v2.11.6 v2.11.7

low risk

EricLBuehler/diffusion-rsOct 1, 2026 → Oct 3, 20262 days between releases

What's New

Fixes HTTP/2 crashes and stream timeouts from v2.11.6, adds Incremental header field support.

New Features

  • Support for Incremental header field (RFC 10036) in reverse_proxy
  • Faster TLS handshakes with CertMagic optimizations
  • Unix socket cleanup and file removal on reload
  • Headers handler now preserves separate Set-Cookie values
  • caddy fmt no longer deletes opening braces at the end of input

Improvements

  • Faster TLS handshakes with CertMagic optimizations

Bug Fixes

  • Fixed crash and dropped streams caused by new idle timeouts
  • Fixed placeholders for missing cookies and TLS fields
  • Fixed streaming responses cutoffs over HTTP/2

Upgrade Notes

Users upgrading from v2.11.6 will see immediate fixes for HTTP/2 crashes and stream timeouts that were introduced in that version. The new Incremental header field support is available in reverse_proxy. Unix sockets now close immediately on reload.

The Two Releases

v2.11.6

v2.11.6

Oct 1, 2026· 21 days ago

This patch release introduces new URL pattern matching, Slowloris mitigation, and security hardening, including stricter config validation and new idle timeouts.

Full release notes
v2.11.7

v2.11.7

Oct 3, 2026· 19 days ago

This patch release fixes regressions from v2.11.6 regarding HTTP/2 crashes and stream timeouts, while adding support for the Incremental header field (RFC 10036).

Full release notes