diff --git a/CHANGELOG.md b/CHANGELOG.md index 8e5cce58d..b9443ff18 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,11 +2,23 @@ ## v1.5.8 - ????/??/?? +- [BUGFIX] Fix potential errors when upgrading from a previous version +- [BUGFIX] Fix rare bug on the web UI when editing the SERVER_NAME setting of a service +- [BUGFIX] Fix potential race conditions between the autoconf and the scheduler waiting for each other indefinitely - [FEATURE] Add nightly build of the OWASP coreruleset that are automatically downloaded and updated - [FEATURE] Enhance security on error pages, default server page and loading page by adding a custom `Content-Security-Policy` header with nonces and removing the `Server` header +- [FEATURE] Add new DATABASE_URI_READONLY setting to allow setting up a fallback read-only database URI in case the main database URI is not available +- [FEATURE] Add automatic fallback to either read-only on the primary database or to the read-only database URI when the main database URI is not available and automatically switch back to the main database URI when it becomes available again +- [FEATURE] Add experimental support of HTTP/3 (QUIC) with NGINX +- [FEATURE] Optimize the way the scheduler handles jobs and the way the jobs are executed +- [FEATURE] Optimize the way the cache files are being refreshed from the database - [UI] Force HTTPS on setup wizard - [UI] Fallback to self-signed certificate when UI is installed with setup wizard and let's encrypt is not used +- [UI] Add OVERRIDE_ADMIN_CREDS environment variable to allow overriding the default admin credentials even if an admin user already exists +- [DEPS] Updated NGINX version to v1.26.0 +- [DEPS] Updated stream-lua-nginx-module version to the latest commit to incorporate the latest changes and fixes for NGINX v1.26.0 - [DEPS] Updated coreruleset-v4 version to v4.3.0 +- [DEPS] Updated lua-resty-openssl version to v1.4.0 ## v1.5.7 - 2024/05/14