#acl PaulHowarth:read,write,admin,revert,delete All:read

=== Wednesday 4th March 2020 ===

==== Local Packages ====

 * Updated `curl` to 7.69.0
  * polarssl: Removed
  * smtp: Add `CURLOPT_MAIL_RCPT_ALLLOWFAILS` and `--mail-rcpt-allowfails`
  * wolfSSH: New SSH backend
  * altsvc: Improved header parser
  * altsvc: Keep a copy of the file name to survive handle reset
  * altsvc: Make saving the cache an atomic operation
  * altsvc: Use `h3-27`
  * azure: Disable `brotli` on the macos debug-builds
  * build: Remove all `HAVE_OPENSSL_ENGINE_H` defines
  * `checksrc.bat`: Fix not being able to run script from the main `curl` dir
  * cleanup: Fix several comment typos
  * cleanup: Fix typos and wording in docs and comments
  * cmake: Add support for `CMAKE_LTO` option
  * cmake: Clean up and improve build procedures
  * cmake: Enable SMB for Windows builds
  * cmake: Improve libssh2 check on Windows
  * cmake: Show `HTTPS-proxy` in the features output
  * cmake: Support specifying the target Windows version
  * cmake: Use `check_symbol_exists` also for `inet_pton`
  * `configure.ac`: Fix comments about `--with-quiche`
  * `configure`: Disable `metalink` if mbedTLS is specified
  * `configure`: Disable `metalink` support for incompatible SSL/TLS
  * conn: Do not reuse connection if SOCKS proxy credentials differ
  * conncache: Removed unused `Curl_conncache_bundle_size()`
  * connect: Remove some spurious `infof()` calls
  * connection reuse: Respect the `max_concurrent_streams` limits
  * contributors: Also include people who contributed to curl-WWW
  * contrithanks: Use the most recent tag by default
  * cookie: Check `__Secure-` and `__Host-` case sensitively
  * cookies: Make saving atomic with a rename
  * `create-dirs.d`: Mention the mode
  * `curl`: Avoid using `strlen` for testing if a string is empty
  * `curl`: Error on `--alt-svc` use without support
  * `curl`: Let `-D` merge headers in one file again
  * `curl`: Make `#0` not output the full URL
  * `curl`: Make the `-#` spaceship bar not wrap the line
  * `curl`: Remove '`config`' field from `OutStruct`
  * `curl`: `progressbarinit`: Ignore column width from terminals < 20
  * `curl_escape.3`: Add a link to `curl_free`
  * `curl_getenv.3`: Fix the memory handling description
  * `curl_global_init`: Assume the `EINTR` bit by default
  * `curl_global_init`: Move the IPv6 works status bool to `multi` handle
  * `CURLINFO_COOKIELIST.3`: Fix example
  * `CURLOPT_ALTSVC_CTRL.3`: Fix the `DEFAULT` wording
  * `CURLOPT_PROXY_SSL_OPTIONS.3`: Sync with `CURLOPT_SSL_OPTIONS.3`
  * `CURLOPT_REDIR_PROTOCOLS.3`: Update the `DEFAULT` section
  * `data.d`: Remove "Multiple files can also be specified"
  * digest: Do not quote algorithm in HTTP authorisation
  * `docs/HTTP3`: Add `--enable-alt-svc` to `curl`'s `configure`
  * `docs/HTTP3`: Update the OpenSSL branch to use for `ngtcp2`
  * docs: Fix typo on `CURLINFO_RETRY_AFTER`
  * `easy`: Remove dead code
  * `form.d`: Fix two minor typos
  * ftp: Convert '`sock_accepted`' to a plain boolean
  * ftp: Remove superfluous checking for crlf in `user` or `pwd`
  * ftp: Shrink temp buffers used for `PORT`
  * !GitHub action: Add `CIFuzz`
  * !GitHub: Instructions to post "`uname -a`" on Unix systems in issues
  * GnuTLS: Always send client cert
  * gtls: Fixed compilation when using GnuTLS < 3.5.0
  * `hostip`: Move code to resolve IP address literals to '`Curl_resolv`'
  * `HTTP-COOKIES`: Describe the cookie file format
  * `HTTP-COOKIES`: Mention that a trailing newline is required
  * http2: Make pausing/unpausing set/clear local stream window
  * http2: Now requires `nghttp2` ≥ 1.12.0
  * http: Added 417 response treatment
  * http: Increase `EXPECT_100_THRESHOLD` to 1Mb
  * http: Mark `POST`s with no body as "upload done" from the start
  * http: Move "oauth_bearer" from `connectdata` to `Curl_easy`
  * include: Remove non-`curl` prefixed defines
  * `KNOWN_BUGS`: Multiple methods in a single `WWW-Authenticate:` header
  * `libssh2`: Add support for forcing a `hostkey` type
  * `libssh2`: Fix variable type
  * `libssh`: Improve known hosts handling
  * `llist`: Removed unused `Curl_llist_move()`
  * `location.d`: The method change is from `POST` to `GET` only
  * `md4`: Fixed compilation issues when using GNU TLS `gcrypt`
  * `md4`: Use `init`/`update`/`final` functions in Secure Transport
  * `md5`: Added implementation for mbedTLS
  * `mk-ca-bundle`: Add support for `CKA_NSS_SERVER_DISTRUST_AFTER`
  * `multi`: Change `curl_multi_wait`/`poll` to error on negative timeout
  * `multi`: Fix outdated comment
  * `multi`: If `Curl_readwrite` sets '`comeback`' use `expire`, not `loop`
  * `multi_done`: If multiplexed, make `conn->data` point to another transfer
  * `multi_wait`: Stop loop when `sread()` returns zero
  * `ngtcp2`: Add error code for QUIC connection errors
  * `ngtcp2`: Fixed to only use `AF_INET6` when `ENABLE_IPV6`
  * `ngtcp2`: Update to git master and its draft-25 support
  * ntlm: Move the winbind data into the NTLM data structure
  * ntlm: Pass the `Curl_easy` structure to the private winbind functions
  * ntlm: Removed the dependency on the TLS libraries when using MD5
  * `ntlm_wb`: Use `Curl_socketpair()` for greater portability
  * `oauth2-bearer.d`: Works for HTTP too
  * openssl: Make `CURLINFO_CERTINFO` not truncate `x509v3` fields
  * openssl: Remove redundant assignment
  * os400: Fixed the build
  * pause: Force-drain the transfer on unpause
  * quiche: Update to draft-25
  * `README`: Mention that the docs are in `docs/`
  * `RELEASE-PROCEDURE`: Feature window is closed post-release a few days
  * `runtests`: Make random seed fixed for a month
  * `runtests`: Restore the command log
  * schannel: Make `CURLOPT_CAINFO` work better on Windows 7
  * `schannel_verify`: Fix alt names manual verify for UNICODE builds
  * `sha256`: Use crypto implementations when available
  * `singleuse.pl`: Support new API functions, fix `curl_dbg_` handling
  * smtp: Support the `SMTPUTF8` extension
  * smtp: Support UTF-8 based host names in `MAIL FROM`
  * SOCKS: Make the `connect` phase non-blocking
  * `strcase`: Turn `Curl_raw_tolower` into `static`
  * `strerror`: Increase `STRERROR_LEN` 128 → 256
  * `test1323`: Added missing 'unit test' feature requirement
  * tests: Add a unit test for MD4 digest generation
  * tests: Add a unit test for SHA256 digest generation
  * tests: Add a unit test for the HMAC hash generation
  * tests: Deduce the tool name from the test case for unit tests
  * tests: Fix Python 3 compatibility of `smbserver.py`
  * `tool_dirhie`: Allow directory traversal during creation
  * `tool_homedir`: Change `GetEnv()` to use `libcurl`'s `curl_getenv()`
  * `tool_util`: Improve Windows version of `tvnow()`
  * travis: Update non-OpenSSL Linux jobs to Bionic
  * `url`: Include the failure reason when `curl_win32_idn_to_ascii()` fails
  * `urlapi`: Guess scheme properly with credentials given
  * `urldata`: Do string enums without `#ifdef`s for build scripts
  * vtls: Refactor `Curl_multissl_version` to make the code clearer
  * win32: `USE_WIN32_CRYPTO` to enable Win32 based MD4, MD5 and SHA256
 . I dropped `http2` support for EL-6, F-23 and F-24 builds as the `libnghttp2` versions there were too old

----