[dependabot]

Bumps github.com/gofiber/fiber/v3 from 3.5.0 to 3.6.1.

Release notes

Sourced from github.com/gofiber/fiber/v3's releases.

v3.6.1

🧹 Updates

• Consolidate media-type parameter parsing into internal/mediatype (#4750)
• Fix modernize and revive lint issues (#4759)

🐛 Fixes

• Fix client, session, basicauth and other bugs found in the audit (#4752)

🛠️ Maintenance

• bump github.com/gofiber/utils/v2 from 2.6.1 to 2.6.2 (#4760)
• bump github.com/klauspost/compress from 1.20.1 to 1.20.3 (#4757)
• bump github.com/molecule-man/go-brrr from 1.2.0 to 1.3.0 (#4758)
• bump the golang-modules group with 3 updates (#4755)
• bump release-drafter/release-drafter from 7.9.0 to 7.10.0 (#4756)
• bump actions/setup-node from 7.0.0 to 7.1.0 (#4754)

📚 Documentation

• Sync the documentation with the v3.6.0 code (#4751)

📒 Documentation: https://docs.gofiber.io/

💬 Discord: https://gofiber.io/discord

Full Changelog: gofiber/fiber@v3.6.0...v3.6.1

Thank you @​alexandear, @​gaby, @​ninadsutrave and @​ReneWerner87 for making this release possible.

v3.6.0

⚡ Performance

Fiber v3.6.0 ships with fasthttp v1.75.0. With it, Fiber v3 is back on par with the speed of v2, despite the additional security mechanisms built in since then.

Time per request vs. v2	v3.5.0 (fasthttp v1.73.0)	v3.6.0 (fasthttp v1.75.0)
fasthttp only	+18%	-5%
Static route	+16%	-14%
Route parameter	+15%	-13%
Middleware chain	+13%	-12%
Header lookup	+29%	+3%
Locals	+33%	+5%
JSON response	+6%	-3%
JSON bind	+14%	-2%
Median of all 22 scenarios	+10%	-5%

Negative is faster than v2. v3.6.0 was measured on main three days before the release. All scenarios are published on our benchmarks page, where we now continuously make sure that v3 does not get slower again.

... (truncated)

Commits

• e09ba68 chore: bump version to v3.6.1
• b06eee1 Merge pull request #4752 from gofiber/fix/audit-code-issues
• 3291357 🐛 bug: fix client, session, basicauth and other bugs found in the docs audit
• e090d85 📒 docs: sync the documentation with the v3.6.0 code
• 9d6d7b6 Merge pull request #4750 from ninadsutrave/chore/internal-mediatype
• 7db2534 Merge pull request #4760 from gofiber/dependabot/go_modules/github.com/gofibe...
• 70d6e0f build(deps): bump github.com/gofiber/utils/v2 from 2.6.1 to 2.6.2
• ccbded0 chore(ci): trigger dependabot after gofiber/utils release [skip ci]
• 4106047 Merge pull request #4759 from alexandear-org/refactor/update-golangci-lint-2-14
• 66ac88f ♻️ refactor: modernize code
• Additional commits viewable in compare view

[dokploy-2026-08-17-2bph2p]

🚨 Preview Deployment Blocked - Security Protection

Your pull request was blocked from triggering preview deployments

Why was this blocked?

• User: dependabot[bot]
• Repository: image-optimizer
• Permission Level: none
• Required Level: write, maintain, or admin

How to resolve this:

Option 1: Get Collaborator Access (Recommended)
Ask a repository maintainer to invite you as a collaborator with write permissions or higher.

Option 2: Request Permission Override
Ask a repository administrator to disable security validation for this specific application if appropriate.

For Repository Administrators:

To disable this security check (⚠️ not recommended for public repositories):
Enter to preview settings and disable the security check.

---

This security measure protects against malicious code execution in preview deployments. Only trusted collaborators should have the ability to trigger deployments.

🛡️ Learn more about this security feature

This protection prevents unauthorized users from:

• Executing malicious code on the deployment server
• Accessing environment variables and secrets
• Potentially compromising the infrastructure

Preview deployments are powerful but require trust. Only users with repository write access can trigger them.

[hra42]

@dependabot rebase