Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
COMMITS
February 9, 2026
M
Update LLM disclosure requirements in SECURITY.md
Matt Holt committed
M
caddyhttp: Use case-insensitive comparison for large Host lists
Matthew Holt committed
M
caddyhttp: Lowercase comparison when matching with escape sequence
Matthew Holt committed
F
reverseproxy: Set `Host` to `{upstream_hostport}` automatically if TLS (#7454)
Francis Lavoie committed
February 6, 2026
M
Update detail in readme
Matthew Holt committed
February 5, 2026
M
admin: Reject requests with Sec-Fetch-Mode headers
Matthew Holt committed
M
Require disclosure of LLM usage in security reports
Matt Holt committed
February 3, 2026
M
caddytls: Check type assertion
Matthew Holt committed
February 2, 2026
M
reverseproxy: Customizable dial network for SRV upstreams
Matthew Holt committed
January 30, 2026
M
caddtls: Skip .ts.net domains for ECH (#6971)
Matthew Holt committed
M
caddyhttp: Reject invalid Host header (fix #7449)
Matthew Holt committed
January 16, 2026
P
autohttps: deterministic logic and strict bind checking on Linux (#7435)
Paulo Henrique committed
January 15, 2026
F
core: Show JSON error offsets where possible (#7437)
Francis Lavoie committed
January 14, 2026
M
caddyfile: add `observe_catchall_hosts` option (#7434)
Mohammed Al Sahaf committed
January 13, 2026
F
core: Embed `time/tzdata` (#7432)
Francis Lavoie committed
P
caddyconfig: Fix indentation of multiline strings in fmt (#7425) (#7433)
Paulo Henrique committed
P
reverseproxy: fix error when remote address is not an IP (#7429)
Paulo Henrique committed
M
update quic-go to v0.59.0 (#7431)
Marten Seemann committed
F
chore: Dumb `prealloc` lint fix (#7430)
Francis Lavoie committed
January 6, 2026
M
Revise top of readme to include Warp sponsorship section
Matthew Holt committed
T
headers: Make ApplyTo nil-safe (#7426)
Tom Paulus committed
W
reverseproxy: make error chan bigger when reverse proxying websocket (#7419)
WeidiDeng committed
January 5, 2026
D
build(deps): bump the all-updates group across 1 directory with 12 updates (#7421)
dependabot[bot] committed
M
go.mod: Upgrade CertMagic and ZeroSSL deps
Matthew Holt committed
January 2, 2026
M
readme: fix fence (#7416)
Mohammed Al Sahaf committed
December 31, 2025
F
tracing: Add span attributes to tracing module (#7269)
Felix Hildén committed
December 26, 2025
P
cmd: Add --json flag to list-modules command (#7409)
Paulo Henrique committed
December 21, 2025
M
chore: update quic-go to v0.58.0 (#7404)
Marten Seemann committed
December 17, 2025
F
logging: `log_append` Early option, Supports `{http.response.body}` (#7368)
Francis Lavoie committed
December 16, 2025
W
go.mod: update tscert package to latest (aea342f6) (#7397)
Will Norris committed