fix: null client_connection in Finding 2 eviction path + OOM cleanup fault-injection

README.md

@@ -84,11 +84,18 @@ prove -r t
 
 ## nginx Version Compatibility
 
+This module is now **v2** and intentionally targets only newer nginx versions.
+
 | nginx version | Notes |
 |---------------|-------|
-| < 1.9.1       | Not supported — the upstream peer API used by this module was introduced in nginx 1.9.1. |
-| 1.9.1 – 1.24.x | Supported. |
-| ≥ 1.25.x      | Supported. Versions in the 1.25/1.26/1.27/1.28 series (e.g. 1.28.3) changed internal assumptions about `ngx_connection_t->data` in the upstream event handler (`ngx_http_upstream_handler` now expects `c->data` to hold the request pointer). Earlier releases of this module reused `c->data` to store the NTLM cache item on idle connections, which caused segfaults with these nginx versions. This was fixed in the module — see [PR #4](https://github.com/Securepoint/nginx-ntlm-module/pull/4). Use a module build from the current `main` branch when running nginx ≥ 1.25. |
+| < 1.25.0      | Not supported by v2. |
+| ≥ 1.25.0      | Supported. |
+
+### Migration notes (breaking change)
+
+- v2 enforces nginx >= 1.25.0 at compile time.
+- If you need older nginx support, keep using an older release/branch of this module.
+- Directive names and behavior remain the same: `ntlm`, `ntlm_timeout`, `ntlm_time`, `ntlm_requests`.
 
 ## Acknowledgments