Updated: nghttp2, libnghttp2{_14, -devel}, {python{38, 39}, mingw64-{x86_64, i686}}-nghttp2 1.48

Updated: nghttp2, libnghttp2{_14, -devel}, {python{38, 39}, mingw64-{x86_64, i686}}-nghttp2 1.48

[Cygwin nghttp2 Maintainer]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 2022 bytes --]

The following packages have been upgraded in the Cygwin distribution:

* nghttp2			1.48
* libnghttp2_14			1.48
* libnghttp2-devel		1.48
* python38-nghttp2		1.48
* python39-nghttp2		1.48
* mingw64-x86_64-nghttp2	1.48
* mingw64-i686-nghttp2		1.48

HTTP/2 and its header compression algorithm HPACK implementation.
The framing layer of HTTP/2 is implemented as a reusable library.
Also included are an HTTP/2 client, server, proxy, load test and
benchmarking tool, and Python modules.

For more information see the project home page:

	https://nghttp2.org/

or the repo README:

	https://github.com/nghttp2/nghttp2#readme

Please see below or read /usr/share/doc/nghttp2/ChangeLog after
installation for complete details of changes:

	https://nghttp2.org/blog/


v1.48.0		Jun 24th, 2022

lib

* This release adds RFC9218 Extensible Prioritization Scheme for HTTP.
  It is enabled by submitting NGHTTP2_SETTINGS_NO_RFC7540_PRIORITIES via
  nghttp2_submit_settings(). See Stream priorities section of
  Programmers’ Guide.

* It fixes the stream stall bug when the initial window size is decreased.

build

* Now applications can be built with Libressl 3.5.

* If --enable-lib-only configure option is used, no application
  libraries are checked.

src

* The default TLS cipher suites are updated.


* ktls support has been added to nghttp, nghttpd, nghttpx, and h2load if
  they are built with OpenSSL >= 3.0.0.

nghttpd

* This release fixes the bug that stalls TLS read operation.

nghttpx

* nghttpx by default disables RFC 7540 tree based HTTP/2 priorities and
  uses RFC 9218 priorities instead. It has a fallback mechanism to RFC
  7540 if client does not send SETTINGS_NO_RFC7540_PRIORITIES.

* affinity-cookie-stickiness backend parameter has been added.

* The session affinity feature which had been broken for quite some time
  has been fixed.

third-party

* llhttp has been updated to the latest version.

* mruby has been updated to 3.1.0.

* neverbleed has been updated the latest version with some amends.