nghttp3 v1.15.0

What's Changed

• Add nghttp3_conn_submit_request2 to set client-side scheduling hint by @tatsuhiro-t in #448
• Make client-side scheduling incremental by default by @tatsuhiro-t in #449
• Remove nghttp3_conn_submit_request2 by @tatsuhiro-t in #450
• Introduce nghttp3_strlen_lit by @tatsuhiro-t in #451
• ksl: Port ngtcp2 changes by @tatsuhiro-t in #452
• Move aux objects into the individual frames by @tatsuhiro-t in #453
• Add const to nghttp3_frame_settings.local_settings by @tatsuhiro-t in #454

Full Changelog: v1.14.0...v1.15.0

nghttp3 v1.14.0

What's Changed

• Fix header name validation on a platform where char is unsigned by @tatsuhiro-t in #414
• GHA: Add ubuntu-24.04-arm builds by @tatsuhiro-t in #415
• nghttp3_http: Use int8_t for the lookup tables consistently by @tatsuhiro-t in #416
• Bump munit by @tatsuhiro-t in #417
• Bump actions/checkout from 5 to 6 by @dependabot[bot] in #419
• More use of designated initializers by @tatsuhiro-t in #420
• GHA: Specify ubuntu-arm in include by @tatsuhiro-t in #421
• GHA: Simplify build matrix with includes by @tatsuhiro-t in #422
• Rework nghttp3_frame union to avoid potential UB by @tatsuhiro-t in #427
• tests: Refactor by @tatsuhiro-t in #428
• Rewrite nghttp3_get_varint by @tatsuhiro-t in #429
• Port ngtcp2_ksl changes by @tatsuhiro-t in #430
• Bump sfparse by @tatsuhiro-t in #431
• Add nghttp3_recv_settings2 and deprecate nghttp3_recv_settings by @tatsuhiro-t in #432
• fuzz: Add new callbacks by @tatsuhiro-t in #433
• tnode: Remove unused num_children by @tatsuhiro-t in #434
• Refactor with compound literals by @tatsuhiro-t in #435
• stream: Simplify settings entry assignment by @tatsuhiro-t in #436
• Port ngtcp2 changes by @tatsuhiro-t in #437
• Fix ENABLE_CONNECT_PROTOCOL setting handling by @tatsuhiro-t in #440
• datalen must not be zero by @tatsuhiro-t in #441
• Fix missing error handling by @tatsuhiro-t in #443
• Remove unused tx.hstate from nghttp3_stream by @tatsuhiro-t in #444
• Clarify field size limits by @tatsuhiro-t in #445
• Bump sfparse by @tatsuhiro-t in #446

Full Changelog: v1.13.0...v1.14.0

nghttp3 v1.13.1

What's Changed

• Fix header name validation on a platform where char is unsigned by @tatsuhiro-t in #414

Full Changelog: v1.13.0...v1.13.1

nghttp3 v1.13.0

What's Changed

• Remove redundant casts by @tatsuhiro-t in #395
• Revert #395 partially by @tatsuhiro-t in #396
• Remove redundant semicolon by @tatsuhiro-t in #397
• Fix typo in mkstatichdtbl.py documentation comment by @Copilot in #398
• Replace POPCNT-based ispow2 with portable bitwise implementation to prevent illegal instruction crashes by @mk185147 in #400
• Port ngtcp2_map changes by @tatsuhiro-t in #401
• doc: Recommend specifying rand callback by @tatsuhiro-t in #402
• Port ngtcp2_map changes by @tatsuhiro-t in #403
• Port ngtcp2_ksl changes by @tatsuhiro-t in #404
• qpack: Optimize huffman decoding a bit by @tatsuhiro-t in #406
• Remove unused enum values from nghttp3_stream_http_state by @Copilot in #405
• Qpack indexing strategy by @tatsuhiro-t in #407
• mkhufftbl.py: Add the missing flags by @tatsuhiro-t in #408
• GHA: Cancel stale job by @tatsuhiro-t in #410
• nghttp3_http: Define tables with designated initializers by @tatsuhiro-t in #411

New Contributors

• @Copilot made their first contribution in #398
• @mk185147 made their first contribution in #400

Full Changelog: v1.12.0...v1.13.0

nghttp3 v1.12.0

What's Changed

• Bump actions/checkout from 4 to 5 by @dependabot[bot] in #382
• Clang 19 by @tatsuhiro-t in #383
• Bump actions/stale from 9 to 10 by @dependabot[bot] in #384
• Bump actions/github-script from 7 to 8 by @dependabot[bot] in #385
• Delete a stream that is blocked by QPACK on QUIC stream closure by @tatsuhiro-t in #386
• cmake: do not require C++ for lib-only builds by @vszakats in #387
• Introduce time by @tatsuhiro-t in #388
• Add glitch protection by @tatsuhiro-t in #389
• Use nghttp3_conn_read_stream2 solely by @tatsuhiro-t in #390
• tests: Fix type of padding for nghttp3_settings_entry by @tatsuhiro-t in #391
• Remove nghttp3_settings.initial_ts by @tatsuhiro-t in #392
• Fix macro comment by @tatsuhiro-t in #393

Full Changelog: v1.11.0...v1.12.0

nghttp3 v1.11.0

What's Changed

• Revert "Tighten up :path validation" by @tatsuhiro-t in #363
• Implement RFC 9412 ORIGIN frame by @tatsuhiro-t in #365
• Clarify the life time of the object pointed by origin_list by @tatsuhiro-t in #366
• Update doc by @tatsuhiro-t in #367
• Port ngtcp2 map changes by @tatsuhiro-t in #369
• Treat malformed HTTP message as a connection error by @tatsuhiro-t in #370
• Map seed by @tatsuhiro-t in #371
• Add nghttp3_qpack_encoder_new2 by @tatsuhiro-t in #372
• Make nghttp3_rand accept uint8_t buffer by @tatsuhiro-t in #373
• Origin changes by @tatsuhiro-t in #375
• No need to zero-clear frent by @tatsuhiro-t in #377
• Use compound literals instead of filling with zeros by @tatsuhiro-t in #378
• Make macros static inline functions by @tatsuhiro-t in #379
• Remove length from nghttp3_frame by @tatsuhiro-t in #380

Full Changelog: v1.10.0...v1.11.0

nghttp3 v1.10.1

What's Changed

• Revert "Tighten up :path validation" by @tatsuhiro-t in #363

Full Changelog: v1.10.0...v1.10.1

nghttp3 v1.10.0

What's Changed

• Add tests for reading a control stream by @tatsuhiro-t in #356
• fuzz: Fuzz http3 with 1 byte input by @tatsuhiro-t in #357
• tests: Reset buffer before each test as part of initialization by @tatsuhiro-t in #358
• Tighten up :path validation by @tatsuhiro-t in #359

Full Changelog: v1.9.0...v1.10.0

nghttp3 v1.9.0

What's Changed

• Remove unused nghttp3_pq_each by @tatsuhiro-t in #327
• Add tests by @tatsuhiro-t in #330
• Simplify tests with helper functions by @tatsuhiro-t in #331
• Add a CMake option to support disabling the popcnt instruction by @BombaxCeiba in #325
• clang-format by @tatsuhiro-t in #332
• Amend #330 by @tatsuhiro-t in #333
• nghttp3_stream_update_ack_offset: Remove unreachable code by @tatsuhiro-t in #334
• Simplify by @tatsuhiro-t in #335
• Remove outq_offset from nghttp3_stream by @tatsuhiro-t in #336
• Add tests by @tatsuhiro-t in #337
• Amend #337 removing unnecessary casts by @tatsuhiro-t in #338
• Do not ack 0-byte vector with fin which has not been handed out by @tatsuhiro-t in #339
• Add tests for rx http state by @tatsuhiro-t in #340
• Assertions fix by @tatsuhiro-t in #341
• Set initial rx http state on stream creation by @tatsuhiro-t in #342
• Fix fuzzer failure by @tatsuhiro-t in #343
• examples: Add missing defined() in comment by @tatsuhiro-t in #344
• Add more HTTP header related tests by @tatsuhiro-t in #345
• Add a test for server push by @tatsuhiro-t in #348
• tests: Share nva by @tatsuhiro-t in #349
• Add security policy by @tatsuhiro-t in #350
• Add tests for nghttp3_conn_submit_info by @tatsuhiro-t in #351
• Amend #349 by @tatsuhiro-t in #352
• Read varint by @tatsuhiro-t in #353
• GHA: Replace macos-13 with macos-15 by @tatsuhiro-t in #354

New Contributors

• @BombaxCeiba made their first contribution in #325

Full Changelog: v1.8.0...v1.9.0

nghttp3 v1.8.0

What's Changed

• C99 designated initializers by @tatsuhiro-t in #283
• Use FuzzedDataProvider in fuzz_http3serverreq by @amirlivneh in #285
• Explicitly deny new server-initiated bidirectional stream by @tatsuhiro-t in #286
• Assert settings by @amirlivneh in #287
• Generate periodic fuzzing coverage reports by @amirlivneh in #288
• clang-format by @amirlivneh in #290
• nghttp3_gaptr: Check iterator by @tatsuhiro-t in #291
• Revert "nghttp3_gaptr: Check iterator" by @tatsuhiro-t in #292
• fuzz: Make stream_id non-negative integer by @tatsuhiro-t in #293
• nghttp3_gaptr: Assert !nghttp3_ksl_it_end by @tatsuhiro-t in #294
• Assert stream_id range in public API by @tatsuhiro-t in #295
• Fuzz settings in fuzz_http3serverreq by @amirlivneh in #289
• Fix fuzzer build by @tatsuhiro-t in #297
• fuzz: Exercise callback failure handling by @amirlivneh in #296
• Rewrite fuzz_qpackdecoder with FuzzedDataProvider by @tatsuhiro-t in #299
• fuzz: Exercise sending response headers by @amirlivneh in #298
• fuzz: Exercise memory allocation failures by @amirlivneh in #300
• Fix null dereference by @tatsuhiro-t in #301
• fuzz_qpackdecoder: Fuzz memory allocator by @tatsuhiro-t in #302
• qpack: Lazy ring buffer allocation by @tatsuhiro-t in #303
• Fix typo in nghttp3.h by @amirlivneh in #304
• fuzz_http3serverreq: Fuzz max_client_streams_bidi by @amirlivneh in #305
• fuzz_http3serverreq: Fuzz stream priority by @amirlivneh in #306
• clang-format by @tatsuhiro-t in #307
• Bump munit by @tatsuhiro-t in #308
• fuzz_http3serverreq: Read multiple times before sending data by @amirlivneh in #309
• fuzz_http3serverreq: Don't generate server unidirectional stream ID by @amirlivneh in #310
• Assert incoming stream ID type by @tatsuhiro-t in #311
• fuzz: More like a C++ source by @tatsuhiro-t in #312
• fuzz: Pass FuzzedDataProvider by reference by @amirlivneh in #313
• fuzz: Fuzz connection shutdown by @amirlivneh in #314
• fuzz_http3serverreq: Fuzz stream shutdown by @amirlivneh in #315
• Remove redundant condition in nghttp3_conn_submit_request() by @amirlivneh in #316
• fuzz_http3serverreq: Fuzz client by @amirlivneh in #317
• Fix double free on out of memory by @tatsuhiro-t in #319
• fuzz_http3serverreq: Send requests by @amirlivneh in #318
• Avoid STOP_SENDING for unknown stream type in case fin is set. by @moritzbuhl in #320
• fuzz: Submit response if nghttp3_conn is server by @tatsuhiro-t in #321

New Contributors

• @moritzbuhl made their first contribution in #320

Full Changelog: v1.7.0...v1.8.0