Zhefeng C.

fix(request-transformer) an empty JSON array after being decoded, can…

1

…'t be properly re-encoded as an array. Instead, it becomes an empty json object. This PR fixes this issue. An empty json array will remain to be an empty json...

The calculated average will be smaller than the actual value when the number of effective values in the queue is less than `q->len - 1`. Same as in [nginx-module-stream-sts](https://github.com/vozlt/nginx-module-stream-sts/pull/12)

The logic of `ngx_http_stream_server_traffic_status_node_time_queue_merge()` seems to be incorrect. The initial `0` value will also be merged. In addition, different nodes have different weight in calculation of the average. The node...

The calculated average will be smaller than the actual value when the number of effective values in the queue is less than `q->len - 1`.

incorrectly inserted `connect_time ` into the queue `first_byte_times `

fix(cmd): lack of necessary nginx directives in kong cli nginx.conf

1

### Summary This is an alternative of [#10675](https://github.com/Kong/kong/pull/10675). The primary logic keeps the same, but the inject logic is further moved forward from `kong/cmd/init.lua` to `bin/kong` so that the execution...

fix(cmd): `kong vault get` doesn't work in dbless mode

8

### Summary The cli `kong vault get ` doesn't work in DBless mode if `` uses vaults entity. It doesn't affect the normal use of vault in kong instance though....

This is the follow-up PR of https://github.com/Kong/kong/pull/11127 Changing the socket type from luasocket to openresty cosocket causes some test fail weirdly. After investigating, it's mainly because the cosocket support yield...

fix poolname to include the digest of the cert for mTLS

8

Fix https://github.com/ledgetech/lua-resty-http/issues/306 Additionally, add the latest openresty versions in CI. OpenResty has already supported `tcpsock:setclientcert` from 1.21.4.2 so only skip the mtls tests when version < 1.21.4

The poolname doesn't include the client cert info for mtls authentication

2

For https requests, if the `ssl_client_cert` is set, then the [poolname](https://github.com/ledgetech/lua-resty-http/blob/master/lib/resty/http_connect.lua#L165-L172) should include a field (e.g. the digest of cert) to distinguish different clients. Otherwise, there will be a security...