Log message:
libssh2: update to 1.11.1.

 Enhancements and bugfixes

    autotools: fix to update `LDFLAGS` for each detected dependency (d19b6190 \ 
#1384 #1381 #1377)
    autotools: delete `--disable-tests` option, fix CI tests (e051ae34 #1271 \ 
#715 revert: 7483edfa)
    autotools: show the default for `hidden-symbols` option (a3f5594a #1269)
    autotools: enable `-Wunused-macros` with gcc (ecdf5199 #1262 #1227 #1224)
    autotools: fix dotless gcc and Apple clang version detections (89ccc83c \ 
#1232 #1187)
    autotools: show more clang/gcc version details (fb580161 #1230)
    autotools: avoid warnings in libtool stub code (96682bd5 #1227 #1224)
    autotools: sync warning enabler code with curl (5996fefe #1223)
    autotools: rename variable (ce5f208a #1222)
    autotools: picky warning options tidy-up (cdca8cff #1221)
    autotools: fix `cp` to preserve attributes and timestamp in `Makefile.am` \ 
(f64e6318)
    autotools: fix selecting WinCNG in cross-builds (and more) (00a3b88c #1187 #1186)
    autotools: use comma separator in `Requires.private` of `libssh2.pc` \ 
(7f83de14 #1124)
    autotools: remove `AB_INIT` from `configure.ac` (f4f52ccc)
    autotools: improve libz position (c89174a7 #1077 #941 #1075 #1013 regr: 4f0f4bff)
    autotools: skip tests requiring static lib if `--disable-static` (572c57c9 \ 
#1072 #663 #1056 regr: 83853f8a)
    build: stop detecting `sys/param.h` header (2677d3b0 #1418 #1415)
    build: silence warnings inside `FD_SET()`/`FD_ISSET()` macros (323a14b2 #1379)
    build: drop `-Wformat-nonliteral` warning suppressions (c452c5cc #1342)
    build: enable `-pedantic-errors` (3ec53f3e #1286)
    build: add mingw-w64 support to `LIBSSH2_PRINTF()` attribute (f8c45794 #1287)
    build: add `LIBSSH2_NO_DEPRECATED` option (b1414503 #1267 #1266 #1260 #1259)
    build: enable missing OpenSSF-recommended warnings, with fixes (afa6b865 #1257)
    build: enable more compiler warnings and fix them (7ecc309c #1224)
    build: picky warning updates (328a96b3 #1219)
    build: revert: respect autotools `DLL_EXPORT` in `libssh2.h` (481be044 #1141 \ 
#917 revert: fb1195cf)
    build: stop requiring libssl from openssl (c84745e3 #1128)
    build: tidy-up `libssh2.pc.in` variable names (5720dd9f #1125)
    build: add/fix `Requires.private` packages in `libssh2.pc` (ef538069 #1123)
    buildconf: drop (814a850c #1441 follow: fc5d7788)
    checksrc: update, check all sources, fix fallouts (1117b677 #1457)
    checksrc: sync with curl (8cd473c9 #1272)
    checksrc: fix spelling in comment (a95d401f)
    checksrc: modernise Perl file open (3d309f9b)
    checksrc: switch to dot file (d67a91aa #1052)
    ci: use Ninja with cmake (20ad047d #1458)
    ci: disable dependency tracking in autotools builds (e44f0418 #1396)
    ci: fix mbedtls runners on macOS (84411539 #1381)
    ci: enable Unity mode for most CMake builds (1bfae57b #1367 #1034)
    ci: add shellcheck job and script (d88b9bcd)
    ci: verify build and install from tarball (a86e27e8 #1362)
    ci: add reproducibility test for `maketgz` (2d765e45 #1360)
    ci: use Linux runner for BSDs, add arm64 FreeBSD 14 job (6f86b196 #1343)
    ci: do not parallelize `distcheck` job (5e65dd87 #1339)
    ci: add FreeBSD 14 job, fix issues (46333adf #1277)
    ci: add OmniOS job, fix issues (5e0ec991)
    ci: show compiler in cross/cygwin job names (c9124088)
    ci: add OpenBSD (v7.4) job + fix build error in example (0c9a8e35 #1250)
    ci: add NetBSD (v9.3) job (65c7a7a5)
    ci: update and speed up FreeBSD job (eee4e805)
    ci: use absolute path in `CMAKE_INSTALL_PREFIX` (74948816 #1247)
    ci: boost mbedTLS build speed (236e79a1 #1245)
    ci: add BoringSSL job (cmake, gcc, amd64) (c9dd3566 #1233)
    ci: fixup FreeBSD version, bump mbedTLS (fea6664e #1217)
    ci: add FreeBSD 13.2 job (a7d2a573 #1215)
    ci: mbedTLS 3.5.0 (5e190442 #1202)
    ci: update actions, use shallow clones with appveyor (d468a33f #1199)
    ci: replace `mv` + `chmod` with `install` in `Dockerfile` (5754fed6 #1175)
    ci: set file mode early in `appveyor_docker.yml` (633db55f)
    ci: add spellcheck (codespell) (a79218d3)
    ci: add MSYS builds (autotools and cmake) (d43b8d9b #1162)
    ci: add Cygwin builds (autotools and cmake) (f1e96e73 #1161)
    ci: add mingw-w64 UWP build (1215aa5f #1155 #1147)
    ci: add missing timeout to 'autotools distcheck' step (6265ffdb)
    ci: add non-static autotools i386 build, ignore GHA updates on AppVeyor \ 
(c6e137f7 #1074 #1072)
    ci: prefer `=` operator in shell snippets (e5c03043 #1073)
    ci: drop redundant/unused vars, sync var names (ab8e95bc #1059)
    ci: add i386 Linux build (with mbedTLS) (abdf40c7 #1057 #1053)
    ci/appveyor: reduce test runs (workaround for infrastructure permafails) \ 
(b5e68bdc #1461)
    ci/appveyor: increase wait for SSH server on GHA (bf3af90b)
    ci/appveyor: bump to OpenSSL 3.2.1 (53d9c1a6 #1363 #1348)
    ci/appveyor: re-enable parallel mode (e190e5b2 #1294 #884 #867)
    ci/appveyor: delete UWP job broken since Visual Studio upgrade (d0a7f1da #1275)
    ci/appveyor: YAML/PowerShell formatting, shorten variable name (06fd721f #1200)
    ci/appveyor: move to pure PowerShell (8a081fd9 #1197)
    ci/GHA: revert concurrency and improve permissions (e4c042f6)
    ci/GHA: FreeBSD 14.1, actions bump (ae04b1b9 #1424)
    ci/GHA: fix wolfSSL-from-source AES-GCM tests (1c0b07a7 #1409 #1408)
    ci/GHA: add Linux job with latest wolfSSL built from source (d4cea53f #1408 \ 
#1299 #1020)
    ci/GHA: tidy up build-from-source steps (2c633033)
    ci/GHA: show configure logs on failure and other tidy-ups (dab48398 #1403)
    ci/GHA: bump parallel jobs to nproc+1 (6f3d3bc8 #1402)
    ci/GHA: show test logs on failure (b8ffa7a5 #1401)
    ci/GHA: fix `Dockerfile` failing after Ubuntu package update (839bb84e #1400)
    ci/GHA: use ubuntu-latest with OmniOS job (50143d58)
    ci/GHA: shell syntax tidy-up (3b23e039 #1390)
    ci/GHA: bump NetBSD/OpenBSD, add NetBSD arm64 job (e980af72 #1388)
    ci/GHA: tidy up wolfSSL autotools config on macOS (5953c1f1 #1383)
    ci/GHA: shorter mbedTLS autotools workaround (736e3d7d #1382 #1381)
    ci/GHA: fix gcrypt with autotools/macOS/Homebrew/ARM64 (ae2770de #1377)
    ci/GHA: fix verbose option for autotools jobs (499b27ae #1376)
    ci/GHA: dump `config.log` on failure for macOS autotools jobs (4fa69214 #1375)
    ci/GHA: fix `autoreconf` failure on macOS/Homebrew (0b64b30b #1374)
    ci/GHA: fixup Homebrew location (for ARM runners) (6128aee0 #1373)
    ci/GHA: review/fixup auto-cancel settings (b08cfbc9 #1292)
    ci/GHA: restore curly braces in `if` (36748270 #1145)
    ci/GHA: simplify `if` strings (cab3db58 #1140)
    cmake: sync and improve Find modules, add `pkg-config` native detection \ 
(45064137 #1445 #1420)
    cmake: generate `LIBSSH2_PC_LIBS_PRIVATE` dynamically (c87f1296 #1466)
    cmake: add comment about `ibssh2.pc.in` variables (14b1b9d0)
    cmake: support absolute `CMAKE_INSTALL_INCLUDEDIR`/`CMAKE_INSTALL_LIBDIR` \ 
(d70cee36 #1465)
    cmake: rename two variables and initialize them (0fce9dcc #1464)
    cmake: prefer `find_dependency()` in `libssh2-config.cmake` (d9c2e550 #1460)
    cmake: tidy up syntax, minor improvements (9d9ee780 #1446)
    cmake: rename mbedTLS and wolfSSL Find modules (570de0f2)
    cmake: fixup version detection in mbedTLS Find module (8e3c40b2 #1444)
    cmake: mbedTLS detection tidy-ups (6d1d13c2 #1438)
    cmake: add quotes, delete ending dirseps (2bb46d44 #1437 #1166)
    cmake: sync formatting in `cmake/Find*` modules (a0310699)
    cmake: tidy up function name casing in `CopyRuntimeDependencies.cmake` (03547cb8)
    cmake: use the imported target of FindOpenSSL module (82b09f9b #1322)
    cmake: rename picky warnings script (64d6789f #1225)
    cmake: fix multiple include of libssh2 package (932d6a32 #1216)
    cmake: show crypto backend in feature summary (20387285 #1211)
    cmake: simplify showing CMake version (fc00bdd7 #1203)
    cmake: cleanup mbedTLS version detection more (4c241d5c #1196 #1192)
    cmake: delete duplicate `include()` (30eef0a6)
    cmake: improve/fix mbedTLS detection (41594675 #1192 #1191)
    cmake: tidy-up `foreach()` syntax (4a64ca14 #1180)
    cmake: verify `libssh2_VERSION` in integration tests (a20572e9)
    cmake: show cmake versions in ci (87f5769b)
    cmake: quote more strings (e9c7d3af #1173)
    cmake: add `ExternalProject` integration test (aeaefaf6 #1171)
    cmake: add integration tests (8715c3d5 #1170)
    cmake: (re-)add aliases for `add_subdirectory()` builds (4ff64ae3 #1169)
    cmake: style tidy-up (3fa5282d #1166)
    cmake: add `LIB_NAME` variable (5453fc80 #1159)
    cmake: tidy-up concatenation in `CMAKE_MODULE_PATH` (ae7d5108 #1157)
    cmake: replace `libssh2` literals with `PROJECT_NAME` variable (72fd2595 #1152)
    cmake: fix `STREQUAL` check in error branch (42d3bf13 #1151)
    cmake: cache more config values on Windows (11a03690 #1142)
    cmake: streamline invocation (f58f77b5 #1138)
    cmake: merge `set_target_properties()` calls (a9091007 #1132)
    cmake: (re-)add zlib to `Libs.private` in `libssh2.pc` (64643018 #1131)
    cmake: use `wolfssl/options.h` for detection, like autotools (c5ec6c49 #1130)
    cmake: add openssl libs to `Libs.private` in `libssh2.pc` (5cfa59d3 #1127)
    cmake: bump minimum CMake version to v3.7.0 (9cd18f45 #1126)
    cmake: CMAKE_SOURCE_DIR -> PROJECT_SOURCE_DIR (0f396aa9 #1121)
    cmake: tidy-ups (2fc36790 #1122)
    cmake: re-add `Libssh2:libssh2` for compatibility + lowercase namespace \ 
(2da13c13 #1104 #731 #1103)
    copyright: remove years from copyright headers (187d89bb #1082)
    disable DSA by default (b7ab0faa #1435 #1433)
    docs: update `INSTALL_AUTOTOOLS` (2f0efde3 #1316)
    docs: replace SHA1 with SHA256 in CMake example (766bde9f)
    example: restore `sys/time.h` for AIX (24503cb9 #1340 #1335 #1334 #1001 \ 
regr: e53aae0e)
    example: use `libssh2_socket_t` in X11 example (3f60ccb7)
    example: replace remaining libssh2_scp_recv with libssh2_scp_recv2 in output \ 
messages (8d69e63d #1258 follow: 6c84a426)
    example: fix regression in `ssh2_exec.c` (279a2e57 #1106 #861 #846 #1105 \ 
regr: b13936bd)
    example, tests: call `WSACleanup()` for each `WSAStartup()` (94b6bad3 #1283)
    example, tests: fix/silence `-Wformat-truncation=2` gcc warnings (744e059f)
    hostkey: do not advertise ssh-rsa when SHA1 is disabled (82d1b8ff #1093 #1092)
    kex: prevent possible double free of hostkey (b3465418 #1452)
    kex: always check for null pointers before calling _libssh2_bn_set_word \ 
(9f23a3bb #1423)
    kex: fix a memory leak in key exchange (19101843 #1412 #1404)
    kex: always add extension indicators to kex_algorithms (00e2a07e #1327 #1326)
    libssh2.h: add deprecated function warnings (9839ebe5 #1289 #1260)
    libssh2.h: add portable `LIBSSH2_SOCKET_CLOSE()` macro (28dbf016 #1278)
    libssh2.h: use `_WIN32` for Windows detection instead of rolling our own \ 
(631e7734 #1238)
    libssh2.pc: reference mbedcrypto pkgconfig (c149a127 #1405)
    libssh2.pc: re-add & extend support for static-only libssh2 builds \ 
(624abe27 #1119 #1114)
    libssh2.pc: don't put `@LIBS@` in pc file (1209c16d)
    mac: add empty hash functions for `mac_method_hmac_aesgcm` to not crash when \ 
e.g. setting `LIBSSH2_METHOD_CRYPT_CS` (b2738391 #1321)
    mac: handle low-level errors (f64885b6 #1297)
    Makefile.mk: delete Windows-focused raw GNU Make build (43485579 #1204)
    maketgz: reproducible tarballs/zip, display tarball hashes (d52fe1b4 #1357 #1359)
    maketgz: `set -eu`, reproducibility, improve zip, add CI test (cba7f975 #1353)
    man: improve `libssh2_userauth_publickey_from*` manpages (581b72aa #1347 \ 
#1308 #652)
    man: fix double spaces and dash escaping (a3ffc422 #1210)
    man: add description to `libssh2_session_get_blocking.3` (67e39091 #1185)
    mbedtls: always init ECDSA mbedtls_pk_context (a50d7deb #1430)
    mbedtls: correctly initialize values (ECDSA) (1701d5c0 #1428 #1421)
    mbedtls: expose `mbedtls_pk_load_file()` for our use (1628f6ca #1421 #1393 \ 
#1349 follow: e973493f)
    mbedtls: add workaround + FIXME to build with 3.6.0 (2e4c5ec4 #1349)
    mbedtls: improve disabling `-Wredundant-decls` (ecec68a2 #1226 #1224)
    mbedtls: include `version.h` for `MBEDTLS_VERSION_NUMBER` (9d7bc253 #1095 #1094)
    mbedtls: use more `size_t` to sync up with `crypto.h` (1153ebde #1054 #879 \ 
#846 #1053)
    md5: allow disabling old-style encrypted private keys at build-time \ 
(eb9f9de2 #1181)
    mingw: fix printf mask for 64-bit integers (36c1e1d1 #1091 #876 #846 #1090)
    misc: flatten `_libssh2_explicit_zero` if tree (74e74288 #1149)
    NMakefile: delete (c515eed3 #1134 #1129)
    openssl: free allocated resources when using openssl3 (b942bad1 #1459)
    openssl: fix memory leaks in `_libssh2_ecdsa_curve_name_with_octal_new` and \ 
`_libssh2_ecdsa_verify` (8d3bc19b #1449)
    openssl: fix calculating DSA public key with OpenSSL 3 (8b3c6e9d #1380)
    openssl: initialize BIGNUMs to NULL in `gen_publickey_from_dsa` for OpenSSL \ 
3 (f1133c75 #1320)
    openssl: fix cppcheck found NULL dereferences (f2945905 #1304)
    openssl: delete internal `read_openssh_private_key_from_memory()` (34aff5ff \ 
#1306)
    openssl: use OpenSSL 3 HMAC API, add `no-deprecated` CI job (363dcbf4 #1243 \ 
#1235 #1207)
    openssl: make a function static, add `#ifdef` comments (efee9133 #1246 #248 \ 
follow: 03092292)
    openssl: fix DSA code to use OpenSSL 3 API (82581941 #1244 #1207)
    openssl: fix `EC_KEY` reference with OpenSSL 3 `no-deprecated` build \ 
(487152f4 #1236 #1235 #1207)
    openssl: use non-deprecated APIs with OpenSSL 3.x (b0ab005f #1207)
    openssl: silence `-Wunused-value` warnings (bf285500 #1205)
    openssl: use automatic initialization with LibreSSL 2.7.0+ (d79047c9 #1146 #302)
    openssl: add missing check for `LIBRESSL_VERSION_NUMBER` before use \ 
(4a42f42e #1117 #1115)
    os400: drop vsprintf() use (40e817ff #1462 #1457)
    os400: Add two recent files to the distribution (e4c65e5b #1364)
    os400: fix shellcheck warnings in scripts (fixups) (81341e1e #1366 #1364 #1358)
    os400: fix shellcheck warnings in scripts (c6625707 #1358)
    os400: maintain up to date (8457c37a #1309)
    packet: properly bounds check packet_authagent_open() (88a960a8 #1179)
    pem: fix private keys encrypted with AES-GCM methods (e87bdefa #1133)
    reuse: upgrade to `REUSE.toml` (70b8bf31 #1419)
    reuse: fix duplicate copyright warning (b9a4ed83)
    reuse: comply with 3.1 spec and 2.0.0 checker (fe6239a1 #1102 #1101 #1098)
    reuse: provide SPDX identifiers (f6aa31f4 #1084)
    scp: fix missing cast for targets without large file support (c317e06f #1060 \ 
#1057 #1002 regr: 5db836b2)
    session: support server banners up to 8192 bytes (was: 256) (1a9e8811 #1443 \ 
#1442)
    session: add `libssh2_session_callback_set2()` (c0f69548 #1285)
    session: handle EINTR from send/recv/poll/select to try again as the error \ 
is not fatal (798ed4a7 #1058 #955)
    sftp: increase SFTP_HANDLE_MAXLEN back to 4092 (75de6a37 #1422)
    sftp: implement posix-rename@openssh.com (fb652746 #1386)
    src: implement chacha20-poly1305@openssh.com (492bc543 #1426 #584)
    src: use `UINT32_MAX` (dc206408 #1413)
    src: fix type warning in `libssh2_sftp_unlink` macro (ac2e8c73 #1406)
    src: check the return value from `_libssh2_bn_*()` functions (95c824d5 #1354)
    src: support RSA-SHA2 cert-based authentication (rsa-sha2-512_cert and \ 
rsa-sha2-256_cert) (3a6ab70d #1314)
    src: check hash update/final success (4718ede4 #1303 #1301)
    src: check hash init success (2ed9eb92 #1301)
    src: add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack" \ 
(d34d9258 #1291 #1290)
    src: disable `-Wsign-conversion` warnings, add option to re-enable (6e451669 \ 
#1284 #1257)
    src: fix gcc 13 `-Wconversion` warning on Darwin (8cca7b77 #1209 follow: \ 
08354e0a)
    src: drop a redundant `#include` (1f0174d0 #1153)
    src: improve MSVC C4701 warning fix (8b924999 #1086 #876 #1083)
    src: bump `hash_len` to `size_t` in `LIBSSH2_HOSTKEY_METHOD` (8b917d76 #1076)
    src: bump DSA and ECDSA sign `hash_len` to `size_t` (7b8e0225 #1055)
    tests: avoid using `MAXPATHLEN`, for portability (12427f4f #1415 #198 #1414)
    tests: fix excluding AES-GCM tests (fbd9d192 #1410)
    tests: drop default cygpath option `-u` (38e50aa0)
    tests: fix shellcheck issues in `test_sshd.test` (a2ac8c55)
    tests: sync port number type with the rest of codebase (eb996af8)
    tests: fall back to `$LOGNAME` for username (5326a5ce #1241 #1240)
    tests: show cmake version used in integration tests (2cd2f40e #1201)
    tests: formatting and tidy-ups (e61987a3)
    tests: replace FIXME with comments (1a99a86a)
    tests: add aes256-gcm encrypted key test (802336cf #1135 #1133)
    tests: trap signals in scripts (b2916b28 #1098)
    tests: cast to avoid `-Wchar-subscripts` with Cygwin (43df6a46 #1081 #1080)
    test_read: make it run without Docker (57e9d18e #1139)
    test_sshd.test: show sshd and test connect logs on harness failure (299c2040 \ 
#1097)
    test_sshd.test: set a safe PID directory (e8cabdcf #1089)
    test_sshd.test: minor cleanups (d29eea1d)
    tidy-up: link updates (c905bfd2 #1434)
    tidy-up: typo in comment (792e1b6f)
    tidy-up: fix typo found by codespell (706ec36d)
    tidy-up: bump casts from int to long for large C99 types in printfs \ 
(2e5a8719 #1264 #1257)
    tidy-up: `unsigned` -> `unsigned int` (b136c379)
    tidy-up: stop using leading underscores in macro names (c6589b88 #1248)
    tidy-up: around `stdint.h` (bfa00f1b #1212)
    tidy-up: fix typo in `readme.vms` (a9a79e7a)
    tidy-up: use built-in `_WIN32` macro to detect Windows (6fbc9505 #1195)
    tidy-up: drop `www.` from `www.libssh2.org` (6e3e8839 #1172)
    tidy-up: delete duplicate word from comment (76307435)
    tidy-up: avoid exclamations, prefer single quotes, in outputs (003fb454 #1079)
    TODO: disable or drop weak algos (0b4bdc85 #1261)
    transport: fix unstable connections over non-blocking sockets (de004875 \ 
#1454 #720 #1431 #1397)
    transport: check ETM on remote end when receiving (bde10825 #1332 #1331)
    transport: fix incorrect byte offset in debug message (2388a3aa #1096)
    userauth: avoid oob with huge interactive kbd response (f3a85cad #1337)
    userauth: add a new structure to separate memory read and file read \ 
(63b4c20e #773)
    userauth: check whether `*key_method` is a NULL pointer instead of \ 
`key_method` (bec57c40)
    wincng: fix `DH_GEX_MAXGROUP` set higher than supported (48584671 #1372 #493)
    wincng: add to ci/GHA, add `./configure` option `--enable-ecdsa-wincng` \ 
(3f98bfb0 #1368 #1315)
    wincng: add ECDSA support for host and user authentication (3e723437 #1315)
    wincng: prefer `ULONG`/`DWORD` over `unsigned long` (186c1d63 #1165)
    wincng: tidy-ups (7bb669b5 #1164)
    wolfssl: drop header path hack (8ae1b2d7 #1439)
    wolfssl: fix `EVP_Cipher()` use with v5.6.0 and older (a5b0fac2 #1407 #1394 \ 
#797 #1299 #1020)
    wolfssl: bump version in upstream issue comment (5cab802c)
    wolfssl: require v5.4.0 for AES-GCM (260a721c #1411 #1299 #1020)
    wolfssl: enable debug logging in wolfSSL when compiled in (76e7a68a #1310)

Log message:
libssh2: add upstream fix for Terrapin

Bump PKGREVISION.

Log message:
*: bump for openssl 3

Log message:
libssh2: update to 1.11.0.

Version 1.11.0 - May 30 2023

Enhancements and bugfixes

    Adds support for encrypt-then-mac (ETM) MACs
    Adds support for AES-GCM crypto protocols
    Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
    Adds support for RSA certificate authentication
    Adds FIDO support with *_sk() functions
    Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
    Adds Agent Forwarding and libssh2_agent_sign()
    Adds support for Channel Signal message libssh2_channel_signal_ex()
    Adds support to get the user auth banner message libssh2_userauth_banner()
    Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519, \ 
AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
    Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
    Adds wolfSSL support to CMake file
    Adds mbedTLS 3.x support
    Adds LibreSSL 3.5 support
    Adds support for CMake "unity" builds
    Adds CMake support for building shared and static libs in a single pass
    Adds symbol hiding support to CMake
    Adds support for libssh2.rc for all build tools
    Adds .zip, .tar.xz and .tar.bz2 release tarballs
    Enables ed25519 key support for LibreSSL 3.7.0 or higher
    Improves OpenSSL 1.1 and 3 compatibility
    Now requires OpenSSL 1.0.2 or newer
    Now requires CMake 3.1 or newer
    SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
    SFTP: No longer has a packet limit when reading a directory
    SFTP: now parses attribute extensions if they exist
    SFTP: no longer will busy loop if SFTP fails to initialize
    SFTP: now clear various errors as expected
    SFTP: no longer skips files if the line buffer is too small
    SCP: add option to not quote paths
    SCP: Enables 64-bit offset support unconditionally
    Now skips leading \r and \n characters in banner_receive()
    Enables secure memory zeroing with all build tools on all platforms
    No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
    Speed up base64 encoding by 7x
    Assert if there is an attempt to write a value that is too large
    WinCNG: fix memory leak in _libssh2_dh_secret()
    Added protection against possible null pointer dereferences
    Agent now handles overly large comment lengths
    Now ensure KEX replies don't include extra bytes
    Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
    Fixed possible buffer overflow in keyboard interactive code path
    Fixed overlapping memcpy()
    Fixed Windows UWP builds
    Fixed DLL import name
    Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
    Support for building with gcc versions older than 8
    Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
    Restores ANSI C89 compliance
    Enabled new compiler warnings and fixed/silenced them
    Improved error messages
    Now uses CIFuzz
    Numerous minor code improvements
    Improvements to CI builds
    Improvements to unit tests
    Improvements to doc files
    Improvements to example files
    Removed "old gex" build option
    Removed no-encryption/no-mac builds
    Removed support for NetWare and Watcom wmake build files

Log message:
security: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Unfetchable distfiles (fetched conditionally?):
./security/cyrus-sasl/distinfo \ 
cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2

Log message:
security: Remove SHA1 hashes for distfiles

Log message:
security/libssh2: remove unknown configure options

Log message:
libssh2: add upstream bug report