v1.72.0

What's Changed

• Update to go1.25 as minimal version by @erikdubbelboer in #2205
• client: add aggregate connection count metrics by @z9z in #2201
• fix(server): return ErrMissingFile when MultipartForm.File is nil by @u5surf in #2260
• bug: FS cache cleaner goroutine leaks when CleanStop is nil (default) (#2218), #2247 by @erikdubbelboer in #2271
• bug: data race on pipeline client c.chR during worker drain (#2220) by @erikdubbelboer in #2272
• bug: TCPDialer.tcpAddrsClean() goroutine leaks — no shutdown mechanism (#2222) by @erikdubbelboer in #2273
• bug: double concurrency counter increment in ServeConn causes counter leak (#2238) by @erikdubbelboer in #2275
• bug: body stream leak in compression methods when response is discarded (#2244) by @erikdubbelboer in #2276
• bug: InMemoryListener deadlock under high concurrency (#2245) by @erikdubbelboer in #2277
• bug: fasthttpadaptor writer leak, data race, and crash on handler panic (#2246) by @erikdubbelboer in #2278
• bug: fasthttpproxy dialers return nil DialFunc on error, causing panic (#2248) by @erikdubbelboer in #2279
• bug: closeIdleConns TOCTOU race with serveConn idle timestamp (#2250) by @erikdubbelboer in #2280
• bug: AppendCert/AppendCertEmbed not thread-safe (#2251) by @erikdubbelboer in #2281
• bug: SetBodySizePoolLimit data race — plain int written without synchronization (#2252) by @erikdubbelboer in #2282
• bug: file descriptor leak in prefork parent process (#2253) by @erikdubbelboer in #2283
• security: SO_REUSEADDR on Windows enables port hijacking (#2254) by @erikdubbelboer in #2284
• bug: file descriptor leak on z/OS s390x when FcntlInt fails (#2255) by @erikdubbelboer in #2285
• bug: filesLockMap grows unboundedly, leaking memory (#2256) by @erikdubbelboer in #2286
• security: TLS verification silently disabled for malformed addresses (#2236) by @erikdubbelboer in #2274
• fix(fs): remove temporary file when compression fails by @u5surf in #2264
• fix double release of streamed client response body by @Mereng in #2211
• fix(client): switch to GET on 303 redirect per RFC 9110 by @u5surf in #2265
• ci: re-enable gocritic deferInLoop check for non-test code by @u5surf in #2288
• Fix flaky race tests by @erikdubbelboer in #2292
• fix(lbclient): prevent deadlock when all clients are removed by @u5surf in #2287
• reject duplicate Content-Length in response header parser by @alhudz in #2294
• strip cr/lf from header keys in normalizeHeaderKey by @alhudz in #2295
• fix(client): guard nil waiter in decConnsCount by @SAY-5 in #2266
• strip semicolons from cookie setters to block attribute injection by @alhudz in #2298
• feat(prefork): graceful shutdown, leak fixes, hook robustness (re-open of #2180 follow-up) by @ReneWerner87 in #2199
• fix: prevent data race on FSCompressedFileSuffixes map by @xbrxr03 in #2300
• reject duplicate Transfer-Encoding in request header parser by @alhudz in #2303
• preserve duplicate request headers in ConvertRequest by @alhudz in #2305
• fix(server): close listener on serve error in ListenAndServe helpers by @fereidani in #2304
• validate trailer values in parseTrailer by @alhudz in #2301
• Avoid default content type for empty requests by @nkgotcode in #2296
• chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot[bot] in #2210
• chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in #2209
• chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 by @dependabot[bot] in #2208
• chore(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 by @dependabot[bot] in #2207
• chore(deps): bump securego/gosec from 2.26.1 to 2.27.0 by @dependabot[bot] in #2261
• chore(deps): bump securego/gosec from 2.27.0 to 2.27.1 by @dependabot[bot] in #2267
• chore(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by @dependabot[bot] in #2289
• chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by @dependabot[bot] in #2290
• chore(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 by @dependabot[bot] in #2291
• chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #2297

New Contributors

• @z9z made their first contribution in #2201
• @Mereng made their first contribution in #2211
• @alhudz made their first contribution in #2294
• @SAY-5 made their first contribution in #2266
• @xbrxr03 made their first contribution in #2300
• @fereidani made their first contribution in #2304
• @nkgotcode made their first contribution in #2296

Full Changelog: v1.71.0...v1.72.0