From 37645af6e7a06471286a513185a7fd3e1e9115eb Mon Sep 17 00:00:00 2001
From: genothomas <407598+genothomas@users.noreply.github.com>
Date: Mon, 26 Oct 2026 10:05:32 +0000
Subject: [PATCH] chore: update upstream versions

---
 build/versions.env | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/build/versions.env b/build/versions.env
index 9cbb4f6..665922e 100644
--- a/build/versions.env
+++ b/build/versions.env
@@ -1,7 +1,7 @@
 # Pinned versions. update-versions.sh proposes updates via PR.
 
 NGINX_STABLE_VERSION="1.30.6"
-NGINX_MAINLINE_VERSION="1.31.7"
+NGINX_MAINLINE_VERSION="1.31.8"
 
 # OpenSSL 3.5: LTS, native PQC/ML-KEM.
 OPENSSL_VERSION="3.5.9"
@@ -10,7 +10,7 @@ PCRE2_VERSION="10.49"
 LIBMODSECURITY_VERSION="3.0.17"
 MODSECURITY_NGINX_VERSION="1.0.4"
 GEOIP2_MODULE_VERSION="3.4"
-HEADERS_MORE_VERSION="0.40"
+HEADERS_MORE_VERSION="0.41"
 
 # OWASP CRS — LTS. Pinned independently from NGINX because CRS-only
 # security fixes (e.g. CVE-2026-21876) ship ahead of NGINX releases.
@@ -19,10 +19,10 @@ CRS_VERSION="4.25.2"
 # SHA256 pins for every distributed source. Build reproducibility contract —
 # `git log build/versions.env` is the single audit surface.
 NGINX_STABLE_SHA256="3cf46f5ed7504d460125866b7bea99fb357f31d887e2e63b35503310e9b8b6c8"
-NGINX_MAINLINE_SHA256="89ea8a3dc171511f7325043b50e4c036248d9fad5feb7ec809c0b82d5df42c65"
+NGINX_MAINLINE_SHA256="0652b760b3b772d2ec17b47c2fc15d9a95e6fe35cd5b877eadc1a62d9bc75af1"
 OPENSSL_SHA256="603f5602e2eef00d77fbd429d34dcd5822bb301757a1bc9cdb24c670f1eb859a"
 PCRE2_SHA256="929f0b20e62879252a15886b06c89f1edef61a363cbd5826fb041080a5e557ae"
-HEADERS_MORE_SHA256="c14cb5e6c998590c209efbf77bd7637ce2cab02332e4192756a8af5b26ba4284"
+HEADERS_MORE_SHA256="800eba641c29b89dfd00a97ccac314a2b7768bdd85ea37ed819452494a5633cd"
 GEOIP2_MODULE_SHA256="ad72fc23348d715a330994984531fab9b3606e160483236737f9a4a6957d9452"
 LIBMODSECURITY_SHA256="f283b33d5c21130fd3a15c84a93a1abe12bd1949edaf44288b12af571b671a50"
 MODSECURITY_NGINX_SHA256="6bdc7570911be884c1e43aaf85046137f9fde0cfa0dd4a55b853c81c45a13313"