- Reject slicer toxics with `average_size` <= 0 or `size_variation` o…

…utside `[0, average_size]`,

  and stop the slicer from recursing forever on degenerate sizes (#774, @iyaz-shaikh)
- Add optional bearer token auth for the HTTP API via `TOXIPROXY_AUTH_TOKEN`, supported by the Go
  client and `toxiproxy-cli`, and warn when the API is unauthenticated on a non-loopback address
  (#774, @iyaz-shaikh)
- Fix removing a toxic hanging forever, and freezing the whole HTTP API, when the downstream
  toxic or connection is already gone (#760, @matheusgb)
- Fix the bandwidth toxic hanging or panicking when `rate` <= 0 (#764, @jaideeppyne)
- Update go version to 1.27 (#777, @The-Black-Fox)
- Update various go packages

- Update go version to 1.23.0 (#628)

- Do not restart proxies when using hostnames to specify listen address when updating a proxy
  and populating a collection (#631, @robinbrandt)
- Update various go packages

- Do not pin minimum patch version in module (#595, @jaimem88)

- Update various go packages

- Update go version to 1.22.8 (#594, @abecevello)

- Updated go version to 1.22.1 to fix 3 CVEs (#559, @dianadevasia)

- Updated the version of golangci to 1.56.2 and disabled depguard rule in golangci (#559, @dianadevasia)

* toxiproxy-cli - sortedAttributes sort by attribute.key instead attr…

…ibute.value (#543, @jesseward)

* Fix invalid JSON in /version endpoint response (#538, @whatyouhide)

* Update minimum supported Go version 1.19. (@abecevello)

* Gracefull shutdown of HTTP server. (#439, @miry)

* Support PATCH HTTP method for Proxy update(`PATCH /proxies/{proxy}`) and
  Toxic update(`PATCH /proxies/{proxy}/toxics/{toxic}`) endpoints.
  Deprecat POST HTTP method for those endpoints. (@miry)
* Client does not parse response body in case of errors for Populate.
  Requires to get current proxies with new command. (#441, @miry)
* Client specifies `User-Agent` HTTP header for all requests as
  "toxiproxy-cli/<version> <os>/<runtime>".
  Specifies client request content type as `application/json`. (#441, @miry)
* Replace Api.Listen parameters `host` and `port` with single `addr`. (#445, @miry)

**Full Changelog**: v2.5.0...v2.6.0

v2.5.0

* Update Release steps. (#369, @neufeldtech)
* Migrate off probot-CLA to new GitHub Action. (#405, @cursedcoder)
* Support go 1.18, 1.19. (#415, @miry)
* `toxiproxy.NewProxy` now accepts `name`, `listen addr` and `upstream addr`. (#418, @miry)
* Replace logrus with zerolog. (#413, @miry)
* Log HTTP requests to API server. (#413, #421, @miry)
* Add TimeoutHandler for the HTTP API server. (#420, @miry)
* Set Write and Read timeouts for HTTP API server connections. (#423, @miry)
* Show unique request id in API HTTP response. (#425, @miry)
* Add method to parse `stream.Direction` from a string.
  Allow converting `stream.Direction` to string. (#430, @miry)
* Add the possibility to write to Output with a deadline.
  On interrupting Bandwidth toxic, use non-blocking writes. (#436, @miry)
* Update minimum supported Go version 1.17. (#438, @miry)

Release 2.4.0