## bunkerity/bunkerweb — v1.6.12-rc3…v1.6.12

_59 commits._

### Features
- **feat(db): add upgrade scripts for version 1.6.12 for SQLite, MariaDB, MySQL, and PostgreSQL** (31e2de6)

### Fixes
- **fix(docker): update yq version to v4.50.1 in Dockerfile** (e9b1081)
- **fix(ui): preserve customizations on easy-mode template switch + sync multiselect display** (2607e09)
- **fix(docker): add expat package to address CVE-2026-45186 and CVE-2026-41080** (4e34835)
- **[#3659] fix(linux): prefer upstream CrowdSec over the Ubuntu Pro/ESM build** (76057a5)

### Backend
- **Merge pull request #3694 from bunkerity/staging** (f035a15)
- **Merge pull request #3693 from bunkerity/dev** (12bd76c)
- **deps: Updated LuaJIT version to v2.1-20260701** (492da78)
- **deps: Updated Modsecurity version to v3.0.16** (fc30b41)
- **Merge pull request #3679 from bunkerity/dev** (a5c40a8)
- **Merge branch 'dev' of https://github.com/bunkerity/bunkerweb into dev** (3e889e2)
- **Merge pull request #3677 from bunkerity/dependabot/github_actions/dev/stefanzweifel/git-auto-commit-action-7.2.0** (c001745)
- **Update dependencies: regex to 2026.6.28, certifi to 2026.6.17, click to 8.4.2, and hpack to 4.2.0** (7307c98)
- **deps/gha: bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0** (799c9e7)
- **Merge pull request #3675 from bunkerity/dev** (b025d00)
- **Merge pull request #3671 from bunkerity/dependabot/github_actions/dev/github/codeql-action-4.36.2** (c9ce205)
- **Merge pull request #3672 from bunkerity/dependabot/github_actions/dev/azure/setup-helm-5.0.1** (01ef3ef)
- **Merge pull request #3673 from bunkerity/dependabot/github_actions/dev/github/codeql-action/upload-sarif-4.36.2** (d4501ea)
- **deps/gha: bump github/codeql-action/upload-sarif from 3.36.2 to 4.36.2** (b592fbe)
- **deps/gha: bump azure/setup-helm from 5.0.0 to 5.0.1** (f7d0f99)
- **deps/gha: bump github/codeql-action from 3.36.2 to 4.36.2** (45a2c5c)
- **Merge pull request #3655 from bunkerity/dependabot/github_actions/dev/actions/checkout-7.0.0** (d330916)
- **Merge pull request #3661 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.314.0** (3813d86)
- **Merge pull request #3662 from bunkerity/dependabot/github_actions/dev/softprops/action-gh-release-3.0.1** (ccfd592)
- **Merge pull request #3665 from bunkerity/dependabot/github_actions/dev/actions/setup-python-6.3.0** (def3fb4)
- **deps: Update nginx base image digest in Dockerfiles** (60da82a)
- **Revert "deps: Updated lua-nginx-module version to v0.10.31"** (ace0eae)
- **deps: Updated LuaJIT version to v2.1-20260620** (81b7d46)
- **deps: Updated lua-upstream-nginx-module version to v0.08** (8c92095)
- **deps: Updated lua-resty-string version to v0.19** (eb06c3e)
- **deps: Updated lua-resty-signal version to v0.05** (a7ea3c1)
- **deps: Updated lua-nginx-module version to v0.10.31** (276d74d)
- **deps: Updated lua-cjson version to v2.1.0.18** (072fa5a)
- **deps: Updated headers-more-nginx-module version to v0.40** (7f1a232)
- **deps(fedora): Update Nginx to version 1.30.3** (d073d7a)
- **deps/gha: bump actions/setup-python from 6.2.0 to 6.3.0** (e86a095)
- **Road to 1.6.12 🚀** (1d2f792)
- **deps/gha: bump softprops/action-gh-release from 3.0.0 to 3.0.1** (7b8b560)
- **deps/gha: bump ruby/setup-ruby from 1.313.0 to 1.314.0** (860d89d)
- **deps/gha: bump actions/checkout from 6.0.3 to 7.0.0** (c4607be)
- **Merge pull request #3653 from bunkerity/dev** (94ad2de)
- **Merge pull request #3652 from bunkerity/dev** (53dfd30)
- **Merge pull request #3641 from bunkerity/dev** (6d04689)
- **Merge pull request #3614 from bunkerity/dev** (1e918de)
- **Merge pull request #3609 from bunkerity/dev** (e05beda)
- **Merge pull request #3608 from bunkerity/dev** (9ad3feb)

### Docs
- **docs(social): fix cropped logo in Open Graph preview cards** (c5362c7)
- **docs(plugins): add Authentik, Cloudflare, Matrix to official plugins list** (e4c3263)

### Chore
- **chore(docker): Fix misc CVEs** (45f7cc8)
- **chore(docker): update base images for RHEL 9 and 10 Dockerfiles** (6dd2c07)
- **chore: Update Trivy configuration to ignore unfixed vulnerabilities and clarify ignore file comments** (eb87999)
- **chore: Move DOCKER_BUILD_SUMMARY environment variable to build steps for better control** (23c40ed)
- **chore: Enhance Trivy integration with summary template and update workflow environment variables** (c03c152)
- **chore: Update workflows to allow all legs to run for Trivy SARIF uploads and add Python package ignore policy** (91f022e)
- **chore: Update workflow permissions for Trivy SARIF uploads in beta, dev, rc, and release workflows** (e0be9f7)
- **chore: Update Dockerfiles for Debian and RHEL to reflect latest base images and configurations** (d6ddc07)
- **chore: Update easy-install script to reflect the new fedora NGINX version support** (c6f6809)
- **chore: update Dockerfiles to use latest base images** (5b6463c)
- **chore: update mTLS stream support and lint documentation** (ec49f9c)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/bunkerity/bunkerweb?utm_source=github-action)._