We have released nghttp2 v1.67.1.

Do not download the archive files generated by GitHub. They do not work. Please download the signed and versioned tar balls, such as nghttp2-1.67.1.tar.gz.

lib

Remove session_update_glitch_ratelim call from session_handle_invalid_stream2. Because that makes error handling quite difficult because it might be called in the nested function calls, and that might lead to the unexpected result. It seems to me that this was accidentally added.