Changes since version 3.3-dev2 :

Aurelien DARRAGON (9):
      MEDIUM: sink: change the sink mode type to PR_MODE_SYSLOG
      MEDIUM: server: move _srv_check_proxy_mode() checks from server init to finalize
      MINOR: server: move send-proxy* incompatibility check in _srv_check_proxy_mode()
      MINOR: mailers: warn if mailers are configured but not actually used
      BUG/MEDIUM: counters/server: fix server and proxy last_change mixup
      MEDIUM: server: add and use a separate last_change variable for internal use
      MEDIUM: proxy: add and use a separate last_change variable for internal use
      MINOR: counters: rename last_change counter to last_state_change
      MEDIUM: stats: add persistent state to typed output format

Christopher Faulet (2):
      BUG/MEDIUM: hlua: Forbid any L6/L7 sample fetche functions from lua services
      BUG/MEDIUM: mux-h2: Properly handle connection error during preface sending

Frederic Lecaille (1):
      BUG/MINOR: quic-be: Wrong retry_source_connection_id check

Mariam John (1):
      MINOR: ssl: Introduce new smp_client_hello_parse() function

Remi Tricot-Le Breton (10):
      BUG/MINOR: jwt: Copy input and parameters in dedicated buffers in jwt_verify converter
      DOC: Fix 'jwt_verify' converter doc
      MINOR: jwt: Rename pkey to pubkey in jwt_cert_tree_entry struct
      MINOR: jwt: Remove unused parameter in convert_ecdsa_sig
      MAJOR: jwt: Allow certificate instead of public key in jwt_verify converter
      MINOR: ssl: Allow 'commit ssl cert' with no privkey
      MINOR: ssl: Prevent delete on certificate used by jwt_verify
      REGTESTS: jwt: Add test with actual certificate passed to jwt_verify
      REGTESTS: jwt: Test update of certificate used in jwt_verify
      DOC: 'jwt_verify' converter now supports certificates

William Lallemand (6):
      MINOR: ssl: check TLS1.3 ciphersuites again in clienthello with recent AWS-LC
      BUG/MINOR: httpclient: wrongly named httpproxy flag
      MINOR: ssl/ocsp: stop using the flags from the httpclient CLI
      MEDIUM: httpclient: split the CLI from the actual httpclient API
      MEDIUM: httpclient: implement a way to use directly htx data
      MINOR: httpclient/cli: add --htx option

Willy Tarreau (1):
      REGTESTS: restrict execution to a single thread group