JuliusFreudenberger/nix-config
1
0
Fork 0
Code Issues 1 Pull requests 1 Projects Releases Packages Wiki Activity Actions

Update crowdsecurity/crowdsec Docker tag to v1.8.1 #35

Open
renovate-bot wants to merge 1 commit from renovate/crowdsecurity-crowdsec-1.x into main
pull from: renovate/crowdsecurity-crowdsec-1.x
merge into: JuliusFreudenberger:main
Conversation 0 Commits 1 Files changed 2 +2 -2
renovate-bot commented 2026-08-17 23:41:03 +02:00
Collaborator
Copy link

This PR contains the following updates:

Package Update Change
crowdsecurity/crowdsec minor v1.7.7 → v1.8.1

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

crowdsecurity/crowdsec (crowdsecurity/crowdsec)

v1.8.1

Compare Source

This release fixes a false positive in the bot detection feature for Brave Browser with shields enabled.

Changes

Improvements

Bug Fixes

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

v1.8.0

Compare Source

Bot detection with CrowdSec WAF

This release brings a major change to the CrowdSec WAF: a bot detection feature.

If enabled, clients will be served a challenge + fingerprinting page before accessing the website.
CrowdSec will evaluate the challenge and check the fingerprint against pre-configured rules to decide whether the client looks legitimate or not.

You can find more information about this new feature in the documentation.

Other notable changes include:

  • A dedicated kubernetes datasource: crowdsec will fetch logs directly from the k8s apiserver
  • New HTTP helpers for the expression language, to query external services from parsers and scenarios
  • Performance improvements on the decisions stream endpoint in LAPI

Security Notice

This release fixes 2 denial of service vulnerabilities in the HTTP and k8s-audit datasources:

  • HTTP acquisition datasource lacks a decompressed body cap and trusts Content-Length: GHSA-g2x2-jgfg-pg7g
  • Unbounded request-body read in kubernetes-audit acquisition webhook: GHSA-rh69-4vqj-9gj8

New Features

Improvements

Bug Fixes

Chore / Deps

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

v1.7.8

Compare Source

New Features

Improvements

Bug Fixes

  • cscli metrics: don't attempt to create a DB client if there's no DB config (#​4451) @​blotus
  • papi: don't spam logs if chan is closed (#​4439) @​blotus
  • alerts: use single transaction when creating alert and all related items (#​4438) @​blotus
  • LAPI: enforce maximum body size for decompression

Chore / Deps

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [crowdsecurity/crowdsec](https://github.com/crowdsecurity/crowdsec) | minor | `v1.7.7` → `v1.8.1` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information. --- ### Release Notes <details> <summary>crowdsecurity/crowdsec (crowdsecurity/crowdsec)</summary> ### [`v1.8.1`](https://github.com/crowdsecurity/crowdsec/releases/tag/v1.8.1) [Compare Source](https://github.com/crowdsecurity/crowdsec/compare/v1.8.0...v1.8.1) This release fixes a false positive in the bot detection feature for Brave Browser with shields enabled. #### Changes #### Improvements - add HasValidChallengeCookie() helper ([#&#8203;4648](https://github.com/crowdsecurity/crowdsec/issues/4648)) [@&#8203;blotus](https://github.com/blotus) #### Bug Fixes - lapi: return an empty slice instead of null when querying alerts ([#&#8203;4653](https://github.com/crowdsecurity/crowdsec/issues/4653)) [@&#8203;blotus](https://github.com/blotus) - challenge: tolerate strings instead of struct in FP payload ([#&#8203;4655](https://github.com/crowdsecurity/crowdsec/issues/4655)) [@&#8203;blotus](https://github.com/blotus) #### Geolite2 notice This product includes GeoLite2 data created by MaxMind, available from <a href="https://www.maxmind.com"><https://www.maxmind.com></a>. #### Installation Take a look at the [installation instructions](https://doc.crowdsec.net/docs/getting_started/install_crowdsec). ### [`v1.8.0`](https://github.com/crowdsecurity/crowdsec/releases/tag/v1.8.0) [Compare Source](https://github.com/crowdsecurity/crowdsec/compare/v1.7.8...v1.8.0) #### Bot detection with CrowdSec WAF This release brings a major change to the CrowdSec WAF: a bot detection feature. If enabled, clients will be served a challenge + fingerprinting page before accessing the website. CrowdSec will evaluate the challenge and check the fingerprint against pre-configured rules to decide whether the client looks legitimate or not. You can find more information about this new feature in [the documentation](https://docs.crowdsec.net/docs/next/appsec/bot_detection/intro). Other notable changes include: - A dedicated kubernetes datasource: crowdsec will fetch logs directly from the k8s apiserver - New HTTP helpers for the expression language, to query external services from parsers and scenarios - Performance improvements on the decisions stream endpoint in LAPI #### Security Notice This release fixes 2 denial of service vulnerabilities in the HTTP and k8s-audit datasources: - HTTP acquisition datasource lacks a decompressed body cap and trusts Content-Length: [GHSA-g2x2-jgfg-pg7g](https://github.com/crowdsecurity/crowdsec/security/advisories/GHSA-g2x2-jgfg-pg7g) - Unbounded request-body read in kubernetes-audit acquisition webhook: [GHSA-rh69-4vqj-9gj8](https://github.com/crowdsecurity/crowdsec/security/advisories/GHSA-rh69-4vqj-9gj8) #### New Features - k8s log acquisition datasource ([#&#8203;4221](https://github.com/crowdsecurity/crowdsec/issues/4221)) [@&#8203;sabban](https://github.com/sabban) - Waf challenge mode ([#&#8203;4268](https://github.com/crowdsecurity/crowdsec/issues/4268)) [@&#8203;blotus](https://github.com/blotus) #### Improvements - challenge: detect if cookies are disabled and display an explicit error message ([#&#8203;4628](https://github.com/crowdsecurity/crowdsec/issues/4628)) [@&#8203;blotus](https://github.com/blotus) - db: add composite index for decision dedup ([#&#8203;4619](https://github.com/crowdsecurity/crowdsec/issues/4619)) [@&#8203;blotus](https://github.com/blotus) - Improve pow solving : optimize & increase difficulty ([#&#8203;4617](https://github.com/crowdsecurity/crowdsec/issues/4617)) [@&#8203;buixor](https://github.com/buixor) - Bot detection unify scores ([#&#8203;4608](https://github.com/crowdsecurity/crowdsec/issues/4608)) [@&#8203;buixor](https://github.com/buixor) - Dedup code reject submission alert generation ([#&#8203;4606](https://github.com/crowdsecurity/crowdsec/issues/4606)) [@&#8203;buixor](https://github.com/buixor) - make `RejectSubmission` generate an alert ([#&#8203;4602](https://github.com/crowdsecurity/crowdsec/issues/4602)) [@&#8203;buixor](https://github.com/buixor) - waf challenge: add threshold support ([#&#8203;4593](https://github.com/crowdsecurity/crowdsec/issues/4593)) [@&#8203;blotus](https://github.com/blotus) - revamp 'cscli console status' to be all-in-one ([#&#8203;4592](https://github.com/crowdsecurity/crowdsec/issues/4592)) [@&#8203;buixor](https://github.com/buixor) - \[bot-detection] Fix leak of background pre-warmer goroutine ([#&#8203;4589](https://github.com/crowdsecurity/crowdsec/issues/4589)) [@&#8203;buixor](https://github.com/buixor) - waf: allow to configure auth timeout to LAPI ([#&#8203;4585](https://github.com/crowdsecurity/crowdsec/issues/4585)) [@&#8203;blotus](https://github.com/blotus) - Add cs\_machines\_heartbeat\_seconds metric ([#&#8203;4569](https://github.com/crowdsecurity/crowdsec/issues/4569)) [@&#8203;kushiemoon-dev](https://github.com/kushiemoon-dev) - Cscli hub list improvements ([#&#8203;4567](https://github.com/crowdsecurity/crowdsec/issues/4567)) [@&#8203;buixor](https://github.com/buixor) - expr: add HTTP helpers ([#&#8203;4533](https://github.com/crowdsecurity/crowdsec/issues/4533)) [@&#8203;blotus](https://github.com/blotus) #### Bug Fixes - leakybuckets: make alerts own their strings ([#&#8203;4643](https://github.com/crowdsecurity/crowdsec/issues/4643)) [@&#8203;blotus](https://github.com/blotus) - alerts: create metas only if alert was not discarded ([#&#8203;4633](https://github.com/crowdsecurity/crowdsec/issues/4633)) [@&#8203;blotus](https://github.com/blotus) - k8s-audit: add support for max body size ([#&#8203;4630](https://github.com/crowdsecurity/crowdsec/issues/4630)) [@&#8203;blotus](https://github.com/blotus) - Usage metrics: set a maximum payload size ([#&#8203;4629](https://github.com/crowdsecurity/crowdsec/issues/4629)) [@&#8203;blotus](https://github.com/blotus) - lapi: use decision id as cursor for delta pull ([#&#8203;4620](https://github.com/crowdsecurity/crowdsec/issues/4620)) [@&#8203;blotus](https://github.com/blotus) - acquis(http): Set default max body size and enforce it as well for compressed streams ([#&#8203;4616](https://github.com/crowdsecurity/crowdsec/issues/4616)) [@&#8203;blotus](https://github.com/blotus) - acquisition: fix transformation being ignored ([#&#8203;4609](https://github.com/crowdsecurity/crowdsec/issues/4609)) [@&#8203;blotus](https://github.com/blotus) - fpscanner: add missing fields ([#&#8203;4604](https://github.com/crowdsecurity/crowdsec/issues/4604)) [@&#8203;blotus](https://github.com/blotus) - docs: fix broken Vagrant include link in test README ([#&#8203;4594](https://github.com/crowdsecurity/crowdsec/issues/4594)) [@&#8203;latent-9](https://github.com/latent-9) - challenge: require SSE4.1 + WX memory ([#&#8203;4590](https://github.com/crowdsecurity/crowdsec/issues/4590)) [@&#8203;blotus](https://github.com/blotus) - WAF: supress erroneous warnings/errors when loading config / no rule has matched ([#&#8203;4587](https://github.com/crowdsecurity/crowdsec/issues/4587)) [@&#8203;blotus](https://github.com/blotus) - Bot Detection: keep the original URL in the generated alert ([#&#8203;4586](https://github.com/crowdsecurity/crowdsec/issues/4586)) [@&#8203;buixor](https://github.com/buixor) - fix(docker): allow spaces in ENROLL\_INSTANCE\_NAME ([#&#8203;4582](https://github.com/crowdsecurity/crowdsec/issues/4582)) [@&#8203;sahilnyk](https://github.com/sahilnyk) - apiclient: return nil response if we couldnt connect to LAPI ([#&#8203;4573](https://github.com/crowdsecurity/crowdsec/issues/4573)) [@&#8203;blotus](https://github.com/blotus) - cscli lapi register: no error if the credentials file does not exist ([#&#8203;4570](https://github.com/crowdsecurity/crowdsec/issues/4570)) [@&#8203;lopster568](https://github.com/lopster568) - fix(docker): avoid panic on colliding nested crowdsec labels ([#&#8203;4555](https://github.com/crowdsecurity/crowdsec/issues/4555)) [@&#8203;arpitjain099](https://github.com/arpitjain099) - fix(syslog): don't close the shared acquisition output channel ([#&#8203;4553](https://github.com/crowdsecurity/crowdsec/issues/4553)) [@&#8203;alxrxs](https://github.com/alxrxs) - waf: track id/name pairs for all subrules ([#&#8203;4505](https://github.com/crowdsecurity/crowdsec/issues/4505)) [@&#8203;blotus](https://github.com/blotus) - apiserver: prevent from fetching JWT token from query string ([#&#8203;4554](https://github.com/crowdsecurity/crowdsec/issues/4554)) [@&#8203;blotus](https://github.com/blotus) - fix(leakybucket): emit overflow before pouring the next event ([#&#8203;4547](https://github.com/crowdsecurity/crowdsec/issues/4547)) [@&#8203;blotus](https://github.com/blotus) - loki: prevent duplicate log ingestion and improve timestamp handling ([#&#8203;4498](https://github.com/crowdsecurity/crowdsec/issues/4498)) [@&#8203;Anulo2](https://github.com/Anulo2) - db: use proper mutex when checking if flush can happen ([#&#8203;4528](https://github.com/crowdsecurity/crowdsec/issues/4528)) [@&#8203;blotus](https://github.com/blotus) - db: do not flush alerts with active decisions ([#&#8203;4527](https://github.com/crowdsecurity/crowdsec/issues/4527)) [@&#8203;blotus](https://github.com/blotus) - Fix `Distinct()` panic on `[]string` and other non-`[]any` slices ([#&#8203;4543](https://github.com/crowdsecurity/crowdsec/issues/4543)) [@&#8203;Synvoya](https://github.com/Synvoya) - fix(docker): bouncer name strips wrong field from Docker secrets path ([#&#8203;4490](https://github.com/crowdsecurity/crowdsec/issues/4490)) [@&#8203;tejgokani](https://github.com/tejgokani) #### Chore / Deps - build(deps): bump astral-sh/setup-uv from 8.3.2 to 10.0.1 ([#&#8203;4625](https://github.com/crowdsecurity/crowdsec/issues/4625)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12 ([#&#8203;4627](https://github.com/crowdsecurity/crowdsec/issues/4627)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the gomod group with 16 updates ([#&#8203;4626](https://github.com/crowdsecurity/crowdsec/issues/4626)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the github-actions group with 3 updates ([#&#8203;4624](https://github.com/crowdsecurity/crowdsec/issues/4624)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - add claude.md to unify contribs ([#&#8203;4618](https://github.com/crowdsecurity/crowdsec/issues/4618)) [@&#8203;buixor](https://github.com/buixor) - build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 ([#&#8203;4580](https://github.com/crowdsecurity/crowdsec/issues/4580)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump actions/setup-python from 6.3.0 to 7.0.0 ([#&#8203;4578](https://github.com/crowdsecurity/crowdsec/issues/4578)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 ([#&#8203;4577](https://github.com/crowdsecurity/crowdsec/issues/4577)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the github-actions group across 1 directory with 5 updates ([#&#8203;4576](https://github.com/crowdsecurity/crowdsec/issues/4576)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the gomod group across 1 directory with 16 updates ([#&#8203;4612](https://github.com/crowdsecurity/crowdsec/issues/4612)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - acquisition tests: do not rely on hardcoded timeout to finish tests ([#&#8203;4610](https://github.com/crowdsecurity/crowdsec/issues/4610)) [@&#8203;blotus](https://github.com/blotus) - challenge: skip pre-warm in tests ([#&#8203;4611](https://github.com/crowdsecurity/crowdsec/issues/4611)) [@&#8203;blotus](https://github.com/blotus) - challenge: update fpscanner to 1.0.8 ([#&#8203;4598](https://github.com/crowdsecurity/crowdsec/issues/4598)) [@&#8203;blotus](https://github.com/blotus) - build(deps): bump the gomod group with 6 updates ([#&#8203;4588](https://github.com/crowdsecurity/crowdsec/issues/4588)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - ci(bats): fix scenarios badge color variable name ([#&#8203;4551](https://github.com/crowdsecurity/crowdsec/issues/4551)) [@&#8203;blotus](https://github.com/blotus) - ci(docker): inherit secrets so the docker environment secrets resolve ([#&#8203;4550](https://github.com/crowdsecurity/crowdsec/issues/4550)) [@&#8203;blotus](https://github.com/blotus) - build: use version based on latest for dev builds ([#&#8203;4583](https://github.com/crowdsecurity/crowdsec/issues/4583)) [@&#8203;blotus](https://github.com/blotus) - build(deps): bump the gomod group with 19 updates ([#&#8203;4581](https://github.com/crowdsecurity/crowdsec/issues/4581)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump github.com/quic-go/quic-go from 0.57.0 to 0.59.1 ([#&#8203;4499](https://github.com/crowdsecurity/crowdsec/issues/4499)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump cryptography from 46.0.6 to 48.0.1 in /build/docker/test ([#&#8203;4522](https://github.com/crowdsecurity/crowdsec/issues/4522)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps-dev): bump ruff from 0.15.20 to 0.15.22 in /build/docker/test in the uv group across 1 directory ([#&#8203;4559](https://github.com/crowdsecurity/crowdsec/issues/4559)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - WAF: update coraza ([#&#8203;4572](https://github.com/crowdsecurity/crowdsec/issues/4572)) [@&#8203;blotus](https://github.com/blotus) - build(deps): bump the github-actions group across 1 directory with 3 updates ([#&#8203;4558](https://github.com/crowdsecurity/crowdsec/issues/4558)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the gomod group across 1 directory with 21 updates ([#&#8203;4566](https://github.com/crowdsecurity/crowdsec/issues/4566)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - bump fpscanner to v1.0.7 ([#&#8203;4557](https://github.com/crowdsecurity/crowdsec/issues/4557)) [@&#8203;blotus](https://github.com/blotus) - update go-re2 to 1.11.0 ([#&#8203;4478](https://github.com/crowdsecurity/crowdsec/issues/4478)) [@&#8203;blotus](https://github.com/blotus) - Unify sqlite build flag ([#&#8203;4525](https://github.com/crowdsecurity/crowdsec/issues/4525)) [@&#8203;zc-devs](https://github.com/zc-devs) - fix TestCryptoObfuscationDefaultPoolSize ([#&#8203;4565](https://github.com/crowdsecurity/crowdsec/issues/4565)) [@&#8203;buixor](https://github.com/buixor) - build(deps): bump the gomod group across 1 directory with 30 updates ([#&#8203;4542](https://github.com/crowdsecurity/crowdsec/issues/4542)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - chore: delete publiccode.yml to comply with the process ([#&#8203;4552](https://github.com/crowdsecurity/crowdsec/issues/4552)) [@&#8203;mazzma12](https://github.com/mazzma12) - build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 ([#&#8203;4549](https://github.com/crowdsecurity/crowdsec/issues/4549)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - CI hardening ([#&#8203;4546](https://github.com/crowdsecurity/crowdsec/issues/4546)) [@&#8203;blotus](https://github.com/blotus) - fix(docs): set pubblicode.yml to correct version ([#&#8203;4548](https://github.com/crowdsecurity/crowdsec/issues/4548)) [@&#8203;mazzma12](https://github.com/mazzma12) - build(deps): bump cloudflare/wrangler-action from 3.15.0 to 4.0.0 ([#&#8203;4541](https://github.com/crowdsecurity/crowdsec/issues/4541)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump codecov/codecov-action from 6.0.0 to 7.0.0 ([#&#8203;4540](https://github.com/crowdsecurity/crowdsec/issues/4540)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps-dev): bump the uv group in /build/docker/test with 2 updates ([#&#8203;4537](https://github.com/crowdsecurity/crowdsec/issues/4537)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the github-actions group with 7 updates ([#&#8203;4538](https://github.com/crowdsecurity/crowdsec/issues/4538)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump actions/checkout from 6.0.2 to 7.0.0 ([#&#8203;4539](https://github.com/crowdsecurity/crowdsec/issues/4539)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 ([#&#8203;4544](https://github.com/crowdsecurity/crowdsec/issues/4544)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the github-actions group across 1 directory with 11 updates ([#&#8203;4524](https://github.com/crowdsecurity/crowdsec/issues/4524)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the uv group across 1 directory with 3 updates ([#&#8203;4519](https://github.com/crowdsecurity/crowdsec/issues/4519)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump alpine from 3.23 to 3.24 in /build/docker in the docker group across 1 directory ([#&#8203;4513](https://github.com/crowdsecurity/crowdsec/issues/4513)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) #### Geolite2 notice This product includes GeoLite2 data created by MaxMind, available from <a href="https://www.maxmind.com"><https://www.maxmind.com></a>. #### Installation Take a look at the [installation instructions](https://doc.crowdsec.net/docs/getting_started/install_crowdsec). ### [`v1.7.8`](https://github.com/crowdsecurity/crowdsec/releases/tag/v1.7.8) [Compare Source](https://github.com/crowdsecurity/crowdsec/compare/v1.7.7...v1.7.8) #### New Features - WAF: OpenAPI schema validation ([#&#8203;4097](https://github.com/crowdsecurity/crowdsec/issues/4097)) [@&#8203;blotus](https://github.com/blotus) #### Improvements - WAF: enforce body size limitation ([#&#8203;4355](https://github.com/crowdsecurity/crowdsec/issues/4355)) [@&#8203;blotus](https://github.com/blotus) - Decision stream: move to chunked transfer by default ([#&#8203;4413](https://github.com/crowdsecurity/crowdsec/issues/4413)) [@&#8203;blotus](https://github.com/blotus) - cscli: add `--quick` flag to enroll command ([#&#8203;4350](https://github.com/crowdsecurity/crowdsec/issues/4350)) [@&#8203;blotus](https://github.com/blotus) - propose an alternative, cleaner configuration for appsec-config ([#&#8203;4397](https://github.com/crowdsecurity/crowdsec/issues/4397)) [@&#8203;buixor](https://github.com/buixor) #### Bug Fixes - cscli metrics: don't attempt to create a DB client if there's no DB config ([#&#8203;4451](https://github.com/crowdsecurity/crowdsec/issues/4451)) [@&#8203;blotus](https://github.com/blotus) - papi: don't spam logs if chan is closed ([#&#8203;4439](https://github.com/crowdsecurity/crowdsec/issues/4439)) [@&#8203;blotus](https://github.com/blotus) - alerts: use single transaction when creating alert and all related items ([#&#8203;4438](https://github.com/crowdsecurity/crowdsec/issues/4438)) [@&#8203;blotus](https://github.com/blotus) - LAPI: enforce maximum body size for decompression #### Chore / Deps - build(deps): bump the gomod group across 1 directory with 34 updates ([#&#8203;4453](https://github.com/crowdsecurity/crowdsec/issues/4453)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the github-actions group with 2 updates ([#&#8203;4447](https://github.com/crowdsecurity/crowdsec/issues/4447)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump alpine from 3.21 to 3.23 in /build/docker in the docker group across 1 directory ([#&#8203;4441](https://github.com/crowdsecurity/crowdsec/issues/4441)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the github-actions group with 7 updates ([#&#8203;4443](https://github.com/crowdsecurity/crowdsec/issues/4443)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the uv group in /build/docker/test with 3 updates ([#&#8203;4442](https://github.com/crowdsecurity/crowdsec/issues/4442)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - db: add some missing indexes ([#&#8203;4435](https://github.com/crowdsecurity/crowdsec/issues/4435)) [@&#8203;blotus](https://github.com/blotus) - Dependencies update ([#&#8203;4412](https://github.com/crowdsecurity/crowdsec/issues/4412)) [@&#8203;blotus](https://github.com/blotus) - add PAPI metrics ([#&#8203;4411](https://github.com/crowdsecurity/crowdsec/issues/4411)) [@&#8203;blotus](https://github.com/blotus) - build(deps): bump github.com/aws/aws-lambda-go from 1.47.0 to 1.54.0 ([#&#8203;4402](https://github.com/crowdsecurity/crowdsec/issues/4402)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump docker/login-action from 4.0.0 to 4.1.0 ([#&#8203;4403](https://github.com/crowdsecurity/crowdsec/issues/4403)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump github.com/google/go-querystring from 1.1.0 to 1.2.0 ([#&#8203;4400](https://github.com/crowdsecurity/crowdsec/issues/4400)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump actions/setup-go from 6.3.0 to 6.4.0 ([#&#8203;4404](https://github.com/crowdsecurity/crowdsec/issues/4404)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump github.com/aws/aws-sdk-go-v2/service/sqs from 1.42.3 to 1.42.25 ([#&#8203;4405](https://github.com/crowdsecurity/crowdsec/issues/4405)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump release-drafter/release-drafter from 6.4.0 to 7.1.1 ([#&#8203;4381](https://github.com/crowdsecurity/crowdsec/issues/4381)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0 ([#&#8203;4388](https://github.com/crowdsecurity/crowdsec/issues/4388)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump schneegans/dynamic-badges-action from 1.7.0 to 1.8.0 ([#&#8203;4393](https://github.com/crowdsecurity/crowdsec/issues/4393)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump astral-sh/setup-uv from 7.6.0 to 8.0.0 ([#&#8203;4394](https://github.com/crowdsecurity/crowdsec/issues/4394)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump github/codeql-action from 4.33.0 to 4.35.1 ([#&#8203;4395](https://github.com/crowdsecurity/crowdsec/issues/4395)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - update dependabot config ([#&#8203;4440](https://github.com/crowdsecurity/crowdsec/issues/4440)) [@&#8203;blotus](https://github.com/blotus) - build(deps): bump requests from 2.32.5 to 2.33.0 in /build/docker/test ([#&#8203;4389](https://github.com/crowdsecurity/crowdsec/issues/4389)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump cryptography from 46.0.5 to 46.0.6 in /build/docker/test ([#&#8203;4391](https://github.com/crowdsecurity/crowdsec/issues/4391)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump pygments from 2.19.2 to 2.20.0 in /build/docker/test ([#&#8203;4396](https://github.com/crowdsecurity/crowdsec/issues/4396)) @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) #### Geolite2 notice This product includes GeoLite2 data created by MaxMind, available from <a href="https://www.maxmind.com"><https://www.maxmind.com></a>. #### Installation Take a look at the [installation instructions](https://doc.crowdsec.net/docs/getting_started/install_crowdsec). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovate-bot changed title from Update crowdsecurity/crowdsec Docker tag to v1.7.8 to Update crowdsecurity/crowdsec Docker tag to v1.8.0 2026-09-01 16:10:49 +02:00
renovate-bot force-pushed renovate/crowdsecurity-crowdsec-1.x from 5435ee63b5 to 44f87429bb 2026-09-01 16:10:49 +02:00 Compare
renovate-bot force-pushed renovate/crowdsecurity-crowdsec-1.x from 44f87429bb to 49c365f4e6 2026-09-03 15:50:44 +02:00 Compare
renovate-bot changed title from Update crowdsecurity/crowdsec Docker tag to v1.8.0 to Update crowdsecurity/crowdsec Docker tag to v1.8.1 2026-09-03 15:50:45 +02:00
renovate-bot force-pushed renovate/crowdsecurity-crowdsec-1.x from 49c365f4e6 to 675b2f6cc3 2026-09-05 23:40:37 +02:00 Compare
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/crowdsecurity-crowdsec-1.x:renovate/crowdsecurity-crowdsec-1.x
git switch renovate/crowdsecurity-crowdsec-1.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/crowdsecurity-crowdsec-1.x
git switch renovate/crowdsecurity-crowdsec-1.x
git rebase main
git switch main
git merge --ff-only renovate/crowdsecurity-crowdsec-1.x
git switch renovate/crowdsecurity-crowdsec-1.x
git rebase main
git switch main
git merge --no-ff renovate/crowdsecurity-crowdsec-1.x
git switch main
git merge --squash renovate/crowdsecurity-crowdsec-1.x
git switch main
git merge --ff-only renovate/crowdsecurity-crowdsec-1.x
git switch main
git merge renovate/crowdsecurity-crowdsec-1.x
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
JuliusFreudenberger/nix-config!35
No description provided.