- lib: Fix memory leak of nghttp2_stream object in server side nghttp2_session object
- Fix issues found by PVS Studio (Patch from Alexis La Goutte) (GH-769)
- doc: Update README file to write about the issue of Alpine Linux's inability to replace malloc (Patch from makovich) (GH-768)
- build: Compile with Android NDK r13b using clang
- src: Fix assertion error with boringssl
- nghttp: Take into account scheme and port when parsing HTML links
- nghttp: Fix authority for --get-assets if IP address is used in conjunction with user-defined :authority header (Patch from Benedikt Christoph Wolters) (GH-783)
- nghttpx: Add --accesslog-write-early option (GH-777)
- nghttpx: Fix access.log timestamp (GH-778)
- nghttpx: Show default cipher list in -h
- nghttpx: Add client-ciphers option
- nghttpx: Add client-no-http2-cipher-black-list option
- nghttpx: Fix the bug that no-http2-cipher-black-list does not work on backend HTTP/2 connections.
- nghttpx: Add --client-psk-secret option to enable PSK in backend (GH-612)
- nghttpx: Add --psk-secret option to enable PSK in frontend connection (GH-612)
- nghttpx: Enable SCT with OpenSSL 1.1.0
- nghttpx: Add proxyproto to frontend option to accept PROXY protocol (GH-765)
- h2load: Show default cipher list in -h
- h2load: Show custom server temp key such as X25519
- h2load: Fix incorrect return value from spdylay_send_callback