All pull requests

Pull requests

• fix: DURATION now measures wall-clock time in integer microseconds

  #3721·Nikhil-jaiswal007 opened Oct 28, 2026·

  ·
  1

  3

• ci: propose runner updates and track retirements

  #3718·Easton97-Jens opened Oct 27, 2026Contributor·

  ·
  9

• ci: configure weekly GitHub Actions updates

  #3717·Easton97-Jens opened Oct 27, 2026Contributor·

  ·
  2

• v2: Separate request-body bucket handling from the reader

  #3716·vortexopenclaw opened Oct 27, 2026·

  ·
  5

• build: support Conan 2 presets and Visual Studio 2026

  #3715·Easton97-Jens opened Oct 27, 2026Contributor·

  ·
  4

• build: derive Windows CMake version from public header

  #3714·Easton97-Jens opened Oct 27, 2026Contributor·

  ·
  4

• ci: consolidate QA and update build environments

  #3713·Easton97-Jens opened Oct 27, 2026Contributor·

  ·
  7

• docs: add concise ModSecurity v3 agent guidance and optional RTK notes

  #3706·Easton97-Jens opened Oct 25, 2026Contributor·

  ·
  16

• fix: make setvar =+N / =-N an atomic update in the collection backend

  3.x
  #3699·fzipi opened Oct 16, 2026Collaborator·

  ·
  1

  4

• fix: do not log multiMatch chain starters before the chain completes

  3.x
  #3698·fzipi opened Oct 16, 2026Collaborator·

  ·
  1

  2

• refactor: extract the UTF-8 sequence decoder from utf8_unicode_inplace_ex (2.x)

  2.xrefactor
  #3697·fzipi opened Oct 15, 2026Collaborator·

  ·
  2

• iis: use raw HTTP verb for unknown methods such as PATCH

  2.xPlatform - IIS
  #3693·A13501350 opened Oct 15, 2026·

  ·
  2

• perf: drop redundant exclusion check in rule evaluation

  3.x
  #3692·chweidling opened Oct 15, 2026·

  ·
  3

• perf: evaluate tags without macros only once

  3.x
  #3691·chweidling opened Oct 15, 2026·

  ·
  3

• IIS: preserve duplicate request/response headers with same name

  2.x
  #3690·A13501350 opened Oct 14, 2026·

  ·
  4

• IIS: propagate Location header on redirect interventions

  2.x
  #3689·A13501350 opened Oct 14, 2026·

  ·
  4

• fix: pair curl_global_init with curl_global_cleanup on reload

  2.x
  #3682·fzipi opened Oct 13, 2026Collaborator·

  ·
  2

• v2: surface libxml2's parse error in REQBODY_ERROR_MSG and silence its stderr output

  2.x
  #3681·fzipi opened Oct 13, 2026Collaborator·

  ·
  2

• feat: surface libxml2's parse error in REQBODY_ERROR_MSG

  3.x
  #3679·fzipi opened Oct 13, 2026Collaborator·

  ·
  1

  2

  

• fix: silence libxml2 parser errors on every libxml2 version

  3.x
  #3677·fzipi opened Oct 13, 2026Collaborator·

  ·
  1

  2

• fix: close the read end of piped logs in every child

  2.x
  #3676·fzipi opened Oct 13, 2026Collaborator·

  ·
  2

• fix: name the multipart Content-Disposition error codes and return 0 from m.setvar (2.x)

  2.x
  #3675·fzipi opened Oct 13, 2026Collaborator·

  ·
  2

• fix: provide ap_map_http_request_error for the standalone build

  #3674·fzipi opened Oct 13, 2026Collaborator·

  ·
  2

• fix: register the regex pool cleanup right after a successful compile

  #3673·fzipi opened Oct 13, 2026Collaborator·

  ·
  2

• fix: accept SSN area numbers up to 899 in @verifySSN (2.x)

  #3672·fzipi opened Oct 13, 2026Collaborator·

  ·
  2