• feat(client): add RetryIfErrUpstream function to handle upstream information by @mdenushev in https://github.com/valyala/fasthttp/pull/2176
• Match net/http sensitive header redirect policy by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2181
• Sanitize first-line header setters to prevent CRLF injection by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2182
• server: apply ReadTimeout before first byte with ReduceMemoryUsage by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2183
• header: reject invalid trailer names by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2188
• header: reject pre-colon whitespace in request headers by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2187
• Sanitize redirect Location header to prevent CRLF injection by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2186
• server: keep hijacked reader out of pool by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2184
• Sanitize cookie setters to prevent CRLF injection by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2185
• feat: add ExpectHandler for richer Expect: 100-continue handling by @miretskiy in https://github.com/valyala/fasthttp/pull/2175
• http: reject whitespace before chunk extensions by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2193
• header: reject unsupported response Transfer-Encoding by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2192
• header: match net/http CL+TE handling by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2190
• chore(deps): bump securego/gosec from 2.25.0 to 2.26.1 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2195
• chore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2196
• feat(prefork): Enhance prefork management with WatchMaster, CommandProducer, and Windows support by @ReneWerner87 in https://github.com/valyala/fasthttp/pull/2180

• @miretskiy made their first contribution in https://github.com/valyala/fasthttp/pull/2175

Full Changelog: https://github.com/valyala/fasthttp/compare/v1.70.0...v1.71.0

• Go 1.26 and golangci-lint updates by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2146
• Add WithLimit methods for uncompression by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2147
• Honor Root for fs.FS and normalize fs-style roots by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2145
• Sanitize header values in all setter paths to prevent CRLF injection by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2162
• Add ServeFileLiteral, ServeFSLiteral and SendFileLiteral by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2163
• Prevent chunk extension request smuggling by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2165
• Validate request URI format during header parsing to reject malformed requests by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2168
• HTTP1/1 requires exactly one Host header by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2164
• Strict HTTP version validation and simplified first line parsing by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2167
• Only normalize pre-colon whitespace for HTTP headers by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2172
• fs: reject '..' path segments in rewritten paths by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2173
• fasthttpproxy: reject CRLF in HTTP proxy CONNECT target by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2174
• fasthttpproxy: scope proxy auth cache to GetDialFunc by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2144
• feat: enhance performance by @ReneWerner87 in https://github.com/valyala/fasthttp/pull/2135
• export ErrConnectionClosed by @pjebs in https://github.com/valyala/fasthttp/pull/2152
• fix: detect master process death in prefork children by @meruiden in https://github.com/valyala/fasthttp/pull/2158
• return prev values by @pjebs in https://github.com/valyala/fasthttp/pull/2123
• docs: added httpgo to related projects by @MUlt1mate in https://github.com/valyala/fasthttp/pull/2169
• chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2149
• chore(deps): bump github.com/andybalholm/brotli from 1.2.0 to 1.2.1 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2170
• chore(deps): bump github.com/klauspost/compress from 1.18.2 to 1.18.3 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2129
• chore(deps): bump github.com/klauspost/compress from 1.18.3 to 1.18.4 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2140
• chore(deps): bump github.com/klauspost/compress from 1.18.4 to 1.18.5 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2166
• chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2139
• chore(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2128
• chore(deps): bump golang.org/x/net from 0.49.0 to 0.50.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2138
• chore(deps): bump golang.org/x/sys from 0.39.0 to 0.40.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2125
• chore(deps): bump golang.org/x/sys from 0.40.0 to 0.41.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2137
• chore(deps): bump securego/gosec from 2.22.11 to 2.23.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2142
• Update securego/gosec from 2.23.0 to 2.25.0 by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2161

• @MUlt1mate made their first contribution in https://github.com/valyala/fasthttp/pull/2169
• @meruiden made their first contribution in https://github.com/valyala/fasthttp/pull/2158

Full Changelog: https://github.com/valyala/fasthttp/compare/v1.69.0...v1.70.0

• Add sortkeys by @pjebs in https://github.com/valyala/fasthttp/pull/2118
• Expose header parsing error variables by @ReneWerner87 in https://github.com/valyala/fasthttp/pull/2096
• Add documentation that modifying during iteration can panic by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2122
• update readme by @pjebs in https://github.com/valyala/fasthttp/pull/2114
• chore(deps): bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2092
• chore(deps): bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2095
• chore(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2094
• chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.44.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2098
• chore(deps): bump golang.org/x/net from 0.46.0 to 0.47.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2097
• chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2099
• chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2101
• chore(deps): bump github.com/klauspost/compress from 1.18.1 to 1.18.2 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2103
• chore(deps): bump golang.org/x/net from 0.47.0 to 0.48.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2109
• chore(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2111
• chore(deps): bump securego/gosec from 2.22.10 to 2.22.11 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2110

Full Changelog: https://github.com/valyala/fasthttp/compare/v1.68.0...v1.69.0

• Fix named return bugs by @erikdubbelboer in https://github.com/valyala/fasthttp/commit/1b8c5593da699309522dee00ad1d6c913482a0f3
• chore(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2087
• chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2086
• chore(deps): bump golang.org/x/net from 0.45.0 to 0.46.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2085
• chore(deps): bump securego/gosec from 2.22.9 to 2.22.10 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2088
• chore(deps): bump github.com/klauspost/compress from 1.18.0 to 1.18.1 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2089

Full Changelog: https://github.com/valyala/fasthttp/compare/v1.67.0...v1.68.0

Special thanks to the following security researchers who reported the issues fixed in this release:

• @zer0yu (Enze Wang)
• @P3ngu1nW (Jingcheng Yang)
• @9vvert (Zehui Miao)

• Add DNS cache management methods for TCPDialer by @aabishkaryal in https://github.com/valyala/fasthttp/pull/2072
• Fix username:password@ validation in urls by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2080
• Validate IPv6 addresses in urls by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2079
• Validate schemes by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2078
• Reject invalid hosts with multiple port delimiters by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2077
• Reject backslash absolute URIs and cache parse errors by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2075
• Reject bad ipv6 hostnames by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2076
• Reimplement flushing support for fasthttpadaptor by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2081
• chore(deps): bump securego/gosec from 2.22.8 to 2.22.9 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2073

• @aabishkaryal made their first contribution in https://github.com/valyala/fasthttp/pull/2072

Full Changelog: https://github.com/valyala/fasthttp/compare/v1.66.0...v1.67.0

• chore(deps): bump securego/gosec from 2.22.7 to 2.22.8 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2056
• docs: add fasthttp-auth to related projects section by @FAUST-BENCHOU in https://github.com/valyala/fasthttp/pull/2057
• server: refactor to use atomic type by @cuiweixie in https://github.com/valyala/fasthttp/pull/2058
• chore(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2060
• Fix extra whitespace parsing in HTTP request lines to prevent cache poisoning by @Copilot in https://github.com/valyala/fasthttp/pull/2061
• Drop Go 1.23 support by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2065
• Add flushing support to fasthttpadaptor by @grivera64 in https://github.com/valyala/fasthttp/pull/2054

• @FAUST-BENCHOU made their first contribution in https://github.com/valyala/fasthttp/pull/2057
• @cuiweixie made their first contribution in https://github.com/valyala/fasthttp/pull/2058
• @Copilot made their first contribution in https://github.com/valyala/fasthttp/pull/2061 😄
• @grivera64 made their first contribution in https://github.com/valyala/fasthttp/pull/2054

Full Changelog: https://github.com/valyala/fasthttp/compare/v1.65.0...v1.66.0

In this version of fasthttp, headers delimited by just \n (instead of \r\n) are no longer supported!

• Rewrite header parsing to improve spec compliance by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2030
• Simplify Client.Do function and lock usage by @byte0o in https://github.com/valyala/fasthttp/pull/2038
• chore(deps): bump securego/gosec from 2.22.5 to 2.22.7 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2039
• Fix trailer security by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2043
• Fix RequestHeader.ContentLength() if disableSpecialHeader is true by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2042
• Add reuseport support for Solaris by @jwntree in https://github.com/valyala/fasthttp/pull/2046
• test: replace atomic operations with atomic types by @alexandear in https://github.com/valyala/fasthttp/pull/2048
• chore(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2049
• Optimize fs to have 0 allocations by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2052
• chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2055

• @jwntree made their first contribution in https://github.com/valyala/fasthttp/pull/2046

Full Changelog: https://github.com/valyala/fasthttp/compare/v1.64.0...v1.65.0

In the next version of fasthttp headers delimited by just \n (instead of \r\n) are no longer supported!

• Add warning for deprecated newline separator by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2031
• refact: eliminate duplication in Request/Response via struct embedding by @ksw2000 in https://github.com/valyala/fasthttp/pull/2027
• chore(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2034
• chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2036
• chore(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2035

Full Changelog: https://github.com/valyala/fasthttp/compare/v1.63.0...v1.64.0

• chore(deps): bump securego/gosec from 2.22.3 to 2.22.4 by @dependabot in https://github.com/valyala/fasthttp/pull/2007
• fix: removed resolved issue link from readme file, issue no longer ex… by @viralkansarav in https://github.com/valyala/fasthttp/pull/2008
• feat: Add iter.Seq2 iterator by @ksw2000 in https://github.com/valyala/fasthttp/pull/2011
• Removed old information from main documentation as these functions does not exist by @viralkansarav in https://github.com/valyala/fasthttp/pull/2012
• Proposal : To add Unsafe Zero-Allocation Conversions Sections in main documentation by @viralkansarav in https://github.com/valyala/fasthttp/pull/2013
• chore(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @dependabot in https://github.com/valyala/fasthttp/pull/2018
• Drop support before go1.20 by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2022
• chore(deps): bump securego/gosec from 2.22.4 to 2.22.5 by @dependabot in https://github.com/valyala/fasthttp/pull/2025
• Implement io.StringWriter on some more types by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2023
• chore(deps): bump github.com/andybalholm/brotli from 1.1.1 to 1.2.0 by @dependabot in https://github.com/valyala/fasthttp/pull/2029

• @viralkansarav made their first contribution in https://github.com/valyala/fasthttp/pull/2008

Full Changelog: https://github.com/valyala/fasthttp/compare/v1.62.0...v1.63.0

• Add support for streaming identity-encoded or unknown length response bodies by @osxtest in https://github.com/valyala/fasthttp/pull/2000
• feat: move user values to Request structure by @mdenushev in https://github.com/valyala/fasthttp/pull/1999
• chore(deps): bump golangci/golangci-lint-action from 7 to 8 by @dependabot in https://github.com/valyala/fasthttp/pull/2001
• chore(deps): bump golang.org/x/crypto from 0.37.0 to 0.38.0 by @dependabot in https://github.com/valyala/fasthttp/pull/2002
• chore(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 by @dependabot in https://github.com/valyala/fasthttp/pull/2003
• modify acceptConn for RIO by @wamshawn in https://github.com/valyala/fasthttp/pull/2005

• @osxtest made their first contribution in https://github.com/valyala/fasthttp/pull/2000
• @wamshawn made their first contribution in https://github.com/valyala/fasthttp/pull/2005

Full Changelog: https://github.com/valyala/fasthttp/compare/v1.61.0...v1.62.0