This release contains new features, improvements and bug fixes.

• US-1728 creator.SetDefaultFont for overriding the default fonts
• US-1738 creator.Image masks: soft, stencil and color-key masking, with alpha optimization
• US-1753 Signature coverage reporting on SignatureValidationResult
• US-1753 PdfParser.RevisionEndOffsets and PdfParser.Size for locating document revision boundaries
• US-1767 US-1768 Template engine strict mode via TemplateOptions.Strict
• US-1721 PageText.FormContents for extracting text found inside Form XObjects
• US-1603 PdfFont.ShapeText and the textencoding.ShapedGlyphRegistry interface
• US-1703 veraPDF PDF/A corpus parity test and an opt-in Isartor corpus test

• US-1720 US-1733 Extended sanitizer coverage to embedded files, form-data actions and multimedia actions
• US-1683 Faster PDF/UA validation by parsing each page's content stream once per validation
• US-1680 Owner-aware layout attributes and ClassMap attribute resolution in the PDF/UA verifier
• US-1681 PDF/UA structure walks now look through NonStruct, Div and Part wrappers
• US-1687 PDF/UA font checks extended to annotation appearances, Type3 CharProcs and tiling patterns
• US-1661 Consolidated the render alpha buffer pool onto core.AcquireBytes/ReleaseBytes
• US-1732 Updated the minimum supported Go version to 1.25.0
• US-1682 More stable golden-file comparison in the end-to-end test harness

• US-1666 Removed remaining PDF/UA verifier false positives for table regularity and XFA forms
• US-1667 Fixed PDF/UA verifier rules that misfire or under-report against veraPDF
• US-1682 Fixed the XMP rule cascade reported when the catalog has no /Metadata stream
• US-1703 Fixed XMP verifier gaps in packet encoding, schema matching and property value types
• US-1684 Fixed PDF/A font embedding for TrueType Collection substitutes and standard-14 base names
• US-1603 Fixed ligatures and contextual forms being dropped by font subsetting
• US-1727 Fixed font attributes with whitespace failing to resolve from the FontMap
• US-1767 Template data is now escaped on interpolation, with further template processor fixes
• US-1730 Fixed Flate-compressed /JBIG2Globals streams failing to parse
• US-1726 Fixed the xref repair regression for tables whose subsection numbering is shifted
• US-1721 Fixed the redactor silently skipping matches inside Form XObjects
• US-1751 Fixed Editor.Replace truncating replacement text longer than the match
• US-1752 Fixed objects cached during the auto-repair xref health check never being decrypted
• US-1758 Fixed an undefined type assertion on composite fonts in obfuscated builds

• Update Clave showcase links to current website and repository in PR by @01xR4in

• Cancel aborted Windows asset requests, including worker requests, while preserving keepalive handlers across navigation. Forward native request contexts through the application wrapper on Apple platforms. (#5963, #5969)
• Preserve changelog entries across competing pushes with retries in PR by @leaanthony
• Fix go mod vendor failing with pattern arm64/WebView2Loader.dll: no matching files found on every platform, by removing the embeds that referenced binaries never shipped in the module, fixing #5782 and #5376, in PR by @Grantmartin2002

• Remove native WebView2 loader support, superseded by the pure Go loader. This drops the embedded WebView2Loader.dll binaries and the github.com/jchv/go-winloader dependency. The native_webview2loader build tag is still accepted and no longer errors, but has no effect on v3 builds, in PR by @Grantmartin2002
• Remove unused build tags and FPS option from macOS API guide in PR by @leaanthony

🤖 This is an automated nightly release generated from the latest changes on master.

Installation:

go install github.com/wailsapp/wails/v3/cmd/wails3@v3.0.0-beta.20

⚠️ Beta Warning: This is pre-release software. The API is stable, but you may still encounter issues before the final 3.0 release.

• Close the underlying config loader from Config.Close, releasing file watchers and open handles.
• Avoid a nil-error panic when stopping config watchers.
• Serialize repeated Config.Close calls so cleanup runs once.

Fixes #4913.

https://ebitengine.org/en/documents/2.10.html#v2.10.1

• Gate private macOS APIs behind build tags for opt-in usage — see documentation and documentation and documentation and documentation and documentation and documentation and documentation and documentation and documentation in PR by @leaanthony

• Reject runtime requests over 64 MiB with HTTP 413 in PR by @leaanthony

• Harden MCP origins and remote access with token authentication in PR by @leaanthony

🤖 This is an automated nightly release generated from the latest changes on master.

Installation:

go install github.com/wailsapp/wails/v3/cmd/wails3@v3.0.0-beta.19

⚠️ Beta Warning: This is pre-release software. The API is stable, but you may still encounter issues before the final 3.0 release.

• Fix Calloc memory leak on Linux and Darwin by using pointer receivers in PR by @4RH1T3CT0R7

🤖 This is an automated nightly release generated from the latest changes on master.

Installation:

go install github.com/wailsapp/wails/v3/cmd/wails3@v3.0.0-beta.18

⚠️ Beta Warning: This is pre-release software. The API is stable, but you may still encounter issues before the final 3.0 release.

https://ebitengine.org/en/documents/2.10.html#v2.10.0

• fix(fasthttpproxy): select proxies from the request scheme by @dev-willbird1936 in https://github.com/valyala/fasthttp/pull/2334
• test: scale short timeouts with testTimeout to reduce -race flakiness by @ReneWerner87 in https://github.com/valyala/fasthttp/pull/2339
• fix: drop zeroed entries from the perIPConnCounter map by @ReneWerner87 in https://github.com/valyala/fasthttp/pull/2337
• perf: skip the unusable per-call file cache in ServeFS by @ReneWerner87 in https://github.com/valyala/fasthttp/pull/2338
• test: return after a failed Dial instead of dereferencing a nil conn by @ReneWerner87 in https://github.com/valyala/fasthttp/pull/2341
• fix: don't recycle an idle timestamp its connection still owns by @ReneWerner87 in https://github.com/valyala/fasthttp/pull/2342
• reject Transfer-Encoding on HTTP/1.0 requests by @alhudz in https://github.com/valyala/fasthttp/pull/2330
• only treat "//" in URI.Update as an authority after a scheme by @alhudz in https://github.com/valyala/fasthttp/pull/2345
• fix: consume informational responses before the final response by @dev-willbird1936 in https://github.com/valyala/fasthttp/pull/2333
• fix: reject out-of-range Content-Length instead of wrapping it by @lenamonj in https://github.com/valyala/fasthttp/pull/2343
• perf: zero-copy chunked body writes via io.WriterTo by @sasgas in https://github.com/valyala/fasthttp/pull/2310
• fix: don't close the shutdown done channel twice by @ReneWerner87 in https://github.com/valyala/fasthttp/pull/2340
• Rename ChunkedBodyWriterTo to BodyWriterTo and use in more places by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2348
• chore(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2349
• fix: small read buffer error doesn't match the ignored string anymore by @Pedr0Rocha in https://github.com/valyala/fasthttp/pull/2356
• Add canonical header lookup by @fzlzjerry in https://github.com/valyala/fasthttp/pull/2354
• chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2361
• chore(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2360
• Fix a pooled timer panic and a test data race by @h2zi in https://github.com/valyala/fasthttp/pull/2351
• fix: send / as the path when the request-target is query-only by @official-burak in https://github.com/valyala/fasthttp/pull/2371
• perf: try to avoid reallocations while reading zstd compressed requests by @ethercrow in https://github.com/valyala/fasthttp/pull/2357
• feat: add the QUERY method (RFC 10008) by @h2zi in https://github.com/valyala/fasthttp/pull/2358
• fix: wait for streaming reads before releasing pooled resources by @tbphp in https://github.com/valyala/fasthttp/pull/2353
• Replace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr by @gaby in https://github.com/valyala/fasthttp/pull/2366
• Always stream response bodies when requested by @erikdubbelboer in https://github.com/valyala/fasthttp/pull/2373
• chore(deps): bump securego/gosec from 2.28.0 to 2.29.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2375
• fix: let request timeouts override client timeouts by @Harshal96 in https://github.com/valyala/fasthttp/pull/2372
• avoid race condition for closing the streaming connection at EOF by @akshaydeo in https://github.com/valyala/fasthttp/pull/2379
• Give TestClientHeadWithBody a CI-proof read timeout by @h2zi in https://github.com/valyala/fasthttp/pull/2374
• fix: prevent stale query string after clearing query args by @cuishuang in https://github.com/valyala/fasthttp/pull/2380
• feat(examples): add zero-allocation server example by @aabishkaryal in https://github.com/valyala/fasthttp/pull/2362
• chore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 by @dependabot[bot] in https://github.com/valyala/fasthttp/pull/2384

• @lenamonj made their first contribution in https://github.com/valyala/fasthttp/pull/2343
• @sasgas made their first contribution in https://github.com/valyala/fasthttp/pull/2310
• @Pedr0Rocha made their first contribution in https://github.com/valyala/fasthttp/pull/2356
• @fzlzjerry made their first contribution in https://github.com/valyala/fasthttp/pull/2354
• @h2zi made their first contribution in https://github.com/valyala/fasthttp/pull/2351
• @official-burak made their first contribution in https://github.com/valyala/fasthttp/pull/2371
• @ethercrow made their first contribution in https://github.com/valyala/fasthttp/pull/2357
• @tbphp made their first contribution in https://github.com/valyala/fasthttp/pull/2353
• @akshaydeo made their first contribution in https://github.com/valyala/fasthttp/pull/2379

Full Changelog: https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0

• Upgrade Guide: https://resty.dev/docs/upgrading-to-v3/

• fix: stop multipart producer after early response without race/hang by @Solaris-star in https://github.com/go-resty/resty/pull/1188
• fix: digest challenge parsing per RFC 7616 by @mrueg in https://github.com/go-resty/resty/pull/1203
• fix: stop handing out pooled buffers and aliased slices by @mrueg in https://github.com/go-resty/resty/pull/1202
• fix: preserve trailing slash in SetBaseURL (fixes #1061) by @ObeeJ in https://github.com/go-resty/resty/pull/1191
• fix: SSE connect deadlock from a recursive read lock, plus a leaked response body by @mrueg in https://github.com/go-resty/resty/pull/1199

• feat: add support for the HTTP QUERY method (RFC 10008) by @thatwasyahya in https://github.com/go-resty/resty/pull/1187
• fix(enhancement): hedging no longer cancels the winning response body by @mrueg in https://github.com/go-resty/resty/pull/1197
• fix(enhancement): load balancer data race, duplicate state-change hooks, ticker goroutine leak by @mrueg in https://github.com/go-resty/resty/pull/1198
• fix(enhancement): guard the debug-log type assertion and keep the rate limiter's context cause by @mrueg in https://github.com/go-resty/resty/pull/1204

• test: Fix environment-dependent flaky assertion in TestTraceInfoOnTimeoutWithSetTimeout by @Yashh56 in https://github.com/go-resty/resty/pull/1184

• docs(sse): replace the dead sse.dev host with example.com by @donbagger in https://github.com/go-resty/resty/pull/1205

• chore: bump version to 3.0.0-rc.3+devrc4 for next dev iteration by @jeevatkm in https://github.com/go-resty/resty/pull/1183
• ci: pin github actions to commit shas and declare workflow permissions by @Totara-thib in https://github.com/go-resty/resty/pull/1193
• ci: add plumber workflow security check by @Totara-thib in https://github.com/go-resty/resty/pull/1194
• release: version bump to v3.0.0-rc.4 by @jeevatkm in https://github.com/go-resty/resty/pull/1206

• @Yashh56 made their first contribution in https://github.com/go-resty/resty/pull/1184
• @thatwasyahya made their first contribution in https://github.com/go-resty/resty/pull/1187
• @Solaris-star made their first contribution in https://github.com/go-resty/resty/pull/1188
• @donbagger made their first contribution in https://github.com/go-resty/resty/pull/1205
• @mrueg made their first contribution in https://github.com/go-resty/resty/pull/1203
• @Totara-thib made their first contribution in https://github.com/go-resty/resty/pull/1193
• @ObeeJ made their first contribution in https://github.com/go-resty/resty/pull/1191

Full Changelog: https://github.com/go-resty/resty/compare/v3.0.0-rc.3...v3.0.0-rc.4

• Windows: a failed or nil GetRequest in the WebResourceRequested handler no longer kills the process (log.Fatal / nil-dereference panic) — the request is dropped and logged instead in PR by @midagedev

🤖 This is an automated nightly release generated from the latest changes on master.

Installation:

go install github.com/wailsapp/wails/v3/cmd/wails3@v3.0.0-beta.17

⚠️ Beta Warning: This is pre-release software. The API is stable, but you may still encounter issues before the final 3.0 release.