Skip to content

fix(deps): update go dependencies (major) - abandoned#21

Closed
renovate[bot] wants to merge 2 commits intomainfrom
renovate/major-go-dependencies
Closed

fix(deps): update go dependencies (major) - abandoned#21
renovate[bot] wants to merge 2 commits intomainfrom
renovate/major-go-dependencies

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 22, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
github.com/gofiber/fiber/v2 v2.52.10 → v3.0.0 age confidence
github.com/golangci/golangci-lint v1.64.8 → v2.8.0 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

gofiber/fiber (github.com/gofiber/fiber/v2)

v3.0.0

Compare Source

For a detailed view of all changes and the migration guide, visit:
https://docs.gofiber.io/next/whats_new

Try our new migration tool to help you upgrade from v2 to v3:

go install github.com/gofiber/cli/fiber@latest
fiber migrate --to v3.0.0

What's Changed

🚀 New Features
  • 🚀 App (Docs)
    • Rename WithTlsConfig method to WithTLSConfig in (#​2570)
    • Use any as default Message type of Error struct in (#​1925)
    • Add support for custom constraints in (#​2807)
    • Add support for trusted origins in (#​2910)
    • Add DialDualStack option for upstream IPv6 support in (#​2900)
    • TrustedOrigins using https://*.example.com style subdomains in (#​2925)
    • Add configuration support to c.SendFile() in (#​3017)
    • Add CHIPS support to Cookie in (#​3047)
    • Add TestConfig to app.Test() for configurable testing in (#​3161)
    • Add buffered streaming support in (#​3131)
    • Add support for AutoTLS / ACME in (#​3201)
    • Add support for configuring TLS Min Version in (#​3248)
    • Fix square bracket notation in Multipart FormData in (#​3235)
    • Add support for application state management in (#​3360)
    • Add support for NewErrorf in (#​3463)
    • Add UNIX socket support in (#​3535)
    • Add support for Msgpack in (#​3565)
    • Add default UTF-8 charset in (#​3583)
    • Support for SendEarlyHints in (#​3483)
    • Add conditional copy helpers in (#​3703)
    • Add request inspection helpers in (#​3727)
    • Add support for redacting values in (#​3759)
    • Add support for handling unsupported HTTP methods as HTTP 501 in (#​3854)
    • Add support for ReloadViews() in (#​3876)
    • Expose startup message customization hooks in (#​3824)
    • Migrate from UUIDv4 to SecureToken for key generation in (#​3946)
    • Add ExpirationFunc for dynamic expiration in (#​3984)
    • Auto-enforce Secure=true for Partitioned cookies in Cookie() in (#​3976)
  • 📎 Binding (Docs)
    • Initial support for binding in (#​1981)
    • Bind: add support for multipart file binding in (#​3309)
    • Add All method to Bind in (#​3373)
  • 🌎 Client (Docs)
    • Client refactor in (#​1986)
    • Add support for creating Fiber client from existing FastHTTP client in (#​3214)
    • Add support for iterator methods to Fiber client in (#​3228)
    • Add support for HostClient and LBClient in (#​3774)
    • Add support for streaming response bodies in client and response handling in (#​4014)
  • 🧠 Context (Docs)
    • Convert fiber.Ctx type to interface in (#​1928)
    • Add Drop method to DefaultCtx for silent connection termination in (#​3257)
    • Add End() method to Ctx in (#​3280)
    • Improve and Optimize ShutdownWithContext Func in (#​3162)
    • Add support for context.Context in keyauth middleware in (#​3287)
    • Fiber.Context implement context.Context in (#​3382)
    • Add NewWithCustomCtx initialization helper in (#​3476)
    • Add context methods to fiber.Storage interface in (#​3566)
    • Add Fiber Context to BasicAuth Authorizer in (#​3621)
    • Implement OverrideParam override behavior for DefaultCtx in (#​3962)
    • Add context common request helpers in (#​4007)
    • Adding GetReqHeaders and GetRespHeaders in (#​2831)
    • Add Req and Res API in (#​2894)
  • 🔬 Extractors (Docs)
    • Introduce Extractor pattern for session ID retrieval in (#​3625)
    • Enhance extractor functionality with metadata and security validation in (#​3630)
    • Add extractors package in (#​3725)
  • 🧰 Generic (Docs)
    • Add QueryParser for get query using generic in (#​2776)
    • Addition of Locals Function with Go Generics as an Alternative to c.Locals in (#​2813)
    • Implement new generic functions: Params, Get and Convert in (#​2850)
    • Support generic configurable logger in (#​3705)
  • 🚀 Listen (Docs)
    • Merge Listen methods & ListenConfig in (#​1930)
    • Add support for graceful shutdown timeout in ListenConfig in (#​3220)
    • Add TLSConfig to ListenConfig in (#​4024)
  • 🔌 Addons/retry (Docs)
  • 🧬 Middleware – adaptor (Docs)
    • Add BodyStream() logic to adaptor.FiberHandler middleware in (#​3799)
    • Add local context support to adaptor middleware in (#​3975)
  • 🧬 Middleware – basicauth (Docs)
    • Add HeaderLimit option to BasicAuth middleware in (#​3620)
    • Support hashed BasicAuth passwords in (#​3631)
  • 🧬 Middleware – cache (Docs)
    • Add Cache Invalidation Option to Cache Middleware in (#​3036)
    • Add Max Func to Limiter Middleware in (#​3070)
    • Support for disabling response headers in Limiter Middleware in (#​3618)
  • 🧬 Middleware – compression (Docs)
    • Add support for zstd compression in (#​3041)
    • Add support for CBOR encoding in (#​3173)
  • 🧬 Middleware – cors (Docs)
    • Add support for Access-Control-Allow-Private-Network in (#​2908)
  • 🧬 Middleware – csrf (Docs)
    • Add support for Sec-Fetch-Site header in CSRF middleware in (#​3913)
  • 🧬 Middleware – encryptcookie (Docs)
    • Add cookie name authentication for EncryptCookie middleware in (#​3788)
  • 🧬 Middleware – favicon (Docs)
    • Add MaxBytes to favicon middleware in (#​4016)
  • 🧬 Middleware – earlydata (Docs)
    • Add earlydata middleware in (#​2270)
  • 🧬 Middleware – healthcheck (Docs)
    • Migrate HealthChecker to v3 in (#​2884)
    • Add Startup Probe to Healthcheck Middleware in (#​3069)
  • 🧬 Middleware – idempotency (Docs)
    • Add idempotency middleware in (#​2253)
  • 🧬 Middleware – keyauth (Docs)
    • Add support for custom KeyLookup functions in the Keyauth middleware in (#​3028)
  • 🧬 Middleware – logger (Docs)
    • Refactor logger middleware in (#​1979)
    • Add AllLogger to Config in (#​3153)
    • Add Skip function to logger middleware in (#​3333)
    • Add predefined log formats in (#​3359)
    • Add support for ForceColors in Logger middleware in (#​3428)
  • 🧬 Middleware – proxy (Docs)
    • Add support for TrustProxy in (#​3170)
    • Add KeepConnectionHeader option to Proxy middleware in (#​3662)
  • 🧬 Middleware – requestid (Docs)
    • Add Context Support to RequestID Middleware in (#​3200)
    • Validate HTTP headers in RequestID middleware in (#​3919)
  • 🧬 Middleware – responsetime (Docs)
    • Add response time middleware in (#​3891)
  • 🧬 Middleware – session (Docs)
    • Re-write session middleware with handler in (#​3016)
    • Add support for Keys() in session middleware in (#​3517)
  • 🧬 Middleware – static (Docs)
  • 🧬 Middleware – timeout (Docs)
    • Add config for Timeout middleware in (#​3604)
  • 🔄️ Redirect (Docs)
  • 🗺️ Router (Docs)
    • Router interface changes in (#​2176)
    • Native support for net/http and fasthttp handlers in (#​3769)
    • New Route method in (#​2065)
    • New mounting system in (#​2022)
    • Add support for RebuildTree in (#​3074)
    • Add support for Express.js style req/res handlers in (#​3809)
    • Add support for DisableAutoRegister of HEAD routes in (#​3817)
    • Enhance CheckConstraint method for improved error handling in (#​3356)
    • Add Support for Removing Routes in (#​3230)
    • Add support for embedded Koa-Style Req and Res structs in (#​3533)
    • Support Express-style next callback handlers in (#​4029)
  • 🧩 Services (Docs)
    • Add Support for service dependencies in (#​3434)
🧹 Updates
  • ⚙️ Core & API
    • Replace string functions in (#​3923)
    • Update conditional instructions for startup skip in (#​3475)
    • Update AGENTS startup instructions in (#​3474)
    • Add []byte support to utils.EqualFold in (#​2029)
    • Change startup message in (#​2041)
    • Update to use gofiber/utils/v2 in (#​2184)
    • Router: return status 501 instead of 400 on unknown method in (#​2220)
    • Cleanup in (#​2255)
    • Fix ContextKey collisions in (#​2781)
    • Update Ctx.Format to match Express's res.format in (#​2766)
    • Update handler signature for v3 in (#​2794)
    • Change interface{} to any in (#​2796)
    • Added respects body immutability to ctx.Body() and ctx.BodyRaw() functions. in (#​2812)
    • Print to stderr if log fails for default format in (#​2830)
    • Clean up errcheck config in (#​2841)
    • Update startup message formatting in (#​2847)
    • Simplify content negotiation code in (#​2865)
    • Rename "ClientNew" Function to "New" in (#​2896)
    • Remove repetitive words in (#​2917)
    • Improper query/body parsing with embedded structs in (#​2906)
    • Improve and simplify logic of ctx.Next() in (#​3063)
    • Use Named Fields Instead of Positional and Align Structures to Reduce Memory Usage in (#​3079)
    • Use utils Trim functions instead of the strings/bytes functions in (#​3087)
    • Consolidate Logic of Handling the Request Body in (#​3093)
    • Use msgp for flash message encoding/decoding in (#​3099)
    • Replace vendored gorilla/schema package in (#​3152)
    • Improve naming convention for Context returning functions in (#​3193)
    • Nil pointer dereference with Must Bind binding in (#​3171)
    • Mark go1.23 as minimum go version in (#​3226)
    • Rename the Method Names of FormData and FormDatas (#​3251) in (#​3255)
    • Reduce the Memory Usage of ignoreHeaders in (#​3322)
    • Migrate randString to rand v2 in (#​3329)
    • Sorting error in sortAcceptedTypes in (#​3331)
    • Reduce the memory usage of RoutePatternMatch in (#​3335)
    • Replace findLastCharsetPosition with strings.LastIndexByte in (#​3338)
    • Replace isInCharset with bytes.IndexByte in (#​3342)
    • Remove two string fields in DefaultCtx to save 32 bytes in (#​3353)
    • Replace treePath with treePathHash in DefaultCtx to reduce memory usage in (#​3368)
    • Remove redundant field method in DefaultCtx in (#​3372)
    • Add findNextNonEscapedCharPosition for single-byte charset cases in (#​3378)
    • Change c.Redirect() default status in (#​3415)
    • Improve routing treeBuild flow in (#​3456)
    • Make genericParseType return error in (#​3473)
    • Update minimum go version to 1.24 in (#​3481)
    • Use slices.Contains to simplify code in (#​3486)
    • Use maps.Copy to simplify code in (#​3490)
    • Update loop syntax for retry mechanism in (#​3516)
    • Update codecov configuration in (#​3528)
    • Use GetState to reduce duplicate code in (#​3542)
    • Improve Cookie() validation in (#​3546)
    • Improve Accept* compliance with RFC 9110 in (#​3548)
    • Refactor fasthttp iter calls to range loops in (#​3559)
    • Add iterator helpers for client types in (#​3560)
    • Update utils dependency in (#​3576)
    • Refactor Opt-in support for CBOR in (#​3580)
    • Simplify generic function calls in (#​3578)
    • Replace math/rand with crypto/rand in (#​3508)
    • Add sync pool and release helpers for Bind in (#​3660)
    • Add CBOR support to AutoFormat() in (#​3665)
    • Fix AcceptsLanguages() RFC compliance in (#​3672)
    • Respect immutable config in Params(), Protocol(), and Body() in (#​3676)
    • Delay routing error creation in (#​3683)
    • Using reflect.TypeAssert in (#​3698)
    • Handle Transfer-Encoding bodies in HasBody in (#​3748)
    • Improve error handling when using storage drivers in (#​3754)
    • Use sync.Pool for Client hooks in (#​3758)
    • Avoid locking in gc() if nothing to delete in (#​3765)
    • Cleanup return error logic in Bind() in (#​3764)
    • Update RouteChain function in (#​3761)
    • Make boundary a const in (#​3783)
    • Preallocate slice size in Client::Param() in (#​3782)
    • Skip locking garbage collector if nothing to delete in (#​3787)
    • Enhance Body handling in setConfigToRequest for better type su… in (#​3820)
    • Improve propagation of context.Context in (#​3822)
    • Inline Request state wrappers in (#​3827)
    • Remove unneeded "utils" alias in (#​3834)
    • Add FullPath() helper to context in (#​3837)
    • Handle nil map targets in Binder in (#​3839)
    • Extracted generic releasePooledBinder function in (#​3841)
    • Return error during EncryptCookie failure in (#​3842)
    • Fix gocritic httpNoBody and hugeParam issues in (#​3855)
    • Refactor internal errors to use sentinel values in (#​3864)
    • Improve byte-range handling for SendFile() in (#​3870)
    • Use int64 when dealing with HTTP Ranges in (#​3874)
    • Replace strings.TrimSpace with utils.TrimSpace in (#​3918)
    • Replace strings.Index with strings.Cut for improved readallity in (#​3956)
    • Validate constraint by bit operation in (#​3963)
    • Use sync.Pool for form and multipart binding in (#​3967)
    • Use sync.Pool for redirect old input map in (#​3971)
    • Replace anonymous struct key with named type in (#​4020)
  • 🧬 Middleware & Addons
    • Document "null" origin handling in CORS middleware in (#​4001)
      (Docs)
    • Refactor CSRF middleware and enhance documentation in (#​3598)
    • Fix pprof middleware docs and default config in (#​3642)
    • Fix CORS docs and comments in (#​3637)
    • Fix CSRF error message mismatch with documentation in (#​3636)
    • Refactor filesystem middleware with io/fs in (#​2027) (Docs)
    • Remove mutex lock in logger middleware in (#​2840)
    • Update CSRF and Limiter to remove repetitive names in (#​2846)
    • Refactor(middleware/cors): Config, lists as list types. in (#​2962)
    • Enforce key length for EncryptCookie middleware default functions in (#​3056)
    • Middleware/CORS Remove Scheme Restriction in (#​3163)
    • Unify and enhance timeout middleware in (#​3275)
    • Simplify HealthCheck middleware in (#​3380)
    • Improve proxy middleware in (#​3468)
    • Enhance KeyAuth middleware to better comply with RFC 6750 in (#​3482)
    • Enhance BasicAuth middleware to better comply with RFC 6750 in (#​3484)
    • Improve cache middleware RFC compliance in (#​3488)
    • Enhance config validation in EncryptCookie middleware in (#​3491)
    • Refactor EnvVar middleware in (#​3513)
    • Improve CORS middleware response headers in (#​3505)
    • Improve BasicAuth middleware default security in (#​3522)
    • Improve static middleware security in (#​3595)
    • Remove SHA-1/MD5 support in BasicAuth middleware in (#​3634)
    • Remove support for PasswordFromContext from BasicAuth middleware in (#​3638)
    • Refactor KeyAuth Middleware: Extractor-Based Configuration and Enhanced Flexibility in (#​3685)
    • Return generic errors in KeyAuth middleware in (#​3692)
    • Fix CSRF subdomain wildcard boundary in (#​3694)
    • Improve Cache middleware defaults in (#​3740)
    • Migrate Session middleware to new extractors package in (#​3744)
    • Improve Compress middleware RFC compliance in (#​3745)
    • Improve KeyAuth middleware RFC compliance in (#​3742)
    • Update CSRF middleware to use shared extractors in (#​3746)
    • Update keyauth middleware to use shared extractors in (#​3747)
    • Fix cache cleanup and redact token values in (#​3757)
    • Ensure middleware prefix matching requires slash boundary in (#​3755)
    • Reduce the memory usage of cacheableStatusCodes in (#​3789)
    • Refactor configuration management for favicon and envvar middlewares in (#​3898)
    • Improve Cache middleware compliance in (#​3973)
    • Further improvements to Cache middleware in (#​3989)
    • Skip caching oversized responses in idempotency middleware in (#​4018)
  • ⚡️ Performance & Benchmarks
    • Optimize the menu item text in (#​3267)
    • Remove utils.Trim* because stdlib has same performance in go1.19 in (#​2030)
    • Performance improvements in (#​2838)
    • Add parallel benchmarks to adaptor middleware in (#​2870)
    • Expand Tests and Benchmarks for Log package in (#​2886)
    • Performance optimizations in (#​2947)
    • Add Benchmarks for IsProxyTrusted() in (#​2933)
    • Optimize Cache middleware handler in (#​3031)
    • Update benchmarks for Logger Middleware in (#​3061)
    • Improve performance of Adaptor Middleware in (#​3078)
    • Refactor Benchmark Results Workflow in (#​3082)
    • Improve performance of helper functions in (#​3086)
    • Improve Performance of c.Body() by 125% in (#​3090)
    • Add Benchmarks for Rewrite Middleware in (#​3092)
    • Optimize IsFromLocal() performance in (#​3140)
    • Improve Performance of Fiber Router in (#​3261)
    • Improve Performance of getSplicedStrList in (#​3318)
    • Optimize routeParser by using sync.Pool in (#​3343)
    • Add Immutable benchmarks for default case in (#​3374)
    • Performance optimizations in (#​3477)
    • Improve performance for "equalFieldType" function in (#​3479)
    • Fix compression benchmarks in (#​3561)
    • Improve iterator performance. in (#​3562)
    • Improve sanitizePath performance in (#​3601)
    • Skip unstable GenericParseType benchmarks in (#​3614)
    • Reduce allocation in AutoFormat in (#​3652)
    • Optimize Fresh header parsing for fasthttp 1.65 in (#​3687)
    • Improve Req/Res Benchmarks in (#​3693)
    • Improve performance analyseConstantPart in (#​3753)
    • Improve allocations for Request Params() in (#​3766)
    • Reduce allocations in Request (saves ~16% B/op) in (#​3768)
    • Benchmark for cache miss case in (#​3836)
    • Improve performance of RebuildTree() by 68% in (#​3895)
    • Optimize string handling and memory allocations in (#​3922)
    • Improve performance (reduce allocations) in (#​3964)
  • 🛠️ Testing & Tooling
    • Use testify for assertion in (#​2036)
    • Generate msgp tests in (#​2263)
    • V3 Feature: Make app.Test accept a time.Duration timeout in (#​2269)
    • Speed up addon/retry tests in (#​2800)
    • Re-enable tparallel linter in (#​2801)
    • Fix testifylint errors in middleware in (#​2805)
    • Fix remaining testifylint errors in (#​2806)
    • Fix force type assertions in session_test.go in (#​2815)
    • Address multiple lint rules in (#​2869)
    • Do not retry flaky tests in (#​2875)
    • Enabling shuffling, cleanup and consistency across tests in (#​2931)
    • Adding a generator to generate the CTX interface in (#​3024)
    • Test(middleware/session): Remove extra release and acquire ctx calls in session_test.go in (#​3044)
    • Test(ctx_test): Fix race condition in (#​3081)
    • The value of map is unused in uniqueRouteStack in (#​3320)
    • Mark unused tests with t.SkipNow in (#​3366)
    • Fix proxy middleware tests for offline environments in (#​3467)
    • Add unit-test for header injection in (#​3470)
    • Add URI Test case for Test_Ctx_Binders in (#​3480)
    • Test: Enhance CSRF tests to address unsafe header value issue (#​2045) in (#​3485)
    • Improve EarlyData middleware tests coverage in (#​3520)
    • Improve Idempotency middleware tests coverage in (#​3521)
    • Improve Helmet middleware tests coverage in (#​3523)
    • Improve Retry addon tests coverage in (#​3526)
    • Add missing CSRF token extractor tests in (#​3527)
    • Improve hooks test coverage in (#​3524)
    • Improve Binder tests coverage in (#​3529)
    • Improve CORS tests coverage in (#​3530)
    • Improve CSRF tests coverage in (#​3531)
    • Improve Router tests coverage in (#​3550)
    • Add tests for quoteRawString in (#​3613)
    • Fix Makefile to install tools before running them in (#​3612)
    • Fix Cookie SameSite constants to Pascal case per RFC specification in (#​3608)
    • Fix timing for streaming test in (#​3628)
    • Add missing checks in Ctx tests in (#​3670)
    • Stabilize interrupted stream writer test in (#​3669)
    • Use ephemeral ports in unit tests in (#​3686)
    • Use project toolchain for go run tools in (#​3709)
    • Expand Binder tests coverage in (#​3714)
    • Prevent CopyContextToFiberContext panic and add comprehensive test coverage in (#​3770)
    • Add flushing-related unit tests for net/http adaptor in (#​3807)
    • Fix fatal error calls in adapter_test.go in (#​3810)
    • Test HEAD request compliance in (#​3868)
    • Improve OPTIONS wildcard regression test in (#​3869)
    • Add table-driven integration tests in (#​3894)
    • Improve timing robustness in flaky cache and session tests in (#​3994)
🐛 Bug Fixes
  • Fix logger benchmarks in (#​2074)
  • Fix benchmark results related to handler, next in (#​2130)
  • Testifylint failure that fell through the cracks in (#​2821)
  • Inconsistent and flaky unit-tests in (#​2892)
  • CORS handling in (#​2938)
  • Fix some struct names in comments in (#​2974)
  • Fixes #​3038 "v3 Flash Message with redirect is not working" in (#​3046)
  • Mutex for thread safety in (#​3049)
  • Fix data-race with sync.Pool in (#​3051)
  • Fasthttp errors cause panic when Params is used in (#​3055)
  • Use Content-Length for bytesReceived and bytesSent tags in Logger Middleware in (#​3066)
  • Cache middleware: runtime error: "index out of range [0] with length 0" in (#​3075)
  • Error check in Form binder in (#​3110)
  • Client: fix SetProxyURL functionality in (#​3109)
  • Fix handle un-matched open brackets in the query params in (#​3126)
  • Fix issue with default logger when creating RequestCtx in (#​3134)
  • Fix typo in (#​3145)
  • Behavior of DefaultCtx.Fresh when 'Last-Modified' and 'If-Modified-Since' are equal in (#​3150)
  • Adaptor middleware duplicates cookies in (#​3151)
  • Close File After SaveFileToStorage in (#​3197)
  • Make SetValWithStruct set zero values and support more types #​3167 in (#​3227)
  • Fix EnableSplittingOnParsers is not functional in (#​3231)
  • Memory leak removal in the idempotency middleware in (#​3263)
  • Make Render bind parameter type any again in (#​3270)
  • Fix app.Test() auto-failing when a connection is closed early in (#​3279)
  • Align cache middleware with RFC7231 in (#​3283)
  • Goroutine leakage in (#​3306)
  • GenericParseType parsing large uint leads to overflow in (#​3315)
  • Fix handler order in routing in (#​3321)
  • Update binder in form_test in (#​3336)
  • Fix client iterators when using break statement in (#​3357)
  • Fix: Logger Middleware tests to use regex for time validation in (#​3392)
  • Handling of next param position in (#​3418)
  • Fix redirection flash messages violate cookie structure in (#​3457)
  • Fix AGENTS markdown lint in (#​3460)
  • Parsing of IPv6 addresses in (#​3466)
  • Middlewares immutable config handling in (#​3494)
  • Subdomains offset handling in (#​3495)
  • Fix Cache-Control header parsing in (#​3534)
  • Fix Content-Type comparison in Is() in (#​3536)
  • Fix Subdomains() parsing for IDNs in (#​3538)
  • Fix Range() parsing of bytes unit in (#​3541)
  • Fix Etag validation per RFC 9110 in (#​3554)
  • Fix Range() handling of HTTP 416 per RFC 9110 in (#​3552)
  • Fix Accept-Language matching per RFC 4647 in (#​3553)
  • Fix Cache middleware handling of Age in (#​3547)
  • Fix Content-Disposition header per RFC 6266 in (#​3551)
  • Fix Body() handling of Content-Encoding per RFC 9110 in (#​3543)
  • Fix multipart boundary for Client per RFC 2046 in (#​3563)
  • Fix address parsing for leading/trailing spaces in (#​3569)
  • Fix missing Allow header in EnvVar middleware per RFC 9110 in (#​3570)
  • Fix static/favicon middlewares file descriptor leaks in (#​3579)
  • Fix CookieJar domain logic in (#​3564)
  • Fix handling of negative BodyLimit in (#​3599)
  • Fix MIME type equality checks in (#​3602)
  • Fix retry config handling in (#​3609)
  • Fix limiter middleware not counting fiber.NewErrorf responses as failed requests in (#​3623)
  • Fix race in cookie tests in (#​3629)
  • Fix bind All() merging logic in (#​3659)
  • Fix Static middleware browser support for subdirectories in (#​3673)
  • Fix CORS subdomain wildcard boundary in (#​3690)
  • Fix support for context.Context in (#​3720)
  • Improve BasicAuth middleware RFC compliance in (#​3743)
  • Handle Unix sockets in adaptor middleware in (#​3760)
  • Fix usage of runtime RO data for ppc64 and s390x platforms in (#​3772)
  • Respect DisablePathNormalizing during client requests in (#​3773)
  • Always close form file in (#​3786)
  • Fix recover middleware panic output formatting in (#​3816)
  • Correct fresh flag logic in getSession in (#​3825)
  • Prevent memory corruption in internal memory storage from pooled buffers in (#​3828)
  • Avoid writing into released Response in core::execFunc() in (#​3830)
  • Remove Flash Cookie from Response headers after parsing in (#​3840)
  • Fix binder splitting for pointer-backed slice fields in (#​3844)
  • Fix typos in some files in (#​3847)
  • Execute middleware routes when handling errors in (#​3846)
  • Fix copying of key/values in internal/memory in (#​3829)
  • Fix maintain CustomCtx across middlewares in (#​3852)
  • Fix default value for MaxFunc in Limiter middleware in (#​3871)
  • Fix handling of wildcard matching in acceptsOffer in (#​3880)
  • Fix handling of no-body HTTP statuses in (#​3883)
  • Fix and improvements for the sliding window Limiter in (#​3893)
  • Improve suffix range normalization in (#​3902)
  • Enhance Origin and Referer Validation in CSRF middleware in (#​3904)
  • Respect Authorization when caching responses in (#​3905)
  • Fprint to use format instead of fmtArgs in (#​3925)
  • Enforce body limits in SaveFileToStorage in (#​3929)
  • V3 fix custom errorhandler invokation in (#​3930)
  • Fix example in whats_new.md in (#​3949)
  • Ensure flash messages are consumed after retrieval in (#​3936)
  • Fix FIPS-140 compliance for EncryptCookie middleware in (#​3955)
  • Guard Binds decoder sync.Pool in (#​3969)
  • Fix Early-Data trusted proxy handling in (#​3974)
  • Preserve session data map across resets in (#​3968)
  • Improve cookie decryption handling by deleting invalid cookies after iteration in (#​3988)
  • Respect body limit configuration in adaptor middleware in (#​3990)
  • Security: Enforce case-sensitive null origin validation in CORS in (#​3995)
  • Optimize CORS origin validation to avoid unnecessary processing in (#​3996)
  • Validate CORS origins before using AllowOriginsFunc in (#​3991)
  • Trim forwarded host values in (#​4012)
  • Normalize forwarded scheme parsing in (#​4011)
  • Return immediately on timeout and propagate context correctly in (#​4009)
  • Trim values from getSplicedStrList in (#​4026)
  • Return bytes read from readContent in (#​4027)
  • Reload mounted view engines in ReloadViews in (#​4031)
  • Handle typed-nil http handler funcs in (#​4030)
🛠️ Maintenance

Configuration

📅 Schedule: Branch creation - "before 6am on monday" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from ullbergm as a code owner January 22, 2026 05:52
@renovate renovate bot added area/services Changes to services type/dependencies Dependency updates labels Jan 22, 2026
@renovate
Copy link
Contributor Author

renovate bot commented Jan 22, 2026 •
edited
Loading

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 73 additional dependencies were updated

Details:

Package Change
github.com/4meepo/tagalign v1.4.2 -> v1.4.3
github.com/Abirdcfly/dupword v0.1.3 -> v0.1.7
github.com/Antonboom/errname v1.0.0 -> v1.1.1
github.com/Antonboom/nilnil v1.0.1 -> v1.1.1
github.com/Antonboom/testifylint v1.5.2 -> v1.6.4
github.com/BurntSushi/toml v1.4.1-0.20240526193622-a339e1f7089c -> v1.6.0
github.com/Djarvur/go-err113 v0.0.0-20210108212216-aea10b59be24 -> v0.1.1
github.com/alexkohler/nakedret/v2 v2.0.5 -> v2.0.6
github.com/alexkohler/prealloc v1.0.0 -> v1.0.1
github.com/alingse/nilnesserr v0.1.2 -> v0.2.0
github.com/bombsimon/wsl/v4 v4.5.0 -> v4.7.0
github.com/breml/bidichk v0.3.2 -> v0.3.3
github.com/breml/errchkjson v0.4.0 -> v0.4.1
github.com/butuzov/ireturn v0.3.1 -> v0.4.0
github.com/catenacyber/perfsprint v0.8.2 -> v0.10.1
github.com/charithe/durationcheck v0.0.10 -> v0.0.11
github.com/ckaznocha/intrange v0.3.0 -> v0.3.1
github.com/daixiang0/gci v0.13.5 -> v0.13.7
github.com/firefart/nonamedreturns v1.0.5 -> v1.0.6
github.com/ghostiam/protogetter v0.3.9 -> v0.3.18
github.com/go-critic/go-critic v0.12.0 -> v0.14.3
github.com/go-viper/mapstructure/v2 v2.2.1 -> v2.4.0
github.com/gofiber/utils/v2 v2.0.0-rc.6 -> v2.0.0
github.com/gofrs/flock v0.12.1 -> v0.13.0
github.com/golangci/go-printf-func-name v0.1.0 -> v0.1.1
github.com/golangci/misspell v0.6.0 -> v0.7.0
github.com/golangci/plugin-module-register v0.1.1 -> v0.1.2
github.com/golangci/unconvert v0.0.0-20240309020433-c5143eacb3ed -> v0.0.0-20250410112200-a129a6e6413e
github.com/gordonklaus/ineffassign v0.1.0 -> v0.2.0
github.com/gostaticanalysis/nilerr v0.1.1 -> v0.1.2
github.com/hashicorp/go-version v1.7.0 -> v1.8.0
github.com/jgautheron/goconst v1.7.1 -> v1.8.2
github.com/jjti/go-spancheck v0.6.4 -> v0.6.5
github.com/karamaru-alpha/copyloopvar v1.2.1 -> v1.2.2
github.com/kulti/thelper v0.6.3 -> v0.7.1
github.com/kunwardeep/paralleltest v1.0.10 -> v1.0.15
github.com/ldez/exptostd v0.4.2 -> v0.4.5
github.com/ldez/gomoddirectives v0.6.1 -> v0.8.0
github.com/ldez/grignotin v0.9.0 -> v0.10.1
github.com/ldez/tagliatelle v0.7.1 -> v0.7.2
github.com/ldez/usetesting v0.4.2 -> v0.5.0
github.com/macabu/inamedparam v0.1.3 -> v0.2.0
github.com/maratori/testableexamples v1.0.0 -> v1.0.1
github.com/maratori/testpackage v1.1.1 -> v1.1.2
github.com/mgechev/revive v1.7.0 -> v1.13.0
github.com/nunnatsa/ginkgolinter v0.19.1 -> v0.21.2
github.com/quasilyte/go-ruleguard v0.4.3-0.20240823090925-0fe6f58b47b1 -> v0.4.5
github.com/quasilyte/go-ruleguard/dsl v0.3.22 -> v0.3.23
github.com/ryancurrah/gomodguard v1.3.5 -> v1.4.1
github.com/sashamelentyev/usestdlibvars v1.28.0 -> v1.29.0
github.com/sonatard/noctx v0.1.0 -> v0.4.0
github.com/spf13/afero v1.14.0 -> v1.15.0
github.com/spf13/cobra v1.9.1 -> v1.10.2
github.com/spf13/pflag v1.0.7 -> v1.0.10
github.com/stbenjam/no-sprintf-host-port v0.2.0 -> v0.3.1
github.com/tetafro/godot v1.5.0 -> v1.5.4
github.com/timakin/bodyclose v0.0.0-20241017074812-ed6a65f985e3 -> v0.0.0-20241222091800-1db5c5ca4d67
github.com/timonwong/loggercheck v0.10.1 -> v0.11.0
github.com/tomarrell/wrapcheck/v2 v2.10.0 -> v2.12.0
github.com/uudashr/iface v1.3.1 -> v1.4.1
github.com/xen0n/gosmopolitan v1.2.2 -> v1.3.0
go-simpler.org/musttag v0.13.0 -> v0.14.0
go-simpler.org/sloglint v0.9.0 -> v0.11.1
go.uber.org/multierr v1.6.0 -> v1.10.0
go.uber.org/zap v1.24.0 -> v1.27.0
golang.org/x/crypto v0.46.0 -> v0.47.0
golang.org/x/exp/typeparams v0.0.0-20250210185358-939b2ce775ac -> v0.0.0-20251023183803-a4bb9ffd2546
golang.org/x/mod v0.30.0 -> v0.31.0
golang.org/x/net v0.48.0 -> v0.49.0
golang.org/x/text v0.32.0 -> v0.33.0
golang.org/x/tools v0.39.0 -> v0.40.0
mvdan.cc/gofumpt v0.7.0 -> v0.9.2
mvdan.cc/unparam v0.0.0-20240528143540-8a5130ca722f -> v0.0.0-20251027182757-5beb8c8f8f15

@renovate renovate bot added the area/services Changes to services label Jan 22, 2026
@github-actions
Copy link

github-actions bot commented Jan 22, 2026 •
edited
Loading

✅ PR Label Validation Passed

All label requirements are met!

@github-actions github-actions bot added size/S Small PR (10-49 lines) and removed area/services Changes to services labels Jan 22, 2026
@github-actions
Copy link

github-actions bot commented Jan 22, 2026 •
edited
Loading

📊 Code Coverage Report

Total Coverage: 72.0%

Coverage by Package

github.com/ullbergm/echo-server/handlers/builder.go:8:	BuilderHandler			100.0%
github.com/ullbergm/echo-server/handlers/echo.go:27:	EchoHandler			100.0%
github.com/ullbergm/echo-server/handlers/echo.go:62:	EchoHandlerHead			100.0%
github.com/ullbergm/echo-server/handlers/echo.go:78:	buildEchoResponse		100.0%
github.com/ullbergm/echo-server/handlers/echo.go:94:	buildRequestInfo		100.0%
github.com/ullbergm/echo-server/handlers/echo.go:122:	buildHeadersMap			100.0%
github.com/ullbergm/echo-server/handlers/echo.go:130:	buildServerInfo			83.3%
github.com/ullbergm/echo-server/handlers/echo.go:147:	getHostAddress			75.0%
github.com/ullbergm/echo-server/handlers/echo.go:163:	getEnvironmentVariables		94.1%
github.com/ullbergm/echo-server/handlers/echo.go:199:	getKubernetesInfo		100.0%
github.com/ullbergm/echo-server/handlers/echo.go:245:	getRemoteAddress		100.0%
github.com/ullbergm/echo-server/handlers/echo.go:261:	getCustomStatusCode		100.0%
github.com/ullbergm/echo-server/handlers/echo.go:276:	parseCookies			100.0%
github.com/ullbergm/echo-server/handlers/echo.go:293:	setResponseCookies		100.0%
github.com/ullbergm/echo-server/handlers/echo.go:309:	parseSetCookieHeader		100.0%
github.com/ullbergm/echo-server/handlers/echo.go:380:	parseExpires			100.0%
github.com/ullbergm/echo-server/handlers/echo.go:404:	getCompressionInfo		100.0%
github.com/ullbergm/echo-server/handlers/echo.go:438:	getRequestTLSInfo		33.3%
github.com/ullbergm/echo-server/handlers/echo.go:465:	getServerTLSInfo		100.0%
github.com/ullbergm/echo-server/handlers/metrics.go:17:	Gather				100.0%
github.com/ullbergm/echo-server/handlers/metrics.go:36:	MetricsHandler			100.0%
github.com/ullbergm/echo-server/main.go:32:		main				0.0%
github.com/ullbergm/echo-server/main.go:217:		formatValue			0.0%
github.com/ullbergm/echo-server/main.go:235:		startDualStackServers		0.0%
github.com/ullbergm/echo-server/main.go:309:		storeCertificateInfo		0.0%
github.com/ullbergm/echo-server/services/body.go:37:	NewBodyService			100.0%
github.com/ullbergm/echo-server/services/body.go:53:	ParseBody			91.7%
github.com/ullbergm/echo-server/services/body.go:108:	isBinaryData			100.0%
github.com/ullbergm/echo-server/services/body.go:132:	parseJSON			100.0%
github.com/ullbergm/echo-server/services/body.go:144:	parseXML			100.0%
github.com/ullbergm/echo-server/services/body.go:151:	parseFormURLEncoded		100.0%
github.com/ullbergm/echo-server/services/body.go:170:	parseMultipartForm		100.0%
github.com/ullbergm/echo-server/services/jwt.go:18:	NewJWTService			100.0%
github.com/ullbergm/echo-server/services/jwt.go:35:	ExtractAndDecodeJWTs		100.0%
github.com/ullbergm/echo-server/services/jwt.go:66:	decodeJWT			100.0%
github.com/ullbergm/echo-server/services/jwt.go:99:	decodeBase64URL			100.0%
github.com/ullbergm/echo-server/services/jwt.go:124:	truncateToken			100.0%
github.com/ullbergm/echo-server/services/metrics.go:18:	NewMetricsService		100.0%
github.com/ullbergm/echo-server/services/metrics.go:39:	MetricsMiddleware		90.9%
github.com/ullbergm/echo-server/services/tls.go:24:	NewTLSService			100.0%
github.com/ullbergm/echo-server/services/tls.go:29:	GetOrGenerateCertificate	87.5%
github.com/ullbergm/echo-server/services/tls.go:65:	generateSelfSignedCertificate	75.0%
github.com/ullbergm/echo-server/services/tls.go:135:	logCertificateInfo		100.0%
github.com/ullbergm/echo-server/services/tls.go:158:	ParseCertificate		100.0%
total:							(statements)			72.0%

📁 Download full coverage report

@ullbergm ullbergm added the area/github GitHub-related changes label Jan 22, 2026
@github-actions github-actions bot removed the area/github GitHub-related changes label Jan 22, 2026
@ullbergm ullbergm added the area/github GitHub-related changes label Jan 22, 2026
@renovate renovate bot force-pushed the renovate/major-go-dependencies branch from 1ba79ad to bd39ae8 Compare January 26, 2026 15:50
@github-actions github-actions bot removed the area/github GitHub-related changes label Jan 26, 2026
@renovate renovate bot force-pushed the renovate/major-go-dependencies branch from bd39ae8 to 35580f7 Compare February 2, 2026 20:04
@renovate renovate bot changed the title chore(deps): update module github.com/golangci/golangci-lint to v2 fix(deps): update go dependencies (major) Feb 2, 2026
@ullbergm ullbergm added the area/kubernetes Kubernetes deployment changes label Feb 8, 2026
@github-actions github-actions bot removed the area/kubernetes Kubernetes deployment changes label Feb 10, 2026
@renovate
Copy link
Contributor Author

renovate bot commented Feb 10, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@renovate renovate bot changed the title fix(deps): update go dependencies (major) fix(deps): update go dependencies (major) - abandoned Feb 20, 2026
@renovate
Copy link
Contributor Author

renovate bot commented Feb 20, 2026

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

@ullbergm ullbergm closed this Feb 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ullbergm ullbergm Awaiting requested review from ullbergm ullbergm is a code owner

Assignees

No one assigned

Labels

size/S Small PR (10-49 lines) type/dependencies Dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ullbergm