Changes since version 3.5-dev4 :

Amaury Denoyelle (7):
      MINOR: config: support "all" and "none" on "tune.defaults.purge"
      BUG/MINOR: proxy: release watcher in various commands on CLI abort
      BUG/MINOR: proxy: release watcher in "show default-server" on CLI abort
      REGTESTS: proxy: complete "del backend" test
      BUG/MEDIUM: quic: prevent out-of-bound read on wrapping CRYPTO content
      MINOR: quic: stress CRYPTO Rx buffer wrapping
      BUG/MINOR: quic: drop multiple Retry on same connection

Aurelien DARRAGON (2):
      MINOR: log/tools: fix ambiguous comments for some log encoding helpers
      BUG/MEDIUM: log: always reserve room for trailing 0 when using CBOR encoding helpers

Dragan Dosen (1):
      BUG/MEDIUM: fd: release the port range entry in host byte order

Olivier Houchard (12):
      BUG/MEDIUM: mux-fcgi: check the room left before appending the index
      BUG/MEDIUM: spoe: clear the applet pointer when the applet fails to start
      BUG/MINOR: mux-fcgi: don't call fcgi_strm_destroy() on a NULL stream
      BUG/MEDIUM: http-ana: don't crash on "keep-query" in a response redirect
      BUG/MEDIUM: stick-tables: use the same bucket for string keys with a NUL
      BUG/MEDIUM: sock: bound the recvmsg() length when receiving old sockets
      BUG/MEDIUM: http-ana: check the cookie rewrite result before moving the offsets
      BUG/MINOR: mux-fcgi: sanitize the STDERR records before logging them
      MINOR: backend: Do not always allow takeover across thread groups
      MINOR: backend: Deprecate tune.takeover-other-tg-connections.
      DOC: Document limitations of tune.fd.tables
      MEDIUM: pipes: Never allocate more than maxpipes

Remi Tricot-Le Breton (3):
      BUG/MEDIUM: jwe: validate the secret length against the algorithm of the token
      BUG/MINOR: jwt: don't take an extra reference on the certificate public key
      BUG/MEDIUM: ssl: require a full-length AEAD tag when decrypting with AES-GCM

William Lallemand (3):
      BUG/MEDIUM: acme: don't delete a NULL token from the map
      BUG/MINOR: ssl: reject server certificate names containing a NUL byte
      BUG/MINOR: acme: restrict the permissions of the generated account key

Willy Tarreau (9):
      BUG/MEDIUM: hpack: encode long methods and schemes using the long form
      BUG/MINOR: stats-file: reject tgid 0 when preloading shm objects
      BUG/MINOR: hlua: use a local buffer to format the socket addresses
      DEV: haring: bound the ring geometry to the size of the file
      BUG/MINOR: connection: reserve the whole CRC32C TLV before saving its pointer
      BUG/MEDIUM: session: don't release a reversed connection twice on error
      BUG/MINOR: lb-chash: bound the walk when the saved cursor changed tree
      BUG/MINOR: debug: only dump the trace once in __BUG_ON_ONCE()
      BUG/MINOR: mux-h2: strip the userinfo when deriving :authority for a server