Cowboy 2.21, Cowlib 2.22, Gun 2.8, Ranch 2.4

2026 09 Nov

Cowboy 2.21.0, Cowlib 2.22.0, Gun 2.8.0 and Ranch 2.4.0 have been released.

They are maintenance releases containing security and bug fixes, so all users are encouraged to upgrade. Cowboy and Gun update Cowlib to 2.22 and must be upgraded along with it.

Cowboy and Gun now default the HTTP/2 option max_header_list_size to 32768. cowboy_static no longer reads code archives.

Ranch adds a trusted_proxies transport option that limits which peers may send a PROXY protocol header.

These releases only support Erlang/OTP 27 and above.

A detailed list of changes can be found in the Cowboy migration guide, the Gun migration guide and the Ranch migration guide.

You can donate to these projects via GitHub Sponsors.

As usual, feedback is appreciated, and issues or questions should be sent via Github tickets or discussions. We also have a Discord server. Join Erlang OSS Discord now!