http

This release includes numerous bug fixes across various modules, including desktop, fetch, http, node, npm, and web. It also introduces performance improvements in the core and web modules.

This release addresses multiple security vulnerabilities across various components including URL normalization, HTTP/3, HTTP/2, admin, ext_authz, and QUIC. It also includes several bug fixes for filter management, ext_proc, and router functionalities.

This release focuses primarily on security fixes addressing multiple CVEs related to crashes, header bypasses, and memory corruption. It also includes a bug fix for OAuth2 refresh requests.

This release introduces configuration support for 'all' and 'none' in tune.defaults.purge and deprecates tune.takeover-other-tg-connections. It also includes numerous bug fixes across various modules like proxy, hpack, SSL, and QUIC, along with updates to the SLZ library.

Version 3.5-dev4 introduces significant refactoring of internal data structures for proxies and servers, enhancing performance and maintainability. It also includes numerous bug fixes across various modules, improved error handling, and new features like rate limiting for haload and enhanced header filtering in halog.

This release introduces early hints support for the cache module, enhances SSL/TLS security with FIPS compliance for AWS-LC, and includes various bug fixes and minor improvements across different modules.

This release introduces new features for QUIC, SSL/ECH, and stick-tables, alongside numerous bug fixes across various modules. Key changes include improved QUIC option handling, enhanced SSL certificate management, and more robust stick-table operations.

This release includes several bug fixes across various Angular modules including compiler, compiler-cli, core, forms, http, and router. Key fixes involve improving expression generation, handling of MathML and SVG elements, defer block loops, and JSON response decoding.

This release includes several bug fixes across the core and http modules. Key fixes involve sanitizing host bindings, exact header value matching, preserving immutability, and ensuring root interceptors run correctly.

This release includes several bug fixes across the core and http modules, improving host binding sanitization, header matching, immutability of clones, and interceptor execution.

This release includes several bug fixes across the compiler, http, and platform-server modules. Notably, it addresses issues with i18n event attributes, event handler checks, transfer cache parameters, XSRF for HttpClient, and updates the domino library.

This release includes several bug fixes across the compiler, http, and platform-server modules. Notably, it addresses issues with i18n event attributes, event handler checks, transfer cache parameters, and updates the domino library.

This release includes several bug fixes across various Angular modules, including common, core, forms, http, and migrations. Key fixes involve preserving crossorigin on image preloads, case-insensitive SVG animation attribute checks, and improved ngClass migration.

This release includes various bug fixes across multiple Angular packages, addressing issues in common, compiler, core, forms, http, localize, and platform-browser modules. Key fixes include improvements to input transforms, signal forms, interceptor behavior, and regular expression security.

This release focuses on numerous bug fixes across various integrations like Azure Sentinel, Bedrock, and the proxy. It also introduces new features for the auto-router and UI, alongside enhanced Docker image signature verification.

This is a security release addressing multiple vulnerabilities across http2, permission, https, sqlite, dns, zlib, and http modules. It also includes dependency updates for llhttp and undici.

This is a security release addressing multiple vulnerabilities across various modules including http2, permission, https, sqlite, dns, zlib, and http. It also includes dependency updates for llhttp and undici.

This is a security release that addresses several vulnerabilities across http2, permission, https, dns, zlib, and http modules. It also includes dependency updates for llhttp and undici.

This release addresses an unexpected behavior introduced in version 22.23.0 and includes an http fix related to stream listeners on idle agent sockets.

This is a security release addressing multiple CVEs related to hash collisions, timing attacks, file system permissions, and error handling. Dependencies like V8 and undici were also updated.

This release includes fixes for module resolution in ES Modules, improvements to crypto and stream handling, and updates to several internal dependencies. A notable documentation change clarifies the application of DEP0169 regarding `url.resolve()`.

This security release addresses multiple vulnerabilities (CVE-2025-23166, CVE-2025-23167, CVE-2025-23165, CVE-2024-27982) by updating the llhttp parser and fixing critical issues in the crypto and fs modules.

This release focuses on security patches across several components like fastcgi, vars, and admin, alongside numerous minor features and bug fixes to improve stability and functionality.

This is a hotfix release addressing critical issues, including a regression in acme_dns and problems with nested token imports in the Caddyfile.

This release (1.18.12 Enterprise) shares the Consul Enterprise changelog, designates 1.18 as LTS, and includes several security updates, including upgrading the UBI base image and Go version.

This patch release focuses primarily on security updates, including upgrading the UBI base image and Go to 1.23.10, alongside several bug fixes related to catalog registration, licensing, and WAN federation.

This release shares the Consul Enterprise changelog and announces availability, introducing configurable XDS load balancing disabling and LUA script extension for API Gateway.

This release serves to announce the availability of the Consul Enterprise changelog. Consumers are warned that the attached source and assets do not contain the actual Enterprise code.

This release fixes socket hang‑up issues for keep‑alive requests with timeouts, adds default export support for the http2 module, and improves HTTP loop performance.

This release adds HTTP/2 support and fixes several bugs including a TypeError in fetch when config.env is undefined.

This release updates 610 Rust crates to their latest compatible versions and flags several unmaintained GTK3 binding crates as deprecated.

This release updates 610 dependencies to their latest compatible versions and flags multiple unmaintained GTK3 bindings identified by Cargo audit.