From 2dc850d0856f709cc76f16d10fff92fb1011f873 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 28 Jul 2026 11:18:19 +0000
Subject: [PATCH] chore: bump github.com/valyala/fasthttp from 1.72.0 to 1.73.0
 (#27575)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp)
from 1.72.0 to 1.73.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/valyala/fasthttp/releases">github.com/valyala/fasthttp's
releases</a>.</em></p>
<blockquote>
<h2>v1.73.0</h2>
<h2>What's Changed</h2>
<ul>
<li>test: fix host comparison in FuzzURIParse by <a
href="https://github.com/ReneWerner87"><code>@​ReneWerner87</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2313">valyala/fasthttp#2313</a></li>
<li>perf: avoid redundant scans when parsing request headers by <a
href="https://github.com/ReneWerner87"><code>@​ReneWerner87</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2312">valyala/fasthttp#2312</a></li>
<li>Fix temp file leak in SaveMultipartFile on cross-device rename
failure by <a
href="https://github.com/itxaiohanglover"><code>@​itxaiohanglover</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2311">valyala/fasthttp#2311</a></li>
<li>re-enable forcetypeassert by <a
href="https://github.com/Harshal96"><code>@​Harshal96</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2316">valyala/fasthttp#2316</a></li>
<li>test: normalize Go test names by <a
href="https://github.com/Harshal96"><code>@​Harshal96</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2317">valyala/fasthttp#2317</a></li>
<li>feat: prefix sentinel error strings by <a
href="https://github.com/Harshal96"><code>@​Harshal96</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2319">valyala/fasthttp#2319</a></li>
<li>fix(pprofhandler): use exact path matching to prevent debug data
exposure by <a
href="https://github.com/xbrxr03"><code>@​xbrxr03</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2302">valyala/fasthttp#2302</a></li>
<li>avoid following a symlink when writing the FS compressed cache by <a
href="https://github.com/alhudz"><code>@​alhudz</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2321">valyala/fasthttp#2321</a></li>
<li>refactor: improve internal interface names by <a
href="https://github.com/Harshal96"><code>@​Harshal96</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2318">valyala/fasthttp#2318</a></li>
<li>fix: lowercase error strings by <a
href="https://github.com/Harshal96"><code>@​Harshal96</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2320">valyala/fasthttp#2320</a></li>
<li>perf: reduce redundant scans and allocations in hot paths by <a
href="https://github.com/ReneWerner87"><code>@​ReneWerner87</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2322">valyala/fasthttp#2322</a></li>
<li>validate domain and path cookie attribute values on parse by <a
href="https://github.com/alhudz"><code>@​alhudz</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2315">valyala/fasthttp#2315</a></li>
<li>chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2328">valyala/fasthttp#2328</a></li>
<li>chore(deps): bump actions/setup-go from 6 to 7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2329">valyala/fasthttp#2329</a></li>
<li>fix: preserve pre-set status code in NewFastHTTPHandler by <a
href="https://github.com/xbrxr03"><code>@​xbrxr03</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2323">valyala/fasthttp#2323</a></li>
<li>chore(deps): bump github.com/klauspost/compress from 1.19.0 to
1.19.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2331">valyala/fasthttp#2331</a></li>
<li>reject backslash '..' traversal in fs handler on windows by <a
href="https://github.com/alhudz"><code>@​alhudz</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2327">valyala/fasthttp#2327</a></li>
<li>fix: reject Windows alternate data stream paths in FS by <a
href="https://github.com/dev-willbird1936"><code>@​dev-willbird1936</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2335">valyala/fasthttp#2335</a></li>
<li>chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2307">valyala/fasthttp#2307</a></li>
<li>chore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2308">valyala/fasthttp#2308</a></li>
<li>chore(deps): bump github.com/klauspost/compress from 1.18.6 to
1.18.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2309">valyala/fasthttp#2309</a></li>
<li>chore(deps): bump github.com/klauspost/compress from 1.18.7 to
1.19.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2314">valyala/fasthttp#2314</a></li>
<li>chore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2326">valyala/fasthttp#2326</a></li>
<li>chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2324">valyala/fasthttp#2324</a></li>
<li>chore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2325">valyala/fasthttp#2325</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/itxaiohanglover"><code>@​itxaiohanglover</code></a>
made their first contribution in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2311">valyala/fasthttp#2311</a></li>
<li><a href="https://github.com/Harshal96"><code>@​Harshal96</code></a>
made their first contribution in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2316">valyala/fasthttp#2316</a></li>
<li><a
href="https://github.com/dev-willbird1936"><code>@​dev-willbird1936</code></a>
made their first contribution in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2335">valyala/fasthttp#2335</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0">https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2"><code>f83ac8c</code></a>
Optimize bounds checks in hot paths</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f"><code>d9babd9</code></a>
fix: reject Windows alternate data stream paths in FS (<a
href="https://redirect.github.com/valyala/fasthttp/issues/2335">#2335</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd"><code>e7cf856</code></a>
reject backslash '..' traversal in fs handler on windows (<a
href="https://redirect.github.com/valyala/fasthttp/issues/2327">#2327</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e"><code>165a4c8</code></a>
Improve AppendUnquotedArg with optimised bounds check</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1"><code>7a1349d</code></a>
chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1
(<a
href="https://redirect.github.com/valyala/fasthttp/issues/2331">#2331</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c"><code>f1ad91d</code></a>
fix: preserve pre-set status code in NewFastHTTPHandler (<a
href="https://redirect.github.com/valyala/fasthttp/issues/2323">#2323</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347"><code>5f57d8f</code></a>
chore(deps): bump actions/setup-go from 6 to 7 (<a
href="https://redirect.github.com/valyala/fasthttp/issues/2329">#2329</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d"><code>3aa940d</code></a>
chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (<a
href="https://redirect.github.com/valyala/fasthttp/issues/2328">#2328</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40"><code>7a012e9</code></a>
validate domain and path cookie attribute values on parse (<a
href="https://redirect.github.com/valyala/fasthttp/issues/2315">#2315</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03"><code>9cf733f</code></a>
perf: reduce redundant scans and allocations in hot paths (<a
href="https://redirect.github.com/valyala/fasthttp/issues/2322">#2322</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp&package-manager=go_modules&previous-version=1.72.0&new-version=1.73.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 go.mod |  6 +++---
 go.sum | 12 ++++++------
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/go.mod b/go.mod
index dc4ced4c86..2fe53df305 100644
--- a/go.mod
+++ b/go.mod
@@ -141,7 +141,7 @@ require (
 	github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d
 	github.com/adrg/xdg v0.5.0
 	github.com/ammario/tlru v0.4.0
-	github.com/andybalholm/brotli v1.2.1
+	github.com/andybalholm/brotli v1.2.2
 	github.com/aquasecurity/trivy-iac v0.8.0
 	github.com/armon/circbuf v0.0.0-20190214190532-5111143e8da2
 	github.com/awalterschulze/gographviz v2.0.3+incompatible
@@ -211,7 +211,7 @@ require (
 	github.com/justinas/nosurf v1.2.0
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
 	github.com/kirsle/configdir v0.0.0-20170128060238-e45d2f54772f
-	github.com/klauspost/compress v1.19.0
+	github.com/klauspost/compress v1.19.1
 	github.com/lib/pq v1.10.9
 	github.com/mattn/go-isatty v0.0.22
 	github.com/mitchellh/go-wordwrap v1.0.1
@@ -242,7 +242,7 @@ require (
 	github.com/tidwall/gjson v1.18.0
 	github.com/u-root/u-root v0.14.0
 	github.com/unrolled/secure v1.17.0
-	github.com/valyala/fasthttp v1.72.0
+	github.com/valyala/fasthttp v1.73.0
 	github.com/wagslane/go-password-validator v0.3.0
 	github.com/zclconf/go-cty-yaml v1.2.0
 	go.nhat.io/otelsql v0.16.0
diff --git a/go.sum b/go.sum
index 0f418e63e8..56e9a1fecb 100644
--- a/go.sum
+++ b/go.sum
@@ -135,8 +135,8 @@ github.com/alexbrainman/sspi v0.0.0-20210105120005-909beea2cc74 h1:Kk6a4nehpJ3Uu
 github.com/alexbrainman/sspi v0.0.0-20210105120005-909beea2cc74/go.mod h1:cEWa1LVoE5KvSD9ONXsZrj0z6KqySlCCNKHlLzbqAt4=
 github.com/ammario/tlru v0.4.0 h1:sJ80I0swN3KOX2YxC6w8FbCqpQucWdbb+J36C05FPuU=
 github.com/ammario/tlru v0.4.0/go.mod h1:aYzRFu0XLo4KavE9W8Lx7tzjkX+pAApz+NgcKYIFUBQ=
-github.com/andybalholm/brotli v1.2.1 h1:R+f5xP285VArJDRgowrfb9DqL18yVK0gKAW/F+eTWro=
-github.com/andybalholm/brotli v1.2.1/go.mod h1:rzTDkvFWvIrjDXZHkuS16NPggd91W3kUSvPlQ1pLaKY=
+github.com/andybalholm/brotli v1.2.2 h1:HzTuoo2ErYQqf5qvcJInB8uvqSVxRttzkFexPWtnceM=
+github.com/andybalholm/brotli v1.2.2/go.mod h1:rzTDkvFWvIrjDXZHkuS16NPggd91W3kUSvPlQ1pLaKY=
 github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be h1:9AeTilPcZAjCFIImctFaOjnTIavg87rW78vTPkQqLI8=
 github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be/go.mod h1:ySMOLuWl6zY27l47sB3qLNK6tF2fkHG55UZxx8oIVo4=
 github.com/antithesishq/antithesis-sdk-go v0.7.0-default-no-op h1:Z/MZK75wC/NSrkgqeNIa7jexam9uWzhLmFTSCPI/kn0=
@@ -807,8 +807,8 @@ github.com/kevinburke/ssh_config v1.2.0/go.mod h1:CT57kijsi8u/K/BOFA39wgDQJ9CxiF
 github.com/kirsle/configdir v0.0.0-20170128060238-e45d2f54772f h1:dKccXx7xA56UNqOcFIbuqFjAWPVtP688j5QMgmo6OHU=
 github.com/kirsle/configdir v0.0.0-20170128060238-e45d2f54772f/go.mod h1:4rEELDSfUAlBSyUjPG0JnaNGjf13JySHFeRdD/3dLP0=
 github.com/kisielk/sqlstruct v0.0.0-20201105191214-5f3e10d3ab46/go.mod h1:yyMNCyc/Ib3bDTKd379tNMpB/7/H5TjM2Y9QJ5THLbE=
-github.com/klauspost/compress v1.19.0 h1:sXLILfc9jV2QYWkzFOPWStmcUVH2RHEB1JCdY2oVvCQ=
-github.com/klauspost/compress v1.19.0/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ=
+github.com/klauspost/compress v1.19.1 h1:VsB4HPswih7mmZ8WleSFQ75c/Ui1M4trX5oAsJnhSlk=
+github.com/klauspost/compress v1.19.1/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ=
 github.com/klauspost/cpuid/v2 v2.3.0 h1:S4CRMLnYUhGeDFDqkGriYKdfoFlDnMtqTiI/sFzhA9Y=
 github.com/klauspost/cpuid/v2 v2.3.0/go.mod h1:hqwkgyIinND0mEev00jJYCxPNVRVXFQeu1XKlok6oO0=
 github.com/kortschak/wol v0.0.0-20200729010619-da482cc4850a h1:+RR6SqnTkDLWyICxS1xpjCi/3dhyV+TgZwA6Ww3KncQ=
@@ -1222,8 +1222,8 @@ github.com/urfave/cli/v2 v2.27.5 h1:WoHEJLdsXr6dDWoJgMq/CboDmyY/8HMMH1fTECbih+w=
 github.com/urfave/cli/v2 v2.27.5/go.mod h1:3Sevf16NykTbInEnD0yKkjDAeZDS0A6bzhBH5hrMvTQ=
 github.com/valyala/bytebufferpool v1.0.0 h1:GqA5TC/0021Y/b9FG4Oi9Mr3q7XYx6KllzawFIhcdPw=
 github.com/valyala/bytebufferpool v1.0.0/go.mod h1:6bBcMArwyJ5K/AmCkWv1jt77kVWyCJ6HpOuEn7z0Csc=
-github.com/valyala/fasthttp v1.72.0 h1:R7kYdoWhn1ye1fVpP+cDHDJwYm3NkwLliwgzJ/Abg7M=
-github.com/valyala/fasthttp v1.72.0/go.mod h1:zsbLTYqcpIktdQytlVBwIjY9La5d6bs990nBxWg8efk=
+github.com/valyala/fasthttp v1.73.0 h1:ocTOORnBWtJ+P8t/6wAjdkchMzdfHmWx2VD/DPbgZ7s=
+github.com/valyala/fasthttp v1.73.0/go.mod h1:EtXQDHaR+5P18p8wqDRFpUhxr108Ga9mXvVJXHRrN2k=
 github.com/valyala/fastjson v1.6.10 h1:/yjJg8jaVQdYR3arGxPE2X5z89xrlhS0eGXdv+ADTh4=
 github.com/valyala/fastjson v1.6.10/go.mod h1:e6FubmQouUNP73jtMLmcbxS6ydWIpOfhz34TSfO3JaE=
 github.com/vbatts/tar-split v0.12.2 h1:w/Y6tjxpeiFMR47yzZPlPj/FcPLpXbTUi/9H7d3CPa4=