nghttp2 v1.30.0

• lib: Allow PING frame to be sent after GOAWAY (GH-1103)
• nghttpx: Fix bug that h1 backend idle timeout expires sooner
• nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
• nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
• nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
• nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)

nghttp2 v1.29.0

• lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by GOAWAY (GH-1077)
• build: Remove SPDY (GH-821)
• build: Fix CMAKE_MODULE_PATH (Patch from Dmitriy Vetutnev) (GH-1084)
• nghttpx: Revert "nghttpx: Use an existing h2 backend connection as much as possible" (GH-1086)
• nghttpx: Write API request body in temporary file (GH-1083)
• nghttpx: Increase api-max-request-body (GH-1082)
• nghttpx: Faster configuration loading with lots of backends (GH-1081)
• nghttpx: Fix crash with --backend-http-proxy-uri option (GH-1079)

nghttp2 v1.28.0

• lib: Add nghttp2_error_callback2 (GH-1062)
• build: Add deprecation warning when spdylay support is enabled
• Switch to clang-format-5.0
• examples: Make client and server work with libevent-2.1.8 (GH-1039)
• third-party: Update neverbleed
• integration: Fix issues reported by the go vet tool. (Patch from Piotr Sikora) (GH-1047)
• nghttpx: Fix affinity retry
• nghttpx: Fix stalled backend connection on retry
• nghttpx: Cookie based session affinity (GH-1024, GH-1066)
• nghttpx: Expose additional TLS related variables to mruby and accesslog (GH-1031, GH-1038, GH-1057)

nghttp2 v1.27.0

• build: Fixed accidental compiler flags concatenation for MSVC (Patch from LazyHamster) (GH-1029)
• build: Reduce libxml2 version requirement to 2.6.26 (Patch from Mike Lothian) (GH-1020)
• asio: Support for Windows / MinGW (Patch from Daniel Evers) (GH-1027)
• h2load: Print out h2 header fields with --verbose option (GH-1015)
• nghttpx: Send non-final response to HTTP/1.1 or HTTP/2 client only (GH-1016)

nghttp2 v1.26.0

• docs: Fix some typos in the nghttpx how-to (Patch from Marc Bachmann) (GH-1013)
• build: Update Dockerfile.android (Patch from Gitai) (GH-1002)
• build: Refactoring include directories for build as CMake subdirectory (add_subdirectory(nghttp2)) (Patch from Dmitriy Vetutnev) (GH-988)
• nghttpx: Fix OCSP related error when building with BoringSSL (Patch from Rick Lei) (GH-1001)
• h2load: Fix bug that timing script stalls with -m1 (GH-997)
• h2load: Reservoir sampling (GH-984)
• h2load: Add timing-based load-testing in h2load (Patch from Soham Sinha) (GH-968)

nghttp2 v1.25.0

• lib: add nghttp2_rcbuf_is_static() (Patch from Anna Henningsen) (GH-983)
• nghttpx: Fix bug that forwarded for is not affected by proxy protocol (GH-979)
• nghttpx: Update mruby to 1.3.0 (GH-957)

nghttp2 v1.24.0

• doc: README.rst: fix typo (Patch from Simone Basso) (GH-947)
• doc: fix up grammar in submit_trailer docs (Patch from Benjamin Peterson) (GH-945)
• doc: fix cleaning in out-of-tree builds (Patch from Benjamin Peterson) (GH-938)
• nghttp: Fix bug that upgrade fails if reason-phrase is missing (GH-949)
• nghttpx: Verify OCSP response using trusted CA certificates (GH-943)
• nghttpx: Set default minimum TLS version to TLSv1.2 (GH-937)

nghttp2 v1.23.1

• nghttpx: Fix crash in OCSP response verification

nghttp2 v1.23.0

• lib: nghttp2_session: Allow for compiling library with -DNDEBUG set (Patch from Angus Gratton) (GH-919)
• lib: Treat incoming invalid regular header field as stream error (GH-900)
• lib: Call nghttp2_on_invalid_frame_callback if altsvc validation fails (GH-904)
• doc: spelling mistake in arguments to build nghttp apps (Patch from Soham Sinha) (GH-925)
• doc: Add notes for installation on linux systems (Patch from Tapanito) (GH-917)
• doc: Clarify the effect of nghttp2_option_set_no_http_messaging
• nghttpx: Verify OCSP response (GH-929)
• nghttpx: Fix certificate selection based on pub key algorithm (GH-924)
• nghttpx: Fix certificate indexing bug
• nghttpx: Run OCSP at startup (GH-922)
• nghttpx: Wildcard path matching (GH-914)
• nghttpx: Forward multiple via, xff, and xfp header fields (GH-903)
• nghttp: Add -y, --no-verify-peer option to suppress peer verify warn (GH-906)

nghttp2 v1.22.0

• lib: Add missing free call on error in inflight_settings_new() (Patch from lstefani) (GH-884)
• asio: Support specifying stream priority via session::submit() (Patch from Matt Way) (GH-881)
• nghttpx: Clarify --conf option behaviour
• nghttpx: Add $tls_sni access log variable (GH-896)
• nghttpx: Rename ssl_* log variables as tls_* (GH-895)
• nghttpx: Fix path matching bug (GH-894)
• nghttpx: SNI based backend server selection (GH-892)
• nghttpx: Enable signed_certificate_timestamp extension for TLSv1.3 (GH-878)
• nghttpx: Add options for X-Forwarded-Proto header field (GH-872)
• nghttpx: Add --single-process option (GH-869)
• nghttpx: Use 502 as server error code
• nghttpx: Use SSL_CTX_set_early_data_enabled with boringssl
• nghttp: Verify server certificate and show warning if it fails (GH-870)
• integration: Use nip.io instead of xip.io