v0.11.0

Upgrade notes

• Python 3.11 or later is required.
• The new non_expanding_variable check, and fixes to ssrf and if_is_evil, may report issues in configs that passed 0.10.0.
• Stray ;, { and } that NGINX rejects are now reported as invalid config (exit code 2) instead of being analyzed silently.
• A directory passed as input now exits with code 4 instead of 3.

What's Changed

• build: require Python 3.11 by @MegaManSec in #125
• build: lock runtime dependencies by @MegaManSec in #126
• ci: pin the docs build and the browser scanner dependencies by @MegaManSec in #127
• docs: stretch the header to the page width by @MegaManSec in #128
• fix(parser): report stray semicolons and braces like nginx by @MegaManSec in #129
• docs: fit the header logo to its image by @MegaManSec in #130
• fix(parser): skip the status lines nginx -T 2>&1 prints before a dump by @MegaManSec in #131
• fix: scan without a writable filesystem by @MegaManSec in #132
• fix(directives): read joined location modifiers like nginx by @MegaManSec in #133
• build: hash-lock the build tools and fix the release check's tag comparison by @MegaManSec in #134
• feat: add non_expanding_variable check by @MegaManSec in #135
• fix: parser, CLI and scanner follow-ups by @MegaManSec in #136
• fix: make every plugin docs example behave as described by @MegaManSec in #137
• Release 0.11.0 by @MegaManSec in #138

Full Changelog: v0.10.0...v0.11.0