opensearch: from_dsn("https://...") now verifies server certificates by default (verify_certs=True, also the new OpenSearchConfig default); pass verify_certs=False explicitly to opt out
errors: HealthError.message is always "<ExceptionType>: <message>"; tracebacks no longer appear in messages, responses, or debug payloads
url: UrlHealthCheck raises ValueError for https URLs combining basic-auth credentials with verify_ssl=False
rabbitmq: RabbitMQConfig raises ValueError when the default guest/guest credentials target a non-loopback host
execution: parallel probe runs are capped at 8 concurrent checks by default (max_concurrency); set max_concurrency=None to restore unbounded gathering
kafka: start the admin client inside the ensure-client lock so concurrent first checks cannot double-start it
rabbitmq: discard cached connections reporting is_closed and open a channel per check so the broker actually answers
function: detect callable instances with async def __call__ instead of sending them to the executor and reporting the unawaited coroutine as healthy
redis: await any awaitable ping() result, not only coroutines
execution: serialize ProbeRunner.close() and resource tracking behind an internal lock
ci: validate the environment-provided Compose image when the pin variable is exported, and catch unstable tag keywords (latest, alpha, beta, nightly, preview) anywhere in a tag
execution: add ProbeRunner class — async context manager for running health checks outside of ASGI applications; supports custom run_policy, probe options, timeout handling, and resource cleanup via await runner.close()
execution: add RunPolicy dataclass to configure probe execution — mode (strict/reporting), execution (sequential/parallel), probe_timeout_ms, and health_evaluation (all_required/partial_allowed)
models: add HealthError exception model with structured fields: code (error code), message (human-readable), duration_ms, timeout_ms, and meta (additional context with automatic secret redaction)
checks: add optional config object: all connection-based checks accept config: XConfig | None and build from **kwargs when config is None; config dataclasses in fast_healthchecks.checks.configs
url: when block_private_hosts=True, resolve URL host before request and reject loopback/private IPs (SSRF and DNS rebinding protection)
integrations: add healthcheck_shutdown, close_probes, run_probe for resource cleanup and non-ASGI usage
integrations: add runner injection — all integration functions (health(), healthcheck_shutdown, run_probe, ProbeAsgi, HealthcheckRouter) accept optional runner parameter to reuse ProbeRunner instances across requests
errors: add centralized error mapping via map_exception_to_health_error() — maps common exceptions (TimeoutError, ValueError, OSError subclasses) to HealthError with appropriate error codes and metadata
integrations: add HealthcheckRouter.close() for FastAPI lifespan shutdown
probe: add allow_partial_failure option (healthy when at least one check passes)
checks: add aclose() to Redis, Kafka, Mongo, OpenSearch, RabbitMQ, URL checks for client cleanup
kafka: add from_dsn() and client caching
exceptions: introduce documented exception hierarchy (HealthCheckError, HealthCheckTimeoutError, HealthCheckSSRFError). Timeout and SSRF validation now raise these subclasses; except asyncio.TimeoutError and except ValueError still work. See API reference for details.
ci: bump workflow uses CHANGELOG.md only; optional input increment (PATCH/MINOR/MAJOR); replace ## Unreleased header before bump for custom release notes, single commit per run
docker: add healthchecks to Compose services, Kafka waits for healthy Zookeeper
checks: config dataclasses in configs.py; ToDictMixin / _build_dict use config for serialization; long parameter lists replaced by single optional config (removes need for PLR0913 noqa in check constructors)
integrations: unify probe execution: ProbeAsgi and run_probe share the same check execution and timeout logic in integrations.base
tests: integration checks use async fixtures with await check.aclose() in teardown; remove PytestUnraisableExceptionWarning suppression from conftest
checks: type healthcheck_safe with typing.Concatenate and remove both type: ignore in _base.py for the decorator
integrations: HealthcheckRouter, health() (FastStream/Litestar), ProbeAsgi, and build_health_routes now accept only options: ProbeRouteOptions | None (see Breaking changes)
integrations: HealthcheckRouter, health() (FastStream/Litestar), ProbeAsgi, and build_health_routes now accept only options: ProbeRouteOptions | None. Passing debug, prefix, success_handler, etc. directly is no longer supported. Migration: build options with build_probe_route_options(debug=..., prefix=..., ...) and pass the result as options=. Example: HealthcheckRouter(Probe(...), options=build_probe_route_options(debug=True, prefix="/health")).
models: class HealthcheckReport renamed to HealthCheckReport. Migration: update imports and usages to HealthCheckReport.
probe: type of Probe.checks changed from Iterable[Check] to Sequence[Check]. Migration: pass a list or tuple of checks, not a generator or one-shot iterable.
dependencies: optional extras pydantic and msgspec removed. DSN and validation no longer use Pydantic. Minimum dependency versions updated (see pyproject.toml). Migration: remove pydantic or msgspec extras from your dependencies and upgrade packages to the versions specified in pyproject.toml if needed.