This is a bug-fix release of 2.0 series, fixing following issues found in 2.0.1.

• [fastcgi] setenv should displace HTTP headers #996 (Kazuho Oku)
• [http2] fix buffer overrun #972 (Frederik Deweerdt)
• [misc] fix build error when libuv is not found #1008 (nextgenthemes)
• [misc] fix assertion failure when YAML alias and merge is used in certain way #1011 (Kazuho Oku)

This is a beta release for 2.1 series, including following new features.

• [http2][proxy] recognize link rel=preload headers in interim response as a trigger to push resources #916 (Kazuho Oku)
• [http2] add http2-push-preload directive to turn off H2 push being initiated by link rel=preload header #929 (Kazuho Oku)
• [http2][experimental] add feedback-based latency optimization mode #873 (Kazuho Oku)
• [status] collect and report HTTP statistics #893 (Frederik Deweerdt)
• [throttle] add new handler for throttling the response bandwidth #917 (Justin Zhu)
• [misc] provide crash-handler directive to customize crash logging #935 (Frederik Deweerdt)
• [libh2o] provide h2o_rand that calls the appropriate random function depending on the OS #927 (David CARLIER)
• [libh2o] do not require use of picohttpparser.h when using the HTTP/1 client #946 (Kazuho Oku)

This is a bug-fix release of 2.0 series, fixing following issues found in 2.0.0.

• [fastcgi] fix internal server error when PHP returns a huge header #958 (Kazuho Oku)
• [http2] recognize link header containing multiple links #950 (Frederik Deweerdt)
• [libh2o] fix resource leaks upon startup failure #936 (David CARLIER)
• [libh2o] do not require linking to libbrotli externally #941 (Kazuho Oku)

This is a major update release, with following changes (including new features and bug fixes) from 1.7.3.

• [core][breaking change] do not automatically append / to path-level configuration #820 (Kazuho Oku)
• [core] support << in configuration file #786 (Kazuho Oku)
• [core] configurable server: header #877 (Frederik Deweerdt)
• [core] add directive for customizing the path of temporary buffer files #911 (Kazuho Oku)
• [core] fix crash when receiving SIGTERM during start-up #878 (Frederik Deweerdt)
• [core] spawn the configured number of DNS client threads #880 (Sean McArthur)
• [access-log] add directive for logging protocol-specific values #801 (Kazuho Oku)
• [access-log][fastcgi][mruby] per-request environment variables #868 (Kazuho Oku)
• [access-log] fix memory leak during start-up #864 (Frederik Deweerdt)
• [compress] on-the-fly compression using brotli, as well as directives to tune the compression parameters #802, #924 (Kazuho Oku, Frederik Deweerdt)
• [compress][expires] refrain from setting redundant cache-control tokens #846 (Kazuho Oku)
• [file] file.file directive for mapping specific file #822 (Kazuho Oku)
• [file] send-compress directive (renamed from send-gzip) to support pre-compressed files using brotli #802 (Kazuho Oku)
• [file] cache open failures #836 (Kazuho Oku)
• [http2] support for nopush attribute in the link rel=preload header #863 (Satoh Hiroh)
• [http2] support for push after delegation #866 (Kazuho Oku)
• [http2] ignore push indications made by a pushed response #897 (Kazuho Oku)
• [http2] accept capacity-bits attribute of the http2-casper configuration directive #882 (Satoh Hiroh)
• [http2] avoid memcpy during HPACK huffman encoding #749 (Kazuho Oku)
• [http2] fix potential stall when http2-max-concurrent-requests-per-connection is set to a small number #912 (Kazuho Oku)
• [http2] refuse push a single resource more than once #903 (Kazuho Oku)
• [http2] fix assertion failure when receiving more data than expected during upgrade #922 (Frederik Deweerdt)
• [mruby] add $H2O_ROOT/share/h2o/mruby to the default load path #851 (Kazuho Oku)
• [proxy] add support for HTTPS #875 (Kazuho Oku)
• [proxy] add an configuration option to pass through x-forwarded-proto request header #883 (Kazuho Oku)
• [proxy] log error when upstream connection is unexpectedly closed #895 (Frederik Deweerdt)
• [ssl] update libressl to 2.2.7 #898 (Kazuho Oku)
• [ssl] support ECDH curves other than P-256 #841 (Kazuho Oku)
• [ssl] add support for text-based memcache protocol #854 (Kazuho Oku)
• [ssl] fix memory leak when using TLS resumption with the memcached backend #856 (Kazuho Oku)
• [ssl] fix "undefined subroutine" error in the OCSP updater #872 (Masayuki Matsuki)
• [ssl] cap the number of OCSP updaters running concurrently #891 (Kazuho Oku)
• [ssl] fix use-after-free when using session resumption with memcached backend #923 (Frederik Deweerdt)
• [libh2o] add API for obtaining the socket descriptor #886 (Frederik Deweerdt)
• [libh2o] add API to selectively disable automated I/O on reads and writes #890 (Frederik Deweerdt)
• [libh2o] bugfix: h2o_mem_swap swaps only the first 256 bytes #924 (Frederik Deweerdt)
• [status] introduce the status handler #848 (Kazuho Oku)
• [misc] install examples #850 (James Rouzier)

This is a new beta release for 2.0 series, including bug fixes and a security fix. Users of version 2.0.0-beta4 or earlier are encouraged to update to the latest version.

• [security fix][http2] fix use-after-free on premature connection close (CVE-2016-4817) #920 (Frederik Deweerdt)
• [core] fix SIGBUS when temporary disk space is full #910 (Kazuho Oku)
• [core] add directive for customizing the path of temporary buffer files #911 (Kazuho Oku)
• [http2] fix potential stall when http2-max-concurrent-requests-per-connection is set to a small number #912 (Kazuho Oku)
• [http2] refuse push a single resource more than once #903 (Kazuho Oku)
• [mruby] do not drop link header #913 (Kazuho Oku)
• [mruby] fix memory leak during initialization #906 (Frederik Deweerdt)
• [mruby] fix race condition in mruby regex handler #908 (Kazuho Oku)
• [libh2o] fix crash in h2o_url_stringify #918 (Kazuho OKu)

This is a new release for 1.7 series, including bug fixes and a security fix. Users of version 1.7.2 or earlier are encouraged to update to the latest version.

• [security fix][http2] fix use-after-free on premature connection close (CVE-2016-4817) #920 (Frederik Deweerdt)
• [core] fix SIGBUS when temporary disk space is full #910 (Kazuho Oku)
• [mruby] do not drop link header #913 (Kazuho Oku)
• [mruby] fix memory leak during initialization #906 (Frederik Deweerdt)
• [mruby] fix race condition in mruby regex handler #908 (Kazuho Oku)
• [libh2o] fix crash in h2o_url_stringify #918 (Kazuho OKu)

This is a beta release of the 2.0 series, fixing the following issue found in 2.0.0-beta3.

• [ssl] fix build issue on CentOS 7 (and others that have tolower defined as a macro) #901 (Kazuho Oku)

This is a beta release of the 2.0 series, with following changes including feature additions and bug fixes. The release also updates the bundled LibreSSL to 2.2.7 that includes a fix for CVE-2016-2107.

• [core] configurable server: header #877 (Frederik Deweerdt)
• [core] fix crash when receiving SIGTERM during start-up #878 (Frederik Deweerdt)
• [core] spawn the configured number of DNS client threads #880 (Sean McArthur)
• [access-log][fastcgi][mruby] per-request environment variables #868 (Kazuho Oku)
• [access-log] fix memory leak during start-up #864 (Frederik Deweerdt)
• [http2] support for nopush attribute in the link rel=preload header #863 (Satoh Hiroh)
• [http2] support for push after delegation #866 (Kazuho Oku)
• [http2] accept capacity-bits attribute of the http2-casper configuration directive #882 (Satoh Hiroh)
• [http2] ignore push indications made by a pushed response #897 (Kazuho Oku)
• [proxy] add support for HTTPS #875 (Kazuho Oku)
• [proxy] add an configuration option to pass through x-forwarded-proto request header #883 (Kazuho Oku)
• [proxy] log error when upstream connection is unexpectedly closed #895 (Frederik Deweerdt)
• [ssl] update libressl to 2.2.7 #898 (Kazuho Oku)
• [ssl] add support for text-based memcache protocol #854 (Kazuho Oku)
• [ssl] fix memory leak when using TLS resumption with the memcached backend #856 (Kazuho Oku)
• [ssl] fix "undefined subroutine" error in the OCSP updater #872 (Masayuki Matsuki)
• [ssl] cap the number of OCSP updaters running concurrently #891 (Kazuho Oku)
• [libh2o] add API for obtaining the socket descriptor #886 (Frederik Deweerdt)
• [libh2o] add API to selectively disable automated I/O on reads and writes #890 (Frederik Deweerdt)

This is a bug-fix release of 1.7 series, fixing following issues found in 1.7.1. The release also updates the bundled LibreSSL to 2.2.7 that includes a fix for CVE-2016-2107.

• [core] fix crash when receiving SIGTERM during start-up #878 (Frederik Deweerdt)
• [core] spawn the configured number of DNS client threads #880 (Sean McArthur)
• [http2] accept capacity-bits attribute of the http2-casper configuration directive #882 (Satoh Hiroh)
• [ssl] update libressl to 2.2.7 #898 (Kazuho Oku)
• [ssl] fix memory leak when using TLS resumption with the memcached backend #856 (Kazuho Oku)
• [ssl] fix "undefined subroutine" error in the OCSP updater #872 (Masayuki Matsuki)

This is a beta release of the 2.0 series, with following changes including feature additions and bug fixes.

• [compress] fix potential SEGV when encoding brotli #849 (Kazuho Oku)
• [compress][expires] refrain from setting redundant cache-control tokens #846 (Kazuho Oku)
• [mruby] add $H2O_ROOT/share/h2o/mruby to the default load path #851 (Kazuho Oku)
• [status] introduce the status handler #848 (Kazuho Oku)
• [misc] install examples #850 (James Rouzier)