CADDY-2.11.0-BETA.1 release notes and known issues

Summary

Welcome to the beta version of 2.11. This is the first release made by our new, automated release process developed by @mohammed90 that was carried out and approved entirely by our maintainer team (together with @francislavoie ) without intervention from @mholt , the original Caddy author. This represents a significant step forward in project autonomy and growth , ensuring that the project's stability and longevity is not reliant upon a single person. This first beta release was primarily to test our new workflow, so there's still a couple things left to do before the stable release. Featured here are numerous, mostly minor, bug fixes and enhancements, mostly affecting edge cases or niche corners of the software; for example, proxying H2C or HTTP/3, obscure Caddyfile scenarios, and named socket activation. Some notable changes: SIGUSR1 can be used to reload configuration only if it was loaded from a file using the CLI, and not changed by the API since then. We replaced "lumberjack", our logging library, with a fork "timberjack" that supports the oft-requested time-rolling ability. Caddy can now bind listeners with named socket activation. Before the final release, we expect ECH key rotation to be enabled as well as a few other patches/features Thank you to our sponsors and contributors for all that you do! Changelog 5473eb9 encode: fix response corruption when handle_errors is used ( #7235 ) 13a4ec7 basicauth: Implement argon2id ( #7186 ) 6d90c77 build(deps): bump github.com/slackhq/nebula from 1.9.5 to 1.9.7 ( #7315 ) eead249 build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 ( #7355 ) 2d0f3f8 build(deps): bump the actions-deps group with 5 updates ( #7237 ) afbdcec build(deps): bump the actions-deps group with 8 updates ( #7284 ) cd1c203 build(deps): bump the all-updates group across 1 directory with 2 updates ( #7307 ) 39357d3 build(deps): bump the all-updates group with 17 updates ( #7236 ) 786d537 build(deps): bump the all-updates group with 3 updates ( #7376 ) 07d2aaf build(deps): bump the all-updates group with 4 updates ( #7333 ) 0ba8786 caddyfile: Allow block to do nothing if nothing passed to import ( #7206 ) 92c8bc7 caddyfile: fix nested quotes formatted incorrectly by fmt ( #7045 ) 6d73d85 caddyfile: prevent adding trailing space on line before env variable ( #7215 ) d7185fd caddyhttp: Add trusted_proxies_unix for trusting unix socket X-Forwarded-* headers ( #7265 ) de6b780 caddyhttp: Add server options keepalive_idle and keepalive_count ( #7298 ) e0a8f95 caddyhttp: Normalize (lowercase) {label.N} placeholders 5e29536 caddyhttp: add replacer placeholders for escaped values ( #7181 ) 8285eba caddyhttp: allow customizing the Server header ( #7338 ) bc0e184 caddyhttp: omit unnecessary reassignment ( #7276 ) 3553cfb caddyhttp: remove redundant middleware next copy ( #7217 ) 1ce2a13 caddyhttp: wrap accepted connection to suppress tls.ConnectionState ( #7247 ) d9cc24f caddypki: Disable internal auto-CA when auto_https is disabled (fix #7211 ) ( #7238 ) 1e82f96 caddypki: check intermediate lifetime to actual root cert lifetime ( #7272 ) 38848f7 caddytls: Allow disabling distributed solving (except http-01) ddec183 caddytls: correct documentation of LeafFolderLoader ( #7327 ) f5c3094 cmd: prevent commas in header values from being split ( #7268 ) 65e0ddc core: Reloading with SIGUSR1 if config never changed via admin ( #7258 ) b3f2db2 core: custom slog handlers for modules (log contextual data) ( #7346 ) b2ab419 core: use reflect.TypeFor to check for encoding/json.RawMessage ( #7274 ) 806fef8 encode: add graphql-response header to list ( #7214 ) 2cb4267 encode: modernize, replace HasSuffix+TrimSuffix with CutSuffix ( #7357 ) b462615 fileserver: set Content-Length for precompressed files ( #7251 ) 0c8798f go.mod: update quic-go to v0.54.1 ( #7273 ) 3c003de httpcaddyfile: Add missing DNS challenge check for acme_dns ( #7270 ) 2f1d270 httpcaddyfile: Map default_bind to BindHost in globalACMEDefaults ( #7278 ) a7885aa

Improvements and security content

• Welcome to the beta version of 2.11. This is the first release made by our new, automated release process developed by @mohammed90 that was carried out and approved entirely by our maintainer team (together with @francislavoie ) without intervention from @mholt , the original Caddy author. This represents a significant step forward in project autonomy and growth , ensuring that the project's stability and longevity is not reliant upon a single person. This first beta release was primarily to test our new workflow, so there's still a couple things left to do before the stable release. Featured here are numerous, mostly minor, bug fixes and enhancements, mostly affecting edge cases or niche corners of the software; for example, proxying H2C or HTTP/3, obscure Caddyfile scenarios, and named socket activation. Some notable changes: SIGUSR1 can be used to reload configuration only if it was loaded from a file using the CLI, and not changed by the API since then. We replaced "lumberjack", our logging library, with a fork "timberjack" that supports the oft-requested time-rolling ability. Caddy can now bind listeners with named socket activation. Before the final release, we expect ECH key rotation to be enabled as well as a few other patches/features Thank you to our sponsors and contributors for all that you do! Changelog 5473eb9 encode: fix response corruption when handle_errors is used ( #7235 ) 13a4ec7 basicauth: Implement argon2id ( #7186 ) 6d90c77 build(deps): bump github.com/slackhq/nebula from 1.9.5 to 1.9.7 ( #7315 ) eead249 build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 ( #7355 ) 2d0f3f8 build(deps): bump the actions-deps group with 5 updates ( #7237 ) afbdcec build(deps): bump the actions-deps group with 8 updates ( #7284 ) cd1c203 build(deps): bump the all-updates group across 1 directory with 2 updates ( #7307 ) 39357d3 build(deps): bump the all-updates group with 17 updates ( #7236 ) 786d537 build(deps): bump the all-updates group with 3 updates ( #7376 ) 07d2aaf build(deps): bump the all-updates group with 4 updates ( #7333 ) 0ba8786 caddyfile: Allow block to do nothing if nothing passed to import ( #7206 ) 92c8bc7 caddyfile: fix nested quotes formatted incorrectly by fmt ( #7045 ) 6d73d85 caddyfile: prevent adding trailing space on line before env variable ( #7215 ) d7185fd caddyhttp: Add trusted_proxies_unix for trusting unix socket X-Forwarded-* headers ( #7265 ) de6b780 caddyhttp: Add server options keepalive_idle and keepalive_count ( #7298 ) e0a8f95 caddyhttp: Normalize (lowercase) {label.N} placeholders 5e29536 caddyhttp: add replacer placeholders for escaped values ( #7181 ) 8285eba caddyhttp: allow customizing the Server header ( #7338 ) bc0e184 caddyhttp: omit unnecessary reassignment ( #7276 ) 3553cfb caddyhttp: remove redundant middleware next copy ( #7217 ) 1ce2a13 caddyhttp: wrap accepted connection to suppress tls.ConnectionState ( #7247 ) d9cc24f caddypki: Disable internal auto-CA when auto_https is disabled (fix #7211 ) ( #7238 ) 1e82f96 caddypki: check intermediate lifetime to actual root cert lifetime ( #7272 ) 38848f7 caddytls: Allow disabling distributed solving (except http-01) ddec183 caddytls: correct documentation of LeafFolderLoader ( #7327 ) f5c3094 cmd: prevent commas in header values from being split ( #7268 ) 65e0ddc core: Reloading with SIGUSR1 if config never changed via admin ( #7258 ) b3f2db2 core: custom slog handlers for modules (log contextual data) ( #7346 ) b2ab419 core: use reflect.TypeFor to check for encoding/json.RawMessage ( #7274 ) 806fef8 encode: add graphql-response header to list ( #7214 ) 2cb4267 encode: modernize, replace HasSuffix+TrimSuffix with CutSuffix ( #7357 ) b462615 fileserver: set Content-Length for precompressed files ( #7251 ) 0c8798f go.mod: update quic-go to v0.54.1 ( #7273 ) 3c003de httpcaddyfile: Add missing DNS challenge check for acme_dns ( #7270 ) 2f1d270 httpcaddyfile: Map default_bind to BindHost in globalACMEDefaults ( #7278 ) a7885aa

Affected products and versions

Recommended action

Review the official publisher document before deployment.

Official publisher evidence