Changes since version 3.4-dev2 :

Amaury Denoyelle (10):
      MINOR: cfgparse: remove duplicate "force-persist" in common kw list
      BUG/MEDIUM: quic: fix ACK ECN frame parsing
      BUG/MINOR: proxy: free persist_rules
      MEDIUM: stream: refactor switching-rules processing
      REGTESTS: add test on backend switching rules selection
      MEDIUM: proxy: do not select a backend if disabled
      MEDIUM: proxy: implement publish/unpublish backend CLI
      MINOR: stats: report BE unpublished status
      MINOR: cfgparse: adapt warnif_cond_conflicts() error output
      MEDIUM: proxy: force traffic on unpublished/disabled backends

Aurelien DARRAGON (3):
      BUG/MINOR: hlua_fcn: fix broken yield for Patref:add_bulk()
      BUG/MINOR: hlua_fcn: ensure Patref:add_bulk() is given a table object before using it
      BUG/MINOR: http_act: fix deinit performed on uninitialized lf_expr in release_http_map()

Christian Ruppert (1):
      REGTESTS: ssl: Fix reg-tests curve check

Egor Shestakov (2):
      BUG/MINOR: cfgparse: fix "default" prefix parsing
      REORG/MINOR: cfgparse: eliminate code duplication by lshift_args()

Hyeonggeun Oh (1):
      MINOR: cfgparse: Refactor "userlist" parser to print it in -dKall operation

Olivier Houchard (11):
      MINOR: receiver: Dynamically alloc the "members" field of shard_info
      MINOR: stats: Increase the tgid from 8bits to 16bits
      BUG/MINOR: stats-file: Use a 16bits variable when loading tgid
      MEDIUM: counters: Dynamically allocate per-thread group counters
      MEDIUM: counters: Remove some extra tests
      BUG/MEDIUM: threads: Fix binding thread on bind.
      MEDIUM: counters: mostly revert da813ae4d7cb77137ed
      MINOR: queues: Turn non_empty_tgids into a long array.
      MINOR: threads: Eliminate all_tgroups_mask.
      BUG/MEDIUM: queues: Fix arithmetic when feeling non_empty_tgids
      MEDIUM: thread: Turn the group mask in thread set into a group counter

Remi Tricot-Le Breton (9):
      MINOR: ssl: Factorize AES GCM data processing
      MINOR: ssl: Add new aes_cbc_enc/_dec converters
      REGTESTS: ssl: Add tests for new aes cbc converters
      MINOR: jwe: Add new jwt_decrypt_secret converter
      MINOR: jwe: Add new jwt_decrypt_cert converter
      REGTESTS: jwe: Add jwt_decrypt_secret and jwt_decrypt_cert tests
      DOC: jwe: Add doc for jwt_decrypt converters
      MINOR: jwe: Some algorithms not supported by AWS-LC
      REGTESTS: jwe: Fix tests of algorithms not supported by AWS-LC

Tim Duesterhus (1):
      CLEANUP: connection: Remove outdated note about CO_FL `0x00002000` being unused

William Lallemand (6):
      BUILD: ssl: strchr definition changed in C23
      BUILD: tools: memchr definition changed in C23
      BUG/MINOR: cfgparse: wrong section name upon error
      BUG/MINOR: cli/stick-tables: argument to "show table" is optional
      CI: github: remove ERR=1 temporarly from the ECH job
      MEDIUM: systemd: implement directory loading

Willy Tarreau (5):
      BUILD: sockpair: fix build issue on macOS related to variable-length arrays
      MEDIUM: config: warn if some userlist hashes are too slow
      MINOR: sample: also support retrieving fc.timer.handshake without a stream
      MINOR: tcp-sample: permit retrieving tcp_info from the connection/session stage
      BUG/MINOR: net_helper: fix IPv6 header length processing

akarl10 (1):
      BUG/MINOR: ech/quic: enable ech configuration also for quic listeners