./www/curl, Client that groks URLs

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: CURRENT, Version: 7.76.1, Package name: curl-7.76.1, Maintainer: leot

Curl is a command line tool for transferring files with URL syntax, supporting
HTTPS certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload,
proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate,
kerberos...), file transfer resume, proxy tunneling and a busload of other
useful tricks.

Required to run:
[security/heimdal] [security/openssl] [www/nghttp2] [devel/libidn2]

Required to build:

Package options: gssapi, http2, idn, inet6

Master sites:

SHA1: d38ab79ef7a6d92df91ca8dfcf9a5eaf7e25b725
RMD160: a7a4afba13bc8d6c757092ae4d4cd50ff3c2a46d
Filesize: 2370.738 KB

Version history: (Expand)

CVS history: (Expand)

   2021-04-14 21:29:43 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
curl: updated to 7.76.1


configure: disable min version set for Darwin
configure: include <time.h> unconditionally
configure: remove use of RETSIGTYPE
docs/HTTP3.md: update the build instruction using gnutls
examples/hiperfifo.c: check event_initialized before delete
file: support GETing directories again
github/workflow: add "security-extended" to codeql-analysis.yml
h2: allow 100 streams by default
hostip: fix builds that disable all asynchronous DNS
http_proxy: only loop on 407 + close if we have credentials
install: add instructions for Apple Darwin platforms
lib: remove unused HAVE_INET_NTOA_R* defines
libssh: get rid of PATH_MAX
ngtcp2+gnutls: clear credentials when freed
ngtcp2: Use ALPN h3-29 for now
ntlm: fix negotiated flags usage
ntlm: support version 2 on 32-bit platforms
TLS: fix HTTP/2 selection
tool_progress: fix progress meter final update in parallel mode
typecheck-gcc: make the ssl-ctx-cb check use SSL_CTX pointers
   2021-03-31 11:52:31 by Leonardo Taccari | Files touched by this commit (3) | Package updated
Log message:
curl: Update to 7.76.0

This release includes the following changes:

 o cookies: Support multiple -b parameters
 o curl: add --fail-with-body
 o doh: add options to disable ssl verification
 o http: add support to read and store the referrer header
 o sasl: support SCRAM-SHA-1 and SCRAM-SHA-256 via libgsasl
 o vtls: initial implementation of rustls backend

This release includes the following bugfixes:

 o CVE-2021-22876: strip credentials from the auto-referer header field
 o CVE-2021-22890: add 'isproxy' argument to Curl_ssl_get/addsessionid()
 o asyn-ares: use consistent resolve error message
 o BUG-BOUNTY: removed the cooperation mention
 o build: delete unused feature guards
 o build: fix --disable-dateparse
 o build: fix --disable-http-auth
 o build: remove all traces of USE_BLOCKING_SOCKETS
 o c-hyper: Remove superfluous pointer check
 o c-hyper: support automatic content-encoding
 o CI/azure: disable test 433 on azure-ubuntu
 o CI/azure: replace python-impacket with python3-impacket
 o ci: stop building on freebsd-12-1
 o cmake: fix import library name for non-MS compiler on Windows
 o cmake: use CMAKE_INSTALL_INCLUDEDIR indirection
 o cmake: support WinIDN
 o config: fix building SMB with configure using Win32 Crypto
 o config: fix detection of restricted Windows App environment
 o configure: fail if --with-quiche is used and quiche isn't found
 o configure: make AC_TRY_* into AC_*_IFELSE
 o configure: make hyper opt-in, and fail if missing
 o configure: only add OpenSSL paths if they are defined
 o configure: provide Largefile feature for curl-config
 o configure: remove use of deprecated macros
 o cookies: Fix potential NULL pointer deref with PSL
 o curl: set CURLOPT_NEW_FILE_PERMS if requested
 o curl_easy_setopt.3: add curl_easy_option* functions to SEE ALSO
 o curl_multibyte: always return a heap-allocated copy of string
 o curl_multibyte: fall back to local code page stat/access on Windows
 o Curl_timeleft: check both timeouts during connect
 o curl_url_set.3: mention CURLU_PATH_AS_IS
 o CURLOPT_QUOTE.3: clarify that libcurl doesn't parse what's sent
 o docs/HTTP2: remove the outdated remark about multiplexing for the tool
 o docs/Makefile.inc: format to be update-friendly
 o docs: add CURLOPT_CURLU to 'See also' in curl_url_ functions
 o docs: add missing Arg tag to --stderr
 o docs: Add SSL backend names to CURL_SSL_BACKEND
 o docs: clarify timeouts for queued transfers in multi API
 o docs: Explain DOH transfers inherit some SSL settings
 o docs: fix FILE example url in --metalink documentation
 o docs: make gen.pl support *italic* and **bold**
 o doh: Fix sharing user's resolve list with DOH handles
 o doh: Inherit CURLOPT_STDERR from user's easy handle
 o dynbuf: bump the max HTTP request to 1MB
 o examples: Remove threaded-shared-conn.c due to bug
 o file: Support unicode urls on windows
 o ftp: add 'list_only' to the transfer state struct
 o ftp: add 'prefer_ascii' to the transfer state struct
 o FTP: allow SIZE to fail when doing (resumed) upload
 o ftp: avoid SIZE when asking for a TYPE A file
 o ftp: fix Codacy/cppcheck warning about null pointer arithmetic
 o ftp: fix memory leak in ftp_done
 o ftp: never set data->set.ftp_append outside setopt
 o gen.pl: quote "bare" minuses in the nroff curl.1
 o github: add torture-ftp for FTP-only torture testing
 o gnutls: assume nettle crypto support
 o gskit: correct the gskit_send() prototype
 o hostip: fix build with sync resolver
 o hostip: fix crash in sync resolver builds that use DOH
 o hsts: remove unused defines
 o http2: don't set KEEP_SEND when there's no more data to be sent
 o http2: fail if connection terminated without END_STREAM
 o http: cap body data amount during send speed limiting
 o http: do not add a referrer header with empty value
 o http: make 416 not fail with resume + CURLOPT_FAILONERRROR
 o http: remove superfluous NULL assign
 o http: strip default port from URL sent to proxy
 o http: use credentials from transfer, not connection
 o ldap: use correct memory free function
 o lib1536: check ptr against NULL before dereferencing it
 o lib1537: check ptr against NULL before dereferencing it
 o lib: remove 'conn->data' completely
 o libssh2: kdb_callback: get the right struct pointer
 o libssh2:ssh_connect: clear session pointer after free
 o memdebug: close debug logfile explicitly on exit
 o mingw: enable using strcasecmp()
 o multi: close the connection when h2=>h1 downgrading
 o multi: do once-per-transfer inits in before_perform in DID state
 o multi: rename the multi transfer states
 o multi: update pending list when removing handle
 o ngtcp2: adapt to the new recv_datagram callback
 o ngtcp2: clarify calculation precedence
 o ngtcp2: Fix build error due to change in ngtcp2_addr_init
 o ngtcp2: sync with recent API updates
 o openldap: avoid NULL pointer dereferences
 o openssl: adapt to v3's new const for a few API calls
 o openssl: ensure to check SSL_CTX_set_alpn_protos return values
 o openssl: remove get_ssl_version_txt in favor of SSL_get_version
 o openssl: set the transfer pointer for logging early
 o OS400: update for CURLOPT_AWS_SIGV4
 o parse_proxy: fix a memory leak in the OOM path
 o pathhelp.pm: fix use of pwd -L in Msys environment
 o projects: Update VS projects for OpenSSL 1.1.x
 o quiche: fix build error: use 'int' for port number
 o quiche: fix crash when failing to connect
 o retry-all-errors.d: Explain curl errors versus HTTP response errors
 o retry.d: Clarify transient 5xx HTTP response codes
 o runtests.pl: add %TESTNUMBER variable to make copying tests more convenient
 o runtests.pl: add a -P option to specify an external proxy
 o runtests.pl: kill processes locking test log files
 o setopt: error on CURLOPT_HTTP09_ALLOWED set true with Hyper
 o test1188: change error to check for: --fail HTTP status
 o test220/314: adjust to run with Hyper
 o test304: header CRLF cleanup to work with Hyper
 o test306: make it not run with Hyper
 o tests: disable .curlrc in more environments
 o tests: use %TESTNUMBER instead of fixed number
 o tftp: remove the 3600 second default timeout
 o time: enable 64-bit time_t in supported mingw environments
 o tool_help: add missing argument for --create-file-mode
 o tool_help: Increase space between option and description
 o tool_operate: bail if set CURLOPT_HTTP09_ALLOWED returns error
 o travis: add a rustls build
 o travis: bump wolfssl to 4.7.0
 o travis: only build wolfssl when needed
 o travis: split "torture" into a separate "events" build
 o travis: switch ngtcp2 build over to quictls
 o travis: use ubuntu nghttp2 package instead of build our own
 o url.c: use consistent error message for failed resolve
 o url: fix memory leak if OOM in the HSTS handling
 o url: fix possible use-after-free in default protocol
 o urldata: don't touch data->set.httpversion at run-time
 o urldata: fix build without HTTP and MQTT
 o urldata: make 'actions[]' use unsigned char instead of int
 o urldata: merge "struct DynamicStatic" into "struct UrlState"
 o urldata: remove the 'rtspversion' field
 o urldata: remove the _ORIG suffix from string names
 o version.d: Add missing features to the features list
 o wolfssl: don't store a NULL sessionid
   2021-03-02 00:31:31 by Greg Troxel | Files touched by this commit (1)
Log message:
www/curl: Accomodate SSLCERTBUNDLE

Rather than letting openssl perform default validation, curl passes in
an explicit request to...  use the certificates in the default
location.  In cases where SSLCERTBUNDLE is defined (because the system
uses a bundle instead of the traditonal directory of trust anchors),
pass that to curl's configure.

As proposed on tech-pkg by Thomas Orgis, without objections.
   2021-02-03 14:17:18 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
curl: updated to 7.75.0


curl: add --create-file-mode [mode]
curl: add new variables to --write-out
dns: extend CURLOPT_RESOLVE syntax for adding non-permanent entries
gopher: implement secure gopher protocol
http: add Hyper as new optional HTTP backend
http: introduce AWS HTTP v4 Signature support


badsymbols.pl: add verbose mode -v
badsymbols.pl: ignore stand-alone single hash lines
BUG-BOUNTY: minor language updates
build: fix djgpp builds
cleanup: fix empty expression statement has no effect
cmake: Add an option to disable libidn2
cmake: enable gophers correctly in curl-config
cmdline-opts/gen.pl: return hard on errors
cmdline-opts/retry.d: mention response code 429 as well
configure: set -Wextra-semi-stmt for clang with --enable-debug
connect: defer port selection until connect() time
connect: mark intentional ignores of setsockopt return values
connect: on linux, enable reporting of all ICMP errors on UDP sockets
connect: zero variable on stack to silence valgrind complaint
cookie: avoid the C1001 internal compiler error with MSVC 14
curl.1: fix typo microsft -> microsoft
curl: fix handling of -q option
curl: include the file name in --xattr/--remote-time error msgs
curl: move fprintf outputs to warnf
Curl_chunker: shrink the struct
curl_easy_pause.3: add multiplexed pause effects
CURLOPT_URL.3: remove scheme specific details
digest_sspi: Show InitializeSecurityContext errors in verbose mode
docs/examples: adjust prototypes for CURLOPT_READFUNCTION
docs/URL-SYNTAX: the URL syntax curl accepts and works with
docs: enable syntax highlighting in several docs files
docs: fix line length bug in gen.pl
docs: fix typos in NEW-PROTOCOL.md
docs: fix wrong documentation in help.d
docs: remove redundant "better" in --fail help
doh: allocate state struct on demand
examples/libtest: add .checksrc to dist
examples: remove superfluous asterisk uses
failf: remove newline from formatting strings
file: don't provide content-length for directories
getinfo: build with disabled HTTP support
gitattributes: Set batch files to CRLF line endings on checkout
h2: do not wait for RECV on paused transfers
HISTORY: added dates to early history
http: empty reply connection are not left intact
http: get CURLOPT_REQUEST_TARGET working with a HTTP proxy
http: have CURLOPT_FAILONERROR fail after all headers
http: make providing Proxy-Connection header not cause duplicated headers
http: show the request as headers even when split-sending
http_chunks: correct and clarify a comment on hexnumber length
http_proxy: Fix CONNECT chunked encoding race condition
httpauth: make multi-request auth work with custom port
INSTALL: now at 85 operating systems
INSTALL: update the list known OSes and CPU archs curl has run on
lib/unit tests: add missing curl_global_cleanup() calls
lib1564/5: verify that curl_multi_wakeup returns OK
lib: pass in 'struct Curl_easy *' to most functions
lib: remove Curl_ prefix from many static functions
lib: save a bit of space with some structure packing
libssh2: fix "Value stored to 'readdir_len' is never read"
libssh2: move data from connection object to transfer object
libssh: avoid plain free() of libssh-memory
mime: make sure setting MIMEPOST to NULL resets properly
misc: assorted typo fixes
misc: fix "warning: empty expression statement has no effect"
misc: fix typos
mk-ca-bundle.pl: deterministic output when using -t
mqtt: deal with 0 byte reads correctly
mqtt: handle POST/PUBLISH without a set POSTFIELDSIZE
multi: set the PRETRANSFER time-stamp when we switch to PERFORM
multi: skip DONE state if there's no connection left for ftp wildcard
multi: when erroring in TOOFAST state, act as for PERFORM
multi_runsingle: bail out early on data->conn == NULL
ngtcp2: Fix http3 upload stall
ngtcp2: Fix stack buffer overflow
ngtcp2: make it build it current master again
nss: get the run-time version instead of build-time
openssl: lowercase the hostname before using it for SNI
OS400: update ccsidcurl.c
pretransfer: setup the User-Agent header here
quiche: remove fprintf() leftover
Revert "CI/github: work-around for brew breakage on macOS"
runtests: add 'wakeup' as a feature
runtests: add support for %if [feature] conditions
runtests: preprocess DISABLED to allow conditionals
schannel: plug a memory-leak
schannel_verify: fix safefree call typo
select: convert Curl_select() to private static function
socks: use the download buffer instead
speedcheck: exclude paused transfers
strerror: skip errnum >= 0 assertion on windows
test1522: add debug tracing
test1633: set appropriate name
test179: use consistent header line endings
test410: verify HTTPS GET with a 49K request header
tests/mqttd: extract the client id from the correct offset
tests: make --libcurl tests only test FTP options if ftp enabled
tool_doswin: Restore original console settings on CTRL signal
tool_operate: fix the suppression logic of some error messages
tool_operate: spellfix a comment
too─║_writeout: fix the -w time output units
transfer: fix GCC 10 warning with flag '-Wint-in-bool-context'
travis: build ngtcp2 --with-gnutls
travis: limit the tests with quiche builds to HTTPS and FTPS only
travis: restrict the openssl3 job to only run https and ftps tests
url: if IDNA conversion fails, fallback to Transitional
urldata: make magic be the first struct field
urldata: remove 'local_ip' from the connectdata struct
urldata: remove duplicate 'upkeep_interval_ms' from connectdata
urldata: remove duplicate port number storage
urldata: remove the duplicate 'ip_addr_str' field
urldata: store ip version in a single byte
vtls: remove md5sum
warnless: remove curlx_ultosi
wolfssl: add SECURE_RENEGOTIATION support
wolfssl: Support wolfSSL builds missing TLS 1.1
   2020-12-09 10:05:39 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
curl: updated to 7.74.0

curl and libcurl 7.74.0

This release includes the following changes:
 o hsts: add experimental support for Strict-Transport-Security

This release includes the following bugfixes:
 o CVE-2020-8286: Inferior OCSP verification
 o CVE-2020-8285: FTP wildcard stack overflow
 o CVE-2020-8284: trusting FTP PASV responses
 o acinclude: detect manually set minimum macos/ipod version
 o alt-svc: enable (in the build) by default
 o alt-svc: minimize variable scope and avoid "DEAD_STORE"
 o asyn: use 'struct thread_data *' instead of 'void *'
 o checksrc: warn on empty line before open brace
 o CI/appveyor: disable test 571 in two cmake builds
 o CI/azure: improve on flakiness by avoiding libtool wrappers
 o CI/tests: enable test target on TravisCI for CMake builds
 o CI/travis: add brotli and zstd to the libssh2 build
 o cirrus: build with FreeBSD 12.2 in CirrusCI
 o cmake: call the feature unixsockets without dash
 o cmake: check for linux/tcp.h
 o cmake: correctly handle linker flags for static libs
 o cmake: don't pass -fvisibility=hidden to clang-cl on Windows
 o cmake: don't use reserved target name 'test'
 o cmake: make BUILD_TESTING dependent option
 o cmake: make CURL_ZLIB a tri-state variable
 o cmake: set the unicode feature in curl-config on Windows
 o cmake: store IDN2 information in curl_config.h
 o cmake: use libcurl.rc in all Windows builds
 o configure: pass -pthread to Libs.private for pkg-config
 o configure: use pkgconfig to find openSSL when cross-compiling
 o connect: repair build without ipv6 availability
 o curl.1: add an "OUTPUT" section at the top of the manpage
 o curl.se: new home
 o curl: add compatibility for Amiga and GCC 6.5
 o curl: only warn not fail, if not finding the home dir
 o curl_easy_escape: limit output string length to 3 * max input
 o Curl_pgrsStartNow: init speed limit time stamps at start
 o curl_setup: USE_RESOLVE_ON_IPS is for Apple native resolver use
 o curl_url_set.3: fix typo in the RETURN VALUE section
 o CURLOPT_HSTS.3: document the file format
 o CURLOPT_NOBODY.3: fix typo
 o CURLOPT_TCP_NODELAY.3: fix comment in example code
 o CURLOPT_URL.3: clarify SCP/SFTP URLs are for uploads as well
 o docs: document the 8MB input string limit
 o docs: fix typos and markup in ETag manpage sections
 o docs: Fix various typos in documentation
 o examples/httpput: remove use of CURLOPT_PUT
 o FAQ: refreshed
 o file: avoid duplicated code sequence
 o ftp: retry getpeername for FTP with TCP_FASTOPEN
 o gnutls: fix memory leaks (certfields memory wasn't released)
 o header.d: mention the "Transfer-Encoding: chunked" handling
 o HISTORY: the new domain
 o http3: fix two build errors, silence warnings
 o http3: use the master branch of GnuTLS for testing
 o http: pass correct header size to debug callback for chunked post
 o http_proxy: use enum with state names for 'keepon'
 o httpput-postfields.c: new example doing PUT with POSTFIELDS
 o infof/failf calls: fix format specifiers
 o libssh2: fix build with disabled proxy support
 o libssh2: fix transport over HTTPS proxy
 o libssh2: require version 1.0 or later
 o Makefile.m32: add support for HTTP/3 via ngtcp2+nghttp3
 o Makefile.m32: add support for UNICODE builds
 o mqttd: fclose test file when done
 o NEW-PROTOCOL: document what needs to be done to add one
 o ngtcp2: adapt to recent nghttp3 updates
 o ngtcp2: advertise h3 ALPN unconditionally
 o ngtcp2: Fix build error due to symbol name change
 o ngtcp2: use the minimal version of QUIC supported by ngtcp2
 o ntlm: avoid malloc(0) on zero length user and domain
 o openssl: acknowledge SRP disabling in configure properly
 o openssl: free mem_buf in error path
 o openssl: guard against OOM on context creation
 o openssl: use OPENSSL_init_ssl() with >= 1.1.0
 o os400: Sync libcurl API options
 o packages/OS400: make the source code-style compliant
 o quiche: close the connection
 o quiche: remove 'static' from local buffer
 o range.d: clarify that curl will not parse multipart responses
 o range.d: fix typo
 o Revert "multi: implement wait using winsock events"
 o rtsp: error out on empty Session ID, unified the code
 o rtsp: fixed Session ID comparison to refuse prefix
 o rtsp: fixed the RTST Session ID mismatch in test 570
 o runtests: return error if no tests ran
 o runtests: revert the mistaken edit of $CURL
 o runtests: show keywords when no tests ran
 o scripts/completion.pl: parse all opts
 o socks: check for DNS entries with the right port number
 o src/tool_filetime: disable -Wformat on mingw for this file
 o strerror: use 'const' as the string should never be modified
 o test122[12]: remove these two tests
 o test506: make it not run in c-ares builds
 o tests/*server.py: close log file after each log line
 o tests/server/tftpd.c: close upload file right after transfer
 o tests/util.py: fix compatibility with Python 2
 o tests: add missing global_init/cleanup calls
 o tests: fix some http/2 tests for older versions of nghttpx
 o tool_debug_cb: do not assume zero-terminated data
 o tool_help: make "output" description less confusing
 o tool_operate: --retry for HTTP 408 responses too
 o tool_operate: bail out proper on errors during parallel transfers
 o tool_operate: fix compiler warning when --libcurl is disabled
 o tool_writeout: use off_t getinfo-types instead of doubles
 o travis: use ninja-build for CMake builds
 o travis: use valgrind when running tests for debug builds
 o urlapi: don't accept blank port number field without scheme
 o urlapi: URL encode a '+' in the query part
 o urldata: remove 'void *protop' and create the union 'p'
 o vquic/ngtcp2.h: define local_addr as sockaddr_storage
   2020-12-04 21:45:51 by Nia Alarie | Files touched by this commit (456)
Log message:
Revbump packages with a runtime Python dep but no version prefix.

For the Python 3.8 default switch.
   2020-11-15 21:27:39 by Leonardo Taccari | Files touched by this commit (1)
Log message:
curl: Explicitly disable libpsl support

At least on some non-pkgsrc setup it can be accidentally picked up.

Noticed by Dr. Thomas Orgis via tech-pkg@.
   2020-10-18 16:50:45 by Thomas Klausner | Files touched by this commit (3) | Package updated
Log message:
curl: update to 7.73.0.

curl and libcurl 7.73.0

 Public curl releases:         195
 Command line options:         234
 curl_easy_setopt() options:   278
 Public functions in libcurl:  85
 Contributors:                 2270

This release includes the following changes:

 o curl: add --output-dir [25]
 o curl: support XDG_CONFIG_HOME to find .curlrc [3]
 o curl: update --help with categories [77]
 o curl_easy_option_*: new API for meta-data about easy options [40]
 o CURLE_PROXY: new error code [7]
 o mqtt: enable by default [28]
 o sftp: add new quote commands 'atime' and 'mtime' [6]
 o ssh: add the option CURLKHSTAT_FINE_REPLACE [27]
 o tls: add CURLOPT_SSL_EC_CURVES and --curves [29]

This release includes the following bugfixes:

 o altsvc: clone setting in curl_easy_duphandle [60]
 o base64: also build for smtp, pop3 and imap [81]
 o BUGS: convert document to markdown [107]
 o build-wolfssl: fix build with Visual Studio 2019 [114]
 o buildconf: invoke 'autoreconf -fi' instead [37]
 o checksrc: detect // comments on column 0 [132]
 o checksrc: verify do-while and spaces between the braces [2]
 o checksrc: warn on space after exclamation mark [129]
 o CI/azure: disable test 571 in the msys2 builds [93]
 o CI/azure: MQTT is now enabled by default [64]
 o CI/azure: no longer ignore results of test 1013 [43]
 o CI/tests: fix invocation of tests for CMake builds [117]
 o CI/travis: add a CI job with openssl3 (from git master) [51]
 o cleanups: avoid curl_ on local variables [53]
 o CMake: add option to enable Unicode on Windows [48]
 o cmake: make HTTP_ONLY also disable MQTT [58]
 o CMake: remove explicit `CMAKE_ANSI_CFLAGS` [45]
 o cmake: remove scary warning [96]
 o cmdline-opts/gen.pl: generate nicer "See Also" in curl.1 [66]
 o configure: don't say HTTPS-proxy is enabled when disabled [120]
 o configure: fix pkg-config detecting wolfssl [26]
 o configure: let --enable-debug set -Wenum-conversion with gcc >= 10 [56]
 o conn: check for connection being dead before reuse [39]
 o connect.c: remove superfluous 'else' in Curl_getconnectinfo [42]
 o curl.1: add see also no-progress-meter on two spots [67]
 o curl.1: fix typo invokved -> invoked [36]
 o curl: in retry output don't call all problems "transient" [74]
 o curl: make --libcurl show binary posts correctly [130]
 o curl: make checkpasswd use dynbuf [100]
 o curl: make file2memory use dynbuf [102]
 o curl: make file2string use dynbuf [103]
 o curl: make glob_match_url use dynbuf [101]
 o curl: make sure setopt CURLOPT_IPRESOLVE passes on a long [134]
 o curl: retry delays in parallel mode no longer sleeps blocking [70]
 o curl: use curlx_dynbuf for realloc when loading config files [73]
 o curl:parallel_transfers: make sure retry readds the transfer [71]
 o curl_get_line: build only if cookies or alt-svc are enabled [13]
 o curl_mime_headers.3: fix the example's use of curl_slist_append [83]
 o Curl_pgrsTime - return new time to avoid timeout integer overflow [32]
 o Curl_send: return error when pre_receive_plain can't malloc [111]
 o dist: add missing CMake Find modules to the distribution [14]
 o docs/LICENSE-MIXING: remove [79]
 o docs/opts: fix typos in two manual pages [119]
 o docs/RESOURCES: remove [105]
 o docs/TheArtOfHttpScripting: convert to markdown [106]
 o docs: add description about CI platforms to CONTRIBUTE.md [44]
 o docs: correct non-existing macros in man pages [35]
 o doh: add error message for DOH_DNS_NAME_TOO_LONG [17]
 o dynbuf: make sure Curl_dyn_tail() zero terminates [78]
 o easy_reset: clear retry counter [82]
 o easygetopt: pass a valid enum to avoid compiler warning [75]
 o etag: save and use the full received contents [4]
 o ftp: a 550 response to SIZE returns CURLE_REMOTE_FILE_NOT_FOUND [99]
 o ftp: avoid risk of reading uninitialized integers [76]
 o ftp: get rid of the PPSENDF macro [85]
 o ftp: make a 552 response return CURLE_REMOTE_DISK_FULL [87]
 o ftp: separate FTPS from FTP over "HTTPS proxy" [112]
 o git: ignore libtests in 3XXX area [16]
 o github: use new issue template feature [88]
 o HISTORY: mention alt-svc added in 2019
 o HTTP/3: update to OpenSSL_1_1_1g-quic-draft-29 [41]
 o http: consolidate nghttp2_session_mem_recv() call paths [80]
 o http_proxy: do not count proxy headers in the header bytecount [90]
 o http_proxy: do not crash with HTTPS_PROXY and NO_PROXY set [50]
 o imap: make imap_send use dynbuf for the send buffer management [110]
 o imap: set cselect_bits to CURL_CSELECT_IN initially [104]
 o ldap: reduce the amount of #ifdefs needed [124]
 o lib/Makefile.am: bump VERSIONINFO due to new functions [65]
 o lib1560: verify "redirect" to double-slash leading URL [20]
 o lib583: fix enum mixup
 o lib: fix -Wassign-enum warnings [84]
 o lib: make Curl_gethostname accept a const pointer [38]
 o libssh2: handle the SSH protocols done over HTTPS proxy [125]
 o libssh2: pass on the error from ssh_force_knownhost_key_type [47]
 o Makefile.m32: add ability to override zstd libs [ci skip] [10]
 o man pages: switch to https://example.com URLs [86]
 o MANUAL: update examples to resolve without redirects [122]
 o mbedtls: add missing header when defining MBEDTLS_DEBUG [133]
 o memdebug: remove 9 year old unused debug function [126]
 o multi: expand pre-check for socket readiness [21]
 o multi: handle connection state winsock events [31]
 o multi: implement wait using winsock events [22]
 o ngtcp2: adapt to new NGTCP2_PROTO_VER_MAX define [108]
 o ngtcp2: adapt to the new pkt_info arguments [18]
 o ntlm: fix condition for curl_ntlm_core usage [46]
 o openssl: avoid error conditions when importing native CA [52]
 o openssl: consider ALERT_CERTIFICATE_EXPIRED a failed verification [57]
 o openssl: Fix wincrypt symbols conflict with BoringSSL [9]
 o parsedate: tune the date to epoch conversion [95]
 o pause: only trigger a reread if the unpause sticks [92]
 o pingpong: use a dynbuf for the *_pp_sendf() function [113]
 o READMEs: convert several to markdown [115]
 o runtests: add %repeat[]% for test files [116]
 o runtests: allow creating files without newlines [72]
 o runtests: allow generating a binary sequence from hex
 o runtests: clear pid variables when failing to start a server [12]
 o runtests: make cleardir() erase dot files too [8]
 o runtests: provide curl's version string as %VERSION for tests [127]
 o schannel: fix memory leak when using get_cert_location [15]
 o schannel: return CURLE_PEER_FAILED_VERIFICATION for untrusted root [128]
 o scripts: improve the "get latest curl release tag" logic
 o sectransp: make it build with --disable-proxy [123]
 o select.h: make socket validation macros test for INVALID_SOCKET [24]
 o select: align poll emulation to return all relevant events [63]
 o select: fix poll-based check not detecting connect failure
 o select: reduce duplication of Curl_poll in Curl_socket_check [23]
 o select: simplify return code handling for poll and select [49]
 o setopt: if the buffer exists, refuse the new BUFFERSIZE [5]
 o setopt: return CURLE_BAD_FUNCTION_ARGUMENT on bad argument [91]
 o socketpair: allow CURL_DISABLE_SOCKETPAIR [11]
 o sockfilt: handle FD_CLOSE winsock event on write socket [30]
 o src: spell whitespace without whitespace [121]
 o SSLCERTS: fix English syntax [34]
 o strerror: honor Unicode API choice on Windows [109]
 o symbian: drop support [118]
 o telnet.c: depend on static requirement of WinSock version 2 [61]
 o test1541: remove since it is a known bug [68]
 o test163[12]: require http to be built-in to run [94]
 o test434: test -K use in a single line without newline [59]
 o test971: show test mismatches "inline"
 o tests/data: Fix some mismatched XML tags in test cases
 o tests/FILEFORMAT: document nonewline support for <file>
 o tests/FILEFORMAT: document type=shell for <command>
 o tests/server/util.c: fix support for Windows Unicode builds [131]
 o tests: remove pipelining tests [69]
 o tls: fix SRP detection by using the proper #ifdefs [33]
 o tls: provide the CApath verbose log on its own line [1]
 o tool_setopt: escape binary data to hex, not octal
 o tool_writeout: add new writeout variable, %{num_headers} [97]
 o travis: add a build using libressl (from git master) [55]
 o url: use blank credentials when using proxy w/o username and password [54]
 o urlapi: use more Curl_safefree [89]
 o vtls: deduplicate client certificates in ssl_config_data [98]
 o win32: drop support for WinSock version 1, require version 2 [62]
 o winbuild: convert the instruction text to README.md [19]