nginx

nginx-1.31.5 mainline version has been released, featuring control API, predicate locations, and the ngx_http_json_module.

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• FastCGI, uWSGI: support for multibyte parameter name lengths by @VadimZhestikov in https://github.com/nginx/nginx/pull/1648
• Added client_body_early_read directive by @arut in https://github.com/nginx/nginx/pull/1641
• Added the json parser module. by @roman-f5 in https://github.com/nginx/nginx/pull/1642
• Core: make channel file descriptor receive errors non-fatal by @arut in https://github.com/nginx/nginx/pull/1662
• Memcached: respect the end marker in the maximum supported length by @VadimZhestikov in https://github.com/nginx/nginx/pull/1637
• QUIC: rejected CRYPTO frames received in 1-RTT packets by @VadimZhestikov in https://github.com/nginx/nginx/pull/1638
• Slice filter: overflow protection in slice range requests by @VadimZhestikov in https://github.com/nginx/nginx/pull/1639
• Event pipe: do not free buffers still used by the downstream by @route443 in https://github.com/nginx/nginx/pull/1664
• Predicate locations by @arut in https://github.com/nginx/nginx/pull/1633
• JSON: fixed overflow detection in length calculation by @dplotnikov-f5 in https://github.com/nginx/nginx/pull/1658
• NGINX Control API by @avahahn in https://github.com/nginx/nginx/pull/1626
• Updated OpenSSL and PCRE used for win32 builds by @arut in https://github.com/nginx/nginx/pull/1715
• nginx-1.31.5-RELEASE by @arut in https://github.com/nginx/nginx/pull/1714

New Contributors

• @route443 made their first contribution in https://github.com/nginx/nginx/pull/1664
• @avahahn made their first contribution in https://github.com/nginx/nginx/pull/1626

Full Changelog: https://github.com/nginx/nginx/compare/release-1.31.4...release-1.31.5

nginx-1.31.4 mainline version has been released.

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Xslt: xmlCreatePushParserCtxt() error handling by @VadimZhestikov in https://github.com/nginx/nginx/pull/1565
• Image filter: bounded size parser reads by received data by @VadimZhestikov in https://github.com/nginx/nginx/pull/1574
• Updated security policy report methods by @pluknet in https://github.com/nginx/nginx/pull/1586
• Autoindex: use temporary pool for directory entries by @Srujan-rai in https://github.com/nginx/nginx/pull/1311
• Perl: fixed $r->print() zero copy with mutable scalars by @devnexen in https://github.com/nginx/nginx/pull/1581
• Events: validate descriptor before FD_SET() by @sbhowmikf5 in https://github.com/nginx/nginx/pull/1598
• Format specifier fixes in error logging by @nishat-06 in https://github.com/nginx/nginx/pull/1592
• GH: restrict the mark_stale job to nginx/nginx by @aminvakil in https://github.com/nginx/nginx/pull/1605
• QUIC: apply stream flow control to RESET_STREAM final_size by @arut in https://github.com/nginx/nginx/pull/1612
• Script: improved compatibility of complex value codes by @bavshin-f5 in https://github.com/nginx/nginx/pull/1601
• gRPC: narrowed special handling of "trailer only" responses by @vinaykumar-1591 in https://github.com/nginx/nginx/pull/1591
• Fixed overflow detection in chunked parser by @pluknet in https://github.com/nginx/nginx/pull/1625
• Upstream: special handling of the "Host" header in HTTP and gRPC by @arut in https://github.com/nginx/nginx/pull/1593
• Upstream: reject zero WINDOW_UPDATE increments by @felix314159 in https://github.com/nginx/nginx/pull/1622
• Core: added data model and JSON serialization libraries by @hyuan-netizen in https://github.com/nginx/nginx/pull/1569
• Upstream: fixed MSVC compilation after dea68dbf126f by @VadimZhestikov in https://github.com/nginx/nginx/pull/1635
• Upstream: reserved padding in state structures. by @dplotnikov-f5 in https://github.com/nginx/nginx/pull/1631
• Stream: PROXY protocol version 2 upstream write support by @VadimZhestikov in https://github.com/nginx/nginx/pull/1204

New Contributors

• @Srujan-rai made their first contribution in https://github.com/nginx/nginx/pull/1311
• @nishat-06 made their first contribution in https://github.com/nginx/nginx/pull/1592
• @aminvakil made their first contribution in https://github.com/nginx/nginx/pull/1605
• @felix314159 made their first contribution in https://github.com/nginx/nginx/pull/1622

Full Changelog: https://github.com/nginx/nginx/compare/release-1.31.3...release-1.31.4

nginx-1.31.3 mainline version has been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005), and use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434).

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Configure: set cache line size for loongarch64 by @shankerwangmiao in https://github.com/nginx/nginx/pull/1489
• HTTP/2: fix overlapping memcpy in CONTINUATION frames by @wufengwind in https://github.com/nginx/nginx/pull/1486
• Add missing bounds check in ngx_{http,stream}_compile_complex_value() by @wufengwind in https://github.com/nginx/nginx/pull/1484
• Revert "HTTP/2: fixed overlapping memcpy in CONTINUATION frames" by @ac000 in https://github.com/nginx/nginx/pull/1517
• GH: explicitly set permissions in workflows by @ac000 in https://github.com/nginx/nginx/pull/1451
• Charset: disabled charset_map with utf-8 in the first column by @pluknet in https://github.com/nginx/nginx/pull/1523
• Upstream: Upgrade header processing by @vinaykumar-1591 in https://github.com/nginx/nginx/pull/1476
• Fix setting the IPV6_DONTFRAG socket option by @arut in https://github.com/nginx/nginx/pull/1544
• Xslt: disable loading of external entities by default by @VadimZhestikov in https://github.com/nginx/nginx/pull/1549
• SSL: fixed memory leak in ngx_ssl_get_ech_outer_server_name(). by @devnexen in https://github.com/nginx/nginx/pull/1471
• Fixing HTTP/2 issues by @hongzhidao in https://github.com/nginx/nginx/pull/1441
• Perl fixes by @pluknet in https://github.com/nginx/nginx/pull/1556
• Configure: include crypt.h for crypt() feature tests by @bavshin-f5 in https://github.com/nginx/nginx/pull/1552
• HTTP/2: Reject requests with pseudo-headers after headers by @nitin9977 in https://github.com/nginx/nginx/pull/1541
• Stream and HTTP: rcvbuf and sndbuf directives for upstream sockets by @patrikwl in https://github.com/nginx/nginx/pull/1298
• Tunnel body improvements by @arut in https://github.com/nginx/nginx/pull/1560
• Nginx 1.31.3 security fixes by @arut in https://github.com/nginx/nginx/pull/1561
• nginx-1.31.3-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1562

New Contributors

• @shankerwangmiao made their first contribution in https://github.com/nginx/nginx/pull/1489
• @wufengwind made their first contribution in https://github.com/nginx/nginx/pull/1486
• @vinaykumar-1591 made their first contribution in https://github.com/nginx/nginx/pull/1476
• @patrikwl made their first contribution in https://github.com/nginx/nginx/pull/1298

Full Changelog: https://github.com/nginx/nginx/compare/release-1.31.2...release-1.31.3

nginx-1.30.4 stable version has been released, with fixes for buffer overflow vulnerability when using map with regex (CVE-2026-42533), memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005), and use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434).

See official CHANGES-1.30 on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Nginx 1.30.4 by @arut in https://github.com/nginx/nginx/pull/1563

Full Changelog: https://github.com/nginx/nginx/compare/release-1.30.3...release-1.30.4

nginx-1.30.3 stable version has been released, with fixes for buffer overflow vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055), and buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-48142).

See official CHANGES-1.30 on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Nginx 1.30.3 with security fixes by @arut in https://github.com/nginx/nginx/pull/1475

Full Changelog: https://github.com/nginx/nginx/compare/release-1.30.2...release-1.30.3

nginx-1.31.2 mainline version has been released, with fixes for use-after-free vulnerability in the ngx_http_v3_module (CVE-2026-42530), buffer overflow vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055), and buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-48142).

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Use SipHash to speed up $request_id generation by @jimf5 in https://github.com/nginx/nginx/pull/1392
• SSL: add $ssl_sigalgs variable by @VadimZhestikov in https://github.com/nginx/nginx/pull/1361
• Xslt: fixed handle vsnprintf return value by @afonot in https://github.com/nginx/nginx/pull/747
• GH: remove the set-creation-date.yaml workflow by @ac000 in https://github.com/nginx/nginx/pull/1435
• Split clients: improved calculation of range boundaries by @pluknet in https://github.com/nginx/nginx/pull/1334
• Style by @pluknet in https://github.com/nginx/nginx/pull/1440
• GH: Fix the whitespace checker workflow by @ac000 in https://github.com/nginx/nginx/pull/1453
• Secure link: Compare hashes in constant time by @sbhowmikf5 in https://github.com/nginx/nginx/pull/1433
• Access log: Fix "request_length" format length by @nitin9977 in https://github.com/nginx/nginx/pull/1432
• Updated OpenSSL used for win32 builds by @pluknet in https://github.com/nginx/nginx/pull/1469
• Nginx 1.31.2 with security fixes (HTTP/2 proxy, grpc, HTTP/3, charset) by @arut in https://github.com/nginx/nginx/pull/1474

New Contributors

• @afonot made their first contribution in https://github.com/nginx/nginx/pull/747
• @sbhowmikf5 made their first contribution in https://github.com/nginx/nginx/pull/1433
• @nitin9977 made their first contribution in https://github.com/nginx/nginx/pull/1432

Full Changelog: https://github.com/nginx/nginx/compare/release-1.31.1...release-1.31.2

nginx-1.30.2 stable version has been released, with a fix for buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-9256).

See official CHANGES-1.30 on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• nginx-1.30.2-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1397

Full Changelog: https://github.com/nginx/nginx/compare/release-1.30.1...release-1.30.2

nginx-1.31.1 mainline version has been released, with a fix for buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-9256).

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Fix the set-creation-date.yaml workflow by @ac000 in https://github.com/nginx/nginx/pull/1353
• Mp4: avoid adding or comparing to null pointer by @arut in https://github.com/nginx/nginx/pull/1360
• HTTP/2: limit Content-Type and Location response header length by @arut in https://github.com/nginx/nginx/pull/1359
• Mail error path fixes by @arut in https://github.com/nginx/nginx/pull/1358
• Rewrite: harden escape flags control by @arut in https://github.com/nginx/nginx/pull/1381
• Rewrite: fix buffer overflow with overlapping captures by @arut in https://github.com/nginx/nginx/pull/1395
• nginx-1.31.1-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1396

Full Changelog: https://github.com/nginx/nginx/compare/release-1.31.0...release-1.31.1

nginx-1.30.1 stable version has been released with fixes for HTTP/2 request injection vulnerability in the ngx_http_proxy_module (CVE-2026-42926), buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-42945), buffer overread vulnerabilities in the ngx_http_scgi_module and ngx_http_uwsgi_module (CVE-2026-42946), buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-42934), address spoofing vulnerability in HTTP/3 (CVE-2026-40460), and use-after-free vulnerability in OCSP requests to resolver (CVE-2026-40701).

See official CHANGES-1.30 on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• nginx-1.30.1-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1351

Full Changelog: https://github.com/nginx/nginx/compare/release-1.30.0...release-1.30.1

nginx-1.31.0 mainline version has been released with fixes for HTTP/2 request injection vulnerability in the ngx_http_proxy_module (CVE-2026-42926), buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-42945), buffer overread vulnerabilities in the ngx_http_scgi_module and ngx_http_uwsgi_module (CVE-2026-42946), buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-42934), address spoofing vulnerability in HTTP/3 (CVE-2026-40460), and use-after-free vulnerability in OCSP requests to resolver (CVE-2026-40701). Additionally, the release features support for HTTP forward proxy and least_time load-balancing method.

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• GH: add a workflow to check for the 'version bump' commit by @ac000 in https://github.com/nginx/nginx/pull/1240
• Connection specific headers by @arut in https://github.com/nginx/nginx/pull/1257
• Updated OpenSSL used for win32 builds. by @pluknet in https://github.com/nginx/nginx/pull/1269
• SSL: logging level fixes. by @bavshin-f5 in https://github.com/nginx/nginx/pull/1258
• Changes in ngx_quic_cbs_recv_rcd() by @pluknet in https://github.com/nginx/nginx/pull/1279
• SSL: log SSL_R_RECORD_LAYER_FAILURE at info level by @Smeet23 in https://github.com/nginx/nginx/pull/1267
• Restrict duplicate TE headers in HTTP/2 and HTTP/3. by @arut in https://github.com/nginx/nginx/pull/1275
• HTTP/3: optimize encoder stream memory usage by @arut in https://github.com/nginx/nginx/pull/1274
• Stream: support ALPN for proxy_ssl upstream. by @VadimZhestikov in https://github.com/nginx/nginx/pull/1109
• Prevent Undefined Behaviour in memcpy(3) via ngx_init_cycle() by @ac000 in https://github.com/nginx/nginx/pull/1082
• GH: Add various bits of GitHub automation by @ac000 in https://github.com/nginx/nginx/pull/1172
• Configure: added synonym for the upstream sticky module option by @hyuan-netizen in https://github.com/nginx/nginx/pull/1292
• Stream: evaluate proxy_ssl_alpn once by @pluknet in https://github.com/nginx/nginx/pull/1304
• Request body: fixed empty body buffering special case. by @pluknet in https://github.com/nginx/nginx/pull/977
• Configure: fix gcc version detection in some corner cases by @ac000 in https://github.com/nginx/nginx/pull/1305
• Upstream: least_time load balancing for HTTP and stream. by @saikrishnakumarreddy in https://github.com/nginx/nginx/pull/1306
• Dav: improved path validation for COPY and MOVE operations by @saikrishnakumarreddy in https://github.com/nginx/nginx/pull/1307
• Proxy: fix keepalive for HTTP/2 when no body is specified by @arut in https://github.com/nginx/nginx/pull/1314
• GH: update the stale PR/issue workflow by @ac000 in https://github.com/nginx/nginx/pull/1315
• HTTP CONNECT proxy. by @arut in https://github.com/nginx/nginx/pull/707
• Reject HTTP CONNECT method with no port after colon by @pluknet in https://github.com/nginx/nginx/pull/1335
• GH: set new issues creation date by @ac000 in https://github.com/nginx/nginx/pull/1272
• nginx-1.31.0-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1350

New Contributors

• @Smeet23 made their first contribution in https://github.com/nginx/nginx/pull/1267
• @hyuan-netizen made their first contribution in https://github.com/nginx/nginx/pull/1292
• @saikrishnakumarreddy made their first contribution in https://github.com/nginx/nginx/pull/1306

Full Changelog: https://github.com/nginx/nginx/compare/release-1.29.8...release-1.31.0

nginx-1.30.0 stable version has been released, incorporating new features and bug fixes from the 1.29.x mainline branch — including Early Hints, HTTP/2 to backend and Encrypted ClientHello, sticky sessions support for upstreams, Multipath TCP support, the default proxy HTTP version set to HTTP/1.1 with keep-alive enabled, and more.

What's Changed

• Version bump 1.29.0 by @arut in https://github.com/nginx/nginx/pull/632
• QUIC: silence unknown/reserved transport param "info" messages. by @arut in https://github.com/nginx/nginx/pull/633
• Fixed -Wunterminated-string-initialization with gcc15. by @arut in https://github.com/nginx/nginx/pull/631
• HTTP/3: fixed NGX_HTTP_V3_VARLEN_INT_LEN value. by @arut in https://github.com/nginx/nginx/pull/640
• Win32: couple of platform detection fixes by @bavshin-f5 in https://github.com/nginx/nginx/pull/457
• QUIC: fixed a typo. by @nandsky in https://github.com/nginx/nginx/pull/638
• OpenSSL build fixes with various no-opt. by @pluknet in https://github.com/nginx/nginx/pull/634
• QUIC: fixed sending acknowledgments with limited congestion window. by @pluknet in https://github.com/nginx/nginx/pull/655
• QUIC: using QUIC API introduced in OpenSSL 3.5. by @pluknet in https://github.com/nginx/nginx/pull/646
• SSL: support loading keys via OSSL_STORE. by @bavshin-f5 in https://github.com/nginx/nginx/pull/436
• Core: added support for TCP keepalive parameters on macOS. by @pluknet in https://github.com/nginx/nginx/pull/709
• HTTP Early Hints by @arut in https://github.com/nginx/nginx/pull/326
• HTTP/3: indexed field line encoding for "103 Early Hints". by @pluknet in https://github.com/nginx/nginx/pull/746
• Use NULL instead of 0 as null pointer constant by @ac000 in https://github.com/nginx/nginx/pull/702
• Upstream: fixed reinit request with gRPC and Early Hints. by @pluknet in https://github.com/nginx/nginx/pull/750
• QUIC: disabled OpenSSL 3.5 QUIC API support by default. by @pluknet in https://github.com/nginx/nginx/pull/751
• nginx-1.29.0-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/752
• PCRE license fix for win32 zip by @pluknet in https://github.com/nginx/nginx/pull/753
• QUIC: adjusted OpenSSL 3.5 QUIC API feature test. by @pluknet in https://github.com/nginx/nginx/pull/749
• OPENSSL_VERSION_NUMBER fix for OpenSSL 3.0 by @pluknet in https://github.com/nginx/nginx/pull/775
• kqueue build fixes by @pluknet in https://github.com/nginx/nginx/pull/777
• HTTP/3: limited prefixed integers encoded length. by @pluknet in https://github.com/nginx/nginx/pull/124
• HTTP/3: fixed handling :authority and Host with port. by @arut in https://github.com/nginx/nginx/pull/772
• HTTP/2: fixed flushing early hints. by @arut in https://github.com/nginx/nginx/pull/808
• HTTP/2 fixes for ":authority" vs "Host" by @pluknet in https://github.com/nginx/nginx/pull/803
• Certificate compression by @pluknet in https://github.com/nginx/nginx/pull/788
• Auth basic: fixed file descriptor leak on memory allocation error. by @pluknet in https://github.com/nginx/nginx/pull/833
• smtp module fixes by @pluknet in https://github.com/nginx/nginx/pull/842
• Changes 1.29.1 by @pluknet in https://github.com/nginx/nginx/pull/843
• Added a previously missed changes entry in 1.29.1 relnotes. by @pluknet in https://github.com/nginx/nginx/pull/844
• Removed legacy charset directive from default config example. by @MohamedKarrab in https://github.com/nginx/nginx/pull/829
• QUIC: fixed ssl_reject_handshake error handling. by @pluknet in https://github.com/nginx/nginx/pull/889
• Updated link to xslscript. by @pluknet in https://github.com/nginx/nginx/pull/854
• Fixed inaccurate index directive error report by @willmafh in https://github.com/nginx/nginx/pull/881
• SNI: using ClientHello callback. by @pluknet in https://github.com/nginx/nginx/pull/562
• AWS-LC support changes by @pluknet in https://github.com/nginx/nginx/pull/848
• Upstream: overflow detection in Cache-Control delta-seconds. by @pluknet in https://github.com/nginx/nginx/pull/898
• Mail: xtext encoding (RFC 3461) in XCLIENT LOGIN. by @pluknet in https://github.com/nginx/nginx/pull/893
• Added F5 CLA workflow. by @Maryna-f5 in https://github.com/nginx/nginx/pull/908
• SSL: fixed "key values mismatch" with object cache inheritance. by @pluknet in https://github.com/nginx/nginx/pull/740
• nginx-1.29.2 changes by @pluknet in https://github.com/nginx/nginx/pull/919
• SSL: support for compressed server certificates with BoringSSL. by @pluknet in https://github.com/nginx/nginx/pull/823
• HTTP CONNECT infrastructure by @arut in https://github.com/nginx/nginx/pull/935
• Upstream: reset local address in case of error. by @arut in https://github.com/nginx/nginx/pull/942
• SSL: $ssl_sigalg, $ssl_client_sigalg. by @pluknet in https://github.com/nginx/nginx/pull/932
• Geo: the "volatile" parameter. by @dplotnikov-f5 in https://github.com/nginx/nginx/pull/943
• Inheritance control for add_header and add_trailer. by @arut in https://github.com/nginx/nginx/pull/918
• OCSP: fixed invalid type for the 'ssl_ocsp' directive. by @roman-f5 in https://github.com/nginx/nginx/pull/938
• Fixed compilation warnings on Windows after c93a0c48af87. by @arut in https://github.com/nginx/nginx/pull/954
• Modules compatibility: increased compat section size. by @arut in https://github.com/nginx/nginx/pull/952
• nginx-1.29.3 changes by @arut in https://github.com/nginx/nginx/pull/953
• Configure: ensure we get the "built by ..." line in nginx -V. by @ac000 in https://github.com/nginx/nginx/pull/905
• Adding support for pcre 10.47 by @thierryba in https://github.com/nginx/nginx/pull/963
• SSL: changed interface of ngx_ssl_set_client_hello_callback(). by @pluknet in https://github.com/nginx/nginx/pull/968
• SSL: fixed build with BoringSSL, broken by 38a701d88. by @pluknet in https://github.com/nginx/nginx/pull/972
• HTTP/2: extended guard for NULL buffer and zero length. by @pluknet in https://github.com/nginx/nginx/pull/978
• Validate host by @pluknet in https://github.com/nginx/nginx/pull/966
• Proxy: fixed segfault in URI change (issue #983). by @pluknet in https://github.com/nginx/nginx/pull/1004
• OpenSSL ECH integration by @sftcd in https://github.com/nginx/nginx/pull/840
• Update community health files by @alessfg in https://github.com/nginx/nginx/pull/727
• SSL: avoid warning when ECH is not configured and not supported. by @QirunGao in https://github.com/nginx/nginx/pull/1011
• Disabled bare LF in chunked transfer encoding. by @pluknet in https://github.com/nginx/nginx/pull/1016
• HTTP/2 to upstream by @hongzhidao in https://github.com/nginx/nginx/pull/771
• Quic: fixed segfault on handshake failure by @jeniksv in https://github.com/nginx/nginx/pull/1022
• nginx-1.29.4-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1023
• Fixed duplicate ids in the bug report template. by @bavshin-f5 in https://github.com/nginx/nginx/pull/1035
• SSL: logging level of the "ech_required" TLS alert. by @arut in https://github.com/nginx/nginx/pull/1038
• Win32: fixed C4319 warning with MSVC x86. by @bavshin-f5 in https://github.com/nginx/nginx/pull/1057
• Add a HTTP_HOST parameter to default_params. by @ac000 in https://github.com/nginx/nginx/pull/1031
• Year 2026. by @pluknet in https://github.com/nginx/nginx/pull/1076
• Range filter: reasonable limit on multiple ranges. by @pluknet in https://github.com/nginx/nginx/pull/1075
• Misc: moved documentation in generated ZIP archive. by @pluknet in https://github.com/nginx/nginx/pull/1078
• Docs: Clarify -t option behavior in nginx man page by @uhliarik in https://github.com/nginx/nginx/pull/1089
• Proxy v2 request body fixes. by @pluknet in https://github.com/nginx/nginx/pull/1058
• Updated OpenSSL and PCRE used for win32 builds. by @arut in https://github.com/nginx/nginx/pull/1111
• Upstream read before write by @arut in https://github.com/nginx/nginx/pull/1112
• nginx-1.29.5-RELEASE by @arut in https://github.com/nginx/nginx/pull/1113
• Version bump. by @arut in https://github.com/nginx/nginx/pull/1120
• Proxy: fixed HTTP/2 upstream with caching enabled. by @hongzhidao in https://github.com/nginx/nginx/pull/1119
• Fixed separator in parsing header lines with multiple values. by @VadimZhestikov in https://github.com/nginx/nginx/pull/1056
• SCGI: fixed passing CONTENT_LENGTH in unbuffered mode. by @pluknet in https://github.com/nginx/nginx/pull/1118
• Mp4: validate sync sample values in stss atom. by @CodeByMoriarty in https://github.com/nginx/nginx/pull/1147
• Resolver: fixed off-by-one read in ngx_resolver_copy(). by @arut in https://github.com/nginx/nginx/pull/1152
• QUIC Stateless Reset improvements by @pluknet in https://github.com/nginx/nginx/pull/1151
• QUIC: fixed bpf compilation with newer Linux kernels. by @arut in https://github.com/nginx/nginx/pull/215
• Updating welcome page with links and more details. by @buulam in https://github.com/nginx/nginx/pull/1138
• QUIC: worker-bound stateless reset tokens. by @arut in https://github.com/nginx/nginx/pull/1159
• QUIC: handle compat keylog callback errors by @lukefr09 in https://github.com/nginx/nginx/pull/1155
• Added an option to skip the F5 CLA workflow. by @alessfg in https://github.com/nginx/nginx/pull/1153
• IMAP bugfixes. by @pluknet in https://github.com/nginx/nginx/pull/1161
• Upstream: added sticky sessions support for upstreams. by @bavshin-f5 in https://github.com/nginx/nginx/pull/1167
• nginx-1.29.6 changes by @pluknet in https://github.com/nginx/nginx/pull/1177
• Version bump 1.29.7. by @arut in https://github.com/nginx/nginx/pull/1181
• Proxy authentication definitions. by @arut in https://github.com/nginx/nginx/pull/1178
• Proxy: reset pending control frames on HTTP/2 upstream reinit. by @devnexen in https://github.com/nginx/nginx/pull/1135
• gRPC: reset buffer chains on upstream reinit. by @devnexen in https://github.com/nginx/nginx/pull/1136
• Multipath TCP support by @pluknet in https://github.com/nginx/nginx/pull/931
• Logs: added COMPAT padding to ngx_log_t. by @dplotnikov-f5 in https://github.com/nginx/nginx/pull/1196
• Upstream keepalive: enabled keepalive module by default. by @roman-f5 in https://github.com/nginx/nginx/pull/1080
• Upstream keepalive: fixed parameter parsing. by @arut in https://github.com/nginx/nginx/pull/1207
• Mp4: avoid zero size buffers in output. by @arut in https://github.com/nginx/nginx/pull/1149
• Mp4: fixed possible integer overflow on 32-bit platforms. by @arut in https://github.com/nginx/nginx/pull/1209
• Dav: destination length validation for COPY and MOVE. by @arut in https://github.com/nginx/nginx/pull/1210
• Mail: host validation. by @arut in https://github.com/nginx/nginx/pull/1211
• Mail: fixed clearing s->passwd in auth http requests. by @arut in https://github.com/nginx/nginx/pull/1212
• Stream: fixed client certificate validation with OCSP. by @arut in https://github.com/nginx/nginx/pull/1213
• nginx-1.29.7-RELEASE by @arut in https://github.com/nginx/nginx/pull/1215
• Fixed the "include" directive inside the "geo" block. by @jimf5 in https://github.com/nginx/nginx/pull/1184
• SSL: compatibility with OpenSSL 4.0. by @pluknet in https://github.com/nginx/nginx/pull/1183
• Update CONTRIBUTING.md by @xuruidong in https://github.com/nginx/nginx/pull/1195
• Upstream: fixed processing multiple 103 (early hints) responses. by @pluknet in https://github.com/nginx/nginx/pull/1241
• Removed CLOCK_MONOTONIC_FAST support. by @jimf5 in https://github.com/nginx/nginx/pull/1243
• Upstream: fix integer underflow in charset parsing by @DavidKorczynski in https://github.com/nginx/nginx/pull/1170
• Added max_headers directive by @dekobon in https://github.com/nginx/nginx/pull/1116
• fix $request_port / $is_request_port being empty if auth_request is used by @Zoey2936 in https://github.com/nginx/nginx/pull/1248
• Upstream: reset early_hints_length on upstream reinit. by @devnexen in https://github.com/nginx/nginx/pull/1187
• nginx-1.29.8-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1252
• nginx-1.30.0-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1268

New Contributors

• @MohamedKarrab made their first contribution in https://github.com/nginx/nginx/pull/829
• @willmafh made their first contribution in https://github.com/nginx/nginx/pull/881
• @dplotnikov-f5 made their first contribution in https://github.com/nginx/nginx/pull/943
• @roman-f5 made their first contribution in https://github.com/nginx/nginx/pull/938
• @sftcd made their first contribution in https://github.com/nginx/nginx/pull/840
• @alessfg made their first contribution in https://github.com/nginx/nginx/pull/727
• @QirunGao made their first contribution in https://github.com/nginx/nginx/pull/1011
• @hongzhidao made their first contribution in https://github.com/nginx/nginx/pull/771
• @jeniksv made their first contribution in https://github.com/nginx/nginx/pull/1022
• @uhliarik made their first contribution in https://github.com/nginx/nginx/pull/1089
• @VadimZhestikov made their first contribution in https://github.com/nginx/nginx/pull/1056
• @CodeByMoriarty made their first contribution in https://github.com/nginx/nginx/pull/1147
• @buulam made their first contribution in https://github.com/nginx/nginx/pull/1138
• @lukefr09 made their first contribution in https://github.com/nginx/nginx/pull/1155
• @devnexen made their first contribution in https://github.com/nginx/nginx/pull/1135
• @jimf5 made their first contribution in https://github.com/nginx/nginx/pull/1184
• @xuruidong made their first contribution in https://github.com/nginx/nginx/pull/1195
• @DavidKorczynski made their first contribution in https://github.com/nginx/nginx/pull/1170
• @dekobon made their first contribution in https://github.com/nginx/nginx/pull/1116
• @Zoey2936 made their first contribution in https://github.com/nginx/nginx/pull/1248

Full Changelog: https://github.com/nginx/nginx/compare/release-1.28.3...release-1.30.0

nginx-1.29.8 mainline version has been released.

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Fixed the "include" directive inside the "geo" block. by @jimf5 in https://github.com/nginx/nginx/pull/1184
• SSL: compatibility with OpenSSL 4.0. by @pluknet in https://github.com/nginx/nginx/pull/1183
• Update CONTRIBUTING.md by @xuruidong in https://github.com/nginx/nginx/pull/1195
• Upstream: fixed processing multiple 103 (early hints) responses. by @pluknet in https://github.com/nginx/nginx/pull/1241
• Removed CLOCK_MONOTONIC_FAST support. by @jimf5 in https://github.com/nginx/nginx/pull/1243
• Upstream: fix integer underflow in charset parsing by @DavidKorczynski in https://github.com/nginx/nginx/pull/1170
• Added max_headers directive by @dekobon in https://github.com/nginx/nginx/pull/1116
• fix $request_port / $is_request_port being empty if auth_request is used by @Zoey2936 in https://github.com/nginx/nginx/pull/1248
• Upstream: reset early_hints_length on upstream reinit. by @devnexen in https://github.com/nginx/nginx/pull/1187
• nginx-1.29.8-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1252

New Contributors

• @jimf5 made their first contribution in https://github.com/nginx/nginx/pull/1184
• @xuruidong made their first contribution in https://github.com/nginx/nginx/pull/1195
• @DavidKorczynski made their first contribution in https://github.com/nginx/nginx/pull/1170
• @dekobon made their first contribution in https://github.com/nginx/nginx/pull/1116
• @Zoey2936 made their first contribution in https://github.com/nginx/nginx/pull/1248

Full Changelog: https://github.com/nginx/nginx/compare/release-1.29.7...release-1.29.8