This new v2.44.1 brings bug fixes, security improvements and dependency updates.
Security updates
This release includes security updates related to the metrics and directory listing download features. We encourage users to update to this version. We will provide more details about the fixed security issues in the next few days.
Fixes
- aa604b6 Update dependencies, fix security issue with
async-std(RUSTSEC-2025-0052), restrict HTTP/2 to TLS connections & fix directory download tests on Windows. PR [#745], [#746] by @joseluisq - 2b76d6f Apply file type cache headers only to
2xxand304responses; useno-cacheotherwise. PR [#772] by @joseluisq - cd518fc Fix rounding errors when parsing HTTP
Accept-Encodingheader quality values. PR [#755] by @joseluisq - bb0f878 Advanced: Restore nested path matching for
{**}glob captures in URL Rewrites and Redirects. PR [#742] by @joseluisq - 8dc36bf CI: Fix NetBSD build issue by fetching the available NetBSD 9.5 base archive. PR [#744] by @joseluisq
- 9d4e850 CI: Use the 2.x branch in the release-updates CI workflow. PR [#732] by @joseluisq
Refactorings
- 21b0705 Suppress unnecessary 404 warnings when serving a fallback page. PR [#754] by @joseluisq
For more details see the v2.44.1 milestone and the full changelog v2.44.0...v2.44.1.