⬆️ renovate: Update all

⬆️ renovate: Update all (#375 )
Co-authored-by: Renovate Bot <22881669+maxlerebourg@users.noreply.github.com>
2026-09-02 20:28:50 +02:00 · 2026-09-02 08:23:50 +00:00 · 2026-08-20 12:05:45 +02:00 · 2026-08-07 19:11:54 +02:00 · 2026-08-07 12:15:10 +02:00
18 changed files with 46 additions and 41 deletions
@@ -19,7 +19,7 @@ jobs:
    steps:
      - uses: actions/checkout@v7
      - name: Set up Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
        with:
          # Track go.mod (Go 1.22) — the plugin's yaegi-bound floor. Keeps the
          # single source of truth and builds the mock on the supported version.
@@ -32,7 +32,7 @@ jobs:

      # https://github.com/marketplace/actions/setup-go-environment
      - name: Set up Go ${{ env.GO_VERSION }}
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
        with:
          go-version: ${{ env.GO_VERSION }}

@@ -28,7 +28,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Run Renovate
-        uses: renovatebot/github-action@v46.1.21
+        uses: renovatebot/github-action@v46.2.5
        with:
          token: ${{ secrets.RENOVATE_TOKEN }}
        env:
@@ -641,7 +641,12 @@ func handleStreamCache(bouncer *Bouncer) error {
 	if err.Error() != cache.CacheMiss {
 		return err
 	}
-	bouncer.cacheClient.Set(cacheTimeoutKey, cache.NoBannedValue, bouncer.updateInterval-1)
+	// To avoid every instance trying to update the cache, set 1 second at least
+	leaseDuration := bouncer.updateInterval - 1
+	if leaseDuration < 1 {
+		leaseDuration = 1
+	}
+	bouncer.cacheClient.Set(cacheTimeoutKey, cache.NoBannedValue, leaseDuration)
 	streamRouteURL := url.URL{
 		Scheme:   bouncer.crowdsecScheme,
 		Host:     bouncer.crowdsecHost,
@@ -1,6 +1,6 @@
 services:
  traefik:
-    image: "traefik:v3.7.9"
+    image: "traefik:v3.7.12"
    container_name: "traefik"
    restart: unless-stopped
    command:
@@ -80,7 +80,7 @@ services:
      - "traefik.http.routers.router-bar3.entrypoints=web"
      - "traefik.http.routers.router-bar3.middlewares=crowdsec2@docker"
  crowdsec:
-    image: crowdsecurity/crowdsec:v1.7.8
+    image: crowdsecurity/crowdsec:v1.8.0
    container_name: "crowdsec"
    restart: unless-stopped
    environment:
@@ -1,6 +1,6 @@
 services:
  traefik:
-    image: "traefik:v3.7.9"
+    image: "traefik:v3.7.12"
    container_name: "traefik"
    restart: unless-stopped
    command:
@@ -12,7 +12,7 @@ services:
      - "--entrypoints.web.address=:80"

      - "--experimental.plugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
-      - "--experimental.plugins.bouncer.version=v1.7.0"
+      - "--experimental.plugins.bouncer.version=v1.7.1"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      # - './ban.html:/ban.html:ro'
@@ -59,7 +59,7 @@ services:
      - "traefik.http.middlewares.crowdsec.plugin.bouncer.forwardedheaderstrustedips=172.21.0.5"

  crowdsec:
-    image: crowdsecurity/crowdsec:v1.7.8
+    image: crowdsecurity/crowdsec:v1.8.0
    container_name: "crowdsec"
    restart: unless-stopped
    environment:
@@ -1,6 +1,6 @@
 services:
  traefik:
-    image: "traefik:v3.7.9"
+    image: "traefik:v3.7.12"
    container_name: "traefik"
    restart: unless-stopped
    command:
@@ -13,7 +13,7 @@ services:
      - "--entrypoints.web.address=:80"

      - "--experimental.plugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
-      - "--experimental.plugins.bouncer.version=v1.7.0"
+      - "--experimental.plugins.bouncer.version=v1.7.1"
      # - "--experimental.localplugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
@@ -47,7 +47,7 @@ services:
      - "traefik.http.middlewares.crowdsec.plugin.bouncer.crowdsecappsechost=crowdsec:7422"

  crowdsec:
-    image: crowdsecurity/crowdsec:v1.7.8
+    image: crowdsecurity/crowdsec:v1.8.0
    container_name: "crowdsec"
    restart: unless-stopped
    environment:
@@ -1,6 +1,6 @@
 services:
  cloudflare:
-    image: "traefik:v3.7.9"
+    image: "traefik:v3.7.12"
    container_name: "cloudflare"
    restart: unless-stopped
    command:
@@ -19,7 +19,7 @@ services:
      - 8080:8080

  traefik:
-    image: "traefik:v3.7.9"
+    image: "traefik:v3.7.12"
    container_name: "traefik"
    restart: unless-stopped
    command:
@@ -33,7 +33,7 @@ services:
      - "--entrypoints.web.forwardedheaders.trustedips=172.21.0.5"

      - "--experimental.plugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
-      - "--experimental.plugins.bouncer.version=v1.7.0"
+      - "--experimental.plugins.bouncer.version=v1.7.1"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - logs-traefik:/var/log/traefik
@@ -79,7 +79,7 @@ services:
  

  crowdsec:
-    image: crowdsecurity/crowdsec:v1.7.8
+    image: crowdsecurity/crowdsec:v1.8.0
    container_name: "crowdsec"
    restart: unless-stopped
    environment:
@@ -1,6 +1,6 @@
 services:
  traefik:
-    image: "traefik:v3.7.9"
+    image: "traefik:v3.7.12"
    container_name: "traefik"
    restart: unless-stopped
    command:
@@ -13,7 +13,7 @@ services:
      - "--entrypoints.web.address=:80"

      - "--experimental.plugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
-      - "--experimental.plugins.bouncer.version=v1.7.0"
+      - "--experimental.plugins.bouncer.version=v1.7.1"
      # - "--experimental.localplugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
@@ -55,7 +55,7 @@ services:
      - "traefik.http.middlewares.crowdsec.plugin.bouncer.captchaHTMLFilePath=/captcha.html"

  crowdsec:
-    image: crowdsecurity/crowdsec:v1.7.8
+    image: crowdsecurity/crowdsec:v1.8.0
    container_name: "crowdsec"
    restart: unless-stopped
    environment:
@@ -1,6 +1,6 @@
 services:
  traefik:
-    image: "traefik:v3.7.9"
+    image: "traefik:v3.7.12"
    container_name: "traefik"
    restart: unless-stopped
    command:
@@ -13,7 +13,7 @@ services:
      - "--entrypoints.web.address=:80"

      - "--experimental.plugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
-      - "--experimental.plugins.bouncer.version=v1.7.0"
+      - "--experimental.plugins.bouncer.version=v1.7.1"
      # - "--experimental.localplugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
@@ -46,7 +46,7 @@ services:
      - "traefik.http.middlewares.crowdsec.plugin.bouncer.banFilePath=/ban.html"

  crowdsec:
-    image: crowdsecurity/crowdsec:v1.7.8
+    image: crowdsecurity/crowdsec:v1.8.0
    container_name: "crowdsec"
    restart: unless-stopped
    environment:
@@ -1,6 +1,6 @@
 services:
  traefik:
-    image: "traefik:v3.7.9"
+    image: "traefik:v3.7.12"
    container_name: "traefik"
    restart: unless-stopped
    command:
@@ -14,7 +14,7 @@ services:
      - "--entrypoints.web.forwardedheaders.trustedips=172.18.0.0/24"

      - "--experimental.plugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
-      - "--experimental.plugins.bouncer.version=v1.7.0"
+      - "--experimental.plugins.bouncer.version=v1.7.1"
      # - "--experimental.localplugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
@@ -59,7 +59,7 @@ services:
      - "traefik.http.middlewares.crowdsec.plugin.bouncer.captchaHTMLFilePath=/captcha.html"

  crowdsec:
-    image: crowdsecurity/crowdsec:v1.7.8
+    image: crowdsecurity/crowdsec:v1.8.0
    container_name: "crowdsec"
    restart: unless-stopped
    environment:
@@ -1,5 +1,5 @@
 image:
-  tag: v1.7.8-2
+  tag: v1.8.0-2

 agent:
  acquisition:
@@ -1,5 +1,5 @@
 image:
-  tag: v3.7.9
+  tag: v3.7.12

 logs:
  general:
@@ -15,4 +15,4 @@ experimental:
  plugins:
    bouncer:
      moduleName: "github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
-      version: "v1.7.0"
+      version: "v1.7.1"
@@ -1,6 +1,6 @@
 services:
  traefik:
-    image: "traefik:v3.7.9"
+    image: "traefik:v3.7.12"
    container_name: "traefik"
    restart: unless-stopped
    command:
@@ -13,7 +13,7 @@ services:
      - "--entrypoints.web.address=:80"

      - "--experimental.plugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
-      - "--experimental.plugins.bouncer.version=v1.7.0"
+      - "--experimental.plugins.bouncer.version=v1.7.1"
      # - "--experimental.localplugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
@@ -71,7 +71,7 @@ services:


  crowdsec:
-    image: crowdsecurity/crowdsec:v1.7.8
+    image: crowdsecurity/crowdsec:v1.8.0
    container_name: "crowdsec"
    restart: unless-stopped
    environment:
@@ -87,7 +87,7 @@ services:
      - "traefik.enable=false"

  redis-secure:
-    image: "redis:8.8.1-alpine"
+    image: "redis:8.10.1-alpine"
    container_name: "redis-secure"
    hostname: redis-secure
    restart: unless-stopped
@@ -1,6 +1,6 @@
 services:
  traefik:
-    image: "traefik:v3.7.9"
+    image: "traefik:v3.7.12"
    container_name: "traefik"
    restart: unless-stopped
    command:
@@ -13,7 +13,7 @@ services:
      - "--entrypoints.web.address=:80"

      - "--experimental.plugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
-      - "--experimental.plugins.bouncer.version=v1.7.0"
+      - "--experimental.plugins.bouncer.version=v1.7.1"
      # - "--experimental.localplugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
@@ -1,6 +1,6 @@
 services:
  traefik:
-    image: "traefik:v3.7.9"
+    image: "traefik:v3.7.12"
    container_name: "traefik"
    restart: unless-stopped
    command:
@@ -13,7 +13,7 @@ services:
      - "--entrypoints.web.address=:80"

      - "--experimental.plugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
-      - "--experimental.plugins.bouncer.version=v1.7.0"
+      - "--experimental.plugins.bouncer.version=v1.7.1"
      # - "--experimental.localplugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
@@ -71,7 +71,7 @@ services:
      # Define AppSec host and port informations
      - "traefik.http.middlewares.crowdsec.plugin.bouncer.crowdsecappsechost=crowdsec:7422"
  crowdsec:
-    image: crowdsecurity/crowdsec:v1.7.8
+    image: crowdsecurity/crowdsec:v1.8.0
    container_name: "crowdsec"
    restart: unless-stopped
    environment:
@@ -1,6 +1,6 @@
 services:
  traefik:
-    image: "traefik:v3.7.9"
+    image: "traefik:v3.7.12"
    container_name: "traefik"
    restart: unless-stopped
    command:
@@ -13,7 +13,7 @@ services:
      - "--entrypoints.web.address=:80"

      - "--experimental.plugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
-      - "--experimental.plugins.bouncer.version=v1.7.0"
+      - "--experimental.plugins.bouncer.version=v1.7.1"
      # - "--experimental.localplugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
@@ -65,7 +65,7 @@ services:


  crowdsec:
-    image: crowdsecurity/crowdsec:v1.7.8
+    image: crowdsecurity/crowdsec:v1.8.0
    container_name: "crowdsec"
    restart: unless-stopped
    environment:
@@ -14,7 +14,7 @@
 set -euo pipefail

 # Pinned to match the Docker suite (tests/e2e/scenarios/*/docker-compose.yml).
-TRAEFIK_VERSION="${TRAEFIK_VERSION:-v3.7.9}"
+TRAEFIK_VERSION="${TRAEFIK_VERSION:-v3.7.12}"

 WEB_PORT="${WEB_PORT:-8000}"
 LAPI_PORT="${LAPI_PORT:-8090}"
Author	SHA1	Message	Date
Renovate Bot	369d3a4052	⬆️ renovate: Update all	2026-09-02 08:23:50 +00:00
maxlerebourgandRenovate Bot	ae7481caa5	⬆️ renovate: Update all (#375 ) Co-authored-by: Renovate Bot <22881669+maxlerebourg@users.noreply.github.com>	2026-08-20 12:05:45 +02:00
mathieuHaandmaxlerebourg	9b8d6b937c	🐛 keep the stream lease alive when updateIntervalSeconds is 1 (#371 ) * 🐛 keep the stream lease alive when updateIntervalSeconds is 1 handleStreamCache takes a lease so a single node polls LAPI per interval, and stores it for updateInterval-1 seconds. The e2e stream scenario now sets updateIntervalSeconds to 1, which makes that a 0 second duration: golang-ttl-map returns early on a zero ttl (map.go:114) and redis rejects a non positive EX, so the lease is never stored and the guard silently does nothing. Floor the duration at 1 second. At an interval of 1 the lease can survive a tick that fires slightly early and cost one skipped poll, which is far better than every node polling every tick against a shared redis. * Adjust lease duration to prevent cache update conflicts Updated lease duration logic to ensure a minimum of 1 second. --------- Co-authored-by: maxlerebourg <maxlerebourg@gmail.com>	2026-08-07 19:11:54 +02:00
maxlerebourgandRenovate Bot	d57ead2ec7	⬆️ renovate: Update actions/setup-go action to v7 (#364 ) Co-authored-by: Renovate Bot <22881669+maxlerebourg@users.noreply.github.com>	2026-08-07 12:15:10 +02:00