Jeremy
8ee0d0403a
Merge pull request #949 from Wikid82/renovate/migrate-config
...
chore(config): migrate Renovate config
2026-04-15 13:07:10 -04:00
renovate[bot]
9dab9186e5
chore(config): migrate config .github/renovate.json
2026-04-15 17:05:08 +00:00
Jeremy
83b361ae57
Merge pull request #938 from Wikid82/nightly
...
Weekly: Promote nightly to main (2026-04-13)
2026-04-13 08:48:06 -04:00
Jeremy
7bd3a73bcf
Merge pull request #935 from Wikid82/bot/update-geolite2-checksum
...
chore(docker): update GeoLite2-Country.mmdb checksum
2026-04-13 00:42:15 -04:00
Wikid82
00ba5b3650
chore(docker): update GeoLite2-Country.mmdb checksum
...
Automated checksum update for GeoLite2-Country.mmdb database.
Old: f5e80a9a3129d46e75c8cccd66bfac725b0449a6c89ba5093a16561d58f20bda
New: b018842033872f19ed9ccefb863ec954f8024db2ae913d0d4ea14e35ace4eba1
Auto-generated by: .github/workflows/update-geolite2.yml
2026-04-13 02:59:03 +00:00
Jeremy
062b86642d
Merge pull request #927 from Wikid82/feature/beta-release
...
fix: dependency updates, CVE suppression management, and Renovate version constraints
2026-04-10 16:32:51 -04:00
GitHub Actions
a5724aecf9
fix: update indirect dependencies for golang.org/x/arch, modernc.org/libc, and modernc.org/sqlite to latest versions
2026-04-10 19:22:04 +00:00
GitHub Actions
53dccbe82b
fix: update baseline-browser-mapping and call-bind versions for security and compatibility
2026-04-10 19:22:04 +00:00
Jeremy
8d6645415a
Merge pull request #926 from Wikid82/renovate/feature/beta-release-non-major-updates
...
chore(deps): update non-major-updates (feature/beta-release)
2026-04-10 15:21:01 -04:00
renovate[bot]
4cfcc9aa02
chore(deps): update non-major-updates
2026-04-10 19:18:28 +00:00
Jeremy
5d384e4afa
Merge pull request #925 from Wikid82/renovate/feature/beta-release-actions-github-script-9.x
...
chore(deps): update actions/github-script action to v9 (feature/beta-release)
2026-04-10 15:17:21 -04:00
Jeremy
5bf25fdebc
Merge pull request #924 from Wikid82/renovate/feature/beta-release-non-major-updates
...
fix(deps): update non-major-updates (feature/beta-release)
2026-04-10 15:17:05 -04:00
Jeremy
253d1ddd29
Merge branch 'feature/beta-release' into renovate/feature/beta-release-actions-github-script-9.x
2026-04-10 11:58:09 -04:00
Jeremy
5eab41b559
Merge branch 'feature/beta-release' into renovate/feature/beta-release-non-major-updates
2026-04-10 11:57:50 -04:00
GitHub Actions
a076bb3265
chore(security): re-evaluate overdue CVE suppressions
2026-04-10 15:56:43 +00:00
Jeremy
9c85d9e737
Merge branch 'feature/beta-release' into renovate/feature/beta-release-actions-github-script-9.x
2026-04-10 11:41:55 -04:00
Jeremy
1de4ce6729
Merge branch 'feature/beta-release' into renovate/feature/beta-release-non-major-updates
2026-04-10 11:41:36 -04:00
GitHub Actions
8e0f88e8bd
fix: add suppression for CVE-2026-32286 due to pgproto3/v2 buffer overflow vulnerability
2026-04-10 15:39:52 +00:00
GitHub Actions
36460a884e
fix: enforce version constraints for pgx and go-jose modules to maintain compatibility
2026-04-10 15:26:36 +00:00
renovate[bot]
585ae9494d
chore(deps): update actions/github-script action to v9
2026-04-10 15:11:56 +00:00
renovate[bot]
ed9d6fe5d8
fix(deps): update non-major-updates
2026-04-10 15:11:47 +00:00
Jeremy
f0147b1315
Merge pull request #921 from Wikid82/feature/beta-release
...
fix: resolve 5 HIGH-severity CVEs blocking nightly container image scan
2026-04-09 21:13:01 -04:00
GitHub Actions
615e5a95f5
fix: downgrade pgx/v4 to v4.18.3 to address buffer overflow vulnerability
2026-04-09 19:09:25 +00:00
Jeremy
5b85d18217
Merge pull request #923 from Wikid82/renovate/feature/beta-release-github.com-jackc-pgx-v4-5.x
...
chore(deps): update module github.com/jackc/pgx/v4 to v5 (feature/beta-release)
2026-04-09 14:31:42 -04:00
renovate[bot]
f05c24dd66
chore(deps): update module github.com/jackc/pgx/v4 to v5
2026-04-09 18:24:32 +00:00
GitHub Actions
fd11279aa3
fix: update security policy for CVE-2026-31790 and CVE-2026-2673 vulnerabilities
2026-04-09 17:59:56 +00:00
GitHub Actions
59282952b0
fix(ci): provide Go 1.26.2 toolchain for Renovate dependency lookups
2026-04-09 17:55:51 +00:00
GitHub Actions
8742c76d52
fix: add Grype ignore for unfixed Alpine OpenSSL CVE-2026-31790
...
No upstream fix available for libcrypto3/libssl3 in Alpine 3.23.3.
Accepted risk documented in SECURITY.md. Monitoring Alpine security
advisories for patch availability.
2026-04-09 17:52:04 +00:00
Jeremy
9c0193e812
Merge pull request #922 from Wikid82/renovate/feature/beta-release-non-major-updates
...
fix(deps): update non-major-updates (feature/beta-release)
2026-04-09 13:42:52 -04:00
renovate[bot]
64465e1cd9
fix(deps): update non-major-updates
2026-04-09 17:27:46 +00:00
GitHub Actions
580e20d573
fix: resolve 5 HIGH-severity CVEs blocking nightly container image scan
...
Patch vulnerable transitive dependencies across all three compiled
binaries in the Docker image (backend, Caddy, CrowdSec):
- go-jose/v3 and v4: JOSE/JWT validation bypass (CVE-2026-34986)
- otel/sdk: resource leak in OpenTelemetry SDK (CVE-2026-39883)
- pgproto3/v2: buffer overflow via pgx/v4 bump (CVE-2026-32286)
- AWS SDK v2: event stream injection in CrowdSec deps (GHSA-xmrv-pmrh-hhx2)
- OTel HTTP exporters: request smuggling (CVE-2026-39882)
- gRPC: bumped to v1.80.0 for transitive go-jose/v4 resolution
All Dockerfile patches include Renovate annotations for automated
future tracking. Renovate config extended to cover Go version and
GitHub Action refs in skill example workflows, preventing version
drift in non-CI files. SECURITY.md updated with pre-existing Alpine
base image CVE (no upstream fix available).
Nightly Go stdlib CVEs (1.26.1) self-heal on next development sync;
example workflow pinned to 1.26.2 for correctness.
2026-04-09 17:24:25 +00:00
GitHub Actions
bb496daae3
fix(ci): improve health check for Charon container in nightly build
2026-04-09 14:08:19 +00:00
GitHub Actions
4cd568b0e5
fix(deps): update multiple dependencies in package-lock.json
2026-04-09 14:04:00 +00:00
GitHub Actions
efd70cd651
fix(deps): update golang.org/x/text to v0.36.0 and other dependencies
2026-04-09 14:01:05 +00:00
GitHub Actions
3d4a63b515
fix(go): update Go version to 1.26.2
2026-04-09 13:58:24 +00:00
Jeremy
42cec9e8c3
Merge pull request #919 from Wikid82/renovate/feature/beta-release-non-major-updates
...
fix(deps): update non-major-updates (feature/beta-release)
2026-04-09 09:41:24 -04:00
renovate[bot]
73565e0e0d
fix(deps): update non-major-updates
2026-04-09 09:20:57 +00:00
Jeremy
6dddc5db43
Merge pull request #918 from Wikid82/renovate/feature/beta-release-non-major-updates
...
fix(deps): update non-major-updates (feature/beta-release)
2026-04-06 20:30:42 -04:00
renovate[bot]
ef90d1c0d7
fix(deps): update non-major-updates
2026-04-06 21:48:29 +00:00
Jeremy
0354f5cecf
Merge pull request #917 from Wikid82/nightly
...
Weekly: Promote nightly to main (2026-04-06)
2026-04-06 12:14:47 -04:00
Jeremy
2d923246a9
Merge pull request #916 from Wikid82/development
...
Propagate changes from development into feature/beta-release
2026-04-06 01:24:35 -04:00
Jeremy
241c0d1b35
Merge pull request #914 from Wikid82/renovate/development-non-major-updates
...
chore(deps): update non-major-updates (development)
2026-04-06 01:08:26 -04:00
Jeremy
a9767baa69
Merge branch 'development' into renovate/development-non-major-updates
2026-04-06 01:08:07 -04:00
Jeremy
79f0080c80
Merge pull request #915 from Wikid82/main
...
Propagate changes from main into development
2026-04-06 01:07:49 -04:00
renovate[bot]
bfa6fc0920
chore(deps): update non-major-updates
2026-04-06 04:42:28 +00:00
Jeremy
c70c87386e
Merge pull request #913 from Wikid82/bot/update-geolite2-checksum
...
chore(docker): update GeoLite2-Country.mmdb checksum
2026-04-06 00:38:12 -04:00
Jeremy
a5c6eb95c6
Merge pull request #887 from Wikid82/feature/beta-release
...
Feature: CrowdSec Dashboard Integration with Observable Metrics
2026-04-06 00:37:46 -04:00
Wikid82
f5ab2cddd8
chore(docker): update GeoLite2-Country.mmdb checksum
...
Automated checksum update for GeoLite2-Country.mmdb database.
Old: 7840f4b8891e7c866f948d4b020cdc12aeea51b09450b44ad96d1f14f6e32879
New: f5e80a9a3129d46e75c8cccd66bfac725b0449a6c89ba5093a16561d58f20bda
Auto-generated by: .github/workflows/update-geolite2.yml
2026-04-06 02:58:45 +00:00
GitHub Actions
47d306b44b
fix(docker): ensure CrowdSec hub index and collections bootstrap on every startup
2026-04-05 05:16:26 +00:00
GitHub Actions
5e73ba7bd0
fix(security): add temporary ignore rules for transitive HIGH vulnerabilities
2026-04-05 04:18:54 +00:00
