Changes since version 3.4-dev4 :

Amaury Denoyelle (18):
      MINOR: cfgparse: validate defaults proxies separately
      MINOR: cfgparse: move proxy post-init in a dedicated function
      MINOR: proxy: refactor proxy inheritance of a defaults section
      MINOR: proxy: refactor mode parsing
      MINOR: backend: add function to check support for dynamic servers
      MINOR: proxy: define "add backend" handler
      MINOR: proxy: parse mode on dynamic backend creation
      MINOR: proxy: parse guid on dynamic backend creation
      MINOR: proxy: check default proxy compatibility on "add backend"
      MEDIUM: proxy: implement dynamic backend creation
      MINOR: proxy: assign dynamic proxy ID
      REGTESTS: add dynamic backend creation test
      BUG/MINOR: proxy: fix clang build error on "add backend" handler
      BUG/MINOR: proxy: fix null dereference in "add backend" handler
      BUG/MINOR: proxy: fix default ALPN bind settings
      BUG/MINOR: quic: ensure handshake speed up is only run once per conn
      BUG/MAJOR: quic: reject invalid token
      BUG/MAJOR: quic: fix parsing frame type

Aurelien DARRAGON (3):
      MINOR: filters: rework RESUME_FILTER_* macros as inline functions
      MINOR: filters: rework filter iteration for channel related callback functions
      MEDIUM: filters: use per-channel filter list when relevant

David Carlier (14):
      BUG/MINOR: deviceatlas: add missing return on error in config parsers
      BUG/MINOR: deviceatlas: add NULL checks on strdup() results in config parsers
      BUG/MEDIUM: deviceatlas: fix resource leaks on init error paths
      BUG/MINOR: deviceatlas: fix off-by-one in da_haproxy_conv()
      BUG/MINOR: deviceatlas: fix cookie vlen using wrong length after extraction
      BUG/MINOR: deviceatlas: fix double-checked locking race in checkinst
      BUG/MINOR: deviceatlas: fix resource leak on hot-reload compile failure
      BUG/MINOR: deviceatlas: fix deinit to only finalize when initialized
      BUG/MINOR: deviceatlas: set cache_size on hot-reloaded atlas instance
      MINOR: deviceatlas: check getproptype return and remove pprop indirection
      MINOR: deviceatlas: increase DA_MAX_HEADERS and header buffer sizes
      MINOR: deviceatlas: define header_evidence_entry in dummy library header
      MINOR: deviceatlas: precompute maxhdrlen to skip oversized headers early
      CLEANUP: deviceatlas: add unlikely hints and minor code tidying

Egor Shestakov (3):
      BUG/MINOR: startup: fix allocation error message of progname string
      BUG/MINOR: startup: handle a possible strdup() failure
      CLEANUP: initcall: adjust comments to INITCALL{0,1} macros

Olivier Houchard (4):
      BUG/MINOR: threads: Initialize maxthrpertgroup earlier.
      BUG/MEDIUM: threads: Differ checking the max threads per group number
      MINOR: queues: Check minconn first in srv_dynamic_maxconn()
      MINOR: servers: Call process_srv_queue() without lock when possible

Remi Tricot-Le Breton (4):
      MINOR: ssl: Missing '\n' in error message
      MINOR: jwt: Convert an RSA JWK into an EVP_PKEY
      MINOR: jwt: Add new jwt_decrypt_jwk converter
      REGTESTS: jwt: Add new "jwt_decrypt_jwk" tests

William Lallemand (12):
      DOC: internals: addd mworker V3 internals
      MINOR: startup: Add the SSL lib verify directory in haproxy -vv
      BUG/MINOR: ssl: SSL_CERT_DIR environment variable doesn't affect haproxy
      MINOR: startup: Add HAVE_WORKING_TCP_MD5SIG in haproxy -vv
      MINOR: startup: sort the feature list in haproxy -vv
      MINOR: startup: show the list of detected features at runtime with haproxy -vv
      SCRIPTS: build-vtest: allow to set a TMPDIR and a DESTDIR
      BUG/MINOR: ssl: lack crtlist_dup_ssl_conf() declaration
      BUG/MINOR: ssl: double-free on error path w/ ssl-f-use parser
      BUG/MINOR: ssl: fix leak in ssl-f-use parser upon error
      BUG/MINOR: ssl: clarify ssl-f-use errors in post-section parsing
      BUG/MINOR: ssl: error with ssl-f-use when no "crt"

Willy Tarreau (10):
      MINOR: net_helper: extend the ip.fp output with an option presence mask
      CLEANUP: lb-chash: free lb_nodes from chash's deinit(), not global
      BUG/MEDIUM: lb-chash: always properly initialize lb_nodes with dynamic servers
      CLEANUP: haproxy: fix bad line wrapping in run_poll_loop()
      MINOR: activity: support setting/clearing lock/memory watching for task profiling
      MEDIUM: activity: apply and use new finegrained task profiling settings
      MINOR: activity: allow to switch per-task lock/memory profiling at runtime
      DOC: proxy-proto: underline the packed attribute for struct pp2_tlv_ssl
      DEV: gdb: add a utility to find the post-mortem address from a core
      DEV: gdb: use unsigned longs to display pools memory usage