#acl PaulHowarth:read,write,admin,revert,delete All:read

=== Wednesday 26th October 2022 ===

==== Local Packages ====

 * Updated `curl` to 7.86.0:
  * NPN: Remove support for and use of
  * Websockets: Initial support
  * altsvc: Reject bad port numbers
  * altsvc: Use '`h3`' for `h3`
  * amiga: Do not hard-code `openssl`/`zlib` into the os config
  * amiga: Set `SIZEOF_CURL_OFF_T=8` by default
  * amigaos: Add missing curl header
  * asyn-ares: Set hint flags when calling `ares_getaddrinfo`
  * autotools: Allow `--enable-symbol-hiding` with Windows
  * autotools: Allow unix sockets on Windows
  * autotools: Reduce brute-force when detecting `recv`/`send` arg list
  * `aws_sigv4`: Fix header computation
  * bearssl: Make it properly C89 compliant
  * CI/GHA: Cancel outdated CI runs on new PR changes
  * CI/GHA: Merge `msh3` and `openssl3` builds into linux workflow
  * cirrus-ci: Add macOS build with m1
  * cirrus: Use `make LDFLAGS=-all-static` instead of `curl_LDFLAGS`
  * cli tool: Do not use disabled protocols
  * cmake: Add missing `inet_ntop` check
  * cmake: Add the check of `HAVE_SOCKETPAIR`
  * cmake: Define `BUILDING_LIBCURL` in `lib/CMakeLists`, not `config.h`
  * cmake: Delete duplicate `HAVE_GETADDRINFO` test
  * cmake: Enable more detection on Windows
  * cmake: Fix original MinGW builds
  * cmake: Improve usability of CMake build as a sub-project
  * cmake: Set `HAVE_GETADDRINFO_THREADSAFE` on Windows
  * cmake: Set `HAVE_SOCKADDR_IN6_SIN6_SCOPE_ID` on Windows
  * cmake: Sync `HAVE_SIGNAL` detection with autotools
  * cmdline/docs: Add a required '`multi`' keyword for each option
  * configure: Correct the wording when checking `grep -E`
  * configure: Deprecate builds with small `curl_off_t`
  * configure: Fail if '`--without-ssl`' + explicit parameter for an ssl lib
  * configure: The `ngtcp2` option should default to '`no`'
  * connect: Change verbose IPv6 address:port to [address]:port
  * connect: Fix builds without `AF_INET6`
  * connect: Fix `Curl_updateconninfo` for `TRNSPRT_UNIX`
  * connect: Fix the wrong error message on `connect` failures
  * content_encoding: Use writer struct subclasses for different encodings
  * cookie: Reject cookie names or content with TAB characters
  * ctype: Remove all use of `<ctype.h>`, use our own versions
  * `curl-compilers.m4`: For `gcc` + want warnings, set `gnu89` standard
  * `curl-compilers.m4`: Use `-O2` as default optimize for `clang`
  * `curl-wolfssl.m4`: Error out if wolfSSL is not usable
  * `curl.h`: Fix mention of wrong error code in comment
  * `curl/add_file_name_to_url`: Use the `libcurl` URL parser
  * `curl/add_parallel_transfers`: Better error handling
  * `curl/get_url_file_name`: Use `libcurl` URL parser
  * curl: Warn for `--ssl` use, considered insecure
  * `curl_ctype`: Convert to macros-only
  * `curl_easy_pause.3`: Unpausing is as fast as possible
  * `curl_escape.3`: Fix typo
  * `curl_setup`: Disable use of FLOSS for 64-bit !NonStop builds
  * `curl_setup`: Include `curl.h` after platform setup headers
  * `curl_setup`: Include only `system.h` instead of `curl.h`
  * `curl_strequal.3`: Fix argument typo
  * `curl_url_set.3`: Document `CURLU_APPENDQUERY` properly
  * `CURLMOPT_PIPELINING.3`: De-dupe manpage xref
  * `CURLOPT_ACCEPT_ENCODING.3`: Remove "four" as they are five
  * `CURLOPT_AUTOREFERER.3`: Highlight the privacy leak risk
  * `CURLOPT_COOKIEFILE`: Insist on "" for enable-without-file
  * `CURLOPT_COOKIELIST.3`: Fix formatting mistake
  * `CURLOPT_DNS_INTERFACE.3`: Mention it works for almost all protocols
  * `CURLOPT_MIMEPOST.3`: Add an (inline) example
  * `CURLOPT_POSTFIELDS.3`: Refer to `CURLOPT_MIMEPOST`
  * `CURLOPT_PROXY_SSLCERT_BLOB.3`: This is for HTTPS proxies
  * `CURLOPT_WILDCARDMATCH.3`: Fix backslash escaping under single quotes
  * `CURLSHOPT_UNLOCKFUNC.3`: The callback has no '`access`' argument
  * `DEPRECATE.md`: Support for systems without 64 bit data types
  * `docs/examples`: Avoid deprecated options in examples where possible
  * `docs/INSTALL`: Update Android instructions for newer NDKs
  * `docs/libcurl/symbols-in-versions`: Add several missing symbols
  * docs: 100+ spelling fixes
  * docs: Correct missing uppercase in Markdown files
  * docs: Document more server names for test files
  * docs: Fix deprecation version inconsistencies
  * docs: Make sure `libcurl` opts examples pass in long arguments
  * docs: Remove mentions of deprecated '`--without-openssl`' parameter
  * docs: Tag curl options better in man pages
  * docs: Tell about disabled protocols in `CURLOPT_*PROTOCOLS_STR`
  * docs: Update sourceforge project links
  * easy: Fix the `#include` order
  * easy: Fix the `altsvc` init for `curl_easy_duphandle`
  * easy_lock: Check for `HAVE_STDATOMIC_H` as well
  * `examples/chkspeed`: Improve portability
  * formdata: Fix warning: '`CURLformoption`' is promoted to '`int`'
  * ftp: Ignore a `550` response to `MDTM`
  * ftp: Remove redundant `if`
  * functypes: Provide the `recv` and `send` arg and return types
  * getparameter: Return `PARAM_MANUAL_REQUESTED` for `-M` even when disabled
  * GHA: Build tests in a separate step from the running of them
  * GHA: Run `proselint` on markdown files
  * !GitHub: Initial `CODEOWNERS` setup for CI configuration
  * header: Define public API functions as `extern c`
  * headers: Reset the requests counter at transfer start
  * hostip: Guard `PF_INET6` use
  * hostip: Lazily wait to figure out if IPv6 works until needed
  * http, vauth: Always provide `Curl_allow_auth_to_host()` functionality
  * http2: Make `nghttp2` less picky about field whitespace
  * `HTTP3.md`: Update Caddy example
  * http: Try parsing `Retry-After:` as a number first
  * http_proxy: Restore the protocol pointer on error ([[CVE:2022-42915|CVE-2022-42915]])
  * `httpput-postfields.c`: Shorten string for C89 compliance
  * ldap: Delete stray `CURL_HAS_MOZILLA_LDAP` reference
  * lib1560: Extended to verify detect/reject of unknown schemes
  * lib517: Fix C89 constant signedness
  * lib: Add missing `limits.h` includes
  * lib: Add required Win32 setup definitions in `setup-win32.h`
  * lib: Prepare the incoming of additional protocols
  * lib: Sanitize conditional exclusion around MIME
  * lib: Set more flags in `config-win32.h`
  * lib: The number four in a sequence is the "fourth"
  * libssh: If `sftp_init` fails, don't get the sftp error code
  * `Makefile.m32`: De-duplicate build rules
  * `Makefile.m32`: Drop `CROSSPREFIX` and our `CC`/`AR` defaults
  * `Makefile.m32`: Exclude libs and libpaths for shared mode executables
  * `Makefile.m32`: Fix regression with `tool_hugehelp`
  * `Makefile.m32`: Major rework
  * `Makefile.m32`: Reintroduce `CROSSPREFIX` and `-W -Wall`
  * `Makefile.m32`: Support more options
  * `manpage-syntax.pl`: All libcurl option symbols should be `\fI`-tagged
  * manpages: Fix spelling of "allows to" → "allows one to"
  * misc: `ISSPACE()` → `ISBLANK()`
  * misc: Use the term "null-terminate" consistently
  * mprintf: Reject two kinds of precision for the same argument
  * mprintf: Use `snprintf` if available
  * mqtt: Return error for too long topic
  * mqtt: Spell out `CONNECT` in comments
  * msh3: Change the `static_assert` to make the code C89
  * netrc: Compare user name case sensitively
  * netrc: Replace `fgets` with `Curl_get_line` ([[CVE:2022-35260|CVE-2022-35260]])
  * netrc: Use the URL-decoded user
  * ngtcp2: Fix build errors due to changes in `ngtcp2` library
  * ngtcp2: Fix C89 compliance nit
  * noproxy: Support proxies specified using CIDR notation
  * openssl: Make certinfo available for QUIC
  * `README.md`: Add GHA status badges for Linux and macOS builds
  * `RELEASE-PROCEDURE.md`: Mention patch releases
  * resolve: Make forced IPv4 resolve only use `A` queries
  * runtests: Fix uninitialized value on ignored tests
  * schannel: Ban server ALPN change during `recv` renegotiation
  * schannel: Don't reset `recv`/`send` function pointers on renegotiation
  * schannel: When importing PFX, disable key persistence
  * scripts: Use '`grep -E`' instead of '`egrep`'
  * setopt: Use the handler table for protocol name to number conversions
  * setopt: When `POST` is set, reset the '`upload`' field ([[CVE:2022-32221|CVE-2022-32221]])
  * setup-win32: No longer define `UNICODE`/`_UNICODE` implicitly
  * `single_transfer`: Use the `libcurl` URL parser when appending query parts
  * smb: Replace `CURL_WIN32` with `WIN32`
  * strcase: Add and use `Curl_timestrcmp`
  * strerror: Improve two URL API error messages
  * `symbol-scan.pl`: Also check for `LIBCURL*` symbols
  * `symbol-scan.pl`: Scan and verify `.3` man pages
  * `symbols-in-versions`: Add missing `LIBCURL*` symbols
  * `symbols-in-versions`: `CURLOPT_ENCODING` is deprecated since 7.21.6
  * test1119: Scan all public headers
  * test1275: Verify uppercase after period in markdown
  * test972: Verify the output without using external tool
  * `tests/certs/scripts`: Insert standard curl source headers
  * `tests/Makefile`: Remove run time stats from ci-test
  * `tests`: Avoid `CreateThread` if `_beginthreadex` is available
  * tests: Fix tag syntax errors in test files
  * tests: Skip mime/form tests when mime is not built-in
  * tidy-up: Delete parallel/unused feature flags
  * tidy-up: Delete unused `HAVE_STRUCT_POLLFD`
  * `TODO`: Provide the error body from a `CONNECT` response
  * tool: Avoid generating ambiguous escaped characters in `--libcurl`
  * tool: Remove dead code
  * tool: Reorganize function `c_escape` around a `dynbuf`
  * `tool_hugehelp`: Make `hugehelp` a blank macro when disabled
  * `tool_main`: Exit at once if out of file descriptors
  * `tool_operate`: Avoid a few `#ifdef`s for disabled-`libcurl` builds
  * `tool_operate`: More transfer clean-up after parallel transfer fail
  * `tool_operate`: Prevent over-queuing in parallel mode
  * `tool_operate`: Reduce `errorbuffer` `alloc`s
  * `tool_paramhelp`: Asserts verify maximum sizes for string loading
  * `tool_paramhelp`: Make the `max` argument a '`double`'
  * `tool_progress`: Remove '`Qd`' from the parallel progress bar
  * `tool_setopt`: Use better English in `--libcurl` source comments
  * `tool_xattr`: Save the original URL, not the final redirected one
  * unit test 1655: Make it C89-compliant
  * url: A zero-length `userinfo` part in the URL is still a (blank) user
  * url: Allow non-HTTPS HSTS-matching for debug builds
  * url: Rename function due to name-clash in Watt-32
  * url: Use IDN decoded names for HSTS checks ([[CVE:2022-42916|CVE-2022-42916]])
  * urlapi: Detect scheme better when not guessing
  * urlapi: Fix parsing URL without slash with `CURLU_URLENCODE`
  * urlapi: Leaner with fewer `alloc`s
  * urlapi: Reject more bad characters from the host name field
  * `winbuild/MakefileBuild.vc`: Handle spaces in `libssh(2)` include paths
  * winbuild: Use `NMake` batch-rules for compilation
  * windows: Add `.rc` support to autotools builds
  * windows: Adjust name of two internal public functions
  * windows: Autotools `.rc` warnings fixup
  * wolfSSL: Fix session management bug
 * Updated `unrar` to 6.20 beta 1

----