CrowdSec v1.7.4-rc2

v1.7.4-rc2Pre-releaseWindowsLinux
Added 2
  • Add DropRequest helper to block request in hooks in WAF
  • Add option api.server.disable_usage_metrics_export
Changed 13
  • Update syslog to RestartableStreamer in pkg/acquisition
  • Refactor logging configuration and add log_media="syslog" option
  • Use backoff package to retry notifications in pkg/csplugin
  • Replace prom2json with native Prometheus parser and context-aware scraping in CLI metrics
  • Remove CROWDSEC_CONTAINER_ENV in docker
  • Update go-re2 to 1.10.0
Fixed 6
  • Fix accessLogger setup to separate file
  • Prevent data races in docker acquisition
  • Fix avoidable prometheus metrics cardinality
  • Remove forgotten debug print in loki acquisition
  • Show certificate path in lapi status command
  • Make decisionStream only select required fields from the DB
Changes
  • docker: remove CROWDSEC_CONTAINER_ENV (#4085) @mmetc
  • refact cscli: define csconfig.Getter once (#4091) @mmetc
  • refact load/save apic token: dependencies and sentinel errors (#4081) @mmetc
  • pkg/csplugin: use backoff package to retry notifications (#3944) @mmetc
  • refact pkg/database batching (#3906) @mmetc
  • refact pkg/acquisition: split appsec.go (#4043) @mmetc
  • refact pkg/acquisition: journalctl configuration (#4057) @mmetc
  • lint revive: lower complexity threshold (#4056) @mmetc
  • lint: unused parameters / 2 (#4055) @mmetc
  • lint: unused parameters (#4049) @mmetc
  • refact pkg/acquisition: split loki.go (#4034) @mmetc
  • refact pkg/acquisition: split victorialogs.go (#4037) @mmetc
  • refact pkg/acquisition: split wineventlog.go (#4036) @mmetc
  • refact pkg/acquisition: split s3.go (#4035) @mmetc
  • refact pkg/acquisition: split k8s_audit.go (#4033) @mmetc
  • refact pkg/acquisition: split kinesis.go (#4032) @mmetc
  • refact pkg/acquisition: split kafka.go (#4031) @mmetc
  • refact pkg/acquisition: split cloudwatch.go (#4029) @mmetc
  • refact pkg/acquisition: split http.go (#4030) @mmetc
  • refactg pkg/acquisition: split file.go (#4038) @mmetc
  • refact pkg/acquisition: split syslog.go (#4028) @mmetc
  • papi: explicit context (#3973) @mmetc
  • pkg/csplugin: remove unused function (#4019) @mmetc
  • pkg/types -> new imports pt 4 (#4012) @mmetc
  • pkg/types -> new imports pt 3 (#4014) @mmetc
  • pkg/types -> new imports pt 2 (#4013) @mmetc
  • pkg/types -> new imports pt 1 (#4011) @mmetc
  • pkg/types -> pkg/{pipeline,fsutil,enrichment,logging...} (#4006) @mmetc
  • CI: enable linter "protogetter" (#3995) @mmetc
  • enable linters: unnecessary-format, unused-receiver (#4001) @mmetc
  • refact: remove unused struct fields and params / 3; enable linter "unused" (#3334) @mmetc
New Features
  • WAF: Add DropRequest helper to block request in hooks (#4016) @blotus
Improvements
  • pkg/acquisition: update syslog to RestartableStreamer (#4040) @mmetc
  • refact logging configuration; add log_media="syslog" (#4045) @mmetc
  • cscli hubtest: better report docker/nuclei errors (#4052) @mmetc
  • build: check make version before running Makefile (#4054) @mmetc
  • pkg/acquisition: refact journalctl datasource and unified retry loop (#4023) @mmetc
  • option api.server.disable_usage_metrics_export (#4021) @mmetc
  • build: optional pure-go sqlite driver (#3908) @mmetc
Bug Fixes
  • fix accessLogger setup to separate file (#4103) @mmetc
  • docker acquisition: prevent data races (#3956) @mmetc
  • Fix avoidable prometheus metrics cardinality (#4080) @g00g1
  • loki acquisition: remove forgotten debug print (#4062) @mmetc
  • fix 2808: show certificate path in "lapi status" (#4053) @mmetc
  • decisionStream: only select required fields from the DB (#4024) @blotus
Documentation
  • docs: add public roadmap section to README.md (#4039) @mazzma12
Chore / Deps
  • build(deps): bump github/codeql-action from 4.31.4 to 4.31.6 (#4101) @dependabot[bot]
  • build(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 (#4083) @dependabot[bot]
  • Update go-re2 to 1.10.0 (#4020) @blotus
  • waf: remove custom raw body processor and use the upstream one (#4092) @blotus
  • build(deps): bump actions/setup-python from 6.0.0 to 6.1.0 (#4089) @dependabot[bot]
  • update go-cs-lib (#4084) @mmetc
  • update coraza (#4047) @blotus
  • build(deps): bump actions/checkout from 5.0.1 to 6.0.0 (#4077) @dependabot[bot]
  • build(deps): bump astral-sh/setup-uv from 7.1.3 to 7.1.4 (#4078) @dependabot[bot]
  • replace prom2json with native Prometheus parser and context-aware scraping in CLI metrics (#3932) @mmetc
  • build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 (#4073) @dependabot[bot]
  • build(deps): bump github/codeql-action from 4.31.3 to 4.31.4 (#4069) @dependabot[bot]
  • build(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#4064) @dependabot[bot]
  • update docker/docker to moby/moby (version docker-v29.0.0) (#4048) @mmetc
  • build(deps): bump github/codeql-action from 4.31.0 to 4.31.3 (#4051) @dependabot[bot]
  • build(deps): bump astral-sh/setup-uv from 7.1.2 to 7.1.3 (#4042) @dependabot[bot]
  • build(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 (#4041) @dependabot[bot]
  • build(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 (#4025) @dependabot[bot]
  • CI: update golangci-lint to 2.6.1 (#4026) @mmetc
  • waf: extract temp state from AppsecRuntimeConfig (#3952) @blotus
  • build(deps): bump astral-sh/setup-uv from 7.1.1 to 7.1.2 (#4009) @dependabot[bot]
  • build(deps): bump github/codeql-action from 4.30.9 to 4.31.0 (#4008) @dependabot[bot]
  • build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4010) @dependabot[bot]
Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

View original

Upgraded? How did it go?

Discussion