nginx-1.31.4 mainline version has been released.

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

• Xslt: xmlCreatePushParserCtxt() error handling by @VadimZhestikov in https://github.com/nginx/nginx/pull/1565
• Image filter: bounded size parser reads by received data by @VadimZhestikov in https://github.com/nginx/nginx/pull/1574
• Updated security policy report methods by @pluknet in https://github.com/nginx/nginx/pull/1586
• Autoindex: use temporary pool for directory entries by @Srujan-rai in https://github.com/nginx/nginx/pull/1311
• Perl: fixed $r->print() zero copy with mutable scalars by @devnexen in https://github.com/nginx/nginx/pull/1581
• Events: validate descriptor before FD_SET() by @sbhowmikf5 in https://github.com/nginx/nginx/pull/1598
• Format specifier fixes in error logging by @nishat-06 in https://github.com/nginx/nginx/pull/1592
• GH: restrict the mark_stale job to nginx/nginx by @aminvakil in https://github.com/nginx/nginx/pull/1605
• QUIC: apply stream flow control to RESET_STREAM final_size by @arut in https://github.com/nginx/nginx/pull/1612
• Script: improved compatibility of complex value codes by @bavshin-f5 in https://github.com/nginx/nginx/pull/1601
• gRPC: narrowed special handling of "trailer only" responses by @vinaykumar-1591 in https://github.com/nginx/nginx/pull/1591
• Fixed overflow detection in chunked parser by @pluknet in https://github.com/nginx/nginx/pull/1625
• Upstream: special handling of the "Host" header in HTTP and gRPC by @arut in https://github.com/nginx/nginx/pull/1593
• Upstream: reject zero WINDOW_UPDATE increments by @felix314159 in https://github.com/nginx/nginx/pull/1622
• Core: added data model and JSON serialization libraries by @hyuan-netizen in https://github.com/nginx/nginx/pull/1569
• Upstream: fixed MSVC compilation after dea68dbf126f by @VadimZhestikov in https://github.com/nginx/nginx/pull/1635
• Upstream: reserved padding in state structures. by @dplotnikov-f5 in https://github.com/nginx/nginx/pull/1631
• Stream: PROXY protocol version 2 upstream write support by @VadimZhestikov in https://github.com/nginx/nginx/pull/1204

• @Srujan-rai made their first contribution in https://github.com/nginx/nginx/pull/1311
• @nishat-06 made their first contribution in https://github.com/nginx/nginx/pull/1592
• @aminvakil made their first contribution in https://github.com/nginx/nginx/pull/1605
• @felix314159 made their first contribution in https://github.com/nginx/nginx/pull/1622

Full Changelog: https://github.com/nginx/nginx/compare/release-1.31.3...release-1.31.4

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.8.0-pre.6/turso_cli-installer.sh | sh

powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.8.0-pre.6/turso_cli-installer.ps1 | iex"

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo tursodatabase/turso

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/tursodatabase/turso/releases/download/v0.8.0-pre.5/turso_cli-installer.sh | sh

powershell -ExecutionPolicy Bypass -c "irm https://github.com/tursodatabase/turso/releases/download/v0.8.0-pre.5/turso_cli-installer.ps1 | iex"

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo tursodatabase/turso

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Download page What's new highlights

• CVE-2026-17183

• Reporting: batch dashboard lookups when listing reports (Enterprise)

Download page What's new highlights

• CVE-2026-17183

• Reporting: batch dashboard lookups when listing reports (Enterprise)

Download page What's new highlights

• CVE-2026-17183

• Dashboard Import: Labels in v2 schema #130428, @harisrozajac

• Azure Monitor: fix migration for dimension filters #130521, @olivierlemasle