version 0.15.0

0.15.0 - 2026-10-01

⛰️ Features

• (cache) Support stale revalidation - (cdd2262)
• (plugin) Block client IPs after repeated basic_auth failures - (a8f700e)
• (proxy) JA4 TLS client fingerprint as $ja4 and {:ja4} (#232) - (ab8b1c4)

🐛 Bug Fixes

• (acme) Reuse the ACME account, sweep manual TXT entries, correct DNS provider details - (67d738c)
• (cache) Refresh h2 stale entries inline - (e1ec42c)
• (plugin) Close auth and CORS holes, validate config, faster hot paths - (015d3f3)
• (proxy) Keep location counters straight, classify downstream errors - (e5ed818)
• (upstream) Make an upstream's first health check round decisive - (adc8433)
• Fix tls handshake (#231) - (9e15edd)

📚 Documentation

• (proxy) Move the error template placeholders into a code block - (170c677)
• Align webhook, TLS, geo and sentry notes with current behaviour - (ffac153)
• Document the access log context keys and how to log JA4 - (d9f1952)

⚡ Performance

• (certificate) Reuse unchanged certificates on reload, fail on bad TLS settings - (f44ca39)
• (location) Plain match for capture-less regexes, single-pass rewrite - (5762a1a)
• (performance) Cache process info, stop leaking metric labels, count every request - (99705eb)
• (proxy) Parse the error template once, trim listen addresses, drop dead config code - (add2fab)

⚙️ Miscellaneous Tasks

• (cache) Link upstream pingora h2 swr issue - (6c9fac0)
• (plugin) Drop the unused substring dependency - (71c4aa9)
• Version 0.15.0 - (f84c298)
• Let typos accept pingora's esource - (f5ee7ef)
• Adjust change swap space - (cc6888a)

Build

• Move the Docker image to node 24 and rust 1.98.1 - (50e7cb6)