github gofiber/fiber v3.0.0
on GitHub

5 hours ago

For a detailed view of all changes and the migration guide, visit:
https://docs.gofiber.io/whats_new

Try our new migration tool to help you upgrade from v2 to v3: 

go install github.com/gofiber/cli/fiber@latest
fiber migrate --to v3

What's Changed

🚀 New Features

  • 🚀 App (Docs)
    • Rename WithTlsConfig method to WithTLSConfig in (#2570)
    • Use any as default Message type of Error struct in (#1925)
    • Add support for custom constraints in (#2807)
    • Add support for trusted origins in (#2910)
    • Add DialDualStack option for upstream IPv6 support in (#2900)
    • TrustedOrigins using https://*.example.com style subdomains in (#2925)
    • Add configuration support to c.SendFile() in (#3017)
    • Add CHIPS support to Cookie in (#3047)
    • Add TestConfig to app.Test() for configurable testing in (#3161)
    • Add buffered streaming support in (#3131)
    • Add support for AutoTLS / ACME in (#3201)
    • Add support for configuring TLS Min Version in (#3248)
    • Fix square bracket notation in Multipart FormData in (#3235)
    • Add support for application state management in (#3360)
    • Add support for NewErrorf in (#3463)
    • Add UNIX socket support in (#3535)
    • Add support for Msgpack in (#3565)
    • Add default UTF-8 charset in (#3583)
    • Support for SendEarlyHints in (#3483)
    • Add conditional copy helpers in (#3703)
    • Add request inspection helpers in (#3727)
    • Add support for redacting values in (#3759)
    • Add support for handling unsupported HTTP methods as HTTP 501 in (#3854)
    • Add support for ReloadViews() in (#3876)
    • Expose startup message customization hooks in (#3824)
    • Migrate from UUIDv4 to SecureToken for key generation in (#3946)
    • Add ExpirationFunc for dynamic expiration in (#3984)
    • Auto-enforce Secure=true for Partitioned cookies in Cookie() in (#3976)
  • 📎 Binding (Docs)
    • Initial support for binding in (#1981)
    • Bind: add support for multipart file binding in (#3309)
    • Add All method to Bind in (#3373)
  • 🌎 Client (Docs)
    • Client refactor in (#1986)
    • Add support for creating Fiber client from existing FastHTTP client in (#3214)
    • Add support for iterator methods to Fiber client in (#3228)
    • Add support for HostClient and LBClient in (#3774)
    • Add support for streaming response bodies in client and response handling in (#4014)
  • 🧠 Context (Docs)
    • Convert fiber.Ctx type to interface in (#1928)
    • Add Drop method to DefaultCtx for silent connection termination in (#3257)
    • Add End() method to Ctx in (#3280)
    • Improve and Optimize ShutdownWithContext Func in (#3162)
    • Add support for context.Context in keyauth middleware in (#3287)
    • Fiber.Context implement context.Context in (#3382)
    • Add NewWithCustomCtx initialization helper in (#3476)
    • Add context methods to fiber.Storage interface in (#3566)
    • Add Fiber Context to BasicAuth Authorizer in (#3621)
    • Implement OverrideParam override behavior for DefaultCtx in (#3962)
    • Add context common request helpers in (#4007)
    • Adding GetReqHeaders and GetRespHeaders in (#2831)
    • Add Req and Res API in (#2894)
  • 🔬 Extractors (Docs)
    • Introduce Extractor pattern for session ID retrieval in (#3625)
    • Enhance extractor functionality with metadata and security validation in (#3630)
    • Add extractors package in (#3725)
  • 🧰 Generic (Docs)
    • Add QueryParser for get query using generic in (#2776)
    • Addition of Locals Function with Go Generics as an Alternative to c.Locals in (#2813)
    • Implement new generic functions: Params, Get and Convert in (#2850)
    • Support generic configurable logger in (#3705)
  • 🚀 Listen (Docs)
    • Merge Listen methods & ListenConfig in (#1930)
    • Add support for graceful shutdown timeout in ListenConfig in (#3220)
    • Add TLSConfig to ListenConfig in (#4024)
  • 🔌 Addons/retry (Docs)
    • Add retry mechanism in (#1972)
  • 🧬 Middleware – adaptor (Docs)
    • Add BodyStream() logic to adaptor.FiberHandler middleware in (#3799)
    • Add local context support to adaptor middleware in (#3975)
  • 🧬 Middleware – basicauth (Docs)
    • Add HeaderLimit option to BasicAuth middleware in (#3620)
    • Support hashed BasicAuth passwords in (#3631)
  • 🧬 Middleware – cache (Docs)
    • Add Cache Invalidation Option to Cache Middleware in (#3036)
    • Add Max Func to Limiter Middleware in (#3070)
    • Support for disabling response headers in Limiter Middleware in (#3618)
  • 🧬 Middleware – compression (Docs)
    • Add support for zstd compression in (#3041)
    • Add support for CBOR encoding in (#3173)
  • 🧬 Middleware – cors (Docs)
    • Add support for Access-Control-Allow-Private-Network in (#2908)
  • 🧬 Middleware – csrf (Docs)
    • Add support for Sec-Fetch-Site header in CSRF middleware in (#3913)
  • 🧬 Middleware – encryptcookie (Docs)
    • Add cookie name authentication for EncryptCookie middleware in (#3788)
  • 🧬 Middleware – favicon (Docs)
    • Add MaxBytes to favicon middleware in (#4016)
  • 🧬 Middleware – earlydata (Docs)
    • Add earlydata middleware in (#2270)
  • 🧬 Middleware – healthcheck (Docs)
    • Migrate HealthChecker to v3 in (#2884)
    • Add Startup Probe to Healthcheck Middleware in (#3069)
  • 🧬 Middleware – idempotency (Docs)
    • Add idempotency middleware in (#2253)
  • 🧬 Middleware – keyauth (Docs)
    • Add support for custom KeyLookup functions in the Keyauth middleware in (#3028)
  • 🧬 Middleware – logger (Docs)
    • Refactor logger middleware in (#1979)
    • Add AllLogger to Config in (#3153)
    • Add Skip function to logger middleware in (#3333)
    • Add predefined log formats in (#3359)
    • Add support for ForceColors in Logger middleware in (#3428)
  • 🧬 Middleware – proxy (Docs)
    • Add support for TrustProxy in (#3170)
    • Add KeepConnectionHeader option to Proxy middleware in (#3662)
  • 🧬 Middleware – requestid (Docs)
    • Add Context Support to RequestID Middleware in (#3200)
    • Validate HTTP headers in RequestID middleware in (#3919)
  • 🧬 Middleware – responsetime (Docs)
    • Add response time middleware in (#3891)
  • 🧬 Middleware – session (Docs)
    • Re-write session middleware with handler in (#3016)
    • Add support for Keys() in session middleware in (#3517)
  • 🧬 Middleware – static (Docs)
    • Add static middleware in (#3006)
  • 🧬 Middleware – timeout (Docs)
    • Add config for Timeout middleware in (#3604)
  • 🔄️ Redirect (Docs)
    • New redirection methods in (#2014)
  • 🗺️ Router (Docs)
    • Router interface changes in (#2176)
    • Native support for net/http and fasthttp handlers in (#3769)
    • New Route method in (#2065)
    • New mounting system in (#2022)
    • Add support for RebuildTree in (#3074)
    • Add support for Express.js style req/res handlers in (#3809)
    • Add support for DisableAutoRegister of HEAD routes in (#3817)
    • Enhance CheckConstraint method for improved error handling in (#3356)
    • Add Support for Removing Routes in (#3230)
    • Add support for embedded Koa-Style Req and Res structs in (#3533)
    • Support Express-style next callback handlers in (#4029)
  • 🧩 Services (Docs)
    • Add Support for service dependencies in (#3434)

🧹 Updates

  • ⚙️ Core & API
    • Replace string functions in (#3923)
    • Update conditional instructions for startup skip in (#3475)
    • Update AGENTS startup instructions in (#3474)
    • Add []byte support to utils.EqualFold in (#2029)
    • Change startup message in (#2041)
    • Update to use gofiber/utils/v2 in (#2184)
    • Router: return status 501 instead of 400 on unknown method in (#2220)
    • Cleanup in (#2255)
    • Fix ContextKey collisions in (#2781)
    • Update Ctx.Format to match Express's res.format in (#2766)
    • Update handler signature for v3 in (#2794)
    • Change interface{} to any in (#2796)
    • Added respects body immutability to ctx.Body() and ctx.BodyRaw() functions. in (#2812)
    • Print to stderr if log fails for default format in (#2830)
    • Clean up errcheck config in (#2841)
    • Update startup message formatting in (#2847)
    • Simplify content negotiation code in (#2865)
    • Rename "ClientNew" Function to "New" in (#2896)
    • Remove repetitive words in (#2917)
    • Improper query/body parsing with embedded structs in (#2906)
    • Improve and simplify logic of ctx.Next() in (#3063)
    • Use Named Fields Instead of Positional and Align Structures to Reduce Memory Usage in (#3079)
    • Use utils Trim functions instead of the strings/bytes functions in (#3087)
    • Consolidate Logic of Handling the Request Body in (#3093)
    • Use msgp for flash message encoding/decoding in (#3099)
    • Replace vendored gorilla/schema package in (#3152)
    • Improve naming convention for Context returning functions in (#3193)
    • Nil pointer dereference with Must Bind binding in (#3171)
    • Mark go1.23 as minimum go version in (#3226)
    • Rename the Method Names of FormData and FormDatas (#3251) in (#3255)
    • Reduce the Memory Usage of ignoreHeaders in (#3322)
    • Migrate randString to rand v2 in (#3329)
    • Sorting error in sortAcceptedTypes in (#3331)
    • Reduce the memory usage of RoutePatternMatch in (#3335)
    • Replace findLastCharsetPosition with strings.LastIndexByte in (#3338)
    • Replace isInCharset with bytes.IndexByte in (#3342)
    • Remove two string fields in DefaultCtx to save 32 bytes in (#3353)
    • Replace treePath with treePathHash in DefaultCtx to reduce memory usage in (#3368)
    • Remove redundant field method in DefaultCtx in (#3372)
    • Add findNextNonEscapedCharPosition for single-byte charset cases in (#3378)
    • Change c.Redirect() default status in (#3415)
    • Improve routing treeBuild flow in (#3456)
    • Make genericParseType return error in (#3473)
    • Update minimum go version to 1.24 in (#3481)
    • Use slices.Contains to simplify code in (#3486)
    • Use maps.Copy to simplify code in (#3490)
    • Update loop syntax for retry mechanism in (#3516)
    • Update codecov configuration in (#3528)
    • Use GetState to reduce duplicate code in (#3542)
    • Improve Cookie() validation in (#3546)
    • Improve Accept* compliance with RFC 9110 in (#3548)
    • Refactor fasthttp iter calls to range loops in (#3559)
    • Add iterator helpers for client types in (#3560)
    • Update utils dependency in (#3576)
    • Refactor Opt-in support for CBOR in (#3580)
    • Simplify generic function calls in (#3578)
    • Replace math/rand with crypto/rand in (#3508)
    • Add sync pool and release helpers for Bind in (#3660)
    • Add CBOR support to AutoFormat() in (#3665)
    • Fix AcceptsLanguages() RFC compliance in (#3672)
    • Respect immutable config in Params(), Protocol(), and Body() in (#3676)
    • Delay routing error creation in (#3683)
    • Using reflect.TypeAssert in (#3698)
    • Handle Transfer-Encoding bodies in HasBody in (#3748)
    • Improve error handling when using storage drivers in (#3754)
    • Use sync.Pool for Client hooks in (#3758)
    • Avoid locking in gc() if nothing to delete in (#3765)
    • Cleanup return error logic in Bind() in (#3764)
    • Update RouteChain function in (#3761)
    • Make boundary a const in (#3783)
    • Preallocate slice size in Client::Param() in (#3782)
    • Skip locking garbage collector if nothing to delete in (#3787)
    • Enhance Body handling in setConfigToRequest for better type su… in (#3820)
    • Improve propagation of context.Context in (#3822)
    • Inline Request state wrappers in (#3827)
    • Remove unneeded "utils" alias in (#3834)
    • Add FullPath() helper to context in (#3837)
    • Handle nil map targets in Binder in (#3839)
    • Extracted generic releasePooledBinder function in (#3841)
    • Return error during EncryptCookie failure in (#3842)
    • Fix gocritic httpNoBody and hugeParam issues in (#3855)
    • Refactor internal errors to use sentinel values in (#3864)
    • Improve byte-range handling for SendFile() in (#3870)
    • Use int64 when dealing with HTTP Ranges in (#3874)
    • Replace strings.TrimSpace with utils.TrimSpace in (#3918)
    • Replace strings.Index with strings.Cut for improved readallity in (#3956)
    • Validate constraint by bit operation in (#3963)
    • Use sync.Pool for form and multipart binding in (#3967)
    • Use sync.Pool for redirect old input map in (#3971)
    • Replace anonymous struct key with named type in (#4020)
  • 🧬 Middleware & Addons
    • Document "null" origin handling in CORS middleware in (#4001)
      (Docs)
    • Refactor CSRF middleware and enhance documentation in (#3598)
    • Fix pprof middleware docs and default config in (#3642)
    • Fix CORS docs and comments in (#3637)
    • Fix CSRF error message mismatch with documentation in (#3636)
    • Refactor filesystem middleware with io/fs in (#2027) (Docs)
    • Remove mutex lock in logger middleware in (#2840)
    • Update CSRF and Limiter to remove repetitive names in (#2846)
    • Refactor(middleware/cors): Config, lists as list types. in (#2962)
    • Enforce key length for EncryptCookie middleware default functions in (#3056)
    • Middleware/CORS Remove Scheme Restriction in (#3163)
    • Unify and enhance timeout middleware in (#3275)
    • Simplify HealthCheck middleware in (#3380)
    • Improve proxy middleware in (#3468)
    • Enhance KeyAuth middleware to better comply with RFC 6750 in (#3482)
    • Enhance BasicAuth middleware to better comply with RFC 6750 in (#3484)
    • Improve cache middleware RFC compliance in (#3488)
    • Enhance config validation in EncryptCookie middleware in (#3491)
    • Refactor EnvVar middleware in (#3513)
    • Improve CORS middleware response headers in (#3505)
    • Improve BasicAuth middleware default security in (#3522)
    • Improve static middleware security in (#3595)
    • Remove SHA-1/MD5 support in BasicAuth middleware in (#3634)
    • Remove support for PasswordFromContext from BasicAuth middleware in (#3638)
    • Refactor KeyAuth Middleware: Extractor-Based Configuration and Enhanced Flexibility in (#3685)
    • Return generic errors in KeyAuth middleware in (#3692)
    • Fix CSRF subdomain wildcard boundary in (#3694)
    • Improve Cache middleware defaults in (#3740)
    • Migrate Session middleware to new extractors package in (#3744)
    • Improve Compress middleware RFC compliance in (#3745)
    • Improve KeyAuth middleware RFC compliance in (#3742)
    • Update CSRF middleware to use shared extractors in (#3746)
    • Update keyauth middleware to use shared extractors in (#3747)
    • Fix cache cleanup and redact token values in (#3757)
    • Ensure middleware prefix matching requires slash boundary in (#3755)
    • Reduce the memory usage of cacheableStatusCodes in (#3789)
    • Refactor configuration management for favicon and envvar middlewares in (#3898)
    • Improve Cache middleware compliance in (#3973)
    • Further improvements to Cache middleware in (#3989)
    • Skip caching oversized responses in idempotency middleware in (#4018)
  • ⚡️ Performance & Benchmarks
    • Optimize the menu item text in (#3267)
    • Remove utils.Trim* because stdlib has same performance in go1.19 in (#2030)
    • Performance improvements in (#2838)
    • Add parallel benchmarks to adaptor middleware in (#2870)
    • Expand Tests and Benchmarks for Log package in (#2886)
    • Performance optimizations in (#2947)
    • Add Benchmarks for IsProxyTrusted() in (#2933)
    • Optimize Cache middleware handler in (#3031)
    • Update benchmarks for Logger Middleware in (#3061)
    • Improve performance of Adaptor Middleware in (#3078)
    • Refactor Benchmark Results Workflow in (#3082)
    • Improve performance of helper functions in (#3086)
    • Improve Performance of c.Body() by 125% in (#3090)
    • Add Benchmarks for Rewrite Middleware in (#3092)
    • Optimize IsFromLocal() performance in (#3140)
    • Improve Performance of Fiber Router in (#3261)
    • Improve Performance of getSplicedStrList in (#3318)
    • Optimize routeParser by using sync.Pool in (#3343)
    • Add Immutable benchmarks for default case in (#3374)
    • Performance optimizations in (#3477)
    • Improve performance for "equalFieldType" function in (#3479)
    • Fix compression benchmarks in (#3561)
    • Improve iterator performance. in (#3562)
    • Improve sanitizePath performance in (#3601)
    • Skip unstable GenericParseType benchmarks in (#3614)
    • Reduce allocation in AutoFormat in (#3652)
    • Optimize Fresh header parsing for fasthttp 1.65 in (#3687)
    • Improve Req/Res Benchmarks in (#3693)
    • Improve performance analyseConstantPart in (#3753)
    • Improve allocations for Request Params() in (#3766)
    • Reduce allocations in Request (saves ~16% B/op) in (#3768)
    • Benchmark for cache miss case in (#3836)
    • Improve performance of RebuildTree() by 68% in (#3895)
    • Optimize string handling and memory allocations in (#3922)
    • Improve performance (reduce allocations) in (#3964)
  • 🛠️ Testing & Tooling
    • Use testify for assertion in (#2036)
    • Generate msgp tests in (#2263)
    • V3 Feature: Make app.Test accept a time.Duration timeout in (#2269)
    • Speed up addon/retry tests in (#2800)
    • Re-enable tparallel linter in (#2801)
    • Fix testifylint errors in middleware in (#2805)
    • Fix remaining testifylint errors in (#2806)
    • Fix force type assertions in session_test.go in (#2815)
    • Address multiple lint rules in (#2869)
    • Do not retry flaky tests in (#2875)
    • Enabling shuffling, cleanup and consistency across tests in (#2931)
    • Adding a generator to generate the CTX interface in (#3024)
    • Test(middleware/session): Remove extra release and acquire ctx calls in session_test.go in (#3044)
    • Test(ctx_test): Fix race condition in (#3081)
    • The value of map is unused in uniqueRouteStack in (#3320)
    • Mark unused tests with t.SkipNow in (#3366)
    • Fix proxy middleware tests for offline environments in (#3467)
    • Add unit-test for header injection in (#3470)
    • Add URI Test case for Test_Ctx_Binders in (#3480)
    • Test: Enhance CSRF tests to address unsafe header value issue (#2045) in (#3485)
    • Improve EarlyData middleware tests coverage in (#3520)
    • Improve Idempotency middleware tests coverage in (#3521)
    • Improve Helmet middleware tests coverage in (#3523)
    • Improve Retry addon tests coverage in (#3526)
    • Add missing CSRF token extractor tests in (#3527)
    • Improve hooks test coverage in (#3524)
    • Improve Binder tests coverage in (#3529)
    • Improve CORS tests coverage in (#3530)
    • Improve CSRF tests coverage in (#3531)
    • Improve Router tests coverage in (#3550)
    • Add tests for quoteRawString in (#3613)
    • Fix Makefile to install tools before running them in (#3612)
    • Fix Cookie SameSite constants to Pascal case per RFC specification in (#3608)
    • Fix timing for streaming test in (#3628)
    • Add missing checks in Ctx tests in (#3670)
    • Stabilize interrupted stream writer test in (#3669)
    • Use ephemeral ports in unit tests in (#3686)
    • Use project toolchain for go run tools in (#3709)
    • Expand Binder tests coverage in (#3714)
    • Prevent CopyContextToFiberContext panic and add comprehensive test coverage in (#3770)
    • Add flushing-related unit tests for net/http adaptor in (#3807)
    • Fix fatal error calls in adapter_test.go in (#3810)
    • Test HEAD request compliance in (#3868)
    • Improve OPTIONS wildcard regression test in (#3869)
    • Add table-driven integration tests in (#3894)
    • Improve timing robustness in flaky cache and session tests in (#3994)

🐛 Bug Fixes

  • Fix logger benchmarks in (#2074)
  • Fix benchmark results related to handler, next in (#2130)
  • Testifylint failure that fell through the cracks in (#2821)
  • Inconsistent and flaky unit-tests in (#2892)
  • CORS handling in (#2938)
  • Fix some struct names in comments in (#2974)
  • Fixes #3038 "v3 Flash Message with redirect is not working" in (#3046)
  • Mutex for thread safety in (#3049)
  • Fix data-race with sync.Pool in (#3051)
  • Fasthttp errors cause panic when Params is used in (#3055)
  • Use Content-Length for bytesReceived and bytesSent tags in Logger Middleware in (#3066)
  • Cache middleware: runtime error: "index out of range [0] with length 0" in (#3075)
  • Error check in Form binder in (#3110)
  • Client: fix SetProxyURL functionality in (#3109)
  • Fix handle un-matched open brackets in the query params in (#3126)
  • Fix issue with default logger when creating RequestCtx in (#3134)
  • Fix typo in (#3145)
  • Behavior of DefaultCtx.Fresh when 'Last-Modified' and 'If-Modified-Since' are equal in (#3150)
  • Adaptor middleware duplicates cookies in (#3151)
  • Close File After SaveFileToStorage in (#3197)
  • Make SetValWithStruct set zero values and support more types #3167 in (#3227)
  • Fix EnableSplittingOnParsers is not functional in (#3231)
  • Memory leak removal in the idempotency middleware in (#3263)
  • Make Render bind parameter type any again in (#3270)
  • Fix app.Test() auto-failing when a connection is closed early in (#3279)
  • Align cache middleware with RFC7231 in (#3283)
  • Goroutine leakage in (#3306)
  • GenericParseType parsing large uint leads to overflow in (#3315)
  • Fix handler order in routing in (#3321)
  • Update binder in form_test in (#3336)
  • Fix client iterators when using break statement in (#3357)
  • Fix: Logger Middleware tests to use regex for time validation in (#3392)
  • Handling of next param position in (#3418)
  • Fix redirection flash messages violate cookie structure in (#3457)
  • Fix AGENTS markdown lint in (#3460)
  • Parsing of IPv6 addresses in (#3466)
  • Middlewares immutable config handling in (#3494)
  • Subdomains offset handling in (#3495)
  • Fix Cache-Control header parsing in (#3534)
  • Fix Content-Type comparison in Is() in (#3536)
  • Fix Subdomains() parsing for IDNs in (#3538)
  • Fix Range() parsing of bytes unit in (#3541)
  • Fix Etag validation per RFC 9110 in (#3554)
  • Fix Range() handling of HTTP 416 per RFC 9110 in (#3552)
  • Fix Accept-Language matching per RFC 4647 in (#3553)
  • Fix Cache middleware handling of Age in (#3547)
  • Fix Content-Disposition header per RFC 6266 in (#3551)
  • Fix Body() handling of Content-Encoding per RFC 9110 in (#3543)
  • Fix multipart boundary for Client per RFC 2046 in (#3563)
  • Fix address parsing for leading/trailing spaces in (#3569)
  • Fix missing Allow header in EnvVar middleware per RFC 9110 in (#3570)
  • Fix static/favicon middlewares file descriptor leaks in (#3579)
  • Fix CookieJar domain logic in (#3564)
  • Fix handling of negative BodyLimit in (#3599)
  • Fix MIME type equality checks in (#3602)
  • Fix retry config handling in (#3609)
  • Fix limiter middleware not counting fiber.NewErrorf responses as failed requests in (#3623)
  • Fix race in cookie tests in (#3629)
  • Fix bind All() merging logic in (#3659)
  • Fix Static middleware browser support for subdirectories in (#3673)
  • Fix CORS subdomain wildcard boundary in (#3690)
  • Fix support for context.Context in (#3720)
  • Improve BasicAuth middleware RFC compliance in (#3743)
  • Handle Unix sockets in adaptor middleware in (#3760)
  • Fix usage of runtime RO data for ppc64 and s390x platforms in (#3772)
  • Respect DisablePathNormalizing during client requests in (#3773)
  • Always close form file in (#3786)
  • Fix recover middleware panic output formatting in (#3816)
  • Correct fresh flag logic in getSession in (#3825)
  • Prevent memory corruption in internal memory storage from pooled buffers in (#3828)
  • Avoid writing into released Response in core::execFunc() in (#3830)
  • Remove Flash Cookie from Response headers after parsing in (#3840)
  • Fix binder splitting for pointer-backed slice fields in (#3844)
  • Fix typos in some files in (#3847)
  • Execute middleware routes when handling errors in (#3846)
  • Fix copying of key/values in internal/memory in (#3829)
  • Fix maintain CustomCtx across middlewares in (#3852)
  • Fix default value for MaxFunc in Limiter middleware in (#3871)
  • Fix handling of wildcard matching in acceptsOffer in (#3880)
  • Fix handling of no-body HTTP statuses in (#3883)
  • Fix and improvements for the sliding window Limiter in (#3893)
  • Improve suffix range normalization in (#3902)
  • Enhance Origin and Referer Validation in CSRF middleware in (#3904)
  • Respect Authorization when caching responses in (#3905)
  • Fprint to use format instead of fmtArgs in (#3925)
  • Enforce body limits in SaveFileToStorage in (#3929)
  • V3 fix custom errorhandler invokation in (#3930)
  • Fix example in whats_new.md in (#3949)
  • Ensure flash messages are consumed after retrieval in (#3936)
  • Fix FIPS-140 compliance for EncryptCookie middleware in (#3955)
  • Guard Binds decoder sync.Pool in (#3969)
  • Fix Early-Data trusted proxy handling in (#3974)
  • Preserve session data map across resets in (#3968)
  • Improve cookie decryption handling by deleting invalid cookies after iteration in (#3988)
  • Respect body limit configuration in adaptor middleware in (#3990)
  • Security: Enforce case-sensitive null origin validation in CORS in (#3995)
  • Optimize CORS origin validation to avoid unnecessary processing in (#3996)
  • Validate CORS origins before using AllowOriginsFunc in (#3991)
  • Trim forwarded host values in (#4012)
  • Normalize forwarded scheme parsing in (#4011)
  • Return immediately on timeout and propagate context correctly in (#4009)
  • Trim values from getSplicedStrList in (#4026)
  • Return bytes read from readContent in (#4027)
  • Reload mounted view engines in ReloadViews in (#4031)
  • Handle typed-nil http handler funcs in (#4030)

🛠️ Maintenance

  • Bump github.com/valyala/fasthttp from 1.51.0 to 1.69.0 in (#2857, #3000, #3037, #3146, #3183, #3244, #3314, #3391, #3440, #3557, #3586, #3684, #3790, #3819, #3992)
  • Updated fasthttp to 1.54.0 release in (#3010)
  • Bump github.com/gofiber/schema from 1.2.0 to 1.6.0 in (#3308, #3462, #3504, #3574)
  • Bump github.com/gofiber/utils/v2 from 2.0.0-beta.3 to 2.0.0-rc.6 in (#2935, #3062, #3174, #3389, #3540, #3568, #3689, #3853, #3914, #3926, #3997)
  • Bump github.com/tinylib/msgp from 1.1.8 to 1.6.3 in (#3147, #3182, #3185, #3240, #3447, #3716, #3823, #3920, #3977, #3978)
  • Bump github.com/shamaton/msgpack/v2 from 2.2.3 to 2.4.0 in (#3678, #3719, #3808)
  • Bump github.com/klauspost/compress from 1.18.1 to 1.18.3 in (#3911, #4013)
  • Bump github.com/google/uuid from 1.5.0 to 1.6.0 in (#2810)
  • Bump golang.org/x/crypto from 0.28.0 to 0.45.0 in (#3243, #3247, #3274, #3305, #3327, #3341, #3395, #3438, #3506, #3737, #3796, #3863, #3882)
  • Bump golang.org/x/net from 0.31.0 to 0.47.0 in (#3293, #3544, #3572, #3738, #3791, #3795, #3861)
  • Bump golang.org/x/text from 0.29.0 to 0.33.0 in (#3797, #4003)
  • Bump golang.org/x/sys from 0.39.0 to 0.40.0 in the golang-modules group in (#4000)
  • Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14 in (#3277)
  • Bump github.com/fxamacker/cbor/v2 from 2.7.0 to 2.9.0 in (#3384, #3581)
  • Upgrade shamaton/msgpack from v2.4.0 to v3.0.0 in (#4023)
  • Bump minimum version of Go to 1.21 in (#2911)
  • Bump golangci-lint from v1.56.1 to v1.62.0 in (#2842, #2862, #3029, #3119, #3135, #3196)
  • Make golangci-lint config stricter in (#2874)
  • Add support for longtests during CI in (#3054)
  • Bump nick-fields/retry from 2 to 3 in (#2824)
  • Bump benchmark-action/github-action-benchmark from 1.16.2 to 1.20.7 in (#2827, #2950, #3008, #3177, #3730, #3736)
  • Bump release-drafter/release-drafter from 5 to 6.2.0 in (#2826, #4022, #4025)
  • Bump golangci/golangci-lint-action from 3 to 9.2.0 in (#2855, #2986, #2994, #3896, #3916)
  • Bump github.com/stretchr/testify from 1.8.4 to 1.11.1 in (#2888, #3217, #3712, #3715)
  • Bump codecov/codecov-action from 4.0.1 to 5.5.2 in (#2901, #2941, #2959, #2993, #2999, #3009, #3035, #3154, #3207, #3209, #3210, #3213, #3234, #3256, #3292, #3295, #3334, #3413, #3459, #3701, #3734, #3935)
  • Bump actions/setup-go from 4 to 6.2.0 in (#2789, #3732, #3886, #4006)
  • Bump github/codeql-action from 2 to 4.32.0 in (#2788, #3792, #3866, #3878, #3897, #3910, #3927, #3945, #3950, #4004, #4034, #4036)
  • Bump actions/cache from 3 to 5.0.3 in (#2803, #3944, #3947, #4017, #4040)
  • Bump fuxingloh/multi-labeler from 2 to 4 in (#2856)
  • Bump DavidAnson/markdownlint-cli2-action from 16 to 22.0.0 in (#3128, #3208, #3266, #3453, #3873, #3932)
  • Bump streetsidesoftware/cspell-action from 8.0.0 to 8.2.0 in (#3938, #3993, #4039)
  • Bump kenchan0130/actions-system-info from 1.3.0 to 1.4.0 in (#3492, #3679)
  • Bump actions/setup-node from 4 to 6.2.0 in (#3733, #3804, #3915, #4008)
  • Bump actions/checkout from 3 to 6.0.2 in (#3083, #3681, #3877, #3887, #3917, #4028)
  • Bump lewagon/wait-on-check-action from 1.4.1 to 1.5.0 in (#4033)
  • Bump the golang-modules group with 4 updates in (#3931)
  • Bump the golang-modules group with 2 updates in (#4005)
  • Add go1.22 to test matrix in (#2835)
  • Replace release-drafter autolabel with fuxingloh/multi-labeler in (#3872)
  • Add CODEOWNERS file in (#2851)
  • Update golangci-lint to v1.55.2 in (#2817)
  • Update golangci-lint to enable more lint rules in (#2923)
  • Add support for go1.23 and golangci-lint v1.60.1 in (#3101)
  • Add go1.24 to CI matrix in (#3325)
  • Add modernize lint in (#3590)
  • Add inamedparam linter in (#2848)
  • Remove repo codecov.yml in (#3525)
  • Enable govet shadow in (#3617)
  • Fix benchmark results in (#1982)
  • Fix spelling issues in (#3813)
  • Golangci-lint issue for go1.25.0 in (#3775)
  • Require Go 1.25 in (#3682)
  • Run tests against Apple M1 platform in (#2852)
  • Update AGENTS.md in (#3901)

📚 Documentation

  • Update Version Numbers in Docs in (#2853)
  • Updates to fiberlog benchmarks and documentation in (#3059)
  • Remove deprecated comments and documenting recent changes in (#3498)
  • Update godoc for fiber.New() in (#3928)
  • Undocumented function in session.md in (#2795)
  • Fix typo in documentation in (#2802)
  • Fix a misspelled comment in (#2809)
  • Update Typo documentation in (#2820)
  • Typo in routing.md in (#2836)
  • Fix code snippet indentation in /docs/api/middleware/keyauth.md in (#2868)
  • Fix TrustedProxies documentation related to IP ranges in (#2887)
  • Update docs to reflect fiber.Ctx struct to interface change in (#2880)
  • Improve translation in (#2899)
  • Update Copilot docs and setup in (#3585)
  • Refactor Documenation for HealthCheck in (#2905)
  • Fixed a typo in app.go in (#2912)
  • Cleanup and updates to README files in (#2914)
  • Fix merge conflict in documentation in (#2957)
  • Fix broken link to slim template in FAQ in (#2969)
  • Update config TrustedOrigin comments in (#2963)
  • Consolidate and Document Core Changes in v3 in (#2934)
  • Fix some comments in (#2983)
  • CORS middleware in (#2979)
  • Add docs for new client in (#2991)
  • Update intro.md to make clear fiber.Ctx is not thread-safe. in (#3014)
  • Improve ctx.Locals method description, godoc and example in (#3032)
  • Add zero-allocation section to README in (#3039)
  • Add support for consistent documentation using markdownlint in (#3064)
  • Update example in middleware/cors to v3 in (#3116)
  • Update recover docs to not use reserved keyword in (#3129)
  • Fix typos in client hooks documentation in (#3133)
  • Replaced link to russian mozilla docs in (#3142)
  • Removed zero width white space from logger docs in (#3144)
  • Fix typo on comment in (#3158)
  • Typo in hooks documentation in (#3164)
  • Update README.md in (#3165)
  • Update What's New documentation in (#3181)
  • Clarify SendFile Docs in (#3172)
  • Update intro documentation in (#3204)
  • Updates to API documentation and README in (#3205)
  • Updates to Context documentation in (#3206)
  • Update documentation for Fiber client in (#3249)
  • Fix static middleware CacheDuration data type typo in (#3273)
  • Add ctx.Drop() to whats_new.md in (#3284)
  • Add c.Drop() example to whats_new.md in (#3285)
  • Update intro.md Static Files section in (#3303)
  • Update adapter middleware documentation in (#3317)
  • Add Retry Addon documentation in (#3330)
  • Update Helmet Middleware default values in (#3348)
  • Update helmet.md default values in (#3350)
  • Add more validation examples in (#3369)
  • Update docs for State Management in (#3388)
  • Fix CSRF handler example in (#3412)
  • Adjust Funding Custom URL in (#3432)
  • Fix examples in middleware/session in (#3435)
  • Idempotency add more detailed description for next method in (#3443)
  • Document usage of Custom Tags in Logger middleware in (#3446)
  • Fix typos in (#3464)
  • Fix more typos across code base in (#3465)
  • Fix typos in code and docs in (#3507)
  • Enhance CORS middleware documentation with preflight request details and infrastructure considerations in (#3509)
  • Add custom constraint example in (#3539)
  • Incorrect usage of backslash characters in the constraint … in (#3549)
  • Add net/http compatiblity section in (#3556)
  • Add documentation for Stale() in (#3555)
  • Update utils guide documentation in (#3575)
  • Fix EarlyData middleware docs in (#3646)
  • Fix Skip middleware docs in (#3649)
  • Fix context changes doc in (#3650)
  • Fix RequestID docs in (#3648)
  • Fix Proxy middleware docs in (#3647)
  • Fix Compress middleware docs in (#3645)
  • Fix Cache middleware docs in (#3644)
  • Fix Favicon middleware documentation in (#3640)
  • Fix Static middleware docs in (#3643)
  • Fix Healthcheck middleware documentation in (#3657)
  • Fix KeyAuth middleware docs in (#3641)
  • Improve Timeout middleware documentation in (#3675)
  • Add context guide in (#3677)
  • Add Learning Resources section with Go Interview Practice platform in (#3691)
  • Fix typos in documentation in (#3695)
  • Add early hints documentation in (#3697)
  • Document utils package migration in (#3704)
  • Note CSRF ContextKey removal in (#3706)
  • Note removal of context keys in (#3707)
  • Add migration tool info in (#3708)
  • Improve wording and fix typos in (#3713)
  • Full audit of documentation in (#3717)
  • Add RoutePatternMatch documentation in (#3722)
  • Clarify context interface implementation in (#3729)
  • Ensure all exported elements are documented in (#3752)
  • Document usage of reverse proxies for SendEarlyHints in (#3778)
  • Fix broken link in the Routing guide in (#3831)
  • Update docs/whats_new.md in (#3889)
  • Clarify handler execution order and usage in Add() in (#3890)
  • Update cache migration guidance in (#3908)
  • Clarify client migration examples in (#3921)
  • Add goroutine cancellation example using context.WithTimeout in (#3884)
  • Fix some comments to improve readability in (#3943)
  • Update logger middleware format constants in (#3951)
  • Refresh adaptor middleware guidance in (#3981)
  • Update Services icon and prefork warning for State Management in (#4002)

Thank you to all contributors:
@ad3n, @akilesh1706, @alequilesl, @alexandear, @Alijeyrad, @aliziyacevik, @andradei, @arturmelanchyk, @asyslinux, @AuroraTea, @axrav, @balcieren, @Behzad-Khokher, @BigJoe17, @brunodmartins, @canks69, @ckoch786, @cuiweixie, @darwin808, @dave-gray101, @deferdeter, @devhaozi, @devhsoj, @Dishank-Sen, @dockercui, @dojutsu-user, @dozheiny, @dreamscached, @duhnnie, @edvardsanta, @efectn, @emirhansirkeci, @ErfanMomeniii, @Fenny, @findfluctuate, @gaby, @gandaldf, @glensargent, @gopkg-dev, @gozeloglu, @grivera64, @guerzon, @haikalSusanto, @haochunchang, @hcancelik, @hotrungnhan, @hungthai1401, @imsk17, @ItsMeSamey, @JIeJaitt, @jsoref, @K0ng2, @KatzuYoru, @khanhkhanhlele, @kianmeng, @kirankumar-grootan, @kiuber, @KrisCarr, @ksw2000, @ktat, @LaptopCat, @Larinax999, @Lars-Schumann, @laughing-nerd, @leonklingele, @linogomez, @luk3skyw4lker, @mazyaryousefinia, @mdelapenya, @mitulagr2, @miyamo2, @MonkyMars, @negrel, @nexovec, @nickajacks1, @nnnkkk7, @oktayozkan0, @omaskery, @omer-cengel, @orvillesimba, @pjebs, @rabarar, @racerole, @ReneWerner87, @RezaSi, @ryanbekhen, @s19835, @SantiagoBobrik, @sebytza23, @shamaton, @sigmundxia, @SivaPA08, @sixcolors, @StrawHatHacker, @sunnyyssh, @techerfan, @the-hotmann, @TheAspectDev, @theleeeo, @tongjicoder, @trim21, @vhespanha, @wangjq4214, @xEricL, @yinheli, @yorickdewid, @ZihxS, @zingi

Full Changelog: v2.52.11...v3.0.0

For a detailed view of all changes and the migration guide, visit:
https://docs.gofiber.io/whats_new

Check out latest releases or
releases around gofiber/fiber v3.0.0

Don't miss a new fiber release

NewReleases is sending notifications on new releases.

Get notifications