Docker images for v1.7.0 were never published. The build on that tag failed on a flaky test, the docker workflow correctly refused to publish, but GoReleaser was not gated on the same build and released the binaries anyway. This release fixes the pipeline and ships the images.

What you get depends on how you run reproxy. Container users are effectively upgrading from v1.6.0, since no v1.7.0 image ever existed, so this release also brings them the security fix, the two routing fixes and per-route timeout listed under v1.7.0. Binary and package users already received all of that in v1.7.0 and get only the two changes below.

Improvements

• gate release publishers on tests, so a failed tag build can no longer produce binaries without images #259 @umputun
• fix flaky tests from getFreePort port-allocation race 1860b58 @umputun

Included from v1.7.0, now published as images

• per-route timeout and throttle #253 @umputun
• file provider dropping config changes made within the delay window #256 @paskal
• load balancing on catch-all server broken by default-route dedup #255 @paskal
• critical and major issues from code audit #254 @umputun
• bump golang.org/x/net to v0.55.0 to fix GO-2026-5026 (security) #257 @paskal

New Features

• per-route timeout and throttle #253 @umputun

Bug Fixes

• file provider dropping config changes made within the delay window #256 @paskal
• load balancing on catch-all server broken by default-route dedup #255 @paskal
• critical and major issues from code audit #254 @umputun
• bump golang.org/x/net to v0.55.0 to fix GO-2026-5026 (security) #257 @paskal

New Features

• per-route forward-health-checks option #246 @kemko

Bug Fixes

• bound RoundRobinSelector return to current n #251 @umputun

Improvements

• bump go to 1.26 and update all dependencies #252 @umputun
• harden workflows, upgrade actions, fix caching #248 @paskal
• harden docker workflow against CI injection attacks #245 @paskal
• document forward-health-checks for file and static providers 71fc7f6

New Features

• add shell completions for bash, zsh, and fish #244 @paskal
• add cli/environment option for disabling HTTP to HTTPS redirect #242 @2128506

Bug Fixes

• add http.Flusher to metrics responseWriter for SSE streaming #247 @umputun
• fix brew formula publish path 16591a0

Improvements

• clarify that asset routes require path prefix, not regex 255f0db
• exclude new gosec taint analysis rules in golangci config 9b1b482
• suppress revive var-naming for plugin package in golangci config 49f6e0c
• expand .dockerignore to reduce build context 52444ea
• add zed editor configuration ce922a4

Features

• #241 add configurable Docker API version flag (--docker.api-version, env: DOCKER_API_VERSION). Defaults to 1.24 for backward compatibility. Users on Docker 29+ should set this to 1.44.
• #239 add low-cardinality mode for Prometheus metrics via --metrics.labels flag
• #237 add per-route basic authentication via reproxy.auth label or static configuration
• #236 add DNS-01 ACME challenge providers: DigitalOcean, Hetzner, Linode, GoDaddy, Namecheap, Scaleway, Porkbun, DNSimple, DuckDNS

Maintenance

• #238 modernize release automation with GoReleaser and multi-arch Docker builds (linux/amd64, linux/arm64)

Full Changelog: v1.3.0...v1.4.0

Features

• #202 add acme DNS-01 challenge support via certmagic
• #235 Add configurable upstream connection limits
• #234 Update SSL autocert to dynamically check discovered servers

Improvements

• #217 support headers with multiple colons in value (e.g. CSP)
• #194 Improve documentation on non-root container usage
• #220 Update base image in Dockerfile to latest version, add note on user

Maintenance

• #233 Maintenance: update dependencies and fix linter warnings
• #231 bump deps but keep certmagic
• #229 Update Dependabot configuration to stop automatic PRs
• #223 Configure Dependabot to only provide security updates for Go
• #218 Bump the go-modules-updates group with 2 updates

New Contributors

• @Semior001 made their first contribution in #202

Full Changelog: v1.2.3...v1.3.0

What's Changed

• Limit max size of the URL by @umputun in #211
• support headers with multiple colons in value (e.g. CSP) by @umputun in #217
• Bump the go-modules-updates group with 2 updates by @dependabot in #198
• Bump the go-modules-updates group across 1 directory with 2 updates by @dependabot in #200
• Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 in the go-modules-updates group across 1 directory by @dependabot in #212
• Fix minor typos in README.md by @hovsep in #204
• Bump the go-modules-updates group with 2 updates by @dependabot in #213
• Readme typo: --assets.404= should be --assets.not-found= by @alkk in #215

New Contributors

• @hovsep made their first contribution in #204
• @alkk made their first contribution in #215

Full Changelog: v1.2.2...v1.2.3

• Fixes regression introduced in version 1.2.0 that caused issues with Docker permissions from within the container.

Full Changelog: v1.2.1...v1.2.2

What's Changed

• Handle default and concrete server match conflict by @umputun in #193

Full Changelog: v1.2.0...v1.2.1

What's Changed

• Add 'X-Forwarded-URL' to request header by @umputun in #176
• Dynamic server support for the destination by @umputun in #190
• Added support for wildcard prefix in server patterns by @umputun in #191
• Update README.md by @enzo-g in #177
• Update github.com/didip/tollbooth from v6 to v7 by @paskal in #181
• Add dependabot updates for GitHub Actions, Go modules, Dockerfiles by @paskal in #180
• Bump the github-actions-updates group with 5 updates by @dependabot in #185
• Bump goreleaser/goreleaser from v1.14.0 to v1.25.1 by @dependabot in #183
• Bump golang.org/x/net from 0.22.0 to 0.23.0 by @dependabot in #187
• Bump the go-modules-updates group with 3 updates by @dependabot in #186
• Pin golangci-lint version to latest available, fix reported errors by @paskal in #188
• Add test and golangci-lint to CI for example directory, remove docker autoupdates by @paskal in #182

New Contributors

• @enzo-g made their first contribution in #177
• @paskal made their first contribution in #181

Full Changelog: v1.1.1...v1.2.0