Changes since version 3.4.6 :

Amaury Denoyelle (10):
      BUG/MINOR: proxy: add PR_CAP_LB for dynamically added backend
      BUG/MINOR: server: fix "del server" description
      BUG/MINOR: cli: update wait help usage
      BUG/MINOR: hq-interop: prevent double EOM on request with standalone FIN
      BUG/MINOR: ssl: fix trace crash on FE conn release in io cb
      BUG/MINOR: ssl: fix trace crash on BE conn release in io cb
      BUG/MINOR: mux_quic: extend FINAL_SIZE_ERROR detection on stream
      BUG/MINOR: h3: reject frames with truncated header
      BUG/MINOR: h3: close connection on GOAWAY frame too long
      BUG/MINOR: h3: reject RS/SS for QPACK uni streams

Aurelien DARRAGON (2):
      BUG/MINOR: log: fix erroneous error message in log-steps parser
      BUG/MINOR: hlua: assume proxy_find_by_id() may return NULL on previously existing server

Christopher Faulet (6):
      BUG/MEDIUM: flt-http-comp: Block HTX_FL_EOM flag till the end of compression
      BUG/MINOR: flt-http-comp: Rely on htx_set_eom() to restore EOM flag
      BUG/MINOR: spoe: Fix the message list splice with an empty list
      BUG/MEDIUM: mux-h1: also release the embryonic stream when the error is empty
      BUG/MINOR: http-fetch: don't report pseudo-headers in TCP mode
      BUG/MEDIUM: mux-h1: only accept the H2 preface on the first request

Emeric Brun (1):
      BUILD: haring: fix compile issue due to nop warning.

Frederic Lecaille (3):
      MINOR: quic: implement the AEAD integrity limit
      BUG/MEDIUM: ssl: crt-list ciphers ignored with AWS-LC
      BUG/MEDIUM: ssl: crt-list curves ignored with AWS-LC

Lukas Tribus (1):
      MINOR: doc: elaborate on diagnostic mode behavior

Olivier Houchard (1):
      BUG/MEDIUM: listener: Consider maxconn before waking listeners

Remi Tricot-Le Breton (4):
      MEDIUM: jwt: Reject "none" alg in jwt_verify by default
      BUG/MINOR: jwe: Buffer overflow when filling fake cek in case of RSA1.5
      BUG/MINOR: jwe: Avoid buffer overflow in fake cek (RSA1.5)
      BUG/MINOR: ssl: Fix potential NULL-deref in "dump ssl cert" with AWS-LC

William Lallemand (1):
      BUG/MINOR: ssl: use standard names for X25519 and X448 groups

Willy Tarreau (33):
      MINOR: stconn: prefer to replace endpoints rather than detaching them
      MINOR: stick-table: provide a function to estimate on-wire data size
      MINOR: stick-table: calculate the on-wire size of each key
      BUG/MEDIUM: stick-table: restrict key sizes to what fits in a buffer
      BUG/MEDIUM: pattern: don't dereference static_pattern's data when not filling it
      BUG/MINOR: http: do not consume the delimiter of a truncated q-factor
      BUG/MINOR: sample: apply the ms_/us_ time offsets in the input unit
      BUG/MINOR: sample: zero-pad the fractional part emitted by http_date()
      BUG/MINOR: sample: make quic_enabled() always succeed
      BUG/MINOR: http-ana: return a 502 when checkcache blocks a response
      BUG/MINOR: stick-table: do not count the lookup itself in table_trackers()
      BUG/MINOR: payload: always report a boolean from req.ssl_ec_ext
      BUG/MINOR: http-fetch: do not count Set-Cookie attributes as cookies
      BUG/MEDIUM: tcpcheck: do not run a regex on an unallocated buffer
      BUG/MINOR: sample: return the decoded JWT part when no path is given
      DOC: config: mention other responses not blocked by option checkcache
      DOC: config: fix doc for hex2i() converter on unparsable input
      DOC: config: mention that url_ip and url_port fail when passed a name
      MINOR: http-ana: automatically enable http-no-delay for streaming events (SSE)
      BUG/MAJOR: cfgparse: properly check userlist section when scanning keywords
      BUG/MINOR: cfgparse-global: add missing gotos to error label in max-spread-checks
      BUG/MINOR: cfgparse-global: add missing calloc() check for the global description
      BUG/MINOR: cfgparse-listen: release the previous description of the proxy
      BUG/MINOR: cfgparse-listen: fix the argument checked by "email-alert"
      BUG/MINOR: cfgparse-listen: fix quoting of the condition conflict warning
      BUG/MINOR: cfgparse-listen: properly reject extra args in a backend section
      BUG/MINOR: proxy: also look for the closest option among cfg_opts3
      BUG/MINOR: cfgparse-listen: complete the list of options for the suggestions
      BUG/MEDIUM: mux-h2: don't return a freed tasklet from h2_deferred_shut()
      BUG/MEDIUM: mux-fcgi: don't return a freed tasklet from fcgi_deferred_shut()
      BUG/MEDIUM: mux-h1: don't pass an upgraded connection to traces in h1s_destroy()
      BUG/MEDIUM: mux-h2: report a dead rhttp connection in h2_wake()
      BUG/MEDIUM: mux-h2: fix a possible crash on rxbuf allocation failure

Yeonggi Kim (4):
      BUG/MEDIUM: cli: fix the last command detection on a full command line
      REGTESTS: cli: test a command line of exactly tune.bufsize bytes
      BUG/MEDIUM: log: do not ignore the peer's shutdown in the syslog applet
      REGTESTS: log: check that a log-forward TCP session ends on client close