v1.68.0

What's Changed

• Fix named return bugs by @erikdubbelboer in 1b8c559
• chore(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 by @dependabot[bot] in #2087
• chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 by @dependabot[bot] in #2086
• chore(deps): bump golang.org/x/net from 0.45.0 to 0.46.0 by @dependabot[bot] in #2085
• chore(deps): bump securego/gosec from 2.22.9 to 2.22.10 by @dependabot[bot] in #2088
• chore(deps): bump github.com/klauspost/compress from 1.18.0 to 1.18.1 by @dependabot[bot] in #2089

Full Changelog: v1.67.0...v1.68.0

v1.67.0

Special thanks to the following security researchers who reported the issues fixed in this release:

• @zer0yu (Enze Wang)
• @P3ngu1nW (Jingcheng Yang)
• @9vvert (Zehui Miao)

What's Changed

• Add DNS cache management methods for TCPDialer by @aabishkaryal in #2072
• Fix username:password@ validation in urls by @erikdubbelboer in #2080
• Validate IPv6 addresses in urls by @erikdubbelboer in #2079
• Validate schemes by @erikdubbelboer in #2078
• Reject invalid hosts with multiple port delimiters by @erikdubbelboer in #2077
• Reject backslash absolute URIs and cache parse errors by @erikdubbelboer in #2075
• Reject bad ipv6 hostnames by @erikdubbelboer in #2076
• Reimplement flushing support for fasthttpadaptor by @erikdubbelboer in #2081
• chore(deps): bump securego/gosec from 2.22.8 to 2.22.9 by @dependabot[bot] in #2073

New Contributors

• @aabishkaryal made their first contribution in #2072

Full Changelog: v1.66.0...v1.67.0

v1.66.0

What's Changed

• chore(deps): bump securego/gosec from 2.22.7 to 2.22.8 by @dependabot[bot] in #2056
• docs: add fasthttp-auth to related projects section by @FAUST-BENCHOU in #2057
• server: refactor to use atomic type by @cuiweixie in #2058
• chore(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #2060
• Fix extra whitespace parsing in HTTP request lines to prevent cache poisoning by @Copilot in #2061
• Drop Go 1.23 support by @erikdubbelboer in #2065
• Add flushing support to fasthttpadaptor by @grivera64 in #2054

New Contributors

• @FAUST-BENCHOU made their first contribution in #2057
• @cuiweixie made their first contribution in #2058
• @Copilot made their first contribution in #2061 😄
• @grivera64 made their first contribution in #2054

Full Changelog: v1.65.0...v1.66.0

v1.65.0

‼️ ⚠️ backwards incompatibility! ⚠️ ‼️

In this version of fasthttp, headers delimited by just \n (instead of \r\n) are no longer supported!

What's Changed

• Rewrite header parsing to improve spec compliance by @erikdubbelboer in #2030
• Simplify Client.Do function and lock usage by @byte0o in #2038
• chore(deps): bump securego/gosec from 2.22.5 to 2.22.7 by @dependabot[bot] in #2039
• Fix trailer security by @erikdubbelboer in #2043
• Fix RequestHeader.ContentLength() if disableSpecialHeader is true by @erikdubbelboer in #2042
• Add reuseport support for Solaris by @jwntree in #2046
• test: replace atomic operations with atomic types by @alexandear in #2048
• chore(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @dependabot[bot] in #2049
• Optimize fs to have 0 allocations by @erikdubbelboer in #2052
• chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #2055

New Contributors

• @jwntree made their first contribution in #2046

Full Changelog: v1.64.0...v1.65.0

v1.64.0

⚠️ Deprecation warning! ⚠️

In the next version of fasthttp headers delimited by just \n (instead of \r\n) are no longer supported!

What's Changed

• Add warning for deprecated newline separator by @erikdubbelboer in #2031
• refact: eliminate duplication in Request/Response via struct embedding by @ksw2000 in #2027
• chore(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 by @dependabot[bot] in #2034
• chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 by @dependabot[bot] in #2036
• chore(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @dependabot[bot] in #2035

Full Changelog: v1.63.0...v1.64.0

v1.63.0

What's Changed

• chore(deps): bump securego/gosec from 2.22.3 to 2.22.4 by @dependabot in #2007
• fix: removed resolved issue link from readme file, issue no longer ex… by @viralkansarav in #2008
• feat: Add iter.Seq2 iterator by @ksw2000 in #2011
• Removed old information from main documentation as these functions does not exist by @viralkansarav in #2012
• Proposal : To add Unsafe Zero-Allocation Conversions Sections in main documentation by @viralkansarav in #2013
• chore(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @dependabot in #2018
• Drop support before go1.20 by @erikdubbelboer in #2022
• chore(deps): bump securego/gosec from 2.22.4 to 2.22.5 by @dependabot in #2025
• Implement io.StringWriter on some more types by @erikdubbelboer in #2023
• chore(deps): bump github.com/andybalholm/brotli from 1.1.1 to 1.2.0 by @dependabot in #2029

New Contributors

• @viralkansarav made their first contribution in #2008

Full Changelog: v1.62.0...v1.63.0

v1.62.0

What's Changed

• Add support for streaming identity-encoded or unknown length response bodies by @osxtest in #2000
• feat: move user values to Request structure by @mdenushev in #1999
• chore(deps): bump golangci/golangci-lint-action from 7 to 8 by @dependabot in #2001
• chore(deps): bump golang.org/x/crypto from 0.37.0 to 0.38.0 by @dependabot in #2002
• chore(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 by @dependabot in #2003
• modify acceptConn for RIO by @wamshawn in #2005

New Contributors

• @osxtest made their first contribution in #2000
• @wamshawn made their first contribution in #2005

Full Changelog: v1.61.0...v1.62.0

v1.61.0

What's Changed

• chore(deps): bump golang.org/x/sys from 0.31.0 to 0.32.0 by @dependabot in #1989
• chore(deps): bump golang.org/x/crypto from 0.36.0 to 0.37.0 by @dependabot in #1988
• chore(deps): bump securego/gosec from 2.22.2 to 2.22.3 by @dependabot in #1990
• chore(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @dependabot in #1991
• Fix round robin addresses in dual stack dialing by @raviqqe in #1995
• Fix panic when perIPConn.Close is called multiple times by @erikdubbelboer in #1993
• early hint functionality by @pjebs in #1996

New Contributors

• @raviqqe made their first contribution in #1995

Full Changelog: v1.60.0...v1.61.0

v1.60.0

What's Changed

• perf: split delAllArgs into delAllArgs and delAllArgsStable by @ksw2000 in #1945
• fix: accept invalid headers with a space by @ksw2000 in #1953
• Drop support for Go 1.21, add support for 1.24 by @erikdubbelboer in #1959
• chore(deps): bump github.com/klauspost/compress from 1.17.11 to 1.18.0 by @dependabot in #1958
• add related project for opentelemetry-go-auto-instrumentation by @123liuziming in #1962
• Fix normalizeHeaderValue by @erikdubbelboer in #1963
• chore(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 by @dependabot in #1968
• chore(deps): bump securego/gosec from 2.22.1 to 2.22.2 by @dependabot in #1972
• chore(deps): bump golang.org/x/net from 0.36.0 to 0.37.0 by @dependabot in #1971
• Update golangci-lint to v2 by @erikdubbelboer in #1980
• chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @dependabot in #1983
• Remove idleConns mutex for every request by @erikdubbelboer in #1986

New Contributors

• @123liuziming made their first contribution in #1962

Full Changelog: v1.59.0...v1.60.0

v1.59.0

What's Changed

• fix: Method-preserving doRequestFollowRedirects by @prepaser in #1920
• fix: "identity" has been deprecated #1909 by @ksw2000 in #1919
• Fix parsing of bad urls with # by @erikdubbelboer in #1915
• docs: improve README formatting and section headers by @alexandear in #1925
• perf: use buf in Args instead of bytebufferpool by @ksw2000 in #1931
• client: Client {} supports custom Transport by @zhangyongding in #1935
• Migrate valyala/tcplisten to this repo #1926 by @ksw2000 in #1929
• client: Modify some interfaces to be exportable by @zhangyongding in #1936
• Try to fix tests with dial timeouts by @erikdubbelboer in #1940
• client: add interfaces for reading clientConn by @zhangyongding in #1941
• Refactor trailer Field for Improved Memory Efficiency and Performance by @ksw2000 in #1928
• fix: compression priority by @inetol in #1950
• add dummy support for js,wasm by @pjebs in #1955
• chore(deps): bump golang.org/x/crypto from 0.29.0 to 0.31.0 by @dependabot in #1918
• chore(deps): bump golang.org/x/net from 0.31.0 to 0.32.0 by @dependabot in #1910
• chore(deps): bump golang.org/x/net from 0.32.0 to 0.33.0 by @dependabot in #1927
• chore(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0 by @dependabot in #1932
• chore(deps): bump golang.org/x/crypto from 0.31.0 to 0.32.0 by @dependabot in #1934
• chore(deps): bump securego/gosec from 2.21.4 to 2.22.0 by @dependabot in #1937
• chore(deps): bump golang.org/x/net from 0.33.0 to 0.34.0 by @dependabot in #1933
• chore(deps): bump golang.org/x/sys from 0.29.0 to 0.30.0 by @dependabot in #1947
• chore(deps): bump golang.org/x/crypto from 0.32.0 to 0.33.0 by @dependabot in #1951
• chore(deps): bump golang.org/x/net from 0.34.0 to 0.35.0 by @dependabot in #1952
• chore(deps): bump securego/gosec from 2.22.0 to 2.22.1 by @dependabot in #1956

New Contributors

• @prepaser made their first contribution in #1920
• @inetol made their first contribution in #1950

Full Changelog: v1.58.0...v1.59.0