Merge pull request #2633 from bunkerity/dev

Author: TheophileDiot

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -47,7 +47,7 @@ body:
       label: BunkerWeb version
       description: What version of BunkerWeb are you running?
       placeholder: Version
-      value: 1.6.4
+      value: 1.6.5-rc1
     validations:
       required: true
   - type: dropdown

.github/workflows/codeql.yml

@@ -34,12 +34,12 @@ jobs:
           python -m pip install --no-cache-dir --require-hashes -r src/common/db/requirements.txt
           echo "CODEQL_PYTHON=$(which python)" >> $GITHUB_ENV
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
+        uses: github/codeql-action/init@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
         with:
           languages: ${{ matrix.language }}
           config-file: ./.github/codeql.yml
           setup-python-dependencies: false
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
+        uses: github/codeql-action/analyze@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
         with:
           category: "/language:${{matrix.language}}"

.github/workflows/container-build.yml

@@ -120,7 +120,7 @@ jobs:
       # Check OS vulnerabilities
       - name: Check OS vulnerabilities
         if: ${{ inputs.CACHE_SUFFIX != 'arm' }}
-        uses: aquasecurity/trivy-action@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4 # v0.32.0
+        uses: aquasecurity/trivy-action@f9424c10c36e288d5fa79bd3dfd1aeb2d6eae808 # v0.33.0
         with:
           vuln-type: os
           skip-dirs: /root/.cargo

.github/workflows/push-packagecloud.yml

@@ -42,7 +42,7 @@ jobs:
       - name: Check out repository code
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install ruby
-        uses: ruby/setup-ruby@829114fc20da43a41d27359103ec7a63020954d4 # v1.255.0
+        uses: ruby/setup-ruby@efbf473cab83af4468e8606cc33eca9281bb213f # v1.256.0
         with:
           ruby-version: "3.0"
       - name: Install packagecloud

.github/workflows/scorecards-analysis.yml

@@ -25,6 +25,6 @@ jobs:
           results_format: sarif
           publish_results: true
       - name: "Upload SARIF results to code scanning"
-        uses: github/codeql-action/upload-sarif@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
+        uses: github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
         with:
           sarif_file: results.sarif

.github/workflows/staging-tests.yml

@@ -70,7 +70,7 @@ jobs:
         if: inputs.TYPE == 'k8s'
         with:
           version: "v1.29.1"
-      - uses: azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 # v4.3.0
+      - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4.3.1
         if: inputs.TYPE == 'k8s'
       - name: Pull BW linux ubuntu test image
         if: inputs.TYPE == 'linux'

CHANGELOG.md

@@ -1,6 +1,20 @@
 # Changelog
 
-## v1.6.4 - ????/??/??
+## v1.6.5-c1 - ????/??/??
+
+- [FEATURE] Enhance update-check job to utilize cached GitHub release data and improve error handling
+- [BUGFIX] Update default algorithm for Let's Encrypt's `RFC2136` DNS provider from HMAC-SHA512 to HMAC-MD5
+- [BUGFIX] Fix issue with loading environment variables in the `robotstxt` plugin
+- [LINUX] Add upgrade capability to the easy-install script for seamless in-place updates
+- [LINUX] Fix logrotation of certbot logs, they know gets automatically deleted after 7 days
+- [UI] Always display all multiple settings to avoid confusion
+- [UI] Update step navigation buttons to use visually-hidden class for better accessibility
+- [UI] Fixed an issue where certain settings were reset when editing a service based on a template
+- [UI] Fixed an issue where non-template custom configurations were removed when editing a service using a template
+- [UI] Add Free Trial promotion card to pro.html for non-pro users
+- [UI] Add Force update button on PRO page to force the download of PRO plugins without checking for updates.
+
+## v1.6.4 - 2025/08/18
 
 - [SECURITY] Fix open-redirection vulnerability in the Web UI regarding the `next` parameter in the loading process ([CVE-2025-8066](https://github.com/bunkerity/bunkerweb/security/advisories/GHSA-xxx9-3fh5-g585)).
 - [FEATURE] Enhance `ModSecurity` plugin to support human-readable size values for request body limits (requests without files)