Log message:
curl: updated to 8.10.0

Changes in 8.10.0

autotools: add `--enable-windows-unicode` option
curl: --help [option] displays documentation for given cmdline option
curl: add --skip-existing
curl: for -O, use "default" as filename when the URL has none
curl: make --rate accept "number of units"
curl: make --show-headers the same as --include
curl: support --dump-header % to direct to stderr
curl: support embedding a CA bundle and --dump-ca-embed
curl: support repeated use of the verbose option; -vv etc
curl: use libuv for parallel transfers with --test-event
getinfo: add CURLINFO_POSTTRANSFER_TIME_T
mbedtls: add CURLOPT_TLS13_CIPHERS support
rustls: add support for setting TLS version and ciphers
vtls: stop offering alpn http/1.1 for http2-prior-knowledge
wolfssl: add CURLOPT_TLS13_CIPHERS support
wolfssl: add support for ssl cert blob / ssl key blob options

Bugfixes
...

Log message:
curl: include upstream patch for sigpipe issue

Noticed by abs@, thanks!

Bump PKGREVISION.

Log message:
curl: add/fix brotli and zstd options

from iris000 on pkgsrc-users@

Log message:
curl: updated to 8.9.1

Changes in 8.9.1

Bugfixes:

cmake: detect `libssh` via `pkg-config`
cmake: detect `nettle` when building with GnuTLS
cmake: drop `if(PKG_CONFIG_FOUND)` guard for `pkg_check_modules()`
configure: limit `__builtin_available` test to Darwin
connect: fix connection shutdown for event based processing
contrithanks.sh: use -F with -v to match lines as strings
curl: more defensive socket code for --ip-tos
CURLOPT_SSL_CTX_FUNCTION.md: mention CA caching
CURLSHOPT_SHARE.md: mention sessions/cookies as not thread-safe
example/multi-uv: remove the use of globals
ftpserver.pl: make POP3 LIST serve content from the test file
GHA/windows: increase timeout for vcpkg build step
lib: survive some NULL input args
macos: fix Apple SDK bug workaround for non-macOS targets
misc: cleanup after removing years from copyright
os400: build cli manual.
os400: workaround an IBM ASCII run-time library bug
RELEASE-PROCEDURE.md: remove the initial build step
runtests: fold timing details with GHA, sync `-r` tflags
tests: provide FTP directory contents in the test file
tidy-up: URL updates
TODO: thread-safe sharing
transfer: speed limiting fix for 32bit systems
vtls: avoid forward declaration in MultiSSL builds
wolfSSL: allow wolfSSL's implementation of kyber to be used
wolfssl: avoid calling get_cached_x509_store if store is uncachable
wolfssl: CA store share fix
x509asn1: unittests and fixes for gtime2str

Log message:
revbump after icu and protobuf updates

Log message:
curl libcurl-gnutls: updated to 8.8.0

8.8.0

Changes:

curl_version_info: provide librtmp version
file: add support for directory listings
idn: add native AppleIDN (icucore) support for macOS/iOS
lib: add curl_multi_waitfds
mbedTLS: implement CURLOPT_SSL_CIPHER_LIST option
NTLM_WB: drop support
TLS: add support for ECH (Encrypted Client Hello)
urlapi: add CURLU_GET_EMPTY for empty queries and fragments

Bugfixes:

appveyor: drop unnecessary `--clean-first` cmake option
appveyor: guard against crash-build with VS2008
appveyor: make gcc 6 mingw64 job build-only
asyn-thread: fix curl_global_cleanup crash in Windows
asyn-thread: fix Curl_thread_create result check
autotools: delete unused functions
autotools: fix `HAVE_IOCTLSOCKET_FIONBIO` test for gcc 14
autotools: only probe for SGI MIPS compilers on IRIX
bearssl: fix compiler warnings
bearssl: use common code for cipher suite lookup
bufq: remove duplicate word in comment
BUG-BOUNTY.md: clarify the third party situation
build: prefer `USE_IPV6` macro internally (was: `ENABLE_IPV6`)
build: remove MacOSX-Framework script
cd2nroff/manage: use UTC when SOURCE_DATE_EPOCH is set
cf-https-connect: use timeouts as unsigned ints
cf-socket: don't try getting local IP without socket
cf-socket: remove references to l_ip, l_port
ci: add curl-for-win builds: Linux MUSL, macOS, Windows
cmake: add `BUILD_EXAMPLES` option to build examples
cmake: add librtmp/rtmpdump option and detection
cmake: check fseeko after detecting HAVE_FILE_OFFSET_BITS
cmake: do not pass linker flags to the static library tool
cmake: enable `-pedantic-errors` for clang when `CURL_WERROR=ON`
cmake: FindNGHTTP2 add static lib name to find_library call
cmake: fix `CURL_WERROR=ON` for old CMake and use it in GHA/linux-old
cmake: fix `HAVE_IOCTLSOCKET_FIONBIO` test with gcc 14
cmake: fixup `DEPENDS` filename
cmake: forward `USE_LIBRTMP` option to C
cmake: generate misc manpages and install `mk-ca-bundle.pl`
cmake: initialize `BUILD_TESTING` before first use
cmake: speed up libcurl doc building again
cmake: tidy-up to use `WORKING_DIRECTORY`
cmake: use namespaced custom target names
cmdline-docs: fix make install with configure --disable-docs
configure: error on missing perl if docs or manual is enabled
configure: make --disable-docs imply --disable-manual
content_encoding: brotli and others, pass through 0-length writes
content_encoding: ignore duplicate chunked encoding
content_encoding: reject transfer-encoding after chunked
contrithanks: honor `CURLWWW` variable
curl-confopts.m4: define CARES_NO_DEPRECATED when c-ares is used
curl.h: change CURL_SSLVERSION_* from enum to defines
curl: make --help adapt to the terminal width
curl: use curl_getenv instead of the curlx_ version
Curl_creader_read: init two variables to avoid using them uninited
curl_easy_pause.md: use correct defines in example
curl_getdate.md: document two-digit year handling
curl_global_trace.md: shorten the description
curl_multibyte: remove access() function wrapper for Windows
curl_path: make Curl_get_pathname use dynbuf
curl_setup.h: add support for IAR compiler
curl_setup.h: detect 'inline' support
curl_sha512_256: do not use workaround for NetBSD when not needed
curl_sha512_256: fix detection of OpenSSL 1.1.1 or later
curl_url_get.md: clarify queries and fragments and CURLU_GET_EMPTY
CURLINFO_REQUEST_SIZE: fixed, add tests for transfer infos reported
CURLOPT_WRITEFUNCTION.md: fix the callback proto in the example
cw-out: improved error handling
DEPRECATE.md: TLS libraries without 1.3 support
digest: replace strcpy for empty string with simple assignment
dist: `set -eu`, fix shellcheck, make reproducible and smaller tarballs
dist: add files missing from release tarball
dist: add reproducible dir entries to tarballs
dist: do not require Perl in `maketgz`
dist: remove the curl-config.1 from the tarball
dist: verify tarball reproducibility in CI
DISTROS: add patch and issues link for curl-for-win
DISTROS: Cygwin updates
dllmain: Call OpenSSL thread cleanup for Windows and Cygwin
doc: pytest `--repeat` -> `--count`
docs/cmdline-opts: invoke managen using a relative path
docs/cmdline-opts: mention STARTTLS for --ssl and --ssl-reqd
docs: add CURLOPT_NOPROGRESS to CURLOPT_XFERINFOFUNCTION example
docs: clarify CURLOPT_MAXFILESIZE and CURLOPT_MAXFILESIZE_LARGE
docs: fix some CURLINFO examples
doh: fix typo in comment
doh: remove unused function prototype
dynbuf: fix returncode on memory error
examples: fix/silence `-Wsign-conversion`
EXPERIMENTAL: add graduation requirements for each feature
file: remove useless assignment
ftp: add tracing support
ftp: fix build for CURL_DISABLE_VERBOSE_STRINGS
ftp: fix socket leak on rare error
GHA: add NetBSD, OpenBSD, FreeBSD/arm64 and OmniOS jobs
GHA: add shellcheck job and fix warnings, shell tidy-ups
GHA: add valgrind to a wolfSSL build
GHA: on macOS remove $HOME/.curlrc
GHA: pin dependencies
gnutls: lazy init the trust settings
h3/ngtcp2: improve error handling
hash: change 'slots' to size_t from int
hash: delete unused debug function
hsts: explicitly skip blank lines
hsts: remove single-use single-line function
http tests: in CI skip test_02_23* for quiche
http2 + ngtcp2: pass CURLcode errors from callbacks
http2, http3: decouple stream state from easy handle
http2: emit RST when client write fails
http3: quiche+ngtcp2 improvements
http: acknowledge a returned error code
http: HEAD response body tolerance
http: reject HTTP major version switch mid connection
http: remove redundant check
http: with chunked POST forced, disable length check on read callback
http_aws_sigv4: remove useless assignment
idn: make Curl_idnconvert_hostname() use Curl_idn_decode()
if2ip: make the buf_size arg a size_t
INSTALL-CMAKE.md: explain `cmake -G <generator-name>`
krb5: use dynbuf
ldap: fix unused variables (seen on OmniOS)
lib/cf-h1-proxy: silence compiler warnings (gcc 14)
lib: add trace support for client reads and writes
lib: bump hash sizes to `size_t`
lib: clear the easy handle's saved errno before transfer
lib: fix compiler warnings (gcc)
lib: make protocol handlers store scheme name lowercase
lib: merge `ENABLE_QUIC` C macro into `USE_HTTP3`
lib: remove two instances of "only only" messages
lib: silence `-Wsign-conversion` in base64, strcase, mprintf
lib: silence warnings on comma misuse
lib: use `#error` instead of invalid syntax in `curl_setup_once.h`
lib: use multi instead of multi_easy for the active multi
libcurl-opts: mention pipelining less
libssh2: delete redundant feature guard
libssh2: replace `access()` with `stat()`
libssh2: set length to 0 if strdup failed
m4: fix rustls pkg-config codepath
MAIL-ETIQUETTE: convert to markdown
makefile: remove the sorting from the vc-ide action
maketgz: put docs/RELEASE-TOOL.md into the tarball
managen: fix the option sort order
mbedtls: call mbedtls_ssl_setup() after RNG callback is set
mbedtls: cut off trailing newlines from debug logs
mbedtls: fix building with v3 in CMake Unity mode
mbedtls: support TLS 1.3
mime: avoid using access()
misc: fix typos
misc: fix typos, quoting and spelling
mprintf: check fputc error rather than matching returned character
mqtt: when Curl_xfer_recv returns error, don't use nread
multi: avoid memory-leak risk
multi: introduce SETUP state for better timeouts
multi: multi_wait improvements
multi: remove the unused Curl_preconnect function
multi: remove useless assignment
multi: timeout handles even without connection
openldap: create ldap URLs correctly for IPv6 addresses
openssl: do not set SSL_MODE_RELEASE_BUFFERS
openssl: revert keylog_callback support for LibreSSL
OS400: fix shellcheck warnings in scripts
projects: drop MSVC project files for recent versions
pytest: add DELETE tests, check server version
pytest: fixes for recent python, add FTP tests
quic: fixup duplicate static function name (for cmake unity)
quiche: expire all active transfers on connection close
quiche: trust its timeout handling
RELEASE-PROCEDURE: mention an initial working build
request: make Curl_req_init return void
request: paused upload on completed download, assess connection
reuse: add copyright + license info to individual docs/*.md files
ROADMAP: remove completed entries, mention websocket
rustls: fix handshake done handling
rustls: fix partial send handling
rustls: remove incorrect SSLSUPP_TLS13_CIPHERSUITES flag
rustsls: fix error code on receive
sendf: fix two typos in comments
sendf: useless assignment in cr_lc_read()
setopt: acknowledge errors proper for CURLOPT_COOKIEJAR
setopt: make the setstropt_userpwd args compulsory
setopt: remove check for 'option' that is always true
setopt: warn on Curl_set*opt() uses not using the return value
smtp: result of Curl_bufq_cread was not used
socket: remove redundant call to getsockname
socketpair: fix compilation when USE_UNIX_SOCKETS is not defined
src: tidy up types, add necessary casts
telnet: check return code from fileno()
tests/http: fix compiler warning
tests: add -q as first option when invoking curl for tests
tests: check caddy server version to match test expectations
tests: enable test 1117 for hyper
tests: fix feature case in test1481
tests: fix test 1167 to skip digit-only symbols
tests: make the unit test result type `CURLcode`
tests: Mark tftpd timer function as noreturn
tests: tidy up types in server code
tls: fix SecureTransport + BearSSL cmake unity builds
tls: remove EXAMPLEs from deprecated options
tls: use shared init code for TCP+QUIC
tool: move tool_ftruncate64 to tool_util.c
tool_cb_rea: limit rate unpause for -T . uploads
tool_cfgable: free {proxy_}cipher13_list on exit
tool_getparam: output warning for leading unicode quote character
tool_getparam: remove two redundant conditions
tool_operate: don't truncate the etag save file by default
tool_operate: init vars unconditionally in post_per_transfer
tool_paramhlp: remove duplicate assign
tool_xattr: "guess" URL scheme if none is provided
tool_xattr: in debug builds, act normally if CURL_FAKE_XATTR is not set
transfer: remove useless assignment
url: do not URL decode proxy crendentials
url: fix use of an uninitialized variable
url: make parse_login_details use memdup0
url: remove duplicate call to Curl_conncache_remove_conn when pruning
urlapi: allow setting port number zero
urlapi: fix relative redirects to fragment-only
urldata: remove fields not used depending on used features
vauth: make two functions void that always just returned OK
version: use msnprintf instead of strncpy
vquic-tls: use correct cert name check API for wolfSSL
vquic: use CURL_FORMAT_CURL_OFF_T for 64 bit printf output
vtls: TLS session storage overhaul
wakeup_create: use FD_CLOEXEC/SOCK_CLOEXEC
warnless: delete orphan declarations
websocket: avoid memory leak in error path
winbuild: add ENABLE_WEBSOCKETS option
winbuild: use $(RC) correctly
wolfssl: plug memory leak in wolfssl_connect_step2()
x509asn1: return error on missing OID

Log message:
*: recursive bump for gnutls p11-kit option

(existing installations need the bl3.mk included, but it's now only
optionally included)

Log message:
curl: update to 8.7.1.

Security fix release.

Fixed in 8.7.1 - March 27 2024

8.7.1

Bugfixes:

    Fixed empty tool_hugehelp.c file

Fixed in 8.7.0 - March 27 2024

Changes:

    configure: add --disable-docs flag
    CURLINFO_USED_PROXY: return bool whether the proxy was used
    digest: support SHA-512/256
    DoH: add trace configuration
    write-out: add '%{proxy_used}'

Bugfixes:

    ALTSVC.md: correct a typo
    asyn-ares: fix data race warning
    asyn-thread: use wakeup_close to close the read descriptor
    badwords: use hostname, not host name
    BINDINGS: add mcurl, the python binding
    bufq: writing into a softlimit queue cannot be partial
    c-hyper: add header collection writer in hyper builds
    cd2nroff: gen: make `\>` in input to render as plain '>' in output
    cd2nroff: remove backticks from titles
    checksrc.pl: fix handling .checksrc with CRLF
    cmake: add USE_OPENSSL_QUIC support
    cmake: add warning for using TLS libraries without 1.3 support
    cmake: enable `ENABLE_CURL_MANUAL` by default
    cmake: fix `CURL_WINDOWS_SSPI=ON` with Schannel disabled
    cmake: fix function description in comment
    cmake: fix install for older CMake versions
    cmake: fix libcurl.pc and curl-config library specifications
    cmdline-docs/Makefile: avoid using a fixed temp file name
    cmdline-docs: quote and angle bracket cleanup
    cmdline-opts/_EXITCODES: sync with libcurl-errors
    cmdline-opts/_VARIABLES.md: improve the description
    cmdline-opts/_VERSION: provide %VERSION correctly
    cmdline-opts: shorter help texts
    configure: add pkg-config support to rustls detection
    configure: add warning for using TLS libraries without 1.3 support
    configure: build & install shell completions when enabled
    configure: do not link with nghttp3 unless necessary
    configure: Don't build shell completions when disabled
    configure: Don't make shell completions without perl
    configure: find libpsl with pkg-config
    connect.c: fix typo
    CONTRIBUTE: update the section on documentation format
    cookie.md: provide an example sending a fixed cookie
    cookie: if psl fails, reject the cookie
    curl: exit on config file parser errors
    curl: make --libcurl output better CURLOPT_*SSLVERSION
    curl: when allocating variables, add the name into the struct
    curl_setup.h: add curl_uint64_t internal type
    curldown: fix email address in Copyright
    CURLMOPT_MAX*: mention what happens if changed mid-transfer
    CURLOPT_INTERFACE.md: remove spurious amp, add see-also
    CURLOPT_POSTQUOTE.md: fix typo
    CURLOPT_SSL_CTX_FUNCTION.md: no promises of lifetime after return
    CURLOPT_WRITEFUNCTION.md: typo fix
    digest: add check for hashing error
    dist: make sure the http tests are in the tarball
    DISTROS: add document with distro pointers
    docs/libcurl: add TLS backend info for all TLS options
    docs/libcurl: generate PROTOCOLS from meta-data
    docs: add missing slashes to SChannel client certificate documentation
    docs: add necessary setup for nghttp3
    docs: ascii version of manpage without nroff
    docs: dist curl*.1 and install without perl
    docs: make curldown do angle brackets like markdown
    docs: make each libcurl man specify protocol(s)
    docs: make sure curl.1 is included in dist tarballs
    docs: update minimal binary size in INSTALL.md
    docs: use present tense
    examples: use present tense in comments
    file: use xfer buf for file:// transfers
    fopen: fix narrowing conversion warning on 32-bit Android
    form-string.md: correct the example
    ftp: do lineend conversions in client writer
    ftp: fix socket wait activity in ftp_domore_getsock
    ftp: tracing improvements
    ftp: treat a 226 arriving before data as a signal to read data
    gen.pl: make the "manpageification" faster
    gen: make `\>` in input to render as plain '>' in output
    getparam: make --ftp-ssl work again
    GHA/linux: add sysctl trick to work-around GitHub runner issue
    GIT-INFO: convert to markdown
    GOVERNANCE: document the core team
    header.md: remove backslash, make nicer markdown
    HTTP/2: write response directly
    http2, http3: return CURLE_PARTIAL_FILE when bytes were received
    http2: fix push discard
    http2: memory errors in the push callbacks are fatal
    http2: minor tweaks to optimize two struct sizes
    http2: push headers better cleanup
    http2: remove the third (unused) argument from http2_data_done()
    HTTP3.md: adjust the OpenSSL QUIC install instructions
    http: better error message for HTTP/1.x response without status line
    http: improve response header handling, save cpu cycles
    http: move headers collecting to writer
    http: remove stale comment about rewindbeforesend
    http: separate response parsing from response action
    http_chunks: fix the accounting of consumed bytes
    http_chunks: remove unused 'endptr' variable
    https-proxy: use IP address and cert with ip in alt names
    hyper: implement unpausing via client reader
    ipv6.md: mention IPv4 mapped addresses
    KNOWN_BUGS: POP3 issue when reading small chunks
    lib1598: fix `CURLOPT_POSTFIELDSIZE` usage
    lib582: remove code causing warning that is never run
    lib: add `void *ctx` to reader/writer instances
    lib: convert Curl_get_line to use dynbuf
    lib: Curl_read/Curl_write clarifications
    lib: enhance client reader resume + rewind
    lib: initialize output pointers to NULL before calling strto[ff,l,ul]
    lib: keep conn IP information together
    lib: move 'done' parameter to SingleRequests
    lib: remove curl_mimepart object when CURL_DISABLE_MIME
    libcurl-docs: cleanups
    libcurl-security.md: Active FTP passes on the local IP address
    libssh/libssh2: return error on too big range
    MANUAL.md: fix typo
    mbedtls: fix building when MBEDTLS_X509_REMOVE_INFO flag is defined
    mbedtls: fix pytest for newer versions
    mbedtls: properly cleanup the thread-shared entropy
    mbedtls: use mbedtls_ssl_conf_{min|max}_tls_version
    md4: include strdup.h for the memdup proto
    mime: add client reader
    misc: fix typos in docs and lib
    mkhelp: simplify the generated hugehelp program
    mprintf: fix format prefix I32/I64 for windows compilers
    multi: add xfer_buf to multi handle
    multi: fix multi_sock handling of select_bits
    multi: make add_handle free any multi_easy
    ngtcp2: no recvbuf for stream
    ntml_wb: fix buffer type typo
    OpenSSL QUIC: adapt to v3.3.x
    openssl-quic: check on Windows that socket conv to int is possible
    openssl-quic: fix BIO leak and Windows warning
    openssl-quic: fix unity build, casing, indentation
    OS400: avoid using awk in the build scripts
    paramhlp: fix CRLF-stripping files with "-d @file"
    proxy1.0.md: fix example
    pytest: adapt to API change
    request: clarify message when request has been sent off
    rustls: make curl compile with 0.12.0
    schannel: fix hang on unexpected server close
    scripts: fix cijobs.pl for Azure and GHA
    sendf: ignore response body to HEAD
    setopt: fix check for CURLOPT_PROXY_TLSAUTH_TYPE value
    setopt: fix disabling all protocols
    sha512_256: add support for GnuTLS and OpenSSL
    smtp: fix STARTTLS
    SPONSORS: describe the basics
    strtoofft: fix the overflow check
    test 1541: verify getinfo values on first header callback
    test1165: improve pattern matching
    tests: support setting/using blank content env variables
    TIMER_STARTTRANSFER: set the same for everyone
    TLS: start shutdown only when peer did not already close
    TODO: update 13.11 with more information
    tool_cb_hdr: only parse etag + content-disposition for 2xx
    tool_getparam: accept a blank -w ""
    tool_getparam: handle non-existing (out of range) short-options
    tool_operate: change precedence of server Retry-After time
    tool_operate: do not set CURLOPT_QUICK_EXIT in debug builds
    trace-config.md: remove the mutexed options list
    transfer.c: break receive loop in speed limited transfers
    transfer: improve Windows SO_SNDBUF update limit
    urldata: move authneg bit from conn to Curl_easy
    version: allow building with ancient libpsl
    vquic-tls: fix the error code returned for bad CA file
    vtls: fix tls proxy peer verification
    vtls: revert "receive max buffer" + add test case
    VULN-DISCLOSURE-POLICY.md: update detail about CVE requests
    websocket: fix curl_ws_recv()
    wolfSSL: do not call the stub function wolfSSL_BIO_set_init()
    write-out.md: clarify error handling details

Log message:
*curl*: update to 8.6.0

This release includes the following changes:

 o add CURLE_TOO_LARGE [48]
 o add CURLINFO_QUEUE_TIME_T [76]
 o add CURLOPT_SERVER_RESPONSE_TIMEOUT_MS: add [39]
 o asyn-thread: use GetAddrInfoExW on >= Windows 8 [55]
 o configure: make libpsl detection failure cause error [109]
 o docs/cmdline: change to .md for cmdline docs [77]
 o docs: introduce "curldown" for libcurl man page format [102]
 o runtests: support -gl. Like -g but for lldb. [47]

This release includes the following bugfixes:

 o altsvc: free 'as' when returning error [23]
 o appveyor: replace PowerShell with bash + parallel autotools [54]
 o appveyor: switch to out-of-tree builds [29]
 o asyn-ares: with modern c-ares, use its default timeout [127]
 o build: delete unused `HAVE_{GSSHEIMDAL,GSSMIT,HEIMDAL}` [4]
 o build: delete/replace clang warning pragmas [111]
 o build: enable missing OpenSSF-recommended warnings, with fixes [11]
 o build: fix `-Wconversion`/`-Wsign-conversion` warnings [26]
 o build: fix Windows ADDRESS_FAMILY detection [35]
 o build: more `-Wformat` fixes [40]
 o build: remove redundant `CURL_PULL_*` settings [8]
 o cf-h1-proxy: no CURLOPT_USERAGENT in CONNECT with hyper [133]
 o cf-socket: show errno in tcpkeepalive error messages [120]
 o CI/distcheck: run full tests [31]
 o cmake: add option to disable building docs
 o cmake: fix generation for system name iOS [53]
 o cmake: fix typo [5]
 o cmake: freshen up docs/INSTALL.cmake [101]
 o cmake: prefill/cache `HAVE_STRUCT_SOCKADDR_STORAGE` [45]
 o cmake: rework options to enable curl and libcurl docs [161]
 o cmake: when USE_MANUAL=YES, build the curl.1 man page [113]
 o cmdline-opts/write-out.d: remove spurious double quotes
 o cmdline-opts: update availability for the *-ca-native options [66]
 o cmdline/gen: fix the sorting of the man page options [33]
 o configure: add libngtcp2_crypto_boringssl detection [155]
 o configure: fix no default int compile error in ipv6 detection [69]
 o configure: when enabling QUIC, check that TLS supports QUIC [87]
 o connect: remove margin from eyeballer alloc [79]
 o content_encoding: change return code to typedef'ed enum [94]
 o cookie.d: document use of empty string to enable cookie engine [106]
 o cookie: avoid fopen with empty file name [24]
 o curl.h: CURLOPT_DNS_SERVERS is only available with c-ares [131]
 o curl: show ipfs and ipns as supported "protocols" [15]
 o curl_easy_getinfo.3: remove the wrong time value count [116]
 o curl_multi_fdset.3: remove mention of null pointer support [134]
 o CURLINFO_REFERER.3: clarify that it is the *request* header [70]
 o CURLOPT_AUTOREFERER.3: mention CURLINFO_REFERER
 o CURLOPT_POSTFIELDS.3: fix incorrect C string escape in example [27]
 o CURLOPT_SSH_*_KEYFILE: clarify [57]
 o dist: add tests/errorcodes.pl to the tarball [6]
 o docs: clean up Protocols: for cmdline options [32]
 o docs: describe and highlight super cookies [80]
 o docs: do not start lines/sentences with So, But nor And [140]
 o docs: install curl.1 with cmake [166]
 o docs: mention env vars not used by schannel [124]
 o doh: remove unused local variable [34]
 o examples: add four new examples [99]
 o file+ftp: use stack buffers instead of data->state.buffer [138]
 o ftp: handle the PORT parsing without allocation [44]
 o ftp: use dynbuf to store entrypath [83]
 o ftp: use memdup0 to store the OS from a SYST 215 response [82]
 o ftpserver.pl: send 213 SIZE response without spurious newline
 o gen.pl: support ## for doing .IP in table-like lists [105]
 o gen: do italics/bold for a range of letters, not just single word [78]
 o GHA: add a job scanning for "bad words" in markdown [164]
 o GHA: bump ngtcp2, gnutls, mod_h2, quiche [158]
 o gnutls: fix build with --disable-verbose [3]
 o haproxy-clientip.d: document the arg [68]
 o headers: make sure the trailing newline is not stored [97]
 o headers: remove assert from Curl_headers_push [115]
 o hostip: return error immediately when Curl_ip2addr() fails [19]
 o hsts: remove assert for zero length domain [96]
 o http2: improved on_stream_close/data_done handling [49]
 o http3/quiche: fix result code on a stream reset [91]
 o http3: initial support for OpenSSL 3.2 QUIC stack [110]
 o http: adjust_pollset fix [85]
 o http: check for "Host:" case insensitively [154]
 o http: fix off-by-one error in request method length check [14]
 o http: only act on 101 responses when they are HTTP/1.1 [98]
 o http: remove comment reference to a removed solution [156]
 o http: use stack scratch buffer [150]
 o http_proxy: a blank CURLOPT_USERAGENT should not be used in CONNECT [90]
 o krb5: add prototype to silence clang warnings on mvsnprintf() [119]
 o lib: add debug log outputs for CURLE_BAD_FUNCTION_ARGUMENT [62]
 o lib: error out on multissl + http3 [13]
 o lib: fix variable undeclared error caused by `infof` changes [2]
 o lib: reduce use of strncpy [30]
 o lib: rename Curl_strndup to Curl_memdup0 to avoid misunderstanding [36]
 o lib: replace readwrite with write_resp [137]
 o lib: strndup/memdup instead of malloc, memcpy and null-terminate [42]
 o libssh2: use `libssh2_session_callback_set2()` with v1.11.1 [103]
 o libssh: improve the deprecation warning dismissal [20]
 o libssh: supress warnings without version check [18]
 o Makefile.am: fix the MSVC project generation [22]
 o Makefile.mk: drop Windows support [12]
 o mbedtls: fix `-Wnull-dereference` and `-Wredundant-decls` [117]
 o mbedtls: free the entropy when threaded [46]
 o mime: use memdup0 instead of malloc + memcpy [63]
 o mksymbolsmanpage.pl: provide references to where the symbol is used
 o mprintf: overhaul and bugfixes [52]
 o mqtt: use stack scratch buffer for recv+publish [148]
 o multi: remove total timer reset in file_do() while fetching file:// [89]
 o ngtcp2: put h3 at the front of alpn [58]
 o ntlm_wb: do not use data->state.buffer any longer [151]
 o openldap: fix an LDAP crash [75]
 o openldap: fix STARTTLS [67]
 o openssl: re-match LibreSSL deinit with init [17]
 o openssl: when verifystatus fails, remove session id from cache [100]
 o OS400: sync ILE/RPG binding [114]
 o pingpong: stop using the download buffer [159]
 o pop3: replace calloc + memcpy with memdup0 [60]
 o pytest: scorecard tracking CPU and RSS [157]
 o quiche: return CURLE_HTTP3 on send to invalid stream [65]
 o readwrite_data: loop less [21]
 o Revert "urldata: move async resolver state from easy handle to \ 
connectdata" [16]
 o rtsp: deal with borked server responses [129]
 o runtests: for mode="text" on <stdout>, fix newlines on both \ 
parts [64]
 o sasl: make login option string override http auth [142]
 o schannel: fix `-Warith-conversion` gcc 13 warning [28]
 o sectransp: do verify_cert without memdup for blobs [93]
 o sectransp_ make TLSCipherNameForNumber() available in non-verbose config [1]
 o sendf: fix compiler warning with CURL_DISABLE_HEADERS_API [38]
 o setopt: clear mimepost when formp is freed [92]
 o setopt: use memdup0 when cloning COPYPOSTFIELDS [107]
 o socks: fix generic output string to say SOCKS instead of SOCKS4 [144]
 o socks: use own buffer instead of data->state.buffer [143]
 o ssh: fix namespace of two local macros [51]
 o ssh: use stack scratch buffer for seeks [146]
 o strerror: repair get_winsock_error() [56]
 o system.h: sync mingw `CURL_TYPEOF_CURL_SOCKLEN_T` with other compilers [9]
 o system_win32: fix a function pointer assignment warning [71]
 o telnet: use dynbuf instad of malloc for escape buffer [108]
 o telnet: use stack scratch buffer for do [149]
 o tests/server: delete workaround for old-mingw [25]
 o tests: avoid int/size_t conversion size/sign warnings [163]
 o tests: respect $TMPDIR when creating unix domain sockets [50]
 o tool: make parser reject blank arguments if not supported [86]
 o tool: prepend output_dir in header callback [95]
 o tool_getparam: bsearch cmdline options [74]
 o tool_getparam: do not try to expand without an argument [59]
 o tool_getparam: stop supporting `@filename` style for --cookie [121]
 o tool_listhelp: regenerate after recent .d updates [61]
 o tool_operate: make --remove-on-error only remove "real" files [125]
 o tool_operate: stop setting the file comment on Amiga [128]
 o transfer: adjust_pollset improvements [81]
 o transfer: fix upload rate limiting, add test cases [37]
 o transfer: make the select_bits_paused condition check both directions [104]
 o transfer: remove warning: Value stored to 'blen' is never read [136]
 o url: don't set default CA paths for Secure Transport backend [126]
 o url: for disabled protocols, mention if found in redirect [7]
 o urlapi: remove assert [162]
 o verify-examples.pl: fail verification on unescaped backslash [72]
 o version: show only the libpsl version, not its dependencies [130]
 o vquic: extract TLS setup into own source [88]
 o vtls: fix missing multissl version info [73]
 o vtls: receive max buffer [139]
 o vtls: remove the Curl_cft_ssl_proxy object if CURL_DISABLE_PROXY [41]
 o websockets: check for negative payload lengths [123]
 o websockets: refactor decode chain [122]
 o windows: delete redundant headers [43]
 o windows: simplify detecting and using system headers [10]
 o wolfssl: load certificate *chain* for PEM client certs [84]
 o x509asn1: remove code for WANT_VERIFYHOST [132]
 o x509asn1: switch from malloc to dynbuf [112]

Log message:
curl: update to 8.5.0

Security fix release.