Skip to content

chore: update module github.com/gofiber/fiber/v2 to v3#255

Closed
renovate[bot] wants to merge 1 commit intomainfrom
renovate/github.com-gofiber-fiber-v2-3.x
Closed

chore: update module github.com/gofiber/fiber/v2 to v3#255
renovate[bot] wants to merge 1 commit intomainfrom
renovate/github.com-gofiber-fiber-v2-3.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 2, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
github.com/gofiber/fiber/v2 v2.52.11 → v3.0.0 age confidence

Release Notes

gofiber/fiber (github.com/gofiber/fiber/v2)

v3.0.0

Compare Source

For a detailed view of all changes and the migration guide, visit:
https://docs.gofiber.io/next/whats_new

Try our new migration tool to help you upgrade from v2 to v3:

go install github.com/gofiber/cli/fiber@latest
fiber migrate --to v3.0.0

What's Changed

🚀 New Features
  • 🚀 App (Docs)
    • Rename WithTlsConfig method to WithTLSConfig in (#​2570)
    • Use any as default Message type of Error struct in (#​1925)
    • Add support for custom constraints in (#​2807)
    • Add support for trusted origins in (#​2910)
    • Add DialDualStack option for upstream IPv6 support in (#​2900)
    • TrustedOrigins using https://*.example.com style subdomains in (#​2925)
    • Add configuration support to c.SendFile() in (#​3017)
    • Add CHIPS support to Cookie in (#​3047)
    • Add TestConfig to app.Test() for configurable testing in (#​3161)
    • Add buffered streaming support in (#​3131)
    • Add support for AutoTLS / ACME in (#​3201)
    • Add support for configuring TLS Min Version in (#​3248)
    • Fix square bracket notation in Multipart FormData in (#​3235)
    • Add support for application state management in (#​3360)
    • Add support for NewErrorf in (#​3463)
    • Add UNIX socket support in (#​3535)
    • Add support for Msgpack in (#​3565)
    • Add default UTF-8 charset in (#​3583)
    • Support for SendEarlyHints in (#​3483)
    • Add conditional copy helpers in (#​3703)
    • Add request inspection helpers in (#​3727)
    • Add support for redacting values in (#​3759)
    • Add support for handling unsupported HTTP methods as HTTP 501 in (#​3854)
    • Add support for ReloadViews() in (#​3876)
    • Expose startup message customization hooks in (#​3824)
    • Migrate from UUIDv4 to SecureToken for key generation in (#​3946)
    • Add ExpirationFunc for dynamic expiration in (#​3984)
    • Auto-enforce Secure=true for Partitioned cookies in Cookie() in (#​3976)
  • 📎 Binding (Docs)
    • Initial support for binding in (#​1981)
    • Bind: add support for multipart file binding in (#​3309)
    • Add All method to Bind in (#​3373)
  • 🌎 Client (Docs)
    • Client refactor in (#​1986)
    • Add support for creating Fiber client from existing FastHTTP client in (#​3214)
    • Add support for iterator methods to Fiber client in (#​3228)
    • Add support for HostClient and LBClient in (#​3774)
    • Add support for streaming response bodies in client and response handling in (#​4014)
  • 🧠 Context (Docs)
    • Convert fiber.Ctx type to interface in (#​1928)
    • Add Drop method to DefaultCtx for silent connection termination in (#​3257)
    • Add End() method to Ctx in (#​3280)
    • Improve and Optimize ShutdownWithContext Func in (#​3162)
    • Add support for context.Context in keyauth middleware in (#​3287)
    • Fiber.Context implement context.Context in (#​3382)
    • Add NewWithCustomCtx initialization helper in (#​3476)
    • Add context methods to fiber.Storage interface in (#​3566)
    • Add Fiber Context to BasicAuth Authorizer in (#​3621)
    • Implement OverrideParam override behavior for DefaultCtx in (#​3962)
    • Add context common request helpers in (#​4007)
    • Adding GetReqHeaders and GetRespHeaders in (#​2831)
    • Add Req and Res API in (#​2894)
  • 🔬 Extractors (Docs)
    • Introduce Extractor pattern for session ID retrieval in (#​3625)
    • Enhance extractor functionality with metadata and security validation in (#​3630)
    • Add extractors package in (#​3725)
  • 🧰 Generic (Docs)
    • Add QueryParser for get query using generic in (#​2776)
    • Addition of Locals Function with Go Generics as an Alternative to c.Locals in (#​2813)
    • Implement new generic functions: Params, Get and Convert in (#​2850)
    • Support generic configurable logger in (#​3705)
  • 🚀 Listen (Docs)
    • Merge Listen methods & ListenConfig in (#​1930)
    • Add support for graceful shutdown timeout in ListenConfig in (#​3220)
    • Add TLSConfig to ListenConfig in (#​4024)
  • 🔌 Addons/retry (Docs)
  • 🧬 Middleware – adaptor (Docs)
    • Add BodyStream() logic to adaptor.FiberHandler middleware in (#​3799)
    • Add local context support to adaptor middleware in (#​3975)
  • 🧬 Middleware – basicauth (Docs)
    • Add HeaderLimit option to BasicAuth middleware in (#​3620)
    • Support hashed BasicAuth passwords in (#​3631)
  • 🧬 Middleware – cache (Docs)
    • Add Cache Invalidation Option to Cache Middleware in (#​3036)
    • Add Max Func to Limiter Middleware in (#​3070)
    • Support for disabling response headers in Limiter Middleware in (#​3618)
  • 🧬 Middleware – compression (Docs)
    • Add support for zstd compression in (#​3041)
    • Add support for CBOR encoding in (#​3173)
  • 🧬 Middleware – cors (Docs)
    • Add support for Access-Control-Allow-Private-Network in (#​2908)
  • 🧬 Middleware – csrf (Docs)
    • Add support for Sec-Fetch-Site header in CSRF middleware in (#​3913)
  • 🧬 Middleware – encryptcookie (Docs)
    • Add cookie name authentication for EncryptCookie middleware in (#​3788)
  • 🧬 Middleware – favicon (Docs)
    • Add MaxBytes to favicon middleware in (#​4016)
  • 🧬 Middleware – earlydata (Docs)
    • Add earlydata middleware in (#​2270)
  • 🧬 Middleware – healthcheck (Docs)
    • Migrate HealthChecker to v3 in (#​2884)
    • Add Startup Probe to Healthcheck Middleware in (#​3069)
  • 🧬 Middleware – idempotency (Docs)
    • Add idempotency middleware in (#​2253)
  • 🧬 Middleware – keyauth (Docs)
    • Add support for custom KeyLookup functions in the Keyauth middleware in (#​3028)
  • 🧬 Middleware – logger (Docs)
    • Refactor logger middleware in (#​1979)
    • Add AllLogger to Config in (#​3153)
    • Add Skip function to logger middleware in (#​3333)
    • Add predefined log formats in (#​3359)
    • Add support for ForceColors in Logger middleware in (#​3428)
  • 🧬 Middleware – proxy (Docs)
    • Add support for TrustProxy in (#​3170)
    • Add KeepConnectionHeader option to Proxy middleware in (#​3662)
  • 🧬 Middleware – requestid (Docs)
    • Add Context Support to RequestID Middleware in (#​3200)
    • Validate HTTP headers in RequestID middleware in (#​3919)
  • 🧬 Middleware – responsetime (Docs)
    • Add response time middleware in (#​3891)
  • 🧬 Middleware – session (Docs)
    • Re-write session middleware with handler in (#​3016)
    • Add support for Keys() in session middleware in (#​3517)
  • 🧬 Middleware – static (Docs)
  • 🧬 Middleware – timeout (Docs)
    • Add config for Timeout middleware in (#​3604)
  • 🔄️ Redirect (Docs)
  • 🗺️ Router (Docs)
    • Router interface changes in (#​2176)
    • Native support for net/http and fasthttp handlers in (#​3769)
    • New Route method in (#​2065)
    • New mounting system in (#​2022)
    • Add support for RebuildTree in (#​3074)
    • Add support for Express.js style req/res handlers in (#​3809)
    • Add support for DisableAutoRegister of HEAD routes in (#​3817)
    • Enhance CheckConstraint method for improved error handling in (#​3356)
    • Add Support for Removing Routes in (#​3230)
    • Add support for embedded Koa-Style Req and Res structs in (#​3533)
    • Support Express-style next callback handlers in (#​4029)
  • 🧩 Services (Docs)
    • Add Support for service dependencies in (#​3434)
🧹 Updates
  • ⚙️ Core & API
    • Replace string functions in (#​3923)
    • Update conditional instructions for startup skip in (#​3475)
    • Update AGENTS startup instructions in (#​3474)
    • Add []byte support to utils.EqualFold in (#​2029)
    • Change startup message in (#​2041)
    • Update to use gofiber/utils/v2 in (#​2184)
    • Router: return status 501 instead of 400 on unknown method in (#​2220)
    • Cleanup in (#​2255)
    • Fix ContextKey collisions in (#​2781)
    • Update Ctx.Format to match Express's res.format in (#​2766)
    • Update handler signature for v3 in (#​2794)
    • Change interface{} to any in (#​2796)
    • Added respects body immutability to ctx.Body() and ctx.BodyRaw() functions. in (#​2812)
    • Print to stderr if log fails for default format in (#​2830)
    • Clean up errcheck config in (#​2841)
    • Update startup message formatting in (#​2847)
    • Simplify content negotiation code in (#​2865)
    • Rename "ClientNew" Function to "New" in (#​2896)
    • Remove repetitive words in (#​2917)
    • Improper query/body parsing with embedded structs in (#​2906)
    • Improve and simplify logic of ctx.Next() in (#​3063)
    • Use Named Fields Instead of Positional and Align Structures to Reduce Memory Usage in (#​3079)
    • Use utils Trim functions instead of the strings/bytes functions in (#​3087)
    • Consolidate Logic of Handling the Request Body in (#​3093)
    • Use msgp for flash message encoding/decoding in (#​3099)
    • Replace vendored gorilla/schema package in (#​3152)
    • Improve naming convention for Context returning functions in (#​3193)
    • Nil pointer dereference with Must Bind binding in (#​3171)
    • Mark go1.23 as minimum go version in (#​3226)
    • Rename the Method Names of FormData and FormDatas (#​3251) in (#​3255)
    • Reduce the Memory Usage of ignoreHeaders in (#​3322)
    • Migrate randString to rand v2 in (#​3329)
    • Sorting error in sortAcceptedTypes in (#​3331)
    • Reduce the memory usage of RoutePatternMatch in (#​3335)
    • Replace findLastCharsetPosition with strings.LastIndexByte in (#​3338)
    • Replace isInCharset with bytes.IndexByte in (#​3342)
    • Remove two string fields in DefaultCtx to save 32 bytes in (#​3353)
    • Replace treePath with treePathHash in DefaultCtx to reduce memory usage in (#​3368)
    • Remove redundant field method in DefaultCtx in (#​3372)
    • Add findNextNonEscapedCharPosition for single-byte charset cases in (#​3378)
    • Change c.Redirect() default status in (#​3415)
    • Improve routing treeBuild flow in (#​3456)
    • Make genericParseType return error in (#​3473)
    • Update minimum go version to 1.24 in (#​3481)
    • Use slices.Contains to simplify code in (#​3486)
    • Use maps.Copy to simplify code in (#​3490)
    • Update loop syntax for retry mechanism in (#​3516)
    • Update codecov configuration in (#​3528)
    • Use GetState to reduce duplicate code in (#​3542)
    • Improve Cookie() validation in (#​3546)
    • Improve Accept* compliance with RFC 9110 in (#​3548)
    • Refactor fasthttp iter calls to range loops in (#​3559)
    • Add iterator helpers for client types in (#​3560)
    • Update utils dependency in (#​3576)
    • Refactor Opt-in support for CBOR in (#​3580)
    • Simplify generic function calls in (#​3578)
    • Replace math/rand with crypto/rand in (#​3508)
    • Add sync pool and release helpers for Bind in (#​3660)
    • Add CBOR support to AutoFormat() in (#​3665)
    • Fix AcceptsLanguages() RFC compliance in (#​3672)
    • Respect immutable config in Params(), Protocol(), and Body() in (#​3676)
    • Delay routing error creation in (#​3683)
    • Using reflect.TypeAssert in (#​3698)
    • Handle Transfer-Encoding bodies in HasBody in (#​3748)
    • Improve error handling when using storage drivers in (#​3754)
    • Use sync.Pool for Client hooks in (#​3758)
    • Avoid locking in gc() if nothing to delete in (#​3765)
    • Cleanup return error logic in Bind() in (#​3764)
    • Update RouteChain function in (#​3761)
    • Make boundary a const in (#​3783)
    • Preallocate slice size in Client::Param() in (#​3782)
    • Skip locking garbage collector if nothing to delete in (#​3787)
    • Enhance Body handling in setConfigToRequest for better type su… in (#​3820)
    • Improve propagation of context.Context in (#​3822)
    • Inline Request state wrappers in (#​3827)
    • Remove unneeded "utils" alias in (#​3834)
    • Add FullPath() helper to context in (#​3837)
    • Handle nil map targets in Binder in (#​3839)
    • Extracted generic releasePooledBinder function in (#​3841)
    • Return error during EncryptCookie failure in (#​3842)
    • Fix gocritic httpNoBody and hugeParam issues in (#​3855)
    • Refactor internal errors to use sentinel values in (#​3864)
    • Improve byte-range handling for SendFile() in (#​3870)
    • Use int64 when dealing with HTTP Ranges in (#​3874)
    • Replace strings.TrimSpace with utils.TrimSpace in (#​3918)
    • Replace strings.Index with strings.Cut for improved readallity in (#​3956)
    • Validate constraint by bit operation in (#​3963)
    • Use sync.Pool for form and multipart binding in (#​3967)
    • Use sync.Pool for redirect old input map in (#​3971)
    • Replace anonymous struct key with named type in (#​4020)
  • 🧬 Middleware & Addons
    • Document "null" origin handling in CORS middleware in (#​4001)
      (Docs)
    • Refactor CSRF middleware and enhance documentation in (#​3598)
    • Fix pprof middleware docs and default config in (#​3642)
    • Fix CORS docs and comments in (#​3637)
    • Fix CSRF error message mismatch with documentation in (#​3636)
    • Refactor filesystem middleware with io/fs in (#​2027) (Docs)
    • Remove mutex lock in logger middleware in (#​2840)
    • Update CSRF and Limiter to remove repetitive names in (#​2846)
    • Refactor(middleware/cors): Config, lists as list types. in (#​2962)
    • Enforce key length for EncryptCookie middleware default functions in (#​3056)
    • Middleware/CORS Remove Scheme Restriction in (#​3163)
    • Unify and enhance timeout middleware in (#​3275)
    • Simplify HealthCheck middleware in (#​3380)
    • Improve proxy middleware in (#​3468)
    • Enhance KeyAuth middleware to better comply with RFC 6750 in (#​3482)
    • Enhance BasicAuth middleware to better comply with RFC 6750 in (#​3484)
    • Improve cache middleware RFC compliance in (#​3488)
    • Enhance config validation in EncryptCookie middleware in (#​3491)
    • Refactor EnvVar middleware in (#​3513)
    • Improve CORS middleware response headers in (#​3505)
    • Improve BasicAuth middleware default security in (#​3522)
    • Improve static middleware security in (#​3595)
    • Remove SHA-1/MD5 support in BasicAuth middleware in (#​3634)
    • Remove support for PasswordFromContext from BasicAuth middleware in (#​3638)
    • Refactor KeyAuth Middleware: Extractor-Based Configuration and Enhanced Flexibility in (#​3685)
    • Return generic errors in KeyAuth middleware in (#​3692)
    • Fix CSRF subdomain wildcard boundary in (#​3694)
    • Improve Cache middleware defaults in (#​3740)
    • Migrate Session middleware to new extractors package in (#​3744)
    • Improve Compress middleware RFC compliance in (#​3745)
    • Improve KeyAuth middleware RFC compliance in (#​3742)
    • Update CSRF middleware to use shared extractors in (#​3746)
    • Update keyauth middleware to use shared extractors in (#​3747)
    • Fix cache cleanup and redact token values in (#​3757)
    • Ensure middleware prefix matching requires slash boundary in (#​3755)
    • Reduce the memory usage of cacheableStatusCodes in (#​3789)
    • Refactor configuration management for favicon and envvar middlewares in (#​3898)
    • Improve Cache middleware compliance in (#​3973)
    • Further improvements to Cache middleware in (#​3989)
    • Skip caching oversized responses in idempotency middleware in (#​4018)
  • ⚡️ Performance & Benchmarks
    • Optimize the menu item text in (#​3267)
    • Remove utils.Trim* because stdlib has same performance in go1.19 in (#​2030)
    • Performance improvements in (#​2838)
    • Add parallel benchmarks to adaptor middleware in (#​2870)
    • Expand Tests and Benchmarks for Log package in (#​2886)
    • Performance optimizations in (#​2947)
    • Add Benchmarks for IsProxyTrusted() in (#​2933)
    • Optimize Cache middleware handler in (#​3031)
    • Update benchmarks for Logger Middleware in (#​3061)
    • Improve performance of Adaptor Middleware in (#​3078)
    • Refactor Benchmark Results Workflow in (#​3082)
    • Improve performance of helper functions in (#​3086)
    • Improve Performance of c.Body() by 125% in (#​3090)
    • Add Benchmarks for Rewrite Middleware in (#​3092)
    • Optimize IsFromLocal() performance in (#​3140)
    • Improve Performance of Fiber Router in (#​3261)
    • Improve Performance of getSplicedStrList in (#​3318)
    • Optimize routeParser by using sync.Pool in (#​3343)
    • Add Immutable benchmarks for default case in (#​3374)
    • Performance optimizations in (#​3477)
    • Improve performance for "equalFieldType" function in (#​3479)
    • Fix compression benchmarks in (#​3561)
    • Improve iterator performance. in (#​3562)
    • Improve sanitizePath performance in (#​3601)
    • Skip unstable GenericParseType benchmarks in (#​3614)
    • Reduce allocation in AutoFormat in (#​3652)
    • Optimize Fresh header parsing for fasthttp 1.65 in (#​3687)
    • Improve Req/Res Benchmarks in (#​3693)
    • Improve performance analyseConstantPart in (#​3753)
    • Improve allocations for Request Params() in (#​3766)
    • Reduce allocations in Request (saves ~16% B/op) in (#​3768)
    • Benchmark for cache miss case in (#​3836)
    • Improve performance of RebuildTree() by 68% in (#​3895)
    • Optimize string handling and memory allocations in (#​3922)
    • Improve performance (reduce allocations) in (#​3964)
  • 🛠️ Testing & Tooling
    • Use testify for assertion in (#​2036)
    • Generate msgp tests in (#​2263)
    • V3 Feature: Make app.Test accept a time.Duration timeout in (#​2269)
    • Speed up addon/retry tests in (#​2800)
    • Re-enable tparallel linter in (#​2801)
    • Fix testifylint errors in middleware in (#​2805)
    • Fix remaining testifylint errors in (#​2806)
    • Fix force type assertions in session_test.go in (#​2815)
    • Address multiple lint rules in (#​2869)
    • Do not retry flaky tests in (#​2875)
    • Enabling shuffling, cleanup and consistency across tests in (#​2931)
    • Adding a generator to generate the CTX interface in (#​3024)
    • Test(middleware/session): Remove extra release and acquire ctx calls in session_test.go in (#​3044)
    • Test(ctx_test): Fix race condition in (#​3081)
    • The value of map is unused in uniqueRouteStack in (#​3320)
    • Mark unused tests with t.SkipNow in (#​3366)
    • Fix proxy middleware tests for offline environments in (#​3467)
    • Add unit-test for header injection in (#​3470)
    • Add URI Test case for Test_Ctx_Binders in (#​3480)
    • Test: Enhance CSRF tests to address unsafe header value issue (#​2045) in (#​3485)
    • Improve EarlyData middleware tests coverage in (#​3520)
    • Improve Idempotency middleware tests coverage in (#​3521)
    • Improve Helmet middleware tests coverage in (#​3523)
    • Improve Retry addon tests coverage in (#​3526)
    • Add missing CSRF token extractor tests in (#​3527)
    • Improve hooks test coverage in (#​3524)
    • Improve Binder tests coverage in (#​3529)
    • Improve CORS tests coverage in (#​3530)
    • Improve CSRF tests coverage in (#​3531)
    • Improve Router tests coverage in (#​3550)
    • Add tests for quoteRawString in (#​3613)
    • Fix Makefile to install tools before running them in (#​3612)
    • Fix Cookie SameSite constants to Pascal case per RFC specification in (#​3608)
    • Fix timing for streaming test in (#​3628)
    • Add missing checks in Ctx tests in (#​3670)
    • Stabilize interrupted stream writer test in (#​3669)
    • Use ephemeral ports in unit tests in (#​3686)
    • Use project toolchain for go run tools in (#​3709)
    • Expand Binder tests coverage in (#​3714)
    • Prevent CopyContextToFiberContext panic and add comprehensive test coverage in (#​3770)
    • Add flushing-related unit tests for net/http adaptor in (#​3807)
    • Fix fatal error calls in adapter_test.go in (#​3810)
    • Test HEAD request compliance in (#​3868)
    • Improve OPTIONS wildcard regression test in (#​3869)
    • Add table-driven integration tests in (#​3894)
    • Improve timing robustness in flaky cache and session tests in (#​3994)
🐛 Bug Fixes
  • Fix logger benchmarks in (#​2074)
  • Fix benchmark results related to handler, next in (#​2130)
  • Testifylint failure that fell through the cracks in (#​2821)
  • Inconsistent and flaky unit-tests in (#​2892)
  • CORS handling in (#​2938)
  • Fix some struct names in comments in (#​2974)
  • Fixes #​3038 "v3 Flash Message with redirect is not working" in (#​3046)
  • Mutex for thread safety in (#​3049)
  • Fix data-race with sync.Pool in (#​3051)
  • Fasthttp errors cause panic when Params is used in (#​3055)
  • Use Content-Length for bytesReceived and bytesSent tags in Logger Middleware in (#​3066)
  • Cache middleware: runtime error: "index out of range [0] with length 0" in (#​3075)
  • Error check in Form binder in (#​3110)
  • Client: fix SetProxyURL functionality in (#​3109)
  • Fix handle un-matched open brackets in the query params in (#​3126)
  • Fix issue with default logger when creating RequestCtx in (#​3134)
  • Fix typo in (#​3145)
  • Behavior of DefaultCtx.Fresh when 'Last-Modified' and 'If-Modified-Since' are equal in (#​3150)
  • Adaptor middleware duplicates cookies in (#​3151)
  • Close File After SaveFileToStorage in (#​3197)
  • Make SetValWithStruct set zero values and support more types #​3167 in (#​3227)
  • Fix EnableSplittingOnParsers is not functional in (#​3231)
  • Memory leak removal in the idempotency middleware in (#​3263)
  • Make Render bind parameter type any again in (#​3270)
  • Fix app.Test() auto-failing when a connection is closed early in (#​3279)
  • Align cache middleware with RFC7231 in (#​3283)
  • Goroutine leakage in (#​3306)
  • GenericParseType parsing large uint leads to overflow in (#​3315)
  • Fix handler order in routing in (#​3321)
  • Update binder in form_test in (#​3336)
  • Fix client iterators when using break statement in (#​3357)
  • Fix: Logger Middleware tests to use regex for time validation in (#​3392)
  • Handling of next param position in (#​3418)
  • Fix redirection flash messages violate cookie structure in (#​3457)
  • Fix AGENTS markdown lint in (#​3460)
  • Parsing of IPv6 addresses in (#​3466)
  • Middlewares immutable config handling in (#​3494)
  • Subdomains offset handling in (#​3495)
  • Fix Cache-Control header parsing in (#​3534)
  • Fix Content-Type comparison in Is() in (#​3536)
  • Fix Subdomains() parsing for IDNs in (#​3538)
  • Fix Range() parsing of bytes unit in (#​3541)
  • Fix Etag validation per RFC 9110 in (#​3554)
  • Fix Range() handling of HTTP 416 per RFC 9110 in (#​3552)
  • Fix Accept-Language matching per RFC 4647 in (#​3553)
  • Fix Cache middleware handling of Age in (#​3547)
  • Fix Content-Disposition header per RFC 6266 in (#​3551)
  • Fix Body() handling of Content-Encoding per RFC 9110 in (#​3543)
  • Fix multipart boundary for Client per RFC 2046 in (#​3563)
  • Fix address parsing for leading/trailing spaces in (#​3569)
  • Fix missing Allow header in EnvVar middleware per RFC 9110 in (#​3570)
  • Fix static/favicon middlewares file descriptor leaks in (#​3579)
  • Fix CookieJar domain logic in (#​3564)
  • Fix handling of negative BodyLimit in (#​3599)
  • Fix MIME type equality checks in (#​3602)
  • Fix retry config handling in (#​3609)
  • Fix limiter middleware not counting fiber.NewErrorf responses as failed requests in (#​3623)
  • Fix race in cookie tests in (#​3629)
  • Fix bind All() merging logic in (#​3659)
  • Fix Static middleware browser support for subdirectories in (#​3673)
  • Fix CORS subdomain wildcard boundary in (#​3690)
  • Fix support for context.Context in (#​3720)
  • Improve BasicAuth middleware RFC compliance in (#​3743)
  • Handle Unix sockets in adaptor middleware in (#​3760)
  • Fix usage of runtime RO data for ppc64 and s390x platforms in (#​3772)
  • Respect DisablePathNormalizing during client requests in (#​3773)
  • Always close form file in (#​3786)
  • Fix recover middleware panic output formatting in (#​3816)
  • Correct fresh flag logic in getSession in (#​3825)
  • Prevent memory corruption in internal memory storage from pooled buffers in (#​3828)
  • Avoid writing into released Response in core::execFunc() in (#​3830)
  • Remove Flash Cookie from Response headers after parsing in (#​3840)
  • Fix binder splitting for pointer-backed slice fields in (#​3844)
  • Fix typos in some files in (#​3847)
  • Execute middleware routes when handling errors in (#​3846)
  • Fix copying of key/values in internal/memory in (#​3829)
  • Fix maintain CustomCtx across middlewares in (#​3852)
  • Fix default value for MaxFunc in Limiter middleware in (#​3871)
  • Fix handling of wildcard matching in acceptsOffer in (#​3880)
  • Fix handling of no-body HTTP statuses in (#​3883)
  • Fix and improvements for the sliding window Limiter in (#​3893)
  • Improve suffix range normalization in (#​3902)
  • Enhance Origin and Referer Validation in CSRF middleware in (#​3904)
  • Respect Authorization when caching responses in (#​3905)
  • Fprint to use format instead of fmtArgs in (#​3925)
  • Enforce body limits in SaveFileToStorage in (#​3929)
  • V3 fix custom errorhandler invokation in (#​3930)
  • Fix example in whats_new.md in (#​3949)
  • Ensure flash messages are consumed after retrieval in (#​3936)
  • Fix FIPS-140 compliance for EncryptCookie middleware in (#​3955)
  • Guard Binds decoder sync.Pool in (#​3969)
  • Fix Early-Data trusted proxy handling in (#​3974)
  • Preserve session data map across resets in (#​3968)
  • Improve cookie decryption handling by deleting invalid cookies after iteration in (#​3988)
  • Respect body limit configuration in adaptor middleware in (#​3990)
  • Security: Enforce case-sensitive null origin validation in CORS in (#​3995)
  • Optimize CORS origin validation to avoid unnecessary processing in (#​3996)
  • Validate CORS origins before using AllowOriginsFunc in (#​3991)
  • Trim forwarded host values in (#​4012)
  • Normalize forwarded scheme parsing in (#​4011)
  • Return immediately on timeout and propagate context correctly in (#​4009)
  • Trim values from getSplicedStrList in (#​4026)
  • Return bytes read from readContent in (#​4027)
  • Reload mounted view engines in ReloadViews in (#​4031)
  • Handle typed-nil http handler funcs in (#​4030)
🛠️ Maintenance

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Contributor Author

renovate bot commented Feb 2, 2026

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: mod upgrade --mod-name=github.com/gofiber/fiber/v2 -t=3
could not load package: err: exit status 1: stderr: go: inconsistent vendoring in /tmp/renovate/repos/github/menzerath/mcgen:
	github.com/gofiber/fiber/v2@v2.52.10: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	github.com/gofiber/fiber/v3@v3.0.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	github.com/klauspost/compress@v1.18.3: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	github.com/mattn/go-colorable@v0.1.14: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	golang.org/x/sys@v0.40.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	github.com/gofiber/fiber/v2@v2.52.11: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	github.com/klauspost/compress@v1.18.2: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	github.com/mattn/go-colorable@v0.1.13: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	golang.org/x/sys@v0.39.0: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod

	To ignore the vendor directory, use -mod=readonly or -mod=mod.
	To sync the vendor directory, run:
		go mod vendor

@renovate renovate bot requested a review from menzerath February 2, 2026 20:43
@menzerath
Copy link
Owner

menzerath commented Feb 3, 2026

see #256

@menzerath menzerath closed this Feb 3, 2026
@renovate
Copy link
Contributor Author

renovate bot commented Feb 3, 2026

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 3.x releases. But if you manually upgrade to 3.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@renovate renovate bot deleted the renovate/github.com-gofiber-fiber-v2-3.x branch February 3, 2026 08:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@menzerath menzerath Awaiting requested review from menzerath

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@menzerath