Go modules · #223 by repository stars

github.com/crowdsecurity/crowdsec

v1.8.1crowdsecurity/crowdsec ↗New releases in your daily digest, changelog included.

Last release today
05 Oct 2026
Ships fairly regularly
a new release about every 9 days
Rarely documented
notes for 7 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
6 years old
1328 releases · first in 2020

Release timeline

1328 releases since 2020

2020202120222023202420252026

20202026

One column per quarter.

Releases

v1.7.6-0.20260428160033-847fe3e5ec1328 Apr 2026pre-release
Nothing published for this version
v1.7.6-0.20260427093204-ef8e8c5d75d527 Apr 2026pre-release
Nothing published for this version
v1.7.6-0.20260415100240-7d4daefa777e15 Apr 2026pre-release
Nothing published for this version
v1.7.6-0.20260410140555-b0f524555d5a10 Apr 2026

v1.7.521 Jan 2026

replace syscall with unix/windows packages where possible ( #3032 ) @mmetc

Changes

replace syscall with unix/windows packages where possible (#3032) @mmetc
pkg/acquisition: refact configuration validation and tests (#4187) @mmetc
pkg/acquisition: remove/restore mock datasources after usage (#4190) @mmetc
pkg/leakybucket: replace global variables with injected StateDumper (#4197) @mmetc
pkg/acquisition: method docs, deduplicate module names (#4192) @mmetc
errors.Wrapf -> fmt.Errorf, remove dependency on github.com/pkg/errors (#4198) @mmetc
update golangci-lint 2.8 (#4194) @mmetc
notification plugins: readability / dry refact, unnecessary pointers (#4166) @mmetc
refact acquisition/appsec: happy path (#4183) @mmetc
pkg/acquisition/registry, move datasource registration to avoid dependency (#4189) @mmetc
gin middleware: drop closures (#4186) @mmetc
acquisition/journalctl: test cleanup (#4182) @mmetc
cscli hubtest: extract method finalizeRun() (#4181) @mmetc
refact cmd/crowdsec: remove globals ParseDump, BucketPourTrack (#4184) @mmetc
refact pkg/apiserver: happy path; nil guard (#4180) @mmetc
refact pkg/leakybucket: drop closures (#4178) @mmetc
cmd/crowdsec: rename pipeline channels (#4175) @mmetc
move dir debian, rpm to /build/ (#4174) @mmetc
refact cmd/crowdsec: remove globals, lint, etc (#4163) @mmetc
lint: modernize - enable slicessort, stringsseq (#4162) @mmetc
appsec: inject dependencies, avoid globals (#4148) @mmetc
CI: move windows build scripts to ./build/windows (#4145) @mmetc
remove obsolete readme (replaced by go generate) (#4164) @mmetc
cmd/crowdsec: refact dump.go, loops (#4158) @mmetc
cmd/crowdsec: refact output.go, pour.go, parse.go (#4157) @mmetc
refact: drop parserTomb, lpMetricsTomb (#4138) @mmetc
drop unused method Client.IsMachineRegistered() (#4121) @mmetc
CI: build with the tag "nomsgpack" to reduce binary size (#4151) @mmetc
move ./docker to ./build/docker (#4130) @mmetc
acquisition refact: context-aware OneShot(), for file + journalctl + wineventlog (#4125) @mmetc
lint: forbidigo (no print or printf in production, prefer fprint) (#4141) @mmetc
CI: avoid using nolint with revive (#4144) @mmetc
Lint: add explicit per-linter settings (#4134) @mmetc
refact pkg/acquisition: split docker.go (#4065) @mmetc
get rid of tombs in leakybucket package (#4127) @sabban
refact pkg/acquisition: cloudwatch configuration (#4058) @mmetc
refact pkg/acquisition: kinesis configuration (#4059) @mmetc
refact pkg/acquisition: k8saudit configuration (#4060) @mmetc
refact pkg/acquisition: http configuration (#4061) @mmetc
refact heartbeat: context-aware method (#4126) @mmetc
pkg/leakybucket refact: unexport, unused, explicit field names (#4123) @mmetc
docker build: run builds on large runner (#4120) @blotus

Improvements

docker datasource schema (#4206) @mmetc
lint: enable bodyclose (ensure response bodies are closed to avoid leaks) (#4200) @mmetc
feat: Add ParseKVLax for Flexible Key-Value Parsing (#4007) @LaurenceJJones
pkg/parser: avoid calling spew unless trace (#4156) @mmetc
leakybucket: reduce error verbosity, test for misconfiguration (#4087) @mmetc
feat(appsec): support transaction id header for request tracing (#4124) @LaurenceJJones

Bug Fixes

update functional tests with time-based-bf (#4217) @mmetc
papi: check if decision is allowlisted before adding it (#4196) @blotus
pkg/acquisition: register mock datasource for YAML tests (#4205) @mmetc
pkg/acquisition: prevent duplicate send in case of transform error (#4191) @mmetc
CI fix - exit lapi during hub tests; pass container struct reference instead of slice (#4202) @mmetc
CAPI: always reuse the stored token (#4201) @blotus
fix #4066: don't prepare the hub in lapi-only containers (#4169) @mmetc
fix #3991 - Acquisition config formatting in bug template (#4170) @mmetc
fix typos in function name, comments and user-facing docs (#4154) @mmetc
refact appsec tests: prevent data race (#3902) @mmetc
fix build issue on freebsd, add cross platform CI build and lint target (#4109) @mmetc

Chore / Deps

build(deps): bump actions/setup-go from 6.1.0 to 6.2.0 (#4195) @dependabot[bot]
build(deps): bump github/codeql-action from 4.31.9 to 4.31.10 (#4193) @dependabot[bot]
build(deps): bump astral-sh/setup-uv from 7.1.6 to 7.2.0 (#4185) @dependabot[bot]
CI/tests: update bats-*, remove bats-mock (#4172) @mmetc
deps: update modernc.org/sqlite (#4177) @mmetc
CI, docker: update yq to v4.50.1 (#4179) @mmetc
build(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#4167) @dependabot[bot]
build(deps): bump github/codeql-action from 4.31.8 to 4.31.9 (#4153) @dependabot[bot]
update expr to 1.17.7 (#4150) @blotus
build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4146) @dependabot[bot]
build(deps): bump astral-sh/setup-uv from 7.1.5 to 7.1.6 (#4147) @dependabot[bot]
build(deps): bump github/codeql-action from 4.31.7 to 4.31.8 (#4135) @dependabot[bot]
build(deps): bump github/codeql-action from 4.31.6 to 4.31.7 (#4116) @dependabot[bot]
CI: update and/or pin actions with tag comments (#4108) @mmetc
CI: update golangci-lint to 2.7 (#4110) @mmetc
make: move ./mk to ./build/mk, update gmsl (#4111) @mmetc

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

Open source →

v1.7.5-rc119 Jan 2026pre-release

replace syscall with unix/windows packages where possible ( #3032 ) @mmetc

Changes

replace syscall with unix/windows packages where possible (#3032) @mmetc
pkg/acquisition: refact configuration validation and tests (#4187) @mmetc
pkg/acquisition: remove/restore mock datasources after usage (#4190) @mmetc
pkg/leakybucket: replace global variables with injected StateDumper (#4197) @mmetc
pkg/acquisition: method docs, deduplicate module names (#4192) @mmetc
errors.Wrapf -> fmt.Errorf, remove dependency on github.com/pkg/errors (#4198) @mmetc
update golangci-lint 2.8 (#4194) @mmetc
notification plugins: readability / dry refact, unnecessary pointers (#4166) @mmetc
refact acquisition/appsec: happy path (#4183) @mmetc
pkg/acquisition/registry, move datasource registration to avoid dependency (#4189) @mmetc
gin middleware: drop closures (#4186) @mmetc
acquisition/journalctl: test cleanup (#4182) @mmetc
cscli hubtest: extract method finalizeRun() (#4181) @mmetc
refact cmd/crowdsec: remove globals ParseDump, BucketPourTrack (#4184) @mmetc
refact pkg/apiserver: happy path; nil guard (#4180) @mmetc
refact pkg/leakybucket: drop closures (#4178) @mmetc
cmd/crowdsec: rename pipeline channels (#4175) @mmetc
move dir debian, rpm to /build/ (#4174) @mmetc
refact cmd/crowdsec: remove globals, lint, etc (#4163) @mmetc
lint: modernize - enable slicessort, stringsseq (#4162) @mmetc
appsec: inject dependencies, avoid globals (#4148) @mmetc
CI: move windows build scripts to ./build/windows (#4145) @mmetc
remove obsolete readme (replaced by go generate) (#4164) @mmetc
cmd/crowdsec: refact dump.go, loops (#4158) @mmetc
cmd/crowdsec: refact output.go, pour.go, parse.go (#4157) @mmetc
refact: drop parserTomb, lpMetricsTomb (#4138) @mmetc
drop unused method Client.IsMachineRegistered() (#4121) @mmetc
CI: build with the tag "nomsgpack" to reduce binary size (#4151) @mmetc
move ./docker to ./build/docker (#4130) @mmetc
acquisition refact: context-aware OneShot(), for file + journalctl + wineventlog (#4125) @mmetc
lint: forbidigo (no print or printf in production, prefer fprint) (#4141) @mmetc
CI: avoid using nolint with revive (#4144) @mmetc
Lint: add explicit per-linter settings (#4134) @mmetc
refact pkg/acquisition: split docker.go (#4065) @mmetc
get rid of tombs in leakybucket package (#4127) @sabban
refact pkg/acquisition: cloudwatch configuration (#4058) @mmetc
refact pkg/acquisition: kinesis configuration (#4059) @mmetc
refact pkg/acquisition: k8saudit configuration (#4060) @mmetc
refact pkg/acquisition: http configuration (#4061) @mmetc
refact heartbeat: context-aware method (#4126) @mmetc
pkg/leakybucket refact: unexport, unused, explicit field names (#4123) @mmetc
docker build: run builds on large runner (#4120) @blotus

Improvements

docker datasource schema (#4206) @mmetc
lint: enable bodyclose (ensure response bodies are closed to avoid leaks) (#4200) @mmetc
feat: Add ParseKVLax for Flexible Key-Value Parsing (#4007) @LaurenceJJones
pkg/parser: avoid calling spew unless trace (#4156) @mmetc
leakybucket: reduce error verbosity, test for misconfiguration (#4087) @mmetc
feat(appsec): support transaction id header for request tracing (#4124) @LaurenceJJones

Bug Fixes

papi: check if decision is allowlisted before adding it (#4196) @blotus
pkg/acquisition: register mock datasource for YAML tests (#4205) @mmetc
pkg/acquisition: prevent duplicate send in case of transform error (#4191) @mmetc
CI fix - exit lapi during hub tests; pass container struct reference instead of slice (#4202) @mmetc
CAPI: always reuse the stored token (#4201) @blotus
fix #4066: don't prepare the hub in lapi-only containers (#4169) @mmetc
fix #3991 - Acquisition config formatting in bug template (#4170) @mmetc
fix typos in function name, comments and user-facing docs (#4154) @mmetc
refact appsec tests: prevent data race (#3902) @mmetc
fix build issue on freebsd, add cross platform CI build and lint target (#4109) @mmetc

Chore / Deps

build(deps): bump actions/setup-go from 6.1.0 to 6.2.0 (#4195) @dependabot[bot]
build(deps): bump github/codeql-action from 4.31.9 to 4.31.10 (#4193) @dependabot[bot]
build(deps): bump astral-sh/setup-uv from 7.1.6 to 7.2.0 (#4185) @dependabot[bot]
CI/tests: update bats-*, remove bats-mock (#4172) @mmetc
deps: update modernc.org/sqlite (#4177) @mmetc
CI, docker: update yq to v4.50.1 (#4179) @mmetc
build(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#4167) @dependabot[bot]
build(deps): bump github/codeql-action from 4.31.8 to 4.31.9 (#4153) @dependabot[bot]
update expr to 1.17.7 (#4150) @blotus
build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4146) @dependabot[bot]
build(deps): bump astral-sh/setup-uv from 7.1.5 to 7.1.6 (#4147) @dependabot[bot]
build(deps): bump github/codeql-action from 4.31.7 to 4.31.8 (#4135) @dependabot[bot]
build(deps): bump github/codeql-action from 4.31.6 to 4.31.7 (#4116) @dependabot[bot]
CI: update and/or pin actions with tag comments (#4108) @mmetc
CI: update golangci-lint to 2.7 (#4110) @mmetc
make: move ./mk to ./build/mk, update gmsl (#4111) @mmetc

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

Open source →

v1.7.43 Dec 2025

docker: remove CROWDSEC_CONTAINER_ENV ( #4085 ) @mmetc

Changes

docker: remove CROWDSEC_CONTAINER_ENV (#4085) @mmetc
refact cscli: define csconfig.Getter once (#4091) @mmetc
refact load/save apic token: dependencies and sentinel errors (#4081) @mmetc
pkg/csplugin: use backoff package to retry notifications (#3944) @mmetc
refact pkg/database batching (#3906) @mmetc
refact pkg/acquisition: split appsec.go (#4043) @mmetc
refact pkg/acquisition: journalctl configuration (#4057) @mmetc
lint revive: lower complexity threshold (#4056) @mmetc
lint: unused parameters / 2 (#4055) @mmetc
lint: unused parameters (#4049) @mmetc
refact pkg/acquisition: split loki.go (#4034) @mmetc
refact pkg/acquisition: split victorialogs.go (#4037) @mmetc
refact pkg/acquisition: split wineventlog.go (#4036) @mmetc
refact pkg/acquisition: split s3.go (#4035) @mmetc
refact pkg/acquisition: split k8s_audit.go (#4033) @mmetc
refact pkg/acquisition: split kinesis.go (#4032) @mmetc
refact pkg/acquisition: split kafka.go (#4031) @mmetc
refact pkg/acquisition: split cloudwatch.go (#4029) @mmetc
refact pkg/acquisition: split http.go (#4030) @mmetc
refactg pkg/acquisition: split file.go (#4038) @mmetc
refact pkg/acquisition: split syslog.go (#4028) @mmetc
papi: explicit context (#3973) @mmetc
pkg/csplugin: remove unused function (#4019) @mmetc
pkg/types -> new imports pt 4 (#4012) @mmetc
pkg/types -> new imports pt 3 (#4014) @mmetc
pkg/types -> new imports pt 2 (#4013) @mmetc
pkg/types -> new imports pt 1 (#4011) @mmetc
pkg/types -> pkg/{pipeline,fsutil,enrichment,logging...} (#4006) @mmetc
CI: enable linter "protogetter" (#3995) @mmetc
enable linters: unnecessary-format, unused-receiver (#4001) @mmetc
refact: remove unused struct fields and params / 3; enable linter "unused" (#3334) @mmetc

New Features

WAF: Add DropRequest helper to block request in hooks (#4016) @blotus

Improvements

pkg/acquisition: update syslog to RestartableStreamer (#4040) @mmetc
refact logging configuration; add log_media="syslog" (#4045) @mmetc
cscli hubtest: better report docker/nuclei errors (#4052) @mmetc
build: check make version before running Makefile (#4054) @mmetc
pkg/acquisition: refact journalctl datasource and unified retry loop (#4023) @mmetc
option api.server.disable_usage_metrics_export (#4021) @mmetc
build: optional pure-go sqlite driver (#3908) @mmetc

Bug Fixes

LAPI metrics: don't use empty path as label for LAPI hits metrics (#4106) @blotus
fix accessLogger setup to separate file (#4103) @mmetc
docker acquisition: prevent data races (#3956) @mmetc
Fix avoidable prometheus metrics cardinality (#4080) @g00g1
loki acquisition: remove forgotten debug print (#4062) @mmetc
fix 2808: show certificate path in "lapi status" (#4053) @mmetc
decisionStream: only select required fields from the DB (#4024) @blotus

Documentation

docs: add public roadmap section to README.md (#4039) @mazzma12

Chore / Deps

build(deps): bump github/codeql-action from 4.31.4 to 4.31.6 (#4101) @dependabot[bot]
build(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 (#4083) @dependabot[bot]
Update go-re2 to 1.10.0 (#4020) @blotus
waf: remove custom raw body processor and use the upstream one (#4092) @blotus
build(deps): bump actions/setup-python from 6.0.0 to 6.1.0 (#4089) @dependabot[bot]
update go-cs-lib (#4084) @mmetc
update coraza (#4047) @blotus
build(deps): bump actions/checkout from 5.0.1 to 6.0.0 (#4077) @dependabot[bot]
build(deps): bump astral-sh/setup-uv from 7.1.3 to 7.1.4 (#4078) @dependabot[bot]
replace prom2json with native Prometheus parser and context-aware scraping in CLI metrics (#3932) @mmetc
build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 (#4073) @dependabot[bot]
build(deps): bump github/codeql-action from 4.31.3 to 4.31.4 (#4069) @dependabot[bot]
build(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#4064) @dependabot[bot]
update docker/docker to moby/moby (version docker-v29.0.0) (#4048) @mmetc
build(deps): bump github/codeql-action from 4.31.0 to 4.31.3 (#4051) @dependabot[bot]
build(deps): bump astral-sh/setup-uv from 7.1.2 to 7.1.3 (#4042) @dependabot[bot]
build(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 (#4041) @dependabot[bot]
build(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 (#4025) @dependabot[bot]
CI: update golangci-lint to 2.6.1 (#4026) @mmetc
waf: extract temp state from AppsecRuntimeConfig (#3952) @blotus
build(deps): bump astral-sh/setup-uv from 7.1.1 to 7.1.2 (#4009) @dependabot[bot]
build(deps): bump github/codeql-action from 4.30.9 to 4.31.0 (#4008) @dependabot[bot]
build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4010) @dependabot[bot]

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

Open source →

v1.7.4-rc23 Dec 2025pre-release

docker: remove CROWDSEC_CONTAINER_ENV ( #4085 ) @mmetc

Changes

docker: remove CROWDSEC_CONTAINER_ENV (#4085) @mmetc
refact cscli: define csconfig.Getter once (#4091) @mmetc
refact load/save apic token: dependencies and sentinel errors (#4081) @mmetc
pkg/csplugin: use backoff package to retry notifications (#3944) @mmetc
refact pkg/database batching (#3906) @mmetc
refact pkg/acquisition: split appsec.go (#4043) @mmetc
refact pkg/acquisition: journalctl configuration (#4057) @mmetc
lint revive: lower complexity threshold (#4056) @mmetc
lint: unused parameters / 2 (#4055) @mmetc
lint: unused parameters (#4049) @mmetc
refact pkg/acquisition: split loki.go (#4034) @mmetc
refact pkg/acquisition: split victorialogs.go (#4037) @mmetc
refact pkg/acquisition: split wineventlog.go (#4036) @mmetc
refact pkg/acquisition: split s3.go (#4035) @mmetc
refact pkg/acquisition: split k8s_audit.go (#4033) @mmetc
refact pkg/acquisition: split kinesis.go (#4032) @mmetc
refact pkg/acquisition: split kafka.go (#4031) @mmetc
refact pkg/acquisition: split cloudwatch.go (#4029) @mmetc
refact pkg/acquisition: split http.go (#4030) @mmetc
refactg pkg/acquisition: split file.go (#4038) @mmetc
refact pkg/acquisition: split syslog.go (#4028) @mmetc
papi: explicit context (#3973) @mmetc
pkg/csplugin: remove unused function (#4019) @mmetc
pkg/types -> new imports pt 4 (#4012) @mmetc
pkg/types -> new imports pt 3 (#4014) @mmetc
pkg/types -> new imports pt 2 (#4013) @mmetc
pkg/types -> new imports pt 1 (#4011) @mmetc
pkg/types -> pkg/{pipeline,fsutil,enrichment,logging...} (#4006) @mmetc
CI: enable linter "protogetter" (#3995) @mmetc
enable linters: unnecessary-format, unused-receiver (#4001) @mmetc
refact: remove unused struct fields and params / 3; enable linter "unused" (#3334) @mmetc

New Features

WAF: Add DropRequest helper to block request in hooks (#4016) @blotus

Improvements

pkg/acquisition: update syslog to RestartableStreamer (#4040) @mmetc
refact logging configuration; add log_media="syslog" (#4045) @mmetc
cscli hubtest: better report docker/nuclei errors (#4052) @mmetc
build: check make version before running Makefile (#4054) @mmetc
pkg/acquisition: refact journalctl datasource and unified retry loop (#4023) @mmetc
option api.server.disable_usage_metrics_export (#4021) @mmetc
build: optional pure-go sqlite driver (#3908) @mmetc

Bug Fixes

fix accessLogger setup to separate file (#4103) @mmetc
docker acquisition: prevent data races (#3956) @mmetc
Fix avoidable prometheus metrics cardinality (#4080) @g00g1
loki acquisition: remove forgotten debug print (#4062) @mmetc
fix 2808: show certificate path in "lapi status" (#4053) @mmetc
decisionStream: only select required fields from the DB (#4024) @blotus

Documentation

docs: add public roadmap section to README.md (#4039) @mazzma12

Chore / Deps

build(deps): bump github/codeql-action from 4.31.4 to 4.31.6 (#4101) @dependabot[bot]
build(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 (#4083) @dependabot[bot]
Update go-re2 to 1.10.0 (#4020) @blotus
waf: remove custom raw body processor and use the upstream one (#4092) @blotus
build(deps): bump actions/setup-python from 6.0.0 to 6.1.0 (#4089) @dependabot[bot]
update go-cs-lib (#4084) @mmetc
update coraza (#4047) @blotus
build(deps): bump actions/checkout from 5.0.1 to 6.0.0 (#4077) @dependabot[bot]
build(deps): bump astral-sh/setup-uv from 7.1.3 to 7.1.4 (#4078) @dependabot[bot]
replace prom2json with native Prometheus parser and context-aware scraping in CLI metrics (#3932) @mmetc
build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 (#4073) @dependabot[bot]
build(deps): bump github/codeql-action from 4.31.3 to 4.31.4 (#4069) @dependabot[bot]
build(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#4064) @dependabot[bot]
update docker/docker to moby/moby (version docker-v29.0.0) (#4048) @mmetc
build(deps): bump github/codeql-action from 4.31.0 to 4.31.3 (#4051) @dependabot[bot]
build(deps): bump astral-sh/setup-uv from 7.1.2 to 7.1.3 (#4042) @dependabot[bot]
build(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 (#4041) @dependabot[bot]
build(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 (#4025) @dependabot[bot]
CI: update golangci-lint to 2.6.1 (#4026) @mmetc
waf: extract temp state from AppsecRuntimeConfig (#3952) @blotus
build(deps): bump astral-sh/setup-uv from 7.1.1 to 7.1.2 (#4009) @dependabot[bot]
build(deps): bump github/codeql-action from 4.30.9 to 4.31.0 (#4008) @dependabot[bot]
build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4010) @dependabot[bot]

Geolite2 notice

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Installation

Take a look at the installation instructions.

Open source →