This new v2.36.0 release brings several security and bug fixes. A bugfix for the trailing slash redirect, a new feature to log from the X-Real-IP HTTP header as well as other improvements.

Fixes

• aadca81 Bugfix/security dependency updates including httparse, rustls, clap, bcrypt, maud, bytes and other crates. PR Update dependencies 06-02-2025 #524.
• 99aa74d Docker: Update Alpine (3.19.6) and Debian (12.9) Docker images. PR Update Alpine (3.19.6) and Debian (12.9) Docker images #518.
• a639039 Add missing query string to the URI trailing slash redirect. PR Add missing query string to the URI trailing slash redirect #523.

Features

• 134db39 Log from X-Real-IP header via new --log-x-real-ip option. PR Optionally log X-Real-IP header. #521 by @dctaf. See docs.

Refactorings

• 8fa9cda Improve fallback page path checking and logging. PR Improve fallback page path checking and logging #522.
• 0053d74 CI: Improve post-release updates workflow. PR Improve post release updates CI workflow #525.