# nginx changelog

> HTTP and reverse proxy server, mail proxy, and TCP/UDP proxy.

- Vendor: F5
- Category: Developer Tools
- Official site: https://nginx.org
- Tracked by: What's New (https://whatsnew.fyi/product/nginx)
- Harvested from: GitHub (nginx/nginx)
- Entries below: 10 (newest first)

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

## Releases

### release-1.31.3

- Date: 2026-07-15
- Version: release-1.31.3
- Original notes: https://github.com/nginx/nginx/releases/tag/release-1.31.3
- Permalink: https://whatsnew.fyi/product/nginx/releases/release-1.31.3

- **security** — Fix buffer overflow vulnerability when using map with regex (CVE-2026-42533)
- **security** — Fix memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005)
- **security** — Fix use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434)
- **fixed** — Fix overlapping memcpy in HTTP/2 CONTINUATION frames
- **fixed** — Add missing bounds check in ngx_http_compile_complex_value() and ngx_stream_compile_complex_value()
- **fixed** — Fix IPV6_DONTFRAG socket option setting
- **fixed** — Fix memory leak in ngx_ssl_get_ech_outer_server_name()
- **fixed** — Reject HTTP/2 requests with pseudo-headers after headers
- **changed** — Set cache line size for loongarch64 in configure
- **changed** — Disable charset_map with utf-8 in the first column
- **changed** — Improve upstream header processing
- **changed** — Disable loading of external entities by default in xslt module
- **changed** — Add rcvbuf and sndbuf directives for upstream sockets in stream and HTTP
- **changed** — Improve tunnel body handling
- **fixed** — Include crypt.h for crypt() feature tests in configure

[nginx-1.31.3](https://nginx.org/en/download.html) mainline version has been released, with fixes for [buffer overflow](https://nginx.org/en/security_advisories.html) vulnerability when using map with regex (CVE-2026-42533), [memory disclosure](https://nginx.org/en/security_advisories.html) vulnerability when using ngx_http_slice_module (CVE-2026-60005), and [use-after-free](https://nginx.org/en/security_advisories.html) vulnerability when using ngx_http_ssi_module (CVE-2026-56434).

See official [CHANGES](https://nginx.org/en/CHANGES) on nginx.org.

Below is a release summary generated by GitHub.

##### What's Changed
* Configure: set cache line size for loongarch64 by @shankerwangmiao in https://github.com/nginx/nginx/pull/1489
* HTTP/2: fix overlapping memcpy in CONTINUATION frames by @wufengwind in https://github.com/nginx/nginx/pull/1486
* Add missing bounds check in ngx_{http,stream}_compile_complex_value() by @wufengwind in https://github.com/nginx/nginx/pull/1484
* Revert "HTTP/2: fixed overlapping memcpy in CONTINUATION frames" by @ac000 in https://github.com/nginx/nginx/pull/1517
* GH: explicitly set permissions in workflows by @ac000 in https://github.com/nginx/nginx/pull/1451
* Charset: disabled charset_map with utf-8 in the first column by @pluknet in https://github.com/nginx/nginx/pull/1523
* Upstream: Upgrade header processing by @vinaykumar-1591 in https://github.com/nginx/nginx/pull/1476
* Fix setting the IPV6_DONTFRAG socket option by @arut in https://github.com/nginx/nginx/pull/1544
* Xslt: disable loading of external entities by default by @VadimZhestikov in https://github.com/nginx/nginx/pull/1549
* SSL: fixed memory leak in ngx_ssl_get_ech_outer_server_name(). by @devnexen in https://github.com/nginx/nginx/pull/1471
* Fixing HTTP/2 issues by @hongzhidao in https://github.com/nginx/nginx/pull/1441
* Perl fixes by @pluknet in https://github.com/nginx/nginx/pull/1556
* Configure: include crypt.h for crypt() feature tests by @bavshin-f5 in https://github.com/nginx/nginx/pull/1552
* HTTP/2: Reject requests with pseudo-headers after headers by @nitin9977 in https://github.com/nginx/nginx/pull/1541
* Stream and HTTP: rcvbuf and sndbuf directives for upstream sockets by @patrikwl in https://github.com/nginx/nginx/pull/1298
* Tunnel body improvements by @arut in https://github.com/nginx/nginx/pull/1560
* Nginx 1.31.3 security fixes by @arut in https://github.com/nginx/nginx/pull/1561
* nginx-1.31.3-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1562

##### New Contributors
* @shankerwangmiao made their first contribution in https://github.com/nginx/nginx/pull/1489
* @wufengwind made their first contribution in https://github.com/nginx/nginx/pull/1486
* @vinaykumar-1591 made their first contribution in https://github.com/nginx/nginx/pull/1476
* @patrikwl made their first contribution in https://github.com/nginx/nginx/pull/1298

**Full Changelog**: https://github.com/nginx/nginx/compare/release-1.31.2...release-1.31.3

### release-1.30.4

- Date: 2026-07-15
- Version: release-1.30.4
- Original notes: https://github.com/nginx/nginx/releases/tag/release-1.30.4
- Permalink: https://whatsnew.fyi/product/nginx/releases/release-1.30.4

- **security** — Fixed buffer overflow vulnerability when using map with regex (CVE-2026-42533)
- **security** — Fixed memory disclosure vulnerability when using ngx_http_slice_module (CVE-2026-60005)
- **security** — Fixed use-after-free vulnerability when using ngx_http_ssi_module (CVE-2026-56434)

[nginx-1.30.4](https://nginx.org/en/download.html) stable version has been released, with fixes for [buffer overflow](https://nginx.org/en/security_advisories.html) vulnerability when using map with regex (CVE-2026-42533), [memory disclosure](https://nginx.org/en/security_advisories.html) vulnerability when using ngx_http_slice_module (CVE-2026-60005), and [use-after-free](https://nginx.org/en/security_advisories.html) vulnerability when using ngx_http_ssi_module (CVE-2026-56434).

See official [CHANGES-1.30](https://nginx.org/en/CHANGES-1.30) on nginx.org.

Below is a release summary generated by GitHub.

##### What's Changed
* Nginx 1.30.4 by @arut in https://github.com/nginx/nginx/pull/1563


**Full Changelog**: https://github.com/nginx/nginx/compare/release-1.30.3...release-1.30.4

### release-1.30.3

- Date: 2026-06-17
- Version: release-1.30.3
- Original notes: https://github.com/nginx/nginx/releases/tag/release-1.30.3
- Permalink: https://whatsnew.fyi/product/nginx/releases/release-1.30.3

- **security** — Fixed buffer overflow vulnerability in ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055)
- **security** — Fixed buffer overread vulnerability in ngx_http_charset_module (CVE-2026-48142)

[nginx-1.30.3](https://nginx.org/en/download.html) stable version has been released, with fixes for [buffer overflow](https://nginx.org/en/security_advisories.html) vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055), and [buffer overread](https://nginx.org/en/security_advisories.html) vulnerability in the ngx_http_charset_module (CVE-2026-48142).

See official [CHANGES-1.30](https://nginx.org/en/CHANGES-1.30) on nginx.org.

Below is a release summary generated by GitHub.

##### What's Changed
* Nginx 1.30.3 with security fixes by @arut in https://github.com/nginx/nginx/pull/1475


**Full Changelog**: https://github.com/nginx/nginx/compare/release-1.30.2...release-1.30.3

### release-1.31.2

- Date: 2026-06-17
- Version: release-1.31.2
- Original notes: https://github.com/nginx/nginx/releases/tag/release-1.31.2
- Permalink: https://whatsnew.fyi/product/nginx/releases/release-1.31.2

- **security** — Fix use-after-free vulnerability in the ngx_http_v3_module (CVE-2026-42530)
- **security** — Fix buffer overflow vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055)
- **security** — Fix buffer overread vulnerability in the ngx_http_charset_module (CVE-2026-48142)
- **changed** — Use SipHash to speed up $request_id generation
- **added** — Add $ssl_sigalgs variable
- **fixed** — Fix handle vsnprintf return value in Xslt
- **changed** — Improve calculation of range boundaries in split clients
- **changed** — Compare hashes in constant time in secure link
- **fixed** — Fix request_length format length in access log
- **changed** — Update OpenSSL used for win32 builds

[nginx-1.31.2](https://nginx.org/en/download.html) mainline version has been released, with fixes for [use-after-free](https://nginx.org/en/security_advisories.html) vulnerability in the ngx_http_v3_module (CVE-2026-42530), [buffer overflow](https://nginx.org/en/security_advisories.html) vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module (CVE-2026-42055), and [buffer overread](https://nginx.org/en/security_advisories.html) vulnerability in the ngx_http_charset_module (CVE-2026-48142).

See official [CHANGES](https://nginx.org/en/CHANGES) on nginx.org.

Below is a release summary generated by GitHub.

##### What's Changed
* Use SipHash to speed up $request_id generation by @jimf5 in https://github.com/nginx/nginx/pull/1392
* SSL: add $ssl_sigalgs variable by @VadimZhestikov in https://github.com/nginx/nginx/pull/1361
* Xslt: fixed handle vsnprintf return value by @afonot in https://github.com/nginx/nginx/pull/747
* GH: remove the set-creation-date.yaml workflow by @ac000 in https://github.com/nginx/nginx/pull/1435
* Split clients: improved calculation of range boundaries by @pluknet in https://github.com/nginx/nginx/pull/1334
* Style by @pluknet in https://github.com/nginx/nginx/pull/1440
* GH: Fix the whitespace checker workflow by @ac000 in https://github.com/nginx/nginx/pull/1453
* Secure link: Compare hashes in constant time by @sbhowmikf5 in https://github.com/nginx/nginx/pull/1433
* Access log: Fix "request_length" format length by @nitin9977 in https://github.com/nginx/nginx/pull/1432
* Updated OpenSSL used for win32 builds by @pluknet in https://github.com/nginx/nginx/pull/1469
* Nginx 1.31.2 with security fixes (HTTP/2 proxy, grpc, HTTP/3, charset) by @arut in https://github.com/nginx/nginx/pull/1474

##### New Contributors
* @afonot made their first contribution in https://github.com/nginx/nginx/pull/747
* @sbhowmikf5 made their first contribution in https://github.com/nginx/nginx/pull/1433
* @nitin9977 made their first contribution in https://github.com/nginx/nginx/pull/1432

**Full Changelog**: https://github.com/nginx/nginx/compare/release-1.31.1...release-1.31.2

### release-1.30.2

- Date: 2026-05-22
- Version: release-1.30.2
- Original notes: https://github.com/nginx/nginx/releases/tag/release-1.30.2
- Permalink: https://whatsnew.fyi/product/nginx/releases/release-1.30.2

- **security** — Fix buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-9256)

[nginx-1.30.2](https://nginx.org/en/download.html) stable version has been released, with a fix for [buffer overflow](https://nginx.org/en/security_advisories.html) vulnerability in the ngx_http_rewrite_module (CVE-2026-9256).

See official [CHANGES-1.30](https://nginx.org/en/CHANGES-1.30) on nginx.org.

Below is a release summary generated by GitHub.

##### What's Changed
* nginx-1.30.2-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1397


**Full Changelog**: https://github.com/nginx/nginx/compare/release-1.30.1...release-1.30.2

### release-1.31.1

- Date: 2026-05-22
- Version: release-1.31.1
- Original notes: https://github.com/nginx/nginx/releases/tag/release-1.31.1
- Permalink: https://whatsnew.fyi/product/nginx/releases/release-1.31.1

- **security** — Fix buffer overflow vulnerability in the ngx_http_rewrite_module (CVE-2026-9256)
- **fixed** — Avoid adding or comparing to null pointer in mp4 module
- **changed** — Limit Content-Type and Location response header length in HTTP/2
- **fixed** — Fix mail error path handling
- **changed** — Harden escape flags control in rewrite module
- **fixed** — Fix buffer overflow with overlapping captures in rewrite module

[nginx-1.31.1](https://nginx.org/en/download.html) mainline version has been released, with a fix for [buffer overflow](https://nginx.org/en/security_advisories.html) vulnerability in the ngx_http_rewrite_module (CVE-2026-9256).

See official [CHANGES](https://nginx.org/en/CHANGES) on nginx.org.

Below is a release summary generated by GitHub.

##### What's Changed
* Fix the set-creation-date.yaml workflow by @ac000 in https://github.com/nginx/nginx/pull/1353
* Mp4: avoid adding or comparing to null pointer by @arut in https://github.com/nginx/nginx/pull/1360
* HTTP/2: limit Content-Type and Location response header length by @arut in https://github.com/nginx/nginx/pull/1359
* Mail error path fixes by @arut in https://github.com/nginx/nginx/pull/1358
* Rewrite: harden escape flags control by @arut in https://github.com/nginx/nginx/pull/1381
* Rewrite: fix buffer overflow with overlapping captures by @arut in https://github.com/nginx/nginx/pull/1395
* nginx-1.31.1-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1396


**Full Changelog**: https://github.com/nginx/nginx/compare/release-1.31.0...release-1.31.1

### release-1.30.1

- Date: 2026-05-13
- Version: release-1.30.1
- Original notes: https://github.com/nginx/nginx/releases/tag/release-1.30.1
- Permalink: https://whatsnew.fyi/product/nginx/releases/release-1.30.1

- **security** — Fixed HTTP/2 request injection vulnerability in the ngx_http_proxy_module
- **security** — Fixed buffer overflow vulnerability in the ngx_http_rewrite_module
- **security** — Fixed buffer overread vulnerabilities in the ngx_http_scgi_module and ngx_http_uwsgi_module
- **security** — Fixed buffer overread vulnerability in the ngx_http_charset_module
- **security** — Fixed address spoofing vulnerability in HTTP/3
- **security** — Fixed use-after-free vulnerability in OCSP requests to resolver

[nginx-1.30.1](https://nginx.org/en/download.html) stable version has been released with fixes for [HTTP/2 request injection](https://nginx.org/en/security_advisories.html) vulnerability in the ngx_http_proxy_module (CVE-2026-42926), [buffer overflow](https://nginx.org/en/security_advisories.html) vulnerability in the ngx_http_rewrite_module (CVE-2026-42945), [buffer overread](https://nginx.org/en/security_advisories.html) vulnerabilities in the ngx_http_scgi_module and ngx_http_uwsgi_module (CVE-2026-42946), [buffer overread](https://nginx.org/en/security_advisories.html) vulnerability in the ngx_http_charset_module (CVE-2026-42934), [address spoofing vulnerability in HTTP/3](https://nginx.org/en/security_advisories.html) (CVE-2026-40460), and [use-after-free](https://nginx.org/en/security_advisories.html) vulnerability in OCSP requests to resolver (CVE-2026-40701).

See official [CHANGES-1.30](https://nginx.org/en/CHANGES-1.30) on nginx.org.

Below is a release summary generated by GitHub.

##### What's Changed
* nginx-1.30.1-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1351


**Full Changelog**: https://github.com/nginx/nginx/compare/release-1.30.0...release-1.30.1

### release-1.31.0

- Date: 2026-05-13
- Version: release-1.31.0
- Original notes: https://github.com/nginx/nginx/releases/tag/release-1.31.0
- Permalink: https://whatsnew.fyi/product/nginx/releases/release-1.31.0

- **security** — Fix HTTP/2 request injection vulnerability in ngx_http_proxy_module (CVE-2026-42926)
- **security** — Fix buffer overflow vulnerability in ngx_http_rewrite_module (CVE-2026-42945)
- **security** — Fix buffer overread vulnerabilities in ngx_http_scgi_module and ngx_http_uwsgi_module (CVE-2026-42946)
- **security** — Fix buffer overread vulnerability in ngx_http_charset_module (CVE-2026-42934)
- **security** — Fix address spoofing vulnerability in HTTP/3 (CVE-2026-40460)
- **security** — Fix use-after-free vulnerability in OCSP requests to resolver (CVE-2026-40701)
- **added** — Add support for HTTP forward proxy
- **added** — Add least_time load-balancing method
- **added** — Add ALPN support for stream proxy_ssl upstream
- **changed** — Restrict duplicate TE headers in HTTP/2 and HTTP/3
- **changed** — Optimize HTTP/3 encoder stream memory usage
- **changed** — Improve path validation for DAV COPY and MOVE operations
- **changed** — Evaluate stream proxy_ssl_alpn once
- **changed** — Fix SSL logging level for SSL_R_RECORD_LAYER_FAILURE
- **fixed** — Fix empty body buffering special case in request body handling
- **fixed** — Fix keepalive for HTTP/2 proxy when no body is specified
- **fixed** — Fix gcc version detection in configure in some corner cases
- **fixed** — Reject HTTP CONNECT method with no port after colon
- **fixed** — Prevent undefined behaviour in memcpy via ngx_init_cycle
- **changed** — Add synonym for upstream sticky module configure option

[nginx-1.31.0](https://nginx.org/en/download.html) mainline version has been released with fixes for [HTTP/2 request injection](https://nginx.org/en/security_advisories.html) vulnerability in the ngx_http_proxy_module (CVE-2026-42926), [buffer overflow](https://nginx.org/en/security_advisories.html) vulnerability in the ngx_http_rewrite_module (CVE-2026-42945), [buffer overread](https://nginx.org/en/security_advisories.html) vulnerabilities in the ngx_http_scgi_module and ngx_http_uwsgi_module (CVE-2026-42946), [buffer overread](https://nginx.org/en/security_advisories.html) vulnerability in the ngx_http_charset_module (CVE-2026-42934), [address spoofing vulnerability in HTTP/3](https://nginx.org/en/security_advisories.html) (CVE-2026-40460), and [use-after-free](https://nginx.org/en/security_advisories.html) vulnerability in OCSP requests to resolver (CVE-2026-40701). Additionally, the release features support for HTTP [forward proxy](https://nginx.org/en/docs/http/ngx_http_tunnel_module.html) and [least_time](https://nginx.org/en/docs/http/ngx_http_upstream_module.html#least_time) load-balancing method.

See official [CHANGES](https://nginx.org/en/CHANGES) on nginx.org.

Below is a release summary generated by GitHub.

##### What's Changed
* GH: add a workflow to check for the 'version bump' commit by @ac000 in https://github.com/nginx/nginx/pull/1240
* Connection specific headers by @arut in https://github.com/nginx/nginx/pull/1257
* Updated OpenSSL used for win32 builds. by @pluknet in https://github.com/nginx/nginx/pull/1269
* SSL: logging level fixes. by @bavshin-f5 in https://github.com/nginx/nginx/pull/1258
* Changes in ngx_quic_cbs_recv_rcd() by @pluknet in https://github.com/nginx/nginx/pull/1279
* SSL: log SSL_R_RECORD_LAYER_FAILURE at info level by @Smeet23 in https://github.com/nginx/nginx/pull/1267
* Restrict duplicate TE headers in HTTP/2 and HTTP/3. by @arut in https://github.com/nginx/nginx/pull/1275
* HTTP/3: optimize encoder stream memory usage by @arut in https://github.com/nginx/nginx/pull/1274
* Stream: support ALPN for proxy_ssl upstream. by @VadimZhestikov in https://github.com/nginx/nginx/pull/1109
* Prevent Undefined Behaviour in memcpy(3) via ngx_init_cycle() by @ac000 in https://github.com/nginx/nginx/pull/1082
* GH: Add various bits of GitHub automation by @ac000 in https://github.com/nginx/nginx/pull/1172
* Configure: added synonym for the upstream sticky module option by @hyuan-netizen in https://github.com/nginx/nginx/pull/1292
* Stream: evaluate proxy_ssl_alpn once by @pluknet in https://github.com/nginx/nginx/pull/1304
* Request body: fixed empty body buffering special case. by @pluknet in https://github.com/nginx/nginx/pull/977
* Configure: fix gcc version detection in some corner cases by @ac000 in https://github.com/nginx/nginx/pull/1305
* Upstream: least_time load balancing for HTTP and stream. by @saikrishnakumarreddy in https://github.com/nginx/nginx/pull/1306
* Dav: improved path validation for COPY and MOVE operations by @saikrishnakumarreddy in https://github.com/nginx/nginx/pull/1307
* Proxy: fix keepalive for HTTP/2 when no body is specified by @arut in https://github.com/nginx/nginx/pull/1314
* GH: update the stale PR/issue workflow by @ac000 in https://github.com/nginx/nginx/pull/1315
* HTTP CONNECT proxy. by @arut in https://github.com/nginx/nginx/pull/707
* Reject HTTP CONNECT method with no port after colon by @pluknet in https://github.com/nginx/nginx/pull/1335
* GH: set new issues creation date by @ac000 in https://github.com/nginx/nginx/pull/1272
* nginx-1.31.0-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1350

##### New Contributors
* @Smeet23 made their first contribution in https://github.com/nginx/nginx/pull/1267
* @hyuan-netizen made their first contribution in https://github.com/nginx/nginx/pull/1292
* @saikrishnakumarreddy made their first contribution in https://github.com/nginx/nginx/pull/1306

**Full Changelog**: ht

_[Truncated at 4000 characters — full notes: https://github.com/nginx/nginx/releases/tag/release-1.31.0]_

### release-1.30.0

- Date: 2026-04-14
- Version: release-1.30.0
- Original notes: https://github.com/nginx/nginx/releases/tag/release-1.30.0
- Permalink: https://whatsnew.fyi/product/nginx/releases/release-1.30.0

- **added** — Support for HTTP Early Hints (103)
- **added** — Support for HTTP/2 to backend
- **added** — Support for Encrypted ClientHello
- **added** — Sticky sessions support for upstreams
- **added** — Multipath TCP support
- **added** — Support for loading keys via OSSL_STORE
- **added** — Support for TCP keepalive parameters on macOS
- **added** — HTTP/3 indexed field line encoding for 103 Early Hints
- **added** — Certificate compression
- **added** — Mail xtext encoding (RFC 3461) in XCLIENT LOGIN
- **added** — HTTP CONNECT infrastructure
- **added** — Variables $ssl_sigalg and $ssl_client_sigalg
- **added** — Volatile parameter for geo directive
- **added** — Inheritance control for add_header and add_trailer
- **changed** — Default proxy HTTP version set to HTTP/1.1 with keep-alive enabled
- **changed** — QUIC using QUIC API introduced in OpenSSL 3.5
- **changed** — SSL support for compressed server certificates with BoringSSL
- **fixed** — QUIC fixed sending acknowledgments with limited congestion window
- **fixed** — Auth basic file descriptor leak on memory allocation error
- **fixed** — SSL fixed key values mismatch with object cache inheritance

[nginx-1.30.0](https://nginx.org/en/download.html) stable version has been released, incorporating new features and bug fixes from the 1.29.x mainline branch  — including[ Early Hints](https://blog.nginx.org/blog/nginx-introduces-support-103-early-hints), HTTP/2 to backend and [Encrypted ClientHello](https://blog.nginx.org/blog/encrypted-client-hello-comes-to-nginx), [sticky sessions support for upstreams](https://nginx.org/en/docs/http/ngx_http_upstream_module.html#sticky), [Multipath TCP](https://nginx.org/en/docs/http/ngx_http_core_module.html#multipath) support, the default proxy HTTP version set to [HTTP/1.1 with keep-alive enabled](https://blog.nginx.org/blog/keep-alive-to-upstreams-is-now-default-in-nginx-1-29-7), and more.

##### What's Changed
* Version bump 1.29.0 by @arut in https://github.com/nginx/nginx/pull/632
* QUIC: silence unknown/reserved transport param "info" messages. by @arut in https://github.com/nginx/nginx/pull/633
* Fixed -Wunterminated-string-initialization with gcc15. by @arut in https://github.com/nginx/nginx/pull/631
* HTTP/3: fixed NGX_HTTP_V3_VARLEN_INT_LEN value. by @arut in https://github.com/nginx/nginx/pull/640
* Win32: couple of platform detection fixes by @bavshin-f5 in https://github.com/nginx/nginx/pull/457
* QUIC: fixed a typo. by @nandsky in https://github.com/nginx/nginx/pull/638
* OpenSSL build fixes with various no-opt. by @pluknet in https://github.com/nginx/nginx/pull/634
* QUIC: fixed sending acknowledgments with limited congestion window. by @pluknet in https://github.com/nginx/nginx/pull/655
* QUIC: using QUIC API introduced in OpenSSL 3.5. by @pluknet in https://github.com/nginx/nginx/pull/646
* SSL: support loading keys via OSSL_STORE. by @bavshin-f5 in https://github.com/nginx/nginx/pull/436
* Core: added support for TCP keepalive parameters on macOS. by @pluknet in https://github.com/nginx/nginx/pull/709
* HTTP Early Hints by @arut in https://github.com/nginx/nginx/pull/326
* HTTP/3: indexed field line encoding for "103 Early Hints". by @pluknet in https://github.com/nginx/nginx/pull/746
* Use NULL instead of 0 as null pointer constant by @ac000 in https://github.com/nginx/nginx/pull/702
* Upstream: fixed reinit request with gRPC and Early Hints. by @pluknet in https://github.com/nginx/nginx/pull/750
* QUIC: disabled OpenSSL 3.5 QUIC API support by default. by @pluknet in https://github.com/nginx/nginx/pull/751
* nginx-1.29.0-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/752
* PCRE license fix for win32 zip by @pluknet in https://github.com/nginx/nginx/pull/753
* QUIC: adjusted OpenSSL 3.5 QUIC API feature test. by @pluknet in https://github.com/nginx/nginx/pull/749
* OPENSSL_VERSION_NUMBER fix for OpenSSL 3.0 by @pluknet in https://github.com/nginx/nginx/pull/775
* kqueue build fixes by @pluknet in https://github.com/nginx/nginx/pull/777
* HTTP/3: limited prefixed integers encoded length. by @pluknet in https://github.com/nginx/nginx/pull/124
* HTTP/3: fixed handling :authority and Host with port. by @arut in https://github.com/nginx/nginx/pull/772
* HTTP/2: fixed flushing early hints. by @arut in https://github.com/nginx/nginx/pull/808
* HTTP/2 fixes for ":authority" vs "Host" by @pluknet in https://github.com/nginx/nginx/pull/803
* Certificate compression by @pluknet in https://github.com/nginx/nginx/pull/788
* Auth basic: fixed file descriptor leak on memory allocation error. by @pluknet in https://github.com/nginx/nginx/pull/833
* smtp module fixes by @pluknet in https://github.com/nginx/nginx/pull/842
* Changes 1.29.1 by @pluknet in https://github.com/nginx/nginx/pull/843
* Added a previously missed changes entry in 1.29.1 relnotes. by @pluknet in https://github.com/nginx/nginx/pull/844
* Removed legacy charset directive from default config example. by @MohamedKarrab in https://github.com/nginx/nginx/pull/829
* QUIC: fixed ssl_reject_handshake error handling. by @pluknet in https://github.com/nginx/nginx/pull/889
* Upda

_[Truncated at 4000 characters — full notes: https://github.com/nginx/nginx/releases/tag/release-1.30.0]_

### release-1.29.8

- Date: 2026-04-07
- Version: release-1.29.8
- Original notes: https://github.com/nginx/nginx/releases/tag/release-1.29.8
- Permalink: https://whatsnew.fyi/product/nginx/releases/release-1.29.8

- **fixed** — Fixed the include directive inside the geo block
- **changed** — SSL compatibility with OpenSSL 4.0
- **fixed** — Fixed processing multiple 103 (early hints) responses in upstream
- **removed** — Removed CLOCK_MONOTONIC_FAST support
- **fixed** — Fixed integer underflow in charset parsing in upstream
- **added** — Added max_headers directive
- **fixed** — Fixed $request_port and $is_request_port being empty when auth_request is used
- **fixed** — Reset early_hints_length on upstream reinit

[nginx-1.29.8](https://nginx.org/en/download.html) mainline version has been released.

See official [CHANGES](https://nginx.org/en/CHANGES) on nginx.org.

Below is a release summary generated by GitHub.

##### What's Changed
* Fixed the "include" directive inside the "geo" block. by @jimf5 in https://github.com/nginx/nginx/pull/1184
* SSL: compatibility with OpenSSL 4.0. by @pluknet in https://github.com/nginx/nginx/pull/1183
* Update CONTRIBUTING.md by @xuruidong in https://github.com/nginx/nginx/pull/1195
* Upstream: fixed processing multiple 103 (early hints) responses. by @pluknet in https://github.com/nginx/nginx/pull/1241
* Removed CLOCK_MONOTONIC_FAST support. by @jimf5 in https://github.com/nginx/nginx/pull/1243
* Upstream: fix integer underflow in charset parsing by @DavidKorczynski in https://github.com/nginx/nginx/pull/1170
* Added max_headers directive by @dekobon in https://github.com/nginx/nginx/pull/1116
* fix $request_port / $is_request_port being empty if auth_request is used by @Zoey2936 in https://github.com/nginx/nginx/pull/1248
* Upstream: reset early_hints_length on upstream reinit. by @devnexen in https://github.com/nginx/nginx/pull/1187
* nginx-1.29.8-RELEASE by @pluknet in https://github.com/nginx/nginx/pull/1252

##### New Contributors
* @jimf5 made their first contribution in https://github.com/nginx/nginx/pull/1184
* @xuruidong made their first contribution in https://github.com/nginx/nginx/pull/1195
* @DavidKorczynski made their first contribution in https://github.com/nginx/nginx/pull/1170
* @dekobon made their first contribution in https://github.com/nginx/nginx/pull/1116
* @Zoey2936 made their first contribution in https://github.com/nginx/nginx/pull/1248

**Full Changelog**: https://github.com/nginx/nginx/compare/release-1.29.7...release-1.29.8