Sourced from github.com/valyala/fasthttp's releases.

v1.68.0

What's Changed

• Fix named return bugs by @​erikdubbelboer in https://github.com/valyala/fasthttp/commit/1b8c5593da699309522dee00ad1d6c913482a0f3
• chore(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 by @​dependabot[bot] in valyala/fasthttp#2087
• chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 by @​dependabot[bot] in valyala/fasthttp#2086
• chore(deps): bump golang.org/x/net from 0.45.0 to 0.46.0 by @​dependabot[bot] in valyala/fasthttp#2085
• chore(deps): bump securego/gosec from 2.22.9 to 2.22.10 by @​dependabot[bot] in valyala/fasthttp#2088
• chore(deps): bump github.com/klauspost/compress from 1.18.0 to 1.18.1 by @​dependabot[bot] in valyala/fasthttp#2089

Full Changelog: https://github.com/valyala/fasthttp/compare/v1.67.0...v1.68.0

v1.67.0

Special thanks to the following security researchers who reported the issues fixed in this release:

• @​zer0yu (Enze Wang)
• @​P3ngu1nW (Jingcheng Yang)
• @​9vvert (Zehui Miao)

What's Changed

• Add DNS cache management methods for TCPDialer by @​aabishkaryal in valyala/fasthttp#2072
• Fix username:password@ validation in urls by @​erikdubbelboer in valyala/fasthttp#2080
• Validate IPv6 addresses in urls by @​erikdubbelboer in valyala/fasthttp#2079
• Validate schemes by @​erikdubbelboer in valyala/fasthttp#2078
• Reject invalid hosts with multiple port delimiters by @​erikdubbelboer in valyala/fasthttp#2077
• Reject backslash absolute URIs and cache parse errors by @​erikdubbelboer in valyala/fasthttp#2075
• Reject bad ipv6 hostnames by @​erikdubbelboer in valyala/fasthttp#2076
• Reimplement flushing support for fasthttpadaptor by @​erikdubbelboer in valyala/fasthttp#2081
• chore(deps): bump securego/gosec from 2.22.8 to 2.22.9 by @​dependabot[bot] in valyala/fasthttp#2073

New Contributors

• @​aabishkaryal made their first contribution in valyala/fasthttp#2072

Full Changelog: https://github.com/valyala/fasthttp/compare/v1.66.0...v1.67.0

v1.66.0

What's Changed

• chore(deps): bump securego/gosec from 2.22.7 to 2.22.8 by @​dependabot[bot] in valyala/fasthttp#2056
• docs: add fasthttp-auth to related projects section by @​FAUST-BENCHOU in valyala/fasthttp#2057
• server: refactor to use atomic type by @​cuiweixie in valyala/fasthttp#2058
• chore(deps): bump actions/setup-go from 5 to 6 by @​dependabot[bot] in valyala/fasthttp#2060
• Fix extra whitespace parsing in HTTP request lines to prevent cache poisoning by @​Copilot in valyala/fasthttp#2061
• Drop Go 1.23 support by @​erikdubbelboer in valyala/fasthttp#2065
• Add flushing support to fasthttpadaptor by @​grivera64 in valyala/fasthttp#2054

New Contributors

• @​FAUST-BENCHOU made their first contribution in valyala/fasthttp#2057
• @​cuiweixie made their first contribution in valyala/fasthttp#2058
• @​Copilot made their first contribution in valyala/fasthttp#2061 😄
• @​grivera64 made their first contribution in valyala/fasthttp#2054

... (truncated)

• 1b8c559 Fix named return bugs
• 9ca6293 chore(deps): bump github.com/klauspost/compress from 1.18.0 to 1.18.1 (#2089)
• 77468f6 chore(deps): bump securego/gosec from 2.22.9 to 2.22.10 (#2088)
• 3a2fdec chore(deps): bump golang.org/x/net from 0.45.0 to 0.46.0 (#2085)
• 59f58c0 chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#2086)
• dbfb82a chore(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 (#2087)
• b26ff48 chore(deps): bump golang.org/x/net from 0.44.0 to 0.45.0 (#2084)
• 1962450 Fix copyTrailer
• 2272d53 Reimplement flushing support for fasthttpadaptor (#2081)
• a17ec74 Reject bad ipv6 hostnames (#2076)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions