Skip to content

Release 4.4: NGINX upgrade and security improvements#676

Merged
jaydrogers merged 2 commits into
mainfrom
release/security-updates
May 14, 2026
Merged

Release 4.4: NGINX upgrade and security improvements#676
jaydrogers merged 2 commits into
mainfrom
release/security-updates

Conversation

@jaydrogers
Copy link
Copy Markdown
Member

What this PR does

  • Upgrades NGINX for fpm-nginx to the latest stable version v1.30.1
  • Improves our documentation for security releases, how we update, etc

⚠️ This includes upstream security updates

NGINX v1.30.1 comes with critical security updates:

…ions-base-config.yml

- Changed nginx version from 1.28.3 to 1.30.1 for Alpine 3.21, 3.22, and 3.23.
- Updated nginx version from 1.28.3-1 to 1.30.1-1 for Debian Bullseye, Bookworm, and Trixie.
- These updates ensure compatibility with the latest nginx features and security improvements.
- Expanded the SECURITY.md file to clarify the reporting process for vulnerabilities, including what is in and out of scope for reporting.
- Added detailed guidelines on how to handle end-of-life (EOL) software and the implications of using EOL operating systems.
- Updated the documentation on choosing an image to include notes on floating vs. version-pinned tags, emphasizing the importance of selecting supported OS releases.
- Revised the Upgrade Guide to explain the release process and update strategies, ensuring users understand the implications of their choices regarding image tags.
@jaydrogers jaydrogers force-pushed the release/security-updates branch from 0a31cae to b6efc67 Compare May 14, 2026 21:16
@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages Bot commented May 14, 2026

Deploying serversideup-php with  Cloudflare Pages  Cloudflare Pages

Latest commit: b6efc67
Status: ✅  Deploy successful!
Preview URL: https://32dc0b77.serversideup-php.pages.dev
Branch Preview URL: https://release-security-updates.serversideup-php.pages.dev

View logs

@jaydrogers jaydrogers merged commit b99afeb into main May 14, 2026
84 checks passed
@jaydrogers jaydrogers deleted the release/security-updates branch May 14, 2026 21:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant