chore(deps): Update non-major dependencies #11

renovate · 2025-08-26T16:33:43Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/go-resty/resty/v2	`v2.16.5` -> `v2.17.0`
github.com/gofiber/fiber/v3	`v3.0.0-beta.5` -> `v3.0.0-rc.3`
github.com/knadh/koanf/v2	`v2.2.2` -> `v2.3.0`

Release Notes

go-resty/resty (github.com/go-resty/resty/v2)

`v2.17.0`

Compare Source

Release Notes

Bug Fixes

Fix off-by-one error in key/value resolution by @mbsulliv in #975
Fix/missing content length header on empty post req by @Libero-Dev in #1003

Backport

backport: potential wrong total time in trace info from PR #1017 by @git-hulk in #1018
backport: negative trace substraction when using SetTimeout by @nicolasbeauvais in #1065

Release Updates

For v2.17.0 release by @jeevatkm in #1066

New Contributors

@mbsulliv made their first contribution in #975
@Libero-Dev made their first contribution in #1003

Full Changelog: go-resty/resty@v2.16.5...v2.17.0

gofiber/fiber (github.com/gofiber/fiber/v3)

`v3.0.0-rc.3`

Compare Source

🚀 New Features

Middleware/encryptCookie: Add cookie name authentication for EncryptCookie middleware by @gaby in #3788
Middleware/proxy: Add BodyStream() logic to adaptor.FiberHandler middleware by @grivera64 in #3799
Client: Add support for HostClient and LBClient by @gaby in #3774
Native support for net/http and fasthttp handlers by @gaby in #3769
Add support for Express.js style req/res handlers by @gaby in #3809
Add support for DisableAutoRegister of HEAD routes by @ReneWerner87 in #3817
Add support for handling unsupported HTTP methods as HTTP 501 by @gaby in #3854
Add support for ReloadViews() by @gaby in #3876
Expose startup message customization hooks by @efectn in #3824

🧹 Updates

Middleware/adaptor: prevent CopyContextToFiberContext panic and add comprehensive test coverage by @sixcolors in #3770
Middleware/adaptor: Add flushing-related unit tests for net/http adaptor by @grivera64 in #3807
Middleware/encryptCookie: Return error during EncryptCookie failure by @gaby in #3842
Client: Preallocate slice size in Client::Param() by @arturmelanchyk in #3782
Reduce allocations in Request (saves ~16% B/op) by @arturmelanchyk in #3768
Make boundary a const by @arturmelanchyk in #3783
Skip locking garbage collector if nothing to delete by @arturmelanchyk in #3787
Reduce the memory usage of cacheableStatusCodes by @ZihxS in #3789
Merge duplicate constants by @jsoref in #3812
Improve propagation of context.Context by @gaby in #3822
Inline Request state wrappers by @arturmelanchyk in #3827
Remove unneeded "utils" alias by @arturmelanchyk in #3834
Benchmark for cache miss case by @arturmelanchyk in #3836
Add FullPath() helper to context by @gaby in #3837
Handle nil map targets in Binder by @gaby in #3839
Extracted generic releasePooledBinder function by @arturmelanchyk in #3841
Refactor internal errors to use sentinel values by @gaby in #3864
Test HEAD request compliance by @gaby in #3868
Improve OPTIONS wildcard regression test by @gaby in #3869
Improve byte-range handling for SendFile() by @gaby in #3870
Use int64 when dealing with HTTP Ranges by @gaby in #3874

🐛 Bug Fixes

Middleware/limiter: Fix default value for MaxFunc in Limiter middleware by @gaby in #3871
Middleware/recover: Fix recover middleware panic output formatting by @gaby in #3816
Middleware/session: correct fresh flag logic in getSession by @sixcolors in #3825
Fix spelling issues by @jsoref in #3813
Fix fatal error calls in adapter_test.go by @ReneWerner87 in #3810
Fix usage of runtime RO data for ppc64 and s390x platforms by @gaby in #3772
Respect DisablePathNormalizing during client requests by @gaby in #3773
Always close form file by @arturmelanchyk in #3786
Fix gocritic httpNoBody and hugeParam issues by @ReneWerner87 in #3855
Prevent memory corruption in internal memory storage from pooled buffers by @sixcolors in #3828
Avoid writing into released Response in core::execFunc() by @arturmelanchyk in #3830
Remove Flash Cookie from Response headers after parsing by @gaby in #3840
Fix binder splitting for pointer-backed slice fields by @gaby in #3844
Execute middleware routes when handling errors by @gaby in #3846
fix copying of key/values in internal/memory by @sixcolors in #3829
Fix maintain CustomCtx across middlewares by @ReneWerner87 in #3852
Enhance Body handling in setConfigToRequest for better type su… by @K0ng2 in #3820

🛠️ Maintenance

Replace release-drafter autolabel with fuxingloh/multi-labeler by @gaby in #3872
Golangci-lint issue for go1.25.0 by @laughing-nerd in #3775
Add automation for v3 label assignments by @ReneWerner87 in #3845
Update workflow path filters for Go module changes by @ReneWerner87 in #3856
Improvements to GitHub Workflows by @gaby in #3857
Update release-drafter workflow by @gaby in #3860
Add support for codespell in spell-check workflow by @gaby in #3850
Add spell check CI workflow by @gaby in #3814
Fix autolabeler for release-drafter by @gaby in #3865
Enable manual workflow dispatch for CI by @ReneWerner87 in #3881
build(deps): bump github.com/valyala/fasthttp from 1.65.0 to 1.67.0 by @dependabot[bot] in #3790
build(deps): bump golang.org/x/net from 0.44.0 to 0.45.0 by @dependabot[bot] in #3791
build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #3792
build(deps): bump golang.org/x/text from 0.29.0 to 0.30.0 by @dependabot[bot] in #3797
build(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 by @dependabot[bot] in #3796
build(deps): bump golang.org/x/net from 0.45.0 to 0.46.0 by @dependabot[bot] in #3795
build(deps): bump actions/setup-node from 5 to 6 by @dependabot[bot] in #3804
build(deps): bump github.com/shamaton/msgpack/v2 from 2.3.1 to 2.4.0 by @dependabot[bot] in #3808
build(deps): bump github.com/valyala/fasthttp from 1.67.0 to 1.68.0 by @dependabot[bot] in #3819
build(deps): bump github.com/tinylib/msgp from 1.4.0 to 1.5.0 by @dependabot[bot] in #3823
build(deps): bump github.com/gofiber/utils/v2 from 2.0.0-rc.1 to 2.0.0-rc.2 by @dependabot[bot] in #3853
build(deps): bump golang.org/x/crypto from 0.43.0 to 0.44.0 by @dependabot[bot] in #3863
build(deps): bump golang.org/x/net from 0.46.0 to 0.47.0 by @dependabot[bot] in #3861
build(deps): bump github/codeql-action from 4.31.2 to 4.31.3 by @dependabot[bot] in #3866
build(deps): bump DavidAnson/markdownlint-cli2-action from 20.0.0 to 21.0.0 by @dependabot[bot] in #3873
build(deps): bump actions/checkout from 5.0.0 to 5.0.1 - by @dependabot[bot] in #3877
build(deps): bump github/codeql-action from 4.31.3 to 4.31.4 by @dependabot[bot] in
#3878

📚 Documentation

Fix typos in some files by @khanhkhanhlele in #3847
Document usage of reverse proxies for SendEarlyHints by @akilesh1706 in #3778
Fix broken link in the Routing guide by @guerzon in #3831

New Contributors

@akilesh1706 made their first contribution in #3778
@laughing-nerd made their first contribution in #3775
@jsoref made their first contribution in #3812
@K0ng2 made their first contribution in #3820
@guerzon made their first contribution in #3831
@khanhkhanhlele made their first contribution in #3847

A fully-detailed view of all new features and the migration guide is available in our
https://docs.gofiber.io/next/whats_new

Full Changelog: gofiber/fiber@v3.0.0-rc.2...v3.0.0-rc.3

`v3.0.0-rc.2`

Compare Source

🚀 New Features

Add request inspection helpers by @gaby in #3727
Add extractors package by @sixcolors in #3725
Add support for redacting values by @gaby in #3759

🧹 Updates

Middleware/cache: Improve Cache middleware defaults by @gaby in #3740
Middleware/cache: Fix cache cleanup and redact token values by @gaby in #3757
Middleware/compress: Improve Compress middleware RFC compliance by @gaby in #3745
Middleware/csrf: update CSRF middleware to use shared extractors by @sixcolors in #3746
Middleware/keyAuth: Improve KeyAuth middleware RFC compliance by @gaby in #3742
Middleware/keyAuth: Update keyauth middleware to use shared extractors by @sixcolors in #3747
Middleware/session: Migrate Session middleware to new extractors package by @sixcolors in #3744
Handle Transfer-Encoding bodies in HasBody by @gaby in #3748
Improve error handling when using storage drivers by @gaby in #3754
Improve performance analyseConstantPart by @ksw2000 in #3753
Ensure middleware prefix matching requires slash boundary by @ReneWerner87 in #3755
Use sync.Pool for Client hooks by @arturmelanchyk in #3758
Avoid locking in gc() if nothing to delete by @arturmelanchyk in #3765
Improve allocations for Request Params() by @arturmelanchyk in #3766
Cleanup return error logic in Bind() by @arturmelanchyk in #3764
Update RouteChain function by @ReneWerner87 in #3761
Expand Binder tests coverage by @gaby in #3714

🐛 Bug Fixes

Middleware/BasicAuth: Improve BasicAuth middleware RFC compliance by @gaby in #3743
Middleware/Adapter: Handle Unix sockets in adaptor middleware by @Dishank-Sen in #3760
Fix support for context.Context by @gaby in #3720

🛠️ Maintenance

build(deps): bump github.com/tinylib/msgp from 1.3.0 to 1.4.0 by @dependabot[bot] in #3716
build(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by @dependabot[bot] in #3715
build(deps): bump github.com/shamaton/msgpack/v2 from 2.3.0 to 2.3.1 by @dependabot[bot] in #3719
build(deps): bump benchmark-action/github-action-benchmark from 1.20.4 to 1.20.5 by @dependabot[bot] in #3730
build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #3732
build(deps): bump actions/setup-node from 4 to 5 by @dependabot[bot] in #3733
build(deps): bump codecov/codecov-action from 5.5.0 to 5.5.1 by @dependabot[bot] in #3734
build(deps): bump golang.org/x/crypto from 0.41.0 to 0.42.0 by @dependabot[bot] in #3737
build(deps): bump golang.org/x/net from 0.43.0 to 0.44.0 by @dependabot[bot] in #3738
build(deps): bump benchmark-action/github-action-benchmark from 1.20.5 to 1.20.7 by @dependabot[bot] in #3736

📚 Documentation

Improve wording and fix typos by @gaby in #3713
Full audit of documentation by @gaby in #3717
Add RoutePatternMatch documentation by @ReneWerner87 in #3722
Clarify context interface implementation by @ReneWerner87 in #3729
Ensure all exported elements are documented by @gaby in #3752

New Contributors

@arturmelanchyk made their first contribution in #3758
@Dishank-Sen made their first contribution in #3760

A fully-detailed view of all new features and the migration guide is available in our
https://docs.gofiber.io/next/whats_new

Full Changelog: gofiber/fiber@v3.0.0-rc.1...v3.0.0-rc.2

`v3.0.0-rc.1`

Compare Source

🚀 New Features

Middleware/basicAuth: Add Fiber Context to BasicAuth Authorizer by @gaby in #3621
Middleware/basicAuth: Add HeaderLimit option to BasicAuth middleware by @gaby in #3620
Middleware/basicAuth: Support hashed BasicAuth passwords by @gaby in #3631
Middleware/csrf: Enhance extractor functionality with metadata and security validation by @sixcolors in #3630
Middleware/limiter: Support for disabling response headers in Limiter Middleware by @gaby in #3618
Middleware/proxy: Add KeepConnectionHeader option to Proxy middleware by @gaby in #3662
Middleware/session: Introduce Extractor pattern for session ID retrieval by @sixcolors in #3625
Support for SendEarlyHints by @pjebs in #3483
Support generic configurable logger by @ReneWerner87 in #3705
Add conditional copy helpers by @ReneWerner87 in #3703
Add support for embedded Koa-Style Req and Res structs by @grivera64 in #3533
Add default UTF-8 charset by @Copilot in #3583

🧹 Updates

Middleware/basicAuth: Remove SHA-1/MD5 support in BasicAuth middleware by @gaby in #3634
Middleware/basicAuth: Remove support for PasswordFromContext from BasicAuth middleware by @gaby in #3638
Middleware/cors: Fix CORS docs and comments by @gaby in #3637
Middleware/csrf: Fix CSRF error message mismatch with documentation by @gaby in #3636
Middleware/csrf: Fix CSRF subdomain wildcard boundary by @gaby in #3694
Middleware/keyAuth: Extractor-Based Configuration and Enhanced Flexibility by @sixcolors in #3685
Middleware/keyAuth: Return generic errors in KeyAuth middleware by @gaby in #3692
Middleware/pprof: Fix pprof middleware docs and default config by @gaby in #3642
Add tests for quoteRawString by @gaby in #3613
Replace math/rand with crypto/rand by @gaby in #3508
Enable govet shadow by @ReneWerner87 in #3617
Fix Cookie SameSite constants to Pascal case per RFC specification by @Copilot in #3608
Fix timing for streaming test by @ReneWerner87 in #3628
Reduce allocation in AutoFormat by @ReneWerner87 in #3652
Add sync pool and release helpers for Bind by @ReneWerner87 in #3660
Add CBOR support to AutoFormat() by @gaby in #3665
Add missing checks in Ctx tests by @gaby in #3670
Stabilize interrupted stream writer test by @ReneWerner87 in #3669
Fix AcceptsLanguages() RFC compliance by @gaby in #3672
Respect immutable config in Params(), Protocol(), and Body() by @gaby in #3676
Optimize Fresh header parsing for fasthttp 1.65 by @ReneWerner87 in #3687
Use ephemeral ports in unit tests by @ReneWerner87 in #3686
Delay routing error creation by @ReneWerner87 in #3683
Improve Req/Res Benchmarks by @grivera64 in #3693
Using reflect.TypeAssert by @cuiweixie in #3698
Skip unstable GenericParseType benchmarks by @ReneWerner87 in #3614
Require Go 1.25 by @ReneWerner87 in #3682

🐛 Bug Fixes

Middleware/cors: Fix CORS subdomain wildcard boundary by @gaby in #3690
Middleware/limiter: Fix limiter middleware not counting fiber.NewErrorf responses as failed requests by @Copilot in #3623
Middleware/static: Fix Static middleware browser support for subdirectories by @efectn in #3673
Fix retry config handling by @gaby in #3609
Fix race in cookie tests by @ReneWerner87 in #3629
Fix bind All() merging logic by @gaby in #3659

🛠️ Maintenance

build(deps): bump kenchan0130/actions-system-info from 1.3.1 to 1.4.0 by @dependabot[bot] in #3679
build(deps): bump github.com/shamaton/msgpack/v2 from 2.2.3 to 2.3.0 by @dependabot[bot] in #3678
build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #3681
build(deps): bump github.com/valyala/fasthttp from 1.64.0 to 1.65.0 by @dependabot[bot] in #3684
build(deps): bump github.com/gofiber/utils/v2 from 2.0.0-beta.14 to 2.0.0-rc.1 by @dependabot[bot] in #3689
build(deps): bump codecov/codecov-action from 5.4.3 to 5.5.0 by @dependabot[bot] in #3701
build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by @dependabot[bot] in #3712

📚 Documentation

Add early hints documentation by @ReneWerner87 in #3697
Add migration tool info by @ReneWerner87 in #3708
Add context guide by @gaby in #3677
Fix EarlyData middleware docs by @gaby in #3646
Fix Skip middleware docs by @gaby in #3649
Fix context changes doc by @ReneWerner87 in #3650
Fix RequestID docs by @gaby in #3648
Fix Proxy middleware docs by @gaby in #3647
Fix Compress middleware docs by @gaby in #3645
Fix Cache middleware docs by @gaby in #3644
Fix Favicon middleware documentation by @gaby in #3640
Fix Static middleware docs by @gaby in #3643
Fix Healthcheck middleware documentation by @gaby in #3657
Fix KeyAuth middleware docs by @gaby in #3641
Improve Timeout middleware documentation by @gaby in #3675
Add Learning Resources section with Go Interview Practice platform by @RezaSi in #3691
Fix typos in documentation by @kianmeng in #3695
document utils package migration by @ReneWerner87 in #3704
Note CSRF ContextKey removal by @ReneWerner87 in #3706
Note removal of context keys by @ReneWerner87 in #3707

New Contributors

@RezaSi made their first contribution in #3691
@kianmeng made their first contribution in #3695
@cuiweixie made their first contribution in #3698

A fully-detailed view of all new features and the migration guide is available in our
https://docs.gofiber.io/next/whats_new

Full Changelog: gofiber/fiber@v3.0.0-beta.5...v3.0.0-rc.1

knadh/koanf (github.com/knadh/koanf/v2)

`v2.3.0`

Compare Source

What's Changed

feat: add provider for kiln by @Thunderbottom in #369
Fix rendering of header and add it to the table of contents by @remyzandwijk in #373
Bump github.com/go-viper/mapstructure/v2 from 2.0.0-alpha.1 to 2.4.0 in /examples by @dependabot[bot] in #375
feat: add HUML parser support by @rhnvrm in #374
Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.4.0 in /tests by @dependabot[bot] in #376
Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.4.0 in /providers/cliflagv3 by @dependabot[bot] in #378
Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in /providers/cliflagv2 by @dependabot[bot] in #380
Add thread safety to resolve race conditions in Issues #305 and #335 by @rhnvrm in #377
fix: bump mapstructure version by @rostislaved in #381

New Contributors

@remyzandwijk made their first contribution in #373
@rostislaved made their first contribution in #381

Full Changelog: knadh/koanf@v2.2.2...v2.3.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-08-26T16:33:45Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: module github.com/gofiber/fiber/v3@v3.0.0-rc.3 requires go >= 1.25.0; switching to go1.25.4
go: downloading go1.25.4 (linux/amd64)
go: download go1.25.4: golang.org/toolchain@v0.0.1-go1.25.4.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off

coderabbitai · 2025-08-26T16:33:51Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

renovate bot added the 🤖 Dependencies label Aug 26, 2025

renovate-approve bot approved these changes Aug 26, 2025

View reviewed changes

pull-request-size bot added the size/XS label Aug 26, 2025

renovate bot force-pushed the renovate/non-major-dependencies branch from 7f02866 to 553bb6c Compare September 15, 2025 09:46

renovate bot changed the title ~~chore(deps): Update module github.com/gofiber/fiber/v3 to v3.0.0-rc.1~~ chore(deps): Update non-major dependencies Sep 15, 2025

renovate bot force-pushed the renovate/non-major-dependencies branch from 553bb6c to 25d37a4 Compare September 29, 2025 14:11

renovate bot force-pushed the renovate/non-major-dependencies branch from 25d37a4 to 91df398 Compare November 19, 2025 17:53

chore(deps): Update non-major dependencies

04e3ad2

renovate bot force-pushed the renovate/non-major-dependencies branch from 91df398 to 04e3ad2 Compare November 23, 2025 08:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): Update non-major dependencies #11

chore(deps): Update non-major dependencies #11

Uh oh!

renovate bot commented Aug 26, 2025 •

edited

Loading

Uh oh!

renovate bot commented Aug 26, 2025 •

edited

Loading

Uh oh!

coderabbitai bot commented Aug 26, 2025 •

edited

Loading

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): Update non-major dependencies #11

Are you sure you want to change the base?

chore(deps): Update non-major dependencies #11

Uh oh!

Conversation

renovate bot commented Aug 26, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v2.17.0

Release Notes

Bug Fixes

Backport

Release Updates

New Contributors

v3.0.0-rc.3

🚀 New Features

🧹 Updates

🐛 Bug Fixes

🛠️ Maintenance

📚 Documentation

New Contributors

v3.0.0-rc.2

🚀 New Features

🧹 Updates

🐛 Bug Fixes

🛠️ Maintenance

📚 Documentation

New Contributors

v3.0.0-rc.1

🚀 New Features

🧹 Updates

🐛 Bug Fixes

🛠️ Maintenance

📚 Documentation

New Contributors

v2.3.0

What's Changed

New Contributors

Configuration

Uh oh!

renovate bot commented Aug 26, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: go.sum

Uh oh!

coderabbitai bot commented Aug 26, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Aug 26, 2025 •

edited

Loading

`v2.17.0`

`v3.0.0-rc.3`

`v3.0.0-rc.2`

`v3.0.0-rc.1`

`v2.3.0`

renovate bot commented Aug 26, 2025 •

edited

Loading

coderabbitai bot commented Aug 26, 2025 •

edited

Loading