Log message:
curl: updated to 7.74.0

curl and libcurl 7.74.0

This release includes the following changes:
 o hsts: add experimental support for Strict-Transport-Security

This release includes the following bugfixes:
 o CVE-2020-8286: Inferior OCSP verification
 o CVE-2020-8285: FTP wildcard stack overflow
 o CVE-2020-8284: trusting FTP PASV responses
 o acinclude: detect manually set minimum macos/ipod version
 o alt-svc: enable (in the build) by default
 o alt-svc: minimize variable scope and avoid "DEAD_STORE"
 o asyn: use 'struct thread_data *' instead of 'void *'
 o checksrc: warn on empty line before open brace
 o CI/appveyor: disable test 571 in two cmake builds
 o CI/azure: improve on flakiness by avoiding libtool wrappers
 o CI/tests: enable test target on TravisCI for CMake builds
 o CI/travis: add brotli and zstd to the libssh2 build
 o cirrus: build with FreeBSD 12.2 in CirrusCI
 o cmake: call the feature unixsockets without dash
 o cmake: check for linux/tcp.h
 o cmake: correctly handle linker flags for static libs
 o cmake: don't pass -fvisibility=hidden to clang-cl on Windows
 o cmake: don't use reserved target name 'test'
 o cmake: make BUILD_TESTING dependent option
 o cmake: make CURL_ZLIB a tri-state variable
 o cmake: set the unicode feature in curl-config on Windows
 o cmake: store IDN2 information in curl_config.h
 o cmake: use libcurl.rc in all Windows builds
 o configure: pass -pthread to Libs.private for pkg-config
 o configure: use pkgconfig to find openSSL when cross-compiling
 o connect: repair build without ipv6 availability
 o curl.1: add an "OUTPUT" section at the top of the manpage
 o curl.se: new home
 o curl: add compatibility for Amiga and GCC 6.5
 o curl: only warn not fail, if not finding the home dir
 o curl_easy_escape: limit output string length to 3 * max input
 o Curl_pgrsStartNow: init speed limit time stamps at start
 o curl_setup: USE_RESOLVE_ON_IPS is for Apple native resolver use
 o curl_url_set.3: fix typo in the RETURN VALUE section
 o CURLOPT_DNS_USE_GLOBAL_CACHE.3: fix typo
 o CURLOPT_HSTS.3: document the file format
 o CURLOPT_NOBODY.3: fix typo
 o CURLOPT_TCP_NODELAY.3: fix comment in example code
 o CURLOPT_URL.3: clarify SCP/SFTP URLs are for uploads as well
 o docs: document the 8MB input string limit
 o docs: fix typos and markup in ETag manpage sections
 o docs: Fix various typos in documentation
 o examples/httpput: remove use of CURLOPT_PUT
 o FAQ: refreshed
 o file: avoid duplicated code sequence
 o ftp: retry getpeername for FTP with TCP_FASTOPEN
 o gnutls: fix memory leaks (certfields memory wasn't released)
 o header.d: mention the "Transfer-Encoding: chunked" handling
 o HISTORY: the new domain
 o http3: fix two build errors, silence warnings
 o http3: use the master branch of GnuTLS for testing
 o http: pass correct header size to debug callback for chunked post
 o http_proxy: use enum with state names for 'keepon'
 o httpput-postfields.c: new example doing PUT with POSTFIELDS
 o infof/failf calls: fix format specifiers
 o libssh2: fix build with disabled proxy support
 o libssh2: fix transport over HTTPS proxy
 o libssh2: require version 1.0 or later
 o Makefile.m32: add support for HTTP/3 via ngtcp2+nghttp3
 o Makefile.m32: add support for UNICODE builds
 o mqttd: fclose test file when done
 o NEW-PROTOCOL: document what needs to be done to add one
 o ngtcp2: adapt to recent nghttp3 updates
 o ngtcp2: advertise h3 ALPN unconditionally
 o ngtcp2: Fix build error due to symbol name change
 o ngtcp2: use the minimal version of QUIC supported by ngtcp2
 o ntlm: avoid malloc(0) on zero length user and domain
 o openssl: acknowledge SRP disabling in configure properly
 o openssl: free mem_buf in error path
 o openssl: guard against OOM on context creation
 o openssl: use OPENSSL_init_ssl() with >= 1.1.0
 o os400: Sync libcurl API options
 o packages/OS400: make the source code-style compliant
 o quiche: close the connection
 o quiche: remove 'static' from local buffer
 o range.d: clarify that curl will not parse multipart responses
 o range.d: fix typo
 o Revert "multi: implement wait using winsock events"
 o rtsp: error out on empty Session ID, unified the code
 o rtsp: fixed Session ID comparison to refuse prefix
 o rtsp: fixed the RTST Session ID mismatch in test 570
 o runtests: return error if no tests ran
 o runtests: revert the mistaken edit of $CURL
 o runtests: show keywords when no tests ran
 o scripts/completion.pl: parse all opts
 o socks: check for DNS entries with the right port number
 o src/tool_filetime: disable -Wformat on mingw for this file
 o strerror: use 'const' as the string should never be modified
 o test122[12]: remove these two tests
 o test506: make it not run in c-ares builds
 o tests/*server.py: close log file after each log line
 o tests/server/tftpd.c: close upload file right after transfer
 o tests/util.py: fix compatibility with Python 2
 o tests: add missing global_init/cleanup calls
 o tests: fix some http/2 tests for older versions of nghttpx
 o tool_debug_cb: do not assume zero-terminated data
 o tool_help: make "output" description less confusing
 o tool_operate: --retry for HTTP 408 responses too
 o tool_operate: bail out proper on errors during parallel transfers
 o tool_operate: fix compiler warning when --libcurl is disabled
 o tool_writeout: use off_t getinfo-types instead of doubles
 o travis: use ninja-build for CMake builds
 o travis: use valgrind when running tests for debug builds
 o urlapi: don't accept blank port number field without scheme
 o urlapi: URL encode a '+' in the query part
 o urldata: remove 'void *protop' and create the union 'p'
 o vquic/ngtcp2.h: define local_addr as sockaddr_storage

Log message:
Revbump packages with a runtime Python dep but no version prefix.

For the Python 3.8 default switch.

Log message:
curl: Explicitly disable libpsl support

At least on some non-pkgsrc setup it can be accidentally picked up.

Noticed by Dr. Thomas Orgis via tech-pkg@.

Log message:
curl: update to 7.73.0.

curl and libcurl 7.73.0

 Public curl releases:         195
 Command line options:         234
 curl_easy_setopt() options:   278
 Public functions in libcurl:  85
 Contributors:                 2270

This release includes the following changes:

 o curl: add --output-dir [25]
 o curl: support XDG_CONFIG_HOME to find .curlrc [3]
 o curl: update --help with categories [77]
 o curl_easy_option_*: new API for meta-data about easy options [40]
 o CURLE_PROXY: new error code [7]
 o mqtt: enable by default [28]
 o sftp: add new quote commands 'atime' and 'mtime' [6]
 o ssh: add the option CURLKHSTAT_FINE_REPLACE [27]
 o tls: add CURLOPT_SSL_EC_CURVES and --curves [29]

This release includes the following bugfixes:

 o altsvc: clone setting in curl_easy_duphandle [60]
 o base64: also build for smtp, pop3 and imap [81]
 o BUGS: convert document to markdown [107]
 o build-wolfssl: fix build with Visual Studio 2019 [114]
 o buildconf: invoke 'autoreconf -fi' instead [37]
 o checksrc: detect // comments on column 0 [132]
 o checksrc: verify do-while and spaces between the braces [2]
 o checksrc: warn on space after exclamation mark [129]
 o CI/azure: disable test 571 in the msys2 builds [93]
 o CI/azure: MQTT is now enabled by default [64]
 o CI/azure: no longer ignore results of test 1013 [43]
 o CI/tests: fix invocation of tests for CMake builds [117]
 o CI/travis: add a CI job with openssl3 (from git master) [51]
 o cleanups: avoid curl_ on local variables [53]
 o CMake: add option to enable Unicode on Windows [48]
 o cmake: make HTTP_ONLY also disable MQTT [58]
 o CMake: remove explicit `CMAKE_ANSI_CFLAGS` [45]
 o cmake: remove scary warning [96]
 o cmdline-opts/gen.pl: generate nicer "See Also" in curl.1 [66]
 o configure: don't say HTTPS-proxy is enabled when disabled [120]
 o configure: fix pkg-config detecting wolfssl [26]
 o configure: let --enable-debug set -Wenum-conversion with gcc >= 10 [56]
 o conn: check for connection being dead before reuse [39]
 o connect.c: remove superfluous 'else' in Curl_getconnectinfo [42]
 o curl.1: add see also no-progress-meter on two spots [67]
 o curl.1: fix typo invokved -> invoked [36]
 o curl: in retry output don't call all problems "transient" [74]
 o curl: make --libcurl show binary posts correctly [130]
 o curl: make checkpasswd use dynbuf [100]
 o curl: make file2memory use dynbuf [102]
 o curl: make file2string use dynbuf [103]
 o curl: make glob_match_url use dynbuf [101]
 o curl: make sure setopt CURLOPT_IPRESOLVE passes on a long [134]
 o curl: retry delays in parallel mode no longer sleeps blocking [70]
 o curl: use curlx_dynbuf for realloc when loading config files [73]
 o curl:parallel_transfers: make sure retry readds the transfer [71]
 o curl_get_line: build only if cookies or alt-svc are enabled [13]
 o curl_mime_headers.3: fix the example's use of curl_slist_append [83]
 o Curl_pgrsTime - return new time to avoid timeout integer overflow [32]
 o Curl_send: return error when pre_receive_plain can't malloc [111]
 o dist: add missing CMake Find modules to the distribution [14]
 o docs/LICENSE-MIXING: remove [79]
 o docs/opts: fix typos in two manual pages [119]
 o docs/RESOURCES: remove [105]
 o docs/TheArtOfHttpScripting: convert to markdown [106]
 o docs: add description about CI platforms to CONTRIBUTE.md [44]
 o docs: correct non-existing macros in man pages [35]
 o doh: add error message for DOH_DNS_NAME_TOO_LONG [17]
 o dynbuf: make sure Curl_dyn_tail() zero terminates [78]
 o easy_reset: clear retry counter [82]
 o easygetopt: pass a valid enum to avoid compiler warning [75]
 o etag: save and use the full received contents [4]
 o ftp: a 550 response to SIZE returns CURLE_REMOTE_FILE_NOT_FOUND [99]
 o ftp: avoid risk of reading uninitialized integers [76]
 o ftp: get rid of the PPSENDF macro [85]
 o ftp: make a 552 response return CURLE_REMOTE_DISK_FULL [87]
 o ftp: separate FTPS from FTP over "HTTPS proxy" [112]
 o git: ignore libtests in 3XXX area [16]
 o github: use new issue template feature [88]
 o HISTORY: mention alt-svc added in 2019
 o HTTP/3: update to OpenSSL_1_1_1g-quic-draft-29 [41]
 o http: consolidate nghttp2_session_mem_recv() call paths [80]
 o http_proxy: do not count proxy headers in the header bytecount [90]
 o http_proxy: do not crash with HTTPS_PROXY and NO_PROXY set [50]
 o imap: make imap_send use dynbuf for the send buffer management [110]
 o imap: set cselect_bits to CURL_CSELECT_IN initially [104]
 o ldap: reduce the amount of #ifdefs needed [124]
 o lib/Makefile.am: bump VERSIONINFO due to new functions [65]
 o lib1560: verify "redirect" to double-slash leading URL [20]
 o lib583: fix enum mixup
 o lib: fix -Wassign-enum warnings [84]
 o lib: make Curl_gethostname accept a const pointer [38]
 o libssh2: handle the SSH protocols done over HTTPS proxy [125]
 o libssh2: pass on the error from ssh_force_knownhost_key_type [47]
 o Makefile.m32: add ability to override zstd libs [ci skip] [10]
 o man pages: switch to https://example.com URLs [86]
 o MANUAL: update examples to resolve without redirects [122]
 o mbedtls: add missing header when defining MBEDTLS_DEBUG [133]
 o memdebug: remove 9 year old unused debug function [126]
 o multi: expand pre-check for socket readiness [21]
 o multi: handle connection state winsock events [31]
 o multi: implement wait using winsock events [22]
 o ngtcp2: adapt to new NGTCP2_PROTO_VER_MAX define [108]
 o ngtcp2: adapt to the new pkt_info arguments [18]
 o ntlm: fix condition for curl_ntlm_core usage [46]
 o openssl: avoid error conditions when importing native CA [52]
 o openssl: consider ALERT_CERTIFICATE_EXPIRED a failed verification [57]
 o openssl: Fix wincrypt symbols conflict with BoringSSL [9]
 o parsedate: tune the date to epoch conversion [95]
 o pause: only trigger a reread if the unpause sticks [92]
 o pingpong: use a dynbuf for the *_pp_sendf() function [113]
 o READMEs: convert several to markdown [115]
 o runtests: add %repeat[]% for test files [116]
 o runtests: allow creating files without newlines [72]
 o runtests: allow generating a binary sequence from hex
 o runtests: clear pid variables when failing to start a server [12]
 o runtests: make cleardir() erase dot files too [8]
 o runtests: provide curl's version string as %VERSION for tests [127]
 o schannel: fix memory leak when using get_cert_location [15]
 o schannel: return CURLE_PEER_FAILED_VERIFICATION for untrusted root [128]
 o scripts: improve the "get latest curl release tag" logic
 o sectransp: make it build with --disable-proxy [123]
 o select.h: make socket validation macros test for INVALID_SOCKET [24]
 o select: align poll emulation to return all relevant events [63]
 o select: fix poll-based check not detecting connect failure
 o select: reduce duplication of Curl_poll in Curl_socket_check [23]
 o select: simplify return code handling for poll and select [49]
 o setopt: if the buffer exists, refuse the new BUFFERSIZE [5]
 o setopt: return CURLE_BAD_FUNCTION_ARGUMENT on bad argument [91]
 o socketpair: allow CURL_DISABLE_SOCKETPAIR [11]
 o sockfilt: handle FD_CLOSE winsock event on write socket [30]
 o src: spell whitespace without whitespace [121]
 o SSLCERTS: fix English syntax [34]
 o strerror: honor Unicode API choice on Windows [109]
 o symbian: drop support [118]
 o telnet.c: depend on static requirement of WinSock version 2 [61]
 o test1541: remove since it is a known bug [68]
 o test163[12]: require http to be built-in to run [94]
 o test434: test -K use in a single line without newline [59]
 o test971: show test mismatches "inline"
 o tests/data: Fix some mismatched XML tags in test cases
 o tests/FILEFORMAT: document nonewline support for <file>
 o tests/FILEFORMAT: document type=shell for <command>
 o tests/server/util.c: fix support for Windows Unicode builds [131]
 o tests: remove pipelining tests [69]
 o tls: fix SRP detection by using the proper #ifdefs [33]
 o tls: provide the CApath verbose log on its own line [1]
 o tool_setopt: escape binary data to hex, not octal
 o tool_writeout: add new writeout variable, %{num_headers} [97]
 o travis: add a build using libressl (from git master) [55]
 o url: use blank credentials when using proxy w/o username and password [54]
 o urlapi: use more Curl_safefree [89]
 o vtls: deduplicate client certificates in ssl_config_data [98]
 o win32: drop support for WinSock version 1, require version 2 [62]
 o winbuild: convert the instruction text to README.md [19]

Log message:
*: bump PKGREVISION for perl-5.32.

Log message:
curl: replace hardcoded perl shebang in tests

Log message:
curl: nghttpx is needed as test dependency for HTTP/2 tests

Log message:
curl: Update to 7.72.0

pkgsrc changes:
 - Add test dependency to Python and py-impacket for SMB and TELNET tests

Changes:
7.72.0
------
This release includes the following changes:
 o content_encoding: add zstd decoding support
 o CURL_PUSH_ERROROUT: allow the push callback to fail the parent stream
 o CURLINFO_EFFECTIVE_METHOD: added

This release includes the following bugfixes:
 o CVE-2020-8231: libcurl: wrong connect-only connection
 o appveyor: collect libcurl.dll variants with prefix or suffix
 o asyn-ares: correct some bad comments
 o bearssl: fix build with disabled proxy support
 o buildconf: avoid array concatenation in die()
 o buildconf: retire ares buildconf invocation
 o checksrc: ban gmtime/localtime
 o checksrc: invoke script with -D to find .checksrc proper
 o CI/azure: install libssh2 for use with msys2-based builds
 o CI/azure: unconditionally enable warnings-as-errors with autotools
 o CI/macos: enable warnings as errors for CMake builds
 o CI/macos: set minimum macOS version
 o CI/macos: unconditionally enable warnings-as-errors with autotools
 o CI: Add muse CI analyzer
 o cirrus-ci: upgrade 11-STABLE to 11.4
 o CMake: don't complain about missing nroff
 o CMake: fix test for warning suppressions
 o cmake: fix windows xp build
 o configure.ac: Sort features name in summary
 o configure: allow disabling warnings
 o configure: cleanup wolfssl + pkg-config conflicts when cross compiling.
 o configure: show zstd "no" in summary when built without it
 o connect: remove redundant message about connect failure
 o curl-config: ignore REQUIRE_LIB_DEPS in --libs output
 o curl.1: add a few missing valid exit codes
 o curl: add %{method} to the -w variables
 o curl: improve the existing file check with -J
 o curl_multi_setopt: fix compiler warning "result is always false"
 o curl_version_info.3: CURL_VERSION_KERBEROS4 is deprecated
 o CURLINFO_CERTINFO.3: fix typo
 o CURLOPT_NOBODY.3: clarify what setting to 0 means
 o docs: add date of 7.20 to CURLM_CALL_MULTI_PERFORM mentions
 o docs: Add video link to docs/CONTRIBUTE.md
 o docs: change "web site" to "website"
 o docs: clarify MAX_SEND/RECV_SPEED functionality
 o docs: Update a few leftover mentions of DarwinSSL
 o doh: remove redundant cast
 o file2memory: use a define instead of -1 unsigned value
 o ftp: don't do ssl_shutdown instead of ssl_close
 o ftpserver: don't verify SMTP MAIL FROM names
 o getinfo: reset retry-after value in initinfo
 o gnutls: repair the build with `CURL_DISABLE_PROXY`
 o gtls: survive not being able to get name/issuer
 o h2: repair trailer handling
 o http2: close the http2 connection when no more requests may be sent
 o http2: fix nghttp2_strerror -> nghttp2_http2_strerror in debug messages
 o libssh2: s/ssherr/sftperr/
 o libtest/Makefile.am: add -no-undefined for libstubgss for Cygwin
 o md(4|5): don't use deprecated macOS functions
 o mprintf: Fix dollar string handling
 o mprintf: Fix stack overflows
 o multi: Condition 'extrawait' is always true
 o multi: Remove 10-year old out-commented code
 o multi: remove two checks always true
 o multi: update comment to say easyp list is linear
 o multi_remove_handle: close unused connect-only connections
 o ngtcp2: adapt to error code rename
 o ngtcp2: adjust to recent sockaddr updates
 o ngtcp2: update to modified qlog callback prototype
 o nss: fix build with disabled proxy support
 o ntlm: free target_info before (re-)malloc
 o openssl: fix build with LibreSSL < 2.9.1
 o page-header: provide protocol details in the curl.1 man page
 o quiche: handle calling disconnect twice
 o runtests.pl: treat LibreSSL and BoringSSL as OpenSSL
 o runtests: move the gnutls-serv tests to a dynamic port
 o runtests: move the smbserver to use a dynamic port number
 o runtests: move the TELNET server to a dynamic port
 o runtests: run the DICT server on a random port number
 o runtests: run the http2 tests on a random port number
 o runtests: support dynamicly base64 encoded sections in tests
 o setopt: unset NOBODY switches to GET if still HEAD
 o smtp_parse_address: handle blank input string properly
 o socks: use size_t for size variable
 o strdup: remove the odd strlen check
 o test1119: verify stdout in the test
 o test1139: make it display the difference on test failures
 o test1140: compare stdout
 o test1908: treat file as text
 o tests/FILEFORMAT.md: mention %HTTP2PORT
 o tests/sshserver.pl: fix compatibility with OpenSSH for Windows
 o TLS naming: fix more Winssl and Darwinssl leftovers
 o tls-max.d: this option is only for TLS-using connections
 o tlsv1.3.d. only for TLS-using connections
 o tool_doswin: Simplify Windows version detection
 o tool_getparam: make --krb option work again
 o TrackMemory tests: ignore realloc and free in getenv.c
 o transfer: fix data_pending for builds with both h2 and h3 enabled
 o transfer: fix memory-leak with CURLOPT_CURLU in a duped handle
 o transfer: move retrycount from connect struct to easy handle
 o travis/script.sh: fix use of `-n' with unquoted envvar
 o travis: add ppc64le and s390x builds
 o travis: update quiche builds for new boringssl layout
 o url: fix CURLU and location following
 o url: silence MSVC warning
 o util: silence conversion warnings
 o win32: Add Curl_verify_windows_version() to curlx
 o WIN32: stop forcing narrow-character API
 o windows: add unicode to feature list
 o windows: disable Unix Sockets for old mingw

Log message:
curl: updated to 7.71.1

Fixed in 7.71.1:

cirrus-ci: disable FreeBSD 13 (again)
Curl_inet_ntop: always check the return code
CURLOPT_READFUNCTION.3: provide the upload data size up front
DYNBUF.md: fix a typo: trail => tail
escape: make the URL decode able to reject only %00-bytes
escape: zero length input should return a zero length output
examples/multithread.c: call curl_global_cleanup()
http2: set the correct URL in pushed transfers
http: fix proxy auth with blank password
mbedtls: fix build with disabled proxy support
ngtcp2: sync with current master
openssl: Fix compilation on Windows when ngtcp2 is enabled
Revert "multi: implement wait using winsock events"
sendf: improve the message on client write errors
terminology: call them null-terminated strings
tool_cb_hdr: Fix etag warning output and return code
url: allow user + password to contain "control codes" for HTTP(S)
vtls: compare cert blob when finding a connection to reuse

Log message:
curl: update to 7.71.0.

freeze ok: gdt, leot

curl and libcurl 7.71.0

 Public curl releases:         192
 Command line options:         232
 curl_easy_setopt() options:   277
 Public functions in libcurl:  82
 Contributors:                 2202

This release includes the following changes:

 o CURLOPT_SSL_OPTIONS: optional use of Windows' CA store (with openssl) [10]
 o setopt: add CURLOPT_PROXY_ISSUERCERT(_BLOB) for coherency [31]
 o setopt: support certificate options in memory with struct curl_blob [41]
 o tool: Add option --retry-all-errors to retry on any error [27]

This release includes the following bugfixes:

 o CVE-2020-8177: curl overwrite local file with -J [111]
 o CVE-2020-8169: Partial password leak over DNS on HTTP redirect [48]
 o *_sspi: fix bad uses of CURLE_NOT_BUILT_IN [21]
 o all: fix codespell errors [75]
 o altsvc: bump to h3-29 [114]
 o altsvc: fix 'dsthost' may be used uninitialized in this function
 o altsvc: fix parser for lines ending with CRLF [74]
 o altsvc: remove the num field from the altsvc struct [109]
 o appveyor: add non-debug plain autotools-based build [90]
 o appveyor: disable flaky test 1501 and ignore broken 1056
 o appveyor: disable test 1139 instead of ignoring it
 o asyn-*: remove support for never-used NULL entry pointers [19]
 o azure: use matrix strategy to avoid configuration redundancy [83]
 o build: disable more code/data when built without proxy support [84]
 o buildconf: remove -print from the find command that removes files
 o checksrc: enhance the ASTERISKSPACE and update code accordingly [52]
 o CI/macos: fix 'is already installed' errors by using bundle [94]
 o cirrus: disable SFTP and SCP tests [7]
 o CMake: add ENABLE_ALT_SVC option
 o CMake: add HTTP/3 support (ngtcp2+nghttp3, quiche) [34]
 o CMake: add libssh build support [37]
 o CMake: do not build test programs by default [30]
 o CMake: fix runtests.pl with CMake, add new test targets [29]
 o CMake: ignore INTERFACE_LIBRARY targets for pkg-config file [112]
 o CMake: rebuild Makefile.inc.cmake when Makefile.inc changes [58]
 o CODE_REVIEW.md: how to do code reviews in curl [108]
 o configure: fix pthread check with static boringssl
 o configure: for wolfSSL, check for the DES func needed for NTLM
 o configure: only strip first -L from LDFLAGS [89]
 o configure: repair the check if argv can be written to [47]
 o configure: the wolfssh backend does not provide SCP [57]
 o connect: improve happy eyeballs handling [118]
 o connect: make happy eyeballs work for QUIC (again) [16]
 o curl.1: Quote globbed URLs [51]
 o curl: remove -J "informational" written on stdout [36]
 o Curl_addrinfo: use one malloc instead of three [97]
 o CURLINFO_ACTIVESOCKET.3: clarify the description [87]
 o doc: add missing closing parenthesis in CURLINFO_SSL_VERIFYRESULT.3 [5]
 o doc: Rename VERSIONS to VERSIONS.md as it already has Markdown syntax [20]
 o docs/HTTP3: add qlog to the quiche build instruction
 o docs/options-in-versions: which version added each cmdline option [53]
 o docs: unify protocol lists [54]
 o dynbuf: introduce internal generic dynamic buffer functions [17]
 o easy: fix dangling pointer on easy_perform fail [26]
 o examples/ephiperfifo: turn off interval when setting timerfd [79]
 o examples/http2-down/upload: add error checks [78]
 o examples: remove asiohiper.cpp [4]
 o FILEFORMAT: add more features that tests can depend on
 o FILEFORMAT: describe verify/stderr
 o ftp: make domore_getsock() return the secondary socket properly
 o ftp: mark return-ignoring calls to Curl_GetFTPResponse with (void) [64]
 o ftp: shut down the secondary connection properly when SSL is used [43]
 o GnuTLS: Backend support for CURLINFO_SSL_VERIFYRESULT [9]
 o hostip: make Curl_printable_address not return anything [63]
 o hostip: on macOS avoid DoH when given a numerical IP address [69]
 o http2: keep trying to send pending frames after req.upload_done [40]
 o http2: simplify and clean up trailer handling [6]
 o HTTP3.md: clarify cargo build directory [77]
 o http: move header storage to Curl_easy from connectdata [107]
 o libcurl.pc: Merge Libs.private into Libs for static-only builds [28]
 o libssh2: improved error output for wrong quote syntax [39]
 o libssh2: keep sftp errors as 'unsigned long' [103]
 o libssh2: set the expected total size in SCP upload init [2]
 o libtest/cmake: Remove commented code [13]
 o list-only.d: this option existed already in 4.0
 o manpage: add three missing environment variables [121]
 o multi: add defensive check on data->multi->num_alive [96]
 o multi: implement wait using winsock events [120]
 o ngtcp2: cleanup memory when failing to connect [70]
 o ngtcp2: fix build with current ngtcp2 master implementing draft 28 [76]
 o ngtcp2: fix happy eyeballs quic connect crash [118]
 o ngtcp2: introduce qlog support [23]
 o ngtcp2: never call fprintf() in lib code in release version
 o ngtcp2: update with recent API changes [100]
 o ntlm: enable NTLM support with wolfSSL [81]
 o OpenSSL: have CURLOPT_CRLFILE imply CURLSSLOPT_NO_PARTIALCHAIN [55]
 o openssl: set FLAG_TRUSTED_FIRST unconditionally [105]
 o projects: Add crypt32.lib to dependencies for all OpenSSL configs [93]
 o quiche: clean up memory properly when failing to connect [71]
 o quiche: enable qlog output [14]
 o quiche: update SSLKEYLOGFILE support [98]
 o Revert "buildconf: use find -execdir" [38]
 o Revert "ssh: ignore timeouts during disconnect" [67]
 o runtests: remove sleep calls [18]
 o runtests: show elapsed test time with higher precision (ms)
 o select: always use Sleep in Curl_wait_ms on Win32 [82]
 o select: fix overflow protection in Curl_socket_check [22]
 o sendf: make failf() use the mvsnprintf() return code [62]
 o server/sws: fix asan warning on use of uninitialized variable
 o server/util: fix logmsg format using curl_off_t argument [106]
 o sha256: fixed potentially uninitialized variable [61]
 o share: don't set the share flag it something fails [116]
 o sockfilt: make select_ws stop waiting on exit signal event
 o socks: detect connection close during handshake [95]
 o socks: fix expected length of SOCKS5 reply [68]
 o socks: remove unreachable breaks in socks.c and mime.c [101]
 o source cleanup: remove all custom typedef structs [42]
 o test1167: fixes in badsymbols.pl [73]
 o test1177: look for curl.h in source directory [1]
 o test1238: avoid tftpd being busy for tests shortly following [33]
 o test613.pl: make tests 613 and 614 work with OpenSSH for Windows [8]
 o test75: Remove precheck test
 o tests: add https-proxy support to the test suite [49]
 o tests: add support for SSH server variant specific transfer paths [24]
 o tests: add two simple tests for --login-options [99]
 o tests: make test 1248 + 1249 use %NOLISTENPORT [3]
 o tests: pick a random port number for SSH [12]
 o tests: run stunnel for HTTPS and FTPS on dynamic ports [11]
 o timeouts: change millisecond timeouts to timediff_t from time_t [86]
 o timeouts: move ms timeouts to timediff_t from int and long [104]
 o tool: fixup a few --help descriptions [56]
 o tool: support UTF-16 command line on Windows [46]
 o tool_cfgable: free login_options at exit [102]
 o tool_getparam: fix memory leak in parse_args
 o tool_operate: fixed potentially uninitialized variables [60]
 o tool_paramhlp: fixed potentially uninitialized strtol() variable [59]
 o transfer: close connection after excess data has been read [66]
 o travis: add "qlog" as feature in the quiche build
 o travis: Add ngtcp2 and quiche tests for CMake
 o travis: upgrade to bionic, clang-9, improve readability [35]
 o typecheck-gcc.h: CURLINFO_PRIVATE does not need a 'char *' [44]
 o unit1604.c: fix implicit conv from 'SANITIZEcode' to 'CURLcode' [88]
 o url: accept "any length" credentials for proxy auth [72]
 o url: alloc the download buffer at transfer start [85]
 o url: reject too long input when parsing credentials [25]
 o url: sort the protocol schemes in rough popularity order [32]
 o urlapi: accept :: as a valid IPv6 address [15]
 o urldata: leave the HTTP method untouched in the set.* struct [45]
 o urlglob: treat literal IPv6 addresses with zone IDs as a host name [115]
 o user-agent.d: spell out what happens given a blank argument [80]
 o vauth/cleartext: fix theoretical integer overflow [50]
 o version.d: expanded and alpha-sorted [110]
 o vtls: Extract and simplify key log file handling from OpenSSL
 o wolfssl: add SSLKEYLOGFILE support [65]
 o wording: avoid blacklist/whitelist stereotypes [92]
 o write-out.d: added "response_code"