v0.35.0

New: Preserved Header Casing in match_headers

The secrets transform now forwards headers upstream with the exact casing written in match_headers rather than Go's canonical HTTP form. A literal entry like x-api-KEY still matches the inbound header case-insensitively, but the rewritten header is sent upstream as x-api-KEY. Regex entries (/pattern/) are unaffected and preserve the header's existing casing on the request.

replace:
  match_headers:
    - "x-api-key"   # forwarded upstream as x-api-key, not X-Api-Key

Note: HTTP/2 upstreams lowercase all header names regardless of what iron-proxy sends, so this casing control applies to HTTP/1.x connections only.

Changelog

• 8cce964 feat(secrets): preserve user-specified casing for match_headers (#127)