Skip to content

Commit 4643a2b

Browse files
zhuizhuhaomengzhuizhuhaomeng
authored
ANN: OpenResty 1.27.1.2 release.
1 parent 962a907 commit 4643a2b

File tree

13 files changed

+949
-854
lines changed

13 files changed

+949
-854
lines changed

‎README.md‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -94,6 +94,28 @@ make auto-templates
9494

9595
This command also downloads images from our blog site, compress these images and save them to /v2/images/header-images.
9696

97+
OpenResty Release
98+
=================
99+
100+
When you are ready to release a new version of openresty, then you need to manually update the following files:
101+
102+
- v2/cn/ann-1027001002.md.tt2
103+
- v2/cn/changelog-1027002.md
104+
- v2/cn/download.md.tt2
105+
- v2/en/ann-1027001002.md.tt2
106+
- v2/en/changelog-1027002.md
107+
- v2/en/download.md.tt2
108+
- v2/templates/news-cn.tt2
109+
- v2/templates/news-en.tt2
110+
- v2/util/news.pug
111+
112+
After that, run the following commands to generate the new version of the site:
113+
114+
```bash
115+
make clean
116+
make
117+
```
118+
97119
TODO
98120
====
99121

‎v2/cn/ann-1027001002.md.tt2‎

Lines changed: 80 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,80 @@
1+
[% major_ver = "1.27.1"; version = major_ver _ ".2" -%]
2+
<!---
3+
@title OpenResty [% version %] Released
4+
--->
5+
6+
We are happy to announce the new formal release, [% version %], of the
7+
OpenResty web platform based on NGINX and LuaJIT.
8+
9+
[Download this version here](download.html).
10+
11+
The (portable) source code distribution, the Win32/Win64 binary
12+
distributions, and the pre-built binary Linux packages for Ubuntu,
13+
Debian, Fedora, CentOS, RHEL, OpenSUSE, Amazon Linux are provided on this
14+
[Download page](download.html).
15+
16+
# Version highlights
17+
18+
* Nginx core
19+
* backported fix for CVE-2025-23419.
20+
* OpenResty
21+
* fixed nginx-1.27.1-stream_ssl_preread_no_skip.patch.
22+
* make HTTP3 server headers also use openresty instead of nginx.
23+
* OpenSSL
24+
* upgraded from version 3.0.15 to 3.4.1.
25+
* PCRE
26+
* upgraded from version 10.42 to 10.44.
27+
* lua-nginx-module
28+
* bugfix: remove http2 hardcode limitation in `ngx.location` subrequest API.
29+
* feature: implemented ngx_http_lua_ffi_decode_base64mime.
30+
* feature: add ngx.resp.set_status(status, reason).
31+
* bugfix: `setkeepalive` failure on TLSv1.3.
32+
* stream-lua-nginx-module
33+
* feature: enable ngx.var at the ssl_certificate_by_lua and ssl_client_hello_by_lua.
34+
* bugfix: `setkeepalive` failure on TLSv1.3.
35+
* lua-resty-core
36+
* feature: implemented decode_base64mime.
37+
* feature: add ngx.resp.set_status(status, reason).
38+
* luajit2
39+
* Fix recording of BC_VARG.
40+
* Reject negative getfenv()/setfenv() levels to prevent compiler warning.
41+
* Force fallback source name for stripped bytecode.
42+
* Restore state when recording __concat metamethod throws OOM.
43+
* MIPS64: Fix pcall() error case.
44+
* Fix detection of inconsistent renames due to sunk values.
45+
* Always close profiler output file.
46+
* Fix override of INSTALL_LJLIBD in the presence of DESTDIR.
47+
* Fix bit op coercion for shifts in DUALNUM builds.
48+
49+
# Full Change logs
50+
51+
Complete change logs since the last (formal) release, [1.27.1.1](ann-1027001001.html),
52+
can be browsed in the page [Change Log for [% major_ver %].x](changelog-1027001.html).
53+
54+
# Testing
55+
56+
We have run extensive testing on our Amazon EC2 test cluster and
57+
ensured that all the components (including the Nginx core) play well
58+
together. The latest test report can always be found here:
59+
60+
https://qa.openresty.org/
61+
62+
We also always run our OpenResty Edge commercial software based on the
63+
latest open source version of OpenResty in our own global CDN network
64+
(dubbed "mini CDN") powering our openresty.org and openresty.com
65+
websites. See https://openresty.com/ for more details.
66+
67+
# Community Support
68+
69+
See the [Community Page](community.html).
70+
71+
# Commercial Support
72+
73+
Commercial technical support and real-time noninvasive online monitoring and profiling
74+
solution is provided through the official [OpenResty XRay](https://openresty.com/en/xray/)
75+
product.
76+
77+
# Feedback
78+
79+
Feedback on this release is more than welcome. Feel free to create new
80+
[GitHub issues](https://github.com/openresty/openresty/issues) or send emails to one of our [mailing lists](community.html).

‎v2/cn/changelog-1027001.md‎

Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,61 @@
44
@created 2024-08-14 14:33 GMT
55
--->
66

7+
# Version 1.27.1.2 - 14 Mar 2025
8+
9+
* upgraded [lua-nginx-module](https://github.com/openresty/lua-nginx-module) to v0.10.28
10+
* bugfix: `setkeepalive` failure on TLSv1.3 _Thanks Zhefeng C. for the patch._
11+
* bugfix: remove http2 hardcode limitation in `ngx.location` subrequest API. _Thanks Jun Ouyang for the patch._
12+
* bugfix: removed null terminator. _Thanks n-bes for the patch._
13+
* doc: more accurate error message. _Thanks willmafh for the patch._
14+
* doc: clarify base64 for url encoding and padding. _Thanks Thijs Schreijer for the patch._
15+
* doc: Redraw directives png (#2353) _Thanks xiaobiaozhao for the patch._
16+
* doc: clarify the backlog option (#2367) _Thanks Thijs Schreijer for the patch._
17+
* doc: improve grammar. _Thanks Josh Soref for the patch._
18+
* feature: add ngx.resp.set_status(status, reason). _Thanks lijunlong for the patch._
19+
* feature: implemented ngx_http_lua_ffi_decode_base64mime. _Thanks WenMing for the patch._
20+
* optimize: removed unreachable code in ngx_http_lua_send_http10_headers(). _Thanks lijunlong for the patch._
21+
* optimize: remove duplicate check in ngx.send_headers _Thanks spacewander for the patch._
22+
* tests: add support for openssl3.0. _Thanks lijunlong for the patch._
23+
* upgraded [stream-lua-nginx-module](https://github.com/openresty/stream-lua-nginx-module) to v0.0.16
24+
* feature: enable ngx.var at the ssl_certificate_by_lua and ssl_client_hello_by_lua. _Thanks lijunlong for the patch._
25+
* bugfix: `setkeepalive` failure on TLSv1.3 _Thanks Zhefeng C. for the patch._
26+
* upgraded [lua-resty-core](https://github.com/openresty/lua-resty-core) to v0.1.31
27+
* feature: implemented decode_base64mime. _Thanks WenMing for the patch._
28+
* feature: add ngx.resp.set_status(status, reason). _Thanks lijunlong for the patch._
29+
* feature: update nginx to v1.27.1. _Thanks lijunlong for the patch._
30+
* upgraded [luajit2](https://github.com/openresty/luajit2) to v2.1-20250117
31+
* Fix recording of BC_VARG. _Thanks Mike Pall for the patch._
32+
* Reject negative getfenv()/setfenv() levels to prevent compiler warning. _Thanks Mike Pall for the patch._
33+
* Bump copyright date. _Thanks Mike Pall for the patch._
34+
* Force fallback source name for stripped bytecode. _Thanks Mike Pall for the patch._
35+
* Remove dependency on <limits.h>. _Thanks Mike Pall for the patch._
36+
* Restore state when recording __concat metamethod throws OOM. _Thanks Mike Pall for the patch._
37+
* MIPS64: Fix pcall() error case. _Thanks Mike Pall for the patch._
38+
* Fix detection of inconsistent renames due to sunk values. _Thanks Mike Pall for the patch._
39+
* Windows: Allow amalgamated static builds with msvcbuild.bat. _Thanks Mike Pall for the patch._
40+
* Always close profiler output file. _Thanks Mike Pall for the patch._
41+
* Fix override of INSTALL_LJLIBD in the presence of DESTDIR. _Thanks Mike Pall for the patch._
42+
* Fix bit op coercion for shifts in DUALNUM builds. _Thanks Mike Pall for the patch._
43+
* macOS: Remove obsolete -single_module flag. _Thanks Mike Pall for the patch._
44+
* macOS: Workaround for buggy XCode 15.0 - 15.2 linker. _Thanks Mike Pall for the patch._
45+
* macOS: Fix macOS 15 / Clang 16 build. _Thanks Mike Pall for the patch._
46+
* Fix bit op coercion in DUALNUM builds. _Thanks Mike Pall for the patch._
47+
* Fix compiliation of getmetatable() for UDTYPE_IO_FILE. _Thanks Mike Pall for the patch._
48+
* Remove ancient RtlUnwindEx workaround for MinGW64. _Thanks Mike Pall for the patch._
49+
* Drop unused function wrapper. _Thanks Mike Pall for the patch._
50+
* Fix limit check in narrow_conv_backprop(). _Thanks Mike Pall for the patch._
51+
* Always use IRT_NIL for IR_TBAR. _Thanks Mike Pall for the patch._
52+
* ARM64: Use ldr literal to load FP constants. _Thanks Mike Pall for the patch._
53+
* FFI: Add missing coercion when recording 64-bit bit.*(). _Thanks Mike Pall for the patch._
54+
* ARM64: Make tobit conversions match JIT backend behavior. _Thanks Mike Pall for the patch._
55+
* ARM: Make hard-float tobit conversions match JIT backend behavior. _Thanks Mike Pall for the patch._
56+
* FFI: Drop finalizer table rehash after GC cycle. _Thanks Mike Pall for the patch._
57+
* Fix another potential file descriptor leak in luaL_loadfile*(). _Thanks Mike Pall for the patch._
58+
* MIPS32: Fix little-endian IR_RETF. _Thanks Mike Pall for the patch._
59+
* Correctly close VM state after early OOM during open. _Thanks Mike Pall for the patch._
60+
* Fix potential file descriptor leak in luaL_loadfile*(). _Thanks Mike Pall for the patch._
61+
762
# Version 1.27.1.1 - 16 Oct 2024
863

964
* upgraded the [nginx](nginx.html) core to 1.27.1

‎v2/cn/download.md.tt2‎

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -16,11 +16,11 @@ Rocky Linux、Oracle Linux、CBL Mariner 提供官方的二进制包仓库。
1616

1717
所有版本都是用 Yichun Zhang 的 PGP 公钥 `A0E98066` 签发的。
1818

19-
[% ver = "1.27.1.1" -%]
19+
[% ver = "1.27.1.2" -%]
2020
* 32 位 Windows: [openresty-[% ver %]-win32.zip](https://openresty.org/download/openresty-[% ver %]-win32.zip) &nbsp; 16MB &nbsp;
21-
[PGP](https://openresty.org/download/openresty-[% ver %]-win32.zip.asc) - 2024年10月16日
21+
[PGP](https://openresty.org/download/openresty-[% ver %]-win32.zip.asc) - 2025年3月14日
2222
* 64 位 Windows: [openresty-[% ver %]-win64.zip](https://openresty.org/download/openresty-[% ver %]-win64.zip) &nbsp; 16MB &nbsp;
23-
[PGP](https://openresty.org/download/openresty-[% ver %]-win64.zip.asc) - 2024年10月16日
23+
[PGP](https://openresty.org/download/openresty-[% ver %]-win64.zip.asc) - 2025年3月14日
2424

2525
参见针对 Windows 版 OpenResty 的[用法文档](https://github.com/openresty/openresty/blob/master/doc/README-windows.md)。
2626

@@ -59,15 +59,19 @@ brew install openresty-debug
5959

6060
## 最新版
6161

62-
[% ver = "1.27.1.1" -%]
62+
[% ver = "1.27.1.2" -%]
6363
* [openresty-[% ver %].tar.gz](https://openresty.org/download/openresty-[% ver %].tar.gz) &nbsp; 5.4MB
6464
&nbsp; [PGP](https://openresty.org/download/openresty-[% ver %].tar.gz.asc) &nbsp;
65-
[变更列表](changelog-1027001.html) - 2024年10月16日
65+
[变更列表](changelog-1027001.html) - 2025年3月14日
6666

6767
## 历史版
6868

6969
有时候我们可能会需要较老的版本：
7070

71+
[% ver = "1.27.1.1" -%]
72+
* [openresty-[% ver %].tar.gz](https://openresty.org/download/openresty-[% ver %].tar.gz) &nbsp; 5.4MB
73+
&nbsp; [PGP](https://openresty.org/download/openresty-[% ver %].tar.gz.asc) &nbsp;
74+
[变更列表](changelog-1027001.html) - 2024年10月16日
7175
[% ver = "1.25.3.2" -%]
7276
* [openresty-[% ver %].tar.gz](https://openresty.org/download/openresty-[% ver %].tar.gz) &nbsp; 5.4MB
7377
&nbsp; [PGP](https://openresty.org/download/openresty-[% ver %].tar.gz.asc) &nbsp;

‎v2/en/ann-1027001002.md.tt2‎

Lines changed: 80 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,80 @@
1+
[% major_ver = "1.27.1"; version = major_ver _ ".2" -%]
2+
<!---
3+
@title OpenResty [% version %] Released
4+
--->
5+
6+
We are happy to announce the new formal release, [% version %], of the
7+
OpenResty web platform based on NGINX and LuaJIT.
8+
9+
[Download this version here](download.html).
10+
11+
The (portable) source code distribution, the Win32/Win64 binary
12+
distributions, and the pre-built binary Linux packages for Ubuntu,
13+
Debian, Fedora, CentOS, RHEL, OpenSUSE, Amazon Linux are provided on this
14+
[Download page](download.html).
15+
16+
# Version highlights
17+
18+
* Nginx core
19+
* backported fix for CVE-2025-23419.
20+
* OpenResty
21+
* fixed nginx-1.27.1-stream_ssl_preread_no_skip.patch.
22+
* make HTTP3 server headers also use openresty instead of nginx.
23+
* OpenSSL
24+
* upgraded from version 3.0.15 to 3.4.1.
25+
* PCRE
26+
* upgraded from version 10.42 to 10.44.
27+
* lua-nginx-module
28+
* bugfix: remove http2 hardcode limitation in `ngx.location` subrequest API.
29+
* feature: implemented ngx_http_lua_ffi_decode_base64mime.
30+
* feature: add ngx.resp.set_status(status, reason).
31+
* bugfix: `setkeepalive` failure on TLSv1.3.
32+
* stream-lua-nginx-module
33+
* feature: enable ngx.var at the ssl_certificate_by_lua and ssl_client_hello_by_lua.
34+
* bugfix: `setkeepalive` failure on TLSv1.3.
35+
* lua-resty-core
36+
* feature: implemented decode_base64mime.
37+
* feature: add ngx.resp.set_status(status, reason).
38+
* luajit2
39+
* Fix recording of BC_VARG.
40+
* Reject negative getfenv()/setfenv() levels to prevent compiler warning.
41+
* Force fallback source name for stripped bytecode.
42+
* Restore state when recording __concat metamethod throws OOM.
43+
* MIPS64: Fix pcall() error case.
44+
* Fix detection of inconsistent renames due to sunk values.
45+
* Always close profiler output file.
46+
* Fix override of INSTALL_LJLIBD in the presence of DESTDIR.
47+
* Fix bit op coercion for shifts in DUALNUM builds.
48+
49+
# Full Change logs
50+
51+
Complete change logs since the last (formal) release, [1.27.1.1](ann-1027001001.html),
52+
can be browsed in the page [Change Log for [% major_ver %].x](changelog-1027001.html).
53+
54+
# Testing
55+
56+
We have run extensive testing on our Amazon EC2 test cluster and
57+
ensured that all the components (including the Nginx core) play well
58+
together. The latest test report can always be found here:
59+
60+
https://qa.openresty.org/
61+
62+
We also always run our OpenResty Edge commercial software based on the
63+
latest open source version of OpenResty in our own global CDN network
64+
(dubbed "mini CDN") powering our openresty.org and openresty.com
65+
websites. See https://openresty.com/ for more details.
66+
67+
# Community Support
68+
69+
See the [Community Page](community.html).
70+
71+
# Commercial Support
72+
73+
Commercial technical support and real-time noninvasive online monitoring and profiling
74+
solution is provided through the official [OpenResty XRay](https://openresty.com/en/xray/)
75+
product.
76+
77+
# Feedback
78+
79+
Feedback on this release is more than welcome. Feel free to create new
80+
[GitHub issues](https://github.com/openresty/openresty/issues) or send emails to one of our [mailing lists](community.html).

‎v2/en/changelog-1027001.md‎

Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,61 @@
44
@created 2024-08-14 14:33 GMT
55
--->
66

7+
# Version 1.27.1.2 - 14 Mar 2025
8+
9+
* upgraded [lua-nginx-module](https://github.com/openresty/lua-nginx-module) to v0.10.28
10+
* feature: add ngx.resp.set_status(status, reason). _Thanks lijunlong for the patch._
11+
* feature: implemented ngx_http_lua_ffi_decode_base64mime. _Thanks WenMing for the patch._
12+
* bugfix: `setkeepalive` failure on TLSv1.3 _Thanks Zhefeng C. for the patch._
13+
* bugfix: remove http2 hardcode limitation in `ngx.location` subrequest API. _Thanks Jun Ouyang for the patch._
14+
* bugfix: removed null terminator. _Thanks n-bes for the patch._
15+
* doc: clarify base64 for url encoding and padding. _Thanks Thijs Schreijer for the patch._
16+
* doc: Redraw directives png (#2353) _Thanks xiaobiaozhao for the patch._
17+
* doc: clarify the backlog option (#2367) _Thanks Thijs Schreijer for the patch._
18+
* doc: improve grammar. _Thanks Josh Soref for the patch._
19+
* doc: more accurate error message. _Thanks willmafh for the patch._
20+
* optimize: removed unreachable code in ngx_http_lua_send_http10_headers(). _Thanks lijunlong for the patch._
21+
* optimize: remove duplicate check in ngx.send_headers _Thanks spacewander for the patch._
22+
* tests: add support for openssl3.0. _Thanks lijunlong for the patch._
23+
* upgraded [stream-lua-nginx-module](https://github.com/openresty/stream-lua-nginx-module) to v0.0.16
24+
* feature: enable ngx.var at the ssl_certificate_by_lua and ssl_client_hello_by_lua. _Thanks lijunlong for the patch._
25+
* bugfix: `setkeepalive` failure on TLSv1.3 _Thanks Zhefeng C. for the patch._
26+
* upgraded [lua-resty-core](https://github.com/openresty/lua-resty-core) to v0.1.31
27+
* feature: implemented decode_base64mime. _Thanks WenMing for the patch._
28+
* feature: add ngx.resp.set_status(status, reason). _Thanks lijunlong for the patch._
29+
* feature: update nginx to v1.27.1. _Thanks lijunlong for the patch._
30+
* upgraded [luajit2](https://github.com/openresty/luajit2) to v2.1-20250117
31+
* Fix recording of BC_VARG. _Thanks Mike Pall for the patch._
32+
* Reject negative getfenv()/setfenv() levels to prevent compiler warning. _Thanks Mike Pall for the patch._
33+
* Bump copyright date. _Thanks Mike Pall for the patch._
34+
* Force fallback source name for stripped bytecode. _Thanks Mike Pall for the patch._
35+
* Remove dependency on <limits.h>. _Thanks Mike Pall for the patch._
36+
* Restore state when recording __concat metamethod throws OOM. _Thanks Mike Pall for the patch._
37+
* MIPS64: Fix pcall() error case. _Thanks Mike Pall for the patch._
38+
* Fix detection of inconsistent renames due to sunk values. _Thanks Mike Pall for the patch._
39+
* Windows: Allow amalgamated static builds with msvcbuild.bat. _Thanks Mike Pall for the patch._
40+
* Always close profiler output file. _Thanks Mike Pall for the patch._
41+
* Fix override of INSTALL_LJLIBD in the presence of DESTDIR. _Thanks Mike Pall for the patch._
42+
* Fix bit op coercion for shifts in DUALNUM builds. _Thanks Mike Pall for the patch._
43+
* macOS: Remove obsolete -single_module flag. _Thanks Mike Pall for the patch._
44+
* macOS: Workaround for buggy XCode 15.0 - 15.2 linker. _Thanks Mike Pall for the patch._
45+
* macOS: Fix macOS 15 / Clang 16 build. _Thanks Mike Pall for the patch._
46+
* Fix bit op coercion in DUALNUM builds. _Thanks Mike Pall for the patch._
47+
* Fix compiliation of getmetatable() for UDTYPE_IO_FILE. _Thanks Mike Pall for the patch._
48+
* Remove ancient RtlUnwindEx workaround for MinGW64. _Thanks Mike Pall for the patch._
49+
* Drop unused function wrapper. _Thanks Mike Pall for the patch._
50+
* Fix limit check in narrow_conv_backprop(). _Thanks Mike Pall for the patch._
51+
* Always use IRT_NIL for IR_TBAR. _Thanks Mike Pall for the patch._
52+
* ARM64: Use ldr literal to load FP constants. _Thanks Mike Pall for the patch._
53+
* FFI: Add missing coercion when recording 64-bit bit.*(). _Thanks Mike Pall for the patch._
54+
* ARM64: Make tobit conversions match JIT backend behavior. _Thanks Mike Pall for the patch._
55+
* ARM: Make hard-float tobit conversions match JIT backend behavior. _Thanks Mike Pall for the patch._
56+
* FFI: Drop finalizer table rehash after GC cycle. _Thanks Mike Pall for the patch._
57+
* Fix another potential file descriptor leak in luaL_loadfile*(). _Thanks Mike Pall for the patch._
58+
* MIPS32: Fix little-endian IR_RETF. _Thanks Mike Pall for the patch._
59+
* Correctly close VM state after early OOM during open. _Thanks Mike Pall for the patch._
60+
* Fix potential file descriptor leak in luaL_loadfile*(). _Thanks Mike Pall for the patch._
61+
762
# Version 1.27.1.1 - 16 Oct 2024
863

964
* upgraded the [nginx](nginx.html) core to 1.27.1

0 commit comments

Comments
 (0)