Log message:
revbump after updating security/nettle

Log message:
revbump after boost update

Log message:
curl: Update to 7.70.0

Changes:
7.70.0
------
This release includes the following changes:

 o curl: add --ssl-revoke-best-effort to allow a "best effort" \ 
revocation check
 o mqtt: add new experimental protocol
 o schannel: add "best effort" revocation check option: \ 
CURLSSLOPT_REVOKE_BEST_EFFORT
 o writeout: support to generate JSON output with '%{json}'

This release includes the following bugfixes:

 o appveyor: add Unicode winbuild jobs
 o appveyor: completely disable tests that fail to timeout early
 o appveyor: show failed tests in log even if test is ignored
 o appveyor: sort builds by type and add two new variants
 o appveyor: turn disabled tests into ignored result tests
 o appveyor: use random test server ports based upon APPVEYOR_API_URL
 o build: fixed build for systems with select() in unistd.h
 o buildconf: avoid using tempfile when removing files
 o checksrc: warn on obvious conditional blocks on the same line as if()
 o CI-fuzz: increase fuzz time to 40 minutes
 o ci/tests: fix Azure Pipelines not running Windows containers
 o CI: add build with ngtcp2 + gnutls on Travis CI
 o CI: bring GitHub Actions fuzzing job in line with macOS jobs
 o CI: migrate macOS jobs from Azure and Travis CI to GitHub Actions
 o CI: remove default Ubuntu build from GitHub Actions
 o cirrus: no longer ignore test 504 which is working again
 o cirrus: re-enable the FreeBSD 13 CI builds
 o cleanup: insert newline after if() conditions
 o cmake: add aliases so exported target names are available in tree
 o cmake: add CMAKE_MSVC_RUNTIME_LIBRARY
 o cmake: add support for building with wolfSSL
 o cmake: Avoid MSVC C4273 warnings in send/recv checks
 o cmdline: fix handling of OperationConfig linked list (--next)
 o compressed.d: stress that the headers are not modified
 o config: remove all defines of HAVE_DES_H
 o configure: convert -I to -isystem as a last step
 o configure: document 'compiler_num' for gcc
 o configure: don't check for Security.framework when cross-compiling
 o configure: fix -pedantic-errors for GCC 5 and later
 o configure: remove use of -vec-report0 from CFLAGS with icc
 o connect: happy eyeballs cleanup
 o connect: store connection info for QUIC connections
 o copyright: fix out-of-date copyright ranges and missing headers
 o curl-functions.m4: remove inappropriate AC_REQUIRE
 o curl.h: remnove CURL_VERSION_ESNI. Never supported nor documented
 o curl.h: update comment typo
 o curl: allow both --etag-compare and --etag-save with same file name
 o curl_setup: define _WIN32_WINNT_[OS] symbols
 o CURLINFO_CONDITION_UNMET: return true for 304 http status code
 o CURLINFO_NUM_CONNECTS: improve accuracy
 o CURLOPT_WRITEFUNCTION.3: add inline example and new see-also
 o dist: add mail-rcpt-allowfails.d to the tarball
 o docs/make: generate curl.1 from listed files only
 o docs: add warnings about FILE: URLs on Windows
 o easy: fix curl_easy_duphandle for builds missing IPv6 that use c-ares
 o examples/sessioninfo.c: add include to fix compiler warning
 o github actions: run when pushed to master or */ci + PRs
 o gnutls: bump lowest supported version to 3.1.10
 o gnutls: Don't skip really long certificate fields
 o gnutls: ensure TLS 1.3 when SRP isn't requested
 o gopher: check remaining time left during write busy loop
 o gskit: use our internal select wrapper for portability
 o http2: Fix erroneous debug message that h2 connection closed
 o http: don't consider upload done if the request isn't completely sent off
 o http: free memory when Alt-Used header creation fails due to OOM
 o lib/mk-ca-bundle: skip empty certs
 o lib670: use the same Win32 API check as all other lib tests
 o lib: fix typos in comments and errormessages
 o lib: never define CURL_CA_BUNDLE with a getenv
 o libcurl-multi.3: added missing full stop
 o libssh: avoid options override by configuration files
 o libssh: Use new ECDSA key types to check known hosts
 o mailmap: fixup a few author names/fields
 o Makefile.m32: Improve windres parameter compatibility
 o Makefile: run the cd commands in a subshell
 o memdebug: don't log free(NULL)
 o mime: properly check Content-Type even if it has parameters
 o multi-ssl: reset the SSL backend on `Curl_global_cleanup()`
 o multi: improve parameter check for curl_multi_remove_handle
 o nghttp2: 1.12.0 required
 o ngtcp2: update to git master for the key installation API change
 o nss: check for PK11_CreateDigestContext() returning NULL
 o openssl: adapt to functions marked as deprecated since version 3
 o OS400: update strings for ccsid-ifier (fixes the build)
 o output.d: quote the URL when globbing
 o packages: add OS400/chkstrings.c to the dist
 o RELEASE-PROCEDURE.md: run the copyright.pl script!
 o Revert "file: on Windows, refuse paths that start with \\"
 o runtests: always put test number in servercmd file
 o runtests: provide nicer errormsg when protocol "dump" file is empty
 o schannel: Fix blocking timeout logic
 o schannel: support .P12 or .PFX client certificates
 o scripts/release-notes.pl: add helper script for RELEASE-NOTES maintenance
 o select: make Curl_socket_check take timediff_t timeout
 o select: move duplicate select preparation code into Curl_select
 o select: remove typecast from SOCKET_WRITABLE/READABLE macros
 o server/getpart: make the "XML-parser" stricter
 o server/resolve: remove AI_CANONNAME to make macos tell the truth
 o smtp: set auth correctly
 o sockfilt: add logmsg output to select_ws_wait_thread on Windows
 o sockfilt: fix broken pipe on Windows to be ready in select_ws
 o sockfilt: fix handling of ready closed sockets on Windows
 o sockfilt: fix race-condition of waiting threads and event handling
 o socks: Fix blocking timeout logic
 o src: Remove C99 constructs to ensure C89 compliance
 o SSLCERTS.md: Fix example code for setting CA cert file
 o test1148: tolerate progress updates better (again)
 o test1154: set a proper name
 o test1177: verify that all the CURL_VERSION_ bits are documented
 o test1566: verify --etag-compare that gets a 304 back
 o test1908: avoid using fixed port number in test data
 o test2043: use revoked.badssl.com instead of revoked.grc.com
 o test2100: fix static port instead of dynamic value being used
 o tests/data: fix some XML formatting issues in test cases
 o tests/FILEFORMAT: converted to markdown and extended
 o tests/server/util.c: use curl_off_t instead of long for pid
 o tests: add %NOLISTENPORT and use it
 o tests: add Windows compatible pidwait like pidkill and pidterm
 o tests: fix conflict between Cygwin/msys and Windows PIDs
 o tests: introduce preprocessed test cases
 o tests: make Python-based servers compatible with Python 2 and 3
 o tests: make runtests check that disabled tests exists
 o tests: move pingpong server to dynamic listening port
 o tests: remove python_dependencies for smbserver from our tree
 o tests: run the RTSP test server on a dynamic port number
 o tests: run the SOCKS test server on a dynamic port number
 o tests: run the sws server on "any port"
 o tests: run the TFTP test server on a dynamic port number
 o tests: use Cygwin/msys PIDs for stunnel and sshd on Windows
 o tls: remove the BACKEND define kludge from most backends
 o tool: do not declare functions with Curl_ prefix
 o tool_operate: fix add_parallel_transfers when more are in queue
 o transfer: cap retries of "dead connections" to 5
 o transfer: Switch PUT to GET/HEAD on 303 redirect
 o travis: bump the wolfssl CI build to use 4.4.0
 o travis: update the ngtcp2 build to use the latest OpenSSL patch
 o url: allow non-HTTPS altsvc-matching for debug builds
 o version: add 'cainfo' and 'capath' to version info struct
 o version: increase buffer space for ssl version output
 o version: skip idn2_check_version() check and add precaution
 o vquic: add support for GnuTLS backend of ngtcp2
 o vtls: fix ssl_config memory-leak on out-of-memory
 o warnless: remove code block for icc that didn't work
 o windows: enable UnixSockets with all build toolchains
 o windows: suppress UI in all CryptAcquireContext() calls

Log message:
curl: updated to 7.69.1

curl and libcurl 7.69.1

This release includes the following bugfixes:
* ares: store dns parameters for duphandle
* cirrus-ci: disable the FreeBSD 13 builds
* curl_share_setopt.3: Note sharing cookies doesn't enable the engine
* lib1564: reduce number of mid-wait wakeup calls
* libssh: Fix matching user-specified MD5 hex key
* MANUAL: update a dict-using command line
* mime: do not perform more than one read in a row
* mime: fix the binary encoder to handle large data properly
* mime: latch last read callback status
* multi: skip EINTR check on wakeup socket if it was closed
* pause: bail out on bad input
* pause: force a connection recheck after unpausing (take 2)
* pause: return early for calls that don't change pause state
* runtests.1: rephrase how to specify what tests to run
* runtests: fix missing use of exe_ext helper function
* seek: fix fall back for missing ftruncate on Windows
* sftp: fix segfault regression introduced in 7.69.0
* sha256: Added SecureTransport implementation
* sha256: Added WinCrypt implementation
* socks4: fix host resolve regression
* socks5: host name resolv regression fix
* tests/server: fix missing use of exe_ext helper function
* tests: fix static ip:port instead of dynamic values being used
* tests: make sleeping portable by avoiding select
* unit1612: fix the inclusion and compilation of the HMAC unit test
* urldata: remove the 'stream_was_rewound' connectdata struct member
* version: make curl_version* thread-safe without using global context

Log message:
*: recursive bump for libffi

Log message:
curl: updated to 7.69.0

This release includes the following changes:

 o polarssl: removed
 o smtp: add CURLOPT_MAIL_RCPT_ALLLOWFAILS and --mail-rcpt-allowfails
 o wolfSSH: new SSH backend

This release includes the following bugfixes:

 o altsvc: improved header parser
 o altsvc: keep a copy of the file name to survive handle reset
 o altsvc: make saving the cache an atomic operation
 o altsvc: use h3-27
 o azure: disable brotli on the macos debug-builds
 o build: remove all HAVE_OPENSSL_ENGINE_H defines
 o checksrc.bat: Fix not being able to run script from the main curl dir
 o cleanup: fix several comment typos
 o cleanup: fix typos and wording in docs and comments
 o cmake: add support for CMAKE_LTO option
 o cmake: clean up and improve build procedures
 o cmake: enable SMB for Windows builds
 o cmake: improve libssh2 check on Windows
 o cmake: Show HTTPS-proxy in the features output
 o cmake: support specifying the target Windows version
 o cmake: use check_symbol_exists also for inet_pton
 o configure.ac: fix comments about --with-quiche
 o configure: disable metalink if mbedTLS is specified
 o configure: disable metalink support for incompatible SSL/TLS
 o conn: do not reuse connection if SOCKS proxy credentials differ
 o conncache: removed unused Curl_conncache_bundle_size()
 o connect: remove some spurious infof() calls
 o connection reuse: respect the max_concurrent_streams limits
 o contributors: also include people who contributed to curl-www
 o contrithanks: use the most recent tag by default
 o cookie: check __Secure- and __Host- case sensitively
 o cookies: make saving atomic with a rename
 o create-dirs.d: mention the mode
 o curl: avoid using strlen for testing if a string is empty
 o curl: error on --alt-svc use w/o support
 o curl: let -D merge headers in one file again
 o curl: make #0 not output the full URL
 o curl: make the -# spaceship bar not wrap the line
 o curl: remove 'config' field from OutStruct
 o curl:progressbarinit: ignore column width from terminals < 20
 o curl_escape.3: add a link to curl_free
 o curl_getenv.3: fix the memory handling description
 o curl_global_init: assume the EINTR bit by default
 o curl_global_init: move the IPv6 works status bool to multi handle
 o CURLINFO_COOKIELIST.3: Fix example
 o CURLOPT_ALTSVC_CTRL.3: fix the DEFAULT wording
 o CURLOPT_PROXY_SSL_OPTIONS.3: Sync with CURLOPT_SSL_OPTIONS.3
 o CURLOPT_REDIR_PROTOCOLS.3: update the DEFAULT section
 o data.d: remove "Multiple files can also be specified"
 o digest: do not quote algorithm in HTTP authorisation
 o docs/HTTP3: add --enable-alt-svc to curl's configure
 o docs/HTTP3: update the OpenSSL branch to use for ngtcp2
 o docs: fix typo on CURLINFO_RETRY_AFTER
 o easy: remove dead code
 o form.d: fix two minor typos
 o ftp: convert 'sock_accepted' to a plain boolean
 o ftp: remove superfluous checking for crlf in user or pwd
 o ftp: shrink temp buffers used for PORT
 o github action: add CIFuzz
 o github: Instructions to post "uname -a" on Unix systems in issues
 o GnuTLS: always send client cert
 o gtls: fixed compilation when using GnuTLS < 3.5.0
 o hostip: move code to resolve IP address literals to `Curl_resolv`
 o HTTP-COOKIES: describe the cookie file format
 o HTTP-COOKIES: mention that a trailing newline is required
 o http2: make pausing/unpausing set/clear local stream window
 o http2: now requires nghttp2 >= 1.12.0
 o http: added 417 response treatment
 o http: increase EXPECT_100_THRESHOLD to 1Mb
 o http: mark POSTs with no body as "upload done" from the start
 o http: move "oauth_bearer" from connectdata to Curl_easy
 o include: remove non-curl prefixed defines
 o KNOWN_BUGS: Multiple methods in a single WWW-Authenticate: header
 o libssh2: add support for forcing a hostkey type
 o libssh2: fix variable type
 o libssh: improve known hosts handling
 o llist: removed unused Curl_llist_move()
 o location.d: the method change is from POST to GET only
 o md4: fixed compilation issues when using GNU TLS gcrypt
 o md4: use init/update/final functions in Secure Transport
 o md5: added implementation for mbedTLS
 o mk-ca-bundle: add support for CKA_NSS_SERVER_DISTRUST_AFTER
 o multi: change curl_multi_wait/poll to error on negative timeout
 o multi: fix outdated comment
 o multi: if Curl_readwrite sets 'comeback' use expire, not loop
 o multi_done: if multiplexed, make conn->data point to another transfer
 o multi_wait: stop loop when sread() returns zero
 o ngtcp2: add error code for QUIC connection errors
 o ngtcp2: fixed to only use AF_INET6 when ENABLE_IPV6
 o ngtcp2: update to git master and its draft-25 support
 o ntlm: move the winbind data into the NTLM data structure
 o ntlm: pass the Curl_easy structure to the private winbind functions
 o ntlm: removed the dependency on the TLS libaries when using MD5
 o ntlm_wb: use Curl_socketpair() for greater portability
 o oauth2-bearer.d: works for HTTP too
 o openssl: make CURLINFO_CERTINFO not truncate x509v3 fields
 o openssl: remove redundant assignment
 o os400: fixed the build
 o pause: force-drain the transfer on unpause
 o quiche: update to draft-25
 o README: mention that the docs is in docs/
 o RELEASE-PROCEDURE: feature win is closed post-release a few days
 o runtests: make random seed fixed for a month
 o runtests: restore the command log
 o schannel: make CURLOPT_CAINFO work better on Windows 7
 o schannel_verify: Fix alt names manual verify for UNICODE builds
 o sha256: use crypto implementations when available
 o singleuse.pl: support new API functions, fix curl_dbg_ handling
 o smtp: support the SMTPUTF8 extension
 o smtp: support UTF-8 based host names in MAIL FROM
 o SOCKS: make the connect phase non-blocking
 o strcase: turn Curl_raw_tolower into static
 o strerror: increase STRERROR_LEN 128 -> 256
 o test1323: added missing 'unit test' feature requirement
 o tests: add a unit test for MD4 digest generation
 o tests: add a unit test for SHA256 digest generation
 o tests: add a unit test for the HMAC hash generation
 o tests: deduce the tool name from the test case for unit tests
 o tests: fix Python 3 compatibility of smbserver.py
 o tool_dirhie: allow directory traversal during creation
 o tool_homedir: change GetEnv() to use libcurl's curl_getenv()
 o tool_util: improve Windows version of tvnow()
 o travis: update non-OpenSSL Linux jobs to Bionic
 o url: include the failure reason when curl_win32_idn_to_ascii() fails
 o urlapi: guess scheme properly with credentials given
 o urldata: do string enums without #ifdefs for build scripts
 o vtls: refactor Curl_multissl_version to make the code clearer
 o win32: USE_WIN32_CRYPTO to enable Win32 based MD4, MD5 and SHA256

Log message:
*: Recursive revision bump for openssl 1.1.1.

Log message:
*: Recursive revbump from devel/boost-libs

Log message:
curl: Update to 7.68.0

pkgsrc changes:
 - Removes patch-configure hunks applied upstream

Changes:
7.68.0
------
This release includes the following changes:

 o TLS: add BearSSL vtls implementation
 o XFERINFOFUNCTION: support CURL_PROGRESSFUNC_CONTINUE
 o curl: add --etag-compare and --etag-save
 o curl: add --parallel-immediate
 o multi: add curl_multi_wakeup()
 o openssl: CURLSSLOPT_NO_PARTIALCHAIN can disable partial cert chains

This release includes the following bugfixes:

 o CVE-2019-15601: file: on Windows, refuse paths that start with \\
 o Azure Pipelines: add several builds
 o CMake: add support for building with the NSS vtls backend
 o CURL-DISABLE: initial docs for the CURL_DISABLE_* defines
 o CURLOPT_HEADERFUNCTION.3: Document that size is always 1
 o CURLOPT_QUOTE.3: fix typos
 o CURLOPT_READFUNCTION.3: fix the example
 o CURLOPT_URL.3: "curl supports SMB version 1 (only)"
 o CURLOPT_VERBOSE.3: see also ERRORBUFFER
 o HISTORY: added cmake, HTTP/3 and parallel downloads with curl
 o HISTORY: the SMB(S) support landed in 2014
 o INSTALL.md: provide Android build instructions
 o KNOWN_BUGS: Connection information when using TCP Fast Open
 o KNOWN_BUGS: LDAP on Windows doesn't work correctly
 o KNOWN_BUGS: TLS session cache doesn't work with TFO
 o OPENSOCKETFUNCTION.3: correct the purpose description
 o TrackMemory tests: always remove CR before LF
 o altsvc: bump to h3-24
 o altsvc: make the save function ignore NULL filenames
 o build: Disable Visual Studio warning "conditional expression is \ 
constant"
 o build: fix for CURL_DISABLE_DOH
 o checksrc.bat: Add a check for vquic and vssh directories
 o checksrc: repair the copyrightyear check
 o cirrus-ci: enable clang sanitizers on freebsd 13
 o cirrus: Drop the FreeBSD 10.4 build
 o config-win32: cpu-machine-OS for Windows on ARM
 o configure: avoid unportable `==' test(1) operator
 o configure: enable IPv6 support without `getaddrinfo`
 o configure: fix typo in help text
 o conncache: CONNECT_ONLY connections assumed always in-use
 o conncache: fix multi-thread use of shared connection cache
 o copyrights: fix copyright year range
 o create_conn: prefer multiplexing to using new connections
 o curl -w: handle a blank input file correctly
 o curl.h: add two missing defines for "pre ISO C" compilers
 o curl/parseconfig: fix mem-leak
 o curl/parseconfig: use curl_free() to free memory allocated by libcurl
 o curl: cleanup multi handle on failure
 o curl: fix --upload-file . hangs if delay in STDIN
 o curl: fix -T globbing
 o curl: improved cleanup in upload error path
 o curl: make a few char pointers point to const char instead
 o curl: properly free mimepost data
 o curl: show better error message when no homedir is found
 o curl: show error for --http3 if libcurl lacks support
 o curl_setup_once: consistently use WHILE_FALSE in macros
 o define: remove HAVE_ENGINE_LOAD_BUILTIN_ENGINES, not used anymore
 o docs: Change 'experiemental' to 'experimental'
 o docs: TLS SRP doesn't work with TLS 1.3
 o docs: fix several typos
 o docs: mention CURL_MAX_INPUT_LENGTH restrictions
 o doh: improved both encoding and decoding
 o doh: make it behave when built without proxy support
 o examples/postinmemory.c: Call curl_global_cleanup always
 o examples/url2file.c: corrected erroneous comment
 o examples: add multi-poll.c
 o global_init: undo the "intialized" bump in case of failure
 o hostip: suppress compiler warning
 o http_ntlm: Remove duplicate NSS initialisation
 o lib: Move lib/ssh.h -> lib/vssh/ssh.h
 o lib: fix compiler warnings with `CURL_DISABLE_VERBOSE_STRINGS`
 o lib: fix warnings found when porting to NuttX
 o lib: remove ASSIGNWITHINCONDITION exceptions, use our code style
 o lib: remove erroneous +x file permission on some c files
 o libssh2: add support for ECDSA and ed25519 knownhost keys
 o multi.h: remove INITIAL_MAX_CONCURRENT_STREAMS from public header
 o multi: free sockhash on OOM
 o multi_poll: avoid busy-loop when called without easy handles attached
 o ngtcp2: Support the latest update key callback type
 o ngtcp2: fix thread-safety bug in error-handling
 o ngtcp2: free used resources on disconnect
 o ngtcp2: handle key updates as ngtcp2 master branch tells us
 o ngtcp2: increase QUIC window size when data is consumed
 o ngtcp2: use overflow buffer for extra HTTP/3 data
 o ntlm: USE_WIN32_CRYPTO check removed to get USE_NTLM2SESSION set
 o ntlm_wb: fix double-free in OOM
 o openssl: Revert to less sensitivity for SYSCALL errors
 o openssl: improve error message for SYSCALL during connect
 o openssl: prevent recursive function calls from ctx callbacks
 o openssl: retrieve reported LibreSSL version at runtime
 o openssl: set X509_V_FLAG_PARTIAL_CHAIN by default
 o parsedate: offer a getdate_capped() alternative
 o pause: avoid updating socket if done was already called
 o projects: Fix Visual Studio projects SSH builds
 o projects: Fix Visual Studio wolfSSL configurations
 o quiche: reject HTTP/3 headers in the wrong order
 o remove_handle: clear expire timers after multi_done()
 o runtests: --repeat=[num] to repeat tests
 o runtests: introduce --shallow to reduce huge torture tests
 o schannel: fix --tls-max for when min is --tlsv1 or default
 o setopt: Fix ALPN / NPN user option when built without HTTP2
 o strerror: Add Curl_winapi_strerror for Win API specific errors
 o strerror: Fix an error looking up some Windows error strings
 o strerror: Fix compiler warning "empty expression"
 o system.h: fix for MCST lcc compiler
 o test/sws: search for "Testno:" header unconditionally if no testno
 o test1175: verify symbols-in-versions and libcurl-errors.3 in sync
 o test1270: a basic -w redirect_url test
 o test1456: remove the use of a fixed local port number
 o test1558: use double slash after file:
 o test1560: require IPv6 for IPv6 aware URL parsing
 o tests/lib1557: fix mem-leak in OOM
 o tests/lib1559: fix mem-leak in OOM
 o tests/lib1591: free memory properly on OOM, in the trailers callback
 o tests/unit1607: fix mem-leak in OOM
 o tests/unit1609: fix mem-leak in OOM
 o tests/unit1620: fix bad free in OOM
 o tests: Change NTLM tests to require SSL
 o tests: Fix bounce requests with truncated writes
 o tests: fix build with `CURL_DISABLE_DOH`
 o tests: fix permissions of ssh keys in WSL
 o tests: make it possible to set executable extensions
 o tests: make sure checksrc runs on header files too
 o tests: set LC_ALL=en_US.UTF-8 instead of blank in several tests
 o tests: use DoH feature for DoH tests
 o tests: use \r\n for log messages in WSL
 o tool_operate: fix mem leak when failed config parse
 o travis: Fix error detection
 o travis: abandon coveralls, it is not reliable
 o travis: build ngtcp2 with --enable-lib-only
 o travis: export the CC/CXX variables when set
 o vtls: make BearSSL possible to set with CURL_SSL_BACKEND
 o winbuild: Define CARES_STATICLIB when WITH_CARES=static
 o winbuild: Document CURL_STATICLIB requirement for static libcurl

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (https://curl.haxx.se/docs/knownbugs.html)

Log message:
curl: Update to 7.67.0

Changes:
7.67.0
------
This release includes the following changes:

 o curl: added --no-progress-meter
 o setopt: CURLMOPT_MAX_CONCURRENT_STREAMS is new
 o urlapi: CURLU_NO_AUTHORITY allows empty authority/host part

This release includes the following bugfixes:

 o BINDINGS: five new bindings addded
 o CURLOPT_TIMEOUT.3: Clarify transfer timeout time includes queue time
 o CURLOPT_TIMEOUT.3: remove the mention of "minutes"
 o ESNI: initial build/setup support
 o FTP: FTPFILE_NOCWD: avoid redundant CWDs
 o FTP: allow "rubbish" prepended to the SIZE response
 o FTP: remove trailing slash from path for LIST/MLSD
 o FTP: skip CWD to entry dir when target is absolute
 o FTP: url-decode path before evaluation
 o HTTP3.md: move -p for mkdir, remove -j for make
 o HTTP3: fix invalid use of sendto for connected UDP socket
 o HTTP3: fix ngtcp2 Windows build
 o HTTP3: fix prefix parameter for ngtcp2 build
 o HTTP3: fix typo somehere1 > somewhere1
 o HTTP3: show an --alt-svc using example too
 o INSTALL: add missing space for configure commands
 o INSTALL: add vcpkg installation instructions
 o README: minor grammar fix
 o altsvc: accept quoted ma and persist values
 o altsvc: both backends run h3-23 now
 o appveyor: Add MSVC ARM64 build
 o appveyor: Use two parallel compilation on appveyor with CMake
 o appveyor: add --disable-proxy autotools build
 o appveyor: add 32-bit MinGW-w64 build
 o appveyor: add a winbuild
 o appveyor: add a winbuild that uses VS2017
 o appveyor: make winbuilds with DEBUG=no/yes and VS 2015/2017
 o appveyor: publish artifacts on appveyor
 o appveyor: upgrade VS2017 to VS2019
 o asyn-thread: make use of Curl_socketpair() where available
 o asyn-thread: s/AF_LOCAL/AF_UNIX for Solaris
 o build: Remove unused HAVE_LIBSSL and HAVE_LIBCRYPTO defines
 o checksrc: fix uninitialized variable warning
 o chunked-encoding: stop hiding the CURLE_BAD_CONTENT_ENCODING error
 o cirrus: Increase the git clone depth
 o cirrus: Switch the FreeBSD 11.x build to 11.3 and add a 13.0 build
 o cirrus: switch off blackhole status on the freebsd CI machines
 o cleanups: 21 various PVS-Studio warnings
 o configure: only say ipv6 enabled when the variable is set
 o configure: remove all cyassl references
 o conn-reuse: requests wanting NTLM can reuse non-NTLM connections
 o connect: return CURLE_OPERATION_TIMEDOUT for errno == ETIMEDOUT
 o connect: silence sign-compare warning
 o cookie: avoid harmless use after free
 o cookie: pass in the correct cookie amount to qsort()
 o cookies: change argument type for Curl_flush_cookies
 o cookies: using a share with cookies shouldn't enable the cookie engine
 o copyrights: update copyright notices to 2019
 o curl: create easy handles on-demand and not ahead of time
 o curl: ensure HTTP 429 triggers --retry
 o curl: exit the create_transfers loop on errors
 o curl: fix memory leaked by parse_metalink()
 o curl: load large files with -d @ much faster
 o docs/HTTP3: fix `--with-ssl` ngtcp2 configure flag
 o docs: added multi-event.c example
 o docs: disambiguate CURLUPART_HOST is for host name (ie no port)
 o docs: note on failed handles not being counted by curl_multi_perform
 o doh: allow only http and https in debug mode
 o doh: avoid truncating DNS QTYPE to lower octet
 o doh: clean up dangling DOH memory on easy close
 o doh: fix (harmless) buffer overrun
 o doh: fix undefined behaviour and open up for gcc and clang optimization
 o doh: return early if there is no time left
 o examples/sslbackend: fix -Wchar-subscripts warning
 o examples: remove the "this exact code has not been verified"
 o git: add tests/server/disabled to .gitignore
 o gnutls: make gnutls_bye() not wait for response on shutdown
 o http2: expire a timeout at end of stream
 o http2: prevent dup'ed handles to send dummy PRIORITY frames
 o http2: relax verification of :authority in push promise requests
 o http2_recv: a closed stream trumps pause state
 o http: lowercase headernames for HTTP/2 and HTTP/3
 o ldap: Stop using wide char version of ldapp_err2string
 o ldap: fix OOM error on missing query string
 o mbedtls: add error message for cert validity starting in the future
 o mime: when disabled, avoid C99 macro
 o ngtcp2: adapt to API change
 o ngtcp2: compile with latest ngtcp2 + nghttp3 draft-23
 o ngtcp2: remove fprintf() calls
 o openssl: close_notify on the FTP data connection doesn't mean closure
 o openssl: fix compiler warning with LibreSSL
 o openssl: use strerror on SSL_ERROR_SYSCALL
 o os400: getpeername() and getsockname() return ebcdic AF_UNIX sockaddr
 o parsedate: fix date parsing disabled builds
 o quiche: don't close connection at end of stream
 o quiche: persist connection details (fixes -I with --http3)
 o quiche: set 'drain' when returning without having drained the queues
 o quiche: update HTTP/3 config creation to new API
 o redirect: handle redirects to absolute URLs containing spaces
 o runtests: get textaware info from curl instead of perl
 o schannel: reverse the order of certinfo insertions
 o schannel_verify: Fix concurrent openings of CA file
 o security: silence conversion warning
 o setopt: handle ALTSVC set to NULL
 o setopt: make it easier to add new enum values
 o setopt: store CURLOPT_RTSP_SERVER_CSEQ correctly
 o smb: check for full size message before reading message details
 o smbserver: fix Python 3 compatibility
 o socks: Fix destination host shown on SOCKS5 error
 o test1162: disable MSYS2's POSIX path conversion
 o test1591: fix spelling of http feature
 o tests: add `connect to non-listen` keywords
 o tests: fix narrowing conversion warnings
 o tests: fix the test 3001 cert failures
 o tests: makes tests succeed when using --disable-proxy
 o tests: use %FILE_PWD for file:// URLs
 o tests: use port 2 instead of 60000 for a safer non-listening port
 o tool_operate: Fix retry sleep time shown to user when Retry-After
 o travis: Add an ARM64 build
 o url: Curl_free_request_state() should also free doh handles
 o url: don't set appconnect time for non-ssl/non-ssh connections
 o url: fix the NULL hostname compiler warning
 o url: normalize CURLINFO_EFFECTIVE_URL
 o url: only reuse TLS connections with matching pinning
 o urlapi: avoid index underflow for short ipv6 hostnames
 o urlapi: fix URL encoding when setting a full URL
 o urlapi: fix unused variable warning
 o urlapi: question mark within fragment is still fragment
 o urldata: use 'bool' for the bit type on MSVC compilers
 o vtls: Fix comment typo about macosx-version-min compiler flag
 o vtls: fix narrowing conversion warnings
 o winbuild/MakefileBuild.vc: Add vssh
 o winbuild/MakefileBuild.vc: Fix line endings
 o winbuild: Add manifest to curl.exe for proper OS version detection
 o winbuild: add ENABLE_UNICODE option