From dafaf08134a61e66cbc79e25d4ccb87b19d6dd5b Mon Sep 17 00:00:00 2001
From: Wikid82 <176516789+Wikid82@users.noreply.github.com>
Date: Mon, 9 Nov 2026 09:13:43 +0000
Subject: [PATCH 1/3] chore(docker): refresh bundled proxy toolchain image

Rebuilds the prebuilt Caddy/CrowdSec toolchain image so the shipped
binaries pick up upstream fixes, and bumps the digest pin in the
Dockerfile.
---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 28a17614a..021e9bc58 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -20,7 +20,7 @@ ARG CHARON_TOOLCHAIN_IMAGE=ghcr.io/wikid82/charon-toolchain
 # toolchain-image.yml bot owns these two lines. DIGEST is the arch-independent
 # manifest-list (OCI index) digest, so one pin covers linux/amd64 + linux/arm64.
 ARG CHARON_TOOLCHAIN_TAG=caddy-crowdsec-a4f3ac6092c1f0d8
-ARG CHARON_TOOLCHAIN_DIGEST=sha256:becd935ffe118b4b8f3b870e30e0ec61fe80f342497c2f423da652fe57c66f7d
+ARG CHARON_TOOLCHAIN_DIGEST=sha256:2b7b20a825eefa8073681f4278d46ca10c60b88d130e52e91a53d9bb861aac81
 
 # Stage selector — default consumes the prebuilt toolchain image (no compile).
 # Fork PRs / bootstrap / offline builds pass

From 924055842dda03b5aed1959dd8cedd5ec2264043 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 9 Nov 2026 12:05:01 +0000
Subject: [PATCH 2/3] chore(main): release 0.47.0

---
 .release-please-manifest.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 7d5e2a762..3bafaeb43 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.46.5"
+  ".": "0.47.0"
 }

From 1a4c96abbb1ee0f72eb351b5a1c53a30f9241c01 Mon Sep 17 00:00:00 2001
From: Wikid82 <jhatfield82@gmail.com>
Date: Mon, 9 Nov 2026 07:23:45 -0500
Subject: [PATCH 3/3] chore(deps): stop re-enabling major updates for indirect
 Go deps in renovate config

---
 renovate.json | 9 +--------
 1 file changed, 1 insertion(+), 8 deletions(-)

diff --git a/renovate.json b/renovate.json
index 8861bc1a8..4e188ef25 100644
--- a/renovate.json
+++ b/renovate.json
@@ -949,14 +949,7 @@
       "matchManagers": [
         "gomod"
       ],
-      "matchDepTypes"
-      : [
-        "indirect"
-      ],
-        "enabled": true
-    },  
-      {
-        "matchFileNames": [
+      "matchFileNames": [
         "plugins/powerdns/go.mod"
       ],
       "matchPackageNames": [