v1.28.2: Wuk Lamat Echo 2

[Xe]

This is mostly for the eMudhra debacle (CVE-2026-111943).

Features

• Add Catalan (ca) localization.
• Allow Renovate in git clients for github/gitlab api endpoint.

Fixed

• Add utils/cmd/botgenerate for automatically updating crawler IP ranges. Also apply the updates.
• Do not reject with 400 Bad Request a request whose Content-Type is multipart/form-data but whose body is empty, including when the content length is unknown (-1, for example a chunked request). Reverse proxies that strip the body for auth subrequests (for example nginx' auth_request) still forward the original Content-Type, which made prepareChallengeForm fail and answer with a spurious 400.
• Reject requests with no User-Agent header or an empty User-Agent header via (data)/bots/spec-violations.yaml.
• Accept GeoIP2 ISP databases for ASN lookups and GeoLite2 City databases for country lookups.
• Fix concurrent WASM challenge validation failures by instantiating transient modules anonymously, allowing the existing four-slot verifier concurrency limit to work as intended.

New Contributors

• @yaoge123 made their first contribution in fix(challenge): don't return 400 for an empty multipart challenge-form body #2026
• @codeandsolder made their first contribution in fix(wasm): allow concurrent validation instances #2021
• @AltintasMehmet made their first contribution in fix(geoip): accept additional MaxMind database editions #2019
• @Ereza made their first contribution in feat(localization): add Catalan locale support #2058

Full Changelog: v1.28.1...v1.28.2

---

This discussion was created from the release v1.28.2: Wuk Lamat Echo 2.

[sgothel]

Thank you and team for this great bot/human filter!
It saved my JogAmp server accessibility, placing Anubis in between HAProxy and Apache2.
A while ago I saw your post during the LightPanda incident (link also contains my setup).

All works high performant, if I use memory and not bbolt storage.
The latter sadly caused high memory consumption driving towards GB size of same bbolt file.
I gladly saw some closed issues here and the patch thereafter, so I took this as a hint to use memory
and voila, it works speedy w/o a freeze!

Great - thank you and team again!

[AltintasMehmet]

First of all thank you very much @Xe !!!
We saw great improvement on our side, and will try to contribute where we can.

I did have one question.
Anubis is growing steadily and I was wondering if you ever were planning on expanding the maintainers on Anubis?