#acl PaulHowarth:read,write,admin,revert,delete All:read

=== Wednesday 31st August 2022 ===

==== Local Packages ====

 * Updated `curl` to 7.85.0:
  * quic: Add support via wolfSSL
  * schannel: Add TLS 1.3 support
  * setopt: Add `CURLOPT_PROTOCOLS_STR` and `CURLOPT_REDIR_PROTOCOLS_STR`
  * amigaos: Fix threaded resolver on AmigaOS 4.x
  * amissl: Allow AmiSSL to be used with AmigaOS 4.x builds
  * amissl: Make AmiSSL v5 a minimum requirement
  * asyn-ares: Make a single alloc out of hostname + async data
  * asyn-thread: Fix socket leak on OOM
  * asyn-thread: Make getaddrinfo_complete return CURLcode
  * base64: base64url encoding has no padding
  * `BUGS.md`: Improve language
  * build: Improve OS string in CMake and '`config-win32.h`'
  * `cert.d`: Clarify that escape character works for file paths
  * `cirrus.yml`: Replace `py38-pip` with `py39-pip`
  * cirrus/freebsd-ci: Bootstrap the `pip` installer
  * cmake: Add detection of threadsafe feature
  * cmake: Do not force Windows target versions
  * cmake: Fix build for mingw cross compile
  * cmake: Link curl to its dependencies with `PRIVATE`
  * cmake: Remove `APPEND` in `export(TARGETS)`
  * cmake: Set feature `PSL` if present
  * cmake: Support `ngtcp2` boringssl backend
  * `cmdline-opts/gen.pl`: Improve performance
  * config: Remove the check for and use of `SIZEOF_SHORT`
  * `configure`: `-pthread` not available on AmigaOS 4.x
  * `configure`: Check for the `stdatomic.h` header in `configure`
  * `configure`: Fix `--disable-headers-api`
  * `configure`: Fix broken `m4` syntax in TLS options
  * `configure`: Fixup bsdsocket detection code for AmigaOS 4.x
  * `configure`: If asked to use TLS, fail if no TLS lib was detected
  * `configure`: Introduce `CURL_SIZEOF`
  * `connect`: Add quic connection information
  * `connect`: Close the happy eyeballs loser connection when using QUIC
  * `connect`: Revert the use of `IP*_RECVERR`
  * `connect`: Set socktype/protocol correctly
  * cookie: Reject cookies with "control bytes" ([[CVE:2022-35252|CVE-2022-35252]])
  * cookie: Treat a blank domain in `Set-Cookie:` as non-existing
  * cookie: Use `%zu` to `infof()` for `size_t` values
  * `curl-compilers.m4`: Make `icc` use `-diag*` options and disable two warnings
  * `curl-config`: Quote directories with potential space
  * `curl-confopts`: Remove leftover `AC_REQUIRE`s
  * `curl-functions.m4`: Check whether atomics can link
  * `curl-wolfssl.m4`: Add options header when building test code
  * `curl.h`: `CURLE_CONV_FAILED` is obsoleted
  * `curl.h`: Include `<sys/select.h>` on SunOS
  * `curl`: Output warning when a cookie is dropped due to size
  * `curl`: `writeout`: Fix repeated header outputs
  * `Curl_close`: Call `Curl_resolver_cancel` to avoid memory leak
  * `curl_easy_header`: Add `CURLH_PSEUDO` to sanity check
  * `curl_mime_data.3`: Polish the wording
  * `curl_multi_timeout.3`: Clarify usage
  * `CURLINFO_SPEED_UPLOAD`/`DOWNLOAD.3`: Fix examples
  * `CURLOPT_BUFFERSIZE.3`: Add upload buffersize to `see also`
  * `CURLOPT_CONNECT_ONLY.3`: Clarify multi API use
  * `CURLOPT_SERVER_RESPONSE_TIMEOUT`: The new name
  * digest: Fix memory leak, fix not quoted 'opaque'
  * digest: Fix missing increment of '`nc`' value for auth-int
  * digest: Pass over leading spaces in qop values
  * digest: Reject broken header with session protocol but without qop
  * `docs/cmdline-opts/gen.pl`: Encode leading single and double quotes
  * `docs/cmdline-opts`: Fix example and categories for `--form-escape`
  * `docs/cmdline`: Mark `fail` and `fail-with-body` as mutually exclusive
  * docs: Add `dns` category to `--resolve`
  * docs: Explain `curl_easy_escape`/`unescape` curl handle is ignored
  * docs: Remove him/her/he/she from documentation
  * doh: Move doh related struct definitions to `doh.h`
  * doh: Use https protocol by default
  * `easy_lock.h`: Include `sched.h` if available to fix build
  * `easy_lock.h`: Use `__asm__` instead of `asm` to fix build
  * `easy_lock`: Fix build for mingw
  * `easy_lock`: Fix build with `icc`
  * `easy_lock`: Fix the `#ifdef` conditional for `ia32_pause`
  * `easy_lock`: Switch to using `atomic_int` instead of `bool`
  * easyoptions: Fix `icc` warning
  * escape: Remove outdated comment
  * `examples/curlx.c`: Remove
  * file: Add handling of native AmigaOS paths
  * file: Fix `icc` enumerated type mixed with another type warning
  * ftp: Use a correct expire ID for timer expiry
  * `getinfo`: Return better error on `NULL` as first argument
  * GHA: Add two Intel compiler CI jobs
  * GHA: Move libressl CI from zuul to !GitHub
  * GHA: Move over ngtcp2-gnutls CI job from zuul
  * GHA: Move CI torture test from Zuul
  * h2h3: Fix overriding the '`TE: Trailers`' header
  * hostip: Resolve `*.localhost` to `127.0.0.1`/`::1`
  * `HTTP3.md`: Update to `msh3` v0.4.0
  * http: Typecast the `httpreq` assignment to avoid `icc` compiler warning
  * `http_aws_sigv4.c`: Remove two unused includes
  * http_chunks: Remove an assign + typecast
  * hyper: Customize `test1274` to how hyper unfolds headers
  * hyper: Enable obs-folded multiline headers
  * hyper: Use wakers for curl pause/resume
  * imap: Use `ISALNUM()` for alphanumeric checks
  * ldap: Adapt to `conn->port` now being an '`int`'
  * `lib/curl_path.c`: Add `ISC` to license expression
  * `lib3026`: Reduce the number of threads to 100
  * `libcurl-security.3`: Fix typo on macro "`SH_`"
  * libssh2: Make `atime`/`mtime` date overflow return error
  * libssh2: Provide symlink name in SFTP dir listing
  * libssh: Ignore deprecation warnings
  * libssh: Make `atime`/`mtime` date overflow return error
  * `Makefile.m32`: Add '`CURL_RC`' and '`CURL_STRIP`' variables
  * `Makefile.m32`: Add '`NGTCP2_LIBS`' option
  * `Makefile.m32`: Add support for custom ARCH
  * `Makefile.m32`: Allow `-nghttp3`/`-ngtcp2` without `-ssl`
  * `Makefile.m32`: Do not set the `libcurl.rc` debug flag
  * `Makefile.m32`: Stop trying to build `libcares.a`
  * memdebug: Add annotation attributes
  * `mprintf`: Fix `*dyn_vprintf()` when out of memory
  * `mprintf`: Make `dprintf_formatf` never return negative
  * msh3: Fix the QUIC disconnect function
  * multi: Fix the return code from `Curl_pgrsDone()`
  * multi: Have `curl_multi_remove_handle` close `CONNECT_ONLY` transfer
  * multi: Use a pipe instead of a socketpair on Apple platforms
  * multi: Use larger dns hash table for multi interface
  * multi_wait: Fix and improve `Curl_poll` error handling on Windows
  * multi_wait: Fix skipping to populate `revents` for `extra_fds`
  * `netrc.d`: Remove spurious quote
  * `netrc`: Use the password from lines without login
  * ngtcp2: Fix build error due to change in nghttp3 prototypes
  * ngtcp2: Fix incompatible function pointer types
  * ngtcp2: Fix missing initialization of `nghttp3_nv.flags`
  * ngtcp2: Fix stall or busy loop on `STOP_SENDING` with upload data
  * ngtcp2: Implement `cb_h3_stop_sending` and `cb_h3_reset_stream` callbacks
  * openssl: Add '`CURL_BORINGSSL_VERSION`' to identify BoringSSL
  * openssl: Add cert path in error message
  * openssl: Add details to "unable to set client certificate" error
  * openssl: Fix BoringSSL symbol conflicts with LDAP and Schannel
  * quiche: Fix build failure
  * select: Do not return fatal error on `EINTR` from `poll()`
  * `sendf`: Fix paused header writes since after the header API
  * `sendf`: Make `Curl_debug` a `void` function
  * `sendf`: Skip storing HTTP headers if HTTP disabled
  * `sendf`: Store the header type in an `unsigned char` to avoid `icc` warnings
  * splay: Avoid using `-1` in unsigned variable
  * `test3026`: Add support for Windows using native Win32 threads
  * `test3026`: Require '`threadsafe`'
  * `test44[2-4]`: Add '`--resolve`' to the keywords
  * `tests/server/sockfilt.c`: Avoid race condition without a mutex
  * tests: Fix http2 tests to use CRLF headers
  * tests: Several enumerated type clean-ups
  * `THANKS`: Merged two entries for Evgeny Grin
  * tidy-up: Delete unused build configuration macros
  * tool: Re-introduce set file comment code for AmigaOS
  * `tool_cfgable`: Make '`synthetic_error`' a plain bool
  * `tool_formparse`: Fix variable may be used before its value is set
  * `tool_getparam`: Make `--doh-url ""` switch it off
  * `tool_getparam`: Repair `cleanarg`
  * `tool_operate`: Better clean-up of easy handle in exit path
  * `tool_paramhlp`: Fix "enumerated type mixed with another type"
  * `tool_paramhlp`: Make `check_protocol` return `ParameterError`
  * `tool_progress`: Avoid division by zero in parallel progress meter
  * `tool_writeout`: Fix enumerated type mixed with another type
  * trace: 0x7F character is non-printable
  * `unit1303`: Four tests should have `TRUE` for '`connecting`'
  * url: Enumerated type mixed with another type
  * url: Really use the user provided in the url when `netrc` entry exists
  * url: Reject URLs with hostnames longer than 65535 bytes
  * url: Treat missing usernames in `netrc` as empty
  * urldata: Change second `proxytype` field to `unsigned char` to match
  * urldata: Make '`negnpn`' use less storage
  * urldata: Make `state.httpreq` an `unsigned char`
  * urldata: Make three `*_proto` struct fields smaller
  * urldata: Move smaller fields down in `connectdata` struct
  * urldata: Reduce size of several struct fields
  * vtls: Make `Curl_ssl_backend()` return the enum type `curl_sslbackend`
  * Windows: Improve random source
 * Updated `xz` to 5.2.6 in Fedora 38 onwards (see [[https://git.tukaani.org/?p=xz.git;a=blob_plain;f=NEWS;hb=8dfed05bdaa4873833ba24279f02ad2db25effea|NEWS]] for details)
 * Rebuilt `perl-Compress-Raw-Lzma` (2.201) for `xz` 5.2.6 in Fedora 38 onwards

----