chore: bump github.com/valyala/fasthttp from 1.59.0 to 1.60.0 (#17274)

dependabot[bot] · web-flow · commit 30f41cdd42ff · 2025-04-07T12:18:23.000Z
Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.59.0 to 1.60.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/valyala/fasthttp/releases">github.com/valyala/fasthttp's releases</a>.</em></p> <blockquote> <h2>v1.60.0</h2> <h2>What's Changed</h2> <ul> <li>perf: split delAllArgs into delAllArgs and delAllArgsStable by <a href="https://github.com/ksw2000"><code>@​ksw2000</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1945">valyala/fasthttp#1945</a></li> <li>fix: accept invalid headers with a space by <a href="https://github.com/ksw2000"><code>@​ksw2000</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1953">valyala/fasthttp#1953</a></li> <li>Drop support for Go 1.21, add support for 1.24 by <a href="https://github.com/erikdubbelboer"><code>@​erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1959">valyala/fasthttp#1959</a></li> <li>chore(deps): bump github.com/klauspost/compress from 1.17.11 to 1.18.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1958">valyala/fasthttp#1958</a></li> <li>add related project for opentelemetry-go-auto-instrumentation by <a href="https://github.com/123liuziming"><code>@​123liuziming</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1962">valyala/fasthttp#1962</a></li> <li>Fix normalizeHeaderValue by <a href="https://github.com/erikdubbelboer"><code>@​erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1963">valyala/fasthttp#1963</a></li> <li>chore(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1968">valyala/fasthttp#1968</a></li> <li>chore(deps): bump securego/gosec from 2.22.1 to 2.22.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1972">valyala/fasthttp#1972</a></li> <li>chore(deps): bump golang.org/x/net from 0.36.0 to 0.37.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1971">valyala/fasthttp#1971</a></li> <li>Update golangci-lint to v2 by <a href="https://github.com/erikdubbelboer"><code>@​erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1980">valyala/fasthttp#1980</a></li> <li>chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1983">valyala/fasthttp#1983</a></li> <li>Remove idleConns mutex for every request by <a href="https://github.com/erikdubbelboer"><code>@​erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/1986">valyala/fasthttp#1986</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/123liuziming"><code>@​123liuziming</code></a> made their first contribution in <a href="https://redirect.github.com/valyala/fasthttp/pull/1962">valyala/fasthttp#1962</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/valyala/fasthttp/compare/v1.59.0...v1.60.0">https://github.com/valyala/fasthttp/compare/v1.59.0...v1.60.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/valyala/fasthttp/commit/752b0e70040eee46b291b9dedd70266d8aa3e2e7"><code>752b0e7</code></a> Remove idleConns mutex for every request (<a href="https://redirect.github.com/valyala/fasthttp/issues/1986">#1986</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/bf3f552c8e564472d6e7aae08804bcf0813f1f73"><code>bf3f552</code></a> chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (<a href="https://redirect.github.com/valyala/fasthttp/issues/1983">#1983</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/4891fc5304e3ab9e23e9258a39736a3726b626c2"><code>4891fc5</code></a> Update golangci-lint to v2 (<a href="https://redirect.github.com/valyala/fasthttp/issues/1980">#1980</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/30b09beff11be4282c37ef6b7d8854589d565447"><code>30b09be</code></a> Fix untyped int constant 4294967295</li> <li><a href="https://github.com/valyala/fasthttp/commit/4269e2d68c33f2242e61f67ad4e104ba26fc4c1c"><code>4269e2d</code></a> chore(deps): bump golang.org/x/net from 0.36.0 to 0.37.0 (<a href="https://redirect.github.com/valyala/fasthttp/issues/1971">#1971</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/1353ca59f2044a74111d80087a5e762a71a3e1a2"><code>1353ca5</code></a> chore(deps): bump securego/gosec from 2.22.1 to 2.22.2 (<a href="https://redirect.github.com/valyala/fasthttp/issues/1972">#1972</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/6c07c2f523de17c866ac4cf86d08386e7bad55e4"><code>6c07c2f</code></a> chore(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 (<a href="https://redirect.github.com/valyala/fasthttp/issues/1968">#1968</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/69dc7b1280e58dac05ab46c423b5b7f14cc88fab"><code>69dc7b1</code></a> Update the supported version to the same as Go itself (<a href="https://redirect.github.com/valyala/fasthttp/issues/1967">#1967</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/b8969ed8dcb5cba0b037f3fe091a0933fc786a28"><code>b8969ed</code></a> Fix normalizeHeaderValue (<a href="https://redirect.github.com/valyala/fasthttp/issues/1963">#1963</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/31e34c5fe0c3dd3090b0c9d662b74bab1dc87f6d"><code>31e34c5</code></a> add related project for opentelemetry-go-auto-instrumentation (<a href="https://redirect.github.com/valyala/fasthttp/issues/1962">#1962</a>)</li> <li>Additional commits viewable in <a href="https://github.com/valyala/fasthttp/compare/v1.59.0...v1.60.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/valyala/fasthttp&package-manager=go_modules&previous-version=1.59.0&new-version=1.60.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/go.mod b/go.mod
@@ -175,7 +175,7 @@ require (
 	github.com/tidwall/gjson v1.18.0
 	github.com/u-root/u-root v0.14.0
 	github.com/unrolled/secure v1.17.0
-	github.com/valyala/fasthttp v1.59.0
+	github.com/valyala/fasthttp v1.60.0
 	github.com/wagslane/go-password-validator v0.3.0
 	github.com/zclconf/go-cty-yaml v1.1.0
 	go.mozilla.org/pkcs7 v0.9.0
diff --git a/go.sum b/go.sum
@@ -934,8 +934,8 @@ github.com/unrolled/secure v1.17.0 h1:Io7ifFgo99Bnh0J7+Q+qcMzWM6kaDPCA5FroFZEdbW
 github.com/unrolled/secure v1.17.0/go.mod h1:BmF5hyM6tXczk3MpQkFf1hpKSRqCyhqcbiQtiAF7+40=
 github.com/valyala/bytebufferpool v1.0.0 h1:GqA5TC/0021Y/b9FG4Oi9Mr3q7XYx6KllzawFIhcdPw=
 github.com/valyala/bytebufferpool v1.0.0/go.mod h1:6bBcMArwyJ5K/AmCkWv1jt77kVWyCJ6HpOuEn7z0Csc=
-github.com/valyala/fasthttp v1.59.0 h1:Qu0qYHfXvPk1mSLNqcFtEk6DpxgA26hy6bmydotDpRI=
-github.com/valyala/fasthttp v1.59.0/go.mod h1:GTxNb9Bc6r2a9D0TWNSPwDz78UxnTGBViY3xZNEqyYU=
+github.com/valyala/fasthttp v1.60.0 h1:kBRYS0lOhVJ6V+bYN8PqAHELKHtXqwq9zNMLKx1MBsw=
+github.com/valyala/fasthttp v1.60.0/go.mod h1:iY4kDgV3Gc6EqhRZ8icqcmlG6bqhcDXfuHgTO4FXCvc=
 github.com/vishvananda/netlink v1.2.1-beta.2 h1:Llsql0lnQEbHj0I1OuKyp8otXp0r3q0mPkuhwHfStVs=
 github.com/vishvananda/netlink v1.2.1-beta.2/go.mod h1:twkDnbuQxJYemMlGd4JFIcuhgX83tXhKS2B/PRMpOho=
 github.com/vishvananda/netns v0.0.0-20200728191858-db3c7e526aae/go.mod h1:DD4vA1DwXk04H54A1oHXtwZmA0grkVMdPxx/VGLCah0=
