github.com/crowdsecurity/crowdsec
v1.7.8
#213 most downloaded on Go modules
crowdsecurity/crowdsec
What this package is like to depend on
Last release today
22 Aug 2026
Ships fairly regularly
a new release about every 9 days
Rarely documented
notes for 5 of 81 stable releases
Nothing withdrawn
no release was ever pulled
6 years old
1287 releases · first in 2020
164 releases in the last 12 months
see the full history below
Release timeline
1287 releases · Apr 2021 to Aug 2026Releases
latest 60 of 1287-
v1.8.0-rc1.0.20260822132033-7db403d3507722 Aug 2026 pre-releaseNothing published for this version
-
v1.8.0-rc1.0.20260820091227-59e4156635f220 Aug 2026 pre-releaseNothing published for this version
-
v1.8.0-rc1.0.20260819144204-fadc3943154c19 Aug 2026 pre-releaseNothing published for this version
-
v1.8.0-rc1.0.20260814151827-f1bc9db19e3914 Aug 2026 pre-releaseNothing published for this version
-
v1.8.0-rc1.0.20260812155959-51ec508635ad12 Aug 2026 pre-releaseNothing published for this version
-
v1.8.0-rc1.0.20260811124802-0166b317502a11 Aug 2026 pre-releaseNothing published for this version
-
v1.8.0-rc1.0.20260810123511-79c657bc4b4b10 Aug 2026 pre-releaseNothing published for this version
-
v1.8.0-rc1.0.20260806102414-863a4997afda06 Aug 2026 pre-releaseNothing published for this version
-
v1.8.0-rc1.0.20260805080623-3d25833e787e05 Aug 2026 pre-releaseNothing published for this version
-
v1.8.0-rc1.0.20260731081132-380bb2ed48c131 Jul 2026 pre-releaseNothing published for this version
-
v1.8.0-rc1.0.20260728152734-eb5391c224d628 Jul 2026 pre-releaseNothing published for this version
-
v1.8.0-rc1.0.20260728125914-7b6a8dab011b28 Jul 2026 pre-releaseNothing published for this version
-
v1.8.0-rc127 Jul 2026 pre-releaseRelease notes
Open source →Bot detection with CrowdSec WAF
This release brings a major change to the CrowdSec WAF: a bot detection feature.
If enabled, clients will be served a challenge + fingerprinting page before accessing the website.
CrowdSec will evaluate the challenge and check the fingerprint against pre-configured rules to decide whether the client looks legitimate or not.You can find more information about this new feature in the documentation.
Other notable changes include:
- a dedicated kubernetes datasource: crowdsec will fetch logs directly from the k8s apiserver
- new HTTP helpers for the expression language, to query external services from parsers and scenarios
New Features
Improvements
- Add cs_machines_heartbeat_seconds metric (#4569) @kushiemoon-dev
- Cscli hub list improvements (#4567) @buixor
- expr: add HTTP helpers (#4533) @blotus
Bug Fixes
- fix(docker): allow spaces in ENROLL_INSTANCE_NAME (#4582) @sahilnyk
- apiclient: return nil response if we couldnt connect to LAPI (#4573) @blotus
- cscli lapi register: no error if the credentials file does not exist (#4570) @lopster568
- fix(docker): avoid panic on colliding nested crowdsec labels (#4555) @arpitjain099
- fix(syslog): don't close the shared acquisition output channel (#4553) @alxrxs
- waf: track id/name pairs for all subrules (#4505) @blotus
- apiserver: prevent from fetching JWT token from query string (#4554) @blotus
- fix(leakybucket): emit overflow before pouring the next event (#4547) @blotus
- loki: prevent duplicate log ingestion and improve timestamp handling (#4498) @Anulo2
- db: use proper mutex when checking if flush can happen (#4528) @blotus
- db: do not flush alerts with active decisions (#4527) @blotus
- Fix
Distinct()panic on[]stringand other non-[]anyslices (#4543) @Synvoya - fix(docker): bouncer name strips wrong field from Docker secrets path (#4490) @tejgokani
Chore / Deps
- ci(bats): fix scenarios badge color variable name (#4551) @blotus
- ci(docker): inherit secrets so the docker environment secrets resolve (#4550) @blotus
- build: use version based on latest for dev builds (#4583) @blotus
- build(deps): bump the gomod group with 19 updates (#4581) @dependabot[bot]
- build(deps): bump github.com/quic-go/quic-go from 0.57.0 to 0.59.1 (#4499) @dependabot[bot]
- build(deps): bump cryptography from 46.0.6 to 48.0.1 in /build/docker/test (#4522) @dependabot[bot]
- build(deps-dev): bump ruff from 0.15.20 to 0.15.22 in /build/docker/test in the uv group across 1 directory (#4559) @dependabot[bot]
- WAF: update coraza (#4572) @blotus
- build(deps): bump the github-actions group across 1 directory with 3 updates (#4558) @dependabot[bot]
- build(deps): bump the gomod group across 1 directory with 21 updates (#4566) @dependabot[bot]
- bump fpscanner to v1.0.7 (#4557) @blotus
- update go-re2 to 1.11.0 (#4478) @blotus
- Unify sqlite build flag (#4525) @zc-devs
- fix TestCryptoObfuscationDefaultPoolSize (#4565) @buixor
- build(deps): bump the gomod group across 1 directory with 30 updates (#4542) @dependabot[bot]
- chore: delete publiccode.yml to comply with the process (#4552) @mazzma12
- build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#4549) @dependabot[bot]
- CI hardening (#4546) @blotus
- fix(docs): set pubblicode.yml to correct version (#4548) @mazzma12
- build(deps): bump cloudflare/wrangler-action from 3.15.0 to 4.0.0 (#4541) @dependabot[bot]
- build(deps): bump codecov/codecov-action from 6.0.0 to 7.0.0 (#4540) @dependabot[bot]
- build(deps-dev): bump the uv group in /build/docker/test with 2 updates (#4537) @dependabot[bot]
- build(deps): bump the github-actions group with 7 updates (#4538) @dependabot[bot]
- build(deps): bump actions/checkout from 6.0.2 to 7.0.0 (#4539) @dependabot[bot]
- build(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 (#4544) @dependabot[bot]
- build(deps): bump the github-actions group across 1 directory with 11 updates (#4524) @dependabot[bot]
- build(deps): bump the uv group across 1 directory with 3 updates (#4519) @dependabot[bot]
- build(deps): bump alpine from 3.23 to 3.24 in /build/docker in the docker group across 1 directory (#4513) @dependabot[bot]
Geolite2 notice
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
Installation
Take a look at the installation instructions.
-
v1.7.811 May 2026Release notes
Open source →New Features
Improvements
- WAF: enforce body size limitation (#4355) @blotus
- Decision stream: move to chunked transfer by default (#4413) @blotus
- cscli: add
--quickflag to enroll command (#4350) @blotus - propose an alternative, cleaner configuration for appsec-config (#4397) @buixor
Bug Fixes
- cscli metrics: don't attempt to create a DB client if there's no DB config (#4451) @blotus
- papi: don't spam logs if chan is closed (#4439) @blotus
- alerts: use single transaction when creating alert and all related items (#4438) @blotus
- LAPI: enforce maximum body size for decompression
Chore / Deps
- build(deps): bump the gomod group across 1 directory with 34 updates (#4453) @dependabot[bot]
- build(deps): bump the github-actions group with 2 updates (#4447) @dependabot[bot]
- build(deps): bump alpine from 3.21 to 3.23 in /build/docker in the docker group across 1 directory (#4441) @dependabot[bot]
- build(deps): bump the github-actions group with 7 updates (#4443) @dependabot[bot]
- build(deps): bump the uv group in /build/docker/test with 3 updates (#4442) @dependabot[bot]
- db: add some missing indexes (#4435) @blotus
- Dependencies update (#4412) @blotus
- add PAPI metrics (#4411) @blotus
- build(deps): bump github.com/aws/aws-lambda-go from 1.47.0 to 1.54.0 (#4402) @dependabot[bot]
- build(deps): bump docker/login-action from 4.0.0 to 4.1.0 (#4403) @dependabot[bot]
- build(deps): bump github.com/google/go-querystring from 1.1.0 to 1.2.0 (#4400) @dependabot[bot]
- build(deps): bump actions/setup-go from 6.3.0 to 6.4.0 (#4404) @dependabot[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/sqs from 1.42.3 to 1.42.25 (#4405) @dependabot[bot]
- build(deps): bump release-drafter/release-drafter from 6.4.0 to 7.1.1 (#4381) @dependabot[bot]
- build(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0 (#4388) @dependabot[bot]
- build(deps): bump schneegans/dynamic-badges-action from 1.7.0 to 1.8.0 (#4393) @dependabot[bot]
- build(deps): bump astral-sh/setup-uv from 7.6.0 to 8.0.0 (#4394) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.33.0 to 4.35.1 (#4395) @dependabot[bot]
- update dependabot config (#4440) @blotus
- build(deps): bump requests from 2.32.5 to 2.33.0 in /build/docker/test (#4389) @dependabot[bot]
- build(deps): bump cryptography from 46.0.5 to 46.0.6 in /build/docker/test (#4391) @dependabot[bot]
- build(deps): bump pygments from 2.19.2 to 2.20.0 in /build/docker/test (#4396) @dependabot[bot]
Geolite2 notice
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
Installation
Take a look at the installation instructions.
-
v1.7.8-rc105 May 2026 pre-releaseRelease notes
Open source →New Features
Improvements
- WAF: enforce body size limitation (#4355) @blotus
- Decision stream: move to chunked transfer by default (#4413) @blotus
- cscli: add
--quickflag to enroll command (#4350) @blotus - propose an alternative, cleaner configuration for appsec-config (#4397) @buixor
Bug Fixes
- cscli metrics: don't attempt to create a DB client if there's no DB config (#4451) @blotus
- papi: don't spam logs if chan is closed (#4439) @blotus
- alerts: use single transaction when creating alert and all related items (#4438) @blotus
Chore / Deps
- build(deps): bump the gomod group across 1 directory with 34 updates (#4453) @dependabot[bot]
- build(deps): bump the github-actions group with 2 updates (#4447) @dependabot[bot]
- build(deps): bump alpine from 3.21 to 3.23 in /build/docker in the docker group across 1 directory (#4441) @dependabot[bot]
- build(deps): bump the github-actions group with 7 updates (#4443) @dependabot[bot]
- build(deps): bump the uv group in /build/docker/test with 3 updates (#4442) @dependabot[bot]
- db: add some missing indexes (#4435) @blotus
- Dependencies update (#4412) @blotus
- add PAPI metrics (#4411) @blotus
- build(deps): bump github.com/aws/aws-lambda-go from 1.47.0 to 1.54.0 (#4402) @dependabot[bot]
- build(deps): bump docker/login-action from 4.0.0 to 4.1.0 (#4403) @dependabot[bot]
- build(deps): bump github.com/google/go-querystring from 1.1.0 to 1.2.0 (#4400) @dependabot[bot]
- build(deps): bump actions/setup-go from 6.3.0 to 6.4.0 (#4404) @dependabot[bot]
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/sqs from 1.42.3 to 1.42.25 (#4405) @dependabot[bot]
- build(deps): bump release-drafter/release-drafter from 6.4.0 to 7.1.1 (#4381) @dependabot[bot]
- build(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0 (#4388) @dependabot[bot]
- build(deps): bump schneegans/dynamic-badges-action from 1.7.0 to 1.8.0 (#4393) @dependabot[bot]
- build(deps): bump astral-sh/setup-uv from 7.6.0 to 8.0.0 (#4394) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.33.0 to 4.35.1 (#4395) @dependabot[bot]
- update dependabot config (#4440) @blotus
- build(deps): bump requests from 2.32.5 to 2.33.0 in /build/docker/test (#4389) @dependabot[bot]
- build(deps): bump cryptography from 46.0.5 to 46.0.6 in /build/docker/test (#4391) @dependabot[bot]
- build(deps): bump pygments from 2.19.2 to 2.20.0 in /build/docker/test (#4396) @dependabot[bot]
Geolite2 notice
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
Installation
Take a look at the installation instructions.
-
v1.7.723 Mar 2026Release notes
Open source →CrowdSec 1.7.7 brings 2 major changes:
- On linux, RE2 is now used by default for evaluating regexp in parsers
- WAF rules can now contain a mix of AND/OR conditions without any limits, giving much greater flexibility when writing new rules
RE2 by default on linux
CrowdsSec has supported for a long time using RE2 as the regexp engine, and with this release we make it the default.
CrowdSec has always used the builtin Go regexp package, which is a Go reimplementation of the RE2 library, but with known performance limitations.
The switch to RE2 will bring significantly increased regexp performance (one of the most critical part of CrowdSec) at the cost of slightly longer regexp compilation and higher baseline memory usage.
Important
If you encounter any issues with the new regexp engine, you can fallback to the previous Go implementation by setting the feature flag
re2_disable_grok_support(see the documentation).Other changes
Other notable changes include:
- a new
kindattribute for alerts used to identify its source (a scenario, a WAF rule, a manual decision creation, ...) - a new
cscli allowlist importcommand - support for the
HTTP_PROXYenvironment variable in thenotification-httpplugin - A resource leak under high load was fixed
Full changelog
New Features
- add LookupFile and FileMap expr helpers (#4372) @buixor
- waf rules: allow arbitrary mix of AND and OR conditions (#4358) @blotus
Improvements
- enable RE2 support by default on linux (#4386) @blotus
- cscli allowlists: add import command (#4378) @blotus
- WAF: expose more transformations from coraza (#4140) @blotus
- Add new
kindalert attribute (#4351) @blotus - Use environment proxy settings for notification-http (#4364) @op3
Bug Fixes
- allowlists: apply items to existing decisions in batch (#4095) @blotus
- waf: fix tests for modsec rules generation (#4385) @blotus
- windows: add file notification plugin in MSI package (#4367) @blotus
- leakroutine: call cancel after leakroutine returns (#4369) @blotus
- notification-sentinel: lower-case x-ms-date header for correct HMAC (#4288) @ebirn
- tests: remove temporary sqlite/plugin files from /tmp/ (#4332) @mmetc
- pkg/apiserver: fix scenario count in debug log (#4333) @mmetc
- pkg/csplugin: prevent race condition, deadlock (#4294) @mmetc
- pkg/acquisitioncontext: minimal fix for data race in tests (#4327) @mmetc
- acquisition/file: minimal fix for data race in tests (#4326) @mmetc
- fix lint fsutil/freebsd: unnecessary conversion (#4324) @mmetc
- cscli: consistent status and usage message for unknown subcommands (#4320) @mmetc
- cscli detect: set log type for caddy unit to "syslog" (#4321) @mmetc
- CI: add published_at to version.crowdsec.net/latest (#4291) @blotus
- cmd/crowdsec: assign overflow after parsing (#4226) @mmetc
- waf: format as CRS match only if anomaly score is not 0 (#4230) @blotus
Changes
- build(deps): bump cryptography from 46.0.3 to 46.0.5 in /build/docker/test (#4298) @dependabot[bot]
- support for waf- alias in cscli (#4347) @buixor
- refact pkg/dumps: reduce complexity (#4209) @mmetc
- lint: refact pkg/dumps for nilaway (#4208) @mmetc
- refact pkg/parser: redundant indirection (#4344) @mmetc
- refact pkg/parser: extract+embed NodeConfig in Node struct (#4343) @mmetc
- move calls to trace.ReportPanic() on top of goroutines (#4338) @mmetc
- pkg/csplugin: simplify notification loop; noop with empty queue (#4328) @mmetc
- pkg/parsers: light refact, remove redundant code (#4213) @mmetc
- refact cmd/crowdsec: encapsulate cache into alertBuffer (#4300) @mmetc
- cmd/notification-*: don't provide the same context twice for request (#4316) @mmetc
- don't flush 127.0.0.1 (#4315) @sabban
- clipapi: replace tomb with errgroup (#4207) @mmetc
- refact cmd/crowdsec: remove redundant global variable (#4299) @mmetc
- refact: remove unused code in crowdsec-cli, apiserver, acquisition, database (#4304) @mmetc
- refact pkg/leakybucket: trim down redundant Leaky struct fields (#4290) @mmetc
- pkg/leakybucket: remove global bucketStore, unused parameters + tags (#4286) @mmetc
- pkg/leakybucket: remove Simulated field from Leaky, keep it in config (#4285) @mmetc
- pkg/leakybucket: extract BucketSpec from BucketFactory (#4284) @mmetc
- refact pkg/leakybucket: extract methods from LoadBucket() part 2 (#4282) @mmetc
- pkg/leakybucket: refact test loop, more explicit failures in testFile() (#4281) @mmetc
- refact pkg/leakybucket: extract methods from LoadBucket() (#4279) @mmetc
- pkg/leakybucket: replace Signal chan with explicit read/done chans (#4277) @mmetc
- pkg/leakybucket: replace waitgroups with single rwlock (#4276) @mmetc
- pkg/leakybucket: garbage collect: compare float with epsilon (#4275) @mmetc
- pkg/leakybucket: refactor tests (#4272) @mmetc
- pkg/leakybucket: replace sycn.Map with map + mutex (#4271) @mmetc
- pkg/leakybucket: replace global counter with call to bucket store (#4273) @mmetc
- pkg/leakybucket: review README.md (#4274) @mmetc
- pkg/leakybucket: encapsulate store map + add methods (#4253) @mmetc
- pkg/leakybucket: remove redundant bool var (#4252) @mmetc
- fix hub console side (#4266) @sabban
- version workflow fix (#4262) @sabban
- rename the prod branch to main (#4261) @sabban
- add version workflow (#4210) @sabban
- pkg/leakybucket: remove unused global (#4251) @mmetc
- pkg/leakybucket: pass bucket factories by pointer (#4250) @mmetc
- pkt/leakybucket: compileScopeFilter() -> ScopeType.CompileFilter() (#4247) @mmetc
- pkg/leakybucket: rename OverflowFilter -> OverflowProcessor (#4248) @mmetc
- pkg/leakybucket: rename Buckets -> BucketStore (#4246) @mmetc
- refact leaky bayesian: method to function, unlock w/defer (#4242) @mmetc
- pkg/leakybucket: early return (#4244) @mmetc
- pkg/leakybucket: variable shorthand (#4245) @mmetc
- pkg/leakybucket: move LeakRoutine to method, rename parameters (#4243) @mmetc
- pkg/leakybucket: review bucket validation and tests (#4241) @mmetc
- refact: remove unnecessary pointers to map, string, mutex (#4212) @mmetc
- pkg/leakybucket: function to method BucketFactory.LoadBucket() (#4229) @mmetc
- pkg/leakybucket: BucketType interface, method BucketFactory.Validate() (#4228) @mmetc
Chore / Deps
- build(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 (#4382) @dependabot[bot]
- CI: use windows-2025 image (#4379) @blotus
- build(deps): bump github/codeql-action from 4.32.6 to 4.33.0 (#4371) @dependabot[bot]
- build(deps): bump astral-sh/setup-uv from 7.5.0 to 7.6.0 (#4373) @dependabot[bot]
- build(deps): bump google.golang.org/grpc from 1.74.2 to 1.79.3 (#4376) @dependabot[bot]
- build(deps): bump astral-sh/setup-uv from 7.3.1 to 7.5.0 (#4366) @dependabot[bot]
- build(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4319) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.32.5 to 4.32.6 (#4360) @dependabot[bot]
- build(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 (#4361) @dependabot[bot]
- build(deps): bump release-drafter/release-drafter from 6.2.0 to 6.4.0 (#4362) @dependabot[bot]
- build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (#4356) @dependabot[bot]
- build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 (#4353) @dependabot[bot]
- build(deps): bump actions/setup-node from 6.2.0 to 6.3.0 (#4352) @dependabot[bot]
- build(deps): bump docker/login-action from 3.7.0 to 4.0.0 (#4354) @dependabot[bot]
- deps: update actions and golangci-lint (#4348) @mmetc
- build(deps): bump github/codeql-action from 4.32.4 to 4.32.5 (#4345) @dependabot[bot]
- build(deps): bump astral-sh/setup-uv from 7.3.0 to 7.3.1 (#4346) @dependabot[bot]
- build(deps): bump actions/setup-go from 6.2.0 to 6.3.0 (#4339) @dependabot[bot]
- build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 (#4342) @dependabot[bot]
- replace trace.CatchPanic(...) with trace.ReportPanic() (#4336) @mmetc
- build(deps): bump github/codeql-action from 4.32.3 to 4.32.4 (#4322) @dependabot[bot]
- deps: update gocron v1 -> v2 (#4317) @mmetc
- build(deps): bump docker/build-push-action from 6.19.0 to 6.19.2 (#4306) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.32.2 to 4.32.3 (#4312) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.32.1 to 4.32.2 (#4292) @dependabot[bot]
- update golangci-lint 2.9 (#4302) @mmetc
- build(deps): bump astral-sh/setup-uv from 7.2.1 to 7.3.0 (#4296) @dependabot[bot]
- build(deps): bump docker/build-push-action from 6.18.0 to 6.19.0 (#4303) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.32.0 to 4.32.1 (#4278) @dependabot[bot]
- build(deps): bump actions/setup-node from 4.4.0 to 6.2.0 (#4264) @dependabot[bot]
- CI: update python and dependencies (#4249) @mmetc
- build(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#4263) @dependabot[bot]
- build(deps): bump astral-sh/setup-uv from 7.2.0 to 7.2.1 (#4265) @dependabot[bot]
- build(deps): bump docker/login-action from 3.6.0 to 3.7.0 (#4257) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.31.11 to 4.32.0 (#4254) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.31.10 to 4.31.11 (#4233) @dependabot[bot]
- build(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#4234) @dependabot[bot]
- build(deps): bump release-drafter/release-drafter from 6.1.0 to 6.2.0 (#4222) @dependabot[bot]
- build(deps): bump actions/setup-python from 6.1.0 to 6.2.0 (#4223) @dependabot[bot]
Geolite2 notice
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
Installation
Take a look at the installation instructions.
-
v1.7.7-rc123 Mar 2026 pre-releaseRelease notes
Open source →New Features
- add LookupFile and FileMap expr helpers (#4372) @buixor
- waf rules: allow arbitrary mix of AND and OR conditions (#4358) @blotus
Improvements
- enable RE2 support by default on linux (#4386) @blotus
- cscli allowlists: add import command (#4378) @blotus
- WAF: expose more transformations from coraza (#4140) @blotus
- Add new
kindalert attribute (#4351) @blotus - Use environment proxy settings for notification-http (#4364) @op3
Bug Fixes
- allowlists: apply items to existing decisions in batch (#4095) @blotus
- waf: fix tests for modsec rules generation (#4385) @blotus
- windows: add file notification plugin in MSI package (#4367) @blotus
- leakroutine: call cancel after leakroutine returns (#4369) @blotus
- notification-sentinel: lower-case x-ms-date header for correct HMAC (#4288) @ebirn
- tests: remove temporary sqlite/plugin files from /tmp/ (#4332) @mmetc
- pkg/apiserver: fix scenario count in debug log (#4333) @mmetc
- pkg/csplugin: prevent race condition, deadlock (#4294) @mmetc
- pkg/acquisitioncontext: minimal fix for data race in tests (#4327) @mmetc
- acquisition/file: minimal fix for data race in tests (#4326) @mmetc
- fix lint fsutil/freebsd: unnecessary conversion (#4324) @mmetc
- cscli: consistent status and usage message for unknown subcommands (#4320) @mmetc
- cscli detect: set log type for caddy unit to "syslog" (#4321) @mmetc
- CI: add published_at to version.crowdsec.net/latest (#4291) @blotus
- cmd/crowdsec: assign overflow after parsing (#4226) @mmetc
- waf: format as CRS match only if anomaly score is not 0 (#4230) @blotus
Changes
- build(deps): bump cryptography from 46.0.3 to 46.0.5 in /build/docker/test (#4298) @dependabot[bot]
- support for waf- alias in cscli (#4347) @buixor
- refact pkg/dumps: reduce complexity (#4209) @mmetc
- lint: refact pkg/dumps for nilaway (#4208) @mmetc
- refact pkg/parser: redundant indirection (#4344) @mmetc
- refact pkg/parser: extract+embed NodeConfig in Node struct (#4343) @mmetc
- move calls to trace.ReportPanic() on top of goroutines (#4338) @mmetc
- pkg/csplugin: simplify notification loop; noop with empty queue (#4328) @mmetc
- pkg/parsers: light refact, remove redundant code (#4213) @mmetc
- refact cmd/crowdsec: encapsulate cache into alertBuffer (#4300) @mmetc
- cmd/notification-*: don't provide the same context twice for request (#4316) @mmetc
- don't flush 127.0.0.1 (#4315) @sabban
- clipapi: replace tomb with errgroup (#4207) @mmetc
- refact cmd/crowdsec: remove redundant global variable (#4299) @mmetc
- refact: remove unused code in crowdsec-cli, apiserver, acquisition, database (#4304) @mmetc
- refact pkg/leakybucket: trim down redundant Leaky struct fields (#4290) @mmetc
- pkg/leakybucket: remove global bucketStore, unused parameters + tags (#4286) @mmetc
- pkg/leakybucket: remove Simulated field from Leaky, keep it in config (#4285) @mmetc
- pkg/leakybucket: extract BucketSpec from BucketFactory (#4284) @mmetc
- refact pkg/leakybucket: extract methods from LoadBucket() part 2 (#4282) @mmetc
- pkg/leakybucket: refact test loop, more explicit failures in testFile() (#4281) @mmetc
- refact pkg/leakybucket: extract methods from LoadBucket() (#4279) @mmetc
- pkg/leakybucket: replace Signal chan with explicit read/done chans (#4277) @mmetc
- pkg/leakybucket: replace waitgroups with single rwlock (#4276) @mmetc
- pkg/leakybucket: garbage collect: compare float with epsilon (#4275) @mmetc
- pkg/leakybucket: refactor tests (#4272) @mmetc
- pkg/leakybucket: replace sycn.Map with map + mutex (#4271) @mmetc
- pkg/leakybucket: replace global counter with call to bucket store (#4273) @mmetc
- pkg/leakybucket: review README.md (#4274) @mmetc
- pkg/leakybucket: encapsulate store map + add methods (#4253) @mmetc
- pkg/leakybucket: remove redundant bool var (#4252) @mmetc
- fix hub console side (#4266) @sabban
- version workflow fix (#4262) @sabban
- rename the prod branch to main (#4261) @sabban
- add version workflow (#4210) @sabban
- pkg/leakybucket: remove unused global (#4251) @mmetc
- pkg/leakybucket: pass bucket factories by pointer (#4250) @mmetc
- pkt/leakybucket: compileScopeFilter() -> ScopeType.CompileFilter() (#4247) @mmetc
- pkg/leakybucket: rename OverflowFilter -> OverflowProcessor (#4248) @mmetc
- pkg/leakybucket: rename Buckets -> BucketStore (#4246) @mmetc
- refact leaky bayesian: method to function, unlock w/defer (#4242) @mmetc
- pkg/leakybucket: early return (#4244) @mmetc
- pkg/leakybucket: variable shorthand (#4245) @mmetc
- pkg/leakybucket: move LeakRoutine to method, rename parameters (#4243) @mmetc
- pkg/leakybucket: review bucket validation and tests (#4241) @mmetc
- refact: remove unnecessary pointers to map, string, mutex (#4212) @mmetc
- pkg/leakybucket: function to method BucketFactory.LoadBucket() (#4229) @mmetc
- pkg/leakybucket: BucketType interface, method BucketFactory.Validate() (#4228) @mmetc
Chore / Deps
- build(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 (#4382) @dependabot[bot]
- CI: use windows-2025 image (#4379) @blotus
- build(deps): bump github/codeql-action from 4.32.6 to 4.33.0 (#4371) @dependabot[bot]
- build(deps): bump astral-sh/setup-uv from 7.5.0 to 7.6.0 (#4373) @dependabot[bot]
- build(deps): bump google.golang.org/grpc from 1.74.2 to 1.79.3 (#4376) @dependabot[bot]
- build(deps): bump astral-sh/setup-uv from 7.3.1 to 7.5.0 (#4366) @dependabot[bot]
- build(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4319) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.32.5 to 4.32.6 (#4360) @dependabot[bot]
- build(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 (#4361) @dependabot[bot]
- build(deps): bump release-drafter/release-drafter from 6.2.0 to 6.4.0 (#4362) @dependabot[bot]
- build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (#4356) @dependabot[bot]
- build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 (#4353) @dependabot[bot]
- build(deps): bump actions/setup-node from 6.2.0 to 6.3.0 (#4352) @dependabot[bot]
- build(deps): bump docker/login-action from 3.7.0 to 4.0.0 (#4354) @dependabot[bot]
- deps: update actions and golangci-lint (#4348) @mmetc
- build(deps): bump github/codeql-action from 4.32.4 to 4.32.5 (#4345) @dependabot[bot]
- build(deps): bump astral-sh/setup-uv from 7.3.0 to 7.3.1 (#4346) @dependabot[bot]
- build(deps): bump actions/setup-go from 6.2.0 to 6.3.0 (#4339) @dependabot[bot]
- build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 (#4342) @dependabot[bot]
- replace trace.CatchPanic(...) with trace.ReportPanic() (#4336) @mmetc
- build(deps): bump github/codeql-action from 4.32.3 to 4.32.4 (#4322) @dependabot[bot]
- deps: update gocron v1 -> v2 (#4317) @mmetc
- build(deps): bump docker/build-push-action from 6.19.0 to 6.19.2 (#4306) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.32.2 to 4.32.3 (#4312) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.32.1 to 4.32.2 (#4292) @dependabot[bot]
- update golangci-lint 2.9 (#4302) @mmetc
- build(deps): bump astral-sh/setup-uv from 7.2.1 to 7.3.0 (#4296) @dependabot[bot]
- build(deps): bump docker/build-push-action from 6.18.0 to 6.19.0 (#4303) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.32.0 to 4.32.1 (#4278) @dependabot[bot]
- build(deps): bump actions/setup-node from 4.4.0 to 6.2.0 (#4264) @dependabot[bot]
- CI: update python and dependencies (#4249) @mmetc
- build(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#4263) @dependabot[bot]
- build(deps): bump astral-sh/setup-uv from 7.2.0 to 7.2.1 (#4265) @dependabot[bot]
- build(deps): bump docker/login-action from 3.6.0 to 3.7.0 (#4257) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.31.11 to 4.32.0 (#4254) @dependabot[bot]
- build(deps): bump github/codeql-action from 4.31.10 to 4.31.11 (#4233) @dependabot[bot]
- build(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#4234) @dependabot[bot]
- build(deps): bump release-drafter/release-drafter from 6.1.0 to 6.2.0 (#4222) @dependabot[bot]
- build(deps): bump actions/setup-python from 6.1.0 to 6.2.0 (#4223) @dependabot[bot]
Geolite2 notice
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
Installation
Take a look at the installation instructions.
-
v1.7.623 Jan 2026Release notes
Open source →Changes
Bug Fixes
Geolite2 notice
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
Installation
Take a look at the installation instructions.
-
v1.7.6-0.20260727080842-d3b1c0ba8c1927 Jul 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260724135840-b59de6fb4feb24 Jul 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260723222451-a88b497b471e23 Jul 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260717095240-0a79ef8de52d17 Jul 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260710105315-62844fa9ecea10 Jul 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260709152632-84c3aab7b9d809 Jul 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260708154722-06be6270335a08 Jul 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260707105352-112cc23e6cd407 Jul 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260706124959-1b2cd703617306 Jul 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260702143853-07f815dfc2a602 Jul 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260701153050-1f5e9c8dea4001 Jul 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260629135755-4e57efb49fbc29 Jun 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260531204308-b962bc0d479e31 May 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260520125028-5ce91a00b7ef20 May 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260519073009-baa39fb8a58619 May 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260511074515-b4b2de2cfcbc11 May 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260507135113-56d0d6915f7f07 May 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260507110210-c3696a70981007 May 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260505134849-54db427523e205 May 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260428160033-847fe3e5ec1328 Apr 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260427093204-ef8e8c5d75d527 Apr 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260415100240-7d4daefa777e15 Apr 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260410140555-b0f524555d5a10 Apr 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260323133021-981e6166121423 Mar 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260316150151-d086ab674f2d16 Mar 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260306085651-d8eb85d9ae3406 Mar 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260226105700-b4c8f877c65826 Feb 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260223094718-ceb9987a450a23 Feb 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260220154453-cba68bc7716720 Feb 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260217134625-a3dbe7f34c1317 Feb 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260217094519-7f29c376ce3017 Feb 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260212131324-356d3111dda712 Feb 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260205132528-1df2c5578d0905 Feb 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260203145452-4624f982f5ff03 Feb 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260203141613-991682f88ecb03 Feb 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260202144357-1389912dcf7a02 Feb 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260130162708-a08725ef836e30 Jan 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260129114000-db5470a098f529 Jan 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260127170020-a7d12e13583727 Jan 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260127095331-0347b7be968127 Jan 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260126154944-6748d479789926 Jan 2026 pre-releaseNothing published for this version
-
v1.7.6-0.20260126125103-569271eee25b26 Jan 2026 pre-releaseNothing published for this version