Update crowdsecurity/crowdsec Docker tag to v1.8.2 #6

Merged

renovate-bot merged 1 commit from renovate/crowdsecurity-crowdsec-1.x into main

2026-11-01 09:11:59 +01:00

renovate-bot commented

2026-10-30 11:02:19 +01:00

Collaborator

This PR contains the following updates:

Package	Update	Change
crowdsecurity/crowdsec	patch	`v1.8.1` → `v1.8.2`

Release Notes

crowdsecurity/crowdsec (crowdsecurity/crowdsec)

`v1.8.2`

Compare Source

Version 1.8.2

Brings custom JS fingerprinting capabilities to the bot detection feature, allowing both users and us to distribute detection rules directly via the hub.
Brings rate limiting feature to the WAF.
Brings performance improvements to the Security Engine, optimizing both memory copy behaviors and relying on static analysis to avoid processing unnecessary regular expressions.
Brings performance improvements to the WAF, optimizing out-of-band rules processing.
Brings performance improvements to the Bot Detection, optimizing memory usage.

New Features & Major improvements

[WAF] Add RateLimiting feature (#4721) @blotus
[bot-detection] Add custom JS fingerprinting capabilities (#4657) @buixor
[bot-detection] Add cscli bot subcommand (#4666) @blotus
[WAF] Improve out-of-band rules performances (#4722) @blotus
[Security Engine] Run postoverflows in a separate goroutine to avoid blocking on slow enrichments (#4672) @blotus
[bot-detection] Improve memory usage (#4674) @blotus
[Security Engine] Various performance improvements to regular expression processing (#4736) (#4731) (#4729) @blotus @buixor

Improvements

Add cs_features metric (#4770) @blotus
bot detection: add an option to set SameSite=None + Partitioned flag on cookie (#4764) @blotus
exprhelpers: add GetDecisionsSinceCountByScenario (#4756) @tommy-ng0
lapi: optionally limit concurrent decision stream requests (#4747) @tommy-ng0
exprhelpers: LookupHost goes through the DNS cache (#4741) @twiesing
metrics: add CAPI last pull timestamp and error counter (#4749) @NazarkinRoman
prometheus: add kind label to cs_alerts (#4742) @blotus
lapi: make decisions stream page size configurable (#4733) @tommy-ng0
Fix ValidateChallengeResponse (#4737) @buixor
bot-detection: add new FlagSubmission() helper (#4727) @blotus
appsec: add an optional category to the request score (#4715) @buixor
apiserver: reload the TLS server certificate when its files change (#4709) @ohartwig
fix image link (#4702) @buixor
waf: add SkipProcessing() helper (#4667) @blotus
[bot-detection] drop the URI from the cookie (#4656) @buixor

Bug Fixes

acquisition/file: don't send half-written lines, or skip the lines after them (#4678) @n1koo, @blotus, @claude
fix(cscli): display human-readable timestamps in local time (#4759) @sep2
remove runtime Fatalf calls (#4760) @blotus
waf: fix log spam when usin unix socket on freebsd (#4745) @blotus
docker: read from now if container restarts (#4605) @blotus
splunk-notification: add an option to configure InsecureSkipVerify (#4720) @blotus
victorialogs: move the datasource to RestartableStreamer interface (#4738) @blotus
metrics: remove series of deleted machines and bouncers (#4712) @somaz94
buckets: make a copy of all event maps before pouring the event to a bucket (#4481) @blotus
fix(database): keep simulated decisions from suppressing real bans (#4679) @4erdenko, @blotus
fix a nasty bug in transfrom where the effective uuid for a datasource (#4697) @sabban
hubtest: add a tiebreaker based on the alert date to have a consistent order (#4699) @blotus
syslog: copy buffer before handing it to the datasource (#4690) @blotus
Expand env vars in online_api_credentials.yaml (#4677) @kushiemoon-dev

Chore / Deps

build(deps): bump the gomod group with 5 updates (#4778) @dependabot[bot]
build(deps): bump the github-actions group with 2 updates (#4777) @dependabot[bot]
build(deps): bump certifi from 2026.1.4 to 2026.10.19 in /build/docker/test (#4780) @dependabot[bot]
build(deps): bump the github-actions group across 1 directory with 8 updates (#4766) @dependabot[bot]
build(deps): bump the gomod group with 16 updates (#4767) @dependabot[bot]
build(deps): bump the gomod group with 8 updates (#4753) @dependabot[bot]
fpscanner: use fork (#4761) @blotus
waf: update to coraza 3.8.0 (#4724) @blotus, @buixor
build(deps): bump the gomod group across 1 directory with 19 updates (#4730) @dependabot[bot]
CI: skip more docker tests on windows (#4728) @blotus
grok: embed grok library instead of having it as a dep (#4725) @blotus
docker datasource: skip tests on windows (#4719) @blotus
agents.md: keep comments to a reasonable level (#4716) @blotus
build(deps): bump the github-actions group with 7 updates (#4693) @dependabot[bot]
build(deps): bump the gomod group with 11 updates (#4694) @dependabot[bot]
build(deps): bump github.com/go-openapi/validate from 0.26.5 to 1.0.0 (#4682) @dependabot[bot]
build(deps): bump the gomod group with 19 updates (#4681) @dependabot[bot]
build(deps): bump cryptography from 48.0.1 to 50.0.0 in /build/docker/test (#4591) @dependabot[bot]
bump to go 1.27 (#4675) @blotus
build(deps): bump the github-actions group across 1 directory with 3 updates (#4658) @dependabot[bot]
build(deps): bump the gomod group across 1 directory with 21 updates (#4659) @dependabot[bot]
AGENTS.md: clearer guidance on tests (#4713) @blotus
pimp readme (#4701) @buixor

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [crowdsecurity/crowdsec](https://github.com/crowdsecurity/crowdsec) | patch | `v1.8.1` → `v1.8.2` | --- ### Release Notes <details> <summary>crowdsecurity/crowdsec (crowdsecurity/crowdsec)</summary> ### [`v1.8.2`](https://github.com/crowdsecurity/crowdsec/releases/tag/v1.8.2) [Compare Source](https://github.com/crowdsecurity/crowdsec/compare/v1.8.1...v1.8.2) ### Version 1.8.2 - Brings [custom JS fingerprinting capabilities](https://docs.crowdsec.net/docs/next/appsec/bot_detection/custom_js/) to the bot detection feature, allowing both users and us to distribute detection rules directly via the hub. - Brings [rate limiting feature](https://docs.crowdsec.net/docs/next/appsec/rate_limiting/) to the WAF. - Brings performance improvements to the Security Engine, optimizing both memory copy behaviors and relying on static analysis to avoid processing unnecessary regular expressions. - Brings performance improvements to the WAF, optimizing out-of-band rules processing. - Brings performance improvements to the Bot Detection, optimizing memory usage. #### New Features & Major improvements - \[WAF] Add RateLimiting feature ([#4721](https://github.com/crowdsecurity/crowdsec/issues/4721)) [@blotus](https://github.com/blotus) - \[bot-detection] Add custom JS fingerprinting capabilities ([#4657](https://github.com/crowdsecurity/crowdsec/issues/4657)) [@buixor](https://github.com/buixor) - \[bot-detection] Add cscli bot subcommand ([#4666](https://github.com/crowdsecurity/crowdsec/issues/4666)) [@blotus](https://github.com/blotus) - \[WAF] Improve out-of-band rules performances ([#4722](https://github.com/crowdsecurity/crowdsec/issues/4722)) [@blotus](https://github.com/blotus) - \[Security Engine] Run postoverflows in a separate goroutine to avoid blocking on slow enrichments ([#4672](https://github.com/crowdsecurity/crowdsec/issues/4672)) [@blotus](https://github.com/blotus) - \[bot-detection] Improve memory usage ([#4674](https://github.com/crowdsecurity/crowdsec/issues/4674)) [@blotus](https://github.com/blotus) - \[Security Engine] Various performance improvements to regular expression processing ([#4736](https://github.com/crowdsecurity/crowdsec/issues/4736)) ([#4731](https://github.com/crowdsecurity/crowdsec/issues/4731)) ([#4729](https://github.com/crowdsecurity/crowdsec/issues/4729)) [@blotus](https://github.com/blotus) [@buixor](https://github.com/buixor) #### Improvements - Add `cs_features` metric ([#4770](https://github.com/crowdsecurity/crowdsec/issues/4770)) [@blotus](https://github.com/blotus) - bot detection: add an option to set SameSite=None + Partitioned flag on cookie ([#4764](https://github.com/crowdsecurity/crowdsec/issues/4764)) [@blotus](https://github.com/blotus) - exprhelpers: add GetDecisionsSinceCountByScenario ([#4756](https://github.com/crowdsecurity/crowdsec/issues/4756)) [@tommy-ng0](https://github.com/tommy-ng0) - lapi: optionally limit concurrent decision stream requests ([#4747](https://github.com/crowdsecurity/crowdsec/issues/4747)) [@tommy-ng0](https://github.com/tommy-ng0) - exprhelpers: LookupHost goes through the DNS cache ([#4741](https://github.com/crowdsecurity/crowdsec/issues/4741)) [@twiesing](https://github.com/twiesing) - metrics: add CAPI last pull timestamp and error counter ([#4749](https://github.com/crowdsecurity/crowdsec/issues/4749)) [@NazarkinRoman](https://github.com/NazarkinRoman) - prometheus: add kind label to cs\_alerts ([#4742](https://github.com/crowdsecurity/crowdsec/issues/4742)) [@blotus](https://github.com/blotus) - lapi: make decisions stream page size configurable ([#4733](https://github.com/crowdsecurity/crowdsec/issues/4733)) [@tommy-ng0](https://github.com/tommy-ng0) - Fix ValidateChallengeResponse ([#4737](https://github.com/crowdsecurity/crowdsec/issues/4737)) [@buixor](https://github.com/buixor) - bot-detection: add new FlagSubmission() helper ([#4727](https://github.com/crowdsecurity/crowdsec/issues/4727)) [@blotus](https://github.com/blotus) - appsec: add an optional category to the request score ([#4715](https://github.com/crowdsecurity/crowdsec/issues/4715)) [@buixor](https://github.com/buixor) - apiserver: reload the TLS server certificate when its files change ([#4709](https://github.com/crowdsecurity/crowdsec/issues/4709)) [@ohartwig](https://github.com/ohartwig) - fix image link ([#4702](https://github.com/crowdsecurity/crowdsec/issues/4702)) [@buixor](https://github.com/buixor) - waf: add SkipProcessing() helper ([#4667](https://github.com/crowdsecurity/crowdsec/issues/4667)) [@blotus](https://github.com/blotus) - \[bot-detection] drop the URI from the cookie ([#4656](https://github.com/crowdsecurity/crowdsec/issues/4656)) [@buixor](https://github.com/buixor) #### Bug Fixes - acquisition/file: don't send half-written lines, or skip the lines after them ([#4678](https://github.com/crowdsecurity/crowdsec/issues/4678)) [@n1koo](https://github.com/n1koo), [@blotus](https://github.com/blotus), [@claude](https://github.com/claude) - fix(cscli): display human-readable timestamps in local time ([#4759](https://github.com/crowdsecurity/crowdsec/issues/4759)) [@sep2](https://github.com/sep2) - remove runtime Fatalf calls ([#4760](https://github.com/crowdsecurity/crowdsec/issues/4760)) [@blotus](https://github.com/blotus) - waf: fix log spam when usin unix socket on freebsd ([#4745](https://github.com/crowdsecurity/crowdsec/issues/4745)) [@blotus](https://github.com/blotus) - docker: read from now if container restarts ([#4605](https://github.com/crowdsecurity/crowdsec/issues/4605)) [@blotus](https://github.com/blotus) - splunk-notification: add an option to configure InsecureSkipVerify ([#4720](https://github.com/crowdsecurity/crowdsec/issues/4720)) [@blotus](https://github.com/blotus) - victorialogs: move the datasource to RestartableStreamer interface ([#4738](https://github.com/crowdsecurity/crowdsec/issues/4738)) [@blotus](https://github.com/blotus) - metrics: remove series of deleted machines and bouncers ([#4712](https://github.com/crowdsecurity/crowdsec/issues/4712)) [@somaz94](https://github.com/somaz94) - buckets: make a copy of all event maps before pouring the event to a bucket ([#4481](https://github.com/crowdsecurity/crowdsec/issues/4481)) [@blotus](https://github.com/blotus) - fix(database): keep simulated decisions from suppressing real bans ([#4679](https://github.com/crowdsecurity/crowdsec/issues/4679)) [@4erdenko](https://github.com/4erdenko), [@blotus](https://github.com/blotus) - fix a nasty bug in transfrom where the effective uuid for a datasource ([#4697](https://github.com/crowdsecurity/crowdsec/issues/4697)) [@sabban](https://github.com/sabban) - hubtest: add a tiebreaker based on the alert date to have a consistent order ([#4699](https://github.com/crowdsecurity/crowdsec/issues/4699)) [@blotus](https://github.com/blotus) - syslog: copy buffer before handing it to the datasource ([#4690](https://github.com/crowdsecurity/crowdsec/issues/4690)) [@blotus](https://github.com/blotus) - Expand env vars in online\_api\_credentials.yaml ([#4677](https://github.com/crowdsecurity/crowdsec/issues/4677)) [@kushiemoon-dev](https://github.com/kushiemoon-dev) #### Chore / Deps - build(deps): bump the gomod group with 5 updates ([#4778](https://github.com/crowdsecurity/crowdsec/issues/4778)) [@dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the github-actions group with 2 updates ([#4777](https://github.com/crowdsecurity/crowdsec/issues/4777)) [@dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump certifi from 2026.1.4 to 2026.10.19 in /build/docker/test ([#4780](https://github.com/crowdsecurity/crowdsec/issues/4780)) [@dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the github-actions group across 1 directory with 8 updates ([#4766](https://github.com/crowdsecurity/crowdsec/issues/4766)) [@dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the gomod group with 16 updates ([#4767](https://github.com/crowdsecurity/crowdsec/issues/4767)) [@dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the gomod group with 8 updates ([#4753](https://github.com/crowdsecurity/crowdsec/issues/4753)) [@dependabot\[bot\]](https://github.com/apps/dependabot) - fpscanner: use fork ([#4761](https://github.com/crowdsecurity/crowdsec/issues/4761)) [@blotus](https://github.com/blotus) - waf: update to coraza 3.8.0 ([#4724](https://github.com/crowdsecurity/crowdsec/issues/4724)) [@blotus](https://github.com/blotus), [@buixor](https://github.com/buixor) - build(deps): bump the gomod group across 1 directory with 19 updates ([#4730](https://github.com/crowdsecurity/crowdsec/issues/4730)) [@dependabot\[bot\]](https://github.com/apps/dependabot) - CI: skip more docker tests on windows ([#4728](https://github.com/crowdsecurity/crowdsec/issues/4728)) [@blotus](https://github.com/blotus) - grok: embed grok library instead of having it as a dep ([#4725](https://github.com/crowdsecurity/crowdsec/issues/4725)) [@blotus](https://github.com/blotus) - docker datasource: skip tests on windows ([#4719](https://github.com/crowdsecurity/crowdsec/issues/4719)) [@blotus](https://github.com/blotus) - agents.md: keep comments to a reasonable level ([#4716](https://github.com/crowdsecurity/crowdsec/issues/4716)) [@blotus](https://github.com/blotus) - build(deps): bump the github-actions group with 7 updates ([#4693](https://github.com/crowdsecurity/crowdsec/issues/4693)) [@dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the gomod group with 11 updates ([#4694](https://github.com/crowdsecurity/crowdsec/issues/4694)) [@dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump github.com/go-openapi/validate from 0.26.5 to 1.0.0 ([#4682](https://github.com/crowdsecurity/crowdsec/issues/4682)) [@dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the gomod group with 19 updates ([#4681](https://github.com/crowdsecurity/crowdsec/issues/4681)) [@dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump cryptography from 48.0.1 to 50.0.0 in /build/docker/test ([#4591](https://github.com/crowdsecurity/crowdsec/issues/4591)) [@dependabot\[bot\]](https://github.com/apps/dependabot) - bump to go 1.27 ([#4675](https://github.com/crowdsecurity/crowdsec/issues/4675)) [@blotus](https://github.com/blotus) - build(deps): bump the github-actions group across 1 directory with 3 updates ([#4658](https://github.com/crowdsecurity/crowdsec/issues/4658)) [@dependabot\[bot\]](https://github.com/apps/dependabot) - build(deps): bump the gomod group across 1 directory with 21 updates ([#4659](https://github.com/crowdsecurity/crowdsec/issues/4659)) [@dependabot\[bot\]](https://github.com/apps/dependabot) - AGENTS.md: clearer guidance on tests ([#4713](https://github.com/crowdsecurity/crowdsec/issues/4713)) [@blotus](https://github.com/blotus) - pimp readme ([#4701](https://github.com/crowdsecurity/crowdsec/issues/4701)) [@buixor](https://github.com/buixor) #### Geolite2 notice This product includes GeoLite2 data created by MaxMind, available from <a href="https://www.maxmind.com"><https://www.maxmind.com></a>. #### Installation Take a look at the [installation instructions](https://doc.crowdsec.net/docs/getting_started/install_crowdsec). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-10-30 11:02:19 +01:00

Update crowdsecurity/crowdsec Docker tag to v1.8.2 929a3a26c6

renovate-bot scheduled this pull request to auto merge when all checks succeed

2026-10-30 11:02:19 +01:00