What's Changed

• Update to go1.25 as minimal version by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2205
• client: add aggregate connection count metrics by @z9z in https://github.com/valyala/fasthttp/pull/2201
• fix(server): return ErrMissingFile when MultipartForm.File is nil by @u5surf in https://github.com/valyala/fasthttp/pull/2260
• bug: FS cache cleaner goroutine leaks when CleanStop is nil (default) (#2218), #2247 by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2271
• bug: data race on pipeline client c.chR during worker drain (#2220) by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2272
• bug: TCPDialer.tcpAddrsClean() goroutine leaks — no shutdown mechanism (#2222) by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2273
• bug: double concurrency counter increment in ServeConn causes counter leak (#2238) by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2275
• bug: body stream leak in compression methods when response is discarded (#2244) by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2276
• bug: InMemoryListener deadlock under high concurrency (#2245) by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2277
• bug: fasthttpadaptor writer leak, data race, and crash on handler panic (#2246) by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2278
• bug: fasthttpproxy dialers return nil DialFunc on error, causing panic (#2248) by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2279
• bug: closeIdleConns TOCTOU race with serveConn idle timestamp (#2250) by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2280
• bug: AppendCert/AppendCertEmbed not thread-safe (#2251) by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2281
• bug: SetBodySizePoolLimit data race — plain int written without synchronization (#2252) by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2282
• bug: file descriptor leak in prefork parent process (#2253) by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2283
• security: SO_REUSEADDR on Windows enables port hijacking (#2254) by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2284
• bug: file descriptor leak on z/OS s390x when FcntlInt fails (#2255) by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2285
• bug: filesLockMap grows unboundedly, leaking memory (#2256) by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2286
• security: TLS verification silently disabled for malformed addresses (#2236) by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2274
• fix(fs): remove temporary file when compression fails by @u5surf in https://github.com/valyala/fasthttp/pull/2264
• fix double release of streamed client response body by @Mereng in https://github.com/valyala/fasthttp/pull/2211
• fix(client): switch to GET on 303 redirect per RFC 9110 by @u5surf in https://github.com/valyala/fasthttp/pull/2265
• ci: re-enable gocritic deferInLoop check for non-test code by @u5surf in https://github.com/valyala/fasthttp/pull/2288
• Fix flaky race tests by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2292
• fix(lbclient): prevent deadlock when all clients are removed by @u5surf in https://github.com/valyala/fasthttp/pull/2287
• reject duplicate Content-Length in response header parser by @alhudz in https://github.com/valyala/fasthttp/pull/2294
• strip cr/lf from header keys in normalizeHeaderKey by @alhudz in https://github.com/valyala/fasthttp/pull/2295
• fix(client): guard nil waiter in decConnsCount by @SAY-5 in https://github.com/valyala/fasthttp/pull/2266
• strip semicolons from cookie setters to block attribute injection by @alhudz in https://github.com/valyala/fasthttp/pull/2298
• feat(prefork): graceful shutdown, leak fixes, hook robustness (re-open of #2180 follow-up) by @ReneWerner87 in https://github.com/valyala/fasthttp/pull/2199
• fix: prevent data race on FSCompressedFileSuffixes map by @xbrxr03 in https://github.com/valyala/fasthttp/pull/2300
• reject duplicate Transfer-Encoding in request header parser by @alhudz in https://github.com/valyala/fasthttp/pull/2303
• preserve duplicate request headers in ConvertRequest by @alhudz in https://github.com/valyala/fasthttp/pull/2305
• fix(server): close listener on serve error in ListenAndServe helpers by @fereidani in https://github.com/valyala/fasthttp/pull/2304
• validate trailer values in parseTrailer by @alhudz in https://github.com/valyala/fasthttp/pull/2301
• Avoid default content type for empty requests by @nkgotcode in https://github.com/valyala/fasthttp/pull/2296
• chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2210
• chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2209
• chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2208
• chore(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2207
• chore(deps): bump securego/gosec from 2.26.1 to 2.27.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2261
• chore(deps): bump securego/gosec from 2.27.0 to 2.27.1 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2267
• chore(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2289
• chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2290
• chore(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2291
• chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2297

New Contributors

• @z9z made their first contribution in https://github.com/valyala/fasthttp/pull/2201
• @Mereng made their first contribution in https://github.com/valyala/fasthttp/pull/2211
• @alhudz made their first contribution in https://github.com/valyala/fasthttp/pull/2294
• @SAY-5 made their first contribution in https://github.com/valyala/fasthttp/pull/2266
• @xbrxr03 made their first contribution in https://github.com/valyala/fasthttp/pull/2300
• @fereidani made their first contribution in https://github.com/valyala/fasthttp/pull/2304
• @nkgotcode made their first contribution in https://github.com/valyala/fasthttp/pull/2296

Full Changelog: https://github.com/valyala/fasthttp/compare/v1.71.0...v1.72.0