Skip to content

Bump github.com/valyala/fasthttp from 1.69.0 to 1.73.0 - #462

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/github.com/valyala/fasthttp-1.73.0
Closed

Bump github.com/valyala/fasthttp from 1.69.0 to 1.73.0#462
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/github.com/valyala/fasthttp-1.73.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/valyala/fasthttp from 1.69.0 to 1.73.0.

Release notes

Sourced from github.com/valyala/fasthttp's releases.

v1.73.0

What's Changed

New Contributors

Full Changelog: valyala/fasthttp@v1.72.0...v1.73.0

v1.72.0

What's Changed

... (truncated)

Commits
  • f83ac8c Optimize bounds checks in hot paths
  • d9babd9 fix: reject Windows alternate data stream paths in FS (#2335)
  • e7cf856 reject backslash '..' traversal in fs handler on windows (#2327)
  • 165a4c8 Improve AppendUnquotedArg with optimised bounds check
  • 7a1349d chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (#2331)
  • f1ad91d fix: preserve pre-set status code in NewFastHTTPHandler (#2323)
  • 5f57d8f chore(deps): bump actions/setup-go from 6 to 7 (#2329)
  • 3aa940d chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (#2328)
  • 7a012e9 validate domain and path cookie attribute values on parse (#2315)
  • 9cf733f perf: reduce redundant scans and allocations in hot paths (#2322)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 28, 2026
Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.69.0 to 1.73.0.
- [Release notes](https://github.com/valyala/fasthttp/releases)
- [Commits](valyala/fasthttp@v1.69.0...v1.73.0)

---
updated-dependencies:
- dependency-name: github.com/valyala/fasthttp
  dependency-version: 1.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/valyala/fasthttp-1.73.0 branch from d52510a to 56e0ae0 Compare August 17, 2026 04:33
@n0vad3v n0vad3v closed this Aug 17, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/valyala/fasthttp-1.73.0 branch August 17, 2026 04:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant