diff mbox series

[meta-webserver,3/3] nginx: upgrade mainline 1.29.7 -> 1.29.8

Message ID 20260502205501.185550-3-tim.orling@konsulko.com
State New
Headers show
Series [meta-webserver,1/3] nginx: upgrade stable 1.28.3 -> 1.30.0 | expand

Commit Message

Tim Orling May 2, 2026, 8:55 p.m. UTC 
From: Tim Orling <tim.orling@konsulko.com>

2026-04-07
nginx 1.29.8 is the final release of the 1.29.x mainline branch,
published a week before the 1.30.0 stable cut on 2026-04-14. After
this point the 1.29.x branch is closed; new development will continue
on a future 1.31.x mainline.

Notable changes in 1.29.8:

  * New 'max_headers' directive that bounds the number of HTTP headers
    accepted per request, mitigating header-based DoS exposure.
  * OpenSSL 4.0 build compatibility.
  * The 'include' directive inside a 'geo' block now accepts wildcard
    patterns, matching behaviour in other contexts.
  * Bug fix: handling of HTTP 103 (Early Hints) responses received
    from a proxied backend.
  * Bug fix: $request_port and $is_request_port are now available in
    subrequests (previously only in the originating request).

Also refreshes the recipe header comment to reflect 1.30.x being the
current stable branch (it had previously identified 1.28.x as stable).

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
---
 meta-webserver/recipes-httpd/nginx/nginx_1.29.7.bb | 10 ----------
 meta-webserver/recipes-httpd/nginx/nginx_1.29.8.bb | 11 +++++++++++
 2 files changed, 11 insertions(+), 10 deletions(-)
 delete mode 100644 meta-webserver/recipes-httpd/nginx/nginx_1.29.7.bb
 create mode 100644 meta-webserver/recipes-httpd/nginx/nginx_1.29.8.bb

Comments

Ankur Tyagi May 2, 2026, 11:02 p.m. UTC | #1 
On Sun, May 3, 2026 at 8:55 AM Tim Orling via lists.openembedded.org
<tim.orling=konsulko.com@lists.openembedded.org> wrote:
>
> From: Tim Orling <tim.orling@konsulko.com>
>
> 2026-04-07
> nginx 1.29.8 is the final release of the 1.29.x mainline branch,
> published a week before the 1.30.0 stable cut on 2026-04-14. After
> this point the 1.29.x branch is closed; new development will continue
> on a future 1.31.x mainline.

There isn't any difference between 1.30.0 and 1.29.8 except[1].
Don't see benefit in adding both versions.

There is a discussion already going around this[2], will be good to
hear your thoughts.

[1]https://github.com/nginx/nginx/commit/654367cb11b08b0a5a67b08d5e1ff058de8b13c3
[2]https://lists.openembedded.org/g/openembedded-devel/message/126762

cheers
Ankur

>
> Notable changes in 1.29.8:
>
>   * New 'max_headers' directive that bounds the number of HTTP headers
>     accepted per request, mitigating header-based DoS exposure.
>   * OpenSSL 4.0 build compatibility.
>   * The 'include' directive inside a 'geo' block now accepts wildcard
>     patterns, matching behaviour in other contexts.
>   * Bug fix: handling of HTTP 103 (Early Hints) responses received
>     from a proxied backend.
>   * Bug fix: $request_port and $is_request_port are now available in
>     subrequests (previously only in the originating request).
>
> Also refreshes the recipe header comment to reflect 1.30.x being the
> current stable branch (it had previously identified 1.28.x as stable).
>
> Signed-off-by: Tim Orling <tim.orling@konsulko.com>
> ---
>  meta-webserver/recipes-httpd/nginx/nginx_1.29.7.bb | 10 ----------
>  meta-webserver/recipes-httpd/nginx/nginx_1.29.8.bb | 11 +++++++++++
>  2 files changed, 11 insertions(+), 10 deletions(-)
>  delete mode 100644 meta-webserver/recipes-httpd/nginx/nginx_1.29.7.bb
>  create mode 100644 meta-webserver/recipes-httpd/nginx/nginx_1.29.8.bb
>
> diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.29.7.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.29.7.bb
> deleted file mode 100644
> index 4d884fcbb3..0000000000
> --- a/meta-webserver/recipes-httpd/nginx/nginx_1.29.7.bb
> +++ /dev/null
> @@ -1,10 +0,0 @@
> -require nginx.inc
> -
> -# 1.28.x branch is the current stable branch, the recommended default
> -# 1.29.x is the current mainline branches containing all new features
> -DEFAULT_PREFERENCE = "-1"
> -
> -LIC_FILES_CHKSUM = "file://LICENSE;md5=79da1c70d587d3a199af9255ad393f99"
> -
> -SRC_URI[sha256sum] = "673f8fb8c0961c44fbd9410d6161831453609b44063d3f2948253fc2b5692139"
> -
> diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.29.8.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.29.8.bb
> new file mode 100644
> index 0000000000..f810ac219d
> --- /dev/null
> +++ b/meta-webserver/recipes-httpd/nginx/nginx_1.29.8.bb
> @@ -0,0 +1,11 @@
> +require nginx.inc
> +
> +# 1.30.x branch is the current stable branch, the recommended default
> +# 1.29.x is the most recent mainline branch (final release before the
> +# 1.30.x stable cut on 2026-04-14)
> +DEFAULT_PREFERENCE = "-1"
> +
> +LIC_FILES_CHKSUM = "file://LICENSE;md5=79da1c70d587d3a199af9255ad393f99"
> +
> +SRC_URI[sha256sum] = "7f1b985dace8fe706dfc288b83927c928f0ae60bcb7507c2d4e0025eca7280c3"
> +
> --
> 2.47.3
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#126766): https://lists.openembedded.org/g/openembedded-devel/message/126766
> Mute This Topic: https://lists.openembedded.org/mt/119120498/3619737
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [ankur.tyagi85@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
Tim Orling May 3, 2026, 3:14 a.m. UTC | #2 
On Sat, May 2, 2026 at 4:02 PM Ankur Tyagi <ankur.tyagi85@gmail.com> wrote:

> On Sun, May 3, 2026 at 8:55 AM Tim Orling via lists.openembedded.org
> <tim.orling=konsulko.com@lists.openembedded.org> wrote:
> >
> > From: Tim Orling <tim.orling@konsulko.com>
> >
> > 2026-04-07
> > nginx 1.29.8 is the final release of the 1.29.x mainline branch,
> > published a week before the 1.30.0 stable cut on 2026-04-14. After
> > this point the 1.29.x branch is closed; new development will continue
> > on a future 1.31.x mainline.
>
> There isn't any difference between 1.30.0 and 1.29.8 except[1].
> Don't see benefit in adding both versions.
>
> There is a discussion already going around this[2], will be good to
> hear your thoughts.


Good point. I was just updating to the latest “mainline” according to the
website. I’d suggest we wait for 1.31.x to branch and update the “mainline”
recipe at that time. We should keep the “stable” 1.30.0 upgrade.

>
>
> [1]
> https://github.com/nginx/nginx/commit/654367cb11b08b0a5a67b08d5e1ff058de8b13c3
> [2]https://lists.openembedded.org/g/openembedded-devel/message/126762
>
> cheers
> Ankur
>
> >
> > Notable changes in 1.29.8:
> >
> >   * New 'max_headers' directive that bounds the number of HTTP headers
> >     accepted per request, mitigating header-based DoS exposure.
> >   * OpenSSL 4.0 build compatibility.
> >   * The 'include' directive inside a 'geo' block now accepts wildcard
> >     patterns, matching behaviour in other contexts.
> >   * Bug fix: handling of HTTP 103 (Early Hints) responses received
> >     from a proxied backend.
> >   * Bug fix: $request_port and $is_request_port are now available in
> >     subrequests (previously only in the originating request).
> >
> > Also refreshes the recipe header comment to reflect 1.30.x being the
> > current stable branch (it had previously identified 1.28.x as stable).
> >
> > Signed-off-by: Tim Orling <tim.orling@konsulko.com>
> > ---
> >  meta-webserver/recipes-httpd/nginx/nginx_1.29.7.bb | 10 ----------
> >  meta-webserver/recipes-httpd/nginx/nginx_1.29.8.bb | 11 +++++++++++
> >  2 files changed, 11 insertions(+), 10 deletions(-)
> >  delete mode 100644 meta-webserver/recipes-httpd/nginx/nginx_1.29.7.bb
> >  create mode 100644 meta-webserver/recipes-httpd/nginx/nginx_1.29.8.bb
> >
> > diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.29.7.bb
> b/meta-webserver/recipes-httpd/nginx/nginx_1.29.7.bb
> > deleted file mode 100644
> > index 4d884fcbb3..0000000000
> > --- a/meta-webserver/recipes-httpd/nginx/nginx_1.29.7.bb
> > +++ /dev/null
> > @@ -1,10 +0,0 @@
> > -require nginx.inc
> > -
> > -# 1.28.x branch is the current stable branch, the recommended default
> > -# 1.29.x is the current mainline branches containing all new features
> > -DEFAULT_PREFERENCE = "-1"
> > -
> > -LIC_FILES_CHKSUM = "file://LICENSE;md5=79da1c70d587d3a199af9255ad393f99"
> > -
> > -SRC_URI[sha256sum] =
> "673f8fb8c0961c44fbd9410d6161831453609b44063d3f2948253fc2b5692139"
> > -
> > diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.29.8.bb
> b/meta-webserver/recipes-httpd/nginx/nginx_1.29.8.bb
> > new file mode 100644
> > index 0000000000..f810ac219d
> > --- /dev/null
> > +++ b/meta-webserver/recipes-httpd/nginx/nginx_1.29.8.bb
> > @@ -0,0 +1,11 @@
> > +require nginx.inc
> > +
> > +# 1.30.x branch is the current stable branch, the recommended default
> > +# 1.29.x is the most recent mainline branch (final release before the
> > +# 1.30.x stable cut on 2026-04-14)
> > +DEFAULT_PREFERENCE = "-1"
> > +
> > +LIC_FILES_CHKSUM = "file://LICENSE;md5=79da1c70d587d3a199af9255ad393f99"
> > +
> > +SRC_URI[sha256sum] =
> "7f1b985dace8fe706dfc288b83927c928f0ae60bcb7507c2d4e0025eca7280c3"
> > +
> > --
> > 2.47.3
> >
> >
> > -=-=-=-=-=-=-=-=-=-=-=-
> > Links: You receive all messages sent to this group.
> > View/Reply Online (#126766):
> https://lists.openembedded.org/g/openembedded-devel/message/126766
> > Mute This Topic: https://lists.openembedded.org/mt/119120498/3619737
> > Group Owner: openembedded-devel+owner@lists.openembedded.org
> > Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [
> ankur.tyagi85@gmail.com]
> > -=-=-=-=-=-=-=-=-=-=-=-
> >
>
diff mbox series

Patch

diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.29.7.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.29.7.bb
deleted file mode 100644
index 4d884fcbb3..0000000000
--- a/meta-webserver/recipes-httpd/nginx/nginx_1.29.7.bb
+++ /dev/null
@@ -1,10 +0,0 @@ 
-require nginx.inc
-
-# 1.28.x branch is the current stable branch, the recommended default
-# 1.29.x is the current mainline branches containing all new features
-DEFAULT_PREFERENCE = "-1"
-
-LIC_FILES_CHKSUM = "file://LICENSE;md5=79da1c70d587d3a199af9255ad393f99"
-
-SRC_URI[sha256sum] = "673f8fb8c0961c44fbd9410d6161831453609b44063d3f2948253fc2b5692139"
-
diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.29.8.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.29.8.bb
new file mode 100644
index 0000000000..f810ac219d
--- /dev/null
+++ b/meta-webserver/recipes-httpd/nginx/nginx_1.29.8.bb
@@ -0,0 +1,11 @@ 
+require nginx.inc
+
+# 1.30.x branch is the current stable branch, the recommended default
+# 1.29.x is the most recent mainline branch (final release before the
+# 1.30.x stable cut on 2026-04-14)
+DEFAULT_PREFERENCE = "-1"
+
+LIC_FILES_CHKSUM = "file://LICENSE;md5=79da1c70d587d3a199af9255ad393f99"
+
+SRC_URI[sha256sum] = "7f1b985dace8fe706dfc288b83927c928f0ae60bcb7507c2d4e0025eca7280c3"
+