What's Changed

• Drop commented-out line by @olleolleolle in #108
• Add Ruby 3.1 & 3.2 to CI matrix by @tricknotes in #109
• Fix/redos by @ooooooo-q in #114
• Raise HTTPStatus::BadRequest for requests with invalid/duplicate content-length headers by @jeremyevans in #120
• Bump actions/checkout from 3 to 4 by @dependabot in #121
• Improve CI by @hsbt in #123
• Fix WEBrick::TestFileHandler#test_short_filename test not working on mswin by @KJTsanaktsidis in #128
• Fix bug chunk extension detection by @jeremyevans in #125
• Fix CI. by @ioquatix in #131
• Merge multiple cookie headers, preserving semantic correctness. by @ioquatix in #130
• Test on macos-latest by @byroot in #132
• Require CRLF line endings in request line and headers by @jeremyevans in #138
• Prefer squigly heredocs. by @ioquatix in #143
• Only strip space and horizontal tab in headers by @jeremyevans in #141
• Treat missing CRLF separator after headers as an EOFError by @jeremyevans in #142
• Return 400 response for chunked requests with unexpected data after chunk by @jeremyevans in #136
• Fix reference to URI::REGEXP::PATTERN::HOST by @casperisfine in #144
• Prevent request smuggling by @jeremyevans in #146

New Contributors

• @tricknotes made their first contribution in #109
• @ooooooo-q made their first contribution in #114
• @KJTsanaktsidis made their first contribution in #128
• @byroot made their first contribution in #132
• @casperisfine made their first contribution in #144

Full Changelog: v1.8.1...v1.8.2