Changes since version 3.5-dev9 :

Amaury Denoyelle (7):
      BUG/MINOR: quic: rearm packet on packet received even non ack-eliciting
      REGTESTS: use HAPROXY_TEST_TIMEOUT for wait in purge srv/be
      MINOR: quic: rename confusing qc_purge_txbuf() to qc_flush_txbuf()
      BUG/MEDIUM: mux_quic: prevent uaf on fctl frame after send error
      BUG/MINOR: mux_quic: prevent RS/SS on unistream with hq-interop
      BUG/MINOR: check: do not inspect errno if conn FDLESS
      BUG/MINOR: mux_quic: do not crash on SE_SHR_DRAIN shut

Aurelien DARRAGON (1):
      BUG/MEDIUM: stats-file: shm-stats-file be counters not working anymore

Björn Jacke (1):
      DOC: config: explain per ACL line limitations

Christopher Faulet (36):
      BUG/MEDIUM: cli: Fix parsing of big payloads with dynamically allocated buffer
      BUG/MINOR: filters: fix silent compression disable with legacy "filter compression" first
      MINOR: filters: Support the global side in filter_place_class()
      OPTIMIZE: stream: Stop holding a reference on the frontend during stream_free()
      BUG/MEDIUM: mux-h1: Don't close the connection on a payload parsing error
      BUG/MEDIUM: h1: make the Connection/Upgrade headers cleanup idempotent
      BUG/MINOR: h1: keep accepting unsafe violations after a parser reset
      BUG/MEDIUM: h1: don't rewrite the Upgrade header when not cleaning headers
      BUG/MEDIUM: h1-htx: don't stall on messages ending exactly at the buffer's end
      BUG/MEDIUM: mux-h1: don't truncate the response when closing after draining
      BUG/MEDIUM: mux-h1: don't truncate responses on soft-stop
      BUG/MINOR: h1: don't use uninitialized start line pointers when restarting
      BUG/MINOR: mux-h1: only reset the session's timing info on the frontend side
      BUG/MINOR: mux-h1: fix the open streams counter on stream creation failure
      BUG/MINOR: mux-h1: wake the connection up when a pending error can be sent
      BUG/MINOR: mux-h1: don't dereference a NULL opposite sedesc in h1_fastfwd()
      BUG/MEDIUM: h1: reject CONNECT request targets other than "host:port"
      BUG/MEDIUM: mux-h1: don't lose the end of the previous chunk in h1_make_chunk()
      BUG/MEDIUM: mux-h1: don't stall when draining more than a buffer of data
      BUG/MINOR: mux-h1: reset the content-length/chunking state after a 1xx response
      BUG/MINOR: mux-h1: don't keep fast-forwarding disabled for the next streams
      BUG/MINOR: mux-h1: don't report a 408 error on timeout of a closed connection
      BUG/MEDIUM: mux-h1: don't swap buffers when transferring data with a reserved offset
      BUG/MINOR: mux-h1: report payload parsing glitches to the session
      BUG/MEDIUM: mux-h1: don't lose error responses once a content-length was parsed
      BUG/MEDIUM: h1: build a missing Host header from the authority of the URI
      BUG/MINOR: h1: reject CONNECT authorities with an empty host
      BUG/MINOR: h1: forget a previous pass' results when parsing headers only
      BUG/MEDIUM: mux-h1: don't send chunked responses to HTTP/1.0 clients
      BUG/MINOR: mux-h1: convert the <from> argument of h1-case-adjust to lower case
      BUG/MEDIUM: h1: reject absolute http(s) URIs with an empty host
      BUG/MINOR: mux-h1: only rely on the client's method for bodyless responses
      BUG/MINOR: mux-h1: search the websocket key in the right message
      BUG/MINOR: mux-h1: don't forward request trailers named like server name header
      BUG/MEDIUM: mux-h1: don't spread-close idle conns with idle-close-on-response
      BUG/MINOR: mux-h1: Don't subscribe for receives once read0 or error received

Frederic Lecaille (6):
      MEDIUM: quic: implement the AEAD confidentiality limit
      OPTIM: quic: use native HKDF APIs where available
      TESTS: quic: add HKDF unit tests using RFC 5869 vectors
      BUG/MEDIUM: peers: keep the earliest sync task deadline
      MINOR: quic: use the same HP encryption helpers for RX and TX
      BUG/MINOR: quic: valid NEW_TOKEN connections are counted as half-open

Olivier Houchard (8):
      BUILD: sym: Make sure minidebug works correctly with most environments
      BUILD: sym: Use dl_iterate_phdr() for more OSes.
      BUILD: sym: Get it to build and work on various OSes
      BUILD: sym: Make sure __always_inline always is inline.
      BUILD: sym: Build properly with gold as a linker
      BUILD: sym: Keep a temporary binary without .gnu_debugdata
      BUILD: sym: Don't add a minidebug section to haterm and haload
      BUG/MINOR: sym: don't crash on images linked at a fixed base

Willy Tarreau (1):
      BUILD: makefile: better support git worktrees

Yeonggi Kim (7):
      MINOR: quic: use the listener for Retry and Version Negotiation emission
      MINOR: quic: define a function to emit a datagram on a listener socket
      BUG/MEDIUM: quic: use datagram destination as source for Retry
      BUG/MINOR: quic: use datagram destination as source for stateless reset
      BUG/MINOR: quic: use datagram destination as source for version negotiation
      REGTESTS: quic: check Retry source address on a wildcard listener
      BUG/MINOR: quic: handle EINTR on emission of packets without connection