What's Changed 🧹 Updates mark the fiber/v2 module as deprecated in favor of v3 by @gaby in #4789 🐛 Bug Fixes cors: reject empty subdomain labels in CORS wildcard origins by @ReneWerner87 in #4792 Full Changelog: v2.52.15...v2.52.16
🧹 Updates Consolidate media-type parameter parsing into internal/mediatype (#4750) Fix modernize and revive lint issues (#4759) 🐛 Fixes Fix client, session, basicauth and other bugs found in the audit (#4752) 🛠️ Maintenance bump github.com/gofiber/utils/v2 from 2.6.1 to 2.6.2 (#4760) bump github.com/klauspost/compress from 1.20.1 to 1.20.3 (#4757) bump github.com/molecule-man/go-brrr from 1.2.0 to…
⚡ Performance Fiber v3.6.0 ships with fasthttp v1.75.0. With it, Fiber v3 is back on par with the speed of v2, despite the additional security mechanisms built in since then. Time per request vs. v2 v3.5.0 (fasthttp v1.73.0) v3.6.0 (fasthttp v1.75.0) fasthttp only +18% -5% Static route +16% -14% Route parameter +15% -13% Middleware chain +13% -12% Header lookup +29% +3% Locals +33% +5% JSON respon…
🚀 New Harden proxy middleware (#4405) New proxy.SecurityPolicy with secure defaults: private/loopback upstreams, non-http(s) schemes and HTTPS-to-HTTP redirect downgrades are rejected and hop-by-hop headers stripped. proxy.WithSecurityPolicy(proxy.SecurityPolicy{ AllowPrivateIPs: true, // internal upstreams are blocked by default }) https://docs.gofiber.io/middleware/proxy#security Add support for…
🐛 Bug Fixes idempotency: release MemoryLock keys on unlock #4569 Full Changelog: v2.52.14...v2.52.15
What's Changed 🐛 Bug Fixes backport BalancerForward X-Real-IP overwrite fix to v2 by @terraincognita07 in #4495 New Contributors @terraincognita07 made their first contribution Full Changelog: v2.52.13...v2.52.14
🚀 New Complete HTTP QUERY method support (#4436, #4456) Adds the HTTP QUERY method (RFC 10008): fiber.MethodQuery, app.Query() routing, safe/idempotent handling in csrf, idempotency, earlydata and cache, plus client.Query() shorthands. app.Query("/search", func(c fiber.Ctx) error { return c.Send(c.Body()) // QUERY carries the query expression in the body }) https://docs.gofiber.io/client/rest#quer…
🚀 New Add support for configuring the Regex engine on the router (#4254) Swap the compiler used for regex() route constraints. Assign a drop-in engine such as coregex.MustCompile for faster matching;Fiber reuses the compiled matcher across requests. app := fiber.New(fiber.Config{ RegexHandler: coregex.MustCompile, // default: regexp.MustCompile }) https://docs.gofiber.io/api/fiber#regexhandler Hos…
What's Changed 🐛 Bug Fixes Escape HTML output in Ctx.Format by @gaby in #4232 Full Changelog: v2.52.12...v2.52.13
🚀 New Add URL() method to Route for generating URLs with parameters (#4195) https://docs.gofiber.io/api/app#getroute Add comprehensive tests for binding to pointer scalar types (#4191) Add response format support to healthcheck middleware (#4178) https://docs.gofiber.io/middleware/healthcheck#config Route Domain() func for host-based routing (#4100) Add pagination middleware (#4127) https://docs.g…
🐛 Fixes CVE fix GHSA-mrq8-rjmw-wpq3 Full Changelog: v2.52.11...v2.52.12
🚀 New expand middleware context helpers (#4079) app := fiber.New(fiber.Config{ PassLocalsToContext: true, // default: false }) // Works for requestid, csrf, session, basicauth, keyauth middlewares app.Use(requestid.New()) app.Get("/", func(ctx fiber.Ctx) error { // Value helpers from middlewares works now with 3 different context items id := requestid.FromContext(ctx) // works always id := request…
For a detailed view of all changes and the migration guide, visit: https://docs.gofiber.io/whats_new Try our new migration tool to help you upgrade from v2 to v3: go install github.com/gofiber/cli/fiber@latest fiber migrate --to v3 What's Changed 🚀 New Features 🚀 App (Docs) Rename WithTlsConfig method to WithTLSConfig in (#2570) Use any as default Message type of Error struct in (#1925) Add suppor…
What's Changed 🧹 Updates Improve mount functionality by @gaby in #3900 🐛 Bug Fixes Backport defensive copying fixes from #3828 and #3829 to v2 by @sixcolors in #3888 Fixes and improvements for limiter middleware by @gaby in #3899 Full Changelog: v2.52.10...v2.52.11
🚀 New Features Middleware/encryptCookie: Add cookie name authentication for EncryptCookie middleware by @gaby in #3788 Middleware/proxy: Add BodyStream() logic to adaptor.FiberHandler middleware by @grivera64 in #3799 Client: Add support for HostClient and LBClient by @gaby in #3774 Native support for net/http and fasthttp handlers by @gaby in #3769 Add support for Express.js style req/res handler…
🐛 Bug Fixes Handle invalid path in filesystem by @rokostik in #3688 Fix recover middleware panic output formatting by @ReneWerner87 in #3818 Fix enforcement of Immutable config for some edge cases by @gaby in #3835 📚 Documentation Document RoutePatternMatch by @ReneWerner87 in #3723 New Contributors @rokostik made their first contribution in #3688 Full Changelog: v2.52.9...v2.52.10
🚀 New Features Add request inspection helpers by @gaby in #3727 Add extractors package by @sixcolors in #3725 Add support for redacting values by @gaby in #3759 🧹 Updates Middleware/cache: Improve Cache middleware defaults by @gaby in #3740 Middleware/cache: Fix cache cleanup and redact token values by @gaby in #3757 Middleware/compress: Improve Compress middleware RFC compliance by @gaby in #3745…