chore(deps): update dependency nginx/nginx to v1.31.3

[renovate]

This PR contains the following updates:

Package	Update	Change
nginx/nginx	patch	1.31.2 → 1.31.3

---

Release Notes

nginx/nginx (nginx/nginx)

v1.31.3

Compare Source

nginx-1.31.3 mainline version has been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005), and use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434).

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Configure: set cache line size for loongarch64 by @​shankerwangmiao in #​1489
• HTTP/2: fix overlapping memcpy in CONTINUATION frames by @​wufengwind in #​1486
• Add missing bounds check in ngx_{http,stream}_compile_complex_value() by @​wufengwind in #​1484
• Revert "HTTP/2: fixed overlapping memcpy in CONTINUATION frames" by @​ac000 in #​1517
• GH: explicitly set permissions in workflows by @​ac000 in #​1451
• Charset: disabled charset_map with utf-8 in the first column by @​pluknet in #​1523
• Upstream: Upgrade header processing by @​vinaykumar-1591 in #​1476
• Fix setting the IPV6_DONTFRAG socket option by @​arut in #​1544
• Xslt: disable loading of external entities by default by @​VadimZhestikov in #​1549
• SSL: fixed memory leak in ngx_ssl_get_ech_outer_server_name(). by @​devnexen in #​1471
• Fixing HTTP/2 issues by @​hongzhidao in #​1441
• Perl fixes by @​pluknet in #​1556
• Configure: include crypt.h for crypt() feature tests by @​bavshin-f5 in #​1552
• HTTP/2: Reject requests with pseudo-headers after headers by @​nitin9977 in #​1541
• Stream and HTTP: rcvbuf and sndbuf directives for upstream sockets by @​patrikwl in #​1298
• Tunnel body improvements by @​arut in #​1560
• Nginx 1.31.3 security fixes by @​arut in #​1561
• nginx-1.31.3-RELEASE by @​pluknet in #​1562

New Contributors

• @​shankerwangmiao made their first contribution in #​1489
• @​wufengwind made their first contribution in #​1486
• @​vinaykumar-1591 made their first contribution in #​1476
• @​patrikwl made their first contribution in #​1298

Full Changelog: nginx/nginx@release-1.31.2...release-1.31.3

---

Configuration

📅 Schedule: (in timezone Europe/Zurich)

• Branch creation
  • "before 6am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.