v1.0.18

• change repo layout and build pipeline to dep/gox/GOPATH style
• lint fixes and minor struct alignment changes (minor optimization)
• update mlog dependency
• build with go-1.10.2

v1.0.17

• update dependency versions to current
• include deps in tree (ease build for heroku)
• minor makefile cleanup
• rebuild with go-1.9.3

v1.0.16

• rebuild with go-1.9

v1.0.15

• rebuild with go-1.8
• strip binaries as part of default build

EDIT / 2017-04-24

• rebuilt release with go-1.8.1

EDIT / 2017-07-01

• rebuilt release with go-1.8.3

v1.0.14

• Pass through ETag header from server. The previous omission was
  inconsistent with passing the if-none-match client request header.

v1.0.13

• resolve potential resource leak with redirection failures and http response
  body closing

v1.0.12

• better address rejection logic

v1.0.11

• resolve hostname and check against rfc1918 (best effort blocking of dns rebind attacks)
• fix regex match bug with 172.16.0.0/12 addresses (over eager match)

v1.0.10

• apply a more friendly default content-security-policy

v1.0.9

• just a rebuild of 1.0.8 with go1.7.3