Changes since version 2.8.26 :

Amaury Denoyelle (2):
      BUG/MEDIUM: h3: fix parser desync on error with multiple frames
      BUG/MINOR: mux_quic: prevent multiple STOP_SENDING emission per stream

Christopher Faulet (8):
      BUG/MINOR: sample: Fix a possible underflow on be2hex for large chunk size
      BUG/MINOR: stream: Fix custom timeouts initialization when setting backend
      BUG/MINOR: http-conv: Make url-dec failed if no space for trailing null byte
      BUG/MINOR: hlua: Apply socket timeout on server side only
      BUG/MINOR: mux-h1: Don't delay send if message with c-l was fully sent
      BUG/MEDIUM: sample: Adjust sample size capacity after pointer shift for ltrim()
      REORG: stconn: Move sc_chk_rcv() from sc_strm.h to stconn.c
      BUG/MEDIUM: applet: Reenable reads in applet context if requesting a connection

Frederic Lecaille (2):
      BUG/MEDIUM: protobuf: adjust sample size capacity after pointer shift
      BUG/MEDIUM: protobuf: fix nested path bypass in field lookup

Olivier Houchard (4):
      BUG/MEDIUM: fd: Fix a deadlock when closing other tgroups fds
      BUG/MEDIUM: stats: Ensure that Origin is valid on POSTs
      DOC: stats: Document that stats admin is vulnerable to a CSRF attack
      BUG/MEDIUM: ssl-gencert: Don't forget to free memory when done

Willy Tarreau (2):
      MINOR: stats: factor the proxy vs scope check into its own function
      BUG/MEDIUM: stats: subject "stats admin" accesses to "stats scope" filtering