Changes since version 2.5-dev4 :

Amaury Denoyelle (9):
      MINOR: server: return the next srv instance on free_server
      BUG/MINOR: stats: use refcount to protect dynamic server on dump
      MEDIUM: server: extend refcount for all servers
      MINOR: server: define non purgeable server flag
      MINOR: server: mark referenced servers as non purgeable
      MINOR: server: mark servers referenced by LUA script as non purgeable
      MEDIUM: server: allow to remove servers at runtime except non purgeable
      REGTEST: add missing lua requirements on server removal test
      REGTEST: fix haproxy required version for server removal test

Dragan Dosen (2):
      BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
      BUG/MINOR: base64: base64urldec() ignores padding in output size check

Ilya Shipitsin (2):
      CLEANUP: assorted typo fixes in the code and comments
      BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2

Remi Tricot-Le Breton (2):
      MEDIUM: ssl: Keep a reference to the client's certificate for use in logs
      BUILD/MINOR: ssl: Fix compilation with OpenSSL 1.0.2

Tim Duesterhus (2):
      REGTESTS: Use `feature cmd` for 2.5+ tests
      REGTESTS: Remove REQUIRE_VERSION=1.5 from all tests

William Lallemand (21):
      MINOR: httpclient: initialize the proxy
      MINOR: httpclient: implement a simple HTTP Client API
      MINOR: httpclient/cli: implement a simple client over the CLI
      MINOR: httpclient/cli: change the User-Agent to "HAProxy"
      MINOR: server: check if srv is NULL in free_server()
      MINOR: proxy: check if p is NULL in free_proxy()
      BUG/MINOR: httpclient: fix uninitialized sl variable
      BUG/MINOR: httpclient/cli: change the appctx test in the callbacks
      BUG/MINOR: httpclient: check if hdr_num is not 0
      MINOR: httpclient: cleanup the include files
      BUG/MINOR: systemd: ExecStartPre must use -Ws
      MINOR: systemd: remove the ExecStartPre line in the unit file
      MINOR: ssl: add an openssl version string parser
      MINOR: cfgcond: implements openssl_version_atleast and openssl_version_before
      CLEANUP: ssl: remove useless check on p in openssl_version_parser()
      BUG/MINOR: httpclient: remove deinit of the httpclient
      MINOR: httpclient: set verify none on the https server
      MINOR: httpclient: add the server to the proxy
      BUG/MINOR: httpclient: fix Host header
      BUILD: httpclient: fix build without OpenSSL
      BUG/MINOR: proxy: don't dump servers of internal proxies

Willy Tarreau (9):
      BUG/MEDIUM: h2: match absolute-path not path-absolute for :path
      BUG/MEDIUM: cfgparse: do not allocate IDs to automatic internal proxies
      BUG/MINOR: http_client: make sure to preset the proxy's default settings
      REGTESTS: http_upgrade: fix incorrect expectation on TCP->H1->H2
      REGTESTS: abortonclose: after retries, 503 is expected, not close
      REGTESTS: server: fix agent-check syntax and expectation
      MINOR: hlua: take the global Lua lock inside a global function
      BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
      CI: github-actions: remove obsolete options

devnexen@gmail.com (2):
      MINOR: tools: add FreeBSD support to get_exec_path()
      MINOR: proc: setting the process to produce a core dump on FreeBSD.