Updated: nghttp2, libnghttp2-devel/_14, mingw64-x86_64-nghttp2 1.67 - HTTP/2 and HPACK header compression implementation

HTTP/2 and its header compression algorithm HPACK implementation.
The framing layer of HTTP/2 is implemented as a reusable library.
Also included are an HTTP/2 client, server, proxy, load test and
benchmarking tool.

For more information see the project home page:

	https://nghttp2.org/

or the repo README:

	https://github.com/nghttp2/nghttp2#readme

NOTES:

Support for previously deprecated Python bindings, modules, and
documentation was dropped some releases ago.

Do not download the archive files generated by GitHub.
They do not work.
Please download the signed and versioned tar balls, such as
nghttp2-1.67.0.tar.gz.

The following packages have been upgraded in the Cygwin distribution:

- nghttp2			1.67
- libnghttp2-devel		1.67
- libnghttp2_14			1.67
- mingw64-x86_64-nghttp2	1.67

For changes since the previous Cygwin release, see below or
https://nghttp2.org/blog/; for complete details of changes see
/usr/share/doc/nghttp2/ChangeLog after installation.


2025-09-02	1.67

lib

- This release adds nghttp2_rand_callback, and the internal hash map is
  initialized with the seed sampled from this callback.

- Some stream errors are now promoted to the connection errors.
  This means that an event that previously just resets a single stream
  now closes a connection entirely.
  The promoted errors are mostly implementation errors.

- We have some contradictory specifications around
  nghttp2_on_invalid_header and nghttp2_on_invalid_header2 callbacks.
  nghttp2_on_invalid_header says that if it is omitted, a stream is reset.
  Meanwhile, nghttp2_on_invalid_header2 says that if it is omitted,
  invalid field is silently ignored.
  In actual implementation, if both omitted, we treat it as stream error.
  In practice, it is often required not to bail out if invalid header is
  received.
  In this change, if both callbacks are omitted, invalid field is
  silently ignored as the documentation of nghttp2_on_invalid_header2
  says.

- The "glitch" counter has been introduced.
  Any suspicious activity such as DATA frames to a stream which does not
  exist are counted to so called “glitch” counter.
  If it increases more than the configured rate, GOAWAY is sent and the
  connection is closed.

-- 
              *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***

The easiest way to unsubscribe is to visit <https://cygwin.com/mailman/options/cygwin-announce>, and click 'Unsubscribe'.

If you need more information on unsubscribing, start reading here: <https://sourceware.org/lists.html#unsubscribe>.