Update ghcr.io/static-web-server/static-web-server Docker tag to v2.40.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/static-web-server/static-web-server	final	minor	2.37.0 -> 2.40.1

---

Release Notes

static-web-server/static-web-server (ghcr.io/static-web-server/static-web-server)

v2.40.1

Compare Source

This new v2.40.1 release brings important security bug fixes for users serving directories with symbilic links (symlinks) as well as other minor improvements.

We encourage users to update as soon as possible.
More details about the fixed security issue will be provided in the next hours.

Fixes

• 9b7297c Update dependencies like async-compression, log, libc and others. #​599 by [@​joseluisq][joseluisq]
• 308f0d2 Fix incorrect symbolic link handling by [@​joseluisq][joseluisq]

Refactorings

• ce3a51c CI: Dedicated workflow for project documentation checks. #​596 by @​mschoettle
• dd43d06 Misc: Markdown format check support for project documentation. #​597 by @​mschoettle

For more details see the v2.40.1 milestone and the full changelog v2.40.0...v2.40.1.

v2.40.0

Compare Source

This new v2.40.0 release brings important security bug fixes, performance, resource and binary size optimizations, rootless Debian and Alpine Docker images, content negotiation for Markdown files support and other enhancements.

For more details about the changes, take a look at the corresponding PR and documentation links.

Fixes

• 55562a1 Update dependencies like rustls, tracing, async-compression, clap, bytes and others. #​582, #​589 by [@​joseluisq][joseluisq]
• 0fedeb3 library: Crate documentation issues. #​583 by [@​joseluisq][joseluisq]

Features

• ee4b049 Add armv7-unknown-linux-gnueabihf target. #​586 by [@​joseluisq][joseluisq]
• 2c25d82 Content negotiation for Markdown files via Accept header. #​577 by @​davlgd, see docs
• 326abbe library: Add exit_on_error option to Server::run_server_on_rt function to control server termination. #​578 by @​frnsys

Refactorings

• c66c791 Docker: Prefer dynamically-linked binaries for Debian Docker images, which reduces container's memory usage significantly. #​588 by [@​joseluisq][joseluisq]
• 557363e Replace regex crate with regex-lite to reduce binary size. #​581 by [@​joseluisq][joseluisq]
• afddfd6 Drop jemalloc in favor of mimalloc for MUSL targets, which reduces statically-linked binary's memory usage. #​587 by [@​joseluisq][joseluisq]
• b234984 Docker: Rootless Debian and Alpine Docker images, which reduces the attack surface and improves security. #​567 by [@​joseluisq][joseluisq], see docs
• d48da4c Simplify public directory for Docker image and default error pages, which improves the default index and error pages' responsiveness in the browser. #​579 by [@​joseluisq][joseluisq]
• ce5b4fab Drop lazy_static and prefer fixed text mime types for dynamic compression. #​580 by [@​joseluisq][joseluisq]
• ea9f43f CI: Move perfcheck workflow behind a PR comment trigger. #​584 by [@​joseluisq][joseluisq]

For more details see the v2.40.0 milestone and the full changelog v2.39.0...v2.40.0.

v2.39.0

Compare Source

This new v2.39.0 release brings important security bug fixes and updates to project dependencies and Docker images as well as other improvements.

This releases fixes CVE-2025-62518 (a.k.a TARmageddon).

Additionally, the project Minimum Supported Rust Version (MSRV) has been bumped to Rust 1.85.0 (2024 Edition).

Fixes

• 57025e3 Update dependencies and MSRV to Rust 1.85.0 (2024 Edition). PR #​572 by @​joseluisq
• a7e8fa3 Update Alpine (3.21.5) & Debian (12.12) Docker images. PR #​573 by @​joseluisq
• 2549119 Virtual hosts feature doesn't work with HTTP/2. PR #​571 by @​CrazyCraftix

For more details see the v2.39.0 milestone and the full changelog v2.38.1...v2.39.0.

v2.38.1

Compare Source

This new v2.38.1 release brings several security and bug fixes and improvements for the Cache Control feature.

Fixes

• c5477fe Bugfix/security dependency updates including tokio, rustls, serde, toml, percent-encoding, tracing, regex and other crates. PR #​556, #​561 by @​joseluisq
• 2a09238 Update Alpine Docker images to 3.21.4. #​563 by @​joseluisq

Refactorings

• 0b55770 Remove public from Cache-Control header value when feature enabled. Which can prevent CDN and Basic Authentication cache issues. PR #​562 by @​joseluisq

For more details see the v2.38.1 milestone and the full changelog v2.38.0...v2.38.1.

v2.38.0

Compare Source

This new v2.38.0 release brings several security and bug fixes and support for a less-generic sws.toml default config file as well as other improvements.

Fixes

• 8c435ad Bugfix/security dependency updates including tokio, rustls, serde, toml, async-compression, clap and other crates. PR #​552 by @​joseluisq
• 47ce050 Update Alpine (3.20.7) & Debian (12.11) Docker images. PR #​553 by @​joseluisq

Features

• acd8388 Add a less-generic config file sws.toml support as default. PR #​551 by @​davlgd.
  • Migration: The previous default config.toml file name will be supported for a while, but it's recommended to use sws.toml instead.

For more details see the v2.38.0 milestone and the full changelog v2.37.0...v2.38.0.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.