Commit Graph

Select branches

Hide Pull Requests

271-feature-support-decision-scope

319-bug-traefik-logs-filling-up-with-msghandlestreamcacheupdated-after-upgrade-to-v160-alpha

368-review-fixes

diag/stream-fetch-instrumentation

diag/ticker-instrumentation

feat/cidr-mget

feat/e2e-docker

feat/e2e-tests

feat/stream-fetch-debug-logging

fix/370-stream-lease-zero-duration

fix/395-client-body-abort

fix/397-appsec-challenge

fix/appsec-drain-and-pool

fix/bot-detection-protocol

fix/delete-h3-unreadable-body

fix/renovate-oom-gitauthor

main

pointer-redis-readers

release/v1.7.1

renovate-update-version

renovate-update-version-go

renovate/all

#100

#105

#108

#11

#110

#112

#115

#116

#117

#118

#12

#121

#123

#128

#129

#13

#134

#135

#139

#14

#141

#142

#144

#145

#147

#149

#15

#153

#158

#160

#164

#166

#168

#17

#170

#175

#176

#177

#178

#189

#19

#192

#195

#2

#202

#207

#208

#210

#211

#214

#215

#217

#218

#22

#220

#223

#225

#226

#23

#230

#231

#232

#235

#236

#24

#25

#250

#259

#26

#261

#262

#265

#268

#273

#276

#277

#278

#280

#281

#285

#287

#289

#29

#290

#293

#294

#296

#300

#303

#305

#31

#310

#311

#313

#314

#317

#317/merge

#32

#321

#324

#325

#329

#330

#331

#332

#333

#333/merge

#334

#335

#336

#338

#34

#340

#340/merge

#341

#342

#343

#344

#345

#347

#348

#349

#35

#350

#352

#359

#360

#361

#362

#364

#365

#367

#368

#368/merge

#369

#369/merge

#37

#371

#372

#373

#374

#374/merge

#375

#378

#379

#379/merge

#382

#382/merge

#383

#383/merge

#386

#387

#39

#390

#390/merge

#391

#391/merge

#398

#399

#4

#400

#401

#401/merge

#403

#45

#48

#52

#53

#54

#56

#57

#58

#59

#6

#68

#69

#70

#71

#73

#74

#76

#79

#8

#82

#84

#87

#89

#93

#97

v0.1.0-alpha

v0.1.1

v0.1.2

v0.1.3-alpha

v0.1.4-alpha

v0.1.5-alpha

v0.1.6-alpha

v1.0.0

v1.0.1

v1.0.2

v1.0.3

v1.0.4

v1.0.6

v1.0.7

v1.0.7-beta

v1.0.8

v1.0.9-beta

v1.1.0

v1.1.1

v1.1.10

v1.1.11

v1.1.11-beta

v1.1.11-beta2

v1.1.12

v1.1.13

v1.1.13-beta-fix-104

v1.1.14

v1.1.15

v1.1.16

v1.1.2

v1.1.3

v1.1.4

v1.1.5

v1.1.5-beta

v1.1.5-beta-1

v1.1.6

v1.1.7

v1.1.7-beta1

v1.1.8

v1.1.8-beta1

v1.1.8-beta2

v1.1.9

v1.2.0

v1.2.0-rc1

v1.2.0-rc2

v1.2.1

v1.2.1-rc1

v1.3.0

v1.3.0-beta1

v1.3.0-beta2

v1.3.0-beta3

v1.3.0-beta4

v1.3.1

v1.3.2

v1.3.3

v1.3.3-beta1

v1.3.4

v1.3.4-beta1

v1.3.5

v1.4.0

v1.4.1

v1.4.2

v1.4.3

v1.4.4

v1.4.5

v1.4.6

v1.4.7

v1.5.0

v1.5.0-beta1

v1.5.0-beta2

v1.5.1

v1.6.0

v1.6.0-alpha

v1.7.0

v1.7.0-alpha

v1.7.1

v1.8.0-alpha

Mono Color

• d88f43546c ✅ add a short test for client body read errors fix/395-client-body-abort mhx 2026-10-17 22:28:39 +02:00
• 820d050e48 ✅ tests: add a bot-detection scenario to the Docker e2e suite feat/e2e-docker mhxandClaude Opus 5.5 2026-10-17 19:47:58 +02:00
• 8a86c188b6 ✨ tests: add local Docker end-to-end suite (Traefik + Crowdsec) mhxandClaude Opus 4.8 2026-06-05 18:18:16 +02:00
• 77830c58fb 🐛 do not ban a request whose client aborted the body upload mhxandClaude Opus 5.5 2026-10-11 20:24:39 +02:00
• 3926309ec6 🐛 close the remaining gaps with CrowdSec's bot-detection protocol (#403) main mathieuHaandClaude Opus 5.5 2026-10-17 19:40:36 +02:00
• eda8e62b3c 📝 document that bot detection needs the challenge submission body fix/bot-detection-protocol mhxandClaude Opus 5.5 2026-10-12 18:28:24 +02:00
• 0a4c1f70cf 🐛 count a challenge once in the blocked requests, not its assets mhxandClaude Opus 5.5 2026-10-12 18:27:53 +02:00
• 858db93849 🐛 never forward /crowdsec-internal/challenge/* to the backend mhxandClaude Opus 5.5 2026-10-12 18:27:17 +02:00
• 5820e54cbe 🐛 serve the captcha when AppSec answers with a captcha action mhxandClaude Opus 5.5 2026-10-12 18:32:50 +02:00
• 5683d2c729 🐛 log unexpected AppSec statuses at INFO mhxandClaude Opus 5.5 2026-10-12 18:24:43 +02:00
• 49106d18e6 🐛 ban LAPI decisions of an unknown type, such as challenge mhxandClaude Opus 5.5 2026-10-12 18:23:53 +02:00
• 0ab03bc032 ⬆️ renovate: Update all renovate/all Renovate Bot 2026-10-16 08:45:32 +00:00
• e740cdaee4 🐛 fail an AppSec challenge without a body closed, and replace its headers (#398) 3 people 2026-10-13 19:36:56 +02:00
• 1377a97e63 🍱 reduce readme modif fix/397-appsec-challenge maxlerebourg 2026-10-13 19:21:22 +02:00
• 82b78de6df 📝 explain the challenge Content-Security-Policy and the middleware order mhxandClaude Opus 5.5 2026-10-12 18:04:09 +02:00
• efaa617e6d 🐛 keep the stream and metrics tickers on their own channels (#399) mathieuHaandClaude Opus 5.5 2026-10-11 13:57:12 +02:00
• bd94fb0c2b 🐛 forward client HTTP version to AppSec via X-Crowdsec-Appsec-Http-Version (#400) ffluegel 2026-10-11 13:47:02 +02:00
• 51ca1e02b7 🐛 fail an AppSec challenge without a body closed, and replace its headers mhxandClaude Opus 5.5 2026-09-24 20:25:06 +02:00
• 6d7fd1426e 🎨 share the redis error mapping and drop what mget does not need feat/cidr-mget mhxandClaude Opus 5.5 2026-09-24 19:20:37 +02:00
• 15b9c5fec8 ✅ count the keys a CIDR lookup probes, not only the reads mhxandClaude Opus 5.5 2026-09-24 19:20:37 +02:00
• f435736c2d 🔍 bracket the stream fetch to split LAPI time from cache-apply time diag/stream-fetch-instrumentation mhxandClaude Opus 5 2026-09-17 19:22:25 +02:00
• 2555f53113 ✨ log the stream ticker firing and the stream fetch starting feat/stream-fetch-debug-logging mhxandClaude Opus 5 2026-09-17 19:16:54 +02:00
• 710e88808b add the bot detection feature to the crowdsec traefik bouncer (#343) v1.8.0-alpha 4 people 2026-09-12 14:58:48 +02:00
• 73361a635e Disable request blocking when CrowdSec is unavailable in live mode. (#373) 3 people 2026-09-07 12:27:24 +05:00
• 3314c3afa7 ⬆️ renovate: Update all (#378) maxlerebourgandRenovate Bot 2026-09-07 09:23:39 +02:00
• 27a63ff953 🔍 log ticker receive and spawn separately to locate the #377 stall diag/ticker-instrumentation mhxandClaude Opus 5 2026-09-07 08:03:27 +02:00
• c70bd638c5 🐛 teach the e2e redis mock RESP so the pooled client can talk to it mhxandClaude Opus 5 2026-09-05 13:58:39 +02:00
• 8e66210c5e ⚡ batch the CIDR lookup into one read instead of one per prefix length mhxandClaude Opus 5 2026-09-05 10:58:45 +02:00
• 04d928872d 🐛 do not drop bodyless DELETE over HTTP/3 (#386) mathieuHaandmaxlerebourg 2026-09-05 10:55:00 +02:00
• 5aa4b94d92 🍱 Mutualize new utils fix/delete-h3-unreadable-body maxlerebourg 2026-09-04 12:08:05 +02:00
• 4e2bfeb142 ⬆️ bump simpleredis to the pooled build, teach the e2e mock RESP pointer-redis-readers mhxandClaude Opus 5 2026-09-04 11:07:18 +02:00
• 3ceb9617f2 ♻️ cache: keep redis readers by pointer mhxandClaude Opus 5 2026-09-04 11:02:13 +02:00
• 7c96810d3b 🐛 do not drop bodyless DELETE over HTTP/3 mhx 2026-09-04 11:00:41 +02:00
• 23ce76d3da 🐛 drain the appsec response body so connections are reused (#387) mathieuHa 2026-09-03 10:24:53 +02:00
• 5d0ae282b8 🍱 reduce slop fix/appsec-drain-and-pool maxlerebourg 2026-09-03 10:17:52 +02:00
• c7096d7c09 🍱 Simplify comments on connection draining logic maxlerebourg 2026-09-03 10:13:05 +02:00
• c5e0930658 🐛 restore the drain that a stray checkout reverted mhx 2026-09-03 09:16:19 +02:00
• 7eedf65641 🐛 avoid range-over-int so yaegi can parse the test mhx 2026-09-03 09:08:17 +02:00
• d7aa10477d 🐛 fix lint: check the appsec stub write in the reuse test mhx 2026-09-03 08:59:12 +02:00
• 60d6d57625 🐛 drain the appsec response body so connections are reused mhx 2026-09-03 08:52:51 +02:00
• 0f8608d770 Merge remote-tracking branch 'origin' into 271-feature-support-decision-scope 271-feature-support-decision-scope maxlerebourg 2026-08-24 20:51:27 +02:00
• ae7481caa5 ⬆️ renovate: Update all (#375) maxlerebourgandRenovate Bot 2026-08-20 12:05:45 +02:00
• 955391671c ♻️ review fixes for #368: CIDR key correctness, lookup cost, tests (#372) mathieuHaandClaude Opus 5 2026-08-07 21:10:44 +02:00
• 93cd13bc10 🔥 e2e: drop the comment above wait_for_status 368-review-fixes mhxandClaude Opus 5 2026-08-07 20:14:58 +02:00
• 9f99c431c3 ⏪ e2e: restore the stream-mode failure check mhxandClaude Opus 5 2026-08-07 20:14:55 +02:00
• 9b8d6b937c 🐛 keep the stream lease alive when updateIntervalSeconds is 1 (#371) mathieuHaandmaxlerebourg 2026-08-07 19:11:54 +02:00
• d57ead2ec7 ⬆️ renovate: Update actions/setup-go action to v7 (#364) maxlerebourgandRenovate Bot 2026-08-07 12:15:10 +02:00
• 022747488c Adjust lease duration to prevent cache update conflicts fix/370-stream-lease-zero-duration maxlerebourg 2026-08-07 12:12:59 +02:00
• 3f78887e3a 🐛 e2e: do not fail a scenario on a single slow response mhx 2026-07-31 19:26:47 +02:00
• 99673b1087 🐛 e2e: stop racing the deadline in the stream failure check mhx 2026-07-31 19:26:04 +02:00
• 4bac63ca83 ✅ cache: cover the CIDR operations and what a lookup costs mhx 2026-07-31 19:25:05 +02:00
• 0ed8154340 🐛 keep the stream lease alive when updateIntervalSeconds is 1 mhx 2026-07-31 19:21:06 +02:00
• b1562ef2b9 ✅ cidr: cover the invariant the range matching rests on mhx 2026-07-31 19:23:07 +02:00
• 3b7168a789 🔊 cidr: log the decisions dropped for an unparsable CIDR mhx 2026-07-31 19:18:02 +02:00
• adffe64319 ⚡ cidr: only probe the prefix lengths that have a decision mhx 2026-07-31 19:17:31 +02:00
• 1b1247823c ♻️ cidr: build keys through net.IPNet instead of hand-masking bytes mhx 2026-07-31 19:14:22 +02:00
• 1ba556e918 🍱 fix lint maxlerebourg 2026-07-31 14:39:09 +02:00
• 6b0518859d 🐛 Support range decision on stream mode maxlerebourg 2026-07-31 14:08:59 +02:00
• bef5dfaadb 🔖 release v1.7.1 (#367) v1.7.1 github-actions[bot]andgithub-actions[bot] 2026-07-31 13:05:36 +02:00
• 2244a4d7ac 🔖 release v1.7.1 release/v1.7.1 github-actions[bot] 2026-07-31 11:04:14 +00:00
• 99cf9712f4 ✨ cicd: bump the version before tagging so releases report their own version (#365) 3 people 2026-07-30 20:18:15 +02:00
• ed4a9e8262 ⬆️ renovate: Update all (#362) maxlerebourgandRenovate Bot 2026-07-27 21:09:55 +02:00
• f6ef95cf38 🐛 fix default value for CrowdsecAppsecUnreadableBodyBlock (#361) maxlerebourg 2026-07-27 08:53:32 +02:00
• 9daba9739c ⬆️ renovate: Update all (#350) v1.7.0 maxlerebourgandRenovate Bot 2026-07-26 17:06:02 +02:00
• e98b8ed5ba ✨ Renovate update version.go (#360) maxlerebourg 2026-07-26 17:05:43 +02:00
• 9ea2ea2419 🍱 renovate every day renovate-update-version-go maxlerebourg 2026-07-26 14:23:05 +02:00
• 1dedaa0571 ✨ Renovate update version.go maxlerebourg 2026-07-26 14:10:43 +02:00
• 1a6d812bd4 ✨ Renovate update version.go renovate-update-version maxlerebourg 2026-07-26 14:10:43 +02:00
• bb44aef718 ✨ feat: Allow cache reading from replicas (#342) 4 people 2026-07-26 13:51:22 +02:00
• a7915ee370 🐛 fix test maxlerebourg 2026-07-26 13:48:55 +02:00
• 8335f2c3e7 🍱 add tests for roundRobin maxlerebourg 2026-07-26 13:45:50 +02:00
• 9c8a391eff 🐛 fix test label; remove log maxlerebourg 2026-07-26 13:19:41 +02:00
• 6b5dc0243f 🐛 fix redis/run.sh maxlerebourg 2026-07-26 13:04:10 +02:00
• 947f56f265 🐛 readd redis/run.sh maxlerebourg 2026-07-26 12:56:55 +02:00
• 75227becca 🍱 add test for rotation maxlerebourg 2026-07-26 03:04:42 +02:00
• 0344e82223 🐛 fix(cache): avoid nil-pointer panic on empty redis read mhxandClaude Opus 4.8 2026-07-25 21:38:03 +02:00
• 73e53c7d69 📝 docs: note replicas don't fall back to primary on outage mhxandClaude Opus 4.8 2026-07-25 21:24:11 +02:00
• 96beb9192e ✅ test(e2e/redis): exercise read-from-replica path mhxandClaude Opus 4.8 2026-07-25 21:21:20 +02:00
• 8eceba35b7 📝 test(e2e/redis): fix swapped IP→verdict comments mhxandClaude Opus 4.8 2026-07-25 21:11:42 +02:00
• 440ad19c9d Merge remote-tracking branch 'main/main' maxlerebourg 2026-07-25 19:17:47 +02:00
• e469cd5786 🍱 fix permission maxlerebourg 2026-07-25 16:40:06 +02:00
• 1e0dadedb2 ✨ add testing for redis with mock maxlerebourg 2026-07-25 16:30:36 +02:00
• 6958432a7c 🍱 fix logic maxlerebourg 2026-07-25 15:35:08 +02:00
• 31874263f2 🐛 Do not consider body unreadable when it's http.NoBody (#352) 4 people 2026-07-24 20:49:43 +02:00
• ad7596ff85 feat: Allow cache reading from replicas Sam Toxopeus 2026-06-22 10:17:59 +02:00
• 1c98c70f14 ⬆️ renovate: Update all (#349) maxlerebourgandRenovate Bot 2026-07-05 19:56:15 +02:00
• be13c49144 🐛 ci(renovate): fix OOM crash and stop using Mend's default gitAuthor (#347) mathieuHaandClaude Fable 5 2026-07-05 19:36:44 +02:00
• 5ccc2ac498 🐛 ci(renovate): fix OOM crash and stop using Mend's default gitAuthor fix/renovate-oom-gitauthor mhxandClaude Fable 5 2026-07-05 12:14:13 +02:00
• 5a2998bc62 ⬆️ renovate: Update all (#345) maxlerebourgandRenovate Bot 2026-07-03 10:19:28 +02:00
• 26ce12f7e3 🤖 chore: adopt Renovate for automated dependency updates (#330) 3 people 2026-07-03 09:22:14 +02:00
• d32f271195 🐛 appsec: do not buffer unreadable (gRPC/HTTP2) request bodies (#332) v1.7.0-alpha 3 people 2026-07-01 12:44:58 +02:00
• 1c1672c856 ✨ Consider 502, 503 and 504 as unavaible for appsec (#338) Daniel Berteaudandmaxlerebourg 2026-06-30 22:03:06 +02:00
• 21895fbb9d ⬆️ Bump actions/cache from 5 to 6 (#344) dependabot[bot] 2026-06-29 10:11:22 +02:00
• 7c73cb38dd ✨ Add parameter to configure the ban page Content-Type response header (#325) omerandmaxlerebourg 2026-06-28 22:30:48 +02:00
• f4dcd933c8 🐛 fall back to system trust store when no custom TLS CA is set (#331) mathieuHaandClaude Opus 4.8 2026-06-23 09:27:32 +02:00
• 67b33dcf13 ⬆️ Bump actions/checkout from 6 to 7 (#341) dependabot[bot] 2026-06-22 08:56:27 +02:00
• 661a89ea9c ⬆️ Bump actions/upload-artifact from 4 to 7 (#336) dependabot[bot] 2026-06-15 08:49:57 +02:00
• 14b9c47ab2 ✨ tests: CI end-to-end suite — Traefik binary + mock LAPI (#329) mathieuHaandClaude Opus 4.8 2026-06-14 18:49:18 +02:00
• f5d580578c 📝 docs: fix Mermaid diagrams not rendering (lowercase destroy keyword) (#335) mathieuHaandClaude Opus 4.8 2026-06-14 18:40:56 +02:00
• 8497f7de75 ✅ e2e mock: add AppSec scenario + custom remediation header assertion feat/e2e-tests mhxandClaude Opus 4.8 2026-06-06 21:33:52 +02:00