Fix CVE-2024-46256 and CVE-2024-46257
Reworked API Schema and validation, full openapi/swagger spec can be fetched from /api/schema endpoint
⚠️ Boolean fields in API responses are actual booleans now, not 0/1
API correctly returns 404 for operations on incorrect objects
Vastly improved API Cypress test suite, spins up local acme server for DNS certificate testing
Updated security deps
Add mijn.host dns plugin (thanks @RafaelSchridi)
Added active24 DNS provider (thanks @vggscqq)
swap mysql library and knex client for mysql2 (thanks @nlynzaad)
Add set directives for proxied paths to keep nginx from crashing if upstream is down (thanks @ddshd)
Fix app not restarting after log rotate (thanks @cqhtyi)
Add rockenstein AG DNS Plugin (thanks @rag-franky)
Add Edge DNS by Akamai (thanks @egobude)
fixed wedos password description (thanks @Hadatko)

Docker images

Should you encounter problems, use the docker tag 2.11.3 to downgrade.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [jc21/nginx-proxy-manager](https://github.com/jc21/nginx-proxy-manager) | minor | `2.11.3` -> `2.12.0` | --- ### Release Notes <details> <summary>jc21/nginx-proxy-manager (jc21/nginx-proxy-manager)</summary> ### [`v2.12.0`](https://github.com/NginxProxyManager/nginx-proxy-manager/releases/tag/v2.12.0) [Compare Source](https://github.com/jc21/nginx-proxy-manager/compare/v2.11.3...v2.12.0) **Important: Back up your entire instance before using this new version! As with any new version, there may be breaking changes.** 1. Bring your docker instance down 2. Zip or copy your `data` and `letsencrypt` folders 3. Pull this new image `jc21/nginx-proxy-manager:2.11.3` 4. Bring up your docker stack and check for any problems in the logs 5. Renew your DNS certs manually 6. Check some or all of your hosts for expected behaviour ##### Changes - Fix [CVE-2024-46256](https://github.com/advisories/GHSA-mhxx-5693-798f) and [CVE-2024-46257](https://github.com/advisories/GHSA-5rqg-4vpc-fpm2) - Reworked API Schema and validation, full openapi/swagger spec can be fetched from `/api/schema` endpoint - ⚠️ Boolean fields in API responses are actual booleans now, not 0/1 - API correctly returns 404 for operations on incorrect objects - Vastly improved API Cypress test suite, spins up local acme server for DNS certificate testing - Updated security deps - Add mijn.host dns plugin (thanks [@RafaelSchridi](https://github.com/RafaelSchridi)) - Added active24 DNS provider (thanks [@vggscqq](https://github.com/vggscqq)) - swap mysql library and knex client for mysql2 (thanks [@nlynzaad](https://github.com/nlynzaad)) - Add set directives for proxied paths to keep nginx from crashing if upstream is down (thanks [@ddshd](https://github.com/ddshd)) - Fix app not restarting after log rotate (thanks [@cqhtyi](https://github.com/cqhtyi)) - Add rockenstein AG DNS Plugin (thanks [@rag-franky](https://github.com/rag-franky)) - Add Edge DNS by Akamai (thanks [@egobude](https://github.com/egobude)) - fixed wedos password description (thanks [@Hadatko](https://github.com/Hadatko)) ##### Docker images - [jc21/nginx-proxy-manager:latest](https://hub.docker.com/layers/jc21/nginx-proxy-manager/latest/images/sha256-8ae693a9f923f62d7f7c0fdad4e4500867f69bb64673c319133494f58a921d44?context=explore) - [jc21/nginx-proxy-manager:2](https://hub.docker.com/layers/jc21/nginx-proxy-manager/2/images/sha256-8ae693a9f923f62d7f7c0fdad4e4500867f69bb64673c319133494f58a921d44?context=explore) - [jc21/nginx-proxy-manager:2.12.0](https://hub.docker.com/layers/jc21/nginx-proxy-manager/2.12.0/images/sha256-8ae693a9f923f62d7f7c0fdad4e4500867f69bb64673c319133494f58a921d44?context=explore) Should you encounter problems, use the docker tag `2.11.3` to downgrade. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovatebot added 1 commit 2024-10-16 03:01:22 -04:00