This new v2.44.0 brings bug fixes and security updates. A fix for pre-compressed variant body truncation, a new --use-relative-root option to resolve the webroot at request time, query string preservation on URL redirects, a metrics endpoint authentication order fix as well as other improvements.
Security updates
This release includes security updates related to metrics, pre-compressed and basic authentication. Users are encouraged to update to this version. We will provide more details about the fixed security issues in the next few days.
v2 is now LTS
Today we announce that v2 has transitioned to LTS (Long-term support) status. Meaning that v2.44.0 (minor) will receive only bug fixes and security updates going forward.
The project's current focus has now moved to v3 (in progress). We encourage users to give v3 a try for new features, improvements and provide feedback. More details in the v3.0.0-beta.1 release.
Fixes
- c928639 Update dependencies. PR [#728] by @joseluisq
- be585a6 Update Alpine (
3.23.5) & Debian (13.6) Docker images. PR [#729] by @joseluisq - 478fc6e Pre-compressed variant body truncated to the original file's size (backport from v3). PR [#727] by @joseluisq (v3 PR [#722] by @antoinemichea).
- b05bd25 Query string was not preserved on URL redirects. PR [#703] by @urdh
- a51444c Metrics endpoint authentication order bypass when basic auth is enabled. PR [#714] by @T3pp31
Features
- e491202 New
--use-relative-rootoption to resolve the webroot at request time. PR [#712] by @joseluisq. See docs.
Refactorings
- aa36d93 Move v2 docs to dedicated repository. PR [#704] by @joseluisq
For more details see the v2.44.0 milestone and the full changelog v2.43.0...v2.44.0.