v2 from 2.49.2 to 2.50.0 #262

New issue

Closed

opened 2026-03-03 11:56:58 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 11:56:58 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/Finb/bark-server/pull/242
Author: @dependabot[bot]
Created: 10/17/2023
Status: ✅ Merged
Merged: 10/18/2023
Merged by: @mritd

Base: master ← Head: dependabot/go_modules/github.com/gofiber/fiber/v2-2.50.0

📝 Commits (1)

f49165d chore(deps): bump github.com/gofiber/fiber/v2 from 2.49.2 to 2.50.0

📊 Changes

2 files changed (+6 additions, -7 deletions)

View changed files

📝 go.mod (+2 -2)
📝 go.sum (+4 -5)

📄 Description

Bumps github.com/gofiber/fiber/v2 from 2.49.2 to 2.50.0.

Release notes

Sourced from github.com/gofiber/fiber/v2's releases.

v2.50.0

❗ Breaking Changes

Change signatures of GetReqHeaders and GetRespHeaders (#2650)

To allow single and list values under headers according to the rfc standard
- func (c *Ctx) GetReqHeaders() map[string]string
+ func (c *Ctx) GetReqHeaders() map[string][]string
- func (c *Ctx) GetRespHeaders() map[string]string
+ func (c *Ctx) GetRespHeaders() map[string][]string
👮 Security

https://docs.gofiber.io/api/middleware/csrf

🚀 Improvements to the CSRF middleware:

Added support for single-use tokens through the SingleUseToken configuration option.

Optional integration with GoFiber session middleware through the Session and SessionKey configuration options.

Introduction of origin checks for HTTPS connections to verify referer headers.

Implementation of a Double Submit Cookie approach for CSRF token generation and validation when used without Session.

Enhancement of error handling with more descriptive error messages.

The documentation for the CSRF middleware has been enhanced with the addition of the new options and best practices to improve security.

Thank you @sixcolors

🚀 New

Cookie parser (#2656) https://docs.gofiber.io/api/ctx#cookieparser
// Field names should start with an uppercase letter
type Person struct {
    Name     string  `cookie:"name"`
    Age      int     `cookie:"age"`
    Job      bool    `cookie:"job"`
}
// Example route
app.Get("/", func(c *fiber.Ctx) error {
    p := new(Person)
    // This method is similar to BodyParser, but for cookie parameters
    if err := c.CookieParser(p); err != nil {
</tr></table> 

... (truncated)

Commits

af39998 Add more description to GetClientInfo
c864da0 prepare release v2.50.0
8c3916d Merge pull request from GHSA-94w9-97p3-p368
d736d3a 🐛 bug: fix path checking on route naming (#2676)
cb89cce Merge pull request #2675 from jscappini/patch-1
d974cf3 Fix typo in requestid.md
e70b2e2 Cookie parser (#2656)
bb90fc1 fix lint errors
b50d91d Merge pull request from GHSA-94w9-97p3-p368
9292a36 🐛 bug: fix nil pointer dereference issue on idempotency middleware (#2668)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/Finb/bark-server/pull/242 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 10/17/2023 **Status:** ✅ Merged **Merged:** 10/18/2023 **Merged by:** [@mritd](https://github.com/mritd) **Base:** `master` ← **Head:** `dependabot/go_modules/github.com/gofiber/fiber/v2-2.50.0` --- ### 📝 Commits (1) - [`f49165d`](https://github.com/Finb/bark-server/commit/f49165d177e8c1403836d85d36630d26142ab50b) chore(deps): bump github.com/gofiber/fiber/v2 from 2.49.2 to 2.50.0 ### 📊 Changes **2 files changed** (+6 additions, -7 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+2 -2) 📝 `go.sum` (+4 -5) </details> ### 📄 Description Bumps [github.com/gofiber/fiber/v2](https://github.com/gofiber/fiber) from 2.49.2 to 2.50.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gofiber/fiber/releases">github.com/gofiber/fiber/v2's releases</a>.</em></p> <blockquote> <h2>v2.50.0</h2> <h2>❗ Breaking Changes</h2> <ul> <li>Change signatures of GetReqHeaders and GetRespHeaders (<a href="https://redirect.github.com/gofiber/fiber/issues/2650">#2650</a>)</li> </ul> <blockquote> <p>To allow single and list values under headers according to the <a href="https://datatracker.ietf.org/doc/html/rfc9110#section-5.2">rfc standard</a></p> </blockquote> <pre lang="diff"><code>- func (c *Ctx) GetReqHeaders() map[string]string + func (c *Ctx) GetReqHeaders() map[string][]string </code></pre> <pre lang="diff"><code>- func (c *Ctx) GetRespHeaders() map[string]string + func (c *Ctx) GetRespHeaders() map[string][]string </code></pre> <h2>👮 Security</h2>  <p><a href="https://docs.gofiber.io/api/middleware/csrf">https://docs.gofiber.io/api/middleware/csrf</a></p> <p>🚀 Improvements to the CSRF middleware:</p> <ul> <li>Added support for single-use tokens through the <code>SingleUseToken</code> configuration option.</li> <li>Optional integration with GoFiber session middleware through the <code>Session</code> and <code>SessionKey</code> configuration options.</li> <li>Introduction of origin checks for HTTPS connections to verify referer headers.</li> <li>Implementation of a Double Submit Cookie approach for CSRF token generation and validation when used without <code>Session</code>.</li> <li>Enhancement of error handling with more descriptive error messages.</li> <li>The documentation for the CSRF middleware has been enhanced with the addition of the new options and best practices to improve security.</li> </ul> <p>Thank you <a href="https://github.com/sixcolors"><code>@sixcolors</code></a></p>  <h2>🚀 New</h2> <ul> <li>Cookie parser (<a href="https://redirect.github.com/gofiber/fiber/issues/2656">#2656</a>) <a href="https://docs.gofiber.io/api/ctx#cookieparser">https://docs.gofiber.io/api/ctx#cookieparser</a></li> </ul> <pre lang="go"><code>// Field names should start with an uppercase letter type Person struct { Name string `cookie:"name"` Age int `cookie:"age"` Job bool `cookie:"job"` } // Example route app.Get("/", func(c *fiber.Ctx) error { p := new(Person) // This method is similar to BodyParser, but for cookie parameters if err := c.CookieParser(p); err != nil { </tr></table> </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gofiber/fiber/commit/af3999835f33943c7d63aa1cfc70e64e94319eca"><code>af39998</code></a> Add more description to GetClientInfo</li> <li><a href="https://github.com/gofiber/fiber/commit/c864da091dc188d8463d24d1d755d20897cd2d7b"><code>c864da0</code></a> prepare release v2.50.0</li> <li><a href="https://github.com/gofiber/fiber/commit/8c3916dbf4ad2ed427d02c6eb63ae8b2fa8f019a"><code>8c3916d</code></a> Merge pull request from GHSA-94w9-97p3-p368</li> <li><a href="https://github.com/gofiber/fiber/commit/d736d3a64433385b0fc0189e16a36a2f4facb67d"><code>d736d3a</code></a> :bug: bug: fix path checking on route naming (<a href="https://redirect.github.com/gofiber/fiber/issues/2676">#2676</a>)</li> <li><a href="https://github.com/gofiber/fiber/commit/cb89cce4ca087f9b50c6c56b5e6e9e314286d86e"><code>cb89cce</code></a> Merge pull request <a href="https://redirect.github.com/gofiber/fiber/issues/2675">#2675</a> from jscappini/patch-1</li> <li><a href="https://github.com/gofiber/fiber/commit/d974cf3c990060245447c69e4b7c265240663fbd"><code>d974cf3</code></a> Fix typo in requestid.md</li> <li><a href="https://github.com/gofiber/fiber/commit/e70b2e28d66473ab6ad0d69f788dd2a6009c247e"><code>e70b2e2</code></a> Cookie parser (<a href="https://redirect.github.com/gofiber/fiber/issues/2656">#2656</a>)</li> <li><a href="https://github.com/gofiber/fiber/commit/bb90fc11875666048182e81511c827316f4a54ee"><code>bb90fc1</code></a> fix lint errors</li> <li><a href="https://github.com/gofiber/fiber/commit/b50d91d58ecdff2a330bf07950244b6c4caf65b1"><code>b50d91d</code></a> Merge pull request from GHSA-94w9-97p3-p368</li> <li><a href="https://github.com/gofiber/fiber/commit/9292a36e28c05e5b91ccdbcd7707a576594712ec"><code>9292a36</code></a> :bug: bug: fix nil pointer dereference issue on idempotency middleware (<a href="https://redirect.github.com/gofiber/fiber/issues/2668">#2668</a>)</li> <li>Additional commits viewable in <a href="https://github.com/gofiber/fiber/compare/v2.49.2...v2.50.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/gofiber/fiber/v2&package-manager=go_modules&previous-version=2.49.2&new-version=2.50.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>