chore: bump github.com/valyala/fasthttp from 1.72.0 to 1.73.0 (#27575)

mirror of https://github.com/coder/coder.git synced 2026-09-24 15:04:27 +08:00

Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp)
from 1.72.0 to 1.73.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/valyala/fasthttp/releases">github.com/valyala/fasthttp's
releases</a>.</em></p>
<blockquote>
<h2>v1.73.0</h2>
<h2>What's Changed</h2>
<ul>
<li>test: fix host comparison in FuzzURIParse by <a
href="https://github.com/ReneWerner87"><code>@ReneWerner87</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2313">valyala/fasthttp#2313</a></li>
<li>perf: avoid redundant scans when parsing request headers by <a
href="https://github.com/ReneWerner87"><code>@ReneWerner87</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2312">valyala/fasthttp#2312</a></li>
<li>Fix temp file leak in SaveMultipartFile on cross-device rename
failure by <a
href="https://github.com/itxaiohanglover"><code>@itxaiohanglover</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2311">valyala/fasthttp#2311</a></li>
<li>re-enable forcetypeassert by <a
href="https://github.com/Harshal96"><code>@Harshal96</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2316">valyala/fasthttp#2316</a></li>
<li>test: normalize Go test names by <a
href="https://github.com/Harshal96"><code>@Harshal96</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2317">valyala/fasthttp#2317</a></li>
<li>feat: prefix sentinel error strings by <a
href="https://github.com/Harshal96"><code>@Harshal96</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2319">valyala/fasthttp#2319</a></li>
<li>fix(pprofhandler): use exact path matching to prevent debug data
exposure by <a
href="https://github.com/xbrxr03"><code>@xbrxr03</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2302">valyala/fasthttp#2302</a></li>
<li>avoid following a symlink when writing the FS compressed cache by <a
href="https://github.com/alhudz"><code>@alhudz</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2321">valyala/fasthttp#2321</a></li>
<li>refactor: improve internal interface names by <a
href="https://github.com/Harshal96"><code>@Harshal96</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2318">valyala/fasthttp#2318</a></li>
<li>fix: lowercase error strings by <a
href="https://github.com/Harshal96"><code>@Harshal96</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2320">valyala/fasthttp#2320</a></li>
<li>perf: reduce redundant scans and allocations in hot paths by <a
href="https://github.com/ReneWerner87"><code>@ReneWerner87</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2322">valyala/fasthttp#2322</a></li>
<li>validate domain and path cookie attribute values on parse by <a
href="https://github.com/alhudz"><code>@alhudz</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2315">valyala/fasthttp#2315</a></li>
<li>chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2328">valyala/fasthttp#2328</a></li>
<li>chore(deps): bump actions/setup-go from 6 to 7 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2329">valyala/fasthttp#2329</a></li>
<li>fix: preserve pre-set status code in NewFastHTTPHandler by <a
href="https://github.com/xbrxr03"><code>@xbrxr03</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2323">valyala/fasthttp#2323</a></li>
<li>chore(deps): bump github.com/klauspost/compress from 1.19.0 to
1.19.1 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2331">valyala/fasthttp#2331</a></li>
<li>reject backslash '..' traversal in fs handler on windows by <a
href="https://github.com/alhudz"><code>@alhudz</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2327">valyala/fasthttp#2327</a></li>
<li>fix: reject Windows alternate data stream paths in FS by <a
href="https://github.com/dev-willbird1936"><code>@dev-willbird1936</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2335">valyala/fasthttp#2335</a></li>
<li>chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2307">valyala/fasthttp#2307</a></li>
<li>chore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2
by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2308">valyala/fasthttp#2308</a></li>
<li>chore(deps): bump github.com/klauspost/compress from 1.18.6 to
1.18.7 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2309">valyala/fasthttp#2309</a></li>
<li>chore(deps): bump github.com/klauspost/compress from 1.18.7 to
1.19.0 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2314">valyala/fasthttp#2314</a></li>
<li>chore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2326">valyala/fasthttp#2326</a></li>
<li>chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2324">valyala/fasthttp#2324</a></li>
<li>chore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2325">valyala/fasthttp#2325</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/itxaiohanglover"><code>@itxaiohanglover</code></a>
made their first contribution in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2311">valyala/fasthttp#2311</a></li>
<li><a href="https://github.com/Harshal96"><code>@Harshal96</code></a>
made their first contribution in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2316">valyala/fasthttp#2316</a></li>
<li><a
href="https://github.com/dev-willbird1936"><code>@dev-willbird1936</code></a>
made their first contribution in <a
href="https://redirect.github.com/valyala/fasthttp/pull/2335">valyala/fasthttp#2335</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0">https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/valyala/fasthttp/commit/f83ac8c3560feccaa017ba86dd9b95ad004790f2"><code>f83ac8c</code></a>
Optimize bounds checks in hot paths</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/d9babd95c5f3d26ff26cfc528ca77f165df2f95f"><code>d9babd9</code></a>
fix: reject Windows alternate data stream paths in FS (<a
href="https://redirect.github.com/valyala/fasthttp/issues/2335">#2335</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/e7cf856857a46388b9e03507b8d4b6d5bc3d69dd"><code>e7cf856</code></a>
reject backslash '..' traversal in fs handler on windows (<a
href="https://redirect.github.com/valyala/fasthttp/issues/2327">#2327</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/165a4c81aada474f8566a66a5d4c2dee35fee37e"><code>165a4c8</code></a>
Improve AppendUnquotedArg with optimised bounds check</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/7a1349da70685cce500515263c20ec389f8f69e1"><code>7a1349d</code></a>
chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1
(<a
href="https://redirect.github.com/valyala/fasthttp/issues/2331">#2331</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/f1ad91d51977febd2730b9e0d79c7d241c5e430c"><code>f1ad91d</code></a>
fix: preserve pre-set status code in NewFastHTTPHandler (<a
href="https://redirect.github.com/valyala/fasthttp/issues/2323">#2323</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/5f57d8fda4c2c9e3092f82e13f589a92ed48d347"><code>5f57d8f</code></a>
chore(deps): bump actions/setup-go from 6 to 7 (<a
href="https://redirect.github.com/valyala/fasthttp/issues/2329">#2329</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/3aa940dfd248799878cd9ef46f6dfcec89a37f8d"><code>3aa940d</code></a>
chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (<a
href="https://redirect.github.com/valyala/fasthttp/issues/2328">#2328</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/7a012e987a372bf40d3eedf6caeb2f4c6162ff40"><code>7a012e9</code></a>
validate domain and path cookie attribute values on parse (<a
href="https://redirect.github.com/valyala/fasthttp/issues/2315">#2315</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/9cf733f7dc3533354eb6d495fcf0af93bdcb2f03"><code>9cf733f</code></a>
perf: reduce redundant scans and allocations in hot paths (<a
href="https://redirect.github.com/valyala/fasthttp/issues/2322">#2322</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp&package-manager=go_modules&previous-version=1.72.0&new-version=1.73.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

This commit is contained in:

dependabot[bot]

2026-07-28 11:18:19 +00:00

committed by

GitHub

parent 300ad74f05

commit 2dc850d085

2 changed files with 9 additions and 9 deletions

									
										go.mod
									
		+3
		-3
	
												View File
												
				@@ -141,7 +141,7 @@ require (

					github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d

					github.com/adrg/xdg v0.5.0

					github.com/ammario/tlru v0.4.0

					github.com/andybalholm/brotli v1.2.1

					github.com/andybalholm/brotli v1.2.2

					github.com/aquasecurity/trivy-iac v0.8.0

					github.com/armon/circbuf v0.0.0-20190214190532-5111143e8da2

					github.com/awalterschulze/gographviz v2.0.3+incompatible

				@@ -211,7 +211,7 @@ require (

					github.com/justinas/nosurf v1.2.0

					github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51

					github.com/kirsle/configdir v0.0.0-20170128060238-e45d2f54772f

					github.com/klauspost/compress v1.19.0

					github.com/klauspost/compress v1.19.1

					github.com/lib/pq v1.10.9

					github.com/mattn/go-isatty v0.0.22

					github.com/mitchellh/go-wordwrap v1.0.1

				@@ -242,7 +242,7 @@ require (

					github.com/tidwall/gjson v1.18.0

					github.com/u-root/u-root v0.14.0

					github.com/unrolled/secure v1.17.0

					github.com/valyala/fasthttp v1.72.0

					github.com/valyala/fasthttp v1.73.0

					github.com/wagslane/go-password-validator v0.3.0

					github.com/zclconf/go-cty-yaml v1.2.0

					go.nhat.io/otelsql v0.16.0