Kong · bungle · Oct 26, 2023 · Oct 25, 2023
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -1,6 +1,9 @@
 name: Package & Release
 
 # The workflow to build and release official Kong packages and images.
+#
+# TODO:
+# Do not bump the version of actions/checkout to v4 before dropping rhel7 and amazonlinux2.
 
 on:  # yamllint disable-line rule:truthy
   pull_request:

diff --git a/.requirements b/.requirements
@@ -2,7 +2,7 @@ KONG_PACKAGE_NAME=kong
 
 OPENRESTY=1.21.4.1
 LUAROCKS=3.9.2
-OPENSSL=3.1.1
+OPENSSL=3.1.4
 PCRE=8.45
 
 LUA_KONG_NGINX_MODULE=4d19e8d19c6dbc07eba5cf6f5ebacad95266f928 # 0.6.0

diff --git a/build/openresty/openssl/openssl_repositories.bzl b/build/openresty/openssl/openssl_repositories.bzl
@@ -12,7 +12,7 @@ def openssl_repositories():
         http_archive,
         name = "openssl",
         build_file = "//build/openresty/openssl:BUILD.bazel",
-        sha256 = "b3aa61334233b852b63ddb048df181177c2c659eb9d4376008118f9c08d07674",
+        sha256 = "840af5366ab9b522bde525826be3ef0fb0af81c6a9ebd84caa600fea1731eee3",
         strip_prefix = "openssl-" + version,
         urls = [
             "https://www.openssl.org/source/openssl-" + version + ".tar.gz",

diff --git a/changelog/unreleased/kong/bump_openssl_3.1.4.yml b/changelog/unreleased/kong/bump_openssl_3.1.4.yml
@@ -0,0 +1,2 @@
+message: bump OpenSSL to 3.1.4
+type: dependency
diff --git a/scripts/explain_manifest/fixtures/amazonlinux-2-amd64.txt b/scripts/explain_manifest/fixtures/amazonlinux-2-amd64.txt
@@ -190,7 +190,7 @@
   - lua-resty-events
   - lua-resty-lmdb
   - ngx_wasm_module
-  OpenSSL   : OpenSSL 3.1.1 30 May 2023
+  OpenSSL   : OpenSSL 3.1.4 24 Oct 2023
   DWARF     : True
   DWARF - ngx_http_request_t related DWARF DIEs: True
 
diff --git a/scripts/explain_manifest/fixtures/amazonlinux-2023-amd64.txt b/scripts/explain_manifest/fixtures/amazonlinux-2023-amd64.txt
@@ -176,7 +176,7 @@
   - lua-resty-events
   - lua-resty-lmdb
   - ngx_wasm_module
-  OpenSSL   : OpenSSL 3.1.1 30 May 2023
+  OpenSSL   : OpenSSL 3.1.4 24 Oct 2023
   DWARF     : True
   DWARF - ngx_http_request_t related DWARF DIEs: True
 
diff --git a/scripts/explain_manifest/fixtures/amazonlinux-2023-arm64.txt b/scripts/explain_manifest/fixtures/amazonlinux-2023-arm64.txt
@@ -159,7 +159,7 @@
   - lua-resty-events
   - lua-resty-lmdb
   - ngx_wasm_module
-  OpenSSL   : OpenSSL 3.1.1 30 May 2023
+  OpenSSL   : OpenSSL 3.1.4 24 Oct 2023
   DWARF     : True
   DWARF - ngx_http_request_t related DWARF DIEs: True
 
diff --git a/scripts/explain_manifest/fixtures/debian-10-amd64.txt b/scripts/explain_manifest/fixtures/debian-10-amd64.txt
@@ -190,7 +190,7 @@
   - lua-resty-events
   - lua-resty-lmdb
   - ngx_wasm_module
-  OpenSSL   : OpenSSL 3.1.1 30 May 2023
+  OpenSSL   : OpenSSL 3.1.4 24 Oct 2023
   DWARF     : True
   DWARF - ngx_http_request_t related DWARF DIEs: True
 
diff --git a/scripts/explain_manifest/fixtures/debian-11-amd64.txt b/scripts/explain_manifest/fixtures/debian-11-amd64.txt
@@ -180,7 +180,7 @@
   - lua-resty-events
   - lua-resty-lmdb
   - ngx_wasm_module
-  OpenSSL   : OpenSSL 3.1.1 30 May 2023
+  OpenSSL   : OpenSSL 3.1.4 24 Oct 2023
   DWARF     : True
   DWARF - ngx_http_request_t related DWARF DIEs: True
 
diff --git a/scripts/explain_manifest/fixtures/el7-amd64.txt b/scripts/explain_manifest/fixtures/el7-amd64.txt
@@ -190,7 +190,7 @@
   - lua-resty-events
   - lua-resty-lmdb
   - ngx_wasm_module
-  OpenSSL   : OpenSSL 3.1.1 30 May 2023
+  OpenSSL   : OpenSSL 3.1.4 24 Oct 2023
   DWARF     : True
   DWARF - ngx_http_request_t related DWARF DIEs: True
 
diff --git a/scripts/explain_manifest/fixtures/el8-amd64.txt b/scripts/explain_manifest/fixtures/el8-amd64.txt
@@ -189,7 +189,7 @@
   - lua-resty-events
   - lua-resty-lmdb
   - ngx_wasm_module
-  OpenSSL   : OpenSSL 3.1.1 30 May 2023
+  OpenSSL   : OpenSSL 3.1.4 24 Oct 2023
   DWARF     : True
   DWARF - ngx_http_request_t related DWARF DIEs: True
 
diff --git a/scripts/explain_manifest/fixtures/el9-amd64.txt b/scripts/explain_manifest/fixtures/el9-amd64.txt
@@ -176,7 +176,7 @@
   - lua-resty-events
   - lua-resty-lmdb
   - ngx_wasm_module
-  OpenSSL   : OpenSSL 3.1.1 30 May 2023
+  OpenSSL   : OpenSSL 3.1.4 24 Oct 2023
   DWARF     : True
   DWARF - ngx_http_request_t related DWARF DIEs: True
 
diff --git a/scripts/explain_manifest/fixtures/el9-arm64.txt b/scripts/explain_manifest/fixtures/el9-arm64.txt
@@ -159,7 +159,7 @@
   - lua-resty-events
   - lua-resty-lmdb
   - ngx_wasm_module
-  OpenSSL   : OpenSSL 3.1.1 30 May 2023
+  OpenSSL   : OpenSSL 3.1.4 24 Oct 2023
   DWARF     : True
   DWARF - ngx_http_request_t related DWARF DIEs: True
 
diff --git a/scripts/explain_manifest/fixtures/ubuntu-20.04-amd64.txt b/scripts/explain_manifest/fixtures/ubuntu-20.04-amd64.txt
@@ -184,7 +184,7 @@
   - lua-resty-events
   - lua-resty-lmdb
   - ngx_wasm_module
-  OpenSSL   : OpenSSL 3.1.1 30 May 2023
+  OpenSSL   : OpenSSL 3.1.4 24 Oct 2023
   DWARF     : True
   DWARF - ngx_http_request_t related DWARF DIEs: True
 
diff --git a/scripts/explain_manifest/fixtures/ubuntu-22.04-amd64.txt b/scripts/explain_manifest/fixtures/ubuntu-22.04-amd64.txt
@@ -171,7 +171,7 @@
   - lua-resty-events
   - lua-resty-lmdb
   - ngx_wasm_module
-  OpenSSL   : OpenSSL 3.1.1 30 May 2023
+  OpenSSL   : OpenSSL 3.1.4 24 Oct 2023
   DWARF     : True
   DWARF - ngx_http_request_t related DWARF DIEs: True
 
diff --git a/scripts/explain_manifest/fixtures/ubuntu-22.04-arm64.txt b/scripts/explain_manifest/fixtures/ubuntu-22.04-arm64.txt
@@ -167,7 +167,7 @@
   - lua-resty-events
   - lua-resty-lmdb
   - ngx_wasm_module
-  OpenSSL   : OpenSSL 3.1.1 30 May 2023
+  OpenSSL   : OpenSSL 3.1.4 24 Oct 2023
   DWARF     : True
   DWARF - ngx_http_request_t related DWARF DIEs: True
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		message: bump OpenSSL to 3.1.4
		type: dependency