[PATCH 0/1] CI: switch to more recent macos version(s)

let's modernize macos CI build matrix since macos-14 is available Ilya Shipitsin (1): CI: modernize macos matrix .github/matrix.py | 4 ++-- scripts/build-vtest.sh | 9 - 2 files changed, 10 insertions(+), 3 deletions(-) -- 2.44.0

[PATCH 1/1] CI: modernize macos matrix

let's stick to macos-13 for stable branches and macos-14 for development branches. since macos-14 is available for Apple Silicon, some modifications are required for VTest (should be ported to VTest later) news:

[PATCH 2/2] CLEANUP: assorted typo fixes in the code and comments

This is 41st iteration of typo fixes --- doc/configuration.txt | 4 ++-- include/haproxy/cli-t.h| 2 +- include/haproxy/session.h | 2 +- include/haproxy/vecpair.h | 2 +- reg-tests/ssl/ocsp_auto_update.vtc | 2 +- src/haproxy.c | 2

[PATCH 1/2] CI: reduce ASAN log redirection umbrella size

previously ASAN_OPTIONS=log_path=asan.log was intended for VTest execution only, it should not affect "haproxy -vv" and hsproxy config smoke testing --- .github/workflows/vtest.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/vtest.yml

[PATCH 0/2] CI cleanup, spell fixes

the main part is reducing ASAN_OPTIONS scope, it was supposed only to capture output of vtests, accidently it covered "config smoke tests" as well Ilya Shipitsin (2): CI: reduce ASAN log redirection umbrella size CLEANUP: assorted typo fixes in the code and comments .github

[PATCH 1/1] CI: revert kernel entropy introduced in 3a0fc8641b1549b00cd3125107545b6879677801

--- .github/workflows/vtest.yml | 11 --- 1 file changed, 11 deletions(-) diff --git a/.github/workflows/vtest.yml b/.github/workflows/vtest.yml index a704c92dc..a426b608d 100644 --- a/.github/workflows/vtest.yml +++ b/.github/workflows/vtest.yml @@ -64,17 +64,6 @@ jobs: run: |

[PATCH 0/1] CI: revert entropy hack

hack introduced in 3a0fc8641b1549b00cd3125107545b6879677801 might be reverted Ilya Shipitsin (1): CI: revert kernel entropy introduced in 3a0fc8641b1549b00cd3125107545b6879677801 .github/workflows/vtest.yml | 11 --- 1 file changed, 11 deletions(-) -- 2.44.0

[PATCH 1/1] CI: extend Fedora Rawhide, add m32 mode

hopefully it will allow to catch regressions like this https://github.com/haproxy/haproxy/commit/e41638a --- .github/workflows/fedora-rawhide.yml | 18 -- 1 file changed, 12 insertions(+), 6 deletions(-) diff --git a/.github/workflows/fedora-rawhide.yml

[PATCH 0/1] CI: extend Fedora Rawhide to run x86 bit as well

it seems to be the easiest to build "m32" on Fedora comparing to Ubuntu, let's stick on that for a while Ilya Shipitsin (1): CI: extend Fedora Rawhide, add m32 mode .github/workflows/fedora-rawhide.yml | 18 -- 1 file changed, 12 insertions(+), 6 deletions(-) -- 2.44.0

[PATCH 0/1] CI improvement, display coredumps if any

it is pretty rare case, however displaying "bt" may provide some ideas what went wrong Ilya Shipitsin (1): CI: vtest: show coredumps if any .github/workflows/vtest.yml | 26 +- 1 file changed, 25 insertions(+), 1 deletion(-) -- 2.44.0

[PATCH 1/1] CI: vtest: show coredumps if any

if any coredump is found, it is passed to gdb with 'thread apply all bt full' --- .github/workflows/vtest.yml | 26 +- 1 file changed, 25 insertions(+), 1 deletion(-) diff --git a/.github/workflows/vtest.yml b/.github/workflows/vtest.yml index 8c461385f..a704c92dc 100644

[PATCH] CLEANUP: assorted typo fixes in the code and comments

This is 39th iteration of typo fixes --- addons/promex/README | 4 ++-- addons/promex/include/promex/promex.h | 4 ++-- doc/DeviceAtlas-device-detection.txt | 2 +- doc/configuration.txt | 2 +- reg-tests/ssl/ocsp_auto_update.vtc| 10 +-

[PATCH 0/1] CI: skip scheduled tasks in forks

some fine tuning on scheduled workflows Ilya Shipitsin (1): CI: skip scheduled builds on forks .github/workflows/cross-zoo.yml | 1 + .github/workflows/fedora-rawhide.yml | 1 + 2 files changed, 2 insertions(+) -- 2.43.2

[PATCH 1/1] CI: skip scheduled builds on forks

tracking bleeding edge changes with some rare platforms or modern compilers on scheduled basis is not what usually forks do. let's skip by default in forks, if some fork is interested, it might be enabled locally --- .github/workflows/cross-zoo.yml | 1 + .github/workflows/fedora-rawhide.yml

[PATCH 1/1] CI: enable monthly build only test on netbsd-9.3

it is interesting to try https://github.com/vmactions/netbsd-vm actions --- .github/workflows/netbsd.yml | 22 ++ 1 file changed, 22 insertions(+) create mode 100644 .github/workflows/netbsd.yml diff --git a/.github/workflows/netbsd.yml b/.github/workflows/netbsd.yml new

[PATCH 0/1] CI: enable monthly netbsd builds

let's try https://github.com/vmactions/netbsd-vm Ilya Shipitsin (1): CI: enable monthly build only test on netbsd-9.3 .github/workflows/netbsd.yml | 22 ++ 1 file changed, 22 insertions(+) create mode 100644 .github/workflows/netbsd.yml -- 2.43.2

[PATCH 1/1] CI: run more smoke tests on config syntax to check memory related issues

config syntax check seems add a value on testing code path not covered by VTest, also checks are very fast --- .github/workflows/vtest.yml | 4 1 file changed, 4 insertions(+) diff --git a/.github/workflows/vtest.yml b/.github/workflows/vtest.yml index 7b5254b04..d65741a27 100644 ---

[PATCH 0/1] CI: additional ASAN smoke tests

Ilya Shipitsin (1): CI: run more smoke tests on config syntax to check memory related issues .github/workflows/vtest.yml | 4 1 file changed, 4 insertions(+) -- 2.43.2

[PATCH 0/2] CI cleanup and improvement

remove redundant function, improve openssl download helper Ilya Shipitsin (2): CI: cleanup: abandon asan matrix.py helper BUILD: SSL: add yet another OpenSSL download fallback .github/matrix.py| 15 +-- scripts/build-ssl.sh | 4 +++- 2 files changed, 8 insertions(+), 11

[PATCH 2/2] BUILD: SSL: add yet another OpenSSL download fallback

--- scripts/build-ssl.sh | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/scripts/build-ssl.sh b/scripts/build-ssl.sh index 1c17775c3..608d6beb1 100755 --- a/scripts/build-ssl.sh +++ b/scripts/build-ssl.sh @@ -13,7 +13,9 @@ download_openssl () { wget -P

[PATCH 1/2] CI: cleanup: abandon asan matrix.py helper

that helper was useful in days when we beleived that gcc and clang require different flags. those days are gone. --- .github/matrix.py | 15 +-- 1 file changed, 5 insertions(+), 10 deletions(-) diff --git a/.github/matrix.py b/.github/matrix.py index dde5b4414..1ad9534bd 100755 ---

[PATCH 2/3] CI: extend spell check white list

siz - seen in src/debug.c EXPERIM - seen in src/cli.c --- .github/workflows/codespell.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml index de99e4c4d..385b698a5 100644 --- a/.github/workflows/codespell.yml

[PATCH 3/3] CI: enable spell chek on git push

--- .github/workflows/codespell.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml index 385b698a5..f54fe6d8b 100644 --- a/.github/workflows/codespell.yml +++ b/.github/workflows/codespell.yml @@ -1,8 +1,7 @@

[PATCH 1/3] CLEANUP: fix spelling of "elemt"

--- include/haproxy/quic_sock-t.h | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/include/haproxy/quic_sock-t.h b/include/haproxy/quic_sock-t.h index 67a574929..0b9c18c12 100644 --- a/include/haproxy/quic_sock-t.h +++ b/include/haproxy/quic_sock-t.h @@ -36,8 +36,8 @@

[PATCH 0/3] fix speling remnants, enable spel chek on push

it is very fast check, should not affect developer velocity much Ilya Shipitsin (3): CLEANUP: fix spelling of "elemt" CI: extend spell check white list CI: enable spell chek on git push .github/workflows/codespell.yml | 5 ++--- include/haproxy/quic_sock-t.h | 4 ++-- 2 files

[PATCH 3/3] CLEANUP: fix spelling of "occured" in src/h3.c

--- src/h3.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/h3.c b/src/h3.c index ff91443ca..40e3a8996 100644 --- a/src/h3.c +++ b/src/h3.c @@ -1977,7 +1977,7 @@ static size_t h3_snd_buf(struct qcs *qcs, struct buffer *buf, size_t count) break;

[PATCH 0/3] spell check improvements

few words are added to whitelists, few typos fixed Ilya Shipitsin (3): CI: codespell: ignore some words in URLs CI: codespell: add more words to whitelist CLEANUP: fix spelling of "occured" in src/h3.c .github/workflows/codespell.yml | 3 ++- src/h3.c

[PATCH 1/3] CI: codespell: ignore some words in URLs

"trafic,ressources" are found in URIs, due to https://github.com/codespell-project/actions-codespell/issues/55 we cannot use wildcard for exclusion, let start with fixed list --- .github/workflows/codespell.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/codespell.yml

[PATCH 2/3] CI: codespell: add more words to whitelist

"Collet" is "Yann Collet" - a developer of xxhash "bu" is variable name in src/sock_unix.c "htmp" is variable name in src/quic_retransmit.c --- .github/workflows/codespell.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codespell.yml

[PATCH 1/1] CI: use semantic version compare for determing "latest" OpenSSL

currently "openssl-3.2.0-beta1" wins over "openssl-3.2.0" due to string comparision. let's switch to semantic version compare --- .github/matrix.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/matrix.py b/.github/matrix.py index d5ad6931a..5e01c28bb 100755 ---

[PATCH 0/1] CI: switch to semantic version compare for openssl=latest

there's minor issue, with current string comparision openssl-3.2.0beta1 wins over openssl-3.2.0, let's switch to semantic comparision Ilya Shipitsin (1): CI: use semantic version compare for determing "latest" OpenSSL .github/matrix.py | 3 ++- 1 file changed, 2 insertions(+),

[PATCH 1/1] CLEANUP: assorted typo fixes in the code and comments

This is 38th iteration of typo fixes --- addons/promex/service-prometheus.c | 2 +- dev/patchbot/README| 2 +- doc/configuration.txt | 24 include/haproxy/connection-t.h | 2 +- include/haproxy/quic_tx.h | 2 +-

[PATCH 0/1] more spell fixes

more spell fixes Ilya Shipitsin (1): CLEANUP: assorted typo fixes in the code and comments addons/promex/service-prometheus.c | 2 +- dev/patchbot/README| 2 +- doc/configuration.txt | 24 include/haproxy/connection-t.h | 2

[PATCH 0/1] CI: switch to "latest" semantic for aws-lc builds

let's use fixed version for stable builds and "latest" for development builds Ilya Shipitsin (1): CI: switch aws-lc builds to "latest" semantic .github/matrix.py | 8 +++- 1 file changed, 7 insertions(+), 1 deletion(-) -- 2.42.0

[PATCH 1/1] CI: switch aws-lc builds to "latest" semantic

for development branches let's use "latest" and fixed for stable LibreSSL-3.6.0 had some regression, it was fixed in 3.6.1, let us switch back to the latest LibreSSL available --- .github/matrix.py | 8 +++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/matrix.py

[PATCH 0/2] spelling fixes

yet spelling fixes Ilya Shipitsin (2): CLEANUP: assorted typo fixes in the code and comments CI: limit codespell checks to main repo, not forks .github/workflows/codespell.yml| 1 + INSTALL| 4 ++-- doc/SPOE.txt

[PATCH 1/2] CLEANUP: assorted typo fixes in the code and comments

This is 37th iteration of typo fixes --- INSTALL| 4 ++-- doc/SPOE.txt | 4 ++-- doc/configuration.txt | 10 +- doc/regression-testing.txt | 6 +++---

[PATCH 2/2] CI: limit codespell checks to main repo, not forks

--- .github/workflows/codespell.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml index 781aa8332..3d66f2980 100644 --- a/.github/workflows/codespell.yml +++ b/.github/workflows/codespell.yml @@ -10,6 +10,7 @@ permissions:

[PATCH 1/1] CI: cirrus-ci: display gdb bt if any

previously, if test process crashes (either BUG_ON or segfault), no coredump were collected and analysed --- .cirrus.yml | 7 ++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.cirrus.yml b/.cirrus.yml index 2993b943a..4bf3fb672 100644 --- a/.cirrus.yml +++ b/.cirrus.yml @@

[PATCH 0/1] CI: cirrus-ci: display gdb backtrace if there are any

improve cirrus-ci by displaying gdb backtrace Ilya Shipitsin (1): CI: cirrus-ci: display gdb bt if any .cirrus.yml | 7 ++- 1 file changed, 6 insertions(+), 1 deletion(-) -- 2.35.3.windows.1

[PATCH 0/2] CI: musl pipeline improvement

it has been figured out that it is hard to find gdb backtraces on musl, because corresponding section is not highlighted. let us fix that Ilya Shipitsin (2): CI: musl: highlight section if there are coredumps CI: musl: drop shopt in workflow invocation .github/workflows/musl.yml | 6

[PATCH 1/2] CI: musl: highlight section if there are coredumps

previously, section was collapsed, thus it was harder to find that there's something to look at --- .github/workflows/musl.yml | 5 + 1 file changed, 5 insertions(+) diff --git a/.github/workflows/musl.yml b/.github/workflows/musl.yml index 4017affb9..af358981f 100644 ---

[PATCH 2/2] CI: musl: drop shopt in workflow invocation

"shopt" is bash specific, while musl uses bourne shell. /__w/_temp/1b0f5f5d-c71b-4a66-8be3-e1fe51c10993.sh: line 7: shopt: not found --- .github/workflows/musl.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/musl.yml b/.github/workflows/musl.yml index

[PATCH 0/1] CI: fedora: fix dnf invocation

"dnf git" was used instead of "dnf install" Ilya Shipitsin (1): CI: fedora: fix "dnf" invocation syntax .github/workflows/fedora-rawhide.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) -- 2.35.3.windows.1

[PATCH 1/1] CI: fedora: fix "dnf" invocation syntax

In 39e205302e8afb68d954e17944fad5f8c1587287 I erroneously used "dnf git" instead of "dnf install" --- .github/workflows/fedora-rawhide.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/fedora-rawhide.yml b/.github/workflows/fedora-rawhide.yml index

[PATCH 2/2] CI: get rid of travis-ci wrapper for Coverity scan

historically coverity scan was performed by travis-ci script, let us rewrite it in bash --- .github/workflows/coverity.yml | 28 +--- 1 file changed, 17 insertions(+), 11 deletions(-) diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml index

[PATCH 1/2] CI: do not use "groupinstall" for Fedora Rawhide builds

Fedora Rawhide migrated to dnf5, which does not support "groupinstall" --- .github/workflows/fedora-rawhide.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/fedora-rawhide.yml b/.github/workflows/fedora-rawhide.yml index 7e735a36c..bf8ad3d72 100644 ---

[PATCH 0/2] CI changes

fixed 'Unknown argument "groupinstall" for command "dnf5"' coverity scan CI rewritten without travis-ci wrapper Ilya Shipitsin (2): CI: do not use "groupinstall" for Fedora Rawhide builds CI: get rid of travis-ci wrapper for Coverity scan .github/wor

[PATCH 2/2] CI: explicitely highlight VTest result section if there's something

it turned out that people miss VTest result section because it is not highlighted, let us fix that --- .github/workflows/vtest.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/vtest.yml b/.github/workflows/vtest.yml index 25d3cc72e..6977788a3 100644 ---

[PATCH 1/2] CI: add naming convention documentation

branches "haproxy-" stand for stable branches, otherwise development --- .github/matrix.py | 18 +- 1 file changed, 13 insertions(+), 5 deletions(-) diff --git a/.github/matrix.py b/.github/matrix.py index 7f22c43bb..dbf987e93 100755 --- a/.github/matrix.py +++

[PATCH 0/2] improve CI friendliness

thanks to Andrew Hopkins from Amazon, we've learned that CI is already easy to learn, however few things can be improved. let us add naming convention inline comment, also if VTest fails, let is highlight that. Ilya Shipitsin (2): CI: add naming convention documentation CI: explicitely

[PATCH 0/1] enabling ssl keylog for LibreSSL 3.5.0

found during QUIC Interop for LibreSSL Ilya Shipitsin (1): BUILD: SSL: enable TLS key material logging if built with LibreSSL>=3.5.0 include/haproxy/openssl-compat.h | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) -- 2.40.1

[PATCH 1/1] BUILD: SSL: enable TLS key material logging if built with LibreSSL>=3.5.0

LibreSSL implements TLS key material since 3.5.0, let's enable it --- include/haproxy/openssl-compat.h | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/include/haproxy/openssl-compat.h b/include/haproxy/openssl-compat.h index 7fb153810..ed162031c 100644 ---

[PATCH 2/2] BUILD: SSL: add QUICTLS to build matrix

--- .github/matrix.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/matrix.py b/.github/matrix.py index 568676001..53b5e0f88 100755 --- a/.github/matrix.py +++ b/.github/matrix.py @@ -113,12 +113,13 @@ for CC in ["gcc", "clang"]:

[PATCH 1/2] BUILD: SSL: add quictls build to scripts/build-ssl.sh

script/build-ssl.sh is used mostly in CI, let us introduce QUIC OpenSSL fork support --- scripts/build-ssl.sh | 23 +++ 1 file changed, 23 insertions(+) diff --git a/scripts/build-ssl.sh b/scripts/build-ssl.sh index e1d89a0eb..d143cec55 100755 --- a/scripts/build-ssl.sh +++

[PATCH] CLEANUP: assorted typo fixes in the code and comments

This is 27th iteration of typo fixes --- doc/configuration.txt| 2 +- include/haproxy/h3.h | 2 +- include/haproxy/mux_quic-t.h | 2 +- include/haproxy/mux_quic.h | 2 +-

[PATCH v2] BUILD: SSL: function "ERR_func_error_string" is deprecated in OpenSSL-3.0.0

let us prepare for using OpenSSL-3.0.0 in no deprecation mode --- include/haproxy/openssl-compat.h | 7 +++ src/ssl_sock.c | 2 +- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/include/haproxy/openssl-compat.h b/include/haproxy/openssl-compat.h index