Beta Branch update optional Lua nginx to OpenResty 1.31.8.1 module set with corou…

update optional Lua nginx to OpenResty 1.31.8.1 module set with coroutine UAF fixes and AWS-LC support in 140.00beta01

Follow the OpenResty 1.31.8.1 release bundle for the optional Lua nginx
modules (ORESTY_LUANGINX='y'), release candidate tags included, because
lua-resty-core only runs with the exact lua-nginx-module and stream-lua
versions it ships with. No tagged release contains the 2026-11-06 upstream
fixes for a heap use-after-free when coroutines with a pending ngx.sleep or
cosocket operation are cleaned up, so they are backported here.

---

Changes:
- lua-nginx-module 0.10.32rc7, stream-lua 0.0.20rc3, lua-resty-core
0.1.35rc2, lua-resty-redis 0.34, lua-resty-dns 0.24, lua-resty-websocket
0.16, lua-resty-lrucache 0.15, lua-cjson 2.1.0.20
- apply the use-after-free fixes (lua-nginx-module 8df8ff0,
stream-lua-nginx-module 8f3886c) to the module sources on every nginx
version, and stop the build if they do not apply
- apply OpenResty's 37 nginx 1.31.8 core patches in OpenResty's order on
nginx 1.31.7 and 1.31.8, all or nothing; a partly patched nginx source
tree stops the build; nginx 1.31.0-1.31.6, freenginx and angie skip them
- vendor those patches from openresty/openresty v1.31.8.1
patches/nginx/1.31.8 into patches/luanginx/nginx-1.31.8/, leaving out
server_header and win32_max_err_str, with the error page footer changed
to "nginx centminmod"
- allow Lua with AWS-LC: apply the unmerged upstream AWS-LC compatibility
patches (lua-nginx-module PR 2357, stream-lua-nginx-module PR 360), with
PR 2357 changed so the early keying material export returns an error,
as AWS-LC has no SSL_export_keying_material_early
- skip luanginx-1.27.0.patch when stream-lua already has the nginx 1.25.5+
SSL context fix
- inc/nginx_patch.inc: new luanginx_module_fixes and
openresty_nginx_patchset, run from inc/nginx_configure.inc after
luanginx_patch
- tools/check-upstream-versions.sh: check the three Lua modules against the
latest OpenResty release bundle

Source: openresty/openresty tag v1.31.8.1, patches/nginx/1.31.8
sha256 of the upstream files (before the footer change):
5f093299a020a4307f2c27b21e40794f44a7eb6f5a87048d5106e84638d94aa5 nginx-1.31.8-always_enable_cc_feature_tests.patch
9a088624e7ac6ce5df53af01686d101ebb2efe88eaf1a1fa6cbd08df1a34f951 nginx-1.31.8-balancer_pool_max_retry.patch
42251d844f377f86b88a66011946e5ff7107c1833d107235546ad0b68ab3af6b nginx-1.31.8-balancer_status_code.patch
b089857622804cc55ae06bb54ec18b5efa4f7fc2dc9dd8e424ed9651ef8af541 nginx-1.31.8-builtin_error_page_footer.patch
d02854ec01101563e34f1997508b09750e258dc63613b0e0f352505cfaa103fd nginx-1.31.8-cache_manager_exit.patch
aeb6af61c4fd7425ea0089713c3ca106500dc89ef7dc8f09022675158bc775c6 nginx-1.31.8-daemon_destroy_pool.patch
243ed36b8c2d04450483b5c8fa8997370e4086e28ffc1459285fcd20414702df nginx-1.31.8-delayed_posted_events.patch
ad2d2c9c66f336d72e565155a1c57b3d577aec53ff84bf6db2d7ba128224b415 nginx-1.31.8-http2_subreq_error_wakeup.patch
3bf68929ddc60e724f35839046f30726c65db8742cb823855873598fad1633f1 nginx-1.31.8-init_cycle_pool_release.patch
30e2222ff2e5c60ff6ca4eb8f13f3a9c22c4df829002bf7bf63e9fa6cfa400ea nginx-1.31.8-intercept_error_log.patch
ca946e2b2f9ffab7229953fbfbc7074be518c8a1a166c0d311c103d95998ec7b nginx-1.31.8-larger_max_error_str.patch
ee0d51877bf40e7d928f0829c4e7d3810f13d7d3bea37d756e82fba095b0a4f7 nginx-1.31.8-log_escape_non_ascii.patch
2d23a0ddfa0576608621c84ab03bba2c4216b1495f6eabe981c1fce5918be381 nginx-1.31.8-no_Werror.patch
cbcec2a2512dcf0e0fbf82c3940be43a2e05a8b74d9e70dee4d6216457ee4cbb nginx-1.31.8-no_error_pages.patch
743f55664ab844af6cb0ce1751e6d318fe7804007dc13fe6405a4463a5ff81e2 nginx-1.31.8-pcre_conf_opt.patch
099d5c0726708706ae90586fc8c319b751df827df3d5ee5603fb77335c957d55 nginx-1.31.8-privileged_agent_process.patch
fb91b94228fa2562cb2a12be7636bfebd800eb9f9c29b999f2ec0dbf48f5f898 nginx-1.31.8-privileged_agent_process_connections.patch
1bd0817a8436d2ba3bc64ae405d06a5b616dcd273f2e8b88e55c032d69aab1a1 nginx-1.31.8-privileged_agent_process_thread_pool.patch
f4b90cf10ffbb58083f607b0a1d49d474f26f224e1d02000f64d7386e3978c1c nginx-1.31.8-proc_exit_handler.patch
b272187ce67773200ba83162663679b6ecc001385c5c2d3b12d0c08e570d5957 nginx-1.31.8-proxy_host_port_vars.patch
8cb4cfd7171e83ffd53218c4c99f066e2b1b2bba5c8074c8b32b9e99d8f9d23f nginx-1.31.8-proxy_ssl_verify_cb_yield.patch
21e22b6e6ffeea9a378b5b5c972a5e92892ff9630c9d827efdddc9ad91f741bb nginx-1.31.8-quic_ssl_lua_yield.patch
24d6a51349551e65c16709122307a12ce84274cbbaa224adfa5853aa367608b8 nginx-1.31.8-resolver_conf_parsing.patch
7f1c3eefcd841502515f529e3a0c0a17492e7e44ba5c47fc50ae6a3123d8937f nginx-1.31.8-reuseport_close_unused_fds.patch
7906bd4d03344c0da10c4977bea395b6bd1c99db3b8c7ebc3d99eb527553ee70 nginx-1.31.8-safe_resolver_ipv6_option.patch
90622f1edaae53a0e7f13cc22b597031c996d8c7df59b73d90fb0150725bb3d2 nginx-1.31.8-single_process_graceful_exit.patch
6cf0d2406d1c58613da276ea6db9442c271f11d6acb0cc778df2430c8b58d8d3 nginx-1.31.8-socket_cloexec.patch
661bdbaa52cf4159c91ebf30095e38d0a0824757a71f036f5fbf27f6d37f475e nginx-1.31.8-ssl_cert_cb_yield.patch
9a41cd393bf8bf7e5ddf3dd33a25f2bf1e7b1a1b8b739da4c14d91b4e10a5c15 nginx-1.31.8-ssl_client_hello_cb_yield.patch
30baa61b13a359c029d5904efa45bb924591d7cd66f0093a1510d386fbed2148 nginx-1.31.8-ssl_sess_cb_yield.patch
d0071afc5123c23207fe40d5c783ce19bdb482061d9be684c1b9825aa36037eb nginx-1.31.8-stream_balancer_export.patch
00f5a57d3784592f99d2340bf42f31923f31ff107275c213aadaf854ca066be9 nginx-1.31.8-stream_proxy_get_next_upstream_tries.patch
348a64c7dec821d365a84495a2b8ded2a87e2f04b7c89897c0320cff539eedcf nginx-1.31.8-stream_proxy_timeout_fields.patch
205db7547778025625c7844a813f2aaeefdb1ab6a2d86b1920cb60778cbcbfc5 nginx-1.31.8-stream_ssl_preread_no_skip.patch
f147c9724a0ad33084a3cb51acdafbd4dbd2c40ba5840af1684b7b9595b24ae2 nginx-1.31.8-upstream_pipelining.patch
93e83348182dc510dc9ae0e5fb2bf5e140bb486acd830bf136b7032d976d2c53 nginx-1.31.8-upstream_ssl_session_cleanup.patch
c5773f5098396d426b8bc7a30077b5ae306930daa65032b188efb5626eb94b76 nginx-1.31.8-upstream_timeout_fields.patch

vendored builtin_error_page_footer after the footer change:
9141121c2a536b60b3ddee87eabb94c479d14a9ced7ca42ab80a1e54be6a0c8c nginx-1.31.8-builtin_error_page_footer.patch

Continue reading...

140.00beta01 branch

• Branch: https://github.com/centminmod/centminmod/tree/140.00beta01
• Commit History: https://github.com/centminmod/centminmod/commits/140.00beta01