Suricata

On 8.0.x, http.response_header and http2.header_name with flow:to_client never match on HTTP/2 traffic, although the response headers are parsed and logged. http.request_header (to-server) and single-buffer to-client keywords such as http.header and http.stat_code work.
On main the matching works.

MR270 has the reproducer as an SV test.