core: resolve systemd socket descriptors by name (#8123)

Zen Dodd committed 8 days ago

caddyfile: reject negative import argument indices (#8316)

D'Ali Ben Macha committed 8 days ago

rewrite: treat only valid percent encodings as escapes (#8345)

Zen Dodd committed 8 days ago

admin: authorize remote requests matching any permission entry (#8317)

D'Ali Ben Macha committed 8 days ago

reverseproxy: skip unavailable upstream with a single weighted_round_robin weight (#8320)

D'Ali Ben Macha committed 8 days ago

fileserver: handle empty files in size try policies (#8322)

D'Ali Ben Macha committed 8 days ago

reverseproxy: close upstream body when handle_response status is invalid (#8318)

D'Ali Ben Macha committed 8 days ago

rewrite: fix strip_path_suffix decoding a literal '%' as an escape (#8005)

Nguyen Thanh Dat committed 8 days ago

caddyhttp: correct path matcher doc on bare trailing wildcards (#8006)

Nguyen Thanh Dat committed 8 days ago

caddyhttp: reject invalid and dots-only hosts on every protocol (#8328)

Kévin Dunglas committed 8 days ago

ci: test and release with Go 1.27 (#8210)

Krish Singh Hura committed 8 days ago

ci/cd: migrate to cosign v3 bundles and update installer to v4.1.0 (#7674)

EINIER FREYRE CORONA committed 8 days ago

go.mod: update x509roots/fallback (#8333)

a committed 9 days ago

encode: use httpguts to look for Accept-Encoding in Vary (#8329)

Kévin Dunglas committed 9 days ago

admin: better Cache-Control handling (#8330)

Kévin Dunglas committed 9 days ago

fileserver: hide the data directory when it is relative (#8327)

Kévin Dunglas committed 9 days ago

fileserver: don't match regular file when path ends by slash (#8326)

Kévin Dunglas committed 9 days ago

rewrite: escape file matcher remainder before rewriting (#8325)

Kévin Dunglas committed 9 days ago

caddyauth: check basic_auth username uniqueness after placeholder expansion (#8315)

Kartik K committed 10 days ago

caddyauth: support third-party hash modules (#8063)

hsdfat committed 10 days ago