- lib: nghttp2_session: Allow for compiling library with -DNDEBUG set (Patch from Angus Gratton) (GH-919)
- lib: Treat incoming invalid regular header field as stream error (GH-900)
- lib: Call nghttp2_on_invalid_frame_callback if altsvc validation fails (GH-904)
- doc: spelling mistake in arguments to build nghttp apps (Patch from Soham Sinha) (GH-925)
- doc: Add notes for installation on linux systems (Patch from Tapanito) (GH-917)
- doc: Clarify the effect of nghttp2_option_set_no_http_messaging
- nghttpx: Verify OCSP response (GH-929)
- nghttpx: Fix certificate selection based on pub key algorithm (GH-924)
- nghttpx: Fix certificate indexing bug
- nghttpx: Run OCSP at startup (GH-922)
- nghttpx: Wildcard path matching (GH-914)
- nghttpx: Forward multiple via, xff, and xfp header fields (GH-903)
- nghttp: Add -y, --no-verify-peer option to suppress peer verify warn (GH-906)