🚀 OpenResty 1.31.1.1 is officially out!
This is a major feature release packed with powerful new capabilities, significant security improvements, and broad ecosystem upgrades. Here are the key highlights:
1️⃣ Nginx Core & OpenSSL Upgrade: Upgraded from Nginx 1.29.2 to 1.31.1 and OpenSSL from 3.5.5 to 3.5.6, delivering the latest performance improvements, protocol support, and security hardening at the foundation level.
2️⃣ lua-nginx-module v0.10.31: A landmark update introducing the new `precontent_by_lua` and `proxy_ssl_verify_by_lua*` directives, APIs for retrieving server random and master secrets, `tcpsock:getsslsession`, custom trusted CA store support for cosocket TLS handshakes, and new TCP socket options `keepintvl`/`keepcnt`. Several critical crash fixes around QUIC connection teardown, worker shutdown, and SSL session caching are also included.
3️⃣ stream-lua-nginx-module v0.0.19, lua-resty-core v0.1.34rc2 & LuaJIT v2.1-20260415: New `proxy_ssl_certificate_by_lua` directive, `serversslhandshake` on downstream sockets, `tcpsock:settrustedstore()` for per-handshake trusted CA configuration, and a suite of new SSL FFI APIs. LuaJIT introduces `ffi.abi("dualnum")` with numerous fixes for ARM64, s390x, FFI, and the JIT compiler, significantly boosting cross-platform stability and runtime performance.
4️⃣ Ecosystem Component Upgrades: `lua-resty-mysql` adds ed25519 authentication support, `lua-resty-string` gains AES-256-CTR bindings, `lua-cjson` adds comment decoding and indented encoding options, `xss-nginx-module` gains dynamic module build support, and more — continuing to strengthen the OpenResty ecosystem.
We strongly recommend all users upgrade to take advantage of the latest features, security improvements, and bug fixes.