File anubis.changes of Package anubis
------------------------------------------------------------------- Sat Dec 27 18:14:49 UTC 2025 - Yoshio Sato <vasua.ukraine@gmail.com> - Update to the new upstream release 1.24.0 * (feat) Add cluster support to redis/vaultkey store by @egimbernat in #1276 * Add Renovate to Docker clients by @DrJosh9000 in #1267 * Fix challenge validation panic when follow-up hits ALLOW by @JasonLovesDoggo in #1278 * Implement FCrDNS and other DNS features by @btomaev in #1308 * Pass the remote IP to the proxied application by @eXpl0it3r in #1298 * Show how to use subrequest auth with Caddy by @tbodt in #1312 * Update is.json by @sveinki in #1241 * add Polish language translation by @bplajzer in #1309 * build(deps): bump actions-hub/kubectl from 1.34.1 to 1.34.2 in the github-actions group by @dependabot[bot] in #1303 * build(deps): bump github.com/testcontainers/testcontainers-go from 0.39.0 to 0.40.0 in the gomod group across 1 directory by @dependabot[bot] in #1288 * build(deps): bump go deps by @JasonLovesDoggo in #1287 * build(deps): bump the github-actions group across 1 directory with 4 updates by @dependabot[bot] in #1340 * build(deps): bump the github-actions group with 3 updates by @dependabot[bot] in #1262 * build(deps): bump the github-actions group with 3 updates by @dependabot[bot] in #1317 * build(deps): bump the gomod group across 1 directory with 6 updates by @dependabot[bot] in #1341 * build(deps): bump the gomod group with 5 updates by @dependabot[bot] in #1316 * build(deps): bump the npm group with 2 updates by @dependabot[bot] in #1339 * build(deps-dev): bump esbuild from 0.25.12 to 0.27.0 in the npm group by @dependabot[bot] in #1260 * chore: add dependabot cooldown by @Xe in #1302 * ci: add go mod tidy check workflow by @Xe in #1300 * docs: clarify usage of PUBLIC_URL and REDIRECT_DOMAINS in installatio… by @JasonLovesDoggo in #1286 * docs: use nginx http2 directive instead of deprecated http2 listen parameter by @kouhaidev in #1251 * feat(internal/headers): extend debug logging of X-Forwarded-For middlewares by @DerRockWolf in #1269 * feat(lib): expose WEIGH matches as prometheus metrics by @Xe in #1277 * feat(localization): Add Ukrainian language translation by @nykula in #1044 * feat(store/valkey): Add Redis(R) Sentinel support by @Xe in #1294 * feat: Add thai language. by @karorogunso in #900 * feat: first implementation of honeypot logic by @Xe in #1342 * feat: writing logs to the filesystem with rotation support by @Xe in #1299 * fix(config): deprecate the report_as field for challenges by @Xe in #1311 * fix(data): add services folder to embedded filesystem by @Xe in #1259 * fix(data/docker-client): allow some more OCI clients through by @Xe in #1258 * fix(default-config): must-accept-rule on browsers only by @Xe in #1350 * fix(default-config): remove browser detection logic by @Xe in #1360 * fix(docs): use node:lts by @Xe in #1274 * fix(ogtags): respect target host/SNI/insecure flags in OG passthrough by @JasonLovesDoggo in #1283 * fix(run): mark openrc service script as executable by @kouhaidev in #1272 * fix(tests): make CVE-2025-24369 regression deterministic by @JasonLovesDoggo in #1285 * fix: pin Node.js and Go versions in CI configuration files by @JasonLovesDoggo in #1318 * i18n(de): improve consistency and wording by @michi-onl in #1348 * perf: field-align struct definitions to cut padding by @JasonLovesDoggo in #1284 * test(deps): update dependencies to latest versions by @JasonLovesDoggo in #1289 * test: Valkey test improvements for testcontainers by @SlyEcho in #1280 * test: ipv4 in v6 address checking by @SlyEcho in #1271 ------------------------------------------------------------------- Sat Nov 22 15:02:59 UTC 2025 - Yoshio Sato <vasua.ukraine@gmail.com> - Add block-tencent-cloud-by-default.patch: reanable block tencent-cloud by default ------------------------------------------------------------------- Wed Nov 12 17:26:38 UTC 2025 - Yoshio Sato <vasua.ukraine@gmail.com> - Packaging: remove not needed build dependencies ------------------------------------------------------------------- Sat Nov 8 13:00:03 UTC 2025 - Yoshio Sato <vasua.ukraine@gmail.com> - Update to the new upstream release 1.23.1 * build(deps): bump github/codeql-action from 4.31.0 to 4.31.2 in the github-actions group by @dependabot[bot] in #1239 * build(deps): bump the gomod group across 1 directory with 18 updates by @dependabot[bot] in #1237 * build(deps-dev): bump the npm group across 1 directory with 3 updates by @dependabot[bot] in #1238 * chore(default-config): remove Tencent Cloud block rule by @Xe in #1227 * ci: add asset build verification workflow by @Xe in #1254 * feat(blog): a short post on how to file abuse reports by @Xe in #1230 * fix(data): add ruleset to explicitly allow Docker / OCI clients by @Xe in #1253 * fix: SERVE_ROBOTS_TXT works again by @Xe in #1229 ------------------------------------------------------------------- Thu Oct 30 12:22:55 UTC 2025 - Yoshio Sato <vasua.ukraine@gmail.com> - Update to the new upstream release 1.23.0 * Add Door43 link to known instances documentation by @richmahn in #1136 * Update Nynorsk translation by @turtlegarden in #1143 * Update nl.json removing literal translated cookie 'koekje' with 'cookie' by @jieter in #1126 * Updated REDIRECT_DOMAINS documentation by @zc-devs in #1171 * Xe/demote temporal assurance by @Xe in #1090 * Xe/show error state by @Xe in #1203 * build(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible by @dependabot[bot] in #1131 * build(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible in /test by @dependabot[bot] in #1130 * build(deps): bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 by @dependabot[bot] in #1132 * build(deps): bump the github-actions group across 1 directory with 6 updates by @dependabot[bot] in #1221 * build(deps): bump the github-actions group across 1 directory with 8 updates by @dependabot[bot] in #1071 * build(deps): bump the github-actions group with 3 updates by @dependabot[bot] in #1118 * build(deps): bump the github-actions group with 4 updates by @dependabot[bot] in #1093 * build(deps): bump the npm group with 2 updates by @dependabot[bot] in #1117 * build(deps-dev): bump esbuild from 0.25.9 to 0.25.10 in the npm group by @dependabot[bot] in #1147 * chore: port client-side JS to TypeScript by @Xe in #1100 * chore: remove copilot instructions by @Xe in #1218 * ci(ssh): don't print uname -av output by @Xe in #1114 * ci: add aarch64 for ssh CI by @Xe in #1112 * convert issue templates into issue forms by @NetSysFire in #1115 * docs(installation): add SLOG_LEVEL environment variable to configuration by @JasonLovesDoggo in #1086 * docs: add link to preact in challenge list by @agoujot in #1111 * docs: add reminder for verified signatures in PR template by @JasonLovesDoggo in #1092 * docs: document some missing env vars by @JasonLovesDoggo in #1087 * docs: point get started button to the per-environment setup docs by @Xe in #1213 * enable auto setting of SNI based on host header by @jmcclelland in #1129 * feat(default-config): block tencent cloud by default by @Xe in #1216 * feat(expressions): add contentLength to bot expressions by @Xe in #1120 * feat(lib): Add option for adding difficulty field to JWT claims by @Earl0fPudding in #1063 * feat(lib/store): add s3api storage backend by @Xe in #1089 * feat(metarefresh): randomly use the Refresh header by @Xe in #1133 * feat(store/bbolt): implement actor pattern by @Xe in #1107 * feat: Warn on missing signing keys when persisting challenges by @JasonLovesDoggo in #1088 * feat: allow to set cookie sameSite mode and fallback to Lax mode if cookie is not secure by @vaab in #1105 * feat: default config macro by @Xe in #1186 * feat: support reading real client IP from a custom header by @avioletheart in #1138 * fix!(policy/checker): make List and-like by @Xe in #1217 * fix(algorithms/fast): fix fast challenge on insecure contexts by @Xe in #1198 * fix(cmd/containerbuild): support commas in --docker-tags by @Xe in #1099 * fix(decaymap): fix lock convoy by @Xe in #1106 * fix(default-config): make the default config far less paranoid by @Xe in #1179 * fix(default-config): remove preact challenge by @Xe in #1184 * fix(default-config): sometimes browsers don't send Upgrade-Insecure-Requests by @Xe in #1189 * fix(lib): close open redirect when in subrequest mode by @Xe in #1222 * fix(lib): de-flake package lib tests by @Xe in #1187 * fix(lib): enable multiple consecutive slash support by @Xe in #1155 * fix(lib): serve CSS properly by @Xe in #1158 * fix(robots2policy): handle multiple user agents under one block by @JasonLovesDoggo in #925 * fix(run/openrc): truncate runtime directory before starting Anubis by @CyberTailor in #1122 * fix(store/bbolt): remove actorify by @Xe in #1215 * fix: mend auth cookie name stutter by @Xe in #1139 * link to docs site from readme by @pushcx in #1214 * locale: Update Nynorsk translation by @turtlegarden in #1204 * security: npm audit fix for GHSA-hfm8-9jrf-7g9w et. al by @Xe in #1098 ------------------------------------------------------------------- Fri Oct 24 14:05:39 UTC 2025 - Yoshio Sato <vasua.ukraine@gmail.com> - Update packaging * use source with the vendor already installed and precompiled JS * remove _serivce and prepare-sources.bash in favor of simplicity * start using source signature ------------------------------------------------------------------- Mon Oct 20 17:18:52 UTC 2025 - Yoshio Sato <vasua.ukraine@gmail.com> - Initial release of anubis at v1.22.0
