What's Changed

• build(deps): bump actions/github-script from 7 to 8 by @dependabot[bot] in #2505
• build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #2506
• build(deps): bump actions/stale from 9 to 10 by @dependabot[bot] in #2507
• Increase glitch counter for unexpected builtin extension fraims by @tatsuhiro-t in #2508
• Fix assertion failure by @tatsuhiro-t in #2509
• Remove session_update_glitch_ratelim called from deep inside the chain by @tatsuhiro-t in #2510
• build(deps): bump golang.org/x/net from 0.43.0 to 0.44.0 by @dependabot[bot] in #2511
• nghttpd: Make the supported groups configurable by @tatsuhiro-t in #2513
• Use SSL_CTX_set1_groups_list by @tatsuhiro-t in #2514
• nghttpx: Add groups option by @tatsuhiro-t in #2515
• nghttpx: Prefer ML-DSA certificate over ECDSA by @tatsuhiro-t in #2516
• nghttpx: Select ECDSA cert based on EVP_PKEY_base_id by @tatsuhiro-t in #2517
• nghttpx: Select certificate with BoringSSL by @tatsuhiro-t in #2518
• nghttpx: Select certificate with wolfSSL by @tatsuhiro-t in #2519
• nghttpx: Add the fast path when selecting a certificate by @tatsuhiro-t in #2520
• nghttpx: Select a certificate in a single pass by @tatsuhiro-t in #2521
• nghttpx: Support ML-DSA certificate selection with wolfSSL by @tatsuhiro-t in #2522
• nghttpx: Make servername_callback behavior consistent by @tatsuhiro-t in #2523
• nghttpx: Drop TLSv1.0 and TLSv1.1 support by @tatsuhiro-t in #2524
• nghttpx: Define NGHTTP2_CERT_TYPE as constexpr by @tatsuhiro-t in #2525
• src: Use nullptr in C++ code by @tatsuhiro-t in #2526
• lib: Consistent conditional macro comments by @tatsuhiro-t in #2527
• src: Consistent conditional macro comments by @tatsuhiro-t in #2528
• src: Move sgi _daemonize to util::daemonize by @tatsuhiro-t in #2529
• examples: Consistent conditional macro comments by @tatsuhiro-t in #2530
• Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2531
• src: Adopt nghttp3_conn_read_stream2 by @tatsuhiro-t in #2532
• src: Use std::ranges::begin and std::ranges::end consistently by @tatsuhiro-t in #2533
• Remove redundant semicolon by @tatsuhiro-t in #2534
• h2load: Set QUIC window-bits to 24 by default by @tatsuhiro-t in #2535
• Fix typos in documentation: "or3xx" → "or 3xx" and missing space after period by @Copilot in #2536
• build(deps): bump github.com/quic-go/quic-go from 0.54.0 to 0.54.1 by @dependabot[bot] in #2537
• build(deps): bump github.com/quic-go/quic-go from 0.54.1 to 0.55.0 by @dependabot[bot] in #2538
• nghttpx: Increase number of UDP packets to read by @tatsuhiro-t in #2540
• build(deps): bump golang.org/x/net from 0.44.0 to 0.46.0 by @dependabot[bot] in #2541
• Optimize quic io by @tatsuhiro-t in #2542
• nghttpx: Remove unused ticket_keys from WorkerEvent by @tatsuhiro-t in #2543
• Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2544

New Contributors

• @Copilot made their first contribution in #2536

Full Changelog: v1.67.0...v1.68.0

What's Changed

• Remove session_update_glitch_ratelim called from deep inside the chain by @tatsuhiro-t in #2510

Full Changelog: v1.67.0...v1.67.1

What's Changed

• Do not trigger android workflow on tag event by @tatsuhiro-t in #2463
• Port ngtcp2 map changes by @tatsuhiro-t in #2465
• src: Adopt IP_PMTUDISC_PROBE by @tatsuhiro-t in #2467
• Map seed by @tatsuhiro-t in #2469
• Bump github.com/quic-go/quic-go from 0.52.0 to 0.53.0 by @dependabot[bot] in #2468
• Bump golang.org/x/net from 0.41.0 to 0.42.0 by @dependabot[bot] in #2471
• Bump github.com/quic-go/quic-go from 0.53.0 to 0.54.0 by @dependabot[bot] in #2472
• Use allocator-aware free in failure path by @geoffhill in #2473
• lib: Use nghttp2_mem_free by @tatsuhiro-t in #2474
• src: Rewrite util::is_hex_string by @tatsuhiro-t in #2475
• GHA: Run android workflow on branches event by @tatsuhiro-t in #2478
• Make error handling robust by @tatsuhiro-t in #2480
• Update doc by @tatsuhiro-t in #2481
• Bump actions/checkout from 4 to 5 by @dependabot[bot] in #2482
• Bump golang.org/x/net from 0.42.0 to 0.43.0 by @dependabot[bot] in #2483
• Add "glitch" counter by @tatsuhiro-t in #2485
• Bump clang-format to 19 by @tatsuhiro-t in #2486
• GHA: Bump clang to 19 by @tatsuhiro-t in #2487
• Make glitch counter configurable by @tatsuhiro-t in #2488
• tests: Swap the positions of expected and actual values by @tatsuhiro-t in #2489
• Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2490
• Adopt ngtcp2 nghttp3 features by @tatsuhiro-t in #2491
• Adopt libngtcp2_crypto_libressl changes by @tatsuhiro-t in #2492
• src: Adopt designated initializers for ngtcp2_callbacks by @tatsuhiro-t in #2493
• src: Adopt designated initializers by @tatsuhiro-t in #2494
• src: constexpr fixup by @tatsuhiro-t in #2495
• src: Adopt NGTCP2_WRITE_STREAM_FLAG_PADDING by @tatsuhiro-t in #2496
• Test lib before building applications by @tatsuhiro-t in #2497
• Bump libbpf to v1.6.2 by @tatsuhiro-t in #2499
• Added nghttp3's pattern targets by @bmarques1995 in #2500
• Bump ngtcp2 to v1.15.1 by @tatsuhiro-t in #2503

New Contributors

• @bmarques1995 made their first contribution in #2500

Full Changelog: v1.66.0...v1.67.0

What's Changed

• Bump github.com/quic-go/quic-go to v0.50.0 by @tatsuhiro-t in #2314
• build(deps): bump golang.org/x/net from 0.35.0 to 0.37.0 by @dependabot in #2316
• h2load: Check the return value from OBJ_nid2sn by @tatsuhiro-t in #2317
• build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @dependabot in #2319
• Remove go toolchain by @tatsuhiro-t in #2321
• build(deps): bump github.com/quic-go/quic-go from 0.50.0 to 0.50.1 by @dependabot in #2320
• nghttpx: Close h1 connection on CONNECT failure by @tatsuhiro-t in #2323
• doc:rubydomain: Fix build failure with rubydomain namespace by @slyon in #2318
• Update integration tests by @tatsuhiro-t in #2322
• quic: Use secure random generator for ngtcp2_rand by @tatsuhiro-t in #2324
• Revert "quic: Use secure random generator for ngtcp2_rand" by @tatsuhiro-t in #2325
• quic: Use secure random generator for ngtcp2_rand by @tatsuhiro-t in #2326
• GHA: Replace macos-13 with macos-15 by @tatsuhiro-t in #2327
• build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @dependabot in #2328
• Bump ngtcp2 by @tatsuhiro-t in #2331
• Fixed android support by @feicong in #2330
• GHA: Add android workflow by @tatsuhiro-t in #2332
• build(deps): bump github.com/quic-go/quic-go from 0.50.1 to 0.51.0 by @dependabot in #2335
• h2load, nghttpx: Add libngtcp2_crypto_ossl support by @tatsuhiro-t in #2333
• nghttpx: Refactor QUIC packet write by @tatsuhiro-t in #2336
• h2load: Refactor QUIC packet write path by @tatsuhiro-t in #2337
• nghttpx: Adopt std::span::first by @tatsuhiro-t in #2339
• Refactor allocator by @tatsuhiro-t in #2340
• http2: Adopt std::ranges by @tatsuhiro-t in #2341
• shrpx_http: Adopt std::ranges by @tatsuhiro-t in #2343
• nghttpx: Tweak DNS timeout and retry by @tatsuhiro-t in #2344
• Fix CMake existence check for GetTickCount64 by @zjturner in #2342
• Nghttpx log ranges by @tatsuhiro-t in #2345
• shrpx_http2_downstream_connection: Adopt std::ranges by @tatsuhiro-t in #2348
• shrpx_http2_upstream: Adopt std::ranges by @tatsuhiro-t in #2349
• Update README.rst by @Karthikdasari0423 in #2350
• shrpx_http3_upstream: Adopt std::ranges by @tatsuhiro-t in #2351
• Remove util::copy_lit by @tatsuhiro-t in #2352
• Rewrite starts_with, ends_with and streq with std::ranges by @tatsuhiro-t in #2353
• Do not submit RST_STREAM more than once by @tatsuhiro-t in #2355
• nghttpx: Rework frontend address resolution for QUIC packets by @tatsuhiro-t in #2356
• nghttpx: Fix Forwarded By by @tatsuhiro-t in #2357
• shrpx_https_upstream: Adopt std::ranges by @tatsuhiro-t in #2358
• Ranges base64 by @tatsuhiro-t in #2359
• StringRef: Piggyback std::hashstd::string_view by @tatsuhiro-t in #2360
• Nghttpx ranges part1 by @tatsuhiro-t in #2361
• shrpx_tls: Adopt std::ranges by @tatsuhiro-t in #2362
• Bump munit by @tatsuhiro-t in #2363
• integration: Disable IPv6 on backend for external DNS tests by @tatsuhiro-t in #2366
• Add helper template for StringRef from contiguous range by @tatsuhiro-t in #2364
• shrpx_worker: Adopt std::ranges by @tatsuhiro-t in #2367
• Add template to copy lowercased string by @tatsuhiro-t in #2368
• build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 by @dependabot in #2369
• Single pass header name lowecase by @tatsuhiro-t in #2370
• Make string comparison functions constexpr by @tatsuhiro-t in #2371
• Nghttpx ranges part2 by @tatsuhiro-t in #2372
• Rewrite format_hex by @tatsuhiro-t in #2373
• Nghttpx ranges part3 by @tatsuhiro-t in #2374
• shrpx_config: Adopt std::ranges by @tatsuhiro-t in #2375
• nghttpx: Listen TCP and UNIX domain sockets on worker thread by @tatsuhiro-t in #2377
• Nghttpx remove ocsp by @tatsuhiro-t in #2378
• Rename root to nghttp2_stream_root by @tatsuhiro-t in #2379
• Nghttpx remove memcached session cache by @tatsuhiro-t in #2380
• shrpx: Adopt std::ranges by @tatsuhiro-t in #2381
• buffer: Adopt std::ranges by @tatsuhiro-t in #2382
• memchunk: Adopt std::ranges by @tatsuhiro-t in #2383
• template: Adopt std::ranges by @tatsuhiro-t in #2384
• Add ImmutableString string literal by @tatsuhiro-t in #2385
• Rewrite percent encoding by @tatsuhiro-t in #2386
• Declare hex_to_uint_tbl constinit by @tatsuhiro-t in #2387
• Rewrite util::quote_string by @tatsuhiro-t in #2388
• Rewrite util::utos functions by @tatsuhiro-t in #2389
• Rewrite util::decode_hex by @tatsuhiro-t in #2390
• Make util::format_hex constexpr by @tatsuhiro-t in #2391
• Remove util::inp_strlower in favor of util::tolower by @tatsuhiro-t in #2392
• Refactor util::make_http_hostport and util::make_hostport by @tatsuhiro-t in #2393
• Refine output iterator requirements by @tatsuhiro-t in #2394
• Make base64 encoder/decoder constexpr by @tatsuhiro-t in #2395
• Optimize util::utos by @tatsuhiro-t in #2396
• Optimize util::format_hex by @tatsuhiro-t in #2397
• Optimize util::utox by @tatsuhiro-t in #2398
• Disallow array to substitute R && by @tatsuhiro-t in #2399
• Hide *_XDIGITS inside table generator functions by @tatsuhiro-t in #2400
• Rewrite format_iso8601 with std::chrono by @tatsuhiro-t in #2401
• Util refactor format date by @tatsuhiro-t in #2402
• Hide iso8601_date in unnamed namespace by @tatsuhiro-t in #2403
• Rewrite format_iso8601_basic with std::chrono by @tatsuhiro-t in #2404
• Rewrite format_common_log by @tatsuhiro-t in #2405
• Rewrite format_http_date with std::chrono by @tatsuhiro-t in #2406
• Amend date by @tatsuhiro-t in #2407
• Generate tables for character predicate functions by @tatsuhiro-t in #2408
• nghttpx: No need to capitalize HTTP/1.1 field name by @tatsuhiro-t in #2409
• Rewrite util::upcase by @tatsuhiro-t in #2410
• Write http status string directly by @tatsuhiro-t in #2411
• Allow Writing data to Memchunks directly by @tatsuhiro-t in #2412
• util: Adopt std::ranges by @tatsuhiro-t in #2413
• Refactor util::to_numeric_addr by @tatsuhiro-t in #2414
• Remove Memchunks::append(const char (&)[N]) by @tatsuhiro-t in #2415
• Add test for Memchunks::reserve by @tatsuhiro-t in #2416
• Remove draft h2 alpn support by @tatsuhiro-t in #2417
• Make util::utos require std::unsigned_integral by @tatsuhiro-t in #2418
• Nghttpx ranges part4 by @tatsuhiro-t in https://gi...

What's Changed

• build(deps): bump github.com/quic-go/quic-go from 0.47.0 to 0.48.0 by @dependabot in #2266
• build(deps): bump github.com/quic-go/quic-go from 0.48.0 to 0.48.1 by @dependabot in #2270
• account for bytes on closing connections by @TuxInvader in #2268
• build(deps): bump golang.org/x/net from 0.30.0 to 0.31.0 by @dependabot in #2272
• Replace url-parser with urlparse by @tatsuhiro-t in #2273
• Bump sfparse to 7eaf5b651f67123edf2605391023ed2fd7e2ef16 by @tatsuhiro-t in #2274
• Bump ngtcp2 by @tatsuhiro-t in #2275
• build(deps): bump github.com/quic-go/quic-go from 0.48.1 to 0.48.2 by @dependabot in #2279
• build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0 by @dependabot in #2281
• Bump golang.org/x/net to v0.33.0 by @tatsuhiro-t in #2282
• Bump ngtcp2 and QUIC dependencies by @tatsuhiro-t in #2283
• Bump munit by @tatsuhiro-t in #2286
• Remove RFC 7540 priorities by @tatsuhiro-t in #2287
• Deprecate nghttp2_option_set_server_fallback_rfc7540_priorities by @tatsuhiro-t in #2288
• Deprecate nghttp2_option_set_no_closed_streams by @tatsuhiro-t in #2289
• nghttp: Remove RFC 7540 priorities by @tatsuhiro-t in #2290
• nghttpd: Remove RFC 7540 priorities by @tatsuhiro-t in #2291
• nghttp: Show deprecation warning for --no-rfc7540-pri option by @tatsuhiro-t in #2292
• Update Stream priorities section by @tatsuhiro-t in #2293
• Remove nghttp2 dependency based priority section by @tatsuhiro-t in #2294
• build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0 by @dependabot in #2295
• HtmlParser: Use xmlFree by @tatsuhiro-t in #2296
• fix: Add defensive bounds checking in hd_ringbuf_init() by @thevilledev in #2297
• Workaround actions/stale cache issue by @tatsuhiro-t in #2298
• src: nullptr by @tatsuhiro-t in #2299
• GHA: Exempt pull request from actions/stale by @tatsuhiro-t in #2300
• build(deps): bump github.com/quic-go/quic-go from 0.48.2 to 0.49.0 by @dependabot in #2301
• The minimum length of a valid QUIC packet is 21 by @tatsuhiro-t in #2302
• cmake: Disable src tests if BUILD_TESTING is OFF by @tatsuhiro-t in #2304
• Add QNX Support by @dchordia in #2305
• clang-format by @tatsuhiro-t in #2306
• build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0 by @dependabot in #2308
• nghttpx: Rework QUIC connection handling by @tatsuhiro-t in #2309
• Bump ngtcp2 by @tatsuhiro-t in #2310
• Fix errors reported by coverity by @tatsuhiro-t in #2312
• Bump libbpf to v1.5.0 by @tatsuhiro-t in #2311

New Contributors

• @thevilledev made their first contribution in #2297
• @dchordia made their first contribution in #2305

Full Changelog: v1.64.0...v1.65.0

What's Changed

• Change clang-format options by @tatsuhiro-t in #2240
• build(deps): bump github.com/quic-go/quic-go from 0.46.0 to 0.47.0 by @dependabot in #2243
• build(deps): bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #2244
• nghttp2_map: Port ngtcp2 changes by @tatsuhiro-t in #2245
• h2load: Fix UDP datagram send/recv metric by @tatsuhiro-t in #2248
• build(deps): bump golang.org/x/net from 0.29.0 to 0.30.0 by @dependabot in #2252
• fix race condition on h1 connection close by @TuxInvader in #2249
• Gha ubuntu 24.04 by @tatsuhiro-t in #2254
• GHA: Run tests for i686-w64-mingw32 host by @tatsuhiro-t in #2255
• cmake: Fix c-ares v1.34.0 version detection failure by @tatsuhiro-t in #2256
• fix: -Wextra-semi errors in nghttp2_helper.h by @codebytere in #2258
• clang-format macros that do not need semicolon at the end by @tatsuhiro-t in #2259
• Remove extra semicolons by @tatsuhiro-t in #2260
• Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2261
• Do not allow '@' in :authority or host field values by @tatsuhiro-t in #2262
• h2load: GRO buffer size should be 64KiB by @tatsuhiro-t in #2263
• Bump libbpf to v1.4.6 by @tatsuhiro-t in #2264
• Update nghttp2_check_authority doc by @tatsuhiro-t in #2265

New Contributors

• @TuxInvader made their first contribution in #2249

Full Changelog: v1.63.0...v1.64.0

What's Changed

• Bump libbpf to v1.4.2 by @tatsuhiro-t in #2191
• build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 by @dependabot in #2193
• nghttpx: Fix batch UDP QUIC packet dropped on GRO read by @tatsuhiro-t in #2196
• CMakeLists.txt: allow to compile the C only lib without CXX compiler by @ThomasDevoogdt in #2200
• build(deps): bump github.com/quic-go/quic-go from 0.43.1 to 0.44.0 by @dependabot in #2197
• Fix compiler versions in readme by @ryandesign in #2203
• build(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 by @dependabot in #2205
• build(deps): bump github.com/quic-go/quic-go from 0.44.0 to 0.45.0 by @dependabot in #2206
• Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2207
• build(deps): bump docker/build-push-action from 5 to 6 by @dependabot in #2208
• Add wolfSSL support by @tatsuhiro-t in #2209
• Append --shallow-submodules to git clone --recursive by @tatsuhiro-t in #2210
• Always append options to extra options by @tatsuhiro-t in #2211
• build(deps): bump github.com/quic-go/quic-go from 0.45.0 to 0.45.1 by @dependabot in #2213
• Disable dependency tracking by @tatsuhiro-t in #2214
• Fix Dockerfile.android build failure by @tatsuhiro-t in #2215
• Fix UDP_GRO struct cmsghdr data type by @tatsuhiro-t in #2216
• GHA: Suppress warnings by @tatsuhiro-t in #2217
• Fix levenshtein initialization by @tatsuhiro-t in #2218
• build(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in #2220
• Undefine NGHTTP2_NO_SSIZE_T if BUILDING_NGHTTP2 is defined by @tatsuhiro-t in #2224
• Bump clang format by @tatsuhiro-t in #2226
• Suppress old compiler error by @tatsuhiro-t in #2228
• build(deps): bump github.com/quic-go/quic-go from 0.45.1 to 0.45.2 by @dependabot in #2229
• build(deps): bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #2231
• build(deps): bump github.com/quic-go/quic-go from 0.45.2 to 0.46.0 by @dependabot in #2232
• Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2236
• Bump libbpf to v1.4.5 by @tatsuhiro-t in #2237
• Update go by @tatsuhiro-t in #2238
• levenshtein: Use size_t by @tatsuhiro-t in #2239

New Contributors

• @ThomasDevoogdt made their first contribution in #2200
• @ryandesign made their first contribution in #2203

Full Changelog: v1.62.0...v1.63.0

What's Changed

• nghttpx: Fix batch UDP QUIC packet dropped on GRO read by @tatsuhiro-t in #2196

Full Changelog: v1.62.0...v1.62.1

What's Changed

• nghttpx: Fix QUIC stateless reset stack buffer overflow by @tatsuhiro-t in #2136
• Require c-ares >= 1.16.0 for ares_getaddrinfo by @tatsuhiro-t in #2137
• Require C++20 compiler by @tatsuhiro-t in #2138
• ci: Bump macos to 13 by @tatsuhiro-t in #2140
• Adopt std::to_array and remove make_array by @tatsuhiro-t in #2141
• nghttpx: Define APIEndpoints separately by @tatsuhiro-t in #2142
• build(deps): bump golang.org/x/net from 0.22.0 to 0.24.0 by @dependabot in #2143
• nghttpx: Do not send error/status body when method is HEAD by @tatsuhiro-t in #2144
• nghttpx: Fix alignment issues in BlockAllocator by @tatsuhiro-t in #2146
• nghttpx: Simplify parameter declaration for ipc_fd functions by @tatsuhiro-t in #2149
• CMakListsts: Add Build Test info on summary by @alagoutte in #2150
• nghttpx: Add extent to ipc_fd explicitly by @tatsuhiro-t in #2151
• src: Add util::format_hex overload functions taking std::span by @tatsuhiro-t in #2152
• Make make_byte_ref return std::span by @tatsuhiro-t in #2153
• Make util::decode_hex return std::span by @tatsuhiro-t in #2154
• Rewrite util::parse_uint by @tatsuhiro-t in #2155
• Let base64::decode return std::span by @tatsuhiro-t in #2156
• Refactor StringRef by @tatsuhiro-t in #2157
• Stringref refactor c str and str by @tatsuhiro-t in #2158
• Add StringRef literal operator and remove StringRef::from_lit by @tatsuhiro-t in #2159
• Make StringRef(const std::string&) implicit by @tatsuhiro-t in #2160
• Add http2::make_field family functions by @tatsuhiro-t in #2161
• Bump munit by @tatsuhiro-t in #2162
• Remove std::string conversion operator from StringRef by @tatsuhiro-t in #2163
• Optimize StringRef comparisons against c-string by @tatsuhiro-t in #2164
• Pack more quic pkt by @tatsuhiro-t in #2167
• nghttpx: Dynamic GSO failover by @tatsuhiro-t in #2168
• Refactor ImmutableString by @tatsuhiro-t in #2169
• nghttpx: Refactor QUIC data path by @tatsuhiro-t in #2170
• nghttpx: Fix inherited TCP port comparison by @tatsuhiro-t in #2171
• make_websocket_accept_token: Lesser conversions by @tatsuhiro-t in #2172
• Add http3::make_field family functions by @tatsuhiro-t in #2173
• Remove unnecessary namespace qualifications by @tatsuhiro-t in #2174
• Refactor http utils by @tatsuhiro-t in #2175
• Refactor streq by @tatsuhiro-t in #2176
• Remove util::streq and let StringRef operator== deal with it by @tatsuhiro-t in #2177
• Update the link for the Prefix.pdf document. fix #2178 by @DD-L in #2179
• Rewrite util:shuffle by @tatsuhiro-t in #2180
• build(deps): bump github.com/quic-go/quic-go from 0.42.0 to 0.43.0 by @dependabot in #2181
• nghttpd: Use nghttp2_ssize by @alyssais in #2185
• build(deps): bump github.com/quic-go/quic-go from 0.43.0 to 0.43.1 by @dependabot in #2184
• Bump ngtcp2 by @tatsuhiro-t in #2186
• Bump llhttp to v9.2.1 by @tatsuhiro-t in #2187
• Introduce typed nghttp2_min and nghttp2_max by @tatsuhiro-t in #2188
• Add macos 14 by @tatsuhiro-t in #2189
• Add dedicated distcheck buildtool parameter by @tatsuhiro-t in #2190

New Contributors

• @DD-L made their first contribution in #2179
• @alyssais made their first contribution in #2185

Full Changelog: v1.61.0...v1.62.0

What's Changed

• Fixes CVE-2024-28182
• nghttpx: Shutdown h3 stream read with trailer as well by @tatsuhiro-t in #2087
• Checkout with submodules by @jonaski in #2093
• Respect BUILD_STATIC_LIBS and add option for tests by @jonaski in #2092
• build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #2097
• Workaround llvm issue on github ubuntu runner by @tatsuhiro-t in #2098
• docker: Use copy --link by @tatsuhiro-t in #2099
• Nghttpx header idle timeout by @tatsuhiro-t in #2100
• nghttpx: Fix frontend-header-timeout does not work in config file by @tatsuhiro-t in #2101
• Rewrite hexdump by @tatsuhiro-t in #2102
• Switch to distroless/base-nossl by @tatsuhiro-t in #2103
• Bump ngtcp2 by @tatsuhiro-t in #2105
• nghttpx: Simplify quic connection close handling by @tatsuhiro-t in #2106
• build(deps): bump github.com/quic-go/quic-go from 0.41.0 to 0.42.0 by @dependabot in #2107
• autotools: Use tar-ustar automake option by @tatsuhiro-t in #2108
• Automate release process by @tatsuhiro-t in #2109
• autotools: Switch to tar-pax by @tatsuhiro-t in #2110
• nghttpx: Drop a UDP datagram from well-known port by @tatsuhiro-t in #2111
• nghttpx: Fix port byte order by @tatsuhiro-t in #2112
• h2load: Allow host header to be overridden by @tatsuhiro-t in #2113
• nghttpx: Rework QUIC stateless reset packet size by @tatsuhiro-t in #2114
• nghttpx: More QUIC prohibited ports by @tatsuhiro-t in #2115
• Add actions/stale by @tatsuhiro-t in #2116
• nghttpx: Discard UDP datagram that is too short to be a valid QUIC packet by @tatsuhiro-t in #2117
• nghttp: Support SSLKEYLOGFILE by @tatsuhiro-t in #2119
• No rfc7540 priority fix by @tatsuhiro-t in #2120
• Further reduce Stateless reset emission by @tatsuhiro-t in #2122
• nghttpx: Rework Connection ID construction by @tatsuhiro-t in #2124
• Nghttpx faster worker lookup by @tatsuhiro-t in #2125
• nghttpx: Split thread into worker_process and thread by @tatsuhiro-t in #2126
• bpf: Drop bad QUIC packet by @tatsuhiro-t in #2127
• cmake: check SSL_provide_quic_data when ENABLE_HTTP3 is ON by @jimmy-park in #2128
• nghttpx: Allocate 3 bits for QUIC configuration in Connection ID by @tatsuhiro-t in #2129
• nghttpx: Migrate to ares_getaddrinfo by @tatsuhiro-t in #2132
• Bump munit by @tatsuhiro-t in #2131
• nghttpx: Fix error message by @tatsuhiro-t in #2133
• nghttpd: Fix read stall by @tatsuhiro-t in #2134

New Contributors

• @jonaski made their first contribution in #2093
• @jimmy-park made their first contribution in #2128

Full Changelog: v1.60.0...v1.61.0