caddy-waf/CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[v0.1.5] - 2025-12-08

Fixed

• Fixed critical bug where POST request bodies were lost or truncated by using io.MultiReader to restore the full body stream (fixes #76).

[v0.1.4] - 2025-12-06

Security

• Fixed Panic vulnerability in quic-go by upgrading to v0.54.0 (requires Caddy v2.10.x and Go 1.25).
• Addressed Dependabot Alert #7.

Changed

• Upgraded Caddy dependency to v2.10.2.
• Upgraded Go requirement to 1.25.
• Improved CI workflows to use Go 1.25 for build and release.

[v0.1.3] - 2025-12-06

Fixed

• Downgraded quic-go to v0.48.2 and Caddy to v2.9.1 to temporarily resolve Go version conflicts (superseded by v0.1.4).
• Fixed import grouping for gci linter compliance.
• Fixed GitHub Actions release workflow.

[v0.1.2] - 2025-12-06

Added

• SOTA Engineering patterns (Zero-Copy headers, Wait-Free Ring Buffer, Circuit Breaker).
• ASN Blocking support.
• Configurable Request Body size limit.
• GeoIP Fail Open configuration.