When receiving H/2 data frames, make sure to take the advertised content
length into account, and fail appropriately if the combined sum of the
data frames does not match the content length.

If given a build parameter called 'dist-url', the build script downloads
a tarball from the given URL instead of doing a 'make dist' step.

Upgrade the CCI script to build release packages using the nightly
packages build steps.

This starts a 6.5.1 changes entry, with only the major bump present.

Retroactively fix up the heading for the 6.5.0 release in the changelog.

In the Varnish Cache 6.5.0 release we forgot to bump the VRT major
version. Do it now.

If direnv is installed you will get a warning otherwise.

Closes #3410

If we lose a header from http_SetHeader() we don't formally run out of
workspace prior to calling http_fail().

Refs #3410

And slightly move things around. There are interesting details worth
mentioning.

Better diff with the --word-diff --ignore-all-space options.

We actually changed behavior also for vcc_acl_pedantic=false

And a quick note on the workspace API plus homework for later.

Yes, I missed at least one varnishd change in my first pass.

Leaving out any change that is solely a bug fix on purpose.

The only user-visible change for this release.

I thought the slight change of behavior was worth mentioning, and that in
the varnishadm/CLI section it would stand out.

Whether the header was set by the backend or directly in VCL, it is now
possible to signal that a backend connection should not be added back to
the pool after a successful fetch with a Connection:close header.

Pooling such a connection would be counter-productive if closing the
session was requested by the backend itself, because it would then be
likely that reusing the connection would result in busting the extra
chance.

Setting the Connection:close directly in VCL can help mitigating against
a misbehaving backend.

Refs #3400