73.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.72.0 to 1.73.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.73.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003etest: fix host comparison in FuzzURIParse by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2313\"\u003evalyala/fasthttp#2313\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: avoid redundant scans when parsing request headers by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2312\"\u003evalyala/fasthttp#2312\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix temp file leak in SaveMultipartFile on cross-device rename failure by \u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ere-enable forcetypeassert by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etest: normalize Go test names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2317\"\u003evalyala/fasthttp#2317\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: prefix sentinel error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2319\"\u003evalyala/fasthttp#2319\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(pprofhandler): use exact path matching to prevent debug data exposure by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2302\"\u003evalyala/fasthttp#2302\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eavoid following a symlink when writing the FS compressed cache by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2321\"\u003evalyala/fasthttp#2321\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erefactor: improve internal interface names by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2318\"\u003evalyala/fasthttp#2318\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: lowercase error strings by \u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2320\"\u003evalyala/fasthttp#2320\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eperf: reduce redundant scans and allocations in hot paths by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2322\"\u003evalyala/fasthttp#2322\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate domain and path cookie attribute values on parse by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2315\"\u003evalyala/fasthttp#2315\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2328\"\u003evalyala/fasthttp#2328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/setup-go from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2329\"\u003evalyala/fasthttp#2329\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: preserve pre-set status code in NewFastHTTPHandler by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2323\"\u003evalyala/fasthttp#2323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2331\"\u003evalyala/fasthttp#2331\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject backslash '..' traversal in fs handler on windows by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2327\"\u003evalyala/fasthttp#2327\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: reject Windows alternate data stream paths in FS by \u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2307\"\u003evalyala/fasthttp#2307\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2308\"\u003evalyala/fasthttp#2308\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2309\"\u003evalyala/fasthttp#2309\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2314\"\u003evalyala/fasthttp#2314\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2326\"\u003evalyala/fasthttp#2326\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2324\"\u003evalyala/fasthttp#2324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2325\"\u003evalyala/fasthttp#2325\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/itxaiohanglover\"\u003e\u003ccode\u003e@​itxaiohanglover\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2311\"\u003evalyala/fasthttp#2311\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Harshal96\"\u003e\u003ccode\u003e@​Harshal96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2316\"\u003evalyala/fasthttp#2316\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dev-willbird1936\"\u003e\u003ccode\u003e@​dev-willbird1936\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2335\"\u003evalyala/fasthttp#2335\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2\"\u003e\u003ccode\u003ef83ac8c\u003c/code\u003e\u003c/a\u003e Optimize bounds checks in hot paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f\"\u003e\u003ccode\u003ed9babd9\u003c/code\u003e\u003c/a\u003e fix: reject Windows alternate data stream paths in FS (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2335\"\u003e#2335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd\"\u003e\u003ccode\u003ee7cf856\u003c/code\u003e\u003c/a\u003e reject backslash '..' traversal in fs handler on windows (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2327\"\u003e#2327\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e\"\u003e\u003ccode\u003e165a4c8\u003c/code\u003e\u003c/a\u003e Improve AppendUnquotedArg with optimised bounds check\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1\"\u003e\u003ccode\u003e7a1349d\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2331\"\u003e#2331\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c\"\u003e\u003ccode\u003ef1ad91d\u003c/code\u003e\u003c/a\u003e fix: preserve pre-set status code in NewFastHTTPHandler (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2323\"\u003e#2323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347\"\u003e\u003ccode\u003e5f57d8f\u003c/code\u003e\u003c/a\u003e chore(deps): bump actions/setup-go from 6 to 7 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2329\"\u003e#2329\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d\"\u003e\u003ccode\u003e3aa940d\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2328\"\u003e#2328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40\"\u003e\u003ccode\u003e7a012e9\u003c/code\u003e\u003c/a\u003e validate domain and path cookie attribute values on parse (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2315\"\u003e#2315\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03\"\u003e\u003ccode\u003e9cf733f\u003c/code\u003e\u003c/a\u003e perf: reduce redundant scans and allocations in hot paths (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2322\"\u003e#2322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.72.0\u0026new-version=1.73.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/katallaxie/fiber-ws-relay/pull/156","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/katallaxie%2Ffiber-ws-relay/issues/156","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/156/packages"}},{"old_version":"1.71.0","new_version":"1.72.0","update_type":"minor","path":null,"pr_created_at":"2026-07-05T17:59:32.000Z","version_change":"1.71.0 → 1.72.0","issue":{"uuid":"4813874692","node_id":"PR_kwDOTOcX8s7uFW00","number":5,"state":"open","title":"chore(deps): bump github.com/valyala/fasthttp from 1.71.0 to 1.72.0","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-07-05T17:59:32.000Z","updated_at":"2026-07-05T17:59:32.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.71.0","new_version":"1.72.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.71.0 to 1.72.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.72.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to go1.25 as minimal version by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2205\"\u003evalyala/fasthttp#2205\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eclient: add aggregate connection count metrics by \u003ca href=\"https://github.com/z9z\"\u003e\u003ccode\u003e@​z9z\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2201\"\u003evalyala/fasthttp#2201\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(server): return ErrMissingFile when MultipartForm.File is nil by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2260\"\u003evalyala/fasthttp#2260\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: FS cache cleaner goroutine leaks when CleanStop is nil (default) (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2218\"\u003e#2218\u003c/a\u003e), \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2247\"\u003e#2247\u003c/a\u003e by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2271\"\u003evalyala/fasthttp#2271\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: data race on pipeline client c.chR during worker drain (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2220\"\u003e#2220\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2272\"\u003evalyala/fasthttp#2272\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: TCPDialer.tcpAddrsClean() goroutine leaks — no shutdown mechanism (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2222\"\u003e#2222\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2273\"\u003evalyala/fasthttp#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: double concurrency counter increment in ServeConn causes counter leak (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2238\"\u003e#2238\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2275\"\u003evalyala/fasthttp#2275\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: body stream leak in compression methods when response is discarded (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2244\"\u003e#2244\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2276\"\u003evalyala/fasthttp#2276\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: InMemoryListener deadlock under high concurrency (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2245\"\u003e#2245\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2277\"\u003evalyala/fasthttp#2277\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpadaptor writer leak, data race, and crash on handler panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2246\"\u003e#2246\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2278\"\u003evalyala/fasthttp#2278\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: fasthttpproxy dialers return nil DialFunc on error, causing panic (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2248\"\u003e#2248\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2279\"\u003evalyala/fasthttp#2279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: closeIdleConns TOCTOU race with serveConn idle timestamp (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2250\"\u003e#2250\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2280\"\u003evalyala/fasthttp#2280\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: AppendCert/AppendCertEmbed not thread-safe (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2251\"\u003e#2251\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2281\"\u003evalyala/fasthttp#2281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: SetBodySizePoolLimit data race — plain int written without synchronization (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2252\"\u003e#2252\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2282\"\u003evalyala/fasthttp#2282\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: file descriptor leak in prefork parent process (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2253\"\u003e#2253\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2283\"\u003evalyala/fasthttp#2283\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esecurity: SO_REUSEADDR on Windows enables port hijacking (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2254\"\u003e#2254\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2284\"\u003evalyala/fasthttp#2284\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: file descriptor leak on z/OS s390x when FcntlInt fails (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2255\"\u003e#2255\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2285\"\u003evalyala/fasthttp#2285\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebug: filesLockMap grows unboundedly, leaking memory (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2256\"\u003e#2256\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2286\"\u003evalyala/fasthttp#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003esecurity: TLS verification silently disabled for malformed addresses (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2236\"\u003e#2236\u003c/a\u003e) by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2274\"\u003evalyala/fasthttp#2274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs): remove temporary file when compression fails by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2264\"\u003evalyala/fasthttp#2264\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix double release of streamed client response body by \u003ca href=\"https://github.com/Mereng\"\u003e\u003ccode\u003e@​Mereng\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2211\"\u003evalyala/fasthttp#2211\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(client): switch to GET on 303 redirect per RFC 9110 by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2265\"\u003evalyala/fasthttp#2265\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: re-enable gocritic deferInLoop check for non-test code by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2288\"\u003evalyala/fasthttp#2288\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix flaky race tests by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2292\"\u003evalyala/fasthttp#2292\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(lbclient): prevent deadlock when all clients are removed by \u003ca href=\"https://github.com/u5surf\"\u003e\u003ccode\u003e@​u5surf\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2287\"\u003evalyala/fasthttp#2287\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject duplicate Content-Length in response header parser by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2294\"\u003evalyala/fasthttp#2294\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estrip cr/lf from header keys in normalizeHeaderKey by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2295\"\u003evalyala/fasthttp#2295\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(client): guard nil waiter in decConnsCount by \u003ca href=\"https://github.com/SAY-5\"\u003e\u003ccode\u003e@​SAY-5\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2266\"\u003evalyala/fasthttp#2266\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003estrip semicolons from cookie setters to block attribute injection by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2298\"\u003evalyala/fasthttp#2298\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(prefork): graceful shutdown, leak fixes, hook robustness (re-open of \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2180\"\u003e#2180\u003c/a\u003e follow-up) by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2199\"\u003evalyala/fasthttp#2199\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent data race on FSCompressedFileSuffixes map by \u003ca href=\"https://github.com/xbrxr03\"\u003e\u003ccode\u003e@​xbrxr03\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2300\"\u003evalyala/fasthttp#2300\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereject duplicate Transfer-Encoding in request header parser by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2303\"\u003evalyala/fasthttp#2303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epreserve duplicate request headers in ConvertRequest by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2305\"\u003evalyala/fasthttp#2305\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(server): close listener on serve error in ListenAndServe helpers by \u003ca href=\"https://github.com/fereidani\"\u003e\u003ccode\u003e@​fereidani\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2304\"\u003evalyala/fasthttp#2304\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003evalidate trailer values in parseTrailer by \u003ca href=\"https://github.com/alhudz\"\u003e\u003ccode\u003e@​alhudz\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2301\"\u003evalyala/fasthttp#2301\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid default content type for empty requests by \u003ca href=\"https://github.com/nkgotcode\"\u003e\u003ccode\u003e@​nkgotcode\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2296\"\u003evalyala/fasthttp#2296\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2210\"\u003evalyala/fasthttp#2210\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2209\"\u003evalyala/fasthttp#2209\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2208\"\u003evalyala/fasthttp#2208\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2207\"\u003evalyala/fasthttp#2207\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.26.1 to 2.27.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2261\"\u003evalyala/fasthttp#2261\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.27.0 to 2.27.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2267\"\u003evalyala/fasthttp#2267\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2289\"\u003evalyala/fasthttp#2289\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2290\"\u003evalyala/fasthttp#2290\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2291\"\u003evalyala/fasthttp#2291\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/checkout from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2297\"\u003evalyala/fasthttp#2297\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/37a31d78c5d221b24b9cb6652481b5acd4dd674f\"\u003e\u003ccode\u003e37a31d7\u003c/code\u003e\u003c/a\u003e Avoid default content type for empty requests (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2296\"\u003e#2296\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d93cb94af2c31641d00025140785609ddd746eb3\"\u003e\u003ccode\u003ed93cb94\u003c/code\u003e\u003c/a\u003e validate trailer values in parseTrailer (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2301\"\u003e#2301\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9d21d3546ab1d8422b0b5b2801e46aef568619ce\"\u003e\u003ccode\u003e9d21d35\u003c/code\u003e\u003c/a\u003e Remove unused uint322ip, inline ip2uint32\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/eb82c9a13addbe488f69cbf530444bb2561fd083\"\u003e\u003ccode\u003eeb82c9a\u003c/code\u003e\u003c/a\u003e Reject invalid cookie values during parsing\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/598e2e06218dbcaf4da6b3723477effd9d7b6233\"\u003e\u003ccode\u003e598e2e0\u003c/code\u003e\u003c/a\u003e fix(server): close listener on serve error in ListenAndServe helpers (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2304\"\u003e#2304\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/134a8fedab6eb02fda4b8d96c48d2a72082d2e0c\"\u003e\u003ccode\u003e134a8fe\u003c/code\u003e\u003c/a\u003e preserve duplicate request headers in ConvertRequest (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2305\"\u003e#2305\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/7bca504536636cf77726f3018365626a8b975b5f\"\u003e\u003ccode\u003e7bca504\u003c/code\u003e\u003c/a\u003e reject duplicate Transfer-Encoding in request header parser (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2303\"\u003e#2303\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/9ee3c15997f8ab21519c2728017e9fbff03fe142\"\u003e\u003ccode\u003e9ee3c15\u003c/code\u003e\u003c/a\u003e docs: document FSCompressedFileSuffixes is not safe for concurrent modificati...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/2c1590038fa5d0e04896c8b0aafc138ce286bfa7\"\u003e\u003ccode\u003e2c15900\u003c/code\u003e\u003c/a\u003e feat(prefork): graceful shutdown, leak fixes, hook robustness (re-open of \u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/21\"\u003e#21\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/ec58c6e67ee8f608a673cc01f07f045d04fa17b5\"\u003e\u003ccode\u003eec58c6e\u003c/code\u003e\u003c/a\u003e strip semicolons from cookie setters to block attribute injection (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2298\"\u003e#2298\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.71.0...v1.72.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.71.0\u0026new-version=1.72.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/zhuyandong/gatus-cn/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/zhuyandong%2Fgatus-cn/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"}},{"old_version":"1.70.0","new_version":"1.71.0","update_type":"minor","path":null,"pr_created_at":"2026-06-10T01:24:09.000Z","version_change":"1.70.0 → 1.71.0","issue":{"uuid":"4627031675","node_id":"PR_kwDOOWhOy87kojM1","number":543,"state":"closed","title":"deps(go): bump the go-dependencies group across 1 directory with 8 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-24T01:23:47.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-10T01:24:09.000Z","updated_at":"2026-06-24T01:23:49.000Z","time_to_close":1209578,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(go): bump","group_name":"go-dependencies","update_count":8,"packages":[{"name":"github.com/llm-d/llm-d-kv-cache","old_version":"0.7.1","new_version":"0.8.1","repository_url":"https://github.com/llm-d/llm-d-kv-cache"},{"name":"github.com/onsi/ginkgo/v2","old_version":"2.28.3","new_version":"2.31.0","repository_url":"https://github.com/onsi/ginkgo"},{"name":"github.com/onsi/gomega","old_version":"1.40.0","new_version":"1.42.0","repository_url":"https://github.com/onsi/gomega"},{"name":"github.com/openai/openai-go/v3","old_version":"3.33.0","new_version":"3.39.0","repository_url":"https://github.com/openai/openai-go"},{"name":"github.com/valyala/fasthttp","old_version":"1.70.0","new_version":"1.71.0","repository_url":"https://github.com/valyala/fasthttp"},{"name":"golang.org/x/sync","old_version":"0.20.0","new_version":"0.21.0","repository_url":"https://github.com/golang/sync"},{"name":"google.golang.org/grpc","old_version":"1.80.0","new_version":"1.81.1","repository_url":"https://github.com/grpc/grpc-go"},{"name":"modernc.org/sqlite","old_version":"1.50.0","new_version":"1.52.0"}],"path":null,"ecosystem":"go"},"body":"Bumps the go-dependencies group with 8 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/llm-d/llm-d-kv-cache](https://github.com/llm-d/llm-d-kv-cache) | `0.7.1` | `0.8.1` |\n| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.28.3` | `2.31.0` |\n| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.40.0` | `1.42.0` |\n| [github.com/openai/openai-go/v3](https://github.com/openai/openai-go) | `3.33.0` | `3.39.0` |\n| [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) | `1.70.0` | `1.71.0` |\n| [golang.org/x/sync](https://github.com/golang/sync) | `0.20.0` | `0.21.0` |\n| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.80.0` | `1.81.1` |\n| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.50.0` | `1.52.0` |\n\n\nUpdates `github.com/llm-d/llm-d-kv-cache` from 0.7.1 to 0.8.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/releases\"\u003egithub.com/llm-d/llm-d-kv-cache's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.8.1\u003c/h2\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/compare/v0.8.0...v0.8.1\"\u003ehttps://github.com/llm-d/llm-d-kv-cache/compare/v0.8.0...v0.8.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.8.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: resolve data race in ZMQ subscriber by removing redundant auto-reconnect by \u003ca href=\"https://github.com/gyliu513\"\u003e\u003ccode\u003e@​gyliu513\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/480\"\u003ellm-d/llm-d-kv-cache#480\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: bump fs-connector to v0.18 with vLLM 0.18.x support by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/486\"\u003ellm-d/llm-d-kv-cache#486\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add size label to prs by \u003ca href=\"https://github.com/sagearc\"\u003e\u003ccode\u003e@​sagearc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/487\"\u003ellm-d/llm-d-kv-cache#487\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(ci): Add nightly race detector CI job by \u003ca href=\"https://github.com/gyliu513\"\u003e\u003ccode\u003e@​gyliu513\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/479\"\u003ellm-d/llm-d-kv-cache#479\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: update examples to use UDS tokenizer Docker image by \u003ca href=\"https://github.com/sagearc\"\u003e\u003ccode\u003e@​sagearc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/471\"\u003ellm-d/llm-d-kv-cache#471\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: Add trivy scan for uds tokenizer by \u003ca href=\"https://github.com/gyliu513\"\u003e\u003ccode\u003e@​gyliu513\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/458\"\u003ellm-d/llm-d-kv-cache#458\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix/mm extra keys bare strings by \u003ca href=\"https://github.com/vMaroon\"\u003e\u003ccode\u003e@​vMaroon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/495\"\u003ellm-d/llm-d-kv-cache#495\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd dockerfile for fsconnector dev on k8s by \u003ca href=\"https://github.com/saikat-royc\"\u003e\u003ccode\u003e@​saikat-royc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/468\"\u003ellm-d/llm-d-kv-cache#468\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: validate ZMQ sequence frame length before decoding by \u003ca href=\"https://github.com/wenhug\"\u003e\u003ccode\u003e@​wenhug\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/492\"\u003ellm-d/llm-d-kv-cache#492\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: test imports and missing gds_mode arg by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/497\"\u003ellm-d/llm-d-kv-cache#497\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: statically link libstdc++ in fs_connector wheel by \u003ca href=\"https://github.com/natoscott\"\u003e\u003ccode\u003e@​natoscott\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/498\"\u003ellm-d/llm-d-kv-cache#498\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: statically link libstdc++ in fs_connector wheel for v0.17.1 by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/505\"\u003ellm-d/llm-d-kv-cache#505\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eenable toolcalling from renderer by \u003ca href=\"https://github.com/Gregory-Pereira\"\u003e\u003ccode\u003e@​Gregory-Pereira\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/507\"\u003ellm-d/llm-d-kv-cache#507\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate: triv-action SHA1 by \u003ca href=\"https://github.com/zdtsw\"\u003e\u003ccode\u003e@​zdtsw\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/494\"\u003ellm-d/llm-d-kv-cache#494\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(ci): harden nightly race detector job by \u003ca href=\"https://github.com/gyliu513\"\u003e\u003ccode\u003e@​gyliu513\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/493\"\u003ellm-d/llm-d-kv-cache#493\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(concurrency): add concurrency stress tests for KV-cache index operations by \u003ca href=\"https://github.com/gyliu513\"\u003e\u003ccode\u003e@​gyliu513\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/488\"\u003ellm-d/llm-d-kv-cache#488\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Heterogeneous BlockSize support by \u003ca href=\"https://github.com/albertoperdomo2\"\u003e\u003ccode\u003e@​albertoperdomo2\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/511\"\u003ellm-d/llm-d-kv-cache#511\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(docs): correct scoring return type and add device-tier weighting description by \u003ca href=\"https://github.com/yankay\"\u003e\u003ccode\u003e@​yankay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/523\"\u003ellm-d/llm-d-kv-cache#523\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: align default pod label selector to kebab-case inference-serving by \u003ca href=\"https://github.com/yankay\"\u003e\u003ccode\u003e@​yankay\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/525\"\u003ellm-d/llm-d-kv-cache#525\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: deprecate embedded tokenizers by \u003ca href=\"https://github.com/sagearc\"\u003e\u003ccode\u003e@​sagearc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/473\"\u003ellm-d/llm-d-kv-cache#473\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix(fs_backend): suffix offload metrics via vllm.general_plugins by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/522\"\u003ellm-d/llm-d-kv-cache#522\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Upgrade golangci-lint to v2.9.0 by \u003ca href=\"https://github.com/gyliu513\"\u003e\u003ccode\u003e@​gyliu513\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/439\"\u003ellm-d/llm-d-kv-cache#439\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003erevamp docs by \u003ca href=\"https://github.com/vMaroon\"\u003e\u003ccode\u003e@​vMaroon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/528\"\u003ellm-d/llm-d-kv-cache#528\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: register MaxPodHitCount metric in Collectors() by \u003ca href=\"https://github.com/wenhug\"\u003e\u003ccode\u003e@​wenhug\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/509\"\u003ellm-d/llm-d-kv-cache#509\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: Move fs-connector to use vllm v0.19.1 by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/540\"\u003ellm-d/llm-d-kv-cache#540\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebump uds-tokenizer vllm 0.19.1 by \u003ca href=\"https://github.com/vMaroon\"\u003e\u003ccode\u003e@​vMaroon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/539\"\u003ellm-d/llm-d-kv-cache#539\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: Add golden test case for multi-modal by \u003ca href=\"https://github.com/gyliu513\"\u003e\u003ccode\u003e@​gyliu513\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/485\"\u003ellm-d/llm-d-kv-cache#485\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(fs_backend): add performance and stress tests by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/527\"\u003ellm-d/llm-d-kv-cache#527\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(fs_connector): add cu130 wheel variant for vLLM 0.19.x by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/542\"\u003ellm-d/llm-d-kv-cache#542\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[1/3] deprecating internal tokenization on the lookup path by \u003ca href=\"https://github.com/vMaroon\"\u003e\u003ccode\u003e@​vMaroon\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/543\"\u003ellm-d/llm-d-kv-cache#543\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(fs_backend): make -static-libstdc++ opt-in via FS_PORTABLE_WHEEL by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/550\"\u003ellm-d/llm-d-kv-cache#550\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: prevent write queue deadlock under high concurrency by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/512\"\u003ellm-d/llm-d-kv-cache#512\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd object store support to llm-d storage offloading by \u003ca href=\"https://github.com/effi-ofer\"\u003e\u003ccode\u003e@​effi-ofer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/499\"\u003ellm-d/llm-d-kv-cache#499\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(fs-connector): enable pip install via PEP 503 Pages index by \u003ca href=\"https://github.com/kfirtoledo\"\u003e\u003ccode\u003e@​kfirtoledo\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/551\"\u003ellm-d/llm-d-kv-cache#551\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocumentation by \u003ca href=\"https://github.com/effi-ofer\"\u003e\u003ccode\u003e@​effi-ofer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/555\"\u003ellm-d/llm-d-kv-cache#555\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edeps(go): bump the kubernetes group across 1 directory with 3 updates by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/412\"\u003ellm-d/llm-d-kv-cache#412\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/saikat-royc\"\u003e\u003ccode\u003e@​saikat-royc\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/468\"\u003ellm-d/llm-d-kv-cache#468\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wenhug\"\u003e\u003ccode\u003e@​wenhug\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/492\"\u003ellm-d/llm-d-kv-cache#492\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/effi-ofer\"\u003e\u003ccode\u003e@​effi-ofer\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/pull/499\"\u003ellm-d/llm-d-kv-cache#499\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/compare/v0.7.0...v0.8.0\"\u003ehttps://github.com/llm-d/llm-d-kv-cache/compare/v0.7.0...v0.8.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev0.8.0-fs-v0.20\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/0030c3ba64e13a0894d8e1b105a266039a24e756\"\u003e\u003ccode\u003e0030c3b\u003c/code\u003e\u003c/a\u003e fix(tokenization): preserve assistant tool calls in UDS rendering (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/577\"\u003e#577\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/225efda2f8bab42f16762eddd1c61dad429de840\"\u003e\u003ccode\u003e225efda\u003c/code\u003e\u003c/a\u003e Fix CPU offloading for precise-prefix-cache-aware (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/561\"\u003e#561\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/482dc7c9368c28a7b7051a804d5dd6a2c7f36428\"\u003e\u003ccode\u003e482dc7c\u003c/code\u003e\u003c/a\u003e Replace BlockSize with BlockSizeTokens (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/564\"\u003e#564\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/f6a98c138313ce553b4c8976c0e564d3751d376c\"\u003e\u003ccode\u003ef6a98c1\u003c/code\u003e\u003c/a\u003e fix: render error (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/554\"\u003e#554\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/1fac0a1c1f8cbe5ce12b9dc5c2fb5c1016699e7b\"\u003e\u003ccode\u003e1fac0a1\u003c/code\u003e\u003c/a\u003e deps(go): bump the kubernetes group across 1 directory with 3 updates (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/412\"\u003e#412\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/9956c22925055ad2158b0f1d7ed8152c3f6d404f\"\u003e\u003ccode\u003e9956c22\u003c/code\u003e\u003c/a\u003e documentation (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/555\"\u003e#555\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/6b006117c8f583e8020c5f2649e3b0e6b35daf3a\"\u003e\u003ccode\u003e6b00611\u003c/code\u003e\u003c/a\u003e build(fs-connector): enable pip install via PEP 503 Pages index (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/551\"\u003e#551\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/2cad5946afc35d68ae9356c7b3a9a61d6d208cea\"\u003e\u003ccode\u003e2cad594\u003c/code\u003e\u003c/a\u003e Add object store support to llm-d storage offloading (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/499\"\u003e#499\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/ffb6ec6f02d7b312e89095a434cffb1032fa61df\"\u003e\u003ccode\u003effb6ec6\u003c/code\u003e\u003c/a\u003e fix: prevent write queue deadlock under high concurrency (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/512\"\u003e#512\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/commit/4c8edc16b6ad163b86d633b55670b727a0df05a7\"\u003e\u003ccode\u003e4c8edc1\u003c/code\u003e\u003c/a\u003e build(fs_backend): make -static-libstdc++ opt-in via FS_PORTABLE_WHEEL (\u003ca href=\"https://redirect.github.com/llm-d/llm-d-kv-cache/issues/550\"\u003e#550\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/llm-d/llm-d-kv-cache/compare/v0.7.1...v0.8.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/onsi/ginkgo/v2` from 2.28.3 to 2.31.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/ginkgo/releases\"\u003egithub.com/onsi/ginkgo/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.31.0\u003c/h2\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003eAdd a bunch of Claude Skills via the marketplace:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e/plugin marketplace add onsi/ginkgo\n/plugin install ginkgo@ginkgo\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003ev2.30.0\u003c/h2\u003e\n\u003ch2\u003e2.30.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cp\u003eGinkgo now allows \u003ccode\u003eextentions/global.Reset\u003c/code\u003e to support running multiple suites from within a single process.  This may take some massaging on your part (see \u003ca href=\"https://redirect.github.com/onsi/ginkgo/issues/1672\"\u003e1672\u003c/a\u003e) but can dramatically speed up codebases with O(hundreds) of test suites.\u003c/p\u003e\n\u003cp\u003eThanks \u003ca href=\"https://github.com/lawrencejones\"\u003e\u003ccode\u003e@​lawrencejones\u003c/code\u003e\u003c/a\u003e !\u003c/p\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested --github-output group for progress report nested inside timeline [4f62d7a]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.29.0\u003c/h2\u003e\n\u003ch2\u003e2.29.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003eGinkgoHelperGo\u003c/code\u003e makes it easier to write test helpers that need to run in goroutines.  Specifically, it makes managing the failure state and capturing failure panics correctly straightforward.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eginkgo outline\u003c/code\u003e now includes entries defined in \u003ccode\u003eDescribeTableSubtree\u003c/code\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md\"\u003egithub.com/onsi/ginkgo/v2's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e2.31.0\u003c/h2\u003e\n\u003cp\u003eAdd a bunch of Claude Skills via the marketplace:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e/plugin marketplace add onsi/ginkgo\n/plugin install ginkgo@ginkgo\n\u003c/code\u003e\u003c/pre\u003e\n\u003ch2\u003e2.30.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cp\u003eGinkgo now allows \u003ccode\u003eextentions/global.Reset\u003c/code\u003e to support running multiple suites from within a single process.  This may take some massaging on your part (see \u003ca href=\"https://redirect.github.com/onsi/ginkgo/issues/1672\"\u003e1672\u003c/a\u003e) but can dramatically speed up codebases with O(hundreds) of test suites.\u003c/p\u003e\n\u003cp\u003eThanks \u003ca href=\"https://github.com/lawrencejones\"\u003e\u003ccode\u003e@​lawrencejones\u003c/code\u003e\u003c/a\u003e !\u003c/p\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested --github-output group for progress report nested inside timeline [4f62d7a]\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.29.0\u003c/h2\u003e\n\u003cp\u003e\u003ccode\u003eGinkgoHelperGo\u003c/code\u003e makes it easier to write test helpers that need to run in goroutines.  Specifically, it makes managing the failure state and capturing failure panics correctly straightforward.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eginkgo outline\u003c/code\u003e now includes entries defined in \u003ccode\u003eDescribeTableSubtree\u003c/code\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/3c7bde4e56b079f4ce636d238daadaa94d32de12\"\u003e\u003ccode\u003e3c7bde4\u003c/code\u003e\u003c/a\u003e v2.31.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/e479459ad98fd7e56c92733b8915cf17f7b4a217\"\u003e\u003ccode\u003ee479459\u003c/code\u003e\u003c/a\u003e add claude skills\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/31e99120691330a79003ad95329cf896e4fb1051\"\u003e\u003ccode\u003e31e9912\u003c/code\u003e\u003c/a\u003e v2.30.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/a79cdbb03469c0dedde57cc481c78c8284ee0387\"\u003e\u003ccode\u003ea79cdbb\u003c/code\u003e\u003c/a\u003e Document running multiple suites in a single test process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/800291af09d4f6da0927e7326b8b58c17c322b97\"\u003e\u003ccode\u003e800291a\u003c/code\u003e\u003c/a\u003e Allow extensions/globals.Reset to support re-running RunSpecs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/4f62d7a74752034222d97d911f904d9be47ff7aa\"\u003e\u003ccode\u003e4f62d7a\u003c/code\u003e\u003c/a\u003e Fix nested --github-output group for progress report nested inside timeline\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/04b5bcbe4eee911a1baf506eda1e7e811c978937\"\u003e\u003ccode\u003e04b5bcb\u003c/code\u003e\u003c/a\u003e v2.29.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/124232a4531c77a7f31a036e0150e06fa78b2af8\"\u003e\u003ccode\u003e124232a\u003c/code\u003e\u003c/a\u003e docs: GinkgoHelperGo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/ad9cee80bdfda573e94f1b05f2bd4afa1a2fe815\"\u003e\u003ccode\u003ead9cee8\u003c/code\u003e\u003c/a\u003e feat: GinkgoHelperGo, with integration tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/ginkgo/commit/9e56a0a2a090eb83af696381161bdb996c69bcac\"\u003e\u003ccode\u003e9e56a0a\u003c/code\u003e\u003c/a\u003e chore: refactor devcontainer for better maintenance\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/onsi/ginkgo/compare/v2.28.3...v2.31.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/onsi/gomega` from 1.40.0 to 1.42.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/gomega/releases\"\u003egithub.com/onsi/gomega's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.42.0\u003c/h2\u003e\n\u003ch2\u003e1.42.0\u003c/h2\u003e\n\u003cp\u003eAdd a set of Claude skill as a marketplace plugin\u003c/p\u003e\n\u003ch2\u003ev1.41.0\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/onsi/gomega/blob/master/CHANGELOG.md\"\u003egithub.com/onsi/gomega's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.42.0\u003c/h2\u003e\n\u003cp\u003eAdd a set of Claude skill as a marketplace plugin\u003c/p\u003e\n\u003ch2\u003e1.41.0\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cp\u003eAdd \u003ccode\u003eBeASlice\u003c/code\u003e and \u003ccode\u003eBeAnArray\u003c/code\u003e matchers\u003c/p\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cp\u003eObject formatting now detects pointer cycles to avoid runaway formatting output.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/35ca084ebed8e3f9966e0d4a53384c022d78c1a8\"\u003e\u003ccode\u003e35ca084\u003c/code\u003e\u003c/a\u003e v1.42.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/d72697b90777dcb0813622b58827d27e4a9d3f22\"\u003e\u003ccode\u003ed72697b\u003c/code\u003e\u003c/a\u003e v1.42.0 (full)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/1f95d86efdd3ea0f791ce6573f3f6b0de02f5991\"\u003e\u003ccode\u003e1f95d86\u003c/code\u003e\u003c/a\u003e add a set of claude skills as a marketplace plugin\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/af2bccb5831cbcc56cfc16ca3056077cdec4798b\"\u003e\u003ccode\u003eaf2bccb\u003c/code\u003e\u003c/a\u003e v1.41.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/73e81f6f054c825d1743bf4090ac0a9e1d5605af\"\u003e\u003ccode\u003e73e81f6\u003c/code\u003e\u003c/a\u003e v1.41.0 (full)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e35a84f24113255aaeea62fe7c47e09adf39109b\"\u003e\u003ccode\u003ee35a84f\u003c/code\u003e\u003c/a\u003e feat: devcontainer configuration with local pkgsite and GH pages\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/f12e5e1bc7167fae21ef37b0d9d358d51063ff5e\"\u003e\u003ccode\u003ef12e5e1\u003c/code\u003e\u003c/a\u003e fix(format): detect pointer cycles to avoid runaway formatting output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/e14831fefa86313f2b01fb803b2ac937e49d08b6\"\u003e\u003ccode\u003ee14831f\u003c/code\u003e\u003c/a\u003e Add optionalDescription docs to AsyncAssertion and Assertion interfaces\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/onsi/gomega/commit/344b94dae7e0df0e2d087574b4c2b1b1597a6943\"\u003e\u003ccode\u003e344b94d\u003c/code\u003e\u003c/a\u003e Add BeASlice and BeAnArray matchers\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/onsi/gomega/compare/v1.40.0...v1.42.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/openai/openai-go/v3` from 3.33.0 to 3.39.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openai/openai-go/releases\"\u003egithub.com/openai/openai-go/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.39.0\u003c/h2\u003e\n\u003ch2\u003e3.39.0 (2026-06-03)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-%5Bgo/compare/v3.38.0...v3.39.0%5D(https://www.golinks.io/compare/v3.38.0...v3.39.0?trackSource=github)\"\u003ev3.38.0...v3.39.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e responses.moderation and chat_completions.moderation (\u003ca href=\"https://github.com/openai/openai-%5Bgo/commit/7a2dac0ddf6b92dfcaa45b190dbe7f51368e199c%5D(https://www.golinks.io/commit/7a2dac0ddf6b92dfcaa45b190dbe7f51368e199c?trackSource=github)\"\u003e7a2dac0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.38.0\u003c/h2\u003e\n\u003ch2\u003e3.38.0 (2026-06-01)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-go/compare/v3.37.0...v3.38.0\"\u003ev3.37.0...v3.38.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e manual updates (\u003ca href=\"https://github.com/openai/openai-go/commit/d7dac8192c292d882cb765d3379e10427930979e\"\u003ed7dac81\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e workload identity in audit logs, additional_tools item in responses, fix ActionSearch.query to be optional. (\u003ca href=\"https://github.com/openai/openai-go/commit/4c3981cfabc98ec1d67c2baf7c6a891ef6640f96\"\u003e4c3981c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.37.0\u003c/h2\u003e\n\u003ch2\u003e3.37.0 (2026-05-21)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-go/compare/v3.36.0...v3.37.0\"\u003ev3.36.0...v3.37.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e api update (\u003ca href=\"https://github.com/openai/openai-go/commit/7f7416ea4f6953a2861189dee6391515c3b995a9\"\u003e7f7416e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e manual updates (\u003ca href=\"https://github.com/openai/openai-go/commit/d6465620413df87d971e7e37ae74bef4c70076b1\"\u003ed646562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e update OpenAPI spec or Stainless config (\u003ca href=\"https://github.com/openai/openai-go/commit/b34b78a83433003a6168fffd175cc963ad719495\"\u003eb34b78a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e optimize json encoder for internal types (\u003ca href=\"https://github.com/openai/openai-go/commit/93adc6e6247e8ce830152c3df0980a3154aa098a\"\u003e93adc6e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ego:\u003c/strong\u003e format generated admin paths (\u003ca href=\"https://github.com/openai/openai-go/commit/1dd8f5ec0adeeefef6a56068b5532ba5e3b3290e\"\u003e1dd8f5e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ego:\u003c/strong\u003e format generated project permission paths (\u003ca href=\"https://github.com/openai/openai-go/commit/b751c37ce2d6348545d75451dfc253dd7dda0f4f\"\u003eb751c37\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e docs updates (\u003ca href=\"https://github.com/openai/openai-go/commit/08bc80ea58a19ba0725942c1f3afbcfb043851a0\"\u003e08bc80e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev3.36.0\u003c/h2\u003e\n\u003ch2\u003e3.36.0 (2026-05-13)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-go/compare/v3.35.0...v3.36.0\"\u003ev3.35.0...v3.36.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add service_tier parameter to response compact method (\u003ca href=\"https://github.com/openai/openai-go/commit/bacd2c0bcf980e8d424d67446fb4d9c4ea897d24\"\u003ebacd2c0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/openai/openai-go/blob/main/CHANGELOG.md\"\u003egithub.com/openai/openai-go/v3's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e3.39.0 (2026-06-03)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-go/compare/v3.38.0...v3.39.0\"\u003ev3.38.0...v3.39.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e responses.moderation and chat_completions.moderation (\u003ca href=\"https://github.com/openai/openai-go/commit/7a2dac0ddf6b92dfcaa45b190dbe7f51368e199c\"\u003e7a2dac0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.38.0 (2026-06-01)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-go/compare/v3.37.0...v3.38.0\"\u003ev3.37.0...v3.38.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e manual updates (\u003ca href=\"https://github.com/openai/openai-go/commit/d7dac8192c292d882cb765d3379e10427930979e\"\u003ed7dac81\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e workload identity in audit logs, additional_tools item in responses, fix ActionSearch.query to be optional. (\u003ca href=\"https://github.com/openai/openai-go/commit/4c3981cfabc98ec1d67c2baf7c6a891ef6640f96\"\u003e4c3981c\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.37.0 (2026-05-21)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-go/compare/v3.36.0...v3.37.0\"\u003ev3.36.0...v3.37.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e api update (\u003ca href=\"https://github.com/openai/openai-go/commit/7f7416ea4f6953a2861189dee6391515c3b995a9\"\u003e7f7416e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e manual updates (\u003ca href=\"https://github.com/openai/openai-go/commit/d6465620413df87d971e7e37ae74bef4c70076b1\"\u003ed646562\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e update OpenAPI spec or Stainless config (\u003ca href=\"https://github.com/openai/openai-go/commit/b34b78a83433003a6168fffd175cc963ad719495\"\u003eb34b78a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e optimize json encoder for internal types (\u003ca href=\"https://github.com/openai/openai-go/commit/93adc6e6247e8ce830152c3df0980a3154aa098a\"\u003e93adc6e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003ego:\u003c/strong\u003e format generated admin paths (\u003ca href=\"https://github.com/openai/openai-go/commit/1dd8f5ec0adeeefef6a56068b5532ba5e3b3290e\"\u003e1dd8f5e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ego:\u003c/strong\u003e format generated project permission paths (\u003ca href=\"https://github.com/openai/openai-go/commit/b751c37ce2d6348545d75451dfc253dd7dda0f4f\"\u003eb751c37\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChores\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e docs updates (\u003ca href=\"https://github.com/openai/openai-go/commit/08bc80ea58a19ba0725942c1f3afbcfb043851a0\"\u003e08bc80e\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.36.0 (2026-05-13)\u003c/h2\u003e\n\u003cp\u003eFull Changelog: \u003ca href=\"https://github.com/openai/openai-go/compare/v3.35.0...v3.36.0\"\u003ev3.35.0...v3.36.0\u003c/a\u003e\u003c/p\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eapi:\u003c/strong\u003e add service_tier parameter to response compact method (\u003ca href=\"https://github.com/openai/openai-go/commit/bacd2c0bcf980e8d424d67446fb4d9c4ea897d24\"\u003ebacd2c0\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/bfe92982d403b8eae7a355eb6a86650ee20b3570\"\u003e\u003ccode\u003ebfe9298\u003c/code\u003e\u003c/a\u003e release: 3.39.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/b256c9a1cf224ae0cad685e9072968dba7932693\"\u003e\u003ccode\u003eb256c9a\u003c/code\u003e\u003c/a\u003e feat(api): responses.moderation and chat_completions.moderation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/fd8c615caa0b247c5a9de7318f457df1a014ea22\"\u003e\u003ccode\u003efd8c615\u003c/code\u003e\u003c/a\u003e codegen metadata\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/f25b030d119ec829f5dd78db9e05eff31b8f178d\"\u003e\u003ccode\u003ef25b030\u003c/code\u003e\u003c/a\u003e release: 3.38.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/08e89a6fc0acbacf4645e16183e1130486e8a5de\"\u003e\u003ccode\u003e08e89a6\u003c/code\u003e\u003c/a\u003e feat(api): workload identity in audit logs, additional_tools item in response...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/8f01a93893a51fc300850dc311aa66c96467f47b\"\u003e\u003ccode\u003e8f01a93\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/openai/openai-go/issues/676\"\u003e#676\u003c/a\u003e from openai/release-please--branches--main--changes--...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/2db0d86948259932a76fe8df25a3a513c132f242\"\u003e\u003ccode\u003e2db0d86\u003c/code\u003e\u003c/a\u003e release: 3.37.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/ea245d8115372e980d442072c79436f991366348\"\u003e\u003ccode\u003eea245d8\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/openai/openai-go/issues/991\"\u003e#991\u003c/a\u003e from stainless-sdks/dev/xuanqi/public-api-docs-enterp...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/1dd8f5ec0adeeefef6a56068b5532ba5e3b3290e\"\u003e\u003ccode\u003e1dd8f5e\u003c/code\u003e\u003c/a\u003e fix(go): format generated admin paths\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/openai/openai-go/commit/7f7416ea4f6953a2861189dee6391515c3b995a9\"\u003e\u003ccode\u003e7f7416e\u003c/code\u003e\u003c/a\u003e feat(api): api update\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/openai/openai-go/compare/v3.33.0...v3.39.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/valyala/fasthttp` from 1.70.0 to 1.71.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.71.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(client): add RetryIfErrUpstream function to handle upstream information by \u003ca href=\"https://github.com/mdenushev\"\u003e\u003ccode\u003e@​mdenushev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2176\"\u003evalyala/fasthttp#2176\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMatch net/http sensitive header redirect policy by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2181\"\u003evalyala/fasthttp#2181\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize first-line header setters to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2182\"\u003evalyala/fasthttp#2182\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eserver: apply ReadTimeout before first byte with ReduceMemoryUsage by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2183\"\u003evalyala/fasthttp#2183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject invalid trailer names by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2188\"\u003evalyala/fasthttp#2188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject pre-colon whitespace in request headers by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2187\"\u003evalyala/fasthttp#2187\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize redirect Location header to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2186\"\u003evalyala/fasthttp#2186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eserver: keep hijacked reader out of pool by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2184\"\u003evalyala/fasthttp#2184\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize cookie setters to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2185\"\u003evalyala/fasthttp#2185\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add ExpectHandler for richer Expect: 100-continue handling by \u003ca href=\"https://github.com/miretskiy\"\u003e\u003ccode\u003e@​miretskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2175\"\u003evalyala/fasthttp#2175\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ehttp: reject whitespace before chunk extensions by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2193\"\u003evalyala/fasthttp#2193\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject unsupported response Transfer-Encoding by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2192\"\u003evalyala/fasthttp#2192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: match net/http CL+TE handling by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2190\"\u003evalyala/fasthttp#2190\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.25.0 to 2.26.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2195\"\u003evalyala/fasthttp#2195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2196\"\u003evalyala/fasthttp#2196\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(prefork): Enhance prefork management with WatchMaster, CommandProducer, and Windows support by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2180\"\u003evalyala/fasthttp#2180\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/miretskiy\"\u003e\u003ccode\u003e@​miretskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2175\"\u003evalyala/fasthttp#2175\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e9208ecebf0c102176bb0635043c17333b10401d\"\u003e\u003ccode\u003ee9208ec\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;feat(prefork): graceful shutdown, leak fixes, hook robustness\u0026quot; commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/481e579af9e7d79f9ce27909edd2c42ef9dce173\"\u003e\u003ccode\u003e481e579\u003c/code\u003e\u003c/a\u003e feat(prefork): Enhance prefork management with WatchMaster, CommandProducer, ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/805cd1046567aa8a8b97a8bfe9e7b411621f68b2\"\u003e\u003ccode\u003e805cd10\u003c/code\u003e\u003c/a\u003e Add note on MaxResponseBodySize compatibility with StreamResponseBody\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5b5c1be52ca382dcea0ed86931b3f1d2aba9dce6\"\u003e\u003ccode\u003e5b5c1be\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2196\"\u003e#2196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d6a99db432025de9ae13051cb42b3e6c3d6568a3\"\u003e\u003ccode\u003ed6a99db\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.25.0 to 2.26.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2195\"\u003e#2195\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f36c9009027f81f4fbf304822f96752517b08949\"\u003e\u003ccode\u003ef36c900\u003c/code\u003e\u003c/a\u003e header: match net/http CL+TE handling (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2190\"\u003e#2190\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0b4cede30fa0eb22f9d10999e23ebaabba15e107\"\u003e\u003ccode\u003e0b4cede\u003c/code\u003e\u003c/a\u003e header: reject unsupported response Transfer-Encoding (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2192\"\u003e#2192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c497746f7d52ab88597dc88310e7f797cc7755aa\"\u003e\u003ccode\u003ec497746\u003c/code\u003e\u003c/a\u003e http: reject whitespace before chunk extensions (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2193\"\u003e#2193\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/97b38d3a4884b7c3d8891750a4c752073bc3c152\"\u003e\u003ccode\u003e97b38d3\u003c/code\u003e\u003c/a\u003e server: document SaveMultipartFile path trust requirement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/19e4b24955fb0ef764229802378a5e36ae7a822b\"\u003e\u003ccode\u003e19e4b24\u003c/code\u003e\u003c/a\u003e feat: add ExpectHandler for richer Expect: 100-continue handling (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2175\"\u003e#2175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/sync` from 0.20.0 to 0.21.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/sync/commit/5071ed6a9f1617117556b66384f765c934de3698\"\u003e\u003ccode\u003e5071ed6\u003c/code\u003e\u003c/a\u003e all: fix some comments to improve readability\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/sync/compare/v0.20.0...v0.21.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `google.golang.org/grpc` from 1.80.0 to 1.81.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/grpc/grpc-go/releases\"\u003egoogle.golang.org/grpc's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eRelease 1.81.1\u003c/h2\u003e\n\u003ch1\u003eSecurity\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per \u003ca href=\"https://github.com/grpc/proposal/blob/master/A41-xds-rbac.md\"\u003egRFC A41\u003c/a\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/al4an444\"\u003e\u003ccode\u003e@​al4an444\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eotel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eRelease 1.81.0\u003c/h2\u003e\n\u003ch1\u003eBehavior Changes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ebalancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8808\"\u003e#8808\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eDependencies\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eMinimum supported Go version is now 1.25. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8969\"\u003e#8969\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eBug Fixes\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003exds: Use the leaf cluster's security config for the TLS handshake instead of the aggregate cluster's config. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8956\"\u003e#8956\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Send a \u003ccode\u003eRST_STREAM\u003c/code\u003e when receiving an \u003ccode\u003eEND_STREAM\u003c/code\u003e when the stream is not already half-closed. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8832\"\u003e#8832\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Fix ADS resource name validation to prevent a panic. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8970\"\u003e#8970\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eNew Features\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003egrpc/stats: Add support for custom labels in per-call metrics (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A108-otel-custom-per-call-label.md\"\u003egRFC A108\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9008\"\u003e#9008\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Add support for Server Name Indication (SNI) and SAN validation (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A101-SNI-setting-and-SNI-SAN-validation.md\"\u003egRFC A101\u003c/a\u003e). Disabled by default. To enable, set \u003ccode\u003eGRPC_EXPERIMENTAL_XDS_SNI=true\u003c/code\u003e environment variable. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9016\"\u003e#9016\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Add support to control which fields get propagated from ORCA backend metric reports to LRS load reports (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A85-lrs-custom-metrics-changes.md\"\u003egRFC A85\u003c/a\u003e). Disabled by default. To enable, set \u003ccode\u003eGRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true\u003c/code\u003e. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9005\"\u003e#9005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003exds: Add metrics to track xDS client connectivity and cached resource state (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A78-grpc-metrics-wrr-pf-xds.md\"\u003egRFC A78\u003c/a\u003e). (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8807\"\u003e#8807\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003estats/otel: Enhance \u003ccode\u003egrpc.subchannel.disconnections\u003c/code\u003e metric by adding disconnection reason to the \u003ccode\u003egrpc.disconnect_error\u003c/code\u003e label (\u003ca href=\"https://github.com/grpc/proposal/blob/master/A94-subchannel-otel-metrics.md\"\u003egRFC A94\u003c/a\u003e). This provides granular insights into why subchannels are closing. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8973\"\u003e#8973\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003emem: Add \u003ccode\u003emem.Buffer.Slice()\u003c/code\u003e API to slice the buffer like a slice. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8977\"\u003e#8977\u003c/a\u003e)\n\u003cul\u003e\n\u003cli\u003eSpecial Thanks: \u003ca href=\"https://github.com/ash2k\"\u003e\u003ccode\u003e@​ash2k\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003ePerformance Improvements\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003ealts: Pool read buffers to lower memory utilization when sockets are unreadable. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/8964\"\u003e#8964\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003etransport: Pool HTTP/2 framer read buffers to reduce idle memory consumption. Currently limited to Linux for ALTS and non-encrypted transports (TCP, Unix). To disable, set \u003ccode\u003eGRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=false\u003c/code\u003e and report any issues. (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9032\"\u003e#9032\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/caf0772c2bcb8bc15d43eb53448e921f34f0b7e8\"\u003e\u003ccode\u003ecaf0772\u003c/code\u003e\u003c/a\u003e Change version from 1.81.1-dev to 1.81.1 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9122\"\u003e#9122\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/6ccbeebf058ede71e43a5ac28fada2a736573215\"\u003e\u003ccode\u003e6ccbeeb\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9111\"\u003e#9111\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9121\"\u003e#9121\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/b33c29e41b438e371c8504de9bdf64a80098cc29\"\u003e\u003ccode\u003eb33c29e\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9081\"\u003e#9081\u003c/a\u003e into v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9102\"\u003e#9102\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/c45fae6d06a5c192b7b96418a2bc26a96b856834\"\u003e\u003ccode\u003ec45fae6\u003c/code\u003e\u003c/a\u003e Change version to 1.81.1-dev (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9063\"\u003e#9063\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/cb18228317ff523e63d931b4058b0329585b7dcd\"\u003e\u003ccode\u003ecb18228\u003c/code\u003e\u003c/a\u003e Change version to 1.81.0 (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9062\"\u003e#9062\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/96748f973e20bbfcafa19a8bdffc85ad5da138d1\"\u003e\u003ccode\u003e96748f9\u003c/code\u003e\u003c/a\u003e Cherry-pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9105\"\u003e#9105\u003c/a\u003e to 1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9106\"\u003e#9106\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/91832222f0144f76527b630ca55cfea6e1aa015a\"\u003e\u003ccode\u003e9183222\u003c/code\u003e\u003c/a\u003e Cherry pick \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9055\"\u003e#9055\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9032\"\u003e#9032\u003c/a\u003e to v1.81.x (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9095\"\u003e#9095\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/5cba6da4211f3b130238c792937f5921741b616a\"\u003e\u003ccode\u003e5cba6da\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;deps: update dependencies for all modules (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9065\"\u003e#9065\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9067\"\u003e#9067\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/af8a9364aa7523ab24d214e9ef13e6ad64d5c5f9\"\u003e\u003ccode\u003eaf8a936\u003c/code\u003e\u003c/a\u003e deps: update dependencies for all modules (\u003ca href=\"https://redirect.github.com/grpc/grpc-go/issues/9065\"\u003e#9065\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/grpc/grpc-go/commit/cdc60dfaaadde45e16aa3c28237c0e655a722c1a\"\u003e\u003ccode\u003ecdc60df\u003c/code\u003e\u003c/a\u003e transport: optimize heap allocations in ready reader and update syscall conne...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/grpc/grpc-go/compare/v1.80.0...v1.81.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `modernc.org/sqlite` from 1.50.0 to 1.52.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md\"\u003emodernc.org/sqlite's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e2026-06-14 v1.53.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003cstrong\u003eexperimental\u003c/strong\u003e \u003ccode\u003enetbsd/amd64\u003c/code\u003e support, resolving the long-standing build break in [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/246\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/246\u003c/a\u003e). This target is intentionally \u003cstrong\u003enot yet listed among the supported platforms\u003c/strong\u003e in the package documentation: the port had been broken for years and is only now revived, and there is as yet no real-world experience running it under production workloads. Green CI is not the same as battle-tested — so while the full test suite (including the \u003ccode\u003epcache\u003c/code\u003e and \u003ccode\u003evec\u003c/code\u003e packages and the \u003ccode\u003e-race\u003c/code\u003e concurrency test) passes on NetBSD 10.1 / Go 1.26.3, and the entire upstream toolchain (\u003ccode\u003elibc\u003c/code\u003e, \u003ccode\u003ecc\u003c/code\u003e, \u003ccode\u003eccgo\u003c/code\u003e, \u003ccode\u003elibz\u003c/code\u003e, \u003ccode\u003elibtcl8.6\u003c/code\u003e, \u003ccode\u003elibsqlite3\u003c/code\u003e, \u003ccode\u003elibsqlite_vec\u003c/code\u003e) is green on the NetBSD CI builder, the target is offered for evaluation only. If you run NetBSD, please exercise it with your own workloads and report back via \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e; the intent is to promote it to a fully supported platform after a period of broader real-world testing (on the order of a month) elapses without surprises.\u003c/li\u003e\n\u003cli\u003eImplementation notes: the previously shipped \u003ccode\u003elib/sqlite_netbsd_amd64.go\u003c/code\u003e was a stale old-generator transpile that no longer compiled (the \u003ccode\u003emu.enter\u003c/code\u003e/\u003ccode\u003emu.leave\u003c/code\u003e break in \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/246\"\u003e#246\u003c/a\u003e); it is replaced by a fresh new-generator transpile consistent with every other platform, and \u003ccode\u003emodernc.org/sqlite/vec\u003c/code\u003e (sqlite-vec) is vendored and auto-registers on netbsd. Correct operation requires the matching pinned \u003ccode\u003emodernc.org/libc\u003c/code\u003e, which carries two NetBSD-specific fixes found during this work: the \u003ccode\u003emmap(2)\u003c/code\u003e \u003ccode\u003ePAD\u003c/code\u003e-argument ABI (without it, concurrent WAL access faults with SIGBUS in the WAL-index shared memory) and a working \u003ccode\u003eabort(3)\u003c/code\u003e (the prior stub left SQLite's crash-recovery \u003ccode\u003ewritecrash\u003c/code\u003e test unable to terminate by signal). As usual, downstream modules must pin the exact \u003ccode\u003emodernc.org/libc\u003c/code\u003e version this module's \u003ccode\u003ego.mod\u003c/code\u003e pins.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/82\"\u003e#82\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/82\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/82\u003c/a\u003e), thanks Leonardo Taccari (\u003ca href=\"https://github.com/iamleot\"\u003e\u003ccode\u003e@​iamleot\u003c/code\u003e\u003c/a\u003e) and Thomas Klausner (@\u003cem\u003ewiz\u003c/em\u003e)!\u003c/li\u003e\n\u003cli\u003eAdd a Go-facing wrapper for \u003ccode\u003eSQLITE_CONFIG_PCACHE2\u003c/code\u003e. \u003ccode\u003ePageCache\u003c/code\u003e is the factory and \u003ccode\u003eCache\u003c/code\u003e the per-database instance, both idiomatic Go interfaces; \u003ccode\u003ePage\u003c/code\u003e exposes the raw \u003ccode\u003eBuf\u003c/code\u003e and \u003ccode\u003eExtra\u003c/code\u003e pointers that SQLite reads through the C pcache contract. \u003ccode\u003eRegisterPageCache\u003c/code\u003e and \u003ccode\u003eMustRegisterPageCache\u003c/code\u003e install the module process-globally before the first \u003ccode\u003esql.Open\u003c/code\u003e; subsequent Open calls are gated through a one-shot \u003ccode\u003eXsqlite3_config(SQLITE_CONFIG_PCACHE2)\u003c/code\u003e so a too-late Register returns \u003ccode\u003eErrPageCacheTooLate\u003c/code\u003e rather than silently falling through to the built-in pcache1. The binding owns the \u003ccode\u003esqlite3_pcache_page\u003c/code\u003e stub and re-consults the implementation on every Fetch, reusing the stub only when the returned \u003ccode\u003ePage\u003c/code\u003e value is unchanged, which keeps a bounded/evicting purgeable cache safe by construction.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/126\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/126\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e, the reference page-cache implementation that accompanies the \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e \u003ccode\u003eSQLITE_CONFIG_PCACHE2\u003c/code\u003e wrapper. \u003ccode\u003epcache.New\u003c/code\u003e returns a \u003ccode\u003e*Pool\u003c/code\u003e satisfying the \u003ccode\u003ePageCache\u003c/code\u003e interface; register it once with \u003ccode\u003esqlite.MustRegisterPageCache(pcache.New())\u003c/code\u003e and every connection opened afterwards draws its pages from it. Each \u003ccode\u003ePool.Create\u003c/code\u003e mints a fresh per-database \u003ccode\u003eCache\u003c/code\u003e: a bounded, LRU-evicting page store that honours the \u003ccode\u003ePRAGMA cache_size\u003c/code\u003e soft cap and releases the least-recently-unpinned page when it must make room. Page memory — the \u003ccode\u003eBuf\u003c/code\u003e and \u003ccode\u003eExtra\u003c/code\u003e buffers SQLite reads through — is allocated with \u003ccode\u003elibc.Xmalloc\u003c/code\u003e/\u003ccode\u003elibc.Xcalloc\u003c/code\u003e and therefore lives off the Go heap, which keeps SQLite's interior pointer arithmetic on the page extras from tripping the race detector's checkptr enforcement. \u003ccode\u003ePool.Stats\u003c/code\u003e reports aggregate lifetime counters (hits, misses, allocs, evictions, rekeys, truncates, caches) across every cache a Pool has created, so hit/miss/eviction behaviour is observable without instrumenting individual caches. Cross-connection page sharing is out of scope for now; each \u003ccode\u003eCreate\u003c/code\u003e returns an independent per-database cache.\u003c/li\u003e\n\u003cli\u003eValidated end-to-end against the \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/126\"\u003e#126\u003c/a\u003e stress workload (\u003ccode\u003ecache_size=16\u003c/code\u003e, 4000 BLOB rows with DELETE and \u003ccode\u003eincremental_vacuum\u003c/code\u003e, \u003ccode\u003eintegrity_check\u003c/code\u003e clean under \u003ccode\u003e-race\u003c/code\u003e) and benchmarked for the memory-utilization goal tracked in [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/204\"\u003e#204\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/204\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/204\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/127\"\u003e#127\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/127\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/127\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eTighten the \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e reference implementation per cznic's !127 review follow-ups. Adds \u003ccode\u003eStats.EasyRefusals\u003c/code\u003e, a per-Pool counter for the cases where \u003ccode\u003eFetchCreateEasy\u003c/code\u003e returns nil at cap; SQLite reacts to a refusal by spilling dirty pages and retrying with \u003ccode\u003eFetchCreateForce\u003c/code\u003e, so the new field is a direct proxy for the I/O pressure the strict Easy contract imposes vs pcache1's recycle-without-spill behavior. \u003ccode\u003eBenchmarkPoolEvictionChurn\u003c/code\u003e was reworked to drive a rotating-residue DELETE (\u003ccode\u003ek % 3 = i % 3\u003c/code\u003e) and re-insert a matching batch each cycle so the spill pressure recurs and \u003ccode\u003eeasy-refusals/op\u003c/code\u003e scales with \u003ccode\u003eb.N\u003c/code\u003e instead of capping at the seed's one-time first-cycle cost; both existing benchmarks now report \u003ccode\u003eeasy-refusals/op\u003c/code\u003e alongside the page-allocs/evictions metrics. \u003ccode\u003eStats.Evictions\u003c/code\u003e documentation was tightened to match the actual behavior (counts LRU eviction, \u003ccode\u003eUnpin(discard=true)\u003c/code\u003e, \u003ccode\u003eShrink\u003c/code\u003e releases, and \u003ccode\u003eUnpin(discard=false)\u003c/code\u003e trimming back to target after a \u003ccode\u003eFetchCreateForce\u003c/code\u003e overcommit; bulk frees from \u003ccode\u003eTruncate\u003c/code\u003e, \u003ccode\u003eRekey\u003c/code\u003e collisions, and \u003ccode\u003eDestroy\u003c/code\u003e are not counted). The \u003ccode\u003eTestPoolRoundTripIntegrity\u003c/code\u003e comment claiming the workload exercises \u003ccode\u003exRekey\u003c/code\u003e ~15 times has been corrected; the SQL surface does not reliably emit xRekey here, and that codepath is covered by the unit tests instead.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/130\"\u003e#130\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/130\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/130\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eMake \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e \u003ccode\u003e-race\u003c/code\u003e-clean under SQLite's \u003ccode\u003ecache=shared\u003c/code\u003e mode. The pool already runs correctly under shared-cache because every callback into a given \u003ccode\u003eCache\u003c/code\u003e is serialised internally by SQLite's \u003ccode\u003esqlite3BtreeEnter\u003c/code\u003e on the \u003ccode\u003eBtShared\u003c/code\u003e mutex; verified empirically with a lock-free in-flight probe (max-in-flight = 1 on the canonical two-connection workload, 4 on a positive control with goroutines hitting the cache directly). However the Go race detector does not recognise SQLite's libc mutex as a happens-before edge and reports false-positive races on \u003ccode\u003eFetch\u003c/code\u003e vs \u003ccode\u003eUnpin\u003c/code\u003e reads/writes of the per-cache state, which surfaces as \u003ccode\u003eDATA RACE\u003c/code\u003e failures for any user who registers the pool and runs their suite under \u003ccode\u003e-race\u003c/code\u003e. A \u003ccode\u003esync.Mutex\u003c/code\u003e on the \u003ccode\u003ecache\u003c/code\u003e type is now taken on every public method (\u003ccode\u003eSetSize\u003c/code\u003e, \u003ccode\u003ePageCount\u003c/code\u003e, \u003ccode\u003eFetch\u003c/code\u003e, \u003ccode\u003eUnpin\u003c/code\u003e, \u003ccode\u003eRekey\u003c/code\u003e, \u003ccode\u003eTruncate\u003c/code\u003e, \u003ccode\u003eDestroy\u003c/code\u003e, \u003ccode\u003eShrink\u003c/code\u003e), always. On the common non-shared-cache path the lock is uncontended (one atomic CAS per Lock/Unlock pair, negligible next to the SQLite work it bookends); on the shared-cache path it just rubber-stamps the order SQLite's \u003ccode\u003eBtShared\u003c/code\u003e mutex already established. A new \u003ccode\u003ee2e_test.go\u003c/code\u003e \u003ccode\u003eTestSharedCacheTwoConns_Integrity\u003c/code\u003e drives two \u003ccode\u003esql.Conn\u003c/code\u003e against the same \u003ccode\u003ecache=shared\u003c/code\u003e URI with concurrent writers and asserts \u003ccode\u003ePRAGMA integrity_check = ok\u003c/code\u003e under \u003ccode\u003e-race\u003c/code\u003e; passes cleanly with the lock, would surface the false-positive without it. Design notes live in \u003ccode\u003epcache/sharing.go\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/131\"\u003e#131\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/131\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/131\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd a Go wrapper for \u003ccode\u003esqlite3_db_status\u003c/code\u003e, the per-connection runtime counters (cache hit/miss/write/spill rates, schema and prepared-statement memory, lookaside usage, deferred foreign keys). \u003ccode\u003eDBStatus\u003c/code\u003e is an interface implemented by the driver connection and reached through the \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, mirroring the existing \u003ccode\u003eFileControl\u003c/code\u003e surface; \u003ccode\u003eDBStatusOp\u003c/code\u003e is a distinct typed enum of the \u003ccode\u003eSQLITE_DBSTATUS_*\u003c/code\u003e verbs so a counter from a different op family will not compile in its place. \u003ccode\u003eStatus(op, reset)\u003c/code\u003e returns the \u003ccode\u003e(current, high)\u003c/code\u003e pair and optionally resets the counter. This also lets \u003ccode\u003emodernc.org/sqlite/pcache\u003c/code\u003e measure real I/O instead of the \u003ccode\u003eEasyRefusals\u003c/code\u003e proxy: the new \u003ccode\u003eBenchmarkPoolSpillIO\u003c/code\u003e reads the pager-level \u003ccode\u003eSQLITE_DBSTATUS_CACHE_SPILL\u003c/code\u003e/\u003ccode\u003e_CACHE_WRITE\u003c/code\u003e counters, which the pager maintains identically for pcache1 and the pool, making the pcache1-vs-pool comparison cznic raised on the !127 review a genuine apples-to-apples measurement. On the rotating-residue eviction-churn workload at \u003ccode\u003ecache_size=16\u003c/code\u003e the pool spills ~3.5x more than pcache1 (cache-spill/op 31.96 vs 8.96) for ~3% more page writes (cache-write/op 450 vs 436) at identical hit/miss, quantifying the I/O cost of the strict Easy contract that \u003ccode\u003eEasyRefusals\u003c/code\u003e only proxied.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/132\"\u003e#132\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/132\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/132\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003e_dqs\u003c/code\u003e DSN query parameter that disables SQLite's double-quoted string literal compatibility quirk on a per-connection basis. When \u003ccode\u003e_dqs=0\u003c/code\u003e (or any \u003ccode\u003estrconv.ParseBool\u003c/code\u003e false value) is supplied, the driver calls \u003ccode\u003esqlite3_db_config\u003c/code\u003e with \u003ccode\u003eSQLITE_DBCONFIG_DQS_DDL\u003c/code\u003e and \u003ccode\u003eSQLITE_DBCONFIG_DQS_DML\u003c/code\u003e set to off before any statement is prepared, so a double-quoted identifier that fails to resolve raises a parse error instead of silently falling back to a string literal. Absence of the parameter, or \u003ccode\u003e_dqs=1\u003c/code\u003e, leaves SQLite's default behavior unchanged; existing DSNs continue to work byte-for-byte. Resolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/61\"\u003e#61\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/61\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/61\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/128\"\u003e#128\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/128\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/128\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003e_error_rc\u003c/code\u003e DSN query parameter for clearer error reporting on open-time failures. When \u003ccode\u003e_error_rc=1\u003c/code\u003e (or any \u003ccode\u003estrconv.ParseBool\u003c/code\u003e true value) is supplied, error strings synthesised from a \u003ccode\u003e(rc, db)\u003c/code\u003e pair only append \u003ccode\u003esqlite3_errmsg(db)\u003c/code\u003e when \u003ccode\u003esqlite3_extended_errcode(db)\u003c/code\u003e is consistent with the operation rc (full match first, primary code \u003ccode\u003e\u0026amp;0xff\u003c/code\u003e as fallback). On mismatch the canonical \u003ccode\u003esqlite3_errstr(rc)\u003c/code\u003e is used alone, so an open-time \u003ccode\u003eSQLITE_CANTOPEN\u003c/code\u003e no longer carries the temporary handle's stale \u0026quot;out of memory\u0026quot; errmsg. Absence of the parameter, or \u003ccode\u003e_error_rc=0\u003c/code\u003e, preserves the legacy \u0026quot;errstr: errmsg\u0026quot; form byte-for-byte; existing callers that parse error strings are unaffected. The driver's \u003ccode\u003e*Error.Code()\u003c/code\u003e returns the same SQLite result code in both modes. Parsed before \u003ccode\u003esqlite3_open_v2\u003c/code\u003e so open-time errors are covered. Resolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/230\"\u003e#230\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/230\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/230\u003c/a\u003e).\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/129\"\u003e#129\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/129\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/129\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-06-06 v1.52.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to \u003ca href=\"https://sqlite.org/releaselog/3_53_2.html\"\u003eSQLite 3.53.2\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eBackup.Remaining\u003c/code\u003e and \u003ccode\u003eBackup.PageCount\u003c/code\u003e, thin wrappers around the existing \u003ccode\u003esqlite3_backup_remaining\u003c/code\u003e and \u003ccode\u003esqlite3_backup_pagecount\u003c/code\u003e C symbols. Together they expose the per-\u003ccode\u003eStep\u003c/code\u003e progress counters that the underlying backup object already maintains, enabling progress reporting during online backups without dropping to \u003ccode\u003emodernc.org/sqlite/lib\u003c/code\u003e directly.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/122\"\u003e#122\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/122\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/122\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eDrop the redundant second copy in \u003ccode\u003e(*conn).columnText\u003c/code\u003e, the path that backs every \u003ccode\u003eRows.Scan\u003c/code\u003e into a Go \u003ccode\u003estring\u003c/code\u003e for a TEXT column. The value's bytes are still copied once out of SQLite-owned memory into a fresh Go buffer; that buffer is then reinterpreted as the result string with \u003ccode\u003eunsafe.String\u003c/code\u003e rather than copied a second time by the implicit \u003ccode\u003estring([]byte)\u003c/code\u003e conversion. This removes one allocation per TEXT value per row and roughly halves the bytes allocated on that path; on the new \u003ccode\u003eBenchmarkColumnTextScan\u003c/code\u003e cases it is ~13–20% faster for payloads of 256 B and larger, with no measurable change for very short strings. Purely internal: no API or behavioral change, and the returned string never aliases SQLite's buffer.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/123\"\u003e#123\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/123\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/123\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eCache each result column's declared type once per result set in \u003ccode\u003enewRows\u003c/code\u003e instead of recomputing it on every row. The TEXT branch of \u003ccode\u003eRows.Next\u003c/code\u003e calls \u003ccode\u003eColumnTypeDatabaseTypeName\u003c/code\u003e for every TEXT column on every row (independent of any DSN flag), which previously did a \u003ccode\u003elibc.GoString\u003c/code\u003e + \u003ccode\u003estrings.ToUpper\u003c/code\u003e each time; that lookup is now a single index into a cached, pre-uppercased \u003ccode\u003e[]string\u003c/code\u003e, and \u003ccode\u003eColumnTypeScanType\u003c/code\u003e reads the same cache and drops its per-call \u003ccode\u003estrings.ToLower\u003c/code\u003e. The declared type is fixed for the lifetime of a prepared statement, so the C round-trip is paid once per column rather than once per column per row, removing exactly 1 alloc + 8 B per TEXT column per row from the \u003ccode\u003eNext\u003c/code\u003e hot path. The new \u003ccode\u003eBenchmarkTextToTimeScan\u003c/code\u003e cases show ~7% faster on a 1000-row DATETIME SELECT under \u003ccode\u003e_texttotime=1\u003c/code\u003e. Purely internal: \u003ccode\u003eColumnTypeDatabaseTypeName\u003c/code\u003e and \u003ccode\u003eColumnTypeScanType\u003c/code\u003e return identical values, no API or behavioral change.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/124\"\u003e#124\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/124\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/124\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eCache, per result column, the \u003ccode\u003eparseTimeFormats\u003c/code\u003e index that first parsed a TEXT-stored DATE/DATETIME/TIMESTAMP value, and try that format first on later rows instead of re-walking the list from the top. \u003ccode\u003e(*conn).parseTime\u003c/code\u003e previously ran \u003ccode\u003etime.Parse\u003c/code\u003e down the format list on every such row; for the canonical SQLite TEXT datetime format every row paid two failed \u003ccode\u003etime.Parse\u003c/code\u003e attempts — each allocating a \u003ccode\u003e*time.ParseError\u003c/code\u003e — before the match. On a 1000-row DATETIME TEXT SELECT this cuts ~50% of allocs/op and ~57% of B/op and is ~37% faster. The fall-through chain is preserved exactly: the seven formats are mutually exclusive, so the cached hint can never select a different match than the in-order scan, and the parsed \u003ccode\u003edriver.Value\u003c/code\u003e is identical to before. Purely internal: no API or behavioral change.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/125\"\u003e#125\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/125\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/125\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e2026-05-28 v1.51.0:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePool the \u003ccode\u003e[]driver.Value\u003c/code\u003e slice passed to scalar/aggregate UDF callbacks and to vtab \u003ccode\u003eFilter\u003c/code\u003e/\u003ccode\u003eInsert\u003c/code\u003e/\u003ccode\u003eUpdate\u003c/code\u003e callbacks, eliminating the dominant per-row allocation on UDF-heavy queries. Benchmarks on a 1000-row, 3-arg noop scalar UDF show ~40% fewer bytes/op and ~15% fewer allocs/op.\u003c/li\u003e\n\u003cli\u003eDocument the matching \u0026quot;arguments are not valid past return\u0026quot; contract on \u003ccode\u003evtab.Cursor.Filter\u003c/code\u003e and \u003ccode\u003evtab.Updater.Insert\u003c/code\u003e/\u003ccode\u003eUpdate\u003c/code\u003e, consistent with the existing rule for \u003ccode\u003eFunctionImpl.Scalar\u003c/code\u003e / \u003ccode\u003eAggregateFunction.Step\u003c/code\u003e / \u003ccode\u003eWindowInverse\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eResolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/226\"\u003e#226\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/226\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/226\u003c/a\u003e). See [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/114\"\u003e#114\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/114\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/114\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eFileControl.FileControlDataVersion\u003c/code\u003e, a wrapper around \u003ccode\u003eSQLITE_FCNTL_DATA_VERSION\u003c/code\u003e for observing pager-cache data-version changes, including those made on the same connection. Useful as a primitive for application-level cache invalidation.\u003c/li\u003e\n\u003cli\u003eExposed via the idiomatic \u003ccode\u003edatabase/sql\u003c/code\u003e escape hatch \u003ccode\u003e(*sql.Conn).Raw()\u003c/code\u003e, consistent with the existing \u003ccode\u003eFileControlPersistWAL\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eSee [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/115\"\u003e#115\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/115\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/115\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eFix a regression where in-memory connections (\u003ccode\u003e:memory:\u003c/code\u003e, \u003ccode\u003efile::memory:\u003c/code\u003e, shared-cache memory URIs) were discarded by \u003ccode\u003edatabase/sql\u003c/code\u003e after a context-cancelled query, taking the entire in-memory store with them. The fix for \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/198\"\u003e#198\u003c/a\u003e had added an \u003ccode\u003esqlite3_is_interrupted\u003c/code\u003e check to the connection validator that mistakenly applied to in-memory connections too, re-introducing the bug originally fixed by !74. File-backed connections keep the existing behaviour and are still discarded after an interrupt.\u003c/li\u003e\n\u003cli\u003eResolves [GitLab issue \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/196\"\u003e#196\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/issues/196\"\u003ehttps://gitlab.com/cznic/sqlite/-/issues/196\u003c/a\u003e). See [GitLab merge request \u003ca href=\"https://gitlab.com/cznic/sqlite/issues/116\"\u003e#116\u003c/a\u003e](\u003ca href=\"https://gitlab.com/cznic/sqlite/-/merge_requests/116\"\u003ehttps://gitlab.com/cznic/sqlite/-/merge_requests/116\u003c/a\u003e), thanks Ian Chechin!\u003c/li\u003e\n\u003cli\u003eAdd an opt-in \u003ccode\u003eFunctionImpl.VolatileArgs\u003c/code\u003e flag that hands TEXT and BLOB arguments to scalar and aggregate UDF callbacks as zero-copy views (\u003ccode\u003eunsafe.String\u003c/code\u003e...\n\n_Description has been truncated_","html_url":"https://github.com/llm-d/llm-d-inference-sim/pull/543","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/llm-d%2Fllm-d-inference-sim/issues/543","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/543/packages"}},{"old_version":"1.63.0","new_version":"1.71.0","update_type":"minor","path":null,"pr_created_at":"2026-05-11T17:13:21.000Z","version_change":"1.63.0 → 1.71.0","issue":{"uuid":"4422799933","node_id":"PR_kwDOIPpCRM7aWWvE","number":731,"state":"open","title":"chore: bump github.com/valyala/fasthttp from 1.63.0 to 1.71.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-11T17:13:21.000Z","updated_at":"2026-05-11T17:15:48.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.63.0","new_version":"1.71.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.63.0 to 1.71.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.71.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(client): add RetryIfErrUpstream function to handle upstream information by \u003ca href=\"https://github.com/mdenushev\"\u003e\u003ccode\u003e@​mdenushev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2176\"\u003evalyala/fasthttp#2176\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMatch net/http sensitive header redirect policy by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2181\"\u003evalyala/fasthttp#2181\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize first-line header setters to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2182\"\u003evalyala/fasthttp#2182\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eserver: apply ReadTimeout before first byte with ReduceMemoryUsage by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2183\"\u003evalyala/fasthttp#2183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject invalid trailer names by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2188\"\u003evalyala/fasthttp#2188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject pre-colon whitespace in request headers by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2187\"\u003evalyala/fasthttp#2187\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize redirect Location header to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2186\"\u003evalyala/fasthttp#2186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eserver: keep hijacked reader out of pool by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2184\"\u003evalyala/fasthttp#2184\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize cookie setters to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2185\"\u003evalyala/fasthttp#2185\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add ExpectHandler for richer Expect: 100-continue handling by \u003ca href=\"https://github.com/miretskiy\"\u003e\u003ccode\u003e@​miretskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2175\"\u003evalyala/fasthttp#2175\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ehttp: reject whitespace before chunk extensions by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2193\"\u003evalyala/fasthttp#2193\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject unsupported response Transfer-Encoding by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2192\"\u003evalyala/fasthttp#2192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: match net/http CL+TE handling by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2190\"\u003evalyala/fasthttp#2190\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.25.0 to 2.26.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2195\"\u003evalyala/fasthttp#2195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2196\"\u003evalyala/fasthttp#2196\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(prefork): Enhance prefork management with WatchMaster, CommandProducer, and Windows support by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2180\"\u003evalyala/fasthttp#2180\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/miretskiy\"\u003e\u003ccode\u003e@​miretskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2175\"\u003evalyala/fasthttp#2175\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.70.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eGo 1.26 and golangci-lint updates by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2146\"\u003evalyala/fasthttp#2146\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd WithLimit methods for uncompression by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2147\"\u003evalyala/fasthttp#2147\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHonor Root for fs.FS and normalize fs-style roots by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2145\"\u003evalyala/fasthttp#2145\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize header values in all setter paths to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2162\"\u003evalyala/fasthttp#2162\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd ServeFileLiteral, ServeFSLiteral and SendFileLiteral by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2163\"\u003evalyala/fasthttp#2163\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePrevent chunk extension request smuggling by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2165\"\u003evalyala/fasthttp#2165\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate request URI format during header parsing to reject malformed requests by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2168\"\u003evalyala/fasthttp#2168\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eHTTP1/1 requires exactly one Host header by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2164\"\u003evalyala/fasthttp#2164\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eStrict HTTP version validation and simplified first line parsing by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2167\"\u003evalyala/fasthttp#2167\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eOnly normalize pre-colon whitespace for HTTP headers by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2172\"\u003evalyala/fasthttp#2172\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efs: reject '..' path segments in rewritten paths by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2173\"\u003evalyala/fasthttp#2173\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efasthttpproxy: reject CRLF in HTTP proxy CONNECT target by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2174\"\u003evalyala/fasthttp#2174\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efasthttpproxy: scope proxy auth cache to GetDialFunc by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2144\"\u003evalyala/fasthttp#2144\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: enhance performance by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2135\"\u003evalyala/fasthttp#2135\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eexport ErrConnectionClosed by \u003ca href=\"https://github.com/pjebs\"\u003e\u003ccode\u003e@​pjebs\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2152\"\u003evalyala/fasthttp#2152\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: detect master process death in prefork children by \u003ca href=\"https://github.com/meruiden\"\u003e\u003ccode\u003e@​meruiden\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2158\"\u003evalyala/fasthttp#2158\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ereturn prev values by \u003ca href=\"https://github.com/pjebs\"\u003e\u003ccode\u003e@​pjebs\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2123\"\u003evalyala/fasthttp#2123\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: added httpgo to related projects by \u003ca href=\"https://github.com/MUlt1mate\"\u003e\u003ccode\u003e@​MUlt1mate\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2169\"\u003evalyala/fasthttp#2169\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump actions/upload-artifact from 6 to 7 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2149\"\u003evalyala/fasthttp#2149\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/andybalholm/brotli from 1.2.0 to 1.2.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2170\"\u003evalyala/fasthttp#2170\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.2 to 1.18.3 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2129\"\u003evalyala/fasthttp#2129\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.3 to 1.18.4 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2140\"\u003evalyala/fasthttp#2140\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.4 to 1.18.5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2166\"\u003evalyala/fasthttp#2166\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e9208ecebf0c102176bb0635043c17333b10401d\"\u003e\u003ccode\u003ee9208ec\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;feat(prefork): graceful shutdown, leak fixes, hook robustness\u0026quot; commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/481e579af9e7d79f9ce27909edd2c42ef9dce173\"\u003e\u003ccode\u003e481e579\u003c/code\u003e\u003c/a\u003e feat(prefork): Enhance prefork management with WatchMaster, CommandProducer, ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/805cd1046567aa8a8b97a8bfe9e7b411621f68b2\"\u003e\u003ccode\u003e805cd10\u003c/code\u003e\u003c/a\u003e Add note on MaxResponseBodySize compatibility with StreamResponseBody\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5b5c1be52ca382dcea0ed86931b3f1d2aba9dce6\"\u003e\u003ccode\u003e5b5c1be\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2196\"\u003e#2196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d6a99db432025de9ae13051cb42b3e6c3d6568a3\"\u003e\u003ccode\u003ed6a99db\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.25.0 to 2.26.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2195\"\u003e#2195\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f36c9009027f81f4fbf304822f96752517b08949\"\u003e\u003ccode\u003ef36c900\u003c/code\u003e\u003c/a\u003e header: match net/http CL+TE handling (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2190\"\u003e#2190\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0b4cede30fa0eb22f9d10999e23ebaabba15e107\"\u003e\u003ccode\u003e0b4cede\u003c/code\u003e\u003c/a\u003e header: reject unsupported response Transfer-Encoding (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2192\"\u003e#2192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c497746f7d52ab88597dc88310e7f797cc7755aa\"\u003e\u003ccode\u003ec497746\u003c/code\u003e\u003c/a\u003e http: reject whitespace before chunk extensions (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2193\"\u003e#2193\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/97b38d3a4884b7c3d8891750a4c752073bc3c152\"\u003e\u003ccode\u003e97b38d3\u003c/code\u003e\u003c/a\u003e server: document SaveMultipartFile path trust requirement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/19e4b24955fb0ef764229802378a5e36ae7a822b\"\u003e\u003ccode\u003e19e4b24\u003c/code\u003e\u003c/a\u003e feat: add ExpectHandler for richer Expect: 100-continue handling (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2175\"\u003e#2175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.63.0...v1.71.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.63.0\u0026new-version=1.71.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/officialmofabs/codeserver/pull/731","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/officialmofabs%2Fcodeserver/issues/731","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/731/packages"}},{"old_version":"1.70.0","new_version":"1.71.0","update_type":"minor","path":"/examples","pr_created_at":"2026-05-11T04:53:03.000Z","version_change":"1.70.0 → 1.71.0","issue":{"uuid":"4418158280","node_id":"PR_kwDOFrKK987aHIx1","number":350,"state":"open","title":"Bump github.com/valyala/fasthttp from 1.70.0 to 1.71.0 in /examples","user":"dependabot[bot]","labels":[":hamster: Go",":shamrock: Examples dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-11T04:53:03.000Z","updated_at":"2026-05-11T04:54:14.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/valyala/fasthttp","old_version":"1.70.0","new_version":"1.71.0","repository_url":"https://github.com/valyala/fasthttp"}],"path":"/examples","ecosystem":"go"},"body":"Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.70.0 to 1.71.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/valyala/fasthttp/releases\"\u003egithub.com/valyala/fasthttp's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.71.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat(client): add RetryIfErrUpstream function to handle upstream information by \u003ca href=\"https://github.com/mdenushev\"\u003e\u003ccode\u003e@​mdenushev\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2176\"\u003evalyala/fasthttp#2176\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eMatch net/http sensitive header redirect policy by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2181\"\u003evalyala/fasthttp#2181\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize first-line header setters to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2182\"\u003evalyala/fasthttp#2182\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eserver: apply ReadTimeout before first byte with ReduceMemoryUsage by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2183\"\u003evalyala/fasthttp#2183\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject invalid trailer names by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2188\"\u003evalyala/fasthttp#2188\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject pre-colon whitespace in request headers by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2187\"\u003evalyala/fasthttp#2187\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize redirect Location header to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2186\"\u003evalyala/fasthttp#2186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eserver: keep hijacked reader out of pool by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2184\"\u003evalyala/fasthttp#2184\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSanitize cookie setters to prevent CRLF injection by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2185\"\u003evalyala/fasthttp#2185\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add ExpectHandler for richer Expect: 100-continue handling by \u003ca href=\"https://github.com/miretskiy\"\u003e\u003ccode\u003e@​miretskiy\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2175\"\u003evalyala/fasthttp#2175\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ehttp: reject whitespace before chunk extensions by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2193\"\u003evalyala/fasthttp#2193\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: reject unsupported response Transfer-Encoding by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2192\"\u003evalyala/fasthttp#2192\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eheader: match net/http CL+TE handling by \u003ca href=\"https://github.com/erikdubbelboer\"\u003e\u003ccode\u003e@​erikdubbelboer\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2190\"\u003evalyala/fasthttp#2190\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump securego/gosec from 2.25.0 to 2.26.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2195\"\u003evalyala/fasthttp#2195\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2196\"\u003evalyala/fasthttp#2196\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat(prefork): Enhance prefork management with WatchMaster, CommandProducer, and Windows support by \u003ca href=\"https://github.com/ReneWerner87\"\u003e\u003ccode\u003e@​ReneWerner87\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2180\"\u003evalyala/fasthttp#2180\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/miretskiy\"\u003e\u003ccode\u003e@​miretskiy\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/valyala/fasthttp/pull/2175\"\u003evalyala/fasthttp#2175\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\"\u003ehttps://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/e9208ecebf0c102176bb0635043c17333b10401d\"\u003e\u003ccode\u003ee9208ec\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;feat(prefork): graceful shutdown, leak fixes, hook robustness\u0026quot; commit\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/481e579af9e7d79f9ce27909edd2c42ef9dce173\"\u003e\u003ccode\u003e481e579\u003c/code\u003e\u003c/a\u003e feat(prefork): Enhance prefork management with WatchMaster, CommandProducer, ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/805cd1046567aa8a8b97a8bfe9e7b411621f68b2\"\u003e\u003ccode\u003e805cd10\u003c/code\u003e\u003c/a\u003e Add note on MaxResponseBodySize compatibility with StreamResponseBody\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/5b5c1be52ca382dcea0ed86931b3f1d2aba9dce6\"\u003e\u003ccode\u003e5b5c1be\u003c/code\u003e\u003c/a\u003e chore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2196\"\u003e#2196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/d6a99db432025de9ae13051cb42b3e6c3d6568a3\"\u003e\u003ccode\u003ed6a99db\u003c/code\u003e\u003c/a\u003e chore(deps): bump securego/gosec from 2.25.0 to 2.26.1 (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2195\"\u003e#2195\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/f36c9009027f81f4fbf304822f96752517b08949\"\u003e\u003ccode\u003ef36c900\u003c/code\u003e\u003c/a\u003e header: match net/http CL+TE handling (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2190\"\u003e#2190\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/0b4cede30fa0eb22f9d10999e23ebaabba15e107\"\u003e\u003ccode\u003e0b4cede\u003c/code\u003e\u003c/a\u003e header: reject unsupported response Transfer-Encoding (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2192\"\u003e#2192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/c497746f7d52ab88597dc88310e7f797cc7755aa\"\u003e\u003ccode\u003ec497746\u003c/code\u003e\u003c/a\u003e http: reject whitespace before chunk extensions (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2193\"\u003e#2193\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/97b38d3a4884b7c3d8891750a4c752073bc3c152\"\u003e\u003ccode\u003e97b38d3\u003c/code\u003e\u003c/a\u003e server: document SaveMultipartFile path trust requirement\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/valyala/fasthttp/commit/19e4b24955fb0ef764229802378a5e36ae7a822b\"\u003e\u003ccode\u003e19e4b24\u003c/code\u003e\u003c/a\u003e feat: add ExpectHandler for richer Expect: 100-continue handling (\u003ca href=\"https://redirect.github.com/valyala/fasthttp/issues/2175\"\u003e#2175\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp\u0026package-manager=go_modules\u0026previous-version=1.70.0\u0026new-version=1.71.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/mymmrac/telego/pull/350","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mymmrac%2Ftelego/issues/350","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/350/packages"}}]}