## caddyserver/caddy — v2.11.1…v2.11.2

_34 commits._

### Features
- **api: Add all in-flight requests /reverse_proxy/upstreams (Fixes #7277) (#7517)** (88616e8)
- **tls: Add `tls_resolvers` global option for DNS challenge configuration (#7297)** (f145bce)
- **logging: Support `zstd` roll compression (#7515)** (9873752)
- **logging: add DirMode options and propagate FileMode to rotations (#7335)** (294dfff)

### Fixes
- **fix(caddyfile): Prevent parser to panic when no token were added by empty {block} (#7543)** (2dd3852)
- **reverseproxy: Fix `health_port` being ignored in health checks (#7533)** (11b56c6)
- **caddyhttp: Evaluate tls.client placeholders more accurately (fix #7530) (#7534)** (174fa2d)
- **httpcaddyfile: Fix missing TLS connection policies when auto_https is default (#7325) (#7507)** (7ffb640)
- **reverseproxy: fix tls dialing w/ proxy protocol (#7508)** (d7b21c6)

### Backend
- **Revert cosign (see #7536)** (ffb6ab0)
- **Wire up Cause for most context cancels (#7538)** (6e5e08c)
- **rewrite: Force recomputing path when escaped path matches rewrite target** (fbfb8fc)
- **Update SECURITY.md** (e06dfcf)
- **fileserver: document hide case-sensitivity (F-CADDY-FILESERVER-HIDE-CASE-001) (#7548)** (566e710)
- **reverseproxy: prevent body close on dial-error retries (#7547)** (a5e7c6e)
- **reverseproxy: Track dynamic upstreams, enable passive healthchecking (#7539)** (db29860)
- **Merge commit from fork** (7e83775)
- **forward_auth: `copy_headers` does not strip client-supplied identity headers (Fixes GHSA-7r4p-vjf4-gxv4) (#7545)** (2dbcdef)
- **caddyhttp: Collect metrics once per route instead of per handler (#7492)** (dc36082)
- **core: Check whether @id is unique (#7002)** (7b34e31)
- **proxyproto: Generated test coverage (#7540)** (a6acb39)
- **logging: Ensure `slog` error level logs don't print stack traces (#7512)** (45cf61b)
- **autohttps: Ensure CertMagic config is recreated after autohttps runs (#7510)** (d935a69)
- **cmd: Custom binary names through `CustomBinaryName` and `CustomLongDescription` (#7513)** (f283062)
- **reverseproxy: query escape request urls when proxy protocol is enabled (#7537)** (2ab043b)
- **cmd: Pass configFile, not configFlag, for reload command (#7532)** (cd9e166)
- **Revert "encode: Implement Flush for legacy compatibility"** (06a05e3)
- **go.mod: Upgrade x/net** (ce203aa)
- **caddyhttp: Limit empty Host check to HTTP/1.1** (eac02ee)
- **caddyhttp: Avoid nil pointer dereference in proxyWrapper (#7521)** (9798f69)
- **http: Sort auto-HTTPS redirect routes by host specificity (fixes #7390) (#7502)** (76b198f)

### Chore
- **build(deps): bump the actions-deps group across 1 directory with 12 updates (#7536)** (9371ee6)
- **build(deps): bump github.com/smallstep/certificates (#7535)** (5d20adc)
- **chore: Enable modernize linter (#7519)** (72eaf25)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/caddyserver/caddy?utm_source=github-action)._