8000 Update caddy to 2.11.7 by gominimal-pkgmgr-mgr[bot] · Pull Request #808 · gominimal/pkgs · GitHub
[go: up one dir, main page]
Skip to content

Update caddy to 2.11.7 - #808

Merged
bryan-minimal merged 1 commit into
mainfrom
update-caddy-2.11.7
Oct 5, 2026
Merged

Update caddy to 2.11.7#808
bryan-minimal merged 1 commit into
mainfrom
update-caddy-2.11.7

Conversation

@gominimal-pkgmgr-mgr
@gominimal-pkgmgr-mgr gominimal-pkgmgr-mgr Bot commented Oct 4, 2026
Copy link
Copy Markdown
Contributor

Update caddy 2.11.4 → 2.11.7

Source: github:caddyserver/caddy
Release: https://github.com/caddyserver/caddy/releases/tag/v2.11.7
Changelog: caddyserver/caddy@v2.11.4...v2.11.7
Released: 1 days ago (2026-10-03)

Pkgscan: clean — diff against the prior version surfaced no newly-introduced suspicious patterns.

Vulnerability impact

Partition analysis at 2.11.7 (uses each advisory's fixed-version, vulnerable-range, affected-ranges, and fix-commit ancestry to decide):

  • 1 cleared — the new version is outside the advisory's affected range, OR the tag's lineage includes a known fix-commit. These will drop off the next scan.

Vulnerabilities fixed (1)

This update clears 1 vulnerabilities affecting 2.11.4:

CVE / GHSA CPE Severity Fixed in
GHSA-6365-7ppr-5r92 (caddyserver, caddy) MEDIUM 2.11.5
Advisory summaries
  • GHSA-6365-7ppr-5r92 — Connection created for the wrong upstream for forward_auth + reverse_proxy (Published 2026-07-10)

Components changed

CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)
Component Old New
~ caddy 2.11.4 2.11.7
~ caddy-upstream 2.11.4 2.11.7

Changes

Old New
Version 2.11.4 2.11.7
SHA256 2c3d02078286a628... 86e39de5fa0bc433...
Size 844 KB 1.1 MB
Source gs://minimal-staging-archives/caddyserver/caddy/v2.11.4.tar.gz gs://minimal-staging-archives/caddyserver/caddy/v2.11.7.tar.gz
  • License: Apache-2.0 (source: GitHub + tarball)

Quality suggestions

  • Missing tests block. This package has no standalone tests, so the buildbot will only verify compilation — not functional correctness. Consider adding a minimal smoke test (e.g., a --version or small round-trip invocation) as part of this PR so future bumps catch regressions. See packages/python/build.ncl for a simple example.

Created by pkgmgr

@gominimal-pkgmgr-mgr
gominimal-pkgmgr-mgr Bot requested a review from a team as a code owner October 4, 2026 21:20
@coderabbitai
coderabbitai Bot commented Oct 4, 2026
Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: gominimal/pkgs/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 2a7d05e8-ab08-4c71-b953-008cb5f72a44

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@bryan-minimal
bryan-minimal added this pull request to the merge queue Oct 5, 2026
Merged via the queue into main with commit b8b6f09 Oct 5, 2026
11 checks passed
@bryan-minimal
bryan-minimal deleted the update-caddy-2.11.7 branch October 5, 2026 23:31
This was referenced Oct 26, 2026
Merged
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bryan-minimal bryan-minimal bryan-minimal approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bryan-minimal
0