Skip to content

Bump github.com/valyala/fasthttp from 1.72.0 to 1.73.0 - #391

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/valyala/fasthttp-1.73.0
Open

Bump github.com/valyala/fasthttp from 1.72.0 to 1.73.0#391
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/valyala/fasthttp-1.73.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/valyala/fasthttp from 1.72.0 to 1.73.0.

Commits
  • f83ac8c Optimize bounds checks in hot paths
  • d9babd9 fix: reject Windows alternate data stream paths in FS (#2335)
  • e7cf856 reject backslash '..' traversal in fs handler on windows (#2327)
  • 165a4c8 Improve AppendUnquotedArg with optimised bounds check
  • 7a1349d chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (#2331)
  • f1ad91d fix: preserve pre-set status code in NewFastHTTPHandler (#2323)
  • 5f57d8f chore(deps): bump actions/setup-go from 6 to 7 (#2329)
  • 3aa940d chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (#2328)
  • 7a012e9 validate domain and path cookie attribute values on parse (#2315)
  • 9cf733f perf: reduce redundant scans and allocations in hot paths (#2322)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 3, 2026

@ademidoff ademidoff left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved: dependency bump reviewed.

Note for the record: the Test job is red here for pre-existing e2e infrastructure reasons, not because of this bump. The e2e suite fails while standing up the PMM server container (failed to ping clickhouse: ... connection reset by peer) and then hits the 20m package timeout; unit tests pass. Every open PR since 2026-08-03 fails identically, including tooling-only bumps that cannot affect the e2e runtime.

@ademidoff

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.72.0 to 1.73.0.
- [Commits](valyala/fasthttp@v1.72.0...v1.73.0)

---
updated-dependencies:
- dependency-name: github.com/valyala/fasthttp
  dependency-version: 1.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/valyala/fasthttp-1.73.0 branch from 26d8dfb to 148a25b Compare August 17, 2026 14:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant