## bunkerity/bunkerweb — v1.6.13-rc1…v1.6.13

_45 commits._

### Features
- **Add migration scripts for upgrading to version 1.6.13 across MariaDB, MySQL, PostgreSQL, and SQLite** (081fa42)
- **feat(country): add COUNTRY_IGNORE_URI setting to bypass country checks** (c16b448)
- **feat(limit): add global aggregate rate limit for services** (43374cd)

### Fixes
- **fix(instances): harden hostname parsing** (410cb41)
- **fix(configs): delete custom configs by exact key instead of method-wide** (c330ecb)
- **fix(ui): add reverse proxy buffering settings to UI configuration** (21ad5e2)
- **fix(deps): bump curl to 8.20.0-r0 in bw/all-in-one images to patch CVEs** (db98289)
- **fix(instances): validate hostnames against SSRF-style URL smuggling** (553cf4f)
- **fix(ui): enforce exact TOTP endpoint check for 2FA gate** (8dd519f)
- **fix(authbasic): remove dead writes to two invalid nginx variables** (564192e)

### Backend
- **Merge pull request #3727 from bunkerity/dev** (2ae80bb)
- **Road to 1.6.13 🚀** (3dcdb29)
- **Merge pull request #3720 from bunkerity/dependabot/terraform/tests/terraform/dev/scaleway/scaleway-2.79.0** (49b74cf)
- **Merge pull request #3723 from bunkerity/dependabot/github_actions/dev/ruby/setup-ruby-1.319.0** (0c9cdac)
- **Merge pull request #3722 from bunkerity/dependabot/github_actions/dev/softprops/action-gh-release-3.0.2** (542b1ee)
- **Merge pull request #3721 from bunkerity/dependabot/github_actions/dev/actions/setup-node-7.0.0** (b24b85d)
- **security: Bump nginx to 1.30.4, vendor full source tree** (ba8f2cf)
- **deps/gha: bump ruby/setup-ruby from 1.316.0 to 1.319.0** (292cfc3)
- **deps/gha: bump softprops/action-gh-release from 3.0.1 to 3.0.2** (6b66fc0)
- **deps/gha: bump actions/setup-node from 6.4.0 to 7.0.0** (f9c3728)
- **deps/terraform: bump scaleway/scaleway in /tests/terraform** (139a668)
- **Merge branch 'dev' of https://github.com/bunkerity/bunkerweb into dev** (c6780f7)
- **Merge pull request #3718 from bunkerity/dependabot/github_actions/dev/docker/login-action-4.4.0** (28dab61)
- **Merge pull request #3717 from bunkerity/dependabot/github_actions/dev/github/codeql-action/analyze-4.37.0** (681134c)
- **Merge pull request #3715 from bunkerity/dependabot/github_actions/dev/github/codeql-action/upload-sarif-4.37.0** (8166e71)
- **Merge pull request #3714 from bunkerity/dependabot/github_actions/dev/docker/setup-buildx-action-4.2.0** (b8de1f2)
- **Merge pull request #3713 from bunkerity/dependabot/github_actions/dev/github/codeql-action/init-4.37.0** (1332180)
- **deps/gha: bump docker/login-action from 4.2.0 to 4.4.0** (ab0f764)
- **deps/gha: bump github/codeql-action/analyze from 4.36.3 to 4.37.0** (fc2687b)
- **deps/gha: bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0** (7a00b8c)
- **deps/gha: bump docker/setup-buildx-action from 4.1.0 to 4.2.0** (c1278e4)
- **deps/gha: bump github/codeql-action/init from 4.36.3 to 4.37.0** (4fbf499)
- **Merge pull request #3694 from bunkerity/staging** (f035a15)
- **Merge pull request #3693 from bunkerity/dev** (12bd76c)
- **Merge pull request #3679 from bunkerity/dev** (a5c40a8)
- **Merge pull request #3675 from bunkerity/dev** (b025d00)
- **Merge pull request #3653 from bunkerity/dev** (94ad2de)
- **Merge pull request #3652 from bunkerity/dev** (53dfd30)
- **Merge pull request #3641 from bunkerity/dev** (6d04689)
- **Merge pull request #3614 from bunkerity/dev** (1e918de)
- **Merge pull request #3609 from bunkerity/dev** (e05beda)
- **Merge pull request #3608 from bunkerity/dev** (9ad3feb)

### Docs
- **docs(country): reformat README tables for COUNTRY_IGNORE_URI column width** (f0a4c33)

### Chore
- **build: bump base image digests, drop stale CVE pins from AIO/bw Dockerfile** (6c69c3e)
- **chore(deps): bump Python dependencies across api/autoconf/deps/scheduler** (bc6a1bd)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/bunkerity/bunkerweb?utm_source=github-action)._