Changes since version 2.8.28 :

Amaury Denoyelle (3):
      BUG/MEDIUM: h3: do not block FIN on empty DATA frame
      BUG/MINOR: h3: handle empty HEADERS frame as specified
      BUG/MINOR: h3: only increment frame type counter on new header

Christopher Faulet (4):
      BUG/MEDIUM: hlua: Never release a cosocket applet from the GC
      BUG/MINOR: hlua: Always return nil if there is no data to dup for HTTP messages
      BUG/MEDIUM: htx: Reserve a block descriptor for zero-sized blocks
      BUILD: quic: Don't check ChaCha20 header context for AWS-LC

Frederic Lecaille (10):
      BUG/MEDIUM: quic: crash on key update phase change after a failed one
      BUG/MINOR: quic: late packets of the first key phase are dropped
      MINOR: quic: protect the ChaCha20 header protection context from being freed
      BUG/MINOR: qpack: encoder and decoder stream data is never consumed
      BUG/MINOR: qpack: accept a Required Insert Count which cannot be reached
      BUG/MINOR: quic: delete the wrong CIDs when post-handshake frames fail
      BUG/MEDIUM: map: do not overwrite the fetch context in pat_match_regm()
      REGTESTS: map: check map_regm inside an ACL over an iterating fetch
      BUG/MINOR: sample: reject a \0 byte in url_dec, json_query and jwt_*_query
      REGTESTS: http-rules: check "-m str" on a sample with an embedded \0

Kirill Furman (1):
      BUG/MINOR: log: fix double-free error when error in parse_loger occurs

Manu Nicolas (2):
      BUG/MINOR: resolvers: classify empty truncated responses
      BUG/MEDIUM: http-ana: apply tunnel timeout with data filters

Olivier Houchard (2):
      MEDIUM: mux-h1: Harden test for short data at end of stream
      BUG/MEDIUM: mux-h2: Make sure we remove H2_SF_NOTIFIED on subscribe

Remi Tricot-Le Breton (2):
      BUG/MINOR: ssl: don't pass the address of a size_t as an int* to OpenSSL
      BUG/MINOR: ssl: Fix leak of ca_list in cafile_entry

William Lallemand (2):
      BUG/MINOR: payload: bound ClientHello extension lists by the extension length
      BUG/MEDIUM: ssl: don't set a 0 timeout on an expired TLS session

Willy Tarreau (2):
      DOC: configuration: clarify the validity ranges of sample types
      BUG/MEDIUM: limits: properly account for global.maxpipes in compute_ideal_maxconn()

Youngkwang Lee (1):
      BUG/MEDIUM: http_act: fix normalize-uri normalizer selection with a condition