JavaGolangJavaScriptSwiftAndroidRustMiddleware
4 hours ago
fiber
gofiber

v3.4.0

🚀 New

  • Complete HTTP QUERY method support (#4436, #4456) Adds the HTTP QUERY method (RFC 10008): fiber.MethodQuery, app.Query() routing, safe/idempotent handling in csrf, idempotency, earlydata and cache, plus client.Query() shorthands. 
    app.Query("/search", func(c fiber.Ctx) error {
    return c.Send(c.Body()) // QUERY carries the query expression in the body
})
    https://docs.gofiber.io/client/rest#query
  • Add WithContext variants for session storage I/O (#4393) SaveWithContext, DestroyWithContext, RegenerateWithContext and ResetWithContext propagate deadlines/cancellation to the session storage backend; the plain methods keep working unchanged. 
    sess := session.FromContext(c)
err := sess.SaveWithContext(ctx) // storage write bounded by ctx
    https://docs.gofiber.io/middleware/session#session-with-context-timeoutscancellation
  • Unify internal and custom constraints into a single interface (#4397) Built-in and custom route constraints now share one ConstraintHandler interface; the optional ConstraintAnalyzer precomputes constraint data at route registration, removing per-request parsing. Existing CustomConstraint implementations keep working unchanged. 
    app.RegisterCustomConstraint(evenConstraint{}) // implements Name() + Execute()
app.Get("/items/:id<even>", handler)
    https://docs.gofiber.io/guide/routing#constrainthandler-interface
  • Expose prefork RecoverInterval and ShutdownGracePeriod (#4491) New ListenConfig knobs: PreforkRecoverInterval delays respawning a crashed child (default 0) and PreforkShutdownGracePeriod sets how long the master waits after SIGTERM before SIGKILL (default 5s). 
    app.Listen(":3000", fiber.ListenConfig{
    EnablePrefork:              true,
    PreforkRecoverInterval:     time.Second,
    PreforkShutdownGracePeriod: 10 * time.Second,
})
    https://docs.gofiber.io/api/fiber#preforkrecoverinterval

🧹 Updates

  • Reduce avoidable work in the request hot path (#4490)
  • Avoid per-request heap allocation in DefaultErrorHandler (#4446)
  • Use sentinel errors on typed-getter and Range parse failures (#4448)
  • Replace appendLowerBytes with utilsbytes.UnsafeToLower (#4468)
  • Add MIMETextEventStream constant (#4415)
  • Cache binder decoder type metadata across requests (#4447)
  • Eliminate double reflection in binder mergeStruct (-10% allocs) (#4385)
  • Reduce binder data map allocations (#4379)
  • cache: Append canonical key segments into the pooled buffer (#4450)
  • cors: Optimize subdomain origin matching (#4482)
  • cors: Optimize exact-origin lookup to O(1) (#4368)
  • csrf/redirect: Share scheme/host matching and skip url.Parse on the hot path (#4449)
  • Narrow client user hook lock scope safely (#4375)
  • Raise middleware coverage above 90% for timeout, logger, idempotency, limiter, cache (#4466)
  • Cover remaining cors/csrf middleware branches (#4462)
  • Add unit tests for isOriginSerializedOrNull (#4461)
  • Cover session deadline/error paths and delegate Middleware lifecycle methods (#4435)
  • Inject clock to make time-dependent tests deterministic (#4430)
  • Rename benchmark cases (#4383)
  • Remove test-only dead code and add manual deadcode workflow (#4458)
  • Remove dead code flagged by static analysis (#4454)
  • Static analysis cleanups (#4444)
  • Fix modernize lint issues (#4315)

🐛 Fixes

  • Evaluate If-Modified-Since when If-None-Match is absent in Fresh (#4488)
  • Fix open redirect via Redirect().Back() by validating the Referer header origin (#4370)
  • Fix data race on lazy appListKeys generation in Render (#4440)
  • Avoid route fallback errors during server error middleware traversal (#4426)
  • Strip all trusted proxy IPs from X-Forwarded-For chain (#4394)
  • Guard typed-nil errors (#4407)
  • Guard typed-nil Fiber error paths without reflection (#4372)
  • Preserve legacy custom constraint arguments (#4432)
  • Remove unreachable SameSiteDefaultMode case (#4471)
  • Detach quoted filename strings from pooled buffers (#4374)
  • Prevent app.init mutex deadlock on panic (#4366)
  • Enforce CertClientFile for AutoCertManager TLS (#4312)
  • cache: Separate authorization key segment (#4467)
  • cache: Hash QUERY body keys (#4459)
  • cache: Evaluate freshness after locking (#4419)
  • cors: Validate wildcard origins before matching (#4438)
  • cors: Reject empty wildcard labels (#4437)
  • csrf: Validate nested extractor chains (#4439)
  • csrf: Port CORS subdomain match fixes (#4455)
  • etag: Skip Server-Sent Events responses (#4487)
  • Guard extractor introspection cycles (#4453)
  • helmet: Use Scheme() for HTTPS detection and validate HSTS configuration (#4389)
  • hostauthorization: Reject malformed hostnames in wildcard path (#4408)
  • idempotency: Make MemoryLock safe for zero-value use (#4371)
  • limiter: Correct fixed-window hit credit on skipped requests (#4422)
  • logger/cache/storage: Remove unbounded background goroutines (#4378)
  • pprof/proxy: Fix trailing-slash redirect and balancer empty-server panic (#4421)
  • proxy: Bound upstream connections by default (#4369)
  • rewrite/redirect: Anchor rules to the start of the path (#4483)
  • session: Prevent session fixation by preserving successful extractor in chains (#4469)
  • session: Prevent store error disclosure (#4424)
  • session: Restore isFresh field name (#4477)
  • sse: Preserve trailing newlines in event data (#4414)
  • timeout: Isolate default timeout responses (#4442)
  • timeout: Reclaim abandoned fiber.Ctx via ScheduleReclaim latch (#4359, #4400)
  • Fix client config locking races (#4470)
  • Fix client default access race in Replace/C path (#4377)
  • Handle panics in client execFunc without crashing callers (#4365)
  • Address bugs found in codebase audit (#4420)
  • Fix cleanup follow-ups and regression coverage (#4380)

🛠️ Maintenance

22 changes
  • bump github.com/klauspost/compress from 1.18.7 to 1.19.0 (#4489)
  • bump github.com/klauspost/compress from 1.18.6 to 1.18.7 (#4485)
  • bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 (#4484)
  • bump github.com/valyala/fasthttp from 1.71.0 to 1.72.0 in the fasthttp-modules group (#4481)
  • bump actions/cache/restore from 6.0.0 to 6.1.0 (#4480)
  • bump actions/cache/save from 6.0.0 to 6.1.0 (#4479)
  • bump release-drafter/release-drafter from 7.5.0 to 7.5.1 (#4463)
  • bump release-drafter/release-drafter from 7.4.0 to 7.5.0 (#4457)
  • bump actions/cache from 5.0.5 to 6.0.0 (#4452)
  • bump actions/setup-go from 6.4.0 to 6.5.0 (#4451)
  • bump actions/checkout from 6.0.3 to 7.0.0 (#4441)
  • bump release-drafter/release-drafter from 7.3.1 to 7.4.0 (#4434)
  • bump golang.org/x/net from 0.55.0 to 0.56.0 in the golang-modules group (#4425)
  • bump github.com/gofiber/schema from 1.7.2 to 1.8.0 (#4417)
  • bump the golang-modules group with 2 updates (#4416)
  • bump golang.org/x/sys from 0.45.0 to 0.46.0 in the golang-modules group (#4412)
  • bump codecov/codecov-action from 6.0.1 to 7.0.0 (#4413)
  • bump actions/checkout from 6.0.2 to 6.0.3 (#4398)
  • bump github.com/gofiber/schema from 1.7.1 to 1.7.2 (#4396)
  • bump github.com/mattn/go-colorable from 0.1.14 to 0.1.15 (#4384)
  • bump release-drafter/release-drafter from 7.3.0 to 7.3.1 (#4314)
  • bump the golang-modules group with 3 updates (#4310)

📚 Documentation

  • Restructure routing guide and split handler partials (#4311)
  • Fix Ctx.Scheme/Protocol documentation (#4473, #4474)
  • Clarify client hook concurrency contract (#4386)
  • keyauth: Fix extractor examples (#4409)
  • Add FAQ troubleshooting entry for the "id <= evictCount" (hpack/gRPC) panic (#4475)
  • Replace interface{} with any (Go 1.18+) (#4433)
  • Document thread-safety contracts for mutex-backed public types (#4367)
  • Enhance sponsorship section in README (#4402)

📒 Documentation: https://docs.gofiber.io/next/

💬 Discord: https://gofiber.io/discord

Full Changelog: https://github.com/gofiber/fiber/compare/v3.3.0...v3.4.0

Thank you @0xghost42, @Amirhf1, @DucMinhNe, @Fenny, @MD-Mushfiqur123, @ReneWerner87, @alexandear, @fereidani, @gaby, @james-yusuke, @ksw2000, @nekoworks-magic, @niksis02, @pageton, @sixcolors and @talktokim for making this release possible.

4 hours ago
go-micro
micro

v6.3.12

Changelog

  • 40a559e8dbec8c532fdb58514e54a5ead3bac24a Harden universe notify finalization (#3612)
  • d2e1520a1492a85825802cb853e675b1f5309243 Verify zero-to-hero reference app in harness (#3628)
  • 3a2d21f1accdde9a5529f60aaab925a1db06db3f agent: dedupe plan delegate tool side effects (#3616)
  • f06e7467ce19846de76db395fce0cc660d22ba56 ci: smoke test installer first-run CLI (#3635)
  • 28320fc1d47ac58ed529aa57081bba58af125e7f cli: add first-agent preflight diagnostics (#3608)
  • 66ce68a93f04d2420fbfb1b6b4faf014dcd3f66f community: add Discord to nav/footer/README/landing; fix stale invite code (#3567)
  • 1bcf0e1ae94d1c23735a1dc911c9bf765f7ab297 docs(priorities): drop completed examples task (#3587)
  • f192c4947c312ac750d30e4af02e88bebbbffda6 docs(priorities): drop completed install task (#3581)
  • 819403e940c817716509e61b145264367ac9d9c5 docs(priorities): prioritize adoption on-ramp (#3571)
  • c6f9940ab2cd5a83e9dacc26791c8ffc87ac2ee6 docs(priorities): refresh architect adoption queue (#3599)
  • cbc8fc62c750a9c9c03f6a0d8e18aa59e56e0caa docs(priorities): refresh architect adoption queue (#3605)
  • 412491568fbc09d7b663050daec2c85c9a0ee754 docs(priorities): refresh architect adoption queue (#3631)
  • 2215065a2e4d3edd9b219a8dbb95690660a87ab9 docs(priorities): refresh architect queue (#3593)
  • ae239b0102f019b49a14a12816b705c012aa2b17 docs(priorities): refresh architect queue (#3619)
  • 0a18ac6c1553390749680c9927b438f6ccd50d36 docs(priorities): refresh architect queue (#3624)
  • dfe9e436e8fe2f7c2dcdddec2c4790d72b34230c docs(priorities): remove completed first-agent task (#3576)
  • 110cb44d41b686152957e91deffca2556f0ae587 feat: add Ollama provider with local and cloud support (#3636)
  • 58284c62304d3989b209aad49dffade8f8508c1d harness: extend live provider deadlines (#3569)
  • 8e3ba68d588fd0037f0423c02ece6fb512e16c94 loop-release: fix 403 on tag push (checkout token clobbered the PAT) (#3638)
  • b49f5072b132ec5eda30f40a644669e1269d9600 loop: have DevRel maintain CHANGELOG.md and draft a changelog blog post (#3584)
  • 4bd181fc21f11b7403a879c9f7e25913c28e8860 loop: point the architect at adoption + add a daily release action (#3566)
  • 45a23a3417145e3bc29867a50c03a50c1945c2f7 test first-agent walkthrough boundaries (#3621)
19 hours ago
wails
wailsapp

Wails v3.0.0-alpha2.111

Wails v3 Alpha Release - v3.0.0-alpha2.111

Added

  • Add HappyTools to community showcase in PR by @Aliuyanfeng
  • Add Indonesian locale support and comprehensive documentation in PR by @triadmoko
  • Add DisableMenu option to WindowsWindow in PR by @leaanthony

Changed

  • Update Taskfile template and CLI to dispatch build/package tasks with GOOS and ARCH in PR by @leaanthony

Fixed

  • Fixes issue with mac window tabbing in PR by @taliesin-ai

Removed

  • Remove German translated MDX files from contributing, features, and guides in PR by @taliesin-ai

🤖 This is an automated nightly release generated from the latest changes on master.

Installation:

go install github.com/wailsapp/wails/v3/cmd/wails3@v3.0.0-alpha2.111

⚠️ Alpha Warning: This is pre-release software and may contain bugs or incomplete features.

20 hours ago
go-micro
micro

v6.3.11

What's Changed

Full Changelog: https://github.com/micro/go-micro/compare/v6.3.10...v6.3.11

1 days ago
wails
wailsapp

Wails v3.0.0-alpha2.110

Wails v3 Alpha Release - v3.0.0-alpha2.110

Added

  • Implement macOS WebView reload and force reload, and add recovery for WebContent process termination in PR by @wayneforrest
  • Add comprehensive German documentation for contributing, features, and guides in PR by @leaanthony
  • Enhance notifications with sound, attachments, scheduling, and update API in PR by @popaprozac

Fixed

  • Recalculate DWM frame on DPI change for frameless windows in PR by @leaanthony
  • Fix DnD dropzone detection failing at non-100% scaling on Windows in PR by @yulesxoxo

🤖 This is an automated nightly release generated from the latest changes on master.

Installation:

go install github.com/wailsapp/wails/v3/cmd/wails3@v3.0.0-alpha2.110

⚠️ Alpha Warning: This is pre-release software and may contain bugs or incomplete features.

1 days ago
grpc-go
grpc

Release 1.82.0

Behavior Changes

  • server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
  • transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
  • balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

  • experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)
    • Special Thanks: @seth-epps
  • client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
    • Special Thanks: @chengxilo
  • server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)
    • Special Thanks: @dfinkel

Bug Fixes

  • xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
  • grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)
    • Special Thanks: @evilgensec
  • stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)
  • encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)
  • channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)
2 days ago
go-micro
micro

v6.3.10

agent: fix StreamAsk tool resolution — reuse the tools instance in setupWithToolHandler so the discoverTools-populated name map is the one the base handler uses.

Generated by Claude Code

2 days ago
wails
wailsapp

Wails v3.0.0-alpha2.109

Wails v3 Alpha Release - v3.0.0-alpha2.109

Added

  • Add code samples to EventsEmit documentation in PR by @iamhabbeboy
  • Add Windows WebView2 visual hosting option in PR by @MerIijn
  • Add Klustr to community showcase documentation in PR by @SametKUM
  • Add Kira to community showcase with new pages and changelog entry in PR by @thiennguyen93
  • Add feedback section to MCP service guide in PR by @taliesin-ai

Changed

  • Server mode now has a first-class production build, consistent with the desktop build tasks (#5693). task build:server builds a production binary by default (-tags server,production, -trimpath, stripped), and accepts DEV=true (development server), OBFUSCATED=true (garble) and EXTRA_TAGS. task run:server runs a development server. Dockerfile.server / task build:docker build the production server (-tags server,production) and the production frontend first; the image defaults to a pure-Go static build on distroless/static, with CGO_ENABLED, GO_IMAGE and RUNTIME_IMAGE exposed as overridable build args for CGO apps.

Fixed

  • Prevent crash when closing window with pending async calls in PR by @leaanthony
  • Prevent window activation when opening hidden apps on Windows in PR by @leaanthony
  • Ensure WebKit request metadata, response completion, and body stream handling run on the GTK main thread in PR by @taliesin-ai
  • Fix Menu.Update() not rebuilding the native menu on GTK4 Linux (#5659, independently diagnosed and fixed by @puneetdixit200 in #5539)
  • Fix crash enumerating macOS screens on display change by copying screen id/name strings and snapshotting the count (#5565, independently diagnosed and fixed by @x-haose in #5584)
  • Fix WebView2 content shrinking then disappearing after dragging a window across mixed-DPI monitors on Windows by re-asserting the controller bounds in the WM_DPICHANGED handler, mirroring the un-minimise DPI resync (#5677)

🤖 This is an automated nightly release generated from the latest changes on master.

Installation:

go install github.com/wailsapp/wails/v3/cmd/wails3@v3.0.0-alpha2.109

⚠️ Alpha Warning: This is pre-release software and may contain bugs or incomplete features.

2 days ago
go-micro
micro

v6.3.9

events: WithStore option lets the stream be backed by a durable store (e.g. the file store) for persistence and replay across restarts.

Generated by Claude Code

3 days ago
unioffice
unidoc

v2.12.0

Release notes - UniOffice v2.12.0

This release contains improvements and bug fixes.

Improvements

  • US-1505 DOCX to PDF footer Y position calculation improvement
  • US-1573 Complete Structured Document Tag (SDT) API for document package – constructors, property/content-type setters, inline (run-level) tags, and recursive discovery across headers/footers/tables/nested SDTs.

Bug Fixes

  • US-1540 DOCX text extraction merging list items and dropping numbering when paragraphs contain hyperlink field codes fix
  • US-1595 XLXS to PDF index-out-of-range panic in spreadsheet/convert.makeCells fix
  • US-1594 DOCX to PDF nil-pointer panic when a list paragraph has w:numId but no w:ilvl fix
  • US-1570 `Presentation.Slides()` panics on pptx where slide-part count != `sldIdLst` length fix
  • US-1524 [CWE-674] Uncontrolled Recursion DoS in DOCX Style/Numbering Walkers fix