TecharoHQ/anubis v1.23.1

v1.23.1: Lyse Hext - Echo 1

on GitHub

• Fix SERVE_ROBOTS_TXT setting after the double slash fix broke it.

Potentially breaking changes

Remove default Tencent Cloud block rule

v1.23.0 added a default rule to block Tencent Cloud. After an email from their abuse team where they promised to take action to clean up their reputation, I have removed the default block rule. If this network causes you problems, please contact abuse@tencent.com and supply the following information:

• Time of abusive requests.
• IP address, User-Agent header, or other unique identifiers that can help the abuse team educate the customer about their misbehaving infrastructure.
• Does the abusive IP address request robots.txt? If not, be sure to include that information.
• A brief description of the impact to your system such as high system load, pages not rendering, or database system crashes. This helps the provider establish the fact that their customer is causing you measurable harm.
• Context as to what your service is, what it does, and why they should care.

Mention that you are using Anubis or BotStopper to protect your services. If they do not respond to you, please contact me as soon as possible.

Docker / OCI registry clients

Anubis v1.23.0 accidentally blocked Docker / OCI registry clients. In order to explicitly allow them, add an import for (data)/clients/docker-client.yaml:

bots:
  - import: (data)/meta/default-config.yaml
  - import: (data)/clients/docker-client.yaml

This is technically a regression as these clients used to work in Anubis v1.22.0, however it is allowable to make this opt-in as most websites do not expect to be serving Docker / OCI registry client traffic.

What's Changed

• fix: SERVE_ROBOTS_TXT works again by @Xe in #1229
• chore(default-config): remove Tencent Cloud block rule by @Xe in #1227
• feat(blog): a short post on how to file abuse reports by @Xe in #1230
• build(deps-dev): bump the npm group across 1 directory with 3 updates by @dependabot[bot] in #1238
• build(deps): bump github/codeql-action from 4.31.0 to 4.31.2 in the github-actions group by @dependabot[bot] in #1239
• build(deps): bump the gomod group across 1 directory with 18 updates by @dependabot[bot] in #1237
• fix(data): add ruleset to explicitly allow Docker / OCI clients by @Xe in #1253
• ci: add asset build verification workflow by @Xe in #1254

Full Changelog: v1.23.0...v1.23.1