#acl PaulHowarth:read,write,admin,revert,delete All:read

=== Wednesday 29th April 2020 ===

==== Local Packages ====

 * Updated `curl` to 7.70.0:
  * `curl`: Add `--ssl-revoke-best-effort` to allow a "best effort" revocation check
  * mqtt: Add new experimental protocol
  * schannel: Add "best effort" revocation check option: `CURLSSLOPT_REVOKE_BEST_EFFORT`
  * `writeout`: Support to generate JSON output with '`%{json}`'
  * appveyor: Add Unicode winbuild jobs
  * appveyor: Completely disable tests that fail to timeout early
  * appveyor: Show failed tests in log even if test is ignored
  * appveyor: Sort builds by type and add two new variants
  * appveyor: Turn disabled tests into ignored result tests
  * appveyor: Use random test server ports based upon `APPVEYOR_API_URL`
  * build: Fixed build for systems with `select()` in `unistd.h`
  * buildconf: Avoid using tempfile when removing files
  * `checksrc`: Warn on obvious conditional blocks on the same line as `if()`
  * CI-fuzz: Increase fuzz time to 40 minutes
  * ci/tests: Fix Azure Pipelines not running Windows containers
  * CI: Add build with `ngtcp2` + `gnutls` on Travis CI
  * CI: Bring !GitHub Actions fuzzing job in line with macOS jobs
  * CI: Migrate macOS jobs from Azure and Travis CI to !GitHub Actions
  * CI: Remove default Ubuntu build from !GitHub Actions
  * cirrus: No longer ignore test 504, which is working again
  * cirrus: Re-enable the FreeBSD 13 CI builds
  * clean-up: Insert newline after `if()` conditions
  * cmake: Add aliases so exported target names are available in tree
  * cmake: Add `CMAKE_MSVC_RUNTIME_LIBRARY`
  * cmake: Add support for building with wolfSSL
  * cmake: Avoid MSVC C4273 warnings in `send`/`recv` checks
  * cmdline: Fix handling of `OperationConfig` linked list (`--next`)
  * `compressed.d`: Stress that the headers are not modified
  * config: Remove all defines of `HAVE_DES_H`
  *` configure`: Convert `-I` to `-isystem` as a last step
  * `configure`: Document '`compiler_num`' for `gcc`
  * `configure`: Don't check for `Security.framework` when cross-compiling
  * `configure`: Fix `-pedantic-errors` for GCC 5 and later
  * `configure`: Remove use of `-vec-report0` from `CFLAGS` with `icc`
  * `connect`: Happy eyeballs clean-up
  * `connect`: Store connection info for QUIC connections
  * copyright: Fix out-of-date copyright ranges and missing headers
  * `curl-functions.m4`: Remove inappropriate `AC_REQUIRE`
  * `curl.h`: Remove `CURL_VERSION_ESNI`, never supported nor documented
  * `curl.h`: Update comment typo
  * `curl`: Allow both `--etag-compare` and `--etag-save` with same file name
  * `curl_setup`: Define `_WIN32_WINNT_[OS]` symbols
  * `CURLINFO_CONDITION_UNMET`: Return true for 304 http status code
  * `CURLINFO_NUM_CONNECTS`: Improve accuracy
  * `CURLOPT_WRITEFUNCTION.3`: Add inline example and new see-also
  * dist: Add `mail-rcpt-allowfails.d` to the tarball
  * docs/make: Generate `curl.1` from listed files only
  * docs: Add warnings about `FILE:` URLs on Windows
  * `easy`: Fix `curl_easy_duphandle` for builds missing IPv6 that use `c-ares`
  * `examples/sessioninfo.c`: Add include to fix compiler warning
  * !GitHub Actions: Run when pushed to `master` or `*/ci` + PRs
  * gnutls: Bump lowest supported version to 3.1.10
  * gnutls: Don't skip really long certificate fields
  * gnutls: Ensure TLS 1.3 when SRP isn't requested
  * gopher: Check remaining time left during write busy loop
  * gskit: Use our internal `select` wrapper for portability
  * http2: Fix erroneous debug message that h2 connection closed
  * http: Don't consider upload done if the request isn't completely sent off
  * http: Free memory when `Alt-Used` header creation fails due to OOM
  * `lib/mk-ca-bundle`: Skip empty certs
  * `lib670`: Use the same Win32 API check as all other lib tests
  * lib: Fix typos in comments and error messages
  * lib: Never define `CURL_CA_BUNDLE` with a `getenv`
  * `libcurl-multi.3`: Added missing full stop
  * `libssh`: Avoid options override by configuration files
  * `libssh`: Use new ECDSA key types to check known hosts
  * `mailmap`: Fix up a few author names/fields
  * `Makefile.m32`: Improve `windres` parameter compatibility
  * `Makefile`: Run the `cd` commands in a sub-shell
  * `memdebug`: Don't log `free(NULL)`
  * mime: Properly check `Content-Type` even if it has parameters
  * multi-ssl: Reset the SSL backend on '`Curl_global_cleanup()`'
  * multi: Improve parameter check for `curl_multi_remove_handle`
  * nghttp2: 1.12.0 required
  * ngtcp2: Update to git master for the key installation API change
  * nss: Check for `PK11_CreateDigestContext()` returning `NULL`
  * openssl: Adapt to functions marked as deprecated since version 3
  * OS400: Update strings for ccsid-ifier (fixes the build)
  * `output.d`: Quote the URL when globbing
  * packages: Add `OS400/chkstrings.c` to the dist
  * `RELEASE-PROCEDURE.md`: Run the `copyright.pl` script!
  * Revert "`file: on Windows, refuse paths that start with \\`"
  * `runtests`: Always put test number in `servercmd` file
  * `runtests`: Provide nicer error message when protocol "`dump`" file is empty
  * schannel: Fix blocking timeout logic
  -*schannel: support `.P12` or `.PFX` client certificates
  * `scripts/release-notes.pl`: Add helper script for `RELEASE-NOTES` maintenance
  * `select`: Make `Curl_socket_check` take `timediff_t` timeout
  * `select`: Move duplicate `select` preparation code into `Curl_select`
  * `select`: Remove typecast from `SOCKET_WRITABLE`/`READABLE` macros
  * `server/getpart`: Make the "XML-parser" stricter
  * `server/resolve`: Remove `AI_CANONNAME` to make macos tell the truth
  * smtp: Set auth correctly
  * `sockfilt`: Add `logmsg` output to `select_ws_wait_thread` on Windows
  * `sockfilt`: Fix broken pipe on Windows to be ready in `select_ws`
  * `sockfilt`: Fix handling of ready closed sockets on Windows
  * `sockfilt`: Fix race-condition of waiting threads and event handling
  * socks: Fix blocking timeout logic
  * src: Remove C99 constructs to ensure C89 compliance
  * `SSLCERTS.md`: Fix example code for setting CA cert file
  * `test1148`: Tolerate progress updates better (again)
  * `test1154`: Set a proper name
  * `test1177`: Verify that all the `CURL_VERSION_` bits are documented
  * `test1566`: Verify `--etag-compare` that gets a 304 back
  * `test1908`: Avoid using fixed port number in test data
  * `test2043`: Use `revoked.badssl.com` instead of `revoked.grc.com`
  * `test2100`: Fix static port instead of dynamic value being used
  * `tests/data`: Fix some XML formatting issues in test cases
  * `tests/FILEFORMAT`: Converted to markdown and extended
  * `tests/server/util.c`: Use `curl_off_t` instead of `long` for pid
  * tests: Add `%NOLISTENPORT` and use it
  * tests: Add Windows compatible `pidwait` like `pidkill` and `pidterm`
  * tests: Fix conflict between Cygwin/msys and Windows PIDs
  * tests: Introduce preprocessed test cases
  * tests: Make Python-based servers compatible with Python 2 and 3
  * tests: Make runtests check that disabled tests exists
  * tests: Move pingpong server to dynamic listening port
  * tests: Remove python dependencies for `smbserver` from our tree
  * tests: Run the RTSP test server on a dynamic port number
  * tests: Run the SOCKS test server on a dynamic port number
  * tests: Run the sws server on "any port"
  * tests: Run the TFTP test server on a dynamic port number
  * tests: Use Cygwin/msys PIDs for `stunnel` and `sshd` on Windows
  * tls: Remove the `BACKEND` define kludge from most backends
  * tool: Do not declare functions with `Curl_` prefix
  * `tool_operate`: Fix `add_parallel_transfers` when more are in queue
  * transfer: Cap retries of "dead connections" to 5
  * transfer: Switch `PUT` to `GET`/`HEAD` on 303 redirect
  * travis: Bump the wolfssl CI build to use 4.4.0
  * travis: Update the `ngtcp2` build to use the latest OpenSSL patch
  * url: Allow non-HTTPS altsvc-matching for debug builds
  * version: Add '`cainfo`' and '`capath`' to version info struct
  * version: Increase buffer space for ssl version output
  * version: Skip `idn2_check_version()` check and add precaution
  * vquic: Add support for GnuTLS backend of `ngtcp2`
  * vtls: Fix `ssl_config` memory-leak on out-of-memory
  * warnless: Remove code block for `icc` that didn't work
  * Windows: Enable `UnixSockets` with all build toolchains
  * Windows: Suppress UI in all `CryptAcquireContext()` calls
 . I added a patch to fix the test suite when run from a separate build directory ([[https://github.com/curl/curl/pull/5310|GH#5310]])
 * Updated `perl-Module-CoreList` to 5.20200428:
  * Updated for v5.31.11
 * Rebuilt `python2-subversion` (F-33 version) to sync with `subversion-1.12.2-8` in Rawhide

----