Skip to content

v1.73.0

Latest

Choose a tag to compare

@erikdubbelboer erikdubbelboer released this 27 Jul 14:02
f83ac8c

What's Changed

  • test: fix host comparison in FuzzURIParse by @ReneWerner87 in #2313
  • perf: avoid redundant scans when parsing request headers by @ReneWerner87 in #2312
  • Fix temp file leak in SaveMultipartFile on cross-device rename failure by @itxaiohanglover in #2311
  • re-enable forcetypeassert by @Harshal96 in #2316
  • test: normalize Go test names by @Harshal96 in #2317
  • feat: prefix sentinel error strings by @Harshal96 in #2319
  • fix(pprofhandler): use exact path matching to prevent debug data exposure by @xbrxr03 in #2302
  • avoid following a symlink when writing the FS compressed cache by @alhudz in #2321
  • refactor: improve internal interface names by @Harshal96 in #2318
  • fix: lowercase error strings by @Harshal96 in #2320
  • perf: reduce redundant scans and allocations in hot paths by @ReneWerner87 in #2322
  • validate domain and path cookie attribute values on parse by @alhudz in #2315
  • chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by @dependabot[bot] in #2328
  • chore(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #2329
  • fix: preserve pre-set status code in NewFastHTTPHandler by @xbrxr03 in #2323
  • chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by @dependabot[bot] in #2331
  • reject backslash '..' traversal in fs handler on windows by @alhudz in #2327
  • fix: reject Windows alternate data stream paths in FS by @dev-willbird1936 in #2335
  • chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in #2307
  • chore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by @dependabot[bot] in #2308
  • chore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by @dependabot[bot] in #2309
  • chore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by @dependabot[bot] in #2314
  • chore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by @dependabot[bot] in #2326
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in #2324
  • chore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by @dependabot[bot] in #2325

New Contributors

Full Changelog: v1.72.0...v1.73.0