v2.5.4

What's Changed

• Improve tests for streaming response endpoints by @mccutchen in #105
• feat: ensure that 404 responses indicate that they originate from go-httpbin by @chinaran in #107

New Contributors

• @chinaran made their first contribution in #107

Full Changelog: v2.5.3...v2.5.4

v2.5.3

What's Changed

• More helpful error when allowed redirect domains are defined by @mccutchen in #104

Full Changelog: v2.5.2...v2.5.3

v2.5.2

What's Changed

• Refactor package main to enable testing of CLI interface by @mccutchen in #98
• Build examples during testing by @mccutchen in #99
• Make httpbin.HTTPBin implement http.Handler interface by @mccutchen in #100
• cmd: fix help output by @mccutchen in #101
• Extract option funcs and response types into separate files for clarity by @mccutchen in #102

Full Changelog: v2.5.1...v2.5.2

v2.5.1

Notable changes

The /redirect-to endpoint will now validate the domain of the given destination URL against an allowlist if configured with the -allowed-redirect-domains CLI argument or ALLOW_REDIRECT_DOMAINS env var. This allows operators of public go-httpbin instances like httpbingo.org to eliminate an open redirect, as highlighted in this security advisory.

What's Changed

• Enable CodeQL security scanning by @mccutchen in #96
• Allow restricting redirect destinations by @mccutchen in #97

Full Changelog: v2.5.0...v2.5.1

v2.5.0

Notable changes

Improved compatibility with the original httpbin (thanks @anuraaga!)

• The /anything endpoint to support GET requests with bodies (#89)
• <, >, and & characters in JSON responses are no longer encoded via \uXXX escape sequences (#89)
• JSON response bodies are now pretty-printed for better readability (#94)

Responses to HEAD requests no longer include a Content-Length header

• See #94 for more context

All changes

• Add workflow to push docker images for new releases by @mccutchen in #87
• More comprehensive tests for HTTP verb endpoints by @mccutchen in #88
• Improve compatibility with httpbin for requests with bodies by @anuraaga in #89
• Disable pushes to ghcr.io on release by @mccutchen in #92
• Extract inline vars from the status handler by @mccutchen in #93
• Rework JSON serialization by @mccutchen in #94
• build: stop being clever about when to rebuild by @mccutchen in #95

New Contributors

• @anuraaga made their first contribution in #89

Full Changelog: v2.4.2...v2.5.0

v2.4.2

What's Changed

• Run all tests in parallel by @mccutchen in #82
• Add /anything route by @matheusfm in #83
• Update golang to 1.19 by @x70b1 in #84

New Contributors

• @matheusfm made their first contribution in #83
• @x70b1 made their first contribution in #84

Full Changelog: v2.4.1...v2.4.2

v2.4.1

What's Changed

• Add /hostname endpoint in #81 (originally proposed by @uromahn in #66)

Full Changelog: v2.4.0...v2.4.1

v2.4.0

What's Changed

Features/functionality

• Use go:embed for static assets #77
• Add user agent and client IP to instrumentation #78
• Fix link to Kenneth Reitz by @st0le in #71

Documentation

• Add example demonstrating custom instrumentation by @mccutchen in #75

Build

• Update test matrix and fix deploy action by @mccutchen in #70
• Misc build & CI fixes by @mccutchen in #76
• Drop platform-specific deployment code and configuration by @mccutchen in #79

Breaking changes

• With this release, go-httpbin requires Go 1.16 or newer, as it now uses the go:embed functionality (see #77)

New Contributors

• @st0le made their first contribution in #71

Full Changelog: v2.3.0...v2.4.0

v2.3.0

What's Changed

• Build docker images for amd64 and arm64 by @danbf in #65
• Fix lingering references to the old master branch by @mccutchen in #69
• Close XSS issue in /base64 endpoint (fixes #67) by @mccutchen in #68

New Contributors

• @danbf made their first contribution in #65

Full Changelog: v2.2.2...v2.3.0

v2.2.2

• ef914ab Update /ip endpoint to return single origin IP