v3.7.7
Bump to go1.26
Headers middleware: support Content-Security-Policy-Report-Only
Merge current v2.11 into v3.0
Merge current v2.11 into v3.6
Fix deny encoded characters
Add app-root middleware with nginx variable interpolation
fix: DeepCopy of PluginConf
Prepare release v3.7.0-ea.1
Add routing configuration extension points