Skip to content

chore(deps): bump github.com/gofiber/fiber/v3 from 3.5.0 to 3.6.1 in the go-modules group - #48

Merged
rennf93 merged 1 commit into
masterfrom
dependabot/go_modules/go-modules-81eccfd1aa
Oct 18, 2026
Merged

rennf93 merged 1 commit into
masterfrom
dependabot/go_modules/go-modules-81eccfd1aa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 1 update: github.com/gofiber/fiber/v3.

Updates github.com/gofiber/fiber/v3 from 3.5.0 to 3.6.1

Release notes

Sourced from github.com/gofiber/fiber/v3's releases.

v3.6.1

🧹 Updates

  • Consolidate media-type parameter parsing into internal/mediatype (#4750)
  • Fix modernize and revive lint issues (#4759)

🐛 Fixes

  • Fix client, session, basicauth and other bugs found in the audit (#4752)

🛠️ Maintenance

  • bump github.com/gofiber/utils/v2 from 2.6.1 to 2.6.2 (#4760)
  • bump github.com/klauspost/compress from 1.20.1 to 1.20.3 (#4757)
  • bump github.com/molecule-man/go-brrr from 1.2.0 to 1.3.0 (#4758)
  • bump the golang-modules group with 3 updates (#4755)
  • bump release-drafter/release-drafter from 7.9.0 to 7.10.0 (#4756)
  • bump actions/setup-node from 7.0.0 to 7.1.0 (#4754)

📚 Documentation

  • Sync the documentation with the v3.6.0 code (#4751)

📒 Documentation: https://docs.gofiber.io/

💬 Discord: https://gofiber.io/discord

Full Changelog: gofiber/fiber@v3.6.0...v3.6.1

Thank you @​alexandear, @​gaby, @​ninadsutrave and @​ReneWerner87 for making this release possible.

v3.6.0

⚡ Performance

Fiber v3.6.0 ships with fasthttp v1.75.0. With it, Fiber v3 is back on par with the speed of v2, despite the additional security mechanisms built in since then.

Time per request vs. v2 v3.5.0 (fasthttp v1.73.0) v3.6.0 (fasthttp v1.75.0)
fasthttp only +18% -5%
Static route +16% -14%
Route parameter +15% -13%
Middleware chain +13% -12%
Header lookup +29% +3%
Locals +33% +5%
JSON response +6% -3%
JSON bind +14% -2%
Median of all 22 scenarios +10% -5%

Negative is faster than v2. v3.6.0 was measured on main three days before the release. All scenarios are published on our benchmarks page, where we now continuously make sure that v3 does not get slower again.

... (truncated)

Commits
  • e09ba68 chore: bump version to v3.6.1
  • b06eee1 Merge pull request #4752 from gofiber/fix/audit-code-issues
  • 3291357 🐛 bug: fix client, session, basicauth and other bugs found in the docs audit
  • e090d85 📒 docs: sync the documentation with the v3.6.0 code
  • 9d6d7b6 Merge pull request #4750 from ninadsutrave/chore/internal-mediatype
  • 7db2534 Merge pull request #4760 from gofiber/dependabot/go_modules/github.com/gofibe...
  • 70d6e0f build(deps): bump github.com/gofiber/utils/v2 from 2.6.1 to 2.6.2
  • ccbded0 chore(ci): trigger dependabot after gofiber/utils release [skip ci]
  • 4106047 Merge pull request #4759 from alexandear-org/refactor/update-golangci-lint-2-14
  • 66ac88f ♻️ refactor: modernize code
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-modules group with 1 update: [github.com/gofiber/fiber/v3](https://github.com/gofiber/fiber).


Updates `github.com/gofiber/fiber/v3` from 3.5.0 to 3.6.1
- [Release notes](https://github.com/gofiber/fiber/releases)
- [Commits](gofiber/fiber@v3.5.0...v3.6.1)

---
updated-dependencies:
- dependency-name: github.com/gofiber/fiber/v3
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from rennf93 as a code owner October 18, 2026 12:42
@dependabot dependabot Bot added dependencies go.mod or go.sum changes go Pull requests that update go code labels Oct 18, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Thanks for opening your first pull request on fiber-guard!

Quick checklist before review (most of these are enforced by CI, but worth a glance):

  • The PR body says Closes #N for an open issue (the issue-link check enforces it); chores take the no-issue label
  • gofmt -l . reports no files
  • go vet ./... is clean
  • go test ./... passes (add -tags integration with Redis for the integration suite)
  • go build ./... compiles the adapter and the example apps
  • govulncheck ./... is clean
  • No nolint / unchecked-error shortcuts; pre-existing violations in touched files are fixed
  • If you changed adapter behavior, it stays aligned with gin-guard and nethttp-guard and the README reflects it

See README.md for the adapter contract and AGENTS.md for the boundary rules.

Welcome aboard - a maintainer will review shortly.

@github-actions github-actions Bot added the build Module files / packaging label Oct 18, 2026
@rennf93
rennf93 merged commit bcb70ae into master Oct 18, 2026
15 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-modules-81eccfd1aa branch October 18, 2026 13:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

build Module files / packaging dependencies go.mod or go.sum changes go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant