Dockerfile: v1.29.4 + clone from the git repository (#178)

Changes with nginx 1.29.4                                        09 Dec 2025

    *) Feature: the ngx_http_proxy_module supports HTTP/2.

    *) Feature: Encrypted ClientHello TLS extension support when using
       OpenSSL ECH feature branch; the "ssl_ech_file" directive.
       Thanks to Stephen Farrell.

    *) Change: validation of host and port in the request line, "Host"
       header field, and ":authority" pseudo-header field has been changed
       to follow RFC 3986.

    *) Change: now a single LF used as a line terminator in a chunked
       request or response body is considered an error.

    *) Bugfix: when using HTTP/3 with OpenSSL 3.5.1 or newer a segmentation
       fault might occur in a worker process; the bug had appeared in
       1.29.1.
       Thanks to Jan Svojanovsky.

    *) Bugfix: a segmentation fault might occur in a worker process if the
       "try_files" directive and "proxy_pass" with a URI were used.

Author: macbre

Dockerfile

@@ -1,8 +1,8 @@
-# https://hg.nginx.org/nginx/file/tip/src/core/nginx.h
-ARG NGINX_VERSION=1.29.3
+# https://github.com/nginx/nginx/blob/master/src/core/nginx.h
+ARG NGINX_VERSION=1.29.4
 
-# https://hg.nginx.org/nginx/
-ARG NGINX_COMMIT=279676b97237
+# https://github.com/nginx/nginx/releases
+ARG NGINX_COMMIT=c704574
 
 # https://github.com/google/ngx_brotli
 ARG NGX_BROTLI_COMMIT=a71f9312c2deb28875acc7bacfdd5695a111aa53
@@ -108,7 +108,6 @@ RUN \
 		libxslt-dev \
 		linux-headers \
 		make \
-		mercurial \
 		musl-dev \
 		ninja \
 		openssl-dev \
@@ -139,8 +138,10 @@ RUN \
 WORKDIR /usr/src/
 
 RUN \
-	echo "Cloning nginx $NGINX_VERSION (rev $NGINX_COMMIT from 'default' branch) ..." \
-	&& hg clone -b default --rev $NGINX_COMMIT https://hg.nginx.org/nginx/ /usr/src/nginx-$NGINX_VERSION
+	echo "Cloning nginx $NGINX_VERSION (rev $NGINX_COMMIT) ..." \
+	&& git clone https://github.com/nginx/nginx.git /usr/src/nginx-$NGINX_VERSION \
+	&& cd /usr/src/nginx-$NGINX_VERSION \
+	&& git reset --hard $NGINX_COMMIT
 
 RUN \
 	echo "Cloning brotli $NGX_BROTLI_COMMIT ..." \

readme.md

@@ -27,12 +27,12 @@ docker pull ghcr.io/macbre/nginx-http3:latest
 
 ```
 $ docker run -it macbre/nginx-http3 nginx -V
-nginx version: nginx/1.29.3 (279676b97237)
+nginx version: nginx/1.29.4 (c704574)
 built by gcc 13.2.1 20240309 (Alpine 13.2.1_git20240309) 
 built with OpenSSL 3.3.5 30 Sep 2025
 TLS SNI support enabled
 configure arguments: 
-	--build=279676b97237 
+	--build=c704574 
 	--prefix=/etc/nginx 
 	--sbin-path=/usr/sbin/nginx 
 	--modules-path=/usr/lib/nginx/modules