This new v2.34.0 release brings several security and bug fixes. Better X-Forwarded-For handling and other improvements.

Breaking

• URL Redirects/Rewrites: Single Glob wildcard (*) will no longer match a path separator (/) in source but double wildcard (**) can be used instead if wanted. See docs below.
• Log Remote Address: log-remote-address option will no longer log from the X-Forwarded-For header by default. It has to be opted-in together with the new log-forwarded-for option. See docs below.

Fixes

• 93479ba Bugfix/security dependency updates including tokio, rustls, regex, tracing, flate2, serde, async-compression and other crates. PR #502.
• 4ed4bb4 Docker: Update Alpine (3.19.4) and Debian (12.8) Docker images. PR #505.
• 0768c20 CI: Update deprecated macos-12 Github Actions runner to macos-14.

Features

• 13e3f38 Better X-Forwarded-For handling via the new log-forwarded-for and trusted-proxies options. PR #495 by @Jeidnx. See docs.

Refactorings

• 96ed7df breaking: Prevent single Glob wildcard (*) from matching a path separator (/) in URL Redirect's source. PR #501 by @mschoettle. See docs.
• 2737f4c breaking: Prevent single Glob wildcard (*) from matching a path separator (/) in URL Rewrite's source. PR #506 by @mschoettle. See docs.
• 5516b6a Misc: Improve tests for URL Redirects feature. PR #503 by @mschoettle.

Docs

• e1a73c0 Add contributing, code of conduct and code guidelines pages.
• 12387a8 Improve docs configuration and fix some anchor links. PR #504 by @mschoettle. See docs.
• cd11bd6 Replace the deprecated TrueNAS Scale option with TrueCharts. PR #486 by @ctag. See docs.

For more details see the v2.34.0 milestone and the full changelog v2.33.1...v2.34.0.