#acl PaulHowarth:read,write,admin,revert,delete All:read

=== Wednesday 12th December 2018 ===

==== Local Packages ====

 * Updated `curl` to 7.63.0:
  * `curl`: Add `%{stderr}` and `%{stdout}` for `--write-out`
  * `curl`: Add undocumented option `--dump-module-paths` for win32
  * `setopt`: Add `CURLOPT_CURLU`
  * (`lib`)`curl.rc`: Fixup for minor bugs
  * `CURLINFO_REDIRECT_URL`: Extract the `Location:` header field unvalidated
  * `CURLOPT_HEADERFUNCTION.3`: Match '`nitems`' name in synopsis and description
  * `CURLOPT_WRITEFUNCTION.3`: Spell out that it gets called many times
  * `Curl_follow`: Accept non-supported schemes for "fake" redirects
  * `KNOWN_BUGS`: Add `--proxy-any` connection issue
  * NTLM: Remove redundant `ifdef USE_OPENSSL`
  * NTLM: Force the connection to HTTP/1.1
  * OS400: Add URL API ccsid wrappers and sync ILE/RPG bindings
  * `SECURITY-PROCESS`: bountygraph shuts down again
  * `TODO`: Have the URL API offer IDN decoding
  * `ares`: Remove fd from multi fd set when `ares` is about to close the fd
  * `axtls`: Removed
  * `checksrc`: Add `COPYRIGHTYEAR` check
  * `cmake`: Fix MIT/Heimdal Kerberos detection
  * `configure`: Include all libraries in ssl-libs fetch
  * `configure`: Show `CFLAGS`, `LDFLAGS` etc. in summary
  * `connect`: Fix building for recent versions of Minix
  * cookies: Create the cookiejar even if no cookies to save
  * cookies: Expire "`Max-Age=0`" immediately
  * `curl`: `--local-port` range was not "including"
  * `curl`: Fix `--local-port` integer overflow
  * `curl`: Fix memory leak reading `--writeout` from file
  * `curl`: Fixed UTF-8 in current console code page (Windows)
  * `curl_easy_perform`: Fix timeout handling
  * `curl_global_sslset()`: `id == -1` is not necessarily an error
  * `curl_multibyte`: Fix a `malloc` overcalculation
  * `curle`: Move deprecated error code to `ifndef` block
  * docs: `curl_formadd` field and file names are now escaped
  * docs: Escape "`\n`" codes
  * doh: Fix memory leak in OOM situation
  * doh: Make it work for h2-disabled builds too
  * `examples/ephiperfifo`: Report error when `epoll_ctl` fails
  * ftp: Avoid two unsigned int overflows in FTP listing parser
  * host names: Allow trailing dot in name resolve, then strip it
  * http2: Upon `HTTP_1_1_REQUIRED`, retry the request with HTTP/1.1
  * http: Don't set `CURLINFO_CONDITION_UNMET` for http status code `204`
  * http: Fix HTTP Digest auth to include query in URI
  * `http_negotiate`: Do not close connection until negotiation is completed
  * `impacket`: Add `LICENSE`
  * `infof`: Clearly indicate truncation
  * ldap: Fix LDAP URL parsing regressions
  * `libcurl`: Stop reading from paused transfers
  * `mprintf`: Avoid unsigned integer overflow warning
  * `netrc`: Don't ignore the login name specified with "`--user`"
  * `nss`: Fall back to latest supported SSL version
  * nss: Fix compatibility with nss versions 3.14 to 3.15
  * nss: Fix fallthrough comment to fix picky compiler warning
  * nss: Remove version selecting dead code
  * nss: Set default max-tls to 1.3/1.2
  * openssl: Remove `SSLEAY` leftovers
  * openssl: Do not log excess "TLS app data" lines for TLS 1.3
  * openssl: Do not use file BIOs if not requested
  * openssl: Fix unused variable compiler warning with old openssl
  * openssl: Support session resume with TLS 1.3
  * openvms: Fix example name
  * os400: Add `curl_easy_conn_upkeep()` to ILE/RPG binding
  * os400: Add `CURLOPT_CURLU` to ILE/RPG binding
  * os400: Fix return type of `curl_easy_pause()` in ILE/RPG binding
  * packages: Remove old leftover files and dirs
  * pop3: Only do `APOP` with a valid timestamp
  * `runtests`: Use the local `curl` for verifying
  * schannel: Be consistent in Schannel capitalization
  * schannel: Better `CURLOPT_CERTINFO` support
  * schannel: Use `Curl_` prefix for global private symbols
  * `snprintf`: Renamed and we now only use `msnprintf()`
  * ssl: Fix compilation with OpenSSL 0.9.7
  * ssl: Replace all internal uses of `CURLE_SSL_CACERT`
  * symbols-in-versions: Add missing `CURLU_` symbols
  * `test328`: Verify `Content-Encoding: none`
  * tests: Disable `SO_EXCLUSIVEADDRUSE` for stunnel on Windows
  * tests: Drop `http_pipe.py` script, no longer used
  * `tool_cb_wrt`: Silence function cast compiler warning
  * `tool_doswin`: Fix uninitialized field warning
  * travis: Build with `clang` sanitizers
  * travis: Remove `curl` before a normal build
  * url: A short host name + port is not a scheme
  * url: Fix IPv6 numeral address parser
  * urlapi: Only skip encoding the first '`=`' with `APPENDQUERY` set

----