diff mbox series

[meta-webserver,1/3] nginx: upgrade stable 1.28.3 -> 1.30.0

Message ID 20260502205501.185550-1-tim.orling@konsulko.com
State New
Headers show
Series [meta-webserver,1/3] nginx: upgrade stable 1.28.3 -> 1.30.0 | expand

Commit Message

Tim Orling May 2, 2026, 8:54 p.m. UTC 
From: Tim Orling <tim.orling@konsulko.com>

2026-04-14
nginx 1.30.0 is the new annual stable branch, replacing 1.28.x as the
recommended branch for production deployments. Per nginx's release
model, each new stable line is cut from the prior year's mainline
(odd-numbered) branch; 1.30.x therefore carries forward the features
and fixes developed in 1.29.x. The 1.28.x branch enters maintenance
mode and will receive only critical security fixes from this point.

Inheriting from 1.29.x, the new stable line brings: HTTP Early Hints
(status code 103) for proxied responses, HTTP/2 transport to upstream
backends, Encrypted ClientHello (ECH) for TLS, sticky session support
for upstream groups, Multipath TCP (MPTCP) support, and a default
proxy_http_version raised from 1.0 to 1.1 with keep-alive enabled.
That last item is a behavioural change worth noting: deployments that
were implicitly relying on the prior 1.0 default for upstream
connections may see different connection-reuse and trailers behaviour
after this upgrade. See the upstream CHANGES file for the complete
list of additions, fixes, and behavioural changes between 1.28.x and
1.30.0.

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
---
 meta-webserver/recipes-httpd/nginx/nginx_1.28.3.bb | 7 -------
 meta-webserver/recipes-httpd/nginx/nginx_1.30.0.bb | 5 +++++
 2 files changed, 5 insertions(+), 7 deletions(-)
 delete mode 100644 meta-webserver/recipes-httpd/nginx/nginx_1.28.3.bb
 create mode 100644 meta-webserver/recipes-httpd/nginx/nginx_1.30.0.bb
diff mbox series

Patch

diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.28.3.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.28.3.bb
deleted file mode 100644
index 9872a6de3b..0000000000
--- a/meta-webserver/recipes-httpd/nginx/nginx_1.28.3.bb
+++ /dev/null
@@ -1,7 +0,0 @@ 
-require nginx.inc
-
-LIC_FILES_CHKSUM = "file://LICENSE;md5=3dc49537b08b14c8b66ad247bb4c4593"
-
-SRC_URI[sha256sum] = "2c96a946bfb0882a21744ed429770a2123ae1828c7c48665092993ddee91a918"
-
-CVE_STATUS[CVE-2025-53859] = "cpe-stable-backport: Fix is included in 1.28.1"
diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.30.0.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.30.0.bb
new file mode 100644
index 0000000000..644f391e27
--- /dev/null
+++ b/meta-webserver/recipes-httpd/nginx/nginx_1.30.0.bb
@@ -0,0 +1,5 @@ 
+require nginx.inc
+
+LIC_FILES_CHKSUM = "file://LICENSE;md5=79da1c70d587d3a199af9255ad393f99"
+
+SRC_URI[sha256sum] = "058188c64bf22baecaa72b809a6318a4f9ba623889c554feab03f7cb853ab31b"