Caddy v2.11.4 is now available, featuring some security patches and a few other enhancements. Thanks to all who contributed! github.com/caddyserver/ca…

Welcome @redirhub as a sponsor! Thank you for using Caddy and being a leader by supporting your dependencies. redirhub.com

Thank you, Syntax, Sentry, and The Pledge for being leaders in our industry!

🚀 I just merged github.com/darkweak/souin… that supports most of the cache-tests suite from @mnot. Far ahead from @varnishsoftware @varnishcache. Give it a try; I'll have time to contribute more often on github.com/darkweak/souin. It will be profitable for @caddyserver too!

Less than 3 weeks to go before @golab_conf 2026 🥳

Super thrilled to make it to Italy again, this time for a workshop about observing and monitoring a #Golang app behind @caddyserver (without the pain!). See you there 🇮🇹

👉 golab.io/talks/make-you…

🔒 @caddyserver v2.11.6 is out, and we're proud to have contributed to this release. What to expect:

- Security fixes
- Slowloris protection enabled by default
- New url_pattern matcher
- More reliable HTTP/3 on low-MTU networks

The full changelog ⬇️ github.com/caddyserver/ca…

Talks by @dunglas, @s0yuka, and @MarionHerisson given at the #APIPlatformCon 2026 are now available on YouTube: youtube.com/playlist?list=…

🐘 FrankenPHP 1.13 is out, and it's a big one.

@caddyserver 2.11.7 inside:
- Slowloris protection with idle read/write timeouts
- url_pattern matcher, using the URLPattern web standard
- Incremental header (RFC 10036) for streaming responses
- SSE behind encode now streams immediately

@MercureRealTime 1.0, the stable real-time protocol, built in. Also, mercure_publish() now validates updates and throws on bad input.

Config reloads are now validated before replacing the running one: no more 500s after a broken reload.

5 security vulnerabilities fixed, 2 rated high. Upgrade now, and read the upgrade notes first.

github.com/php/frankenphp…

@Jaidcel @caddyserver caddy/caddy is our CI test target, it is NOT updated ever, do not use it. The caddy one is the Docker Official Image.

Caddy 2.11.6 is out now, with lots of patches and minor enhancements to make your server serve better! Lots more to come as well. Thank you, sponsors and maintainers! github.com/caddyserver/ca…

We're troubleshooting a signing key issue (not a security compromise) with some of our Linux packages for a new patch release. Will update when we have more info. github.com/caddyserver/ca…

Linux packages are reported to be working again. (Just had to perform the same troubleshooting steps this morning, guess it doesn't work at nighttime.)

Soon we'll be herding AI slop like cattle to filter in only the good stuff, while keeping up with the steep increase of contributions.

i.e. meeting AI with AI, with humans at the helm.

Thanks for your patience while we adapt our usual maintenance workflow to accommodate the influx of AI contributions. And always, thank you to our human maintainers who help with the project, and sponsors who make it possible!

@caddyserver caddy-security app users meet github.com/greenpau/caddy…

Brought to you with love and care!

This was the #APIPlatformCon 2026. Thank you, everyone!

CaddyUI (a third-party project) has removed its commercial clause from its license and is now fully Apache licensed. Very cool to see this part of the ecosystem open up more! github.com/X4Applegate/ca…

I deeply appreciate @ZidEngineers partnership in helping investigate the issue and validate the fix. Souin and @caddyserver are better thanks to their constant feedback and support.

Tagged Souin v1.7.9 after 1 year, @caddyserver’s cache-handler tagged soon too. Big thanks to all contributors especially to @MohammedSahaf for the big performance PR ! It consumes 90% less RAM and reduced the redis cache size. Also 1k ⭐️ ! 😍
github.com/darkweak/souin

@caddyserver caddy-security users! Lots of good changes are landing soon!

1. caddy-authenticator tool to automate logging in and getting a token.
2. caddy-security as OIDC provider

github.com/greenpau/caddy…

#jwt #webapp #appsec

.@mholt6 there's a guy on stage at the london ruby usergroup right now, calling @caddyserver the best piece of software he's ever used