Repository navigation
HTTP response observation now preserves the first final status and records only bytes accepted by the underlying writer. Streaming, flush, informational responses, hijacked connections and panic recovery follow the same contract. Response capture defaults are unchanged.
Compatibility: Go 1.26.10 or newer is required. This release upgrades x/net to 0.60.0 for the HTTP/2 security fixes; consumers using Go 1.25 must upgrade their toolchain.
Middleware order: place SDK observation outside response-writer middleware, or ensure outer writers directly delegate their controller capabilities. Outer Unwrap-only capability chains can bypass observation and remain unsupported. Accepted bytes do not prove delivery to the client.
Validation: complete CI on Go 1.26.10 and 1.27.3, stable-toolchain security scan, and identical release checks passed. Local full vet/race and govulncheck on Go 1.26.10 passed. Backend integration is tracked separately in DuckBug TASK-439.
Install:
go get github.com/duckbugio/duckbug-go@v0.5.0