What's Changed
- Update to go1.25 as minimal version by @erikdubbelboer in #2205
- client: add aggregate connection count metrics by @z9z in #2201
- fix(server): return ErrMissingFile when MultipartForm.File is nil by @u5surf in #2260
- bug: FS cache cleaner goroutine leaks when CleanStop is nil (default) (#2218), #2247 by @erikdubbelboer in #2271
- bug: data race on pipeline client c.chR during worker drain (#2220) by @erikdubbelboer in #2272
- bug: TCPDialer.tcpAddrsClean() goroutine leaks — no shutdown mechanism (#2222) by @erikdubbelboer in #2273
- bug: double concurrency counter increment in ServeConn causes counter leak (#2238) by @erikdubbelboer in #2275
- bug: body stream leak in compression methods when response is discarded (#2244) by @erikdubbelboer in #2276
- bug: InMemoryListener deadlock under high concurrency (#2245) by @erikdubbelboer in #2277
- bug: fasthttpadaptor writer leak, data race, and crash on handler panic (#2246) by @erikdubbelboer in #2278
- bug: fasthttpproxy dialers return nil DialFunc on error, causing panic (#2248) by @erikdubbelboer in #2279
- bug: closeIdleConns TOCTOU race with serveConn idle timestamp (#2250) by @erikdubbelboer in #2280
- bug: AppendCert/AppendCertEmbed not thread-safe (#2251) by @erikdubbelboer in #2281
- bug: SetBodySizePoolLimit data race — plain int written without synchronization (#2252) by @erikdubbelboer in #2282
- bug: file descriptor leak in prefork parent process (#2253) by @erikdubbelboer in #2283
- security: SO_REUSEADDR on Windows enables port hijacking (#2254) by @erikdubbelboer in #2284
- bug: file descriptor leak on z/OS s390x when FcntlInt fails (#2255) by @erikdubbelboer in #2285
- bug: filesLockMap grows unboundedly, leaking memory (#2256) by @erikdubbelboer in #2286
- security: TLS verification silently disabled for malformed addresses (#2236) by @erikdubbelboer in #2274
- fix(fs): remove temporary file when compression fails by @u5surf in #2264
- fix double release of streamed client response body by @Mereng in #2211
- fix(client): switch to GET on 303 redirect per RFC 9110 by @u5surf in #2265
- ci: re-enable gocritic deferInLoop check for non-test code by @u5surf in #2288
- Fix flaky race tests by @erikdubbelboer in #2292
- fix(lbclient): prevent deadlock when all clients are removed by @u5surf in #2287
- reject duplicate Content-Length in response header parser by @alhudz in #2294
- strip cr/lf from header keys in normalizeHeaderKey by @alhudz in #2295
- fix(client): guard nil waiter in decConnsCount by @SAY-5 in #2266
- strip semicolons from cookie setters to block attribute injection by @alhudz in #2298
- feat(prefork): graceful shutdown, leak fixes, hook robustness (re-open of #2180 follow-up) by @ReneWerner87 in #2199
- fix: prevent data race on FSCompressedFileSuffixes map by @xbrxr03 in #2300
- reject duplicate Transfer-Encoding in request header parser by @alhudz in #2303
- preserve duplicate request headers in ConvertRequest by @alhudz in #2305
- fix(server): close listener on serve error in ListenAndServe helpers by @fereidani in #2304
- validate trailer values in parseTrailer by @alhudz in #2301
- Avoid default content type for empty requests by @nkgotcode in #2296
- chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot[bot] in #2210
- chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in #2209
- chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 by @dependabot[bot] in #2208
- chore(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 by @dependabot[bot] in #2207
- chore(deps): bump securego/gosec from 2.26.1 to 2.27.0 by @dependabot[bot] in #2261
- chore(deps): bump securego/gosec from 2.27.0 to 2.27.1 by @dependabot[bot] in #2267
- chore(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by @dependabot[bot] in #2289
- chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by @dependabot[bot] in #2290
- chore(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 by @dependabot[bot] in #2291
- chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #2297
New Contributors
- @z9z made their first contribution in #2201
- @Mereng made their first contribution in #2211
- @alhudz made their first contribution in #2294
- @SAY-5 made their first contribution in #2266
- @xbrxr03 made their first contribution in #2300
- @fereidani made their first contribution in #2304
- @nkgotcode made their first contribution in #2296
Full Changelog: v1.71.0...v1.72.0