security(nginx): mainline=1.31.0, stable=1.30.1

This release addresses several security vulnerabilities:
- CVE-2026-42926: HTTP/2 request injection in ngx_http_proxy_module.
- CVE-2026-42945: Buffer overflow in ngx_http_rewrite_module.
- CVE-2026-42946: Buffer overread in ngx_http_scgi and ngx_http_uwsgi modules.
- CVE-2026-42934: Buffer overread in ngx_http_charset_module.
- CVE-2026-40460: Address spoofing vulnerability in HTTP/3.
- CVE-2026-40701: Use-after-free in OCSP requests to resolver.

Additionally, version 1.31.0 (mainline) introduces:
- Native support for HTTP forward proxy.

Links:
- https://nginx.org/en/security_advisories.html
- https://github.com/depthfirstdisclosures/nginx-rift
- https://x.com/Markak_/status/2054599711764750498
- https://nginx.org/

Author: denji

mainline/Dockerfile

@@ -1,6 +1,6 @@
 FROM alpine:latest
 
-ENV NGINX_VERSION=1.29.8
+ENV NGINX_VERSION=1.31.0
 ENV LIBRESSL_VERSION=4.2.1
 
 # -----------------------------------------------------------------------------

mainline/Dockerfile.loongarch64

@@ -1,6 +1,6 @@
 FROM --platform=linux/loong64 loongarch64/alpine:3.21
 
-ENV NGINX_VERSION=1.29.8
+ENV NGINX_VERSION=1.31.0
 ENV LIBRESSL_VERSION=4.2.1
 
 # -----------------------------------------------------------------------------

mainline/Dockerfile.mips64le

@@ -1,6 +1,6 @@
 FROM --platform=linux/mips64le alpine:3.14
 
-ENV NGINX_VERSION=1.29.8
+ENV NGINX_VERSION=1.31.0
 ENV LIBRESSL_VERSION=4.2.1
 
 # -----------------------------------------------------------------------------

stable/Dockerfile

@@ -1,6 +1,6 @@
 FROM alpine:latest
 
-ENV NGINX_VERSION=1.28.3
+ENV NGINX_VERSION=1.30.1
 ENV LIBRESSL_VERSION=4.2.1
 
 # -----------------------------------------------------------------------------

stable/Dockerfile.loongarch64

@@ -1,6 +1,6 @@
 FROM --platform=linux/loong64 loongarch64/alpine:3.21
 
-ENV NGINX_VERSION=1.28.3
+ENV NGINX_VERSION=1.30.1
 ENV LIBRESSL_VERSION=4.2.1
 
 # -----------------------------------------------------------------------------

stable/Dockerfile.mips64le

@@ -1,6 +1,6 @@
 FROM --platform=linux/mips64le alpine:3.14
 
-ENV NGINX_VERSION=1.28.3
+ENV NGINX_VERSION=1.30.1
 ENV LIBRESSL_VERSION=4.2.1
 
 # -----------------------------------------------------------------------------