Backlog/v12 master forwarder

[AlexSanchez-bit]

No description provided.

[github-actions]

🛑 AI review — Sensitive area, extra care recommended

This PR touches critical paths or introduces changes the model cannot judge with sufficient confidence. Review carefully before merging.

🛑 architecture (gemini-3-flash-lite) — high/critical — please review

Summary: Removes the NGINX ingest proxy route and updates collector guide port/path, altering public ingestion contracts.

• high installer/templates/front-end.go:31 — Removal of the NGINX /ingest proxy route and $utmstack_log_input variable breaks backwards compatibility for existing log shippers and clients hitting the root ingest endpoint without the new /v1/ prefix or port configuration.
• medium frontend/src/features/integrations/components/setup/collector/ForwarderGuide.tsx:79 — Updating curl commands to use explicit port 50052 and /v1/ingest path should be coordinated with the NGINX route removal to ensure collectors do not experience downtime during upgrade.

🛑 bugs (gemini-3-flash-lite) — high/critical — please review

Summary: Removed NGINX frontend location block for /ingest but updated client guides to use port 50052 directly.

• high installer/templates/front-end.go:34 — The NGINX location block for /ingest was completely removed, while ForwarderGuide.tsx was updated to send requests directly to port 50052 (https://${host}:${LOGINPUT_PORT}/v1/ingest). If this port is not exposed externally or properly routed past the NGINX reverse proxy, user curl commands and forwarder integrations will fail with connection errors.

✅ security (gemini-3-flash-lite) — clean

Summary: Routine dependency version bumps and frontend log-input route updates.

No findings.

🔴 go-deps — pending updates

🔍 Discovered 30 Go projects

📦 Dependencies with updates available:

  📁 ./plugins/rule-flood-guard:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.28

  📁 ./plugins/stats:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.28

  📁 ./plugins/feeds:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.28

  📁 ./plugins/alerts:
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.28

  📁 ./backend:
     - github.com/aws/aws-sdk-go-v2/config: v1.32.36 → v1.32.37
     - github.com/aws/aws-sdk-go-v2/credentials: v1.19.35 → v1.19.36
     - github.com/aws/aws-sdk-go-v2/service/sts: v1.45.5 → v1.45.6
     - github.com/threatwinds/go-sdk: v1.1.27-0.20260811073440-251cb9d842cd → v1.1.28

❌ Please update dependencies before merging.

[AlexSanchez-bit]

nginx path was removed and replaced by a dirct to service request to avoid bottlenecks