main
style: normalize C source formatting via clang-format (PoC)
queue: quarantine runtime disk corruption safely
queue: add segmented disk-assisted engine
queue: rework experimental segmented disk backend
core: add generic output rate limiting
imtcp: make zstd window budget configurable
runtime: harden queue config and worker handling
compat_queue: add missing STAILQ_FOREACH/STAILQ_NEXT fallback
core: fix negated exact priority filters
Merge branch 'dev_parse_time' of https://github.com/shinigami35/rsyslog into dev_parse_time
ci: enforce compile warnings configure option
ci: gate expensive PR test families
core: expand checked literal copies across fixed buffers
runtime: modernize atomic helper usage
runtime: make error-message flag atomic
errmsg: enrich oversize errorfile records
core: add systemd READY delay opt-in
gssapi: use uint32_t for token wire length
gssapi: fix token timeout handling
gssapi: improve robustness and listener handling
ratelimit: shard per-source state
input: warn for rulesets without queues
ci: add Ubuntu 26.04 static analyzer lane
runtime: validate numeric hardening inputs
Refactor ossl crypto provider
runtime: avoid libgcry IV shift UB
runtime: cleanup zero-size alloc handling
runtime/rsksi: check KSI_DataHash_extract return values
hardning: harden config parameter ownership and OOM cleanup
build: normalize object prototypes and remove decl noise
lmsig-ksi-bound-debug-precision
lookup: report active table reloads as pending
core: Fix typos in comments
core: harden string allocation and copy handling
core, runtime, omfwd: plumb action name into modules and logs
msg: ignore null values in msgSetPropViaJSON() instead of crashing
ratelimit: speed source-key shortcuts
runtime: harden raw message replacement growth
net: match legacy allowed sender hostname handling
net: add modern allowedSender ACLs
ossl: avoid caching OCSP responses past nextUpdate
net_ossl: support CRL/OCSP revocation on wolfSSL
net: Add NetworkNamespace APIs
omfwd: add TCP user timeout action option
ossl: add OCSP certificate revocation checking support
Merge pull request #7213 from rgerhards/codex/i6696-tcp-user-timeout
gtls: check CRL expiration, reject connections with expired CRL
core: migrate callback invocations to type-safe signatures
config: add compatibility controls and secure defaults
parser: fix NetAddr cleanup on mask parse errors
fuzz: exercise RFC 3164 and RFC 5424 parsers
perctile: link buckets after initialization
stats: avoid notifier teardown deadlocks
queue: preserve DA child work during shutdown
queue: clarify DA transfer worker role
queue: document DA engine internals
ratelimit: optimize port-based per-source keys
regexp: avoid per-thread shutdown double-free
runtime: add watched policy reload scheduling
testbench: add daemon termination oracle
runtime: synchronize action retry shutdown state
queue: address segmented disk review findings
queue: expose segmented disk durability test hooks
segdisk: optimize CRC accounting and add benchmarks
queue: make segmented deletion resumable
queue: harden DA portability and startup cleanup
omfile: pass size-limit file to rotate cmd
testbench: enable proper termination markers by default
statsobj: guard Prometheus escape writes
stats: harden Prometheus renderer failures
stringbuf: harden empty string replacement
tls: preserve send retry without reconnect
imtcp: release completed zlib decoder state
template: avoid new legacy octal escape
template: add octal control character escape
runtime: add relaxed 32-bit atomic helpers
runtime: fix YAML promotion OOM ownership
runtime: add config translation mode
queue: separate DA idle and worker timeouts
queue: address segmented DA review findings
queue: harden segmented DA lifecycle invariants
Merge pull request #7165 from rsyslog/codex/fix-yaml-include-recursion-issue
feat: add YAML as an alternative configuration format
runtime: call class exit on lib unload