v3.5.0 v3.6.0

low risk

gofiber/fiberAug 13, 2026 → Oct 12, 202660 days between releases

What's New

Upgraded fasthttp to v1.75.0 for performance gains and added tokenless CSRF protection.

New Features

  • csrf.NewCrossOriginProtection for tokenless CSRF protection
  • c.Endpoint() for middleware look-ahead without advancing the handler chain
  • app.Render for rendering templates to any io.Writer
  • New context helpers like Bearer(), Origin(), Elapsed(), and Del()
  • c.SetLocal for setting context locals

Improvements

  • Upgraded to fasthttp v1.75.0 for significant performance gains
  • Improved memory usage in middleware and routing components
  • Faster header lookup and JSON operations via fasthttp upgrade

Upgrade Notes

Upgrade is safe and additive. The new CSRF middleware is optional. Ensure your dependency pinning allows fasthttp v1.75.0.

The Two Releases

v3.5.0

v3.5.0

Aug 13, 2026· 2 months ago

This release introduces security hardening for the proxy middleware, custom binding precedence, and a new fast path for unmatched routes. It also includes significant performance optimizations in route matching and various bug fixes.

Full release notes
v3.6.0

v3.6.0

Oct 12, 2026· 9 days ago

This release focuses on performance optimization by upgrading to fasthttp v1.75.0, bringing v3 back to v2 speeds. It introduces a new tokenless CSRF protection mechanism, expands context helpers, and improves memory usage in various middleware and routing components.

Full release notes