Changes since version 2.4-dev1 : Christopher Faulet (1): BUG/MAJOR: filters: Always keep all offsets up to date during data filtering Ilya Shipitsin (5): CLEANUP: remove unused function "ssl_sock_is_ckch_valid" BUILD: SSL: add BoringSSL guarding to "RAND_keep_random_devices_open" BUILD: SSL: do not "update" BoringSSL version equivalent anymore CI: github actions: update LibreSSL to 3.3.0 CI: github actions: enable 51degrees feature Joao Morais (1): DOC: better describes how to configure a fallback crt Julien Pivotto (1): MINOR: stream: Add level 7 retries on http error 401, 403 Maciej Zdeb (2): BUG/MEDIUM: http_act: Restore init of log-format list DOC: Clarify %HP description in log-format Remi Tricot-Le Breton (5): MINOR: cache: Prepare helper functions for Vary support MEDIUM: cache: Add the Vary header support MINOR: cache: Add a process-vary option that can enable/disable Vary processing DOC: cache: Add new caching limitation information DOC: cache: Add information about Vary support Tim Duesterhus (4): BUILD: Make DEBUG part of .build_opts BUILD: Show the value of DEBUG= in haproxy -vv CI: Set DEBUG=-DDEBUG_STRICT=1 in GitHub Actions BUG/CRITICAL: cache: Fix trivial crash by sending accept-encoding header Willy Tarreau (3): BUG/MAJOR: peers: fix partial message decoding DOC: better document the config file format and escaping/quoting rules MINOR: fd/threads: silence a build warning with threads disabled