# changelog

author: AIZAWA Hina <hina@bouhime.com> - 1.7.1-1
changelog:
  - Update to 1.7.1
    - [core] fix incorrect line no. reported in case of YAML syntax error #785 (Kazuho Oku)
    - [core] fix build issue / memory leak when the poll backend is used #777 #787 (devlearner)
    - [core] when building, repect EXTRA_LIBS passed from command line #793 (Kazuho Oku)
    - [core] fix memory leaks during start-up #792 (Domingo Alvarez Duarte)
    - [core] fix stability issue when receiving a signal #799 (Kazuho Oku)
    - [fastcgi] fix off-by-one buffer overflow #762 (Domingo Alvarez Duarte)
    - [fastcgi][mruby] install missing script files #791 #798 (AIZAWA Hina)
    - [mruby] truncate body to the size specified by content-length #778 (Kazuho Oku)
    - [mruby] fix error when reading a ruby script >= 64K #824 (Domingo Alvarez Duarte)
    - [proxy] fix I/O error when transferring files over 2GB on FreeBSD / OS X #821 #834 (Kazuho Oku)
    - [ssl] bugfix: use of session ticket not disabled even when configured to #819 #835 (Kazuho Oku)
    - [libh2o] provide pkg-config .pc files #743 (OGINO Masanori)
    - [libh2o] include version numbers in the .so filename #794 (Matt Clarkson)
    - [doc] refine documentation #601 #746 #748 #766 #781 #811


author: AIZAWA Hina <hina@bouhime.com> - 2.0.0-0.beta1.1
changelog:
  - Update to 2.0.0-beta1
    - [core][breaking change] do not automatically append / to path-level configuration #820 (Kazuho Oku)
    - [core] support << in configuration file #786 (Kazuho Oku)
    - [access-log] add directive for logging protocol-specific values #801 (Kazuho Oku)
    - [compress] on-the-fly compression using brotli, as well as directives to tune the compression parameters #802 (Kazuho Oku)
    - [file] file.file directive for mapping specific file #822 (Kazuho Oku)
    - [file] send-compress directive (renamed from send-gzip) to support pre-compressed files using brotli #802 (Kazuho Oku)
    - [file] cache open failures #836 (Kazuho Oku)
    - [http2] avoid memcpy during HPACK huffman encoding #749 (Kazuho Oku)
    - [ssl] support ECDH curves other than P-256 #841 (Kazuho Oku)


author: AIZAWA Hina <hina@bouhime.com> - 2.0.0-0.beta2.1
changelog:
  - Update to 2.0.0-beta2
    - [compress] fix potential SEGV when encoding brotli #849 (Kazuho Oku)
    - [compress][expires] refrain from setting redundant `cache-control` tokens #846 (Kazuho Oku)
    - [mruby] add $H2O_ROOT/share/h2o/mruby to the default load path #851 (Kazuho Oku)
    - [status] introduce the status handler #848 (Kazuho Oku)
    - [misc] install examples #850 (James Rouzier)


author: AIZAWA Hina <hina@bouhime.com> - 2.0.0-0.beta3.1
changelog:
  - Update to 2.0.0-beta3
    - [core] configurable server: header #877 (Frederik Deweerdt)
    - [core] fix crash when receiving SIGTERM during start-up #878 (Frederik Deweerdt)
    - [core] spawn the configured number of DNS client threads #880 (Sean McArthur)
    - [access-log][fastcgi][mruby] per-request environment variables #868 (Kazuho Oku)
    - [access-log] fix memory leak during start-up #864 (Frederik Deweerdt)
    - [http2] support for nopush attribute in the link rel=preload header #863 (Satoh Hiroh)
    - [http2] support for push after delegation #866 (Kazuho Oku)
    - [http2] accept capacity-bits attribute of the http2-casper configuration directive #882 (Satoh Hiroh)
    - [http2] ignore push indications made by a pushed response #897 (Kazuho Oku)
    - [proxy] add support for HTTPS #875 (Kazuho Oku)
    - [proxy] add an configuration option to pass through x-forwarded-proto request header #883 (Kazuho Oku)
    - [proxy] log error when upstream connection is unexpectedly closed #895 (Frederik Deweerdt)
    - [ssl] update libressl to 2.2.7 #898 (Kazuho Oku)
    - [ssl] add support for text-based memcache protocol #854 (Kazuho Oku)
    - [ssl] fix memory leak when using TLS resumption with the memcached backend #856 (Kazuho Oku)
    - [ssl] fix "undefined subroutine" error in the OCSP updater #872 (Masayuki Matsuki)
    - [ssl] cap the number of OCSP updaters running concurrently #891 (Kazuho Oku)
    - [libh2o] add API for obtaining the socket descriptor #886 (Frederik Deweerdt)
    - [libh2o] add API to selectively disable automated I/O on reads and writes #890 (Frederik Deweerdt)


author: AIZAWA Hina <hina@bouhime.com> - 2.0.0-0.beta4.1
changelog:
  - Update to 2.0.0-beta4
    - [ssl] fix build issue on CentOS 7 (and others that have tolower defined as a macro) #901 (Kazuho Oku)


author: AIZAWA Hina <hina@bouhime.com> - 2.0.0-0.beta5.1
changelog:
  - Update to 2.0.0-beta5
    - [security fix][http2] fix use-after-free on premature connection close (CVE-2016-4817) #920 (Frederik Deweerdt)
    - [core] fix SIGBUS when temporary disk space is full #910 (Kazuho Oku)
    - [core] add directive for customizing the path of temporary buffer files #911 (Kazuho Oku)
    - [http2] fix potential stall when http2-max-concurrent-requests-per-connection is set to a small number #912 (Kazuho Oku)
    - [http2] refuse push a single resource more than once #903 (Kazuho Oku)
    - [mruby] do not drop link header #913 (Kazuho Oku)
    - [mruby] fix memory leak during initialization #906 (Frederik Deweerdt)
    - [mruby] fix race condition in mruby regex handler #908 (Kazuho Oku)
    - [libh2o] fix crash in h2o_url_stringify #918 (Kazuho OKu)


author: AIZAWA Hina <hina@bouhime.com> - 2.0.0-1
changelog:
  - Update to 2.0.0, folowing changes (including new features and bug fixes) from 1.7.3
    - [core][breaking change] do not automatically append / to path-level configuration #820 (Kazuho Oku)
    - [core] support << in configuration file #786 (Kazuho Oku)
    - [core] configurable server: header #877 (Frederik Deweerdt)
    - [core] add directive for customizing the path of temporary buffer files #911 (Kazuho Oku)
    - [core] fix crash when receiving SIGTERM during start-up #878 (Frederik Deweerdt)
    - [core] spawn the configured number of DNS client threads #880 (Sean McArthur)
    - [access-log] add directive for logging protocol-specific values #801 (Kazuho Oku)
    - [access-log][fastcgi][mruby] per-request environment variables #868 (Kazuho Oku)
    - [access-log] fix memory leak during start-up #864 (Frederik Deweerdt)
    - [compress] on-the-fly compression using brotli, as well as directives to tune the compression parameters #802, #924 (Kazuho Oku, Frederik Deweerdt)
    - [compress][expires] refrain from setting redundant cache-control tokens #846 (Kazuho Oku)
    - [file] file.file directive for mapping specific file #822 (Kazuho Oku)
    - [file] send-compress directive (renamed from send-gzip) to support pre-compressed files using brotli #802 (Kazuho Oku)
    - [file] cache open failures #836 (Kazuho Oku)
    - [http2] support for nopush attribute in the link rel=preload header #863 (Satoh Hiroh)
    - [http2] support for push after delegation #866 (Kazuho Oku)
    - [http2] ignore push indications made by a pushed response #897 (Kazuho Oku)
    - [http2] accept capacity-bits attribute of the http2-casper configuration directive #882 (Satoh Hiroh)
    - [http2] avoid memcpy during HPACK huffman encoding #749 (Kazuho Oku)
    - [http2] fix potential stall when http2-max-concurrent-requests-per-connection is set to a small number #912 (Kazuho Oku)
    - [http2] refuse push a single resource more than once #903 (Kazuho Oku)
    - [http2] fix assertion failure when receiving more data than expected during upgrade #922 (Frederik Deweerdt)
    - [mruby] add $H2O_ROOT/share/h2o/mruby to the default load path #851 (Kazuho Oku)
    - [proxy] add support for HTTPS #875 (Kazuho Oku)
    - [proxy] add an configuration option to pass through x-forwarded-proto request header #883 (Kazuho Oku)
    - [proxy] log error when upstream connection is unexpectedly closed #895 (Frederik Deweerdt)
    - [ssl] update libressl to 2.2.7 #898 (Kazuho Oku)
    - [ssl] support ECDH curves other than P-256 #841 (Kazuho Oku)
    - [ssl] add support for text-based memcache protocol #854 (Kazuho Oku)
    - [ssl] fix memory leak when using TLS resumption with the memcached backend #856 (Kazuho Oku)
    - [ssl] fix "undefined subroutine" error in the OCSP updater #872 (Masayuki Matsuki)
    - [ssl] cap the number of OCSP updaters running concurrently #891 (Kazuho Oku)
    - [ssl] fix use-after-free when using session resumption with memcached backend #923 (Frederik Deweerdt)
    - [libh2o] add API for obtaining the socket descriptor #886 (Frederik Deweerdt)
    - [libh2o] add API to selectively disable automated I/O on reads and writes #890 (Frederik Deweerdt)
    - [libh2o] bugfix: h2o_mem_swap swaps only the first 256 bytes #924 (Frederik Deweerdt)
    - [status] introduce the status handler #848 (Kazuho Oku)
    - [misc] install examples #850 (James Rouzier


author: AIZAWA Hina <hina@bouhime.com> - 2.0.1-1
changelog:
  - Update to 2.0.1
    - [fastcgi] fix internal server error when PHP returns a huge header #958 (Kazuho Oku)
    - [http2] recognize link header containing multiple links #950 (Frederik Deweerdt)
    - [libh2o] fix resource leaks upon startup failure #936 (David CARLIER)
    - [libh2o] do not require linking to libbrotli externally #941 (Kazuho Oku)


author: AIZAWA Hina <hina@bouhime.com> - 2.1.0-0.beta1.1
changelog:
  - Update to 2.1.0-beta1
    - [http2][proxy] recognize link rel=preload headers in interim response as a trigger to push resources #916 (Kazuho Oku)
    - [http2] add http2-push-preload directive to turn off H2 push being initiated by link rel=preload header #929 (Kazuho Oku)
    - [http2][experimental] add feedback-based latency optimization mode #873 (Kazuho Oku)
    - [status] collect and report HTTP statistics #893 (Frederik Deweerdt)
    - [throttle] add new handler for throttling the response bandwidth #917 (Justin Zhu)
    - [misc] provide crash-handler directive to customize crash logging #935 (Frederik Deweerdt)
    - [libh2o] provide h2o_rand that calls the appropriate random function depending on the OS #927 (David CARLIER)
    - [libh2o] do not require use of picohttpparser.h when using the HTTP/1 client #946 (Kazuho Oku)


author: AIZAWA Hina <hina@bouhime.com> - 2.1.0-0.beta2.1
changelog:
  - Update to 2.1.0-beta2
   - [core] accept sequence of mappings for path-level configuration #1042 (Ichito Nagata)
   - [core] provide tag to include other YAML files from the configuration file #1022 (Ichito Nagata)
   - [fastcgi] setenv should displace HTTP headers #996 (Kazuho Oku)
   - [file] don't use readdir_r on Linux, Solaris #1046 #1052 (Frederik Deweerdt, Kazuho Oku)
   - [http1][http2] validate characters used in the headers #974 $1044 (Frederik Deweerdt, Kazuho Oku)
   - [http1][http2] notify error downstream when an error occurred while generating a response #1031 (Frederik Deweerdt)
   - [http2] add support for cache-digest header #967 #988 (Kazuho Oku)
   - [http2] add support for H2 debug state #1019 (Ichito Nagata)
   - [http2] fix buffer overrun #972 (Frederik Deweerdt)
   - [http2] drop host header in HTTP/2 layer #973 #998 (Frederik Deweerdt, Kazuho Oku)
   - [http2] fix assertion failure: sock->super._cb.write != ((void *)0)' failed #873 #966 #976 (Kazuho Oku)
   - [http2] don't use etag for calculating casper cookie #986 (Kazuho Oku)
   - [http2] fix negative error code sent when cancelling a pushed stream #1039 (Frederik Deweerdt)
   - [http2] fix a bug that may cause a stream to stall #1040 (Frederik Deweerdt)
   - [http2] fix a bug that reset the stream when receiving HEADERS after PRIORITY #1043 (Frederik Deweerdt)
   - [mruby] add dos_detector mruby handler #1013 (Ichito Nagata)
   - [mruby] add DSL for access control lists (acl) #1016 (Ichito Nagata)
   - [mruby] add library for address-block-based access control #1038 (Ichito Nagata)
   - [mruby] share mruby state and constants between handlers #1032 (Ichito Nagata)
   - [mruby] fix mruby handler becoming unusable after failed connection in http_request on FreeBSD #1062 (Kazuho Oku)
   - [proxy] add an option to prevent emiting x-forwarded-* headers #999 (Frederik Deweerdt)
   - [proxy] add an option to connect to upstream using PROXY protocol #930 (Kazuho Oku)
   - [proxy] don't escape : in URI path #977 (Frederik Deweerdt)
   - [proxy] preserve received URLs as much as possible #985 (Frederik Deweerdt)
   - [ssl] set add_lock callback to prevent unnecessary lock-add-unlock #983 (Roberto Guimaraes)
   - [ssl] add support for OpenSSL 1.1.0 #1064 (Kazuho Oku)
   - [status] report additional stats when jemalloc is used #1017 (Frederik Deweerdt)
   - [misc] guess the default location of h2o.conf #969 (Davsid Carlier)
   - [misc] fix build error when libuv is not found #1008 (nextgenthemes)
   - [misc] fix assertion failure when YAML alias and merge is used in certain way #1011 (Kazuho Oku)
   - [misc] allow to disable libuv even when it is found #995 (Frederik Deweerdt)


author: AIZAWA Hina <hina@bouhime.com> - 2.1.0-0.beta3.1
changelog:
  - Update to 2.1.0-beta3
   - [security fix][core] fix DoS attack vector CVE-2016-4864 #1077 (Frederik Deweerdt, Kazuho Oku)
   - [core] enable TCP latency optimization by default #873 #1076 (Kazuho Oku)
   - [core] fix broken support for TCP Fast Open in OS X #1065 (Ichito Nagata)
   - [access-log] provide directive to emit request-level errors #1075 (Kazuho Oku)
   - [proxy] cache TLS session used for upstream connections #1053 (Ichito Nagata)
   - [proxy] escape NUL when rebuilding an URL #985 (Frederik Deweerdt)
   - [misc] add font/woff2 to the default mime-type mapping #1066 (Andy Davies)
   - [misc] mark JavaScript and JSON files as compressible by default #1067 (Kazuho Oku)
   - [libh2o] fix crash on connect timeout #960 (disigma)


author: AIZAWA Hina <hina@bouhime.com> - 2.1.0-0.beta4.1
changelog:
  - Update to 2.1.0-beta4
    - [security fix] fix use-after-free vulnerability CVE-2016-7835 #1144 (Frederik Deweerdt, Kazuho Oku)
    - [core] fix busy loop after receiving SIGTERM (linux) #1100 (Kazuho Oku, Frederik Deweerdt)
    - [core] don't try to register kevent changes more than once (*BSD, OS X) #1113 (Ichito Nagata)
    - [compress] set vary: accept-encoding upon negotiation failure of the compression method #1083 (Frederik Deweerdt)
    - [fastcgi] fix connection failure when fastcgi.spawn is used with an uid #1119 (Kazuho Oku)
    - [file] more pre-defined MIME types #1103 (Joe Duarte)
    - [file] add missing </ul> #1106 (Kazuho Oku)
    - [http2] fix a bug that left connections open #1090 (Kazuho Oku)
    - [http2] ignore PRIORITY frames that reference closed pushed streams #1105 (Frederik Deweerdt)
    - [http2] add Secure attribute to the casper cookie #1134 (Kazuho Oku)
    - [http2] permit use of HEADERS with a smaller stream ID than a preceding PRIORITY #1136 (Frederik Deweerdt, Kazuho Oku)
    - [mruby] update mruby to HEAD #1135 (Kazuho Oku)
    - [proxy] set content-length: 0 when receiving a zero-byte POST or PUT #1080 (Frederik Deweerdt)
    - [proxy] turn on/off on-the-fly compression based on the x-compress-hint header #1085 (Frederik Deweerdt)
    - ~~[ssl] update libressl to 2.4.4 #1127 (Kazuho Oku)~~
    - [ssl] erase OCSP stapling data when the stapling updater returns a permanent failure #1117 (Kazuho Oku)
    - [libh2o] install library files to the correct location #1116 (Frederik Deweerdt)


