adv_varnish 4.0.14

Advanced Varnish 4.0.14

Bug fixes

• #3538391: Cache Tag Collision - Fixed hash character index that could cause cache tag collisions (missing "A", duplicate "Q").
• #3362581: Typo: adv_vanish.cache_manager - Fixed service name typo across module code. Added a deprecated backwards-compatible alias.
• #3564846: Limit request timeout - Added default timeout (5s) and connect_timeout (2s) to HTTP requests to Varnish, preventing hangs when the server is
  unresponsive.
• #3561176: Custom max-age is not respected - The module now respects no-store and s-maxage directives from the response
  Cache-Control header, preventing error responses (e.g. 403) from being cached.
• #3504543: ESI comment tags break HTML minification - Removed <!--esi --> comment wrappers from ESI tags so they work with modules like
  minifyhtml.

New features

• #3561154: Cache-Control for static files - Added smart 3-tier Cache-Control in VCL: backend X-TTL header, cache-busted assets (1 year + immutable), and files
  without query string (30 days). Requires VCL update.
• #3542444: Longer TTL options - Extended Grace period options up to 24 hours and Page cache TTL up to 1 year.
• #3520033: URL filter whitelist mode - Added a whitelist/blacklist mode selector for URL filtering. In whitelist mode, only pages matching the rules are
  cached by Varnish.

Maintenance

• #3373546: Fixed PHPCS coding standard violations.
• #3576436: Fixed CI pipeline issues.

Update instructions

1. Run drush updb - migrates excluded_urls config to new url_filter_rules key (from #3520033).
2. If you use the bundled VCL (varnish/default.vcl), update your Varnish configuration to get the new static file Cache-Control logic (from #3561154).
3. Clear caches: drush cr