git: e8afd5a79227 - 2026Q1 - www/caddy: Update to 2.11.2
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 06 Mar 2026 03:55:50 UTC
The branch 2026Q1 has been updated by adamw:
URL: https://cgit.FreeBSD.org/ports/commit/?id=e8afd5a79227b014f6cb6fb8e2d338f1512b3c3a
commit e8afd5a79227b014f6cb6fb8e2d338f1512b3c3a
Author: Adam Weinberger <adamw@FreeBSD.org>
AuthorDate: 2026-03-06 03:39:13 +0000
Commit: Adam Weinberger <adamw@FreeBSD.org>
CommitDate: 2026-03-06 03:55:12 +0000
www/caddy: Update to 2.11.2
Changes:
Caddy 2.11.2 contains numerous bug fixes and enhancements! I know
that's a lame summary but it's really all over the place.
Highlights:
- Reverse proxy got a lot of love with certain edge cases related to
PROXY protocol, health check port, and closing body on retries.
Dynamic upstreams are now tracked which enables passive health
checking.
- Performance improvements for metrics.
- New tls_resolvers global option to control DNS resolvers for all
sites when using the ACME DNS challenge.
- Log rolling now supports zstd compression; deprecated roll_gzip,
which will be removed in the future. Use roll_compression instead.
- Refined logging and some error messages.
- Fixed a bug in rewrite handler that could cause some URIs to not
be rewritten when URI path is an escaped form of target path.
Thanks to @MaherAzzouzi for the report.
Security fixes:
This release fixes two CVEs.
- @NucleiAv reported a bug in the forward_auth directive that could
permit identity injection and potential privilege escalation.
(HIGH, GHSA-7r4p-vjf4-qxv4)
- @sammiee5311 reported that vars_regexp double-expanded
placeholders, allowing some unusual configs to reveal secrets.
(MODERATE, GHSA-m2w3-8f23-hxxf)
In addition:
- Our documentation has been updated to note that file system case
sensitivity may affect the behavior of the hide option of the
file_server handler.
Thank you to everyone who contributed, and for our ongoing
sponsorships that make this development possible!
Security: https://github.com/caddyserver/caddy/security/advisories/GHSA-7r4p-vjf4-gxv4
https://github.com/caddyserver/caddy/security/advisories/GHSA-m2w3-8f23-hxxf
(cherry picked from commit 61ebb9e8e6754274aaf433ddf1a341ba9361fd4e)
---
www/caddy/Makefile | 5 ++---
www/caddy/distinfo | 10 +++++-----
2 files changed, 7 insertions(+), 8 deletions(-)
diff --git a/www/caddy/Makefile b/www/caddy/Makefile
index 5b4c454d0635..6de38133bfb3 100644
--- a/www/caddy/Makefile
+++ b/www/caddy/Makefile
@@ -1,7 +1,6 @@
PORTNAME= caddy
DISTVERSIONPREFIX= v
-DISTVERSION= 2.10.2
-PORTREVISION= 8
+DISTVERSION= 2.11.2
CATEGORIES= www
DIST_SUBDIR= caddy
@@ -12,7 +11,7 @@ WWW= https://caddyserver.com
LICENSE= APACHE20
LICENSE_FILE= ${WRKSRC}/LICENSE
-USES= cpe go:modules
+USES= cpe go:1.25+,modules
CPE_VENDOR= caddyserver
USERS= www
diff --git a/www/caddy/distinfo b/www/caddy/distinfo
index 818f8f09dd51..1c27da463983 100644
--- a/www/caddy/distinfo
+++ b/www/caddy/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1755930188
-SHA256 (go/www_caddy/caddy-v2.10.2/v2.10.2.mod) = 7e87755804bbf9ab9925dde2fe8c61d53e949d38af686da14baa04f14ce5a9ee
-SIZE (go/www_caddy/caddy-v2.10.2/v2.10.2.mod) = 7407
-SHA256 (go/www_caddy/caddy-v2.10.2/v2.10.2.zip) = 8024a9d8afed63353ad502616f34ceae89980c40a5a36913885b55d2709483c6
-SIZE (go/www_caddy/caddy-v2.10.2/v2.10.2.zip) = 1083365
+TIMESTAMP = 1772765682
+SHA256 (go/www_caddy/caddy-v2.11.2/v2.11.2.mod) = 7a046b20b693e7345ffda63a711c8633a12e1b97ef0c45f8122fce04602dbea4
+SIZE (go/www_caddy/caddy-v2.11.2/v2.11.2.mod) = 8482
+SHA256 (go/www_caddy/caddy-v2.11.2/v2.11.2.zip) = 61076dd29d22fa10bc0cb652eabb91e2b59d2e32195f442b9b6feec9c1c21396
+SIZE (go/www_caddy/caddy-v2.11.2/v2.11.2.zip) = 1177665