Updated: curl/libcurl-doc/-devel/4, mingw64-x86_64-curl 8.8

2024-05-25 Thread Cygwin curl Maintainer
Multi-protocol file transfer tool

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

The following packages have been upgraded in the Cygwin distribution:

* curl  8.8
* libcurl-doc   8.8
* libcurl-devel 8.8
* libcurl4  8.8
* mingw64-x86_64-curl   8.8

This Cygwin release includes additional documentation including the
ebook Everything Curl in ePub and PDF formats, curl.txt, and MarkDown
documents.

For information on security vulnerabilities and fixes see:

https://curl.se/docs/security.html

As there are many functions and changes each release see below
or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.8.0  2024-05-22

Public curl releases:257
Command line options:259
curl_easy_setopt() options:  305
Public functions in libcurl:  94
Contributors:   3173

This release includes the following changes:

- curl_version_info: provide librtmp version
- file: add support for directory listings
- idn: add native AppleIDN (icucore) support for macOS/iOS
- lib: add curl_multi_waitfds
- mbedTLS: implement CURLOPT_SSL_CIPHER_LIST option
- NTLM_WB: drop support
- TLS: add support for ECH (Encrypted Client Hello)
- urlapi: add CURLU_GET_EMPTY for empty queries and fragments

Planned upcoming removals include:

- support for space-separated NOPROXY patterns

  See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

- see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

- appveyor: drop unnecessary `--clean-first` cmake option
- appveyor: guard against crash-build with VS2008
- appveyor: make gcc 6 mingw64 job build-only
- asyn-thread: fix curl_global_cleanup crash in Windows
- asyn-thread: fix Curl_thread_create result check
- autotools: delete unused functions
- autotools: fix `HAVE_IOCTLSOCKET_FIONBIO` test for gcc 14
- autotools: only probe for SGI MIPS compilers on IRIX
- bearssl: fix compiler warnings
- bearssl: use common code for cipher suite lookup
- bufq: remove duplicate word in comment
- BUG-BOUNTY.md: clarify the third party situation
- build: prefer `USE_IPV6` macro internally (was: `ENABLE_IPV6`)
- build: remove MacOSX-Framework script
- cd2nroff/manage: use UTC when SOURCE_DATE_EPOCH is set
- cf-https-connect: use timeouts as unsigned ints
- cf-socket: don't try getting local IP without socket
- cf-socket: remove references to l_ip, l_port
- ci: add curl-for-win builds: Linux MUSL, macOS, Windows
- cmake: add `BUILD_EXAMPLES` option to build examples
- cmake: add librtmp/rtmpdump option and detection
- cmake: check fseeko after detecting HAVE_FILE_OFFSET_BITS
- cmake: do not pass linker flags to the static library tool
- cmake: enable `-pedantic-errors` for clang when `CURL_WERROR=ON`
- cmake: FindNGHTTP2 add static lib name to find_library call
- cmake: fix `CURL_WERROR=ON` for old CMake and use it in GHA/linux-old
- cmake: fix `HAVE_IOCTLSOCKET_FIONBIO` test with gcc 14
- cmake: fixup `DEPENDS` filename
- cmake: forward `USE_LIBRTMP` option to C
- cmake: generate misc manpages and install `mk-ca-bundle.pl`
- cmake: initialize `BUILD_TESTING` before first use
- cmake: speed up libcurl doc building again
- cmake: tidy-up to use `WORKING_DIRECTORY`
- cmake: use namespaced custom target names
- cmdline-docs: fix make install with configure --disable-docs
- configure: error on missing perl if docs or manual is enabled
- configure: make --disable-docs imply --disable-manual
- content_encoding: brotli and others, pass through 0-length writes
- content_encoding: ignore duplicate chunked encoding
- content_encoding: reject transfer-encoding after chunked
- contrithanks: honor `CURLWWW` variable
- curl-confopts.m4: define CARES_NO_DEPRECATED when c-ares is used
- curl.h: change CURL_SSLVERSION_* from enum to defines
- curl: make --help adapt to the terminal width
- curl: use curl_getenv instead of the curlx_ version
- Curl_creader_read: init two variables to avoid using them uninited
- curl_easy_pause.md: use correct defines in example
- curl_getdate.md: document two-digit year handling
- curl_global_trace.md: shorten the description
- curl_multibyte: remove access() function wrapper for Windows
- curl_path: make Curl_get_pathname use dynbuf
- curl_setup.h: add support for IAR compiler
- curl_setup.h: detect 'inline' support
- curl_sha512_256: do not use 

Updated: curl/libcurl-doc/-devel/4, mingw64-x86_64-curl 8.7.1

2024-03-30 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  8.7.1
* libcurl-doc   8.7.1
* libcurl-devel 8.7.1
* libcurl4  8.7.1
* mingw64-x86_64-curl   8.7.1

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

For information on security vulnerabilities and fixes see:

https://curl.se/docs/security.html

As there are multiple components and many changes each release see below
or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.7.1  2024-03-27

Public curl releases:255
Command line options:258
curl_easy_setopt() options:  304
Public functions in libcurl:  93
Contributors:   3134

This release includes the following changes:

- configure: add --disable-docs flag
- CURLINFO_USED_PROXY: return bool whether the proxy was used
- digest: support SHA-512/256
- DoH: add trace configuration
- write-out: add '%{proxy_used}'

Planned upcoming removals include:

- support for space-separated NOPROXY patterns

  See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

- see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

- ALTSVC.md: correct a typo
- asyn-ares: fix data race warning
- asyn-thread: use wakeup_close to close the read descriptor
- badwords: use hostname, not host name
- BINDINGS: add mcurl, the python binding
- bufq: writing into a softlimit queue cannot be partial
- c-hyper: add header collection writer in hyper builds
- cd2nroff: gen: make `\>` in input to render as plain '>' in output
- cd2nroff: remove backticks from titles
- checksrc.pl: fix handling .checksrc with CRLF
- cmake: add USE_OPENSSL_QUIC support
- cmake: add warning for using TLS libraries without 1.3 support
- cmake: enable `ENABLE_CURL_MANUAL` by default
- cmake: fix `CURL_WINDOWS_SSPI=ON` with Schannel disabled
- cmake: fix function description in comment
- cmake: fix install for older CMake versions
- cmake: fix libcurl.pc and curl-config library specifications
- cmdline-docs/Makefile: avoid using a fixed temp file name
- cmdline-docs: quote and angle bracket cleanup
- cmdline-opts/_EXITCODES: sync with libcurl-errors
- cmdline-opts/_VARIABLES.md: improve the description
- cmdline-opts/_VERSION: provide %VERSION correctly
- cmdline-opts: shorter help texts
- configure: add pkg-config support to rustls detection
- configure: add warning for using TLS libraries without 1.3 support
- configure: build & install shell completions when enabled
- configure: do not link with nghttp3 unless necessary
- configure: Don't build shell completions when disabled
- configure: Don't make shell completions without perl
- configure: find libpsl with pkg-config
- connect.c: fix typo
- CONTRIBUTE: update the section on documentation format
- cookie.md: provide an example sending a fixed cookie
- cookie: if psl fails, reject the cookie
- curl: exit on config file parser errors
- curl: make --libcurl output better CURLOPT_*SSLVERSION
- curl: when allocating variables, add the name into the struct
- curl_setup.h: add curl_uint64_t internal type
- curldown: fix email address in Copyright
- CURLMOPT_MAX*: mention what happens if changed mid-transfer
- CURLOPT_INTERFACE.md: remove spurious amp, add see-also
- CURLOPT_POSTQUOTE.md: fix typo
- CURLOPT_SSL_CTX_FUNCTION.md: no promises of lifetime after return
- CURLOPT_WRITEFUNCTION.md: typo fix
- digest: add check for hashing error
- dist: make sure the http tests are in the tarball
- DISTROS: add document with distro pointers
- docs/libcurl: add TLS backend info for all TLS options
- docs/libcurl: generate PROTOCOLS from meta-data
- docs: add missing slashes to SChannel client certificate documentation
- docs: add necessary setup for nghttp3
- docs: ascii version of manpage without nroff
- docs: dist curl*.1 and install without perl
- docs: make curldown do angle brackets like markdown
- docs: make each libcurl man specify protocol(s)
- docs: make sure curl.1 is included in dist tarballs
- docs: update minimal binary size in INSTALL.md
- docs: use present tense
- examples: use present tense in comments
- file: use xfer buf for file:// transfers
- fopen: fix narrowing conversion warning on 32-bit Android
- form-string.md: correct the example
- ftp: do lineend conversions in client writer
- ftp: fix socket wait 

Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.6

2024-02-04 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  8.6
* libcurl-doc   8.6
* libcurl-devel 8.6
* libcurl4  8.6
* mingw64-x86_64-curl   8.6

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

For information on security vulnerabilities and fixes see:

https://curl.se/docs/security.html

As there are multiple components and many changes each release see below
or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.6.0  2024-01-31

Public curl releases:254
Command line options:258
curl_easy_setopt() options:  304
Public functions in libcurl:  93
Contributors:   3078

This release includes the following known bugs:

- see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

Planned upcoming removals include:

- support for space-separated NOPROXY patterns

  See https://curl.se/dev/deprecate.html for details

This release includes the following changes:

- add CURLE_TOO_LARGE [48]
- add CURLINFO_QUEUE_TIME_T [76]
- add CURLOPT_SERVER_RESPONSE_TIMEOUT_MS: add [39]
- asyn-thread: use GetAddrInfoExW on >= Windows 8 [55]
- configure: make libpsl detection failure cause error [109]
- docs/cmdline: change to .md for cmdline docs [77]
- docs: introduce "curldown" for libcurl man page format [102]
- runtests: support -gl. Like -g but for lldb. [47]

This release includes the following bugfixes:

- altsvc: free 'as' when returning error [23]
- appveyor: replace PowerShell with bash + parallel autotools [54]
- appveyor: switch to out-of-tree builds [29]
- asyn-ares: with modern c-ares, use its default timeout [127]
- build: delete unused `HAVE_{GSSHEIMDAL,GSSMIT,HEIMDAL}` [4]
- build: delete/replace clang warning pragmas [111]
- build: enable missing OpenSSF-recommended warnings, with fixes [11]
- build: fix `-Wconversion`/`-Wsign-conversion` warnings [26]
- build: fix Windows ADDRESS_FAMILY detection [35]
- build: more `-Wformat` fixes [40]
- build: remove redundant `CURL_PULL_*` settings [8]
- cf-h1-proxy: no CURLOPT_USERAGENT in CONNECT with hyper [133]
- cf-socket: show errno in tcpkeepalive error messages [120]
- CI/distcheck: run full tests [31]
- cmake: add option to disable building docs
- cmake: fix generation for system name iOS [53]
- cmake: fix typo [5]
- cmake: freshen up docs/INSTALL.cmake [101]
- cmake: prefill/cache `HAVE_STRUCT_SOCKADDR_STORAGE` [45]
- cmake: rework options to enable curl and libcurl docs [161]
- cmake: when USE_MANUAL=YES, build the curl.1 man page [113]
- cmdline-opts/write-out.d: remove spurious double quotes
- cmdline-opts: update availability for the *-ca-native options [66]
- cmdline/gen: fix the sorting of the man page options [33]
- configure: add libngtcp2_crypto_boringssl detection [155]
- configure: fix no default int compile error in ipv6 detection [69]
- configure: when enabling QUIC, check that TLS supports QUIC [87]
- connect: remove margin from eyeballer alloc [79]
- content_encoding: change return code to typedef'ed enum [94]
- cookie.d: document use of empty string to enable cookie engine [106]
- cookie: avoid fopen with empty file name [24]
- curl.h: CURLOPT_DNS_SERVERS is only available with c-ares [131]
- curl: show ipfs and ipns as supported "protocols" [15]
- curl_easy_getinfo.3: remove the wrong time value count [116]
- curl_multi_fdset.3: remove mention of null pointer support [134]
- CURLINFO_REFERER.3: clarify that it is the *request* header [70]
- CURLOPT_AUTOREFERER.3: mention CURLINFO_REFERER
- CURLOPT_POSTFIELDS.3: fix incorrect C string escape in example [27]
- CURLOPT_SSH_*_KEYFILE: clarify [57]
- dist: add tests/errorcodes.pl to the tarball [6]
- docs: clean up Protocols: for cmdline options [32]
- docs: describe and highlight super cookies [80]
- docs: do not start lines/sentences with So, But nor And [140]
- docs: install curl.1 with cmake [166]
- docs: mention env vars not used by schannel [124]
- doh: remove unused local variable [34]
- examples: add four new examples [99]
- file+ftp: use stack buffers instead of data->state.buffer [138]
- ftp: handle the PORT parsing without allocation [44]
- ftp: use dynbuf to store entrypath [83]
- ftp: use memdup0 to store the OS from a SYST 215 response [82]
- ftpserver.pl: send 213 SIZE response without spurious newline
- gen.pl: support ## for doing .IP in table-like lists [105]
- gen: do 

Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.5

2023-12-10 Thread Cygwin curl Maintainer via Cygwin-announce
The following packages have been upgraded in the Cygwin distribution:

* curl  8.5
* libcurl-doc   8.5
* libcurl-devel 8.5
* libcurl4  8.5
* mingw64-x86_64-curl   8.5

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

For information on security vulnerabilities and fixes see:

https://curl.se/docs/security.html

As there are multiple components and many changes each release see below
or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.5.0  2023-12-06

Public curl releases:253
Command line options:258
curl_easy_setopt() options:  303
Public functions in libcurl:  93
Contributors:   3039

This release includes the following known bugs:

- see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

Planned upcoming removals include:

- support for space-separated NOPROXY patterns

  See https://curl.se/dev/deprecate.html for details

This release includes the following changes:

- gnutls: support CURLSSLOPT_NATIVE_CA
- HTTP3: ngtcp2 builds are no longer experimental

This release includes the following bugfixes:

- appveyor: make VS2008-built curl tool runnable
- asyn-thread: use pipe instead of socketpair for IPC when available
- autotools: accept linker flags via `CURL_LDFLAGS_{LIB,BIN}`
- autotools: avoid passing `LDFLAGS` twice to libcurl
- autotools: delete LCC compiler support bits
- autotools: fix/improve gcc and Apple clang version detection
- autotools: stop setting `-std=gnu89` with `--enable-warnings`
- autotools: update references to deleted `crypt-auth` option
- BINDINGS: add V binding
- build: add `src/.checksrc` to source tarball
- build: add more picky warnings and fix them
- build: always revert `#pragma GCC diagnostic` after use
- build: delete `HAVE_STDINT_H` and `HAVE_INTTYPES_H`
- build: delete support bits for obsolete Windows compilers
- build: fix 'threadsafe' feature detection for older gcc
- build: fix builds that disable protocols but not digest auth
- build: fix compiler warning with auths disabled
- build: fix libssh2 + `CURL_DISABLE_DIGEST_AUTH` + `CURL_DISABLE_AWS`
- build: picky warning updates
- build: require Windows XP or newer
- cfilter: provide call to tell connection to forget a socket
- checksrc.pl: support #line instructions
- CI: add autotools, out-of-tree, debug build to distro check job
- CI: ignore test 286 on Appveyor gcc 9 build
- cmake: add `CURL_DISABLE_BINDLOCAL` option
- cmake: add test for `DISABLE` options, add `CURL_DISABLE_HEADERS_API`
- cmake: dedupe Windows system libs
- cmake: fix `HAVE_H_ERRNO_ASSIGNABLE` detection
- cmake: fix CURL_DISABLE_GETOPTIONS
- cmake: fix multiple include of CURL package
- cmake: fix OpenSSL quic detection in quiche builds
- cmake: option to disable install & drop `curlu` target when unused
- cmake: pre-fill rest of detection values for Windows
- cmake: replace `check_library_exists_concat()`
- cmake: speed up threads setup for Windows
- cmake: speed up zstd detection
- config-win32: set `HAVE_SNPRINTF` for mingw-w64
- configure: better --disable-http
- configure: check for the fseeko declaration too
- conncache: use the closure handle when disconnecting surplus connections
- content_encoding: make Curl_all_content_encodings allocless
- cookie: lowercase the domain names before PSL checks
- curl.h: delete Symbian OS references
- curl.h: on FreeBSD include sys/param.h instead of osreldate.h
- curl.rc: switch out the copyright symbol for plain ASCII
- curl: improved IPFS and IPNS URL support
- curl_easy_duphandle.3: clarify how HSTS and alt-svc are duped
- Curl_http_body: cleanup properly when Curl_getformdata errors
- curl_setup: disallow Windows IPv6 builds missing getaddrinfo
- curl_sspi: support more revocation error names in error messages
- CURLINFO_PRETRANSFER_TIME_T.3: fix time explanation
- CURLMOPT_MAX_CONCURRENT_STREAMS: make sure the set value is within range
- CURLOPT_CAINFO_BLOB.3: explain what CURL_BLOB_COPY does
- CURLOPT_WRITEFUNCTION.3: clarify libcurl returns for CURL_WRITEFUNC_ERROR
- CURPOST_POSTFIELDS.3: add CURLOPT_COPYPOSTFIELDS in SEE ALSO
- docs/example/keepalive.c: show TCP keep-alive options
- docs/example/localport.c: show off CURLOPT_LOCALPORT
- docs/examples/interface.c: show CURLOPT_INTERFACE use
- docs/libcurl: fix three minor man page format mistakes
- docs/libcurl: SYNSOPSIS cleanup
- docs: add supported 

Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.4

2023-10-11 Thread Cygwin curl Maintainer via Cygwin-announce
NOTE:

Immediate upgrade recommended as this release fixes a high
severity SOCKS5 heap buffer overflow vulnerability

https://curl.se/docs/CVE-2023-38545.html

The following packages have been upgraded in the Cygwin distribution:

* curl  8.4
* libcurl4  8.4
* libcurl-devel 8.4
* libcurl-doc   8.4
* mingw64-x86_64-curl   8.4

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release see below
or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.42023-10-11

Public curl releases:252
Command line options:258
curl_easy_setopt() options:  303
Public functions in libcurl:  93
Contributors:   2995


This release includes the following known bugs:

- see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

Planned upcoming removals include:

- support for space-separated NOPROXY patterns

 See https://curl.se/dev/deprecate.html for details

This release includes the following changes:

- curl: add support for the IPFS protocols via HTTP gateway
- curl_multi_get_handles: get easy handles from a multi handle
- mingw: delete support for legacy mingw.org toolchain

This release includes the following bugfixes:

- acinclude.m4: Document proper system truststore on FreeBSD
- appveyor: fix yamlint issues, indent
- appveyor: rewrite batch in PowerShell + CI improvements
- autotools: adjust `CURL_CA_PATH` value to CMake
- autotools: restore `HAVE_IOCTL_*` detections
- base64: also build for curl
- bufq: remove Curl_bufq_skip_and_shift (unused)
- build: delete checks for C89 standard headers
- build: do not publish `HAVE_BORINGSSL`, `HAVE_AWSLC` macros
- cf-socket: simulate slow/blocked receives in debug
- cmake, configure: also link with CoreServices
- cmake: add check for suseconds_t
- cmake: add feature checks for `memrchr` and `getifaddrs`
- cmake: add missing checks
- cmake: delete old `HAVE_LDAP_URL_PARSE` logic
- cmake: detect `HAVE_CLOCK_GETTIME_MONOTONIC_RAW`
- cmake: detect `HAVE_GETADDRINFO_THREADSAFE`
- cmake: detect `sys/wait.h` and `netinet/udp.h`
- cmake: detect TLS-SRP in OpenSSL/wolfSSL/GnuTLS
- cmake: disable unity mode with Windows Unicode + TrackMemory
- cmake: fix `HAVE_LDAP_SSL`, `HAVE_LDAP_URL_PARSE` on non-Windows
- cmake: fix `HAVE_WRITABLE_ARGV` detection
- cmake: fix duplicate symbols when linking tests
- cmake: fix missing `zlib.h` when compiling `libcurltool`
- cmake: fix stderr initialization in unity builds
- cmake: fix the help text to the static build option in CMakeLists.txt
- cmake: fix unity builds for more build combinations
- cmake: fix unity symbol collisions in h2 builds
- cmake: fix unity with Windows Unicode + TrackMemory
- cmake: improve OpenLDAP builds
- cmake: lib `CURL_STATICLIB` fixes (Windows)
- cmake: move global headers to specific checks
- cmake: pre-cache `HAVE_BASENAME` for mingw-w64 and MSVC
- cmake: pre-cache `HAVE_POLL_FINE` on Windows
- cmake: tidy-up `NOT_NEED_LBER_H` detection
- cmake: validate `CURL_DEFAULT_SSL_BACKEND` config value
- configure: check for the capath by default
- configure: remove unused checks
- configure: replace adhoc domain with `localhost` in tests
- configure: sort AC_CHECK_FUNCS
- connect: expire the timeout when trying next
- connect: only start the happy eyeballs timer when needed
- cookie: do not store the expire or max-age strings
- cookie: remove unnecessary struct fields
- cookie: set ->running in cookie_init even if data is NULL
- create-dirs.d: clarify it also uses --output-dirs
- curl.h: mark CURLSSLBACKEND_NSS as deprecated since 8.3.0
- curl_easy_pause.3: mention h2/h3 buffering
- curl_easy_pause.3: mention it works within callbacks
- curl_easy_pause: set "in callback" true on exit if true
- CURLOPT_DEBUGFUNCTION.3: warn about internal handles
- docs/libcurl/opts/Makefile.inc: add missing manpage files
- docs: adapt SEE ALSO sections to new requirements
- docs: explain how PINNEDPUBLICKEY is independent of VERIFYPEER
- docs: replace made up domains with example.com
- docs: update curl man page references
- docs: use CURLSSLBACKEND_NONE
- doh: inherit DEBUGFUNCTION/DATA
- escape: replace Curl_isunreserved with ISUNRESERVED
- FAQ: How do I upgrade curl.exe in Windows?
- GHA/linux: run singleuse to detect single-use global functions
- GHA: add workflow to compare 

Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.3

2023-09-17 Thread Cygwin curl Maintainer via Cygwin-announce
The following packages have been upgraded in the Cygwin distribution:

* curl  8.3
* libcurl4  8.3
* libcurl-devel 8.3
* libcurl-doc   8.3
* mingw64-x86_64-curl   8.3

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.3.0  2023-09-13

Public curl releases:251
Command line options:257
curl_easy_setopt() options:  303
Public functions in libcurl:  92
Contributors:   2977

Planned upcoming removals include:

- support for space-separated NOPROXY patterns
- support for the original legacy mingw version 1

  See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

- see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following changes:

- curl: make %output{} in -w specify a file to write to
- gskit: remove
- lib: --disable-bindlocal builds curl without local binding support
- nss: remove support for this TLS library
- tool: add "variable" support
- trace: make tracing available in non-debug builds
- url: change default value for CURLOPT_MAXREDIRS to 30
- urlapi: CURLU_PUNY2IDN - convert from punycode to IDN name
- wolfssl: support loading system CA certificates

This release includes the following bugfixes:

- altsvc: accept and parse IPv6 addresses in response headers
- asyn-ares: reduce timeout to 2000ms
- aws-sigv4: canonicalize the query
- aws-sigv4: fix having date header twice in some cases
- aws-sigv4: handle no-value user header entries
- bearssl: don't load CA certs when peer verification is disabled
- bearssl: handshake fix, provide proper get_select_socks() implementation
- build: fix portability of mancheck and checksrc targets
- build: streamline non-UWP wincrypt detections
- c-hyper: adjust the hyper to curlcode conversion
- c-hyper: fix memory leaks in `Curl_http`
- cf-haproxy: make CURLOPT_HAPROXY_CLIENT_IP set the *source* IP
- cf-socket: log successful interface bind
- CI/cirrus: disable python install on FreeBSD
- CI: add a 32-bit i686 Linux build
- CI: add caching to many jobs
- CI: move on to ngtcp2 v0.19.1
- CI: move the Alpine build from Cirrus to GHA
- CI: ngtcp2-linux: use separate caches for tls libraries
- CI: remove Windows builds from Cirrus, without replacement
- CI: switch macOS ARM build from Cirrus to Circle CI
- CI: use master again for wolfssl
- cirrus: install everthing with pkg, avoid pip
- cmake: add GnuTLS option
- cmake: add support for `CURL_DEFAULT_SSL_BACKEND`
- cmake: add support for single libcurl compilation pass
- cmake: allow `SHARE_LIB_OBJECT=ON` on all platforms
- cmake: assume `wldap32` availability on Windows
- cmake: cache more config and delete unused ones
- cmake: detect `SSL_set0_wbio` in OpenSSL
- cmake: drop `HAVE_LIBWINMM` and `HAVE_LIBWS2_32` feature checks
- cmake: fix to use variable for the curl namespace
- cmake: fixup H2 duplicate symbols for unity builds
- cmake: set SIZEOF_LONG_LONG in curl_config.h
- cmake: support building static and shared libcurl in one go
- cmdline-docs: make sure to phrase it as "added in "
- cmdline-docs: use present tense, not future
- cmdline-opts/docs: mention the negative option part
- cmdline-opts/page-header: clarify stronger that !opt == URL
- cmdline-opts/page-header: reorder, clean up
- configure, cmake, lib: more form api deprecation
- configure: fix `HAVE_TIME_T_UNSIGNED` check
- configure: trust pkg-config when it's used for zlib
- configure: use the pkg-config --libs-only-l flag for libssh2
- connect: stop halving the remaining timeout when less than 600 ms left
- cookie-jar.d: emphasize that this option is ONLY writing cookies
- crypto: ensure crypto initialization works
- curl_url_get/set.3: add missing semicolon in SYNOPSIS
- CURLINFO_CERTINFO.3: better explain curl_certinfo struct
- CURLINFO_TLS_SSL_PTR.3: clarify a recommendation
- CURLOPT_*TIMEOUT*: extend and clarify
- CURLOPT_SSL_VERIFYPEER.3: mention it does not load CA certs when disabled
- CURLOPT_URL.3: add two URL API calls in the see-also section
- CURLOPT_URL.3: explain curl_url_set() uses the same parser
- digest: Use hostname to generate spn instead of realm
- disable.d: explain --disable not implemented prior to 7.50.0
- docs/cmdline-opts/gen.pl: hide 

[ANNOUNCEMENT] Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.3

2023-09-17 Thread Cygwin curl Maintainer via Cygwin-announce via Cygwin
The following packages have been upgraded in the Cygwin distribution:

* curl  8.3
* libcurl4  8.3
* libcurl-devel 8.3
* libcurl-doc   8.3
* mingw64-x86_64-curl   8.3

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.3.0  2023-09-13

Public curl releases:251
Command line options:257
curl_easy_setopt() options:  303
Public functions in libcurl:  92
Contributors:   2977

Planned upcoming removals include:

- support for space-separated NOPROXY patterns
- support for the original legacy mingw version 1

  See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

- see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following changes:

- curl: make %output{} in -w specify a file to write to
- gskit: remove
- lib: --disable-bindlocal builds curl without local binding support
- nss: remove support for this TLS library
- tool: add "variable" support
- trace: make tracing available in non-debug builds
- url: change default value for CURLOPT_MAXREDIRS to 30
- urlapi: CURLU_PUNY2IDN - convert from punycode to IDN name
- wolfssl: support loading system CA certificates

This release includes the following bugfixes:

- altsvc: accept and parse IPv6 addresses in response headers
- asyn-ares: reduce timeout to 2000ms
- aws-sigv4: canonicalize the query
- aws-sigv4: fix having date header twice in some cases
- aws-sigv4: handle no-value user header entries
- bearssl: don't load CA certs when peer verification is disabled
- bearssl: handshake fix, provide proper get_select_socks() implementation
- build: fix portability of mancheck and checksrc targets
- build: streamline non-UWP wincrypt detections
- c-hyper: adjust the hyper to curlcode conversion
- c-hyper: fix memory leaks in `Curl_http`
- cf-haproxy: make CURLOPT_HAPROXY_CLIENT_IP set the *source* IP
- cf-socket: log successful interface bind
- CI/cirrus: disable python install on FreeBSD
- CI: add a 32-bit i686 Linux build
- CI: add caching to many jobs
- CI: move on to ngtcp2 v0.19.1
- CI: move the Alpine build from Cirrus to GHA
- CI: ngtcp2-linux: use separate caches for tls libraries
- CI: remove Windows builds from Cirrus, without replacement
- CI: switch macOS ARM build from Cirrus to Circle CI
- CI: use master again for wolfssl
- cirrus: install everthing with pkg, avoid pip
- cmake: add GnuTLS option
- cmake: add support for `CURL_DEFAULT_SSL_BACKEND`
- cmake: add support for single libcurl compilation pass
- cmake: allow `SHARE_LIB_OBJECT=ON` on all platforms
- cmake: assume `wldap32` availability on Windows
- cmake: cache more config and delete unused ones
- cmake: detect `SSL_set0_wbio` in OpenSSL
- cmake: drop `HAVE_LIBWINMM` and `HAVE_LIBWS2_32` feature checks
- cmake: fix to use variable for the curl namespace
- cmake: fixup H2 duplicate symbols for unity builds
- cmake: set SIZEOF_LONG_LONG in curl_config.h
- cmake: support building static and shared libcurl in one go
- cmdline-docs: make sure to phrase it as "added in "
- cmdline-docs: use present tense, not future
- cmdline-opts/docs: mention the negative option part
- cmdline-opts/page-header: clarify stronger that !opt == URL
- cmdline-opts/page-header: reorder, clean up
- configure, cmake, lib: more form api deprecation
- configure: fix `HAVE_TIME_T_UNSIGNED` check
- configure: trust pkg-config when it's used for zlib
- configure: use the pkg-config --libs-only-l flag for libssh2
- connect: stop halving the remaining timeout when less than 600 ms left
- cookie-jar.d: emphasize that this option is ONLY writing cookies
- crypto: ensure crypto initialization works
- curl_url_get/set.3: add missing semicolon in SYNOPSIS
- CURLINFO_CERTINFO.3: better explain curl_certinfo struct
- CURLINFO_TLS_SSL_PTR.3: clarify a recommendation
- CURLOPT_*TIMEOUT*: extend and clarify
- CURLOPT_SSL_VERIFYPEER.3: mention it does not load CA certs when disabled
- CURLOPT_URL.3: add two URL API calls in the see-also section
- CURLOPT_URL.3: explain curl_url_set() uses the same parser
- digest: Use hostname to generate spn instead of realm
- disable.d: explain --disable not implemented prior to 7.50.0
- docs/cmdline-opts/gen.pl: hide 

[ANNOUNCEMENT] Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.2.1

2023-07-30 Thread Cygwin curl Maintainer via Cygwin-announce via Cygwin
The following packages have been upgraded in the Cygwin distribution:

* curl  8.2.1
* libcurl4  8.2.1
* libcurl-devel 8.2.1
* libcurl-doc   8.2.1
* mingw64-x86_64-curl   8.2.1

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.2.1  2023-07-26

Public curl releases:221
Command line options:255
curl_easy_setopt() options:  303
Public functions in libcurl:  91
Contributors:   2927

Planned upcoming removals include:

- gskit
- NSS
- support for space-separated NOPROXY patterns
- support for the original legacy mingw version 1

  See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

- see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

- amigaos: fix sys/mbuf.h m_len macro clash
- amissl: add missing signal.h include
- amissl: fix AmiSSL v5 detection
- cfilters: rename close/connect functions to avoid clashes
- ciphers.d: put URL in first column
- cmake: add `libcurlu`/`libcurltool` for unit tests
- cmake: update ngtcp2 detection
- configure: check for nghttp2_session_get_stream_local_window_size
- CONTRIBUTE: drop mention of copyright year ranges
- CONTRIBUTE: fix syntax in commit message description
- curl_multi_wait.3: fix arg quoting to doc macro .BR
- docs: mark two TLS options for TLS, not SSL
- docs: provide more see also for cipher options
- hostip: return IPv6 first for localhost resolves
- http2: fix regression on upload EOF handling
- http: VLH, very large header test and fixes
- libcurl-errors.3: add CURLUE_OK
- os400: correct EXPECTED_STRING_LASTZEROTERMINATED
- quiche: fix lookup of transfer at multi
- quiche: fix segfault and other things
- rustls: update rustls-ffi 0.10.0
- socks: print ipv6 address within brackets
- src/mkhelp: strip off escape sequences
- tool: fix tool_seek_cb build when SIZEOF_CURL_OFF_T > SIZEOF_OFF_T
- transfer: do not clear the credentials on redirect to absolute URL
- unittest: remove unneeded *_LDADD
- websocket: rename arguments/variables to match docs


-- 
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.2.1

2023-07-30 Thread Cygwin curl Maintainer via Cygwin-announce
The following packages have been upgraded in the Cygwin distribution:

* curl  8.2.1
* libcurl4  8.2.1
* libcurl-devel 8.2.1
* libcurl-doc   8.2.1
* mingw64-x86_64-curl   8.2.1

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.2.1  2023-07-26

Public curl releases:221
Command line options:255
curl_easy_setopt() options:  303
Public functions in libcurl:  91
Contributors:   2927

Planned upcoming removals include:

- gskit
- NSS
- support for space-separated NOPROXY patterns
- support for the original legacy mingw version 1

  See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

- see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

- amigaos: fix sys/mbuf.h m_len macro clash
- amissl: add missing signal.h include
- amissl: fix AmiSSL v5 detection
- cfilters: rename close/connect functions to avoid clashes
- ciphers.d: put URL in first column
- cmake: add `libcurlu`/`libcurltool` for unit tests
- cmake: update ngtcp2 detection
- configure: check for nghttp2_session_get_stream_local_window_size
- CONTRIBUTE: drop mention of copyright year ranges
- CONTRIBUTE: fix syntax in commit message description
- curl_multi_wait.3: fix arg quoting to doc macro .BR
- docs: mark two TLS options for TLS, not SSL
- docs: provide more see also for cipher options
- hostip: return IPv6 first for localhost resolves
- http2: fix regression on upload EOF handling
- http: VLH, very large header test and fixes
- libcurl-errors.3: add CURLUE_OK
- os400: correct EXPECTED_STRING_LASTZEROTERMINATED
- quiche: fix lookup of transfer at multi
- quiche: fix segfault and other things
- rustls: update rustls-ffi 0.10.0
- socks: print ipv6 address within brackets
- src/mkhelp: strip off escape sequences
- tool: fix tool_seek_cb build when SIZEOF_CURL_OFF_T > SIZEOF_OFF_T
- transfer: do not clear the credentials on redirect to absolute URL
- unittest: remove unneeded *_LDADD
- websocket: rename arguments/variables to match docs



Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.2

2023-07-22 Thread Cygwin curl Maintainer via Cygwin-announce
The following packages have been upgraded in the Cygwin distribution:

* curl  8.2
* libcurl4  8.2
* libcurl-devel 8.2
* libcurl-doc   8.2
* mingw64-x86_64-curl   8.2

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.22023-07-19

Public curl releases:220
Command line options:255
curl_easy_setopt() options:  303
Public functions in libcurl:  91
Contributors:   2922

Planned upcoming removals include:

* gskit
* NSS
* support for space-separated NOPROXY patterns
* support for the original legacy mingw version 1

  See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following changes:

* curl: add --ca-native and --proxy-ca-native
* curl: add --trace-ids
* CURLOPT_MAIL_RCPT_ALLOWFAILS: replace CURLOPT_MAIL_RCPT_ALLLOWFAILS
* haproxy: add --haproxy-clientip flag to set client IPs
* lib: add CURLINFO_CONN_ID and CURLINFO_XFER_ID

This release includes the following bugfixes:

* bufq: make write/pass methods more robust
* build: drop unused/redundant `HAVE_WINLDAP_H`
* cf-socket: don't bypass fclosesocket callback if cancelled before connect
* cf-socket: move ctx declaration under HAVE_GETPEERNAME
* cf-socket: skip getpeername()/getsockname for TFTP
* checksrc: modernise perl file open
* checksrc: quote the file name to work with "funny" letters
* CI: brew fix for openssl in default path
* CI: don't install impacket if tests are not run
* CI: enable parallel make in more builds
* circleci: install impacket & wolfssl 5.6.0
* cmake: add support for "unity" builds
* cmake: make use of snprintf
* cmake: stop CMake from quietly ignoring missing Brotli
* configure: add check for ldap_init_fd
* configure: fix run-compiler for old /bin/sh
* configure: the --without forms of the options are also gone
* connect-timeout.d: mention that the DNS lookup is included
* curl.h: include  for vxworks
* curl: count uploaded data to stop at the originally given size
* curl: return error when asked to use an unsupported HTTP version
* curl_easy_nextheader.3: add missing open parenthesis examples
* curl_log: evaluate log statement only when transfer is verbose
* curl_mprintf.3: minor fix of the example
* curl_pushheader_byname/bynum.3: document in their own man pages
* curl_url_set: enforce the max string length check for all parts
* CURLOPT_AWS_SIGV4.3: remove unused variable from example
* CURLOPT_INFILESIZE.3: mention -1 triggers chunked
* CURLOPT_MIMEPOST.3: clarify what setting to NULL means
* CURLOPT_SSH_PRIVATE_KEYFILE.3: expand on the file search
* docs/libcurl/libcurl.3: cleanups and improvements
* docs: add more .IP after .RE to fix indentation of generate paragraphs
* docs: fix missing parameter names in examples
* docs: update CURLOPT_UPLOAD.3
* docs: update HTTP3.md for newer ngtcp2 and nghttp3
* docs: use a space after RFC when spelling out RFC numbers
* example/connect-to: show CURLOPT_CONNECT_TO
* example/crawler: also set CURLOPT_AUTOREFERER
* example/crawler: make it use a few more options
* example/default-scheme: set the default scheme for schemeless URLs
* example/hsts-preload: show one way to HSTS preload
* example/http2-download: set CURLOPT_BUFFERSIZE
* example/ipv6: feature CURLOPT_ADDRESS_SCOPE in use
* example/maxconnects: set maxconnect example
* example/opensslthreadlock: remove
* examples/ftpuploadresume.c: add use of CURLOPT_ACCEPTTIMEOUT_MS
* examples/http-options: show how to send "OPTIONS *"
* examples/https.c: use CURLOPT_CA_CACHE_TIMEOUT
* examples/multi-debugcallback.c: avoid the bool typedef
* examples/smtp-mime: use CURLOPT_MAIL_RCPT_ALLOWFAILS
* examples/unixsocket.c: example using CURLOPT_UNIX_SOCKET_PATH
* examples/websocket.c: websocket example using CONNECT_ONLY
* examples: make use of CURLOPT_(REDIR_|)PROTOCOLS_STR
* fopen: fix conversion warning on 32-bit Android
* fopen: optimize
* hostip.c: Move macOS-specific calls into global init call
* HTTP/2: upload handling fixes
* http2: better support for --limit-rate
* http2: error stream resets with code CURLE_HTTP2_STREAM
* http2: fix crash in handling stream weights
* http2: fix variable type
* 

[ANNOUNCEMENT] Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.2

2023-07-22 Thread Cygwin curl Maintainer via Cygwin-announce via Cygwin
The following packages have been upgraded in the Cygwin distribution:

* curl  8.2
* libcurl4  8.2
* libcurl-devel 8.2
* libcurl-doc   8.2
* mingw64-x86_64-curl   8.2

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.22023-07-19

Public curl releases:220
Command line options:255
curl_easy_setopt() options:  303
Public functions in libcurl:  91
Contributors:   2922

Planned upcoming removals include:

* gskit
* NSS
* support for space-separated NOPROXY patterns
* support for the original legacy mingw version 1

  See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following changes:

* curl: add --ca-native and --proxy-ca-native
* curl: add --trace-ids
* CURLOPT_MAIL_RCPT_ALLOWFAILS: replace CURLOPT_MAIL_RCPT_ALLLOWFAILS
* haproxy: add --haproxy-clientip flag to set client IPs
* lib: add CURLINFO_CONN_ID and CURLINFO_XFER_ID

This release includes the following bugfixes:

* bufq: make write/pass methods more robust
* build: drop unused/redundant `HAVE_WINLDAP_H`
* cf-socket: don't bypass fclosesocket callback if cancelled before connect
* cf-socket: move ctx declaration under HAVE_GETPEERNAME
* cf-socket: skip getpeername()/getsockname for TFTP
* checksrc: modernise perl file open
* checksrc: quote the file name to work with "funny" letters
* CI: brew fix for openssl in default path
* CI: don't install impacket if tests are not run
* CI: enable parallel make in more builds
* circleci: install impacket & wolfssl 5.6.0
* cmake: add support for "unity" builds
* cmake: make use of snprintf
* cmake: stop CMake from quietly ignoring missing Brotli
* configure: add check for ldap_init_fd
* configure: fix run-compiler for old /bin/sh
* configure: the --without forms of the options are also gone
* connect-timeout.d: mention that the DNS lookup is included
* curl.h: include  for vxworks
* curl: count uploaded data to stop at the originally given size
* curl: return error when asked to use an unsupported HTTP version
* curl_easy_nextheader.3: add missing open parenthesis examples
* curl_log: evaluate log statement only when transfer is verbose
* curl_mprintf.3: minor fix of the example
* curl_pushheader_byname/bynum.3: document in their own man pages
* curl_url_set: enforce the max string length check for all parts
* CURLOPT_AWS_SIGV4.3: remove unused variable from example
* CURLOPT_INFILESIZE.3: mention -1 triggers chunked
* CURLOPT_MIMEPOST.3: clarify what setting to NULL means
* CURLOPT_SSH_PRIVATE_KEYFILE.3: expand on the file search
* docs/libcurl/libcurl.3: cleanups and improvements
* docs: add more .IP after .RE to fix indentation of generate paragraphs
* docs: fix missing parameter names in examples
* docs: update CURLOPT_UPLOAD.3
* docs: update HTTP3.md for newer ngtcp2 and nghttp3
* docs: use a space after RFC when spelling out RFC numbers
* example/connect-to: show CURLOPT_CONNECT_TO
* example/crawler: also set CURLOPT_AUTOREFERER
* example/crawler: make it use a few more options
* example/default-scheme: set the default scheme for schemeless URLs
* example/hsts-preload: show one way to HSTS preload
* example/http2-download: set CURLOPT_BUFFERSIZE
* example/ipv6: feature CURLOPT_ADDRESS_SCOPE in use
* example/maxconnects: set maxconnect example
* example/opensslthreadlock: remove
* examples/ftpuploadresume.c: add use of CURLOPT_ACCEPTTIMEOUT_MS
* examples/http-options: show how to send "OPTIONS *"
* examples/https.c: use CURLOPT_CA_CACHE_TIMEOUT
* examples/multi-debugcallback.c: avoid the bool typedef
* examples/smtp-mime: use CURLOPT_MAIL_RCPT_ALLOWFAILS
* examples/unixsocket.c: example using CURLOPT_UNIX_SOCKET_PATH
* examples/websocket.c: websocket example using CONNECT_ONLY
* examples: make use of CURLOPT_(REDIR_|)PROTOCOLS_STR
* fopen: fix conversion warning on 32-bit Android
* fopen: optimize
* hostip.c: Move macOS-specific calls into global init call
* HTTP/2: upload handling fixes
* http2: better support for --limit-rate
* http2: error stream resets with code CURLE_HTTP2_STREAM
* http2: fix crash in handling stream weights
* http2: fix variable type
* 

Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.1.2

2023-06-04 Thread Cygwin curl Maintainer via Cygwin-announce
The following packages have been upgraded in the Cygwin distribution:

* curl  8.1.2
* libcurl4  8.1.2
* libcurl-devel 8.1.2
* libcurl-doc   8.1.2
* mingw64-x86_64-curl   8.1.2

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.1.2  2023-05-30

Public curl releases:219
Command line options:251
curl_easy_setopt() options:  302
Public functions in libcurl:  91
Contributors:   2888

Planned upcoming removals include:

* gskit
* NSS
* support for space-separated NOPROXY patterns
* support for the original legacy mingw version 1

  See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* configure: quote the assignments for run-compiler
* configure: without pkg-config and no custom path, use -lnghttp2
* curl: cache the --trace-time value for a second
* http2: fix EOF handling on uploads with auth negotiation
* http3: send EOF indicator early as possible
* lib1560: verify more scheme guessing
* lib: remove unused functions, make single-use static
* libcurl.m4: remove trailing 'dnl' that causes this to break autoconf
* libssh: when keyboard-interactive auth fails, try password
* misc: fix spelling mistakes
* page-header: mention curl version and how to figure out current release
* page-header: minor wording polish in the URL segment
* scripts/singleuse.pl: add more API calls
* urlapi: remove superfluous host name check



[ANNOUNCEMENT] Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.1.2

2023-06-04 Thread Cygwin curl Maintainer via Cygwin-announce via Cygwin
The following packages have been upgraded in the Cygwin distribution:

* curl  8.1.2
* libcurl4  8.1.2
* libcurl-devel 8.1.2
* libcurl-doc   8.1.2
* mingw64-x86_64-curl   8.1.2

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.1.2  2023-05-30

Public curl releases:219
Command line options:251
curl_easy_setopt() options:  302
Public functions in libcurl:  91
Contributors:   2888

Planned upcoming removals include:

* gskit
* NSS
* support for space-separated NOPROXY patterns
* support for the original legacy mingw version 1

  See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* configure: quote the assignments for run-compiler
* configure: without pkg-config and no custom path, use -lnghttp2
* curl: cache the --trace-time value for a second
* http2: fix EOF handling on uploads with auth negotiation
* http3: send EOF indicator early as possible
* lib1560: verify more scheme guessing
* lib: remove unused functions, make single-use static
* libcurl.m4: remove trailing 'dnl' that causes this to break autoconf
* libssh: when keyboard-interactive auth fails, try password
* misc: fix spelling mistakes
* page-header: mention curl version and how to figure out current release
* page-header: minor wording polish in the URL segment
* scripts/singleuse.pl: add more API calls
* urlapi: remove superfluous host name check


-- 
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


[ANNOUNCEMENT] Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.1.1

2023-05-27 Thread Cygwin curl Maintainer via Cygwin-announce via Cygwin
The following packages have been upgraded in the Cygwin distribution:

* curl  8.1.1
* libcurl4  8.1.1
* libcurl-devel 8.1.1
* libcurl-doc   8.1.1
* mingw64-x86_64-curl   8.1.1

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.1.1  2023-05-23

Public curl releases:218
Command line options:251
curl_easy_setopt() options:  302
Public functions in libcurl:  91
Contributors:   2875

Planned upcoming removals include:

* gskit
* NSS
* support for space-separated NOPROXY patterns
* support for the original legacy mingw version 1

  See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

 o cf-socket: completely remove the disabled USE_RECV_BEFORE_SEND_WORKAROUND 
[12]
 o checksrc: disallow spaces before labels [16]
 o cmake: avoid `list(PREPEND)` for compatibility [24]
 o cmake: repair cross compiling [10]
 o configure: fix --help alignment [9]
 o configure: generate a script to run the compiler [11]
 o curl_easy_getinfo: clarify on return data types [15]
 o docs: document that curl_url_cleanup(NULL) is a safe no-op [4]
 o hostip: move easy_lock.h include above curl_memory.h [14]
 o http2: double http request parser max line length [8]
 o http2: increase stream window size to 10 MB [22]
 o http2: upload improvements [21]
 o lib: fix conversion warnings with gcc on macOS
 o lib: rename struct 'http_req' to 'httpreq' [23]
 o ngtcp2: fix compiler warning about possible null-deref [3]
 o ngtcp2: proper handling of uint64_t when adjusting send buffer [1]
 o os400: update chkstrings.c [2]
 o runtests: handle interrupted reads from IPC pipes
 o runtests: use the correct fd after select [20]
 o sectransp.c: make the code c89 compatible [17]
 o select: avoid returning an error on EINTR from select() or poll() [5]
 o test425: fix the log directory for the upload
 o url: provide better error message when URLs fail to parse [18]
 o urlapi: allow numerical parts in the host name [7]
 o vquic.c: make recvfrom_packets static, avoid compiler warning [6]


-- 
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.1.1

2023-05-27 Thread Cygwin curl Maintainer via Cygwin-announce
The following packages have been upgraded in the Cygwin distribution:

* curl  8.1.1
* libcurl4  8.1.1
* libcurl-devel 8.1.1
* libcurl-doc   8.1.1
* mingw64-x86_64-curl   8.1.1

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.1.1  2023-05-23

Public curl releases:218
Command line options:251
curl_easy_setopt() options:  302
Public functions in libcurl:  91
Contributors:   2875

Planned upcoming removals include:

* gskit
* NSS
* support for space-separated NOPROXY patterns
* support for the original legacy mingw version 1

  See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

 o cf-socket: completely remove the disabled USE_RECV_BEFORE_SEND_WORKAROUND 
[12]
 o checksrc: disallow spaces before labels [16]
 o cmake: avoid `list(PREPEND)` for compatibility [24]
 o cmake: repair cross compiling [10]
 o configure: fix --help alignment [9]
 o configure: generate a script to run the compiler [11]
 o curl_easy_getinfo: clarify on return data types [15]
 o docs: document that curl_url_cleanup(NULL) is a safe no-op [4]
 o hostip: move easy_lock.h include above curl_memory.h [14]
 o http2: double http request parser max line length [8]
 o http2: increase stream window size to 10 MB [22]
 o http2: upload improvements [21]
 o lib: fix conversion warnings with gcc on macOS
 o lib: rename struct 'http_req' to 'httpreq' [23]
 o ngtcp2: fix compiler warning about possible null-deref [3]
 o ngtcp2: proper handling of uint64_t when adjusting send buffer [1]
 o os400: update chkstrings.c [2]
 o runtests: handle interrupted reads from IPC pipes
 o runtests: use the correct fd after select [20]
 o sectransp.c: make the code c89 compatible [17]
 o select: avoid returning an error on EINTR from select() or poll() [5]
 o test425: fix the log directory for the upload
 o url: provide better error message when URLs fail to parse [18]
 o urlapi: allow numerical parts in the host name [7]
 o vquic.c: make recvfrom_packets static, avoid compiler warning [6]



[ANNOUNCEMENT] Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.1.0

2023-05-20 Thread Cygwin curl Maintainer via Cygwin-announce via Cygwin
The following packages have been upgraded in the Cygwin distribution:

* curl  8.1.0
* libcurl4  8.1.0
* libcurl-devel 8.1.0
* libcurl-doc   8.1.0
* mingw64-x86_64-curl   8.1.0

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.1.0  2023-05-17

Public curl releases:217
Command line options:251
curl_easy_setopt() options:  302
Public functions in libcurl:  91
Contributors:   2875

Planned upcoming removals include:

* gskit
* NSS
* support for space-separated NOPROXY patterns
* support for the original legacy mingw version 1

  See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following changes:

* curl: add --proxy-http2
* CURLPROXY_HTTPS2: for HTTPS proxy that may speak HTTP/2
* hostip: refuse to resolve the .onion TLD
* tool_writeout: add URL component variables

This release includes the following bugfixes:

* amiga: Fix CA certificate paths for AmiSSL and MorphOS
* autotools: sync up clang picky warnings with cmake
* aws-sigv4.d: fix region identifier in example
* bufq: simplify since expression is always true
* cf-h1-proxy: skip an extra NULL assign
* cf-h2-proxy: fix processing ingress to stop too early
* cf-socket: add socket recv buffering for most tcp cases
* cf-socket: Disable socket receive buffer by default
* cf-socket: remove dead code discovered by PVS
* cf-socket: turn off IPV6_V6ONLY on Windows if it is supported
* checksrc: check for spaces before the colon of switch labels
* checksrc: find bad indentation in conditions without open brace
* checksrc: fix SPACEBEFOREPAREN for conditions starting with "*"
* ci: `-Wno-vla` no longer necessary
* CI: fix brew retries on GHA
* CI: Set minimal permissions on workflow ngtcp2-quictls.yml
* CI: skip Azure for commits which change only GHA
* CI: use another glob syntax for matching files on Appveyor
* cmake: bring in the network library on Haiku
* cmake: do not add zlib headers for openssl
* CMake: make config version 8 compatible with 7
* cmake: picky-linker fixes for openssl, ZLIB, H3 and more
* cmake: set SONAME for SunOS too
* cmake: speed up and extend picky clang/gcc options
* CMakeLists.txt: fix typo for Haiku detection
* compressed.d: clarify the words on "not notifying headers"
* config-dos.h: fix SIZEOF_CURL_OFF_T for MS-DOS/DJGPP
* configure: don't set HAVE_WRITABLE_ARGV on Windows
* configure: fix detection of apxs (for httpd)
* configure: make quiche require quiche_conn_send_ack_eliciting
* connect: fix https connection setup to treat ssl_mode correctly
* content_encoding: only do transfer-encoding compression if asked to
* cookie: address PVS nits
* cookie: clarify that init with data set to NULL reads no file
* curl: do NOT append file name to path for upload when there's a query
* curl_easy_getinfo.3: typo fix (duplicated "from the")
* curl_easy_unescape.3: rename the argument
* curl_path: bring back support for SFTP path ending in /~
* curl_url_set.3: mention that users can set content rather freely
* CURLOPT_IPRESOLVE.3: this for host names, not IP addresses
* data.d: emphasize no conversion
* digest: clear target buffer
* doc: curl_mime_init() strong easy binding was relaxed in 7.87.0
* docs/cmdline-opts: document the dotless config path
* docs/examples/protofeats.c: outputs all protocols and features
* docs/libcurl/curl_*escape.3: rename "url" argument to "input"/"string"
* docs/SECURITY-ADVISORY.md: how to write a curl security advisory
* docs: bump the minimum perl version to 5.6
* docs: clarify that more backends have HTTPS proxy support
* dynbuf: never allocate larger than "toobig"
* easy_cleanup: require a "good" handle to act
* ftp: fix 'portsock' variable was assigned the same value
* ftp: remove dead code
* ftplistparser: move out private data from public struct
* ftplistparser: replace realloc with dynbuf
* gen.pl: error on duplicated See-Also fields
* getpart: better handle case of file not found
* GHA-linux: add an address-sanitizer build
* GHA: add a memory-sanitizer job
* GHA: run all linux test jobs with valgrind
* GHA: suppress git clone output
* GIT-INFO: add 

Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.1.0

2023-05-20 Thread Cygwin curl Maintainer via Cygwin-announce
The following packages have been upgraded in the Cygwin distribution:

* curl  8.1.0
* libcurl4  8.1.0
* libcurl-devel 8.1.0
* libcurl-doc   8.1.0
* mingw64-x86_64-curl   8.1.0

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.1.0  2023-05-17

Public curl releases:217
Command line options:251
curl_easy_setopt() options:  302
Public functions in libcurl:  91
Contributors:   2875

Planned upcoming removals include:

* gskit
* NSS
* support for space-separated NOPROXY patterns
* support for the original legacy mingw version 1

  See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following changes:

* curl: add --proxy-http2
* CURLPROXY_HTTPS2: for HTTPS proxy that may speak HTTP/2
* hostip: refuse to resolve the .onion TLD
* tool_writeout: add URL component variables

This release includes the following bugfixes:

* amiga: Fix CA certificate paths for AmiSSL and MorphOS
* autotools: sync up clang picky warnings with cmake
* aws-sigv4.d: fix region identifier in example
* bufq: simplify since expression is always true
* cf-h1-proxy: skip an extra NULL assign
* cf-h2-proxy: fix processing ingress to stop too early
* cf-socket: add socket recv buffering for most tcp cases
* cf-socket: Disable socket receive buffer by default
* cf-socket: remove dead code discovered by PVS
* cf-socket: turn off IPV6_V6ONLY on Windows if it is supported
* checksrc: check for spaces before the colon of switch labels
* checksrc: find bad indentation in conditions without open brace
* checksrc: fix SPACEBEFOREPAREN for conditions starting with "*"
* ci: `-Wno-vla` no longer necessary
* CI: fix brew retries on GHA
* CI: Set minimal permissions on workflow ngtcp2-quictls.yml
* CI: skip Azure for commits which change only GHA
* CI: use another glob syntax for matching files on Appveyor
* cmake: bring in the network library on Haiku
* cmake: do not add zlib headers for openssl
* CMake: make config version 8 compatible with 7
* cmake: picky-linker fixes for openssl, ZLIB, H3 and more
* cmake: set SONAME for SunOS too
* cmake: speed up and extend picky clang/gcc options
* CMakeLists.txt: fix typo for Haiku detection
* compressed.d: clarify the words on "not notifying headers"
* config-dos.h: fix SIZEOF_CURL_OFF_T for MS-DOS/DJGPP
* configure: don't set HAVE_WRITABLE_ARGV on Windows
* configure: fix detection of apxs (for httpd)
* configure: make quiche require quiche_conn_send_ack_eliciting
* connect: fix https connection setup to treat ssl_mode correctly
* content_encoding: only do transfer-encoding compression if asked to
* cookie: address PVS nits
* cookie: clarify that init with data set to NULL reads no file
* curl: do NOT append file name to path for upload when there's a query
* curl_easy_getinfo.3: typo fix (duplicated "from the")
* curl_easy_unescape.3: rename the argument
* curl_path: bring back support for SFTP path ending in /~
* curl_url_set.3: mention that users can set content rather freely
* CURLOPT_IPRESOLVE.3: this for host names, not IP addresses
* data.d: emphasize no conversion
* digest: clear target buffer
* doc: curl_mime_init() strong easy binding was relaxed in 7.87.0
* docs/cmdline-opts: document the dotless config path
* docs/examples/protofeats.c: outputs all protocols and features
* docs/libcurl/curl_*escape.3: rename "url" argument to "input"/"string"
* docs/SECURITY-ADVISORY.md: how to write a curl security advisory
* docs: bump the minimum perl version to 5.6
* docs: clarify that more backends have HTTPS proxy support
* dynbuf: never allocate larger than "toobig"
* easy_cleanup: require a "good" handle to act
* ftp: fix 'portsock' variable was assigned the same value
* ftp: remove dead code
* ftplistparser: move out private data from public struct
* ftplistparser: replace realloc with dynbuf
* gen.pl: error on duplicated See-Also fields
* getpart: better handle case of file not found
* GHA-linux: add an address-sanitizer build
* GHA: add a memory-sanitizer job
* GHA: run all linux test jobs with valgrind
* GHA: suppress git clone output
* GIT-INFO: add 

[ANNOUNCEMENT] Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.0.1

2023-03-21 Thread Cygwin curl Maintainer via Cygwin-announce via Cygwin
The following packages have been upgraded in the Cygwin distribution:

* curl  8.0.1
* libcurl4  8.0.1
* libcurl-devel 8.0.1
* libcurl-doc   8.0.1
* mingw64-x86_64-curl   8.0.1

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

To celebrate curl's *25th* anniversary, the version has been
bumped to 8!
Congratulations and thanks are due to the curl developers and
contributors for their achievements, efforts, and support for
all those years.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.0.1  2023-03-20

Public curl releases:216
Command line options:250
curl_easy_setopt() options:  302
Public functions in libcurl:  91
Contributors:   2841

Planned upcoming removals include:

- gskit
- NSS
- support for space-separated NOPROXY patterns
- support for the original legacy mingw version 1

See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following changes:

* build: remove support for curl_off_t < 8 bytes

This release includes the following bugfixes:

* Revert "multi: remove PENDING + MSGSENT handles"
* .cirrus.yml: Bump to FreeBSD 13.2
* aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
* BINDINGS: add Fortran binding
* build: drop the use of XC_AMEND_DISTCLEAN
* build: fix stdint/inttypes detection with non-autotools
* cf-socket: fix handling of remote addr for accepted tcp sockets
* cf-socket: if socket is already connected, return CURLE_OK
* cf-socket: use port 80 when resolving name for local bind
* CI: don't run CI jobs if only another CI was changed
* CI: update ngtcp2 and nghttp2 for pytest
* cmake: delete unused HAVE__STRTOI64
* cmake: fix enabling LDAPS on Windows
* cmake: skip CA-path/bundle auto-detection in cross-builds
* connect: fix time_connect and time_appconnect timer statistics
* cookie: don't load cookies again when flushing
* cookie: parse without sscanf()
* curl.h: require gcc 12.1 for the deprecation magic
* curl: make -w's %{stderr} use the file set with --stderr
* curl_path: create the new path with dynbuf
* CURLOPT_PIPEWAIT: allow waited reuse also for subsequent connections
* CURLOPT_PROXY.3: curl+NSS does not handle HTTPS over unix domain socket
* CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
* DEPRECATE: the original legacy mingw version 1
* doc: fix compiler warning in libcurl.m4
* docs/cmdline-opts: mark all global options
* docs/SECURITY-PROCESS.md: updates
* docs: extend the URL API descriptions
* docs: note '--data-urlencode' option
* DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
* easy: remove infof() debug leftover from curl_easy_recv
* examples/http3.c: use CURL_HTTP_VERSION_3
* ftp: active mode with SSL, add the filter
* ftp: add more conditions for connection reuse
* ftp: allocate the wildcard struct on demand
* ftp: make the EPSV response parser not use sscanf
* ftp: replace sscanf for MDTM 213 response parsing
* ftp: replace sscanf for PASV parsing
* gssapi: align `gss_OID_desc` to silence ld warnings on macOS ventura
* headers: make curl_easy_header and nextheader return different buffers
* hostip: avoid sscanf and extra buffer copies
* http2: fix error handling during parallel operations
* http2: fix for http2-prior-knowledge when reusing connections
* http2: fix handling of RST and GOAWAY to recognize partial transfers
* http2: fix upload busy loop
* http: don't send 100-continue for short PUT requests
* http: fix unix domain socket use in https connects
* http: rewrite the status line parser without sscanf
* http_proxy: parse the status line without sscanf
* idn: return error if the conversion ends up with a blank host
* krb5: avoid sscanf for parsing
* lib1560: test parsing URLs with ridiculously large fields
* lib2305: deal with CURLE_AGAIN
* lib517: verify time stamps without leading zeroes plus some more
* lib: silence clang/gcc -Wvla warnings in brotli headers
* lib: skip Curl_llist_destroy calls
* libcurl-errors.3: add the CURLHcode errors from curl_easy_header.3
* libssh2: only set the memory callbacks when debugging
* libssh2: remove unused variable from libssh2's struct
* libssh: use dynbuf instead of realloc
* Makefile.mk: delete 

Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 8.0.1

2023-03-21 Thread Cygwin curl Maintainer via Cygwin-announce
The following packages have been upgraded in the Cygwin distribution:

* curl  8.0.1
* libcurl4  8.0.1
* libcurl-devel 8.0.1
* libcurl-doc   8.0.1
* mingw64-x86_64-curl   8.0.1

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

To celebrate curl's *25th* anniversary, the version has been
bumped to 8!
Congratulations and thanks are due to the curl developers and
contributors for their achievements, efforts, and support for
all those years.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 8.0.1  2023-03-20

Public curl releases:216
Command line options:250
curl_easy_setopt() options:  302
Public functions in libcurl:  91
Contributors:   2841

Planned upcoming removals include:

- gskit
- NSS
- support for space-separated NOPROXY patterns
- support for the original legacy mingw version 1

See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following changes:

* build: remove support for curl_off_t < 8 bytes

This release includes the following bugfixes:

* Revert "multi: remove PENDING + MSGSENT handles"
* .cirrus.yml: Bump to FreeBSD 13.2
* aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
* BINDINGS: add Fortran binding
* build: drop the use of XC_AMEND_DISTCLEAN
* build: fix stdint/inttypes detection with non-autotools
* cf-socket: fix handling of remote addr for accepted tcp sockets
* cf-socket: if socket is already connected, return CURLE_OK
* cf-socket: use port 80 when resolving name for local bind
* CI: don't run CI jobs if only another CI was changed
* CI: update ngtcp2 and nghttp2 for pytest
* cmake: delete unused HAVE__STRTOI64
* cmake: fix enabling LDAPS on Windows
* cmake: skip CA-path/bundle auto-detection in cross-builds
* connect: fix time_connect and time_appconnect timer statistics
* cookie: don't load cookies again when flushing
* cookie: parse without sscanf()
* curl.h: require gcc 12.1 for the deprecation magic
* curl: make -w's %{stderr} use the file set with --stderr
* curl_path: create the new path with dynbuf
* CURLOPT_PIPEWAIT: allow waited reuse also for subsequent connections
* CURLOPT_PROXY.3: curl+NSS does not handle HTTPS over unix domain socket
* CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
* DEPRECATE: the original legacy mingw version 1
* doc: fix compiler warning in libcurl.m4
* docs/cmdline-opts: mark all global options
* docs/SECURITY-PROCESS.md: updates
* docs: extend the URL API descriptions
* docs: note '--data-urlencode' option
* DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
* easy: remove infof() debug leftover from curl_easy_recv
* examples/http3.c: use CURL_HTTP_VERSION_3
* ftp: active mode with SSL, add the filter
* ftp: add more conditions for connection reuse
* ftp: allocate the wildcard struct on demand
* ftp: make the EPSV response parser not use sscanf
* ftp: replace sscanf for MDTM 213 response parsing
* ftp: replace sscanf for PASV parsing
* gssapi: align `gss_OID_desc` to silence ld warnings on macOS ventura
* headers: make curl_easy_header and nextheader return different buffers
* hostip: avoid sscanf and extra buffer copies
* http2: fix error handling during parallel operations
* http2: fix for http2-prior-knowledge when reusing connections
* http2: fix handling of RST and GOAWAY to recognize partial transfers
* http2: fix upload busy loop
* http: don't send 100-continue for short PUT requests
* http: fix unix domain socket use in https connects
* http: rewrite the status line parser without sscanf
* http_proxy: parse the status line without sscanf
* idn: return error if the conversion ends up with a blank host
* krb5: avoid sscanf for parsing
* lib1560: test parsing URLs with ridiculously large fields
* lib2305: deal with CURLE_AGAIN
* lib517: verify time stamps without leading zeroes plus some more
* lib: silence clang/gcc -Wvla warnings in brotli headers
* lib: skip Curl_llist_destroy calls
* libcurl-errors.3: add the CURLHcode errors from curl_easy_header.3
* libssh2: only set the memory callbacks when debugging
* libssh2: remove unused variable from libssh2's struct
* libssh: use dynbuf instead of realloc
* Makefile.mk: delete 

Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 7.88.1

2023-02-20 Thread Cygwin curl Maintainer via Cygwin-announce
The following packages have been upgraded in the Cygwin distribution:

* curl  7.88.1
* libcurl4  7.88.1
* libcurl-devel 7.88.1
* libcurl-doc   7.88.1
* mingw64-x86_64-curl   7.88.1

NOTE:
This release has been built with debug options disabled, as they are
strongly discouraged for production use, and displays warning messages.

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 7.88.1 2023-02-20 

* Public curl releases: 214
* Command line options: 250
* curl_easy_setopt() options:   302
* Public functions in libcurl:  91
* Contributors: 2818

The next release is planned and intended to become version 8.

Planned upcoming removals include:

* gskit
* NSS
* support for space-separated NOPROXY patterns
* support for systems without 64 bit data types

See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* build-openssl.bat: keep OpenSSL 3 engine binaries
* cmake: fix Windows check for CryptAcquireContext
* connnect: fix timeout handling to use full duration
* curl: make --silent work stand-alone
* curl_setup: Suppress OpenSSL 3 deprecation warnings
* CURLOPT_WS_OPTIONS.3: fix the availability version
* GHA: update rustls dependency to 0.9.2
* http2: buffer/pausedata and output flush fix.
* http2: set drain on stream end
* http: include stdint.h more readily
* krb5: silence cast-align warning
* lib1560: add IPv6 canonicalization tests
* os400: correct Curl_os400_sendto()
* remote-header-name.d: mention that filename* is not supported
* runtests: fix "uninitialized value $port"
* setopt: allow HTTP3 when HTTP2 is not defined
* socketpair: allow EWOULDBLOCK when reading the pair check bytes
* socks: allow using DoH to resolve host names
* tests-httpd: add proxy tests
* tests: make sure gnuserv-tls has SRP support before using it
* tests: make the telnet server shut down a socket gracefully
* tool_getparam: make --get a true boolean
* tool_operate: allow debug builds to set buffersize
* urlapi: do the port number extraction without using sscanf()
* urldata: remove `now` from struct SingleRequest - not needed


curl and libcurl 7.88.0 2023-02-15 

Numbers
the 213th release
5 changes
56 days (total:  9,098)
173 bug-fixes   (total:  8,665)
250 commits (total: 29,821)
0 new public libcurl function   (total: 91)
0 new curl_easy_setopt() option (total:302)
1 new curl command line option  (total:250)
78 contributors, 41 new (total:  2,812)
42 authors, 18 new  (total:  1,119)
3 security fixes(total:135)

Security

This time we bring you three security fixes.
All of them covering cases for which we have had problems reported and
fixed before, but these are new subtle variations.

* CVE-2023-23914: HSTS ignored on multiple requests
* CVE-2023-23915: HSTS amnesia with –parallel
* CVE-2023-23916: HTTP multi-header compression denial of service

Changes

* curl.h: add CURL_HTTP_VERSION_3ONLY
* share: add sharing of HSTS cache among handles
* src: add --http3-only
* tool_operate: share HSTS between handles
* urlapi: add CURLU_PUNYCODE
* writeout: add %{certs} and %{num_certs}

Bugfixes

* cf-socket: fix build when not HAVE_GETPEERNAME
* cf-socket: keep sockaddr local in the socket filters
* cfilters:Curl_conn_get_select_socks: use the first non-connected
filter
* CI: add a workflow to automatically label pull requests
* CI: add pytest GHA to CI test/tests-httpd on a HTTP/3 setup
* CI: Retry failed downloads to reduce spurious failures
* CI: update wolfssl / wolfssh to 5.5.4 / 1.4.12
* cmake: bump requirement to 3.7
* cmake: check for sendmsg
* cmake: delete redundant macro definition `SECURITY_WIN32`
* cmake: fix dev warning due to mismatched arg
* cmake: fix the snprintf detection
* cmake: remove deprecated symbols check
* cmake: set SOVERSION also for macOS
* cmake: use list APPEND syntax for CMAKE_REQUIRED_DEFINITIONS
* cmdline-opts/Makefile: on error, do not leave a partial
* CODEOWNERS: remove the peeps mentioned as CI owners
* connect: fix access of pointer 

[ANNOUNCEMENT] Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 7.88.1

2023-02-20 Thread Cygwin curl Maintainer via Cygwin-announce via Cygwin
The following packages have been upgraded in the Cygwin distribution:

* curl  7.88.1
* libcurl4  7.88.1
* libcurl-devel 7.88.1
* libcurl-doc   7.88.1
* mingw64-x86_64-curl   7.88.1

NOTE:
This release has been built with debug options disabled, as they are
strongly discouraged for production use, and displays warning messages.

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 7.88.1 2023-02-20 

* Public curl releases: 214
* Command line options: 250
* curl_easy_setopt() options:   302
* Public functions in libcurl:  91
* Contributors: 2818

The next release is planned and intended to become version 8.

Planned upcoming removals include:

* gskit
* NSS
* support for space-separated NOPROXY patterns
* support for systems without 64 bit data types

See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* build-openssl.bat: keep OpenSSL 3 engine binaries
* cmake: fix Windows check for CryptAcquireContext
* connnect: fix timeout handling to use full duration
* curl: make --silent work stand-alone
* curl_setup: Suppress OpenSSL 3 deprecation warnings
* CURLOPT_WS_OPTIONS.3: fix the availability version
* GHA: update rustls dependency to 0.9.2
* http2: buffer/pausedata and output flush fix.
* http2: set drain on stream end
* http: include stdint.h more readily
* krb5: silence cast-align warning
* lib1560: add IPv6 canonicalization tests
* os400: correct Curl_os400_sendto()
* remote-header-name.d: mention that filename* is not supported
* runtests: fix "uninitialized value $port"
* setopt: allow HTTP3 when HTTP2 is not defined
* socketpair: allow EWOULDBLOCK when reading the pair check bytes
* socks: allow using DoH to resolve host names
* tests-httpd: add proxy tests
* tests: make sure gnuserv-tls has SRP support before using it
* tests: make the telnet server shut down a socket gracefully
* tool_getparam: make --get a true boolean
* tool_operate: allow debug builds to set buffersize
* urlapi: do the port number extraction without using sscanf()
* urldata: remove `now` from struct SingleRequest - not needed


curl and libcurl 7.88.0 2023-02-15 

Numbers
the 213th release
5 changes
56 days (total:  9,098)
173 bug-fixes   (total:  8,665)
250 commits (total: 29,821)
0 new public libcurl function   (total: 91)
0 new curl_easy_setopt() option (total:302)
1 new curl command line option  (total:250)
78 contributors, 41 new (total:  2,812)
42 authors, 18 new  (total:  1,119)
3 security fixes(total:135)

Security

This time we bring you three security fixes.
All of them covering cases for which we have had problems reported and
fixed before, but these are new subtle variations.

* CVE-2023-23914: HSTS ignored on multiple requests
* CVE-2023-23915: HSTS amnesia with –parallel
* CVE-2023-23916: HTTP multi-header compression denial of service

Changes

* curl.h: add CURL_HTTP_VERSION_3ONLY
* share: add sharing of HSTS cache among handles
* src: add --http3-only
* tool_operate: share HSTS between handles
* urlapi: add CURLU_PUNYCODE
* writeout: add %{certs} and %{num_certs}

Bugfixes

* cf-socket: fix build when not HAVE_GETPEERNAME
* cf-socket: keep sockaddr local in the socket filters
* cfilters:Curl_conn_get_select_socks: use the first non-connected
filter
* CI: add a workflow to automatically label pull requests
* CI: add pytest GHA to CI test/tests-httpd on a HTTP/3 setup
* CI: Retry failed downloads to reduce spurious failures
* CI: update wolfssl / wolfssh to 5.5.4 / 1.4.12
* cmake: bump requirement to 3.7
* cmake: check for sendmsg
* cmake: delete redundant macro definition `SECURITY_WIN32`
* cmake: fix dev warning due to mismatched arg
* cmake: fix the snprintf detection
* cmake: remove deprecated symbols check
* cmake: set SOVERSION also for macOS
* cmake: use list APPEND syntax for CMAKE_REQUIRED_DEFINITIONS
* cmdline-opts/Makefile: on error, do not leave a partial
* CODEOWNERS: remove the peeps mentioned as CI owners
* connect: fix access of pointer 

[ANNOUNCEMENT] Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 7.87

2022-12-28 Thread Cygwin curl Maintainer via Cygwin
The following packages have been upgraded in the Cygwin distribution:

* curl  7.87
* libcurl4  7.87
* libcurl-devel 7.87
* libcurl-doc   7.87
* mingw64-x86_64-curl   7.87

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 7.87.0

Public curl releases:212
Command line options:249
curl_easy_setopt() options:  302
Public functions in libcurl:  91
Contributors:   2771

This release includes the following changes:

* curl: add --url-query
* CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
* lib: add CURL_WRITEFUNC_ERROR to signal write callback error
* openssl: reduce CA certificate bundle reparsing by caching
* version: add a feature names array to curl_version_info_data

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

Planned upcoming removals include:

* NSS
* Support for systems without 64 bit data types

See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* altsvc: fix rejection of negative port numbers
* aws_sigv4: consult x-%s-content-sha256 for payload hash
* aws_sigv4: fix typos in aws_sigv4.c
* base64: better alloc size
* base64: encode without using snprintf
* base64: faster base64 decoding
* build: assume assert.h is always available
* build: assume errno.h is always available
* c-hyper: CONNECT respones are not server responses
* c-hyper: fix multi-request mechanism
* CI: Change FreeBSD image from 12.3 to 12.4
* CI: LGTM.com will be shut down in December 2022
* ci: Remove zuul fuzzing job as it's superseded by CIFuzz
* cmake: check for cross-compile, not for toolchain
* CMake: fix build with `CURL_USE_GSSAPI`
* cmake: really enable warnings with clang
* cmake: set the soname on the shared library
* cmdline-opts/gen.pl: fix the linkifier
* cmdline-opts/page-footer: remove long option nroff formatting
* config-mac: define HAVE_SYS_IOCTL_H
* config-mac: fix typo: size_T -> size_t
* config-mac: remove HAVE_SYS_SELECT_H
* config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
* configure: require fork for NTLM-WB
* contributors.sh: actually use $CURLWWW instead of just setting it
* cookie: compare cookie prefixes case insensitively
* cookie: expire cookies at once when max-age is negative
* cookie: open cookie jar as a binary file
* curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
* curl-rustls.m4: on macOS, rustls also needs the Security framework
* curl.h: include  on SerenityOS
* curl.h: name all public function parameters
* curl.h: reword comment to not use deprecated option
* curl: override the numeric locale and set "C" by force
* curl: timeout in the read callback
* curl_endian: remove Curl_write64_le from header
* curl_get_line: allow last line without newline char
* curl_path: do not add '/' if homedir ends with one
* curl_url_get.3: remove spurious backtick
* curl_url_set.3: document CURLU_DISALLOW_USER
* curl_url_set.3: fix typo
* CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
* CURLOPT_COOKIEFILE.3: advice => advise
* CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
* CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
* CURLOPT_POST.3: Explain setting to 0 changes request type
* docs/curl_ws_send: Fixed typo in websocket docs
* docs/EARLY-RELEASE.md: how to determine an early release
* docs/examples: spell correction ('Retrieve')
* docs/INSTALL.md: expand on static builds
* docs/WEBSOCKET.md: explain the URL use
* docs: add missing parameters for --retry flag
* docs: add more "SEE ALSO" links to CA related pages
* docs: explain the noproxy CIDR notation support
* docs: extend the dump-header documentation
* docs: remove performance note in CURLOPT_SSL_VERIFYPEER
* examples/10-at-a-time: fix possible skipped final transfers
* examples: update descriptions
* ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
* gen.pl: do not generate CURLHELP bitmask lines > 79 characters
* GHA: clarify workflows permissions, set least possible privilege
* GHA: NSS use clang instead of clang-9
* gnutls: use common gnutls init and 

Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 7.87

2022-12-28 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.87
* libcurl4  7.87
* libcurl-devel 7.87
* libcurl-doc   7.87
* mingw64-x86_64-curl   7.87

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 7.87.0

Public curl releases:212
Command line options:249
curl_easy_setopt() options:  302
Public functions in libcurl:  91
Contributors:   2771

This release includes the following changes:

* curl: add --url-query
* CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
* lib: add CURL_WRITEFUNC_ERROR to signal write callback error
* openssl: reduce CA certificate bundle reparsing by caching
* version: add a feature names array to curl_version_info_data

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

Planned upcoming removals include:

* NSS
* Support for systems without 64 bit data types

See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* altsvc: fix rejection of negative port numbers
* aws_sigv4: consult x-%s-content-sha256 for payload hash
* aws_sigv4: fix typos in aws_sigv4.c
* base64: better alloc size
* base64: encode without using snprintf
* base64: faster base64 decoding
* build: assume assert.h is always available
* build: assume errno.h is always available
* c-hyper: CONNECT respones are not server responses
* c-hyper: fix multi-request mechanism
* CI: Change FreeBSD image from 12.3 to 12.4
* CI: LGTM.com will be shut down in December 2022
* ci: Remove zuul fuzzing job as it's superseded by CIFuzz
* cmake: check for cross-compile, not for toolchain
* CMake: fix build with `CURL_USE_GSSAPI`
* cmake: really enable warnings with clang
* cmake: set the soname on the shared library
* cmdline-opts/gen.pl: fix the linkifier
* cmdline-opts/page-footer: remove long option nroff formatting
* config-mac: define HAVE_SYS_IOCTL_H
* config-mac: fix typo: size_T -> size_t
* config-mac: remove HAVE_SYS_SELECT_H
* config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
* configure: require fork for NTLM-WB
* contributors.sh: actually use $CURLWWW instead of just setting it
* cookie: compare cookie prefixes case insensitively
* cookie: expire cookies at once when max-age is negative
* cookie: open cookie jar as a binary file
* curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
* curl-rustls.m4: on macOS, rustls also needs the Security framework
* curl.h: include  on SerenityOS
* curl.h: name all public function parameters
* curl.h: reword comment to not use deprecated option
* curl: override the numeric locale and set "C" by force
* curl: timeout in the read callback
* curl_endian: remove Curl_write64_le from header
* curl_get_line: allow last line without newline char
* curl_path: do not add '/' if homedir ends with one
* curl_url_get.3: remove spurious backtick
* curl_url_set.3: document CURLU_DISALLOW_USER
* curl_url_set.3: fix typo
* CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
* CURLOPT_COOKIEFILE.3: advice => advise
* CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
* CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
* CURLOPT_POST.3: Explain setting to 0 changes request type
* docs/curl_ws_send: Fixed typo in websocket docs
* docs/EARLY-RELEASE.md: how to determine an early release
* docs/examples: spell correction ('Retrieve')
* docs/INSTALL.md: expand on static builds
* docs/WEBSOCKET.md: explain the URL use
* docs: add missing parameters for --retry flag
* docs: add more "SEE ALSO" links to CA related pages
* docs: explain the noproxy CIDR notation support
* docs: extend the dump-header documentation
* docs: remove performance note in CURLOPT_SSL_VERIFYPEER
* examples/10-at-a-time: fix possible skipped final transfers
* examples: update descriptions
* ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
* gen.pl: do not generate CURLHELP bitmask lines > 79 characters
* GHA: clarify workflows permissions, set least possible privilege
* GHA: NSS use clang instead of clang-9
* gnutls: use common gnutls init and 

[ANNOUNCEMENT] Updated: curl/libcurl4/-devel/-doc 7.86-2, mingw64-i686/x86_64-curl 7.86-1

2022-11-19 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.86-2
* libcurl4  7.86-2
* libcurl-devel 7.86-2
* libcurl-doc   7.86-2
* mingw64-i686-curl 7.86-1
* mingw64-x86_64-curl   7.86-1

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html

Cygwin release 2 has been rebuilt with the latest library dependencies.
Mingw release 1 has been promoted from test.


curl and libcurl7.862022-10-26

 Public curl releases:   211
 Command line options:   248
 curl_easy_setopt() options: 300
 Public functions in libcurl: 91
 Contributors:  2733

This release includes the following changes:

* Websockets: initial support
* NPN: remove support for and use of

Planned upcoming removals include:

* NSS in 8.0.0 (March 2023)
* Support for systems without 64 bit data types in August 2023

See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* altsvc: reject bad port numbers
* altsvc: use 'h3' for h3
* amiga: do not hardcode openssl/zlib into the os config
* amiga: set SIZEOF_CURL_OFF_T=8 by default
* amigaos: add missing curl header
* asyn-ares: set hint flags when calling ares_getaddrinfo
* autotools: allow --enable-symbol-hiding with windows
* autotools: allow unix sockets on Windows
* autotools: reduce brute-force when detecting recv/send arg list
* aws_sigv4: fix header computation
* bearssl: make it proper C89 compliant
* CI/GHA: cancel outdated CI runs on new PR changes
* CI/GHA: merge msh3 and openssl3 builds into linux workflow
* cirrus-ci: add macOS build with m1
* cirrus: use make LDFLAGS=-all-static instead of curl_LDFLAGS
* cli tool: do not use disabled protocols
* cmake: add missing inet_ntop check
* cmake: add the check of HAVE_SOCKETPAIR
* cmake: define BUILDING_LIBCURL in lib/CMakeLists, not config.h
* cmake: delete duplicate HAVE_GETADDRINFO test
* cmake: enable more detection on Windows
* cmake: fix original MinGW builds
* cmake: improve usability of CMake build as a sub-project
* cmake: set HAVE_GETADDRINFO_THREADSAFE on Windows
* cmake: set HAVE_SOCKADDR_IN6_SIN6_SCOPE_ID on Windows
* cmake: sync HAVE_SIGNAL detection with autotools
* cmdline/docs: add a required 'multi' keyword for each option
* configure: correct the wording when checking grep -E
* configure: deprecate builds with small curl_off_t
* configure: fail if '--without-ssl' + explicit parameter for an ssl lib
* configure: the ngtcp2 option should default to 'no'
* connect: change verbose IPv6 address:port to [address]:port
* connect: fix builds without AF_INET6
* connect: fix Curl_updateconninfo for TRNSPRT_UNIX
* connect: fix the wrong error message on connect failures
* content_encoding: use writer struct subclasses for different encodings
* cookie: reject cookie names or content with TAB characters
* ctype: remove all use of , use our own versions
* curl-compilers.m4: for gcc + want warnings, set gnu89 standard
* curl-compilers.m4: use -O2 as default optimize for clang
* curl-wolfssl.m4: error out if wolfSSL is not usable
* curl.h: fix mention of wrong error code in comment
* curl/add_file_name_to_url: use the libcurl URL parser
* curl/add_parallel_transfers: better error handling
* curl/get_url_file_name: use libcurl URL parser
* curl: warn for --ssl use, considered insecure
* curl_ctype: convert to macros-only
* curl_easy_pause.3: unpausing is as fast as possible
* curl_escape.3: fix typo
* curl_setup: disable use of FLOSS for 64-bit NonStop builds
* curl_setup: include curl.h after platform setup headers
* curl_setup: include only system.h instead of curl.h
* curl_strequal.3: fix argument typo
* curl_url_set.3: document CURLU_APPENDQUERY proper
* CURLMOPT_PIPELINING.3: dedup manpage xref
* CURLOPT_ACCEPT_ENCODING.3: remove "four" as they are five
* CURLOPT_AUTOREFERER.3: highlight the privacy leak risk
* CURLOPT_COOKIEFILE: insist on "" for enable-without-file
* CURLOPT_COOKIELIST.3: fix formatting mistake
* CURLOPT_DNS_INTERFACE.3: mention it works for almost all protocols
* CURLOPT_MIMEPOST.3: add an (inline) example
* CURLOPT_POSTFIELDS.3: refer to CURLOPT_MIMEPOST
* 

Updated: curl/libcurl4/-devel/-doc 7.86-2, mingw64-i686/x86_64-curl 7.86-1

2022-11-19 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.86-2
* libcurl4  7.86-2
* libcurl-devel 7.86-2
* libcurl-doc   7.86-2
* mingw64-i686-curl 7.86-1
* mingw64-x86_64-curl   7.86-1

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html

Cygwin release 2 has been rebuilt with the latest library dependencies.
Mingw release 1 has been promoted from test.


curl and libcurl7.862022-10-26

 Public curl releases:   211
 Command line options:   248
 curl_easy_setopt() options: 300
 Public functions in libcurl: 91
 Contributors:  2733

This release includes the following changes:

* Websockets: initial support
* NPN: remove support for and use of

Planned upcoming removals include:

* NSS in 8.0.0 (March 2023)
* Support for systems without 64 bit data types in August 2023

See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* altsvc: reject bad port numbers
* altsvc: use 'h3' for h3
* amiga: do not hardcode openssl/zlib into the os config
* amiga: set SIZEOF_CURL_OFF_T=8 by default
* amigaos: add missing curl header
* asyn-ares: set hint flags when calling ares_getaddrinfo
* autotools: allow --enable-symbol-hiding with windows
* autotools: allow unix sockets on Windows
* autotools: reduce brute-force when detecting recv/send arg list
* aws_sigv4: fix header computation
* bearssl: make it proper C89 compliant
* CI/GHA: cancel outdated CI runs on new PR changes
* CI/GHA: merge msh3 and openssl3 builds into linux workflow
* cirrus-ci: add macOS build with m1
* cirrus: use make LDFLAGS=-all-static instead of curl_LDFLAGS
* cli tool: do not use disabled protocols
* cmake: add missing inet_ntop check
* cmake: add the check of HAVE_SOCKETPAIR
* cmake: define BUILDING_LIBCURL in lib/CMakeLists, not config.h
* cmake: delete duplicate HAVE_GETADDRINFO test
* cmake: enable more detection on Windows
* cmake: fix original MinGW builds
* cmake: improve usability of CMake build as a sub-project
* cmake: set HAVE_GETADDRINFO_THREADSAFE on Windows
* cmake: set HAVE_SOCKADDR_IN6_SIN6_SCOPE_ID on Windows
* cmake: sync HAVE_SIGNAL detection with autotools
* cmdline/docs: add a required 'multi' keyword for each option
* configure: correct the wording when checking grep -E
* configure: deprecate builds with small curl_off_t
* configure: fail if '--without-ssl' + explicit parameter for an ssl lib
* configure: the ngtcp2 option should default to 'no'
* connect: change verbose IPv6 address:port to [address]:port
* connect: fix builds without AF_INET6
* connect: fix Curl_updateconninfo for TRNSPRT_UNIX
* connect: fix the wrong error message on connect failures
* content_encoding: use writer struct subclasses for different encodings
* cookie: reject cookie names or content with TAB characters
* ctype: remove all use of , use our own versions
* curl-compilers.m4: for gcc + want warnings, set gnu89 standard
* curl-compilers.m4: use -O2 as default optimize for clang
* curl-wolfssl.m4: error out if wolfSSL is not usable
* curl.h: fix mention of wrong error code in comment
* curl/add_file_name_to_url: use the libcurl URL parser
* curl/add_parallel_transfers: better error handling
* curl/get_url_file_name: use libcurl URL parser
* curl: warn for --ssl use, considered insecure
* curl_ctype: convert to macros-only
* curl_easy_pause.3: unpausing is as fast as possible
* curl_escape.3: fix typo
* curl_setup: disable use of FLOSS for 64-bit NonStop builds
* curl_setup: include curl.h after platform setup headers
* curl_setup: include only system.h instead of curl.h
* curl_strequal.3: fix argument typo
* curl_url_set.3: document CURLU_APPENDQUERY proper
* CURLMOPT_PIPELINING.3: dedup manpage xref
* CURLOPT_ACCEPT_ENCODING.3: remove "four" as they are five
* CURLOPT_AUTOREFERER.3: highlight the privacy leak risk
* CURLOPT_COOKIEFILE: insist on "" for enable-without-file
* CURLOPT_COOKIELIST.3: fix formatting mistake
* CURLOPT_DNS_INTERFACE.3: mention it works for almost all protocols
* CURLOPT_MIMEPOST.3: add an (inline) example
* CURLOPT_POSTFIELDS.3: refer to CURLOPT_MIMEPOST
* 

[ANNOUNCEMENT] Test: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.86 (TEST)

2022-11-01 Thread Cygwin curl Maintainer
The following *TEST* packages have been released in the Cygwin distribution:

* curl  7.86
* libcurl4  7.86
* libcurl-devel 7.86
* libcurl-doc   7.86
* mingw64-x86_64-curl   7.86
* mingw64-i686-curl 7.86

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


Please test these packages as extensively as possible (especially if you
are a Cygwin package maintainer) as libcurl is used in many libraries
and utilities.
Package maintainers should install this test release and rerun checks
of as many libraries and packages depending on libcurl as possible. 
Test releases of gsasl and libgsasl18 2.2 are available and the latter
is required for this release.

Checks of curl itself after installing these packages run with no issues.
I have it locally installed so it is getting used by commands, scripts,
cron jobs, and cygport builds, and has and is getting frequent exercise
with no apparent issues so far.
If no issues are reported within a couple of weeks the package will be
upgraded to current.



curl and libcurl7.862022-10-26

 Public curl releases:   211
 Command line options:   248
 curl_easy_setopt() options: 300
 Public functions in libcurl: 91
 Contributors:  2733

This release includes the following changes:

* Websockets: initial support
* NPN: remove support for and use of

Planned upcoming removals include:

* NSS in 8.0.0 (March 2023)
* Support for systems without 64 bit data types in August 2023

See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* altsvc: reject bad port numbers
* altsvc: use 'h3' for h3
* amiga: do not hardcode openssl/zlib into the os config
* amiga: set SIZEOF_CURL_OFF_T=8 by default
* amigaos: add missing curl header
* asyn-ares: set hint flags when calling ares_getaddrinfo
* autotools: allow --enable-symbol-hiding with windows
* autotools: allow unix sockets on Windows
* autotools: reduce brute-force when detecting recv/send arg list
* aws_sigv4: fix header computation
* bearssl: make it proper C89 compliant
* CI/GHA: cancel outdated CI runs on new PR changes
* CI/GHA: merge msh3 and openssl3 builds into linux workflow
* cirrus-ci: add macOS build with m1
* cirrus: use make LDFLAGS=-all-static instead of curl_LDFLAGS
* cli tool: do not use disabled protocols
* cmake: add missing inet_ntop check
* cmake: add the check of HAVE_SOCKETPAIR
* cmake: define BUILDING_LIBCURL in lib/CMakeLists, not config.h
* cmake: delete duplicate HAVE_GETADDRINFO test
* cmake: enable more detection on Windows
* cmake: fix original MinGW builds
* cmake: improve usability of CMake build as a sub-project
* cmake: set HAVE_GETADDRINFO_THREADSAFE on Windows
* cmake: set HAVE_SOCKADDR_IN6_SIN6_SCOPE_ID on Windows
* cmake: sync HAVE_SIGNAL detection with autotools
* cmdline/docs: add a required 'multi' keyword for each option
* configure: correct the wording when checking grep -E
* configure: deprecate builds with small curl_off_t
* configure: fail if '--without-ssl' + explicit parameter for an ssl lib
* configure: the ngtcp2 option should default to 'no'
* connect: change verbose IPv6 address:port to [address]:port
* connect: fix builds without AF_INET6
* connect: fix Curl_updateconninfo for TRNSPRT_UNIX
* connect: fix the wrong error message on connect failures
* content_encoding: use writer struct subclasses for different encodings
* cookie: reject cookie names or content with TAB characters
* ctype: remove all use of , use our own versions
* curl-compilers.m4: for gcc + want warnings, set gnu89 standard
* curl-compilers.m4: use -O2 as default optimize for clang
* curl-wolfssl.m4: error out if wolfSSL is not usable
* curl.h: fix mention of wrong error code in comment
* curl/add_file_name_to_url: use the libcurl URL parser
* curl/add_parallel_transfers: better error handling
* curl/get_url_file_name: use libcurl URL parser
* curl: warn for --ssl use, considered insecure
* curl_ctype: convert to macros-only
* curl_easy_pause.3: unpausing is as fast as possible
* curl_escape.3: fix typo
* curl_setup: disable use of FLOSS for 64-bit NonStop builds
* curl_setup: 

Test: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.86 (TEST)

2022-11-01 Thread Cygwin curl Maintainer
The following *TEST* packages have been released in the Cygwin distribution:

* curl  7.86
* libcurl4  7.86
* libcurl-devel 7.86
* libcurl-doc   7.86
* mingw64-x86_64-curl   7.86
* mingw64-i686-curl 7.86

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


Please test these packages as extensively as possible (especially if you
are a Cygwin package maintainer) as libcurl is used in many libraries
and utilities.
Package maintainers should install this test release and rerun checks
of as many libraries and packages depending on libcurl as possible. 
Test releases of gsasl and libgsasl18 2.2 are available and the latter
is required for this release.

Checks of curl itself after installing these packages run with no issues.
I have it locally installed so it is getting used by commands, scripts,
cron jobs, and cygport builds, and has and is getting frequent exercise
with no apparent issues so far.
If no issues are reported within a couple of weeks the package will be
upgraded to current.



curl and libcurl7.862022-10-26

 Public curl releases:   211
 Command line options:   248
 curl_easy_setopt() options: 300
 Public functions in libcurl: 91
 Contributors:  2733

This release includes the following changes:

* Websockets: initial support
* NPN: remove support for and use of

Planned upcoming removals include:

* NSS in 8.0.0 (March 2023)
* Support for systems without 64 bit data types in August 2023

See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* altsvc: reject bad port numbers
* altsvc: use 'h3' for h3
* amiga: do not hardcode openssl/zlib into the os config
* amiga: set SIZEOF_CURL_OFF_T=8 by default
* amigaos: add missing curl header
* asyn-ares: set hint flags when calling ares_getaddrinfo
* autotools: allow --enable-symbol-hiding with windows
* autotools: allow unix sockets on Windows
* autotools: reduce brute-force when detecting recv/send arg list
* aws_sigv4: fix header computation
* bearssl: make it proper C89 compliant
* CI/GHA: cancel outdated CI runs on new PR changes
* CI/GHA: merge msh3 and openssl3 builds into linux workflow
* cirrus-ci: add macOS build with m1
* cirrus: use make LDFLAGS=-all-static instead of curl_LDFLAGS
* cli tool: do not use disabled protocols
* cmake: add missing inet_ntop check
* cmake: add the check of HAVE_SOCKETPAIR
* cmake: define BUILDING_LIBCURL in lib/CMakeLists, not config.h
* cmake: delete duplicate HAVE_GETADDRINFO test
* cmake: enable more detection on Windows
* cmake: fix original MinGW builds
* cmake: improve usability of CMake build as a sub-project
* cmake: set HAVE_GETADDRINFO_THREADSAFE on Windows
* cmake: set HAVE_SOCKADDR_IN6_SIN6_SCOPE_ID on Windows
* cmake: sync HAVE_SIGNAL detection with autotools
* cmdline/docs: add a required 'multi' keyword for each option
* configure: correct the wording when checking grep -E
* configure: deprecate builds with small curl_off_t
* configure: fail if '--without-ssl' + explicit parameter for an ssl lib
* configure: the ngtcp2 option should default to 'no'
* connect: change verbose IPv6 address:port to [address]:port
* connect: fix builds without AF_INET6
* connect: fix Curl_updateconninfo for TRNSPRT_UNIX
* connect: fix the wrong error message on connect failures
* content_encoding: use writer struct subclasses for different encodings
* cookie: reject cookie names or content with TAB characters
* ctype: remove all use of , use our own versions
* curl-compilers.m4: for gcc + want warnings, set gnu89 standard
* curl-compilers.m4: use -O2 as default optimize for clang
* curl-wolfssl.m4: error out if wolfSSL is not usable
* curl.h: fix mention of wrong error code in comment
* curl/add_file_name_to_url: use the libcurl URL parser
* curl/add_parallel_transfers: better error handling
* curl/get_url_file_name: use libcurl URL parser
* curl: warn for --ssl use, considered insecure
* curl_ctype: convert to macros-only
* curl_easy_pause.3: unpausing is as fast as possible
* curl_escape.3: fix typo
* curl_setup: disable use of FLOSS for 64-bit NonStop builds
* curl_setup: 

[ANNOUNCEMENT] Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.86

2022-10-30 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.86
* libcurl4  7.86
* libcurl-devel 7.86
* libcurl-doc   7.86
* mingw64-x86_64-curl   7.86
* mingw64-i686-curl 7.86

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl7.862022-10-26

 Public curl releases:   211
 Command line options:   248
 curl_easy_setopt() options: 300
 Public functions in libcurl: 91
 Contributors:  2733

This release includes the following changes:

* Websockets: initial support
* NPN: remove support for and use of

Planned upcoming removals include:

* NSS in 8.0.0 (March 2023)
* Support for systems without 64 bit data types in August 2023

See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* altsvc: reject bad port numbers
* altsvc: use 'h3' for h3
* amiga: do not hardcode openssl/zlib into the os config
* amiga: set SIZEOF_CURL_OFF_T=8 by default
* amigaos: add missing curl header
* asyn-ares: set hint flags when calling ares_getaddrinfo
* autotools: allow --enable-symbol-hiding with windows
* autotools: allow unix sockets on Windows
* autotools: reduce brute-force when detecting recv/send arg list
* aws_sigv4: fix header computation
* bearssl: make it proper C89 compliant
* CI/GHA: cancel outdated CI runs on new PR changes
* CI/GHA: merge msh3 and openssl3 builds into linux workflow
* cirrus-ci: add macOS build with m1
* cirrus: use make LDFLAGS=-all-static instead of curl_LDFLAGS
* cli tool: do not use disabled protocols
* cmake: add missing inet_ntop check
* cmake: add the check of HAVE_SOCKETPAIR
* cmake: define BUILDING_LIBCURL in lib/CMakeLists, not config.h
* cmake: delete duplicate HAVE_GETADDRINFO test
* cmake: enable more detection on Windows
* cmake: fix original MinGW builds
* cmake: improve usability of CMake build as a sub-project
* cmake: set HAVE_GETADDRINFO_THREADSAFE on Windows
* cmake: set HAVE_SOCKADDR_IN6_SIN6_SCOPE_ID on Windows
* cmake: sync HAVE_SIGNAL detection with autotools
* cmdline/docs: add a required 'multi' keyword for each option
* configure: correct the wording when checking grep -E
* configure: deprecate builds with small curl_off_t
* configure: fail if '--without-ssl' + explicit parameter for an ssl lib
* configure: the ngtcp2 option should default to 'no'
* connect: change verbose IPv6 address:port to [address]:port
* connect: fix builds without AF_INET6
* connect: fix Curl_updateconninfo for TRNSPRT_UNIX
* connect: fix the wrong error message on connect failures
* content_encoding: use writer struct subclasses for different encodings
* cookie: reject cookie names or content with TAB characters
* ctype: remove all use of , use our own versions
* curl-compilers.m4: for gcc + want warnings, set gnu89 standard
* curl-compilers.m4: use -O2 as default optimize for clang
* curl-wolfssl.m4: error out if wolfSSL is not usable
* curl.h: fix mention of wrong error code in comment
* curl/add_file_name_to_url: use the libcurl URL parser
* curl/add_parallel_transfers: better error handling
* curl/get_url_file_name: use libcurl URL parser
* curl: warn for --ssl use, considered insecure
* curl_ctype: convert to macros-only
* curl_easy_pause.3: unpausing is as fast as possible
* curl_escape.3: fix typo
* curl_setup: disable use of FLOSS for 64-bit NonStop builds
* curl_setup: include curl.h after platform setup headers
* curl_setup: include only system.h instead of curl.h
* curl_strequal.3: fix argument typo
* curl_url_set.3: document CURLU_APPENDQUERY proper
* CURLMOPT_PIPELINING.3: dedup manpage xref
* CURLOPT_ACCEPT_ENCODING.3: remove "four" as they are five
* CURLOPT_AUTOREFERER.3: highlight the privacy leak risk
* CURLOPT_COOKIEFILE: insist on "" for enable-without-file
* CURLOPT_COOKIELIST.3: fix formatting mistake
* CURLOPT_DNS_INTERFACE.3: mention it works for almost all protocols
* CURLOPT_MIMEPOST.3: add an (inline) example
* CURLOPT_POSTFIELDS.3: refer to CURLOPT_MIMEPOST
* CURLOPT_PROXY_SSLCERT_BLOB.3: this is for HTTPS proxies
* CURLOPT_WILDCARDMATCH.3: Fix backslash escaping under single quotes
* 

Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.86

2022-10-30 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.86
* libcurl4  7.86
* libcurl-devel 7.86
* libcurl-doc   7.86
* mingw64-x86_64-curl   7.86
* mingw64-i686-curl 7.86

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl7.862022-10-26

 Public curl releases:   211
 Command line options:   248
 curl_easy_setopt() options: 300
 Public functions in libcurl: 91
 Contributors:  2733

This release includes the following changes:

* Websockets: initial support
* NPN: remove support for and use of

Planned upcoming removals include:

* NSS in 8.0.0 (March 2023)
* Support for systems without 64 bit data types in August 2023

See https://curl.se/dev/deprecate.html for details

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* altsvc: reject bad port numbers
* altsvc: use 'h3' for h3
* amiga: do not hardcode openssl/zlib into the os config
* amiga: set SIZEOF_CURL_OFF_T=8 by default
* amigaos: add missing curl header
* asyn-ares: set hint flags when calling ares_getaddrinfo
* autotools: allow --enable-symbol-hiding with windows
* autotools: allow unix sockets on Windows
* autotools: reduce brute-force when detecting recv/send arg list
* aws_sigv4: fix header computation
* bearssl: make it proper C89 compliant
* CI/GHA: cancel outdated CI runs on new PR changes
* CI/GHA: merge msh3 and openssl3 builds into linux workflow
* cirrus-ci: add macOS build with m1
* cirrus: use make LDFLAGS=-all-static instead of curl_LDFLAGS
* cli tool: do not use disabled protocols
* cmake: add missing inet_ntop check
* cmake: add the check of HAVE_SOCKETPAIR
* cmake: define BUILDING_LIBCURL in lib/CMakeLists, not config.h
* cmake: delete duplicate HAVE_GETADDRINFO test
* cmake: enable more detection on Windows
* cmake: fix original MinGW builds
* cmake: improve usability of CMake build as a sub-project
* cmake: set HAVE_GETADDRINFO_THREADSAFE on Windows
* cmake: set HAVE_SOCKADDR_IN6_SIN6_SCOPE_ID on Windows
* cmake: sync HAVE_SIGNAL detection with autotools
* cmdline/docs: add a required 'multi' keyword for each option
* configure: correct the wording when checking grep -E
* configure: deprecate builds with small curl_off_t
* configure: fail if '--without-ssl' + explicit parameter for an ssl lib
* configure: the ngtcp2 option should default to 'no'
* connect: change verbose IPv6 address:port to [address]:port
* connect: fix builds without AF_INET6
* connect: fix Curl_updateconninfo for TRNSPRT_UNIX
* connect: fix the wrong error message on connect failures
* content_encoding: use writer struct subclasses for different encodings
* cookie: reject cookie names or content with TAB characters
* ctype: remove all use of , use our own versions
* curl-compilers.m4: for gcc + want warnings, set gnu89 standard
* curl-compilers.m4: use -O2 as default optimize for clang
* curl-wolfssl.m4: error out if wolfSSL is not usable
* curl.h: fix mention of wrong error code in comment
* curl/add_file_name_to_url: use the libcurl URL parser
* curl/add_parallel_transfers: better error handling
* curl/get_url_file_name: use libcurl URL parser
* curl: warn for --ssl use, considered insecure
* curl_ctype: convert to macros-only
* curl_easy_pause.3: unpausing is as fast as possible
* curl_escape.3: fix typo
* curl_setup: disable use of FLOSS for 64-bit NonStop builds
* curl_setup: include curl.h after platform setup headers
* curl_setup: include only system.h instead of curl.h
* curl_strequal.3: fix argument typo
* curl_url_set.3: document CURLU_APPENDQUERY proper
* CURLMOPT_PIPELINING.3: dedup manpage xref
* CURLOPT_ACCEPT_ENCODING.3: remove "four" as they are five
* CURLOPT_AUTOREFERER.3: highlight the privacy leak risk
* CURLOPT_COOKIEFILE: insist on "" for enable-without-file
* CURLOPT_COOKIELIST.3: fix formatting mistake
* CURLOPT_DNS_INTERFACE.3: mention it works for almost all protocols
* CURLOPT_MIMEPOST.3: add an (inline) example
* CURLOPT_POSTFIELDS.3: refer to CURLOPT_MIMEPOST
* CURLOPT_PROXY_SSLCERT_BLOB.3: this is for HTTPS proxies
* CURLOPT_WILDCARDMATCH.3: Fix backslash escaping under single quotes
* 

[ANNOUNCEMENT] Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.85

2022-09-05 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.85
* libcurl4  7.85
* libcurl-devel 7.85
* libcurl-doc   7.85
* mingw64-x86_64-curl   7.85
* mingw64-i686-curl 7.85

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl7.852022-08-31

Public curl releases:210
Command line options:248
curl_easy_setopt() options:  299
Public functions in libcurl:  88
Contributors:   2690

This release includes the following changes:

* quic: add support via wolfSSL
* schannel: Add TLS 1.3 support
* setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* amigaos: fix threaded resolver on AmigaOS 4.x
* amissl: allow AmiSSL to be used with AmigaOS 4.x builds
* amissl: make AmiSSL v5 a minimum requirement
* asyn-ares: make a single alloc out of hostname + async data
* asyn-thread: fix socket leak on OOM
* asyn-thread: make getaddrinfo_complete return CURLcode
* base64: base64url encoding has no padding
* BUGS.md: improve language
* build: improve OS string in CMake and `config-win32.h`
* cert.d: clarify that escape character works for file paths
* cirrus.yml: replace py38-pip with py39-pip
* cirrus/freebsd-ci: bootstrap the pip installer
* cmake: add detection of threadsafe feature
* cmake: do not force Windows target versions
* cmake: fix build for mingw cross compile
* cmake: link curl to its dependencies with PRIVATE
* cmake: remove APPEND in export(TARGETS)
* cmake: set feature PSL if present
* cmake: support ngtcp2 boringssl backend
* cmdline-opts/gen.pl: improve performance
* config: remove the check for and use of SIZEOF_SHORT
* configure: -pthread not available on AmigaOS 4.x
* configure: check for the stdatomic.h header in configure
* configure: fix --disable-headers-api
* configure: fix broken m4 syntax in TLS options
* configure: fixup bsdsocket detection code for AmigaOS 4.x
* configure: if asked to use TLS, fail if no TLS lib was detected
* configure: introduce CURL_SIZEOF
* connect: add quic connection information
* connect: close the happy eyeballs loser connection when using QUIC
* connect: revert the use of IP*_RECVERR
* connect: set socktype/protocol correctly
* cookie: reject cookies with "control bytes"
* cookie: treat a blank domain in Set-Cookie: as non-existing
* cookie: use %zu to infof() for size_t values
* curl-compilers.m4: make icc use -diag* options and disable two warnings
* curl-config: quote directories with potential space
* curl-confopts: remove leftover AC_REQUIREs
* curl-functions.m4: check whether atomics can link
* curl-wolfssl.m4: add options header when building test code
* curl.h: CURLE_CONV_FAILED is obsoleted
* curl.h: include  on SunOS
* curl: output warning when a cookie is dropped due to size
* curl: writeout: fix repeated header outputs
* Curl_close: call Curl_resolver_cancel to avoid memory-leak
* curl_easy_header: Add CURLH_PSEUDO to sanity check
* curl_mime_data.3: polish the wording
* curl_multi_timeout.3: clarify usage
* CURLINFO_SPEED_UPLOAD/DOWNLOAD.3: fix examples
* CURLOPT_BUFFERSIZE.3: add upload buffersize to see also
* CURLOPT_CONNECT_ONLY.3: clarify multi API use
* CURLOPT_SERVER_RESPONSE_TIMEOUT: the new name
* digest: fix memory leak, fix not quoted 'opaque'
* digest: fix missing increment of 'nc' value for auth-int
* digest: pass over leading spaces in qop values
* digest: reject broken header with session protocol but without qop
* docs/cmdline-opts/gen.pl: encode leading single and double quotes
* docs/cmdline-opts: fix example and categories for --form-escape
* docs/cmdline: mark fail and fail-with-body as mutually exclusive
* docs: add dns category to --resolve
* docs: explain curl_easy_escape/unescape curl handle is ignored
* docs: remove him/her/he/she from documentation
* doh: move doh related struct definitions to doh.h
* doh: use https protocol by default
* easy_lock.h: include sched.h if available to fix build
* easy_lock.h: use __asm__ instead of asm to fix build
* easy_lock: fix build for mingw
* easy_lock: fix build with icc
* easy_lock: 

Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.85

2022-09-05 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.85
* libcurl4  7.85
* libcurl-devel 7.85
* libcurl-doc   7.85
* mingw64-x86_64-curl   7.85
* mingw64-i686-curl 7.85

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl7.852022-08-31

Public curl releases:210
Command line options:248
curl_easy_setopt() options:  299
Public functions in libcurl:  88
Contributors:   2690

This release includes the following changes:

* quic: add support via wolfSSL
* schannel: Add TLS 1.3 support
* setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* amigaos: fix threaded resolver on AmigaOS 4.x
* amissl: allow AmiSSL to be used with AmigaOS 4.x builds
* amissl: make AmiSSL v5 a minimum requirement
* asyn-ares: make a single alloc out of hostname + async data
* asyn-thread: fix socket leak on OOM
* asyn-thread: make getaddrinfo_complete return CURLcode
* base64: base64url encoding has no padding
* BUGS.md: improve language
* build: improve OS string in CMake and `config-win32.h`
* cert.d: clarify that escape character works for file paths
* cirrus.yml: replace py38-pip with py39-pip
* cirrus/freebsd-ci: bootstrap the pip installer
* cmake: add detection of threadsafe feature
* cmake: do not force Windows target versions
* cmake: fix build for mingw cross compile
* cmake: link curl to its dependencies with PRIVATE
* cmake: remove APPEND in export(TARGETS)
* cmake: set feature PSL if present
* cmake: support ngtcp2 boringssl backend
* cmdline-opts/gen.pl: improve performance
* config: remove the check for and use of SIZEOF_SHORT
* configure: -pthread not available on AmigaOS 4.x
* configure: check for the stdatomic.h header in configure
* configure: fix --disable-headers-api
* configure: fix broken m4 syntax in TLS options
* configure: fixup bsdsocket detection code for AmigaOS 4.x
* configure: if asked to use TLS, fail if no TLS lib was detected
* configure: introduce CURL_SIZEOF
* connect: add quic connection information
* connect: close the happy eyeballs loser connection when using QUIC
* connect: revert the use of IP*_RECVERR
* connect: set socktype/protocol correctly
* cookie: reject cookies with "control bytes"
* cookie: treat a blank domain in Set-Cookie: as non-existing
* cookie: use %zu to infof() for size_t values
* curl-compilers.m4: make icc use -diag* options and disable two warnings
* curl-config: quote directories with potential space
* curl-confopts: remove leftover AC_REQUIREs
* curl-functions.m4: check whether atomics can link
* curl-wolfssl.m4: add options header when building test code
* curl.h: CURLE_CONV_FAILED is obsoleted
* curl.h: include  on SunOS
* curl: output warning when a cookie is dropped due to size
* curl: writeout: fix repeated header outputs
* Curl_close: call Curl_resolver_cancel to avoid memory-leak
* curl_easy_header: Add CURLH_PSEUDO to sanity check
* curl_mime_data.3: polish the wording
* curl_multi_timeout.3: clarify usage
* CURLINFO_SPEED_UPLOAD/DOWNLOAD.3: fix examples
* CURLOPT_BUFFERSIZE.3: add upload buffersize to see also
* CURLOPT_CONNECT_ONLY.3: clarify multi API use
* CURLOPT_SERVER_RESPONSE_TIMEOUT: the new name
* digest: fix memory leak, fix not quoted 'opaque'
* digest: fix missing increment of 'nc' value for auth-int
* digest: pass over leading spaces in qop values
* digest: reject broken header with session protocol but without qop
* docs/cmdline-opts/gen.pl: encode leading single and double quotes
* docs/cmdline-opts: fix example and categories for --form-escape
* docs/cmdline: mark fail and fail-with-body as mutually exclusive
* docs: add dns category to --resolve
* docs: explain curl_easy_escape/unescape curl handle is ignored
* docs: remove him/her/he/she from documentation
* doh: move doh related struct definitions to doh.h
* doh: use https protocol by default
* easy_lock.h: include sched.h if available to fix build
* easy_lock.h: use __asm__ instead of asm to fix build
* easy_lock: fix build for mingw
* easy_lock: fix build with icc
* easy_lock: 

[ANNOUNCEMENT] Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.84

2022-07-09 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.84
* libcurl4  7.84
* libcurl-devel 7.84
* libcurl-doc   7.84
* mingw64-x86_64-curl   7.84
* mingw64-i686-curl 7.84

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl7.84

Public curl releases:209
Command line options:248
curl_easy_setopt() options:  297
Public functions in libcurl:  88
Contributors:   2652

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following changes:

* curl: add --rate to set max request rate per time unit
* curl: deprecate --random-file and --egd-file
* curl_version_info: add CURL_VERSION_THREADSAFE
* CURLINFO_CAPATH/CAINFO: get the default CA paths from libcurl
* lib: make curl_global_init() threadsafe when possible
* libssh2: add CURLOPT_SSH_HOSTKEYFUNCTION
* opts: deprecate RANDOM_FILE and EGDSOCKET
* socks: support unix sockets for socks proxy

This release includes the following bugfixes:

* aws-sigv4: fix potentional NULL pointer arithmetic
* bindlocal: don't use a random port if port number would wrap
* c-hyper: mark status line as status for Curl_client_write()
* ci: avoid `cmake -Hpath`
* CI: bump FreeBSD 13.0 to 13.1
* ci: update github actions
* cmake: add libpsl support
* cmake: do not add libcurl.rc to the static libcurl library
* cmake: enable curl.rc for all Windows targets
* cmake: fix detecting libidn2
* cmake: support adding a suffix to the OS value
* configure: skip libidn2 detection when winidn is used
* configure: use the SED value to invoke sed
* configure: warn about rustls being experimental
* content_encoding: return error on too many compression steps
* cookie: address secure domain overlay
* cookie: apply limits
* copyright.pl: parse and use .reuse/dep5 for skips
* copyright: make repository REUSE compliant
* curl.1: add a few see also --tls-max
* curl.1: mention exit code zero too
* curl: re-enable --no-remote-name
* curl_easy_pause.3: remove explanation of progress function
* curl_getdate.3: document that some illegal dates pass through
* Curl_parsenetrc: don't access local pwbuf outside of scope
* curl_url_set.3: clarify by default using known schemes only
* CURLOPT_ALTSVC.3: document the file format
* CURLOPT_FILETIME.3: fix the protocols this works with
* CURLOPT_HTTPHEADER.3: improve comment in example
* CURLOPT_NETRC.3: document the .netrc file format
* CURLOPT_PORT.3: We discourage using this option
* CURLOPT_RANGE.3: remove ranged upload advice
* digest: added detection of more syntax error in server headers
* digest: tolerate missing "realm"
* digest: unquote realm and nonce before processing
* DISABLED: disable 1021 for hyper again
* docs/cmdline-opts: add copyright and license identifier to each file
* docs/CONTRIBUTE.md: document the 'needs-votes' concept
* docs: clarify data replacement policy for MIME API
* doh: remove UNITTEST macro definition
* examples/crawler.c: use the curl license
* examples: remove fopen.c and rtsp.c
* FAQ: Clarify Windows double quote usage
* fopen: add Curl_fopen() for better overwriting of files
* ftp: restore protocol state after http proxy CONNECT
* ftp: when failing to do a secure GSSAPI login, fail hard
* GHA/hyper: enable debug in the build
* gssapi: improve handling of errors from gss_display_status
* gssapi: initialize gss_buffer_desc strings
* headers api: remove EXPERIMENTAL tag
* http2: always debug print stream id in decimal with %u
* http2: reject overly many push-promise headers
* http: restore header folding behavior
* hyper: use 'alt-used'
* krb5: return error properly on decode errors
* lib: make more protocol specific struct fields #ifdefed
* libcurl-security.3: add "Secrets in memory"
* libcurl-security.3: document CRLF header injection
* libssh: skip the fake-close when libssh does the right thing
* links: update dead links to the curl-wiki
* log2changes: do not indent empty lines [ci skip]
* macos9: remove partial support
* Makefile.am: fix portability issues
* Makefile.m32: delete obsolete options, improve -On [ci skip]
* Makefile.m32: delete two obsolete OpenSSL options [ci skip]
* Makefile.m32: stop forcing 

Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.84

2022-07-09 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.84
* libcurl4  7.84
* libcurl-devel 7.84
* libcurl-doc   7.84
* mingw64-x86_64-curl   7.84
* mingw64-i686-curl 7.84

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl7.84

Public curl releases:209
Command line options:248
curl_easy_setopt() options:  297
Public functions in libcurl:  88
Contributors:   2652

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following changes:

* curl: add --rate to set max request rate per time unit
* curl: deprecate --random-file and --egd-file
* curl_version_info: add CURL_VERSION_THREADSAFE
* CURLINFO_CAPATH/CAINFO: get the default CA paths from libcurl
* lib: make curl_global_init() threadsafe when possible
* libssh2: add CURLOPT_SSH_HOSTKEYFUNCTION
* opts: deprecate RANDOM_FILE and EGDSOCKET
* socks: support unix sockets for socks proxy

This release includes the following bugfixes:

* aws-sigv4: fix potentional NULL pointer arithmetic
* bindlocal: don't use a random port if port number would wrap
* c-hyper: mark status line as status for Curl_client_write()
* ci: avoid `cmake -Hpath`
* CI: bump FreeBSD 13.0 to 13.1
* ci: update github actions
* cmake: add libpsl support
* cmake: do not add libcurl.rc to the static libcurl library
* cmake: enable curl.rc for all Windows targets
* cmake: fix detecting libidn2
* cmake: support adding a suffix to the OS value
* configure: skip libidn2 detection when winidn is used
* configure: use the SED value to invoke sed
* configure: warn about rustls being experimental
* content_encoding: return error on too many compression steps
* cookie: address secure domain overlay
* cookie: apply limits
* copyright.pl: parse and use .reuse/dep5 for skips
* copyright: make repository REUSE compliant
* curl.1: add a few see also --tls-max
* curl.1: mention exit code zero too
* curl: re-enable --no-remote-name
* curl_easy_pause.3: remove explanation of progress function
* curl_getdate.3: document that some illegal dates pass through
* Curl_parsenetrc: don't access local pwbuf outside of scope
* curl_url_set.3: clarify by default using known schemes only
* CURLOPT_ALTSVC.3: document the file format
* CURLOPT_FILETIME.3: fix the protocols this works with
* CURLOPT_HTTPHEADER.3: improve comment in example
* CURLOPT_NETRC.3: document the .netrc file format
* CURLOPT_PORT.3: We discourage using this option
* CURLOPT_RANGE.3: remove ranged upload advice
* digest: added detection of more syntax error in server headers
* digest: tolerate missing "realm"
* digest: unquote realm and nonce before processing
* DISABLED: disable 1021 for hyper again
* docs/cmdline-opts: add copyright and license identifier to each file
* docs/CONTRIBUTE.md: document the 'needs-votes' concept
* docs: clarify data replacement policy for MIME API
* doh: remove UNITTEST macro definition
* examples/crawler.c: use the curl license
* examples: remove fopen.c and rtsp.c
* FAQ: Clarify Windows double quote usage
* fopen: add Curl_fopen() for better overwriting of files
* ftp: restore protocol state after http proxy CONNECT
* ftp: when failing to do a secure GSSAPI login, fail hard
* GHA/hyper: enable debug in the build
* gssapi: improve handling of errors from gss_display_status
* gssapi: initialize gss_buffer_desc strings
* headers api: remove EXPERIMENTAL tag
* http2: always debug print stream id in decimal with %u
* http2: reject overly many push-promise headers
* http: restore header folding behavior
* hyper: use 'alt-used'
* krb5: return error properly on decode errors
* lib: make more protocol specific struct fields #ifdefed
* libcurl-security.3: add "Secrets in memory"
* libcurl-security.3: document CRLF header injection
* libssh: skip the fake-close when libssh does the right thing
* links: update dead links to the curl-wiki
* log2changes: do not indent empty lines [ci skip]
* macos9: remove partial support
* Makefile.am: fix portability issues
* Makefile.m32: delete obsolete options, improve -On [ci skip]
* Makefile.m32: delete two obsolete OpenSSL options [ci skip]
* Makefile.m32: stop forcing 

[ANNOUNCEMENT] Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.83

2022-05-01 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.83
* libcurl4  7.83
* libcurl-devel 7.83
* libcurl-doc   7.83
* mingw64-x86_64-curl   7.83
* mingw64-i686-curl 7.83

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 7.83.0

Public curl releases:207
Command line options:247
curl_easy_setopt() options:  295
Public functions in libcurl:  88
Contributors:   2625

This release includes the following changes:

* curl: add %header{name} experimental support in -w handling
* curl: add %{header_json} experimental support in -w handling
* curl: add --no-clobber
* curl: add --remove-on-error
* header api: add curl_easy_header and curl_easy_nextheader
* msh3: add support for QUIC and HTTP/3 using msh3

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* appveyor: add Cygwin build
* appveyor: only add MSYS2 to PATH where required
* BearSSL: add CURLOPT_SSL_CIPHER_LIST support
* BearSSL: add CURLOPT_SSL_CTX_FUNCTION support
* BINDINGS.md: add Hollywood binding
* CI: Do not use buildconf. Instead, just use: autoreconf -fi
* CI: install Python package impacket to run SMB test 1451
* configure.ac: move -pthread CFLAGS setting back where it used to be
* configure: bump the copyright year range int the generated output
* conncache: include the zone id in the "bundle" hashkey
* connecache: remove duplicate connc->closure_handle check
* connect: make Curl_getconnectinfo work with conn cache from share handle
* connect: use TCP_KEEPALIVE only if TCP_KEEPIDLE is not defined
* cookie.d: clarify when cookies are sent
* cookies: improve errorhandling for reading cookiefile
* curl/system.h: update ifdef condition for MCST-LCC compiler
* curl: error out if -T and -d are used for the same URL
* curl: error out when options need features not present in libcurl
* curl: escape '?' in generated --libcurl code
* curl: fix segmentation fault for empty output file names.
* curl_easy_header: fix typos in documentation
* CURLINFO_PRIMARY_PORT.3: clarify which port this is
* CURLOPT*TLSAUTH.3: they only work with OpenSSL or GnuTLS
* CURLOPT_DISALLOW_USERNAME_IN_URL.3: use uppercase URL
* CURLOPT_PREQUOTE.3: only works for FTP file transfers, not dirs
* CURLOPT_PROGRESSFUNCTION.3: fix typo in example
* CURLOPT_UNRESTRICTED_AUTH.3: extended explanation
* CURLSHOPT_UNLOCKFUNC.3: fix the callback prototype
* docs/HYPER.md: updated to reflect current hyper build needs
* docs/opts: Mention Schannel client cert type is P12
* docs: Fix missing semicolon in example code
* docs: lots of minor language polish
* English: use American spelling consistently
* fail.d: tweak the description
* firefox-db2pem.sh: make the shell script safer
* ftp: fix error message for partial file upload
* gen.pl: change wording for mutexed options
* GHA: add openssl3 jobs moved over from zuul
* GHA: build hyper with nightly rustc
* GHA: move bearssl jobs over from zuul
* gha: move the event-based test over from Zuul
* gtls: fix build for disabled TLS-SRP
* http2: handle DONE called for the paused stream
* http2: RST the stream if we stop it on our own will
* http: avoid auth/cookie on redirects same host diff port
* http: close the stream (not connection) on time condition abort
* http: reject header contents with nul bytes
* http: return error on colon-less HTTP headers
* http: streamclose "already downloaded"
* hyper: fix status_line() return code
* hyper: fix tests 580 and 581 for hyper
* hyper: no h2c support
* infof: consistent capitalization of warning messages
* ipv4/6.d: clarify that they are about using IP addresses
* json.d: fix typo (overriden -> overridden)
* keepalive-time.d: It takes many probes to detect brokenness
* lib/warnless.[ch]: only check for WIN32 and ignore _WIN32
* lib670: avoid double check result
* lib: #ifdef on USE_HTTP2 better
* lib: fix some misuse of curlx_convert_wchar_to_UTF8
* lib: remove exclamation marks
* libssh2: compare sha256 strings case sensitively
* libssh2: make the md5 comparison fail if wrong length
* libssh: fix build with old libssh versions
* 

Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.83

2022-05-01 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.83
* libcurl4  7.83
* libcurl-devel 7.83
* libcurl-doc   7.83
* mingw64-x86_64-curl   7.83
* mingw64-i686-curl 7.83

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 7.83.0

Public curl releases:207
Command line options:247
curl_easy_setopt() options:  295
Public functions in libcurl:  88
Contributors:   2625

This release includes the following changes:

* curl: add %header{name} experimental support in -w handling
* curl: add %{header_json} experimental support in -w handling
* curl: add --no-clobber
* curl: add --remove-on-error
* header api: add curl_easy_header and curl_easy_nextheader
* msh3: add support for QUIC and HTTP/3 using msh3

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* appveyor: add Cygwin build
* appveyor: only add MSYS2 to PATH where required
* BearSSL: add CURLOPT_SSL_CIPHER_LIST support
* BearSSL: add CURLOPT_SSL_CTX_FUNCTION support
* BINDINGS.md: add Hollywood binding
* CI: Do not use buildconf. Instead, just use: autoreconf -fi
* CI: install Python package impacket to run SMB test 1451
* configure.ac: move -pthread CFLAGS setting back where it used to be
* configure: bump the copyright year range int the generated output
* conncache: include the zone id in the "bundle" hashkey
* connecache: remove duplicate connc->closure_handle check
* connect: make Curl_getconnectinfo work with conn cache from share handle
* connect: use TCP_KEEPALIVE only if TCP_KEEPIDLE is not defined
* cookie.d: clarify when cookies are sent
* cookies: improve errorhandling for reading cookiefile
* curl/system.h: update ifdef condition for MCST-LCC compiler
* curl: error out if -T and -d are used for the same URL
* curl: error out when options need features not present in libcurl
* curl: escape '?' in generated --libcurl code
* curl: fix segmentation fault for empty output file names.
* curl_easy_header: fix typos in documentation
* CURLINFO_PRIMARY_PORT.3: clarify which port this is
* CURLOPT*TLSAUTH.3: they only work with OpenSSL or GnuTLS
* CURLOPT_DISALLOW_USERNAME_IN_URL.3: use uppercase URL
* CURLOPT_PREQUOTE.3: only works for FTP file transfers, not dirs
* CURLOPT_PROGRESSFUNCTION.3: fix typo in example
* CURLOPT_UNRESTRICTED_AUTH.3: extended explanation
* CURLSHOPT_UNLOCKFUNC.3: fix the callback prototype
* docs/HYPER.md: updated to reflect current hyper build needs
* docs/opts: Mention Schannel client cert type is P12
* docs: Fix missing semicolon in example code
* docs: lots of minor language polish
* English: use American spelling consistently
* fail.d: tweak the description
* firefox-db2pem.sh: make the shell script safer
* ftp: fix error message for partial file upload
* gen.pl: change wording for mutexed options
* GHA: add openssl3 jobs moved over from zuul
* GHA: build hyper with nightly rustc
* GHA: move bearssl jobs over from zuul
* gha: move the event-based test over from Zuul
* gtls: fix build for disabled TLS-SRP
* http2: handle DONE called for the paused stream
* http2: RST the stream if we stop it on our own will
* http: avoid auth/cookie on redirects same host diff port
* http: close the stream (not connection) on time condition abort
* http: reject header contents with nul bytes
* http: return error on colon-less HTTP headers
* http: streamclose "already downloaded"
* hyper: fix status_line() return code
* hyper: fix tests 580 and 581 for hyper
* hyper: no h2c support
* infof: consistent capitalization of warning messages
* ipv4/6.d: clarify that they are about using IP addresses
* json.d: fix typo (overriden -> overridden)
* keepalive-time.d: It takes many probes to detect brokenness
* lib/warnless.[ch]: only check for WIN32 and ignore _WIN32
* lib670: avoid double check result
* lib: #ifdef on USE_HTTP2 better
* lib: fix some misuse of curlx_convert_wchar_to_UTF8
* lib: remove exclamation marks
* libssh2: compare sha256 strings case sensitively
* libssh2: make the md5 comparison fail if wrong length
* libssh: fix build with old libssh versions
* 

[ANNOUNCEMENT] Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.82

2022-03-12 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.82
* libcurl4  7.82
* libcurl-devel 7.82
* libcurl-doc   7.82
* mingw64-x86_64-curl   7.82
* mingw64-i686-curl 7.82

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 7.82.0

Public curl releases: 206
Command line options: 245
curl_easy_setopt() options:   295
Public functions in libcurl:  86
Contributors: 2597

This release includes the following changes:

* curl: add --json
* mesalink: remove support

This release includes the following known bugs:

* see /usr/share/doc/curl/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* appveyor: update images from VS 2019 to 2022
* appveyor: use VS 2017 image for the autotools builds
* azure-pipelines: add a build on Windows with libssh
* bearssl: fix connect error on expired cert and no verify
* bearssl: fix EXC_BAD_ACCESS on incomplete CA cert
* bearssl: fix session resumption (session id)
* build: enable -Warith-conversion
* build: fix -Wenum-conversion handling
* build: fix ngtcp2 crypto library detection
* checkprefix: remove strlen calls
* checksrc: fix typo in comment
* CI: move 'distcheck' job from zuul to azure pipelines
* CI: move scan-build job from Zuul to Azure Pipelines
* CI: move the NSS job from zuul to GHA
* ci: move the OpenSSL + c-ares job from Zuul to Circle CI
* CI: move the rustls CI job to GHA from Zuul
* CI: move two jobs from Zuul to Circle CI
* CI: test building wolfssl with --enable-opensslextra
* CI: workflows/wolfssl: install impacket
* circleci: add a job using libssh
* cirlceci: also run a c-ares job on arm with debug enabled
* cmake: fix iOS CMake project generation error
* cmdline-opts/gen.pl: fix option matching to improve references
* config.d: Clarify _curlrc filename is still valid on Windows
* configure.ac: use user-specified gssapi dir when using pkg-config
* configure: change output for cross-compiled alt-svc support
* configure: fix '--enable-code-coverage' typo
* configure: remove support for "embedded ares"
* configure: requires --with-nss-deprecated to build with NSS
* configure: set CURL_LIBRARY_PATH for nghttp2
* configure: support specification of a nghttp2 library path
* configure: use correct CFLAGS for threaded resolver with xlC on AIX
* curl tool: erase some more sensitive command line arguments
* curl-functions.m4: fix LIBRARY_PATH adjustment to avoid eval
* curl-functions.m4: revert DYLD_LIBRARY_PATH tricks in CURL_RUN_IFELSE
* curl-openssl: fix SRP check for OpenSSL 3.0
* curl-openssl: remove the OpenSSL headers and library versions check
* curl.h: fix typo
* curl: remove "separators" (when using globbed URLs)
* curl_getdate.3: remove pointless .PP line
* curl_multi_socket.3: remove callback and typical usage descriptions
* curl_url_set.3: mention when CURLU_ALLOW_SPACE was added
* CURLMOPT_TIMERFUNCTION/DATA.3: fix the examples
* CURLOPT_PROGRESSFUNCTION.3: fix example struct assignment
* CURLOPT_RESOLVE.3: change example port to 443
* CURLOPT_XFERINFOFUNCTION.3: fix example struct assignment
* CURLOPT_XFERINFOFUNCTION.3: fix typo in example
* CURLSHOPT_LOCKFUNC.3: fix typo "relased" -> "released"
* des: fix compile break for OpenSSL without DES
* docs/cmdline-opts: add "mutexed" options for more http versions
* docs/DEPRECATE: remove NPN support in August 2022
* docs: capitalize the name 'Netscape'
* docs: document HTTP/2 not insisting on TLS 1.2
* docs: fix mandoc -T lint formatting complaints
* docs: update IETF links to use datatracker
* examples/curlx: support building with OpenSSL 1.1.0+
* examples/multi-app.c: call curl_multi_remove_handle as well
* formdata: avoid size_t => long typecast overflows
* ftp: provide error message for control bytes in path
* gen.pl: terminate "example" sections better
* gha: add a macOS CI job with libssh
* gskit: Convert to using Curl_poll
* gskit: Fix errors from Curl_strerror refactor
* gskit: Fix initialization of Curl_ssl_gskit struct
* h2/h3: allow CURLOPT_HTTPHEADER change ":scheme"
* hostcheck: fixed to not touch used input strings
* hostcheck: reduce strlen calls on chained certificates
* hostip: avoid unused 

Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.82

2022-03-12 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.82
* libcurl4  7.82
* libcurl-devel 7.82
* libcurl-doc   7.82
* mingw64-x86_64-curl   7.82
* mingw64-i686-curl 7.82

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 7.82.0

Public curl releases: 206
Command line options: 245
curl_easy_setopt() options:   295
Public functions in libcurl:  86
Contributors: 2597

This release includes the following changes:

* curl: add --json
* mesalink: remove support

This release includes the following known bugs:

* see /usr/share/doc/curl/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* appveyor: update images from VS 2019 to 2022
* appveyor: use VS 2017 image for the autotools builds
* azure-pipelines: add a build on Windows with libssh
* bearssl: fix connect error on expired cert and no verify
* bearssl: fix EXC_BAD_ACCESS on incomplete CA cert
* bearssl: fix session resumption (session id)
* build: enable -Warith-conversion
* build: fix -Wenum-conversion handling
* build: fix ngtcp2 crypto library detection
* checkprefix: remove strlen calls
* checksrc: fix typo in comment
* CI: move 'distcheck' job from zuul to azure pipelines
* CI: move scan-build job from Zuul to Azure Pipelines
* CI: move the NSS job from zuul to GHA
* ci: move the OpenSSL + c-ares job from Zuul to Circle CI
* CI: move the rustls CI job to GHA from Zuul
* CI: move two jobs from Zuul to Circle CI
* CI: test building wolfssl with --enable-opensslextra
* CI: workflows/wolfssl: install impacket
* circleci: add a job using libssh
* cirlceci: also run a c-ares job on arm with debug enabled
* cmake: fix iOS CMake project generation error
* cmdline-opts/gen.pl: fix option matching to improve references
* config.d: Clarify _curlrc filename is still valid on Windows
* configure.ac: use user-specified gssapi dir when using pkg-config
* configure: change output for cross-compiled alt-svc support
* configure: fix '--enable-code-coverage' typo
* configure: remove support for "embedded ares"
* configure: requires --with-nss-deprecated to build with NSS
* configure: set CURL_LIBRARY_PATH for nghttp2
* configure: support specification of a nghttp2 library path
* configure: use correct CFLAGS for threaded resolver with xlC on AIX
* curl tool: erase some more sensitive command line arguments
* curl-functions.m4: fix LIBRARY_PATH adjustment to avoid eval
* curl-functions.m4: revert DYLD_LIBRARY_PATH tricks in CURL_RUN_IFELSE
* curl-openssl: fix SRP check for OpenSSL 3.0
* curl-openssl: remove the OpenSSL headers and library versions check
* curl.h: fix typo
* curl: remove "separators" (when using globbed URLs)
* curl_getdate.3: remove pointless .PP line
* curl_multi_socket.3: remove callback and typical usage descriptions
* curl_url_set.3: mention when CURLU_ALLOW_SPACE was added
* CURLMOPT_TIMERFUNCTION/DATA.3: fix the examples
* CURLOPT_PROGRESSFUNCTION.3: fix example struct assignment
* CURLOPT_RESOLVE.3: change example port to 443
* CURLOPT_XFERINFOFUNCTION.3: fix example struct assignment
* CURLOPT_XFERINFOFUNCTION.3: fix typo in example
* CURLSHOPT_LOCKFUNC.3: fix typo "relased" -> "released"
* des: fix compile break for OpenSSL without DES
* docs/cmdline-opts: add "mutexed" options for more http versions
* docs/DEPRECATE: remove NPN support in August 2022
* docs: capitalize the name 'Netscape'
* docs: document HTTP/2 not insisting on TLS 1.2
* docs: fix mandoc -T lint formatting complaints
* docs: update IETF links to use datatracker
* examples/curlx: support building with OpenSSL 1.1.0+
* examples/multi-app.c: call curl_multi_remove_handle as well
* formdata: avoid size_t => long typecast overflows
* ftp: provide error message for control bytes in path
* gen.pl: terminate "example" sections better
* gha: add a macOS CI job with libssh
* gskit: Convert to using Curl_poll
* gskit: Fix errors from Curl_strerror refactor
* gskit: Fix initialization of Curl_ssl_gskit struct
* h2/h3: allow CURLOPT_HTTPHEADER change ":scheme"
* hostcheck: fixed to not touch used input strings
* hostcheck: reduce strlen calls on chained certificates
* hostip: avoid unused 

[ANNOUNCEMENT] Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.81

2022-01-08 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.81
* libcurl4  7.81
* libcurl-devel 7.81
* libcurl-doc   7.81
* mingw64-x86_64-curl   7.81
* mingw64-i686-curl 7.81

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 7.81.0

 Public curl releases: 205
 Command line options: 244
 curl_easy_setopt() options:   295
 Public functions in libcurl:  86
 Contributors: 2558

This release includes the following changes:

 o mime: use percent-escaping for multipart form field and file names [1]

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

 o asyn-ares: ares_getaddrinfo needs no happy eyeballs timer [73]
 o azure: make the "w/o HTTP/SMTP/IMAP" build disable SSL proper [12]
 o BINDINGS: add cURL client for PostgreSQL [68]
 o BINDINGS: add one from Everything curl and update a link
 o checksrc: detect more kinds of NULL comparisons we avoid [105]
 o CI: build examples for additional code verification [75]
 o CI: bump job to use mbedtls 3.1.0 [90]
 o cmake: don't set _USRDLL on a static Windows build [22]
 o cmake: prevent dev warning due to mismatched arg [94]
 o cmake: private identifiers use CURL_ instead of CMAKE_ prefix [40]
 o config.d: update documentation to match the path search
 o configure: add -lm to configure for rustls build. [13]
 o configure: better diagnostics if hyper is built wrong [6]
 o configure: don't enable TLS when --without-* flags are used [17]
 o configure: fix runtime-lib detection on macOS [21]
 o curl.1: require "see also" for every documented option [27]
 o curl: improve error message for --head with -J [42]
 o curl_easy_cleanup.3: remove from multi handle first [3]
 o curl_easy_escape.3: call curl_easy_cleanup in example [58]
 o curl_easy_unescape.3: call curl_easy_cleanup in example [57]
 o curl_multi_init.3: fix EXAMPLE formatting
 o curl_multi_perform/socket_action.3: clarify what errors mean [70]
 o curl_share_setopt.3: split out options into their own manpages [14]
 o CURLOPT_STDERR.3: does not work with libcurl as a win32 DLL [51]
 o digest: compute user:realm:pass digest w/o userhash [45]
 o docs/checksrc: Add documentation for STRERROR [18]
 o docs/cmdline-opts: do not say "protocols: all" [26]
 o docs/examples: workaround broken -Wno-pedantic-ms-format
 o docs/HTTP3: describe how to setup a h3 reverse-proxy for testing [88]
 o docs/INSTALL.md: typo fix : added missing "get" verb [31]
 o docs/URL-SYNTAX.md: space is not fine in a given URL
 o docs: add known bugs list to HTTP3.md [83]
 o docs: address proselint nits [16]
 o docs: consistent manpage SYNOPSIS [47]
 o docs: fix dead links, remove ECH.md
 o docs: fix typo in OpenSSL 3 build instructions [80]
 o docs: Update the Reducing Size section
 o example/progressfunc: remove code for old libcurls [78]
 o examples/multi-single.c: remove WAITMS() [98]
 o FAQ: typo fix : "yout" ➤ "your" [30]
 o ftp: disable warning 4706 in MSVC [85]
 o gen.pl: improve example output format [29]
 o github workflow: add wolfssl (removed from zuul) [103]
 o github/workflows: add mbedtls and mbedtls-clang (removed from zuul) [92]
 o gtls: check return code for gnutls_alpn_set_protocols [86]
 o hash: lazy-alloc the table in Curl_hash_add() [54]
 o http2:set_transfer_url() return early on OOM [53]
 o HTTP3: update quiche build instructions [37]
 o http: enable haproxy support for hyper backend [20]
 o http: Fix CURLOPT_HTTP200ALIASES [89]
 o http_proxy: don't close the socket (too early) [100]
 o insecure.d: detail its use for SFTP and SCP as well [32]
 o insecure.d: expand and clarify [28]
 o libcurl-multi.3: "SOCKS proxy handshakes" are not blocking
 o libcurl-security.3: mention address and URL mitigations
 o libssh2: fix error message for sha256 mismatch
 o libtest: avoid "assignment within conditional expression" [84]
 o lift: ignore is a deprecated config option, use ignoreRules [35]
 o linkcheck.yml: add CI job that checks markdown links [82]
 o m4/curl-compilers: tell clang -Wno-pointer-bool-conversion [99]
 o Makefile.m32: rename -winssl option to -schannel and tidy up [33]
 o mbedTLS: add support for 

Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.81

2022-01-08 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.81
* libcurl4  7.81
* libcurl-devel 7.81
* libcurl-doc   7.81
* mingw64-x86_64-curl   7.81
* mingw64-i686-curl 7.81

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 7.81.0

 Public curl releases: 205
 Command line options: 244
 curl_easy_setopt() options:   295
 Public functions in libcurl:  86
 Contributors: 2558

This release includes the following changes:

 o mime: use percent-escaping for multipart form field and file names [1]

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

 o asyn-ares: ares_getaddrinfo needs no happy eyeballs timer [73]
 o azure: make the "w/o HTTP/SMTP/IMAP" build disable SSL proper [12]
 o BINDINGS: add cURL client for PostgreSQL [68]
 o BINDINGS: add one from Everything curl and update a link
 o checksrc: detect more kinds of NULL comparisons we avoid [105]
 o CI: build examples for additional code verification [75]
 o CI: bump job to use mbedtls 3.1.0 [90]
 o cmake: don't set _USRDLL on a static Windows build [22]
 o cmake: prevent dev warning due to mismatched arg [94]
 o cmake: private identifiers use CURL_ instead of CMAKE_ prefix [40]
 o config.d: update documentation to match the path search
 o configure: add -lm to configure for rustls build. [13]
 o configure: better diagnostics if hyper is built wrong [6]
 o configure: don't enable TLS when --without-* flags are used [17]
 o configure: fix runtime-lib detection on macOS [21]
 o curl.1: require "see also" for every documented option [27]
 o curl: improve error message for --head with -J [42]
 o curl_easy_cleanup.3: remove from multi handle first [3]
 o curl_easy_escape.3: call curl_easy_cleanup in example [58]
 o curl_easy_unescape.3: call curl_easy_cleanup in example [57]
 o curl_multi_init.3: fix EXAMPLE formatting
 o curl_multi_perform/socket_action.3: clarify what errors mean [70]
 o curl_share_setopt.3: split out options into their own manpages [14]
 o CURLOPT_STDERR.3: does not work with libcurl as a win32 DLL [51]
 o digest: compute user:realm:pass digest w/o userhash [45]
 o docs/checksrc: Add documentation for STRERROR [18]
 o docs/cmdline-opts: do not say "protocols: all" [26]
 o docs/examples: workaround broken -Wno-pedantic-ms-format
 o docs/HTTP3: describe how to setup a h3 reverse-proxy for testing [88]
 o docs/INSTALL.md: typo fix : added missing "get" verb [31]
 o docs/URL-SYNTAX.md: space is not fine in a given URL
 o docs: add known bugs list to HTTP3.md [83]
 o docs: address proselint nits [16]
 o docs: consistent manpage SYNOPSIS [47]
 o docs: fix dead links, remove ECH.md
 o docs: fix typo in OpenSSL 3 build instructions [80]
 o docs: Update the Reducing Size section
 o example/progressfunc: remove code for old libcurls [78]
 o examples/multi-single.c: remove WAITMS() [98]
 o FAQ: typo fix : "yout" ➤ "your" [30]
 o ftp: disable warning 4706 in MSVC [85]
 o gen.pl: improve example output format [29]
 o github workflow: add wolfssl (removed from zuul) [103]
 o github/workflows: add mbedtls and mbedtls-clang (removed from zuul) [92]
 o gtls: check return code for gnutls_alpn_set_protocols [86]
 o hash: lazy-alloc the table in Curl_hash_add() [54]
 o http2:set_transfer_url() return early on OOM [53]
 o HTTP3: update quiche build instructions [37]
 o http: enable haproxy support for hyper backend [20]
 o http: Fix CURLOPT_HTTP200ALIASES [89]
 o http_proxy: don't close the socket (too early) [100]
 o insecure.d: detail its use for SFTP and SCP as well [32]
 o insecure.d: expand and clarify [28]
 o libcurl-multi.3: "SOCKS proxy handshakes" are not blocking
 o libcurl-security.3: mention address and URL mitigations
 o libssh2: fix error message for sha256 mismatch
 o libtest: avoid "assignment within conditional expression" [84]
 o lift: ignore is a deprecated config option, use ignoreRules [35]
 o linkcheck.yml: add CI job that checks markdown links [82]
 o m4/curl-compilers: tell clang -Wno-pointer-bool-conversion [99]
 o Makefile.m32: rename -winssl option to -schannel and tidy up [33]
 o mbedTLS: add support for 

[ANNOUNCEMENT] Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.80

2021-11-20 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.80
* libcurl4  7.80
* libcurl-devel 7.80
* libcurl-doc   7.80
* mingw64-x86_64-curl   7.80
* mingw64-i686-curl 7.80

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/RELEASE-NOTES
or
https://curl.se/changes.html


curl and libcurl 7.80.0

 Public curl releases: 204
 Command line options: 243
 curl_easy_setopt() options:   294
 Public functions in libcurl:  86
 Contributors: 2533

This release includes the following changes:

 o CURLOPT_MAXLIFETIME_CONN: maximum allowed lifetime for conn reuse
 o CURLOPT_PREREQFUNCTION: add new callback
 o libssh2: add SHA256 fingerprint support
 o urlapi: add curl_url_strerror()
 o urlapi: support UNC paths in file: URLs on Windows
 o wolfssl: allow setting of groups/curves

This release includes the following known bugs:

* see /usr/share/doc/curl/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

 o .github: retry macos "brew install" command on failure
 o aws-sigv4: make signature work when post data is binary
 o BINDINGS: URL updates
 o build: remove checks for WinSock 1
 o c-hyper: don't abort CONNECT responses early when auth-in-progress
 o c-hyper: make Curl_http propagate errors better
 o c-hyper: make CURLOPT_SUPPRESS_CONNECT_HEADERS work
 o c-hyper: make test 217 run
 o c-hyper: use hyper_request_set_uri_parts to make h2 better
 o checksrc: ignore preprocessor lines
 o CI/makefiles: introduce dedicated test target
 o ci: update Lift config to match requirements of curl build
 o cirrus: remove FreeBSD 11.4 from the matrix
 o cirrus: switch to openldap24-client
 o cleanup: constify unmodified static structs
 o cmake: add CURL_ENABLE_SSL option
 o cmake: fix error getting LOCATION property on non-imported target
 o CMake: restore support for SecureTransport on iOS
 o cmake: with OpenSSL, define OPENSSL_SUPPRESS_DEPRECATED
 o cmdline-opts: made the 'Added:' field mandatory
 o configure.ac: replace krb5-config with pkg-config
 o configure: when hyper is selected, deselect nghttp2
 o connect: use sysaddr_un from sys/un.h or custom-defined for windows
 o curl-confopts.m4:  remove --enable/disable-hidden-symbols
 o curl-openssl.m4: modify library order for openssl linking
 o curl-openssl: pass argument to sed single-quoted
 o curl.1: remove mentions of really old version changes
 o curl: actually append "-" to --range without number only
 o curl: correct grammar in generated libcurl code
 o curl: print help descriptions in an aligned right column
 o curl_gssapi: fix link error on macOS Monterey
 o curl_multi_socket_action.3: add a "RETURN VALUE" section
 o curl_ntlm_core: use OpenSSL only if DES is available
 o Curl_updateconninfo: store addresses for QUIC connections too
 o CURLOPT_ALTSVC_CTRL.3: mention conn reuse is preferred
 o CURLOPT_HSTSWRITEFUNCTION.3: using CURLOPT_HSTS_CTRL is required
 o CURLOPT_HTTPHEADER.3: add descripion for specific headers
 o docs/HTTP3: improve build instructions
 o docs/Makefile.am: repair 'make html'
 o docs: fix typo in CURLOPT_TRAILERFUNCTION example
 o docs: provide "RETURN VALUE" section for more func manpages
 o docs: reduce use of "very"
 o doh: remove experimental code for DoH with GET
 o examples/htmltidy: correct wrong printf() use
 o examples/imap-append: fix end-of-data check
 o ftp: make the MKD retry to retry once per directory
 o gen.pl: insert the current date and version in generated man page
 o gen.pl: replace leading single quotes with \(aq
 o http2: make getsock not wait for write if there's no remote window
 o HTTP3: fix the HTTP/3 Explained book link
 o http: fix Basic auth with empty name field in URL
 o http: reject HTTP response codes < 100
 o http: remove assert that breaks hyper
 o http: set content length earlier
 o http_proxy: make hyper CONNECT() return the correct error code
 o http_proxy: multiple CONNECT with hyper done better
 o hyper: disable test 1294 since hyper doesn't allow such crazy headers
 o hyper: does not support disabling CURLOPT_HTTP_TRANSFER_DECODING
 o hyper: pass the CONNECT line to the debug callback
 o imap: display quota information
 o INSTALL: update symbol hiding option
 o lib/mk-ca-bundle.pl: skip certs passed Not Valid After 

Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.80

2021-11-20 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.80
* libcurl4  7.80
* libcurl-devel 7.80
* libcurl-doc   7.80
* mingw64-x86_64-curl   7.80
* mingw64-i686-curl 7.80

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/RELEASE-NOTES
or
https://curl.se/changes.html


curl and libcurl 7.80.0

 Public curl releases: 204
 Command line options: 243
 curl_easy_setopt() options:   294
 Public functions in libcurl:  86
 Contributors: 2533

This release includes the following changes:

 o CURLOPT_MAXLIFETIME_CONN: maximum allowed lifetime for conn reuse
 o CURLOPT_PREREQFUNCTION: add new callback
 o libssh2: add SHA256 fingerprint support
 o urlapi: add curl_url_strerror()
 o urlapi: support UNC paths in file: URLs on Windows
 o wolfssl: allow setting of groups/curves

This release includes the following known bugs:

* see /usr/share/doc/curl/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

 o .github: retry macos "brew install" command on failure
 o aws-sigv4: make signature work when post data is binary
 o BINDINGS: URL updates
 o build: remove checks for WinSock 1
 o c-hyper: don't abort CONNECT responses early when auth-in-progress
 o c-hyper: make Curl_http propagate errors better
 o c-hyper: make CURLOPT_SUPPRESS_CONNECT_HEADERS work
 o c-hyper: make test 217 run
 o c-hyper: use hyper_request_set_uri_parts to make h2 better
 o checksrc: ignore preprocessor lines
 o CI/makefiles: introduce dedicated test target
 o ci: update Lift config to match requirements of curl build
 o cirrus: remove FreeBSD 11.4 from the matrix
 o cirrus: switch to openldap24-client
 o cleanup: constify unmodified static structs
 o cmake: add CURL_ENABLE_SSL option
 o cmake: fix error getting LOCATION property on non-imported target
 o CMake: restore support for SecureTransport on iOS
 o cmake: with OpenSSL, define OPENSSL_SUPPRESS_DEPRECATED
 o cmdline-opts: made the 'Added:' field mandatory
 o configure.ac: replace krb5-config with pkg-config
 o configure: when hyper is selected, deselect nghttp2
 o connect: use sysaddr_un from sys/un.h or custom-defined for windows
 o curl-confopts.m4:  remove --enable/disable-hidden-symbols
 o curl-openssl.m4: modify library order for openssl linking
 o curl-openssl: pass argument to sed single-quoted
 o curl.1: remove mentions of really old version changes
 o curl: actually append "-" to --range without number only
 o curl: correct grammar in generated libcurl code
 o curl: print help descriptions in an aligned right column
 o curl_gssapi: fix link error on macOS Monterey
 o curl_multi_socket_action.3: add a "RETURN VALUE" section
 o curl_ntlm_core: use OpenSSL only if DES is available
 o Curl_updateconninfo: store addresses for QUIC connections too
 o CURLOPT_ALTSVC_CTRL.3: mention conn reuse is preferred
 o CURLOPT_HSTSWRITEFUNCTION.3: using CURLOPT_HSTS_CTRL is required
 o CURLOPT_HTTPHEADER.3: add descripion for specific headers
 o docs/HTTP3: improve build instructions
 o docs/Makefile.am: repair 'make html'
 o docs: fix typo in CURLOPT_TRAILERFUNCTION example
 o docs: provide "RETURN VALUE" section for more func manpages
 o docs: reduce use of "very"
 o doh: remove experimental code for DoH with GET
 o examples/htmltidy: correct wrong printf() use
 o examples/imap-append: fix end-of-data check
 o ftp: make the MKD retry to retry once per directory
 o gen.pl: insert the current date and version in generated man page
 o gen.pl: replace leading single quotes with \(aq
 o http2: make getsock not wait for write if there's no remote window
 o HTTP3: fix the HTTP/3 Explained book link
 o http: fix Basic auth with empty name field in URL
 o http: reject HTTP response codes < 100
 o http: remove assert that breaks hyper
 o http: set content length earlier
 o http_proxy: make hyper CONNECT() return the correct error code
 o http_proxy: multiple CONNECT with hyper done better
 o hyper: disable test 1294 since hyper doesn't allow such crazy headers
 o hyper: does not support disabling CURLOPT_HTTP_TRANSFER_DECODING
 o hyper: pass the CONNECT line to the debug callback
 o imap: display quota information
 o INSTALL: update symbol hiding option
 o lib/mk-ca-bundle.pl: skip certs passed Not Valid After 

[ANNOUNCEMENT] Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.79.1

2021-09-26 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.79.1
* libcurl4  7.79.1
* libcurl-devel 7.79.1
* libcurl-doc   7.79.1
* mingw64-x86_64-curl   7.79.1
* mingw64-i686-curl 7.79.1

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 7.79.1

 Public curl releases: 203
 Command line options: 242
 curl_easy_setopt() options:   290
 Public functions in libcurl:  85
 Contributors: 2489

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* Curl_http2_setup: don't change connection data on repeat invokes
* curl_multi_fdset: make FD_SET() not operate on sockets out of range
* dist: provide lib/.checksrc in the tarball
* FAQ: add GOPHERS + curl works on data, not files
* hsts: CURLSTS_FAIL from hsts read callback should fail transfer
* hsts: handle unlimited expiry
* http: fix the broken >3 digit response code detection
* strerror: use sys_errlist instead of strerror on Windows
* test1184: disable
* tests/sshserver.pl: make it work with openssh-8.7p1


curl and libcurl 7.79.0 September 15 2021

This release includes the following changes:

* bearssl: support CURLOPT_CAINFO_BLOB
* http: consider cookies over localhost to be secure
* secure transport: support CURLINFO_CERTINFO

This release includes the following bugfixes:

* CVE-2021-22945: clear the leftovers pointer when sending succeeds
* CVE-2021-22946: do not ignore --ssl-reqd
* CVE-2021-22947: reject STARTTLS server response pipelining
* ares: use ares_getaddrinfo()
* asyn-ares.c: move all version number checks to the top
* auth: do not append zero-terminator to authorisation id in kerberos
* auth: properly handle byte order in kerberos security message
* auth: use sasl authzid option in kerberos
* auth: we do not support a security layer after kerberos authentication
* BINDINGS.md: update links to use https where available
* build: fix compiler warnings
* c-hyper: deal with Expect: 100-continue combined with POSTFIELDS
* c-hyper: fix header value passed to debug callback
* c-hyper: handle HTTP/1.1 => HTTP/1.0 downgrade on reused connection
* c-hyper: initial step for 100-continue support
* c-hyper: initial support for "dumping" 1xx HTTP responses
* c-hyper: remove the hyper_executor_poll() loop from Curl_http
* CI/cirrus: reduce compile time with increased parallism
* CI: use GitHub Container Registry instead of Docker Hub
* cirrus: Add FreeBSD 13.0 job and disable sanitizer build
* cmake: avoid poll() on macOS
* cmake: sync CURL_DISABLE options
* codeql: fix error "Resource not accessible by integration"
* compressed.d: it's a request, not an order
* config.d: escape the backslash properly
* config.d: note that curlrc is used even when --config
* config: get rid of the unused HAVE_SIG_ATOMIC_T et. al.
* configure.ac: revert bad nghttp2 library detection improvements
* configure: error out if both ngtcp2 and quiche are specified
* configure: make --disable-hsts work
* configure: set classic mingw minimum OS version to XP
* configure: tweak nghttp2 library name fix
* connect: get local port + ip also when reusing connections
* connect: remove superfluous conditional
* curl-openssl.m4: check lib64 for the pkg-config file
* curl-openssl.m4: show correct output for OpenSSL v3
* curl.1: mention "global" flags
* curl.1: provide examples for each option
* curl: add warning for ignored data after quoted form parameter
* curl: add warning for incompatible parameters usage
* curl: better error message when -O fails to get a good name
* curl: stop retry if Retry-After: is longer than allowed
* curl_easy_setopt.3: improve the string copy wording
* Curl_hsts_loadcb: don't attempt to load if hsts wasn't inited
* curl_setup.h: sync values for HTTP_ONLY
* curl_url_get.3: clarify about path and query
* CURLMOPT_TIMERFUNCTION.3: remove misplaced "time"
* CURLOPT_DOH_URL.3: CURLOPT_OPENSOCKETFUNCTION is not inherited
* CURLOPT_SSL_CTX_*.3: tidy up the example
* CURLOPT_UNIX_SOCKET_PATH.3: remove nginx reference, add see also
* docs/MQTT: update state of username/password support
* docs: remove experimental mentions from HSTS and MQTT
* docs: the security list 

Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.79.1

2021-09-26 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.79.1
* libcurl4  7.79.1
* libcurl-devel 7.79.1
* libcurl-doc   7.79.1
* mingw64-x86_64-curl   7.79.1
* mingw64-i686-curl 7.79.1

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:

/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html


curl and libcurl 7.79.1

 Public curl releases: 203
 Command line options: 242
 curl_easy_setopt() options:   290
 Public functions in libcurl:  85
 Contributors: 2489

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* Curl_http2_setup: don't change connection data on repeat invokes
* curl_multi_fdset: make FD_SET() not operate on sockets out of range
* dist: provide lib/.checksrc in the tarball
* FAQ: add GOPHERS + curl works on data, not files
* hsts: CURLSTS_FAIL from hsts read callback should fail transfer
* hsts: handle unlimited expiry
* http: fix the broken >3 digit response code detection
* strerror: use sys_errlist instead of strerror on Windows
* test1184: disable
* tests/sshserver.pl: make it work with openssh-8.7p1


curl and libcurl 7.79.0 September 15 2021

This release includes the following changes:

* bearssl: support CURLOPT_CAINFO_BLOB
* http: consider cookies over localhost to be secure
* secure transport: support CURLINFO_CERTINFO

This release includes the following bugfixes:

* CVE-2021-22945: clear the leftovers pointer when sending succeeds
* CVE-2021-22946: do not ignore --ssl-reqd
* CVE-2021-22947: reject STARTTLS server response pipelining
* ares: use ares_getaddrinfo()
* asyn-ares.c: move all version number checks to the top
* auth: do not append zero-terminator to authorisation id in kerberos
* auth: properly handle byte order in kerberos security message
* auth: use sasl authzid option in kerberos
* auth: we do not support a security layer after kerberos authentication
* BINDINGS.md: update links to use https where available
* build: fix compiler warnings
* c-hyper: deal with Expect: 100-continue combined with POSTFIELDS
* c-hyper: fix header value passed to debug callback
* c-hyper: handle HTTP/1.1 => HTTP/1.0 downgrade on reused connection
* c-hyper: initial step for 100-continue support
* c-hyper: initial support for "dumping" 1xx HTTP responses
* c-hyper: remove the hyper_executor_poll() loop from Curl_http
* CI/cirrus: reduce compile time with increased parallism
* CI: use GitHub Container Registry instead of Docker Hub
* cirrus: Add FreeBSD 13.0 job and disable sanitizer build
* cmake: avoid poll() on macOS
* cmake: sync CURL_DISABLE options
* codeql: fix error "Resource not accessible by integration"
* compressed.d: it's a request, not an order
* config.d: escape the backslash properly
* config.d: note that curlrc is used even when --config
* config: get rid of the unused HAVE_SIG_ATOMIC_T et. al.
* configure.ac: revert bad nghttp2 library detection improvements
* configure: error out if both ngtcp2 and quiche are specified
* configure: make --disable-hsts work
* configure: set classic mingw minimum OS version to XP
* configure: tweak nghttp2 library name fix
* connect: get local port + ip also when reusing connections
* connect: remove superfluous conditional
* curl-openssl.m4: check lib64 for the pkg-config file
* curl-openssl.m4: show correct output for OpenSSL v3
* curl.1: mention "global" flags
* curl.1: provide examples for each option
* curl: add warning for ignored data after quoted form parameter
* curl: add warning for incompatible parameters usage
* curl: better error message when -O fails to get a good name
* curl: stop retry if Retry-After: is longer than allowed
* curl_easy_setopt.3: improve the string copy wording
* Curl_hsts_loadcb: don't attempt to load if hsts wasn't inited
* curl_setup.h: sync values for HTTP_ONLY
* curl_url_get.3: clarify about path and query
* CURLMOPT_TIMERFUNCTION.3: remove misplaced "time"
* CURLOPT_DOH_URL.3: CURLOPT_OPENSOCKETFUNCTION is not inherited
* CURLOPT_SSL_CTX_*.3: tidy up the example
* CURLOPT_UNIX_SOCKET_PATH.3: remove nginx reference, add see also
* docs/MQTT: update state of username/password support
* docs: remove experimental mentions from HSTS and MQTT
* docs: the security list 

[ANNOUNCEMENT] Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.78

2021-07-26 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.78
* libcurl4  7.78
* libcurl-devel 7.78
* libcurl-doc   7.78
* mingw64-x86_64-curl   7.78
* mingw64-i686-curl 7.78

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details see:

/usr/share/doc/curl/CHANGES https://curl.se/changes.html

curl and libcurl 7.78

Public curl releases:201
Command line options:242
curl_easy_setopt() options:  290
Public functions in libcurl:  85
Contributors:   2459

This release includes the following changes:

* curl_url_set: reject spaces in URLs w/o CURLU_ALLOW_SPACE [118]
* CURLE_SETOPT_OPTION_SYNTAX: new error name for wrong setopt syntax [40]
* hostip: make 'localhost' return fixed values [16]
* mbedtls: add support for cert and key blob options [11]
* metalink: remove all support for it [54]
* mqtt: add support for username and password [91]

This release includes the following known bugs:

* see /usr/share/doc/curl/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* --socks4[a]: clarify where the host name is resolved [107]
* ares: always store IPv6 addresses first [20]
* asyn-ares: remove check for 'data' in Curl_resolver_cancel [89]
* bearssl: explicitly initialize all fields of Curl_ssl [1]
* bearssl: remove incorrect const on variable that is modified [1]
* build: fix compiler warnings when CURL_DISABLE_VERBOSE_STRINGS [155]
* c-hyper: abort CONNECT response reading early on non 2xx responses [75]
* c-hyper: add support for transfer-encoding in the request [121]
* c-hyper: bail on too long response headers [115]
* c-hyper: clear NTLM auth buffer when request is issued [23]
* c-hyper: convert HYPERE_INVALID_PEER_MESSAGE to CURLE_UNSUPPORTED_PROTOCOL 
[21]
* c-hyper: fix NTLM on closed connection tested with test159 [4]
* c-hyper: fix the uploaded field in progress callbacks [78]
* c-hyper: handle NULL from hyper_buf_copy() [19]
* c-hyper: support CURLINFO_STARTTRANSFER_TIME [29]
* c-hyper: support CURLOPT_HEADER [32]
* ccsidcurl: fix the compile errors [27]
* CI/cirrus: install impacket from PyPI instead of FreeBSD packages [166]
* CI: add bearssl build [1]
* CI: add Circle CI [92]
* CI: add jobs using Zuul [86]
* CI: delete --enable-hsts option (it is the default now) [2]
* CI: remove travis details [144]
* cleanup: spell DoH with a lowercase o [172]
* cmake: add CURL_DISABLE_NTLM option [44]
* cmake: avoid leaking absolute paths into exported config [3]
* cmake: fix IoctlSocket FIONBIO check [156]
* cmake: fix support for UnixSockets feature on Win32 [104]
* cmake: remove libssh2 feature checks [122]
* cmake: try well-known send/recv signature for Apple [12]
* configure.ac: make non-executable [109]
* configure/cmake: remove checks for many unused functions [95]
* configure: add --disable-ntlm option [45]
* configure: disable RTSP when hyper is selected [68]
* configure: do not strip out debug flags [110]
* configure: fix nghttp2 library name for static builds [157]
* configure: inhibit the implicit-fallthrough warning on gcc-12 [106]
* configure: rename get-easy-option configure option to get-easy-options [81]
* conn_shutdown: if closed during CONNECT cleanup properly [59]
* conncache: lowercase the hash key for better match [5]
* cookies: track expiration in jar to optimize removals [25]
* copyright: add boiler-plate headers to CI config files [143]
* crustls: bump crustls version and use new URL [119]
* curl.h:  is supported by VxWorks7 [102]
* curl.h: include sys/select.h for NuttX RTOS [100]
* curl: ignore blank --output-dir [57]
* curl_endian: remove the unused Curl_write64_le function [85]
* curl_multibyte: Remove local encoding fallbacks [58]
* Curl_ntlm_core_mk_nt_hash: fix OOM in error path [8]
* Curl_ssl_getsessionid: fail if no session cache exists [14]
* CURLOPT_WRITEFUNCTION.3: minor update of the example [80]
* docs/BINDINGS: fix outdated links [116]
* docs/examples: use curl_multi_poll() in multi examples [152]
* docs/INSTALL: remove mentions of configure --with-darwin-ssl [55]
* docs: document missing arguments to commands [160]
* docs: fix inconsistencies in EGDSOCKET documentation [159]
* docs: fix incorrect argument name reference [161]
* docs: Fix typos [146]
* docs: make docs for --etag-save match the program behaviour [169]
* docs: use --max-redirs 

Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.78

2021-07-26 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.78
* libcurl4  7.78
* libcurl-devel 7.78
* libcurl-doc   7.78
* mingw64-x86_64-curl   7.78
* mingw64-i686-curl 7.78

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details see:

/usr/share/doc/curl/CHANGES https://curl.se/changes.html

curl and libcurl 7.78

Public curl releases:201
Command line options:242
curl_easy_setopt() options:  290
Public functions in libcurl:  85
Contributors:   2459

This release includes the following changes:

* curl_url_set: reject spaces in URLs w/o CURLU_ALLOW_SPACE [118]
* CURLE_SETOPT_OPTION_SYNTAX: new error name for wrong setopt syntax [40]
* hostip: make 'localhost' return fixed values [16]
* mbedtls: add support for cert and key blob options [11]
* metalink: remove all support for it [54]
* mqtt: add support for username and password [91]

This release includes the following known bugs:

* see /usr/share/doc/curl/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* --socks4[a]: clarify where the host name is resolved [107]
* ares: always store IPv6 addresses first [20]
* asyn-ares: remove check for 'data' in Curl_resolver_cancel [89]
* bearssl: explicitly initialize all fields of Curl_ssl [1]
* bearssl: remove incorrect const on variable that is modified [1]
* build: fix compiler warnings when CURL_DISABLE_VERBOSE_STRINGS [155]
* c-hyper: abort CONNECT response reading early on non 2xx responses [75]
* c-hyper: add support for transfer-encoding in the request [121]
* c-hyper: bail on too long response headers [115]
* c-hyper: clear NTLM auth buffer when request is issued [23]
* c-hyper: convert HYPERE_INVALID_PEER_MESSAGE to CURLE_UNSUPPORTED_PROTOCOL 
[21]
* c-hyper: fix NTLM on closed connection tested with test159 [4]
* c-hyper: fix the uploaded field in progress callbacks [78]
* c-hyper: handle NULL from hyper_buf_copy() [19]
* c-hyper: support CURLINFO_STARTTRANSFER_TIME [29]
* c-hyper: support CURLOPT_HEADER [32]
* ccsidcurl: fix the compile errors [27]
* CI/cirrus: install impacket from PyPI instead of FreeBSD packages [166]
* CI: add bearssl build [1]
* CI: add Circle CI [92]
* CI: add jobs using Zuul [86]
* CI: delete --enable-hsts option (it is the default now) [2]
* CI: remove travis details [144]
* cleanup: spell DoH with a lowercase o [172]
* cmake: add CURL_DISABLE_NTLM option [44]
* cmake: avoid leaking absolute paths into exported config [3]
* cmake: fix IoctlSocket FIONBIO check [156]
* cmake: fix support for UnixSockets feature on Win32 [104]
* cmake: remove libssh2 feature checks [122]
* cmake: try well-known send/recv signature for Apple [12]
* configure.ac: make non-executable [109]
* configure/cmake: remove checks for many unused functions [95]
* configure: add --disable-ntlm option [45]
* configure: disable RTSP when hyper is selected [68]
* configure: do not strip out debug flags [110]
* configure: fix nghttp2 library name for static builds [157]
* configure: inhibit the implicit-fallthrough warning on gcc-12 [106]
* configure: rename get-easy-option configure option to get-easy-options [81]
* conn_shutdown: if closed during CONNECT cleanup properly [59]
* conncache: lowercase the hash key for better match [5]
* cookies: track expiration in jar to optimize removals [25]
* copyright: add boiler-plate headers to CI config files [143]
* crustls: bump crustls version and use new URL [119]
* curl.h:  is supported by VxWorks7 [102]
* curl.h: include sys/select.h for NuttX RTOS [100]
* curl: ignore blank --output-dir [57]
* curl_endian: remove the unused Curl_write64_le function [85]
* curl_multibyte: Remove local encoding fallbacks [58]
* Curl_ntlm_core_mk_nt_hash: fix OOM in error path [8]
* Curl_ssl_getsessionid: fail if no session cache exists [14]
* CURLOPT_WRITEFUNCTION.3: minor update of the example [80]
* docs/BINDINGS: fix outdated links [116]
* docs/examples: use curl_multi_poll() in multi examples [152]
* docs/INSTALL: remove mentions of configure --with-darwin-ssl [55]
* docs: document missing arguments to commands [160]
* docs: fix inconsistencies in EGDSOCKET documentation [159]
* docs: fix incorrect argument name reference [161]
* docs: Fix typos [146]
* docs: make docs for --etag-save match the program behaviour [169]
* docs: use --max-redirs 

[ANNOUNCEMENT] Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.77

2021-05-30 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.77
* libcurl4  7.77
* libcurl-devel 7.77
* libcurl-doc   7.77
* mingw64-x86_64-curl   7.77
* mingw64-i686-curl 7.77

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation
for complete details:

https://curl.se/changes.html

curl and libcurl 7.77.0

Public curl releases:200
Command line options:242
curl_easy_setopt() options:  290
Public functions in libcurl:  85
Contributors:   2408

This release includes the following changes:

* configure: make the TLS library choice(s) explicit [3]
* curl: ignore options asking for SSLv2 or SSLv3 [10]
* hsts: enable by default [8]
* SSL: support in-memory CA certs for some backends [85]
* vtls: refuse setting any SSL version [9]

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* CVE-2021-22297: schannel cipher selection surprise [132]
* CVE-2021-22298: TELNET stack contents disclosure [131]
* CVE-2021-22901: TLS session caching disaster [130]
* AmigaOS: add functions definitions for SHA256 [126]
* build: fix compilation for Windows UWP platform [82]
* c-hyper: don't write to set.writeheader if null [67]
* c-hyper: fix handling of zero-byte chunk from hyper [39]
* c-hyper: handle body on HYPER_TASK_EMPTY [104]
* checksrc: complain on == NULL or != 0 checks in conditions [20]
* CI/cirrus: add shared and static Windows release builds [102]
* cmake: add CURL_ENABLE_EXPORT_TARGET option [133]
* cmake: check for getppid and utimes [87]
* cmake: detect CURL_SA_FAMILY_T [124]
* cmake: fix two invokes result in different curl_config.h [123]
* cmake: make libcurl output filename configurable [41]
* cmake: Use multithreaded compilation on VS 2008+ [122]
* config: remove now-unused macros [107]
* configure: if asked for, fail if ldap is not found [109]
* configure: provide --with-openssl, deprecate --with-ssl [15]
* conn: add 'attach' to protocol handler, make libssh2 use it [119]
* connect: use CURL_SA_FAMILY_T for portability [34]
* ConnectionExists: respect requests for h1 connections better
* cookie: CURLOPT_COOKIEFILE set to NULL switches off cookies [1]
* curl-wolfssl.m4: without custom include path, assume /usr/include [116]
* curl: include libmetalink version in --version output [111]
* Curl_http_header: check for colon when matching Persistent-Auth [51]
* Curl_http_input_auth: require valid separator after negotiation type [52]
* Curl_input_digest: require space after Digest [50]
* curl_mprintf.3: add description [73]
* curl_setup: provide the shutdown flags wider [33]
* curl_url_set.3: add memory management information [38]
* CURLcode: add CURLE_SSL_CLIENTCERT [47]
* CURLOPT_CAPATH.3: defaults to a path, not NULL [103]
* CURLOPT_IPRESOLVE: preventing wrong IP version from being used [125]
* CURLOPT_POSTFIELDS.3: clarify how it gets the size of the data [40]
* data_pending: check only SECONDARY socket for FTP(S) transfers [117]
* docs/TheArtOfHttpScripting: fix markdown links [129]
* docs: camelcase it like GitHub everywhere [62]
* docs: cookies from HTTP headers need domain set [121]
* docs: fix typo in fail-with-body doc [63]
* docs: improve INTERNALS.md regarding getsock cb [105]
* docs: replace dots with dashes in markdown enums [101]
* easy: ignore sigpipe in curl_easy_send [69]
* FILEFORMAT: mention sectransp as a feature [89]
* GIT-INFO: suggest using autoreconf instead of buildconf [96]
* github: add a workflow with libssh2 on macOS using cmake [81]
* github: inhibit deprecated declarations for clang on macOS [118]
* GnuTLS: don't allow TLS 1.3 for versions that don't support it [77]
* gnutls: make setting only the MAX TLS allowed version work [83]
* gskit: fix CURL_DISABLE_PROXY build [57]
* gskit: fix undefined reference to 'conn' [58]
* hostip.h: remove declaration of unimplemented function [108]
* hostip: remove the debug code for LocalHost [113]
* http2: call the handle-closed function correctly on closed stream [37]
* http2: fix a resource leak in push_promise() [54]
* http2: fix resource leaks in set_transfer_url() [55]
* http2: make sure pause is done on HTTP [120]
* http2: move the stream error field to the per-transfer storage [36]
* http2: skip immediate parsing of payload following protocol switch [90]
* http2: use 

Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.77

2021-05-30 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.77
* libcurl4  7.77
* libcurl-devel 7.77
* libcurl-doc   7.77
* mingw64-x86_64-curl   7.77
* mingw64-i686-curl 7.77

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation
for complete details:

https://curl.se/changes.html

curl and libcurl 7.77.0

Public curl releases:200
Command line options:242
curl_easy_setopt() options:  290
Public functions in libcurl:  85
Contributors:   2408

This release includes the following changes:

* configure: make the TLS library choice(s) explicit [3]
* curl: ignore options asking for SSLv2 or SSLv3 [10]
* hsts: enable by default [8]
* SSL: support in-memory CA certs for some backends [85]
* vtls: refuse setting any SSL version [9]

This release includes the following known bugs:

* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* CVE-2021-22297: schannel cipher selection surprise [132]
* CVE-2021-22298: TELNET stack contents disclosure [131]
* CVE-2021-22901: TLS session caching disaster [130]
* AmigaOS: add functions definitions for SHA256 [126]
* build: fix compilation for Windows UWP platform [82]
* c-hyper: don't write to set.writeheader if null [67]
* c-hyper: fix handling of zero-byte chunk from hyper [39]
* c-hyper: handle body on HYPER_TASK_EMPTY [104]
* checksrc: complain on == NULL or != 0 checks in conditions [20]
* CI/cirrus: add shared and static Windows release builds [102]
* cmake: add CURL_ENABLE_EXPORT_TARGET option [133]
* cmake: check for getppid and utimes [87]
* cmake: detect CURL_SA_FAMILY_T [124]
* cmake: fix two invokes result in different curl_config.h [123]
* cmake: make libcurl output filename configurable [41]
* cmake: Use multithreaded compilation on VS 2008+ [122]
* config: remove now-unused macros [107]
* configure: if asked for, fail if ldap is not found [109]
* configure: provide --with-openssl, deprecate --with-ssl [15]
* conn: add 'attach' to protocol handler, make libssh2 use it [119]
* connect: use CURL_SA_FAMILY_T for portability [34]
* ConnectionExists: respect requests for h1 connections better
* cookie: CURLOPT_COOKIEFILE set to NULL switches off cookies [1]
* curl-wolfssl.m4: without custom include path, assume /usr/include [116]
* curl: include libmetalink version in --version output [111]
* Curl_http_header: check for colon when matching Persistent-Auth [51]
* Curl_http_input_auth: require valid separator after negotiation type [52]
* Curl_input_digest: require space after Digest [50]
* curl_mprintf.3: add description [73]
* curl_setup: provide the shutdown flags wider [33]
* curl_url_set.3: add memory management information [38]
* CURLcode: add CURLE_SSL_CLIENTCERT [47]
* CURLOPT_CAPATH.3: defaults to a path, not NULL [103]
* CURLOPT_IPRESOLVE: preventing wrong IP version from being used [125]
* CURLOPT_POSTFIELDS.3: clarify how it gets the size of the data [40]
* data_pending: check only SECONDARY socket for FTP(S) transfers [117]
* docs/TheArtOfHttpScripting: fix markdown links [129]
* docs: camelcase it like GitHub everywhere [62]
* docs: cookies from HTTP headers need domain set [121]
* docs: fix typo in fail-with-body doc [63]
* docs: improve INTERNALS.md regarding getsock cb [105]
* docs: replace dots with dashes in markdown enums [101]
* easy: ignore sigpipe in curl_easy_send [69]
* FILEFORMAT: mention sectransp as a feature [89]
* GIT-INFO: suggest using autoreconf instead of buildconf [96]
* github: add a workflow with libssh2 on macOS using cmake [81]
* github: inhibit deprecated declarations for clang on macOS [118]
* GnuTLS: don't allow TLS 1.3 for versions that don't support it [77]
* gnutls: make setting only the MAX TLS allowed version work [83]
* gskit: fix CURL_DISABLE_PROXY build [57]
* gskit: fix undefined reference to 'conn' [58]
* hostip.h: remove declaration of unimplemented function [108]
* hostip: remove the debug code for LocalHost [113]
* http2: call the handle-closed function correctly on closed stream [37]
* http2: fix a resource leak in push_promise() [54]
* http2: fix resource leaks in set_transfer_url() [55]
* http2: make sure pause is done on HTTP [120]
* http2: move the stream error field to the per-transfer storage [36]
* http2: skip immediate parsing of payload following protocol switch [90]
* http2: use 

[ANNOUNCEMENT] Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.76.1-2

2021-05-17 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.76.1-2
* libcurl4  7.76.1-2
* libcurl-devel 7.76.1-2
* libcurl-doc   7.76.1-2
* mingw64-x86_64-curl   7.76.1-2
* mingw64-i686-curl 7.76.1-2

Command line tool and Library supporting transferring files with URL
syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation
for complete details:

https://curl.se/changes.html

curl and libcurl 7.76.1-2

This release was built using libssh2 1.9+ to enable new features
including updated ciphers and security patches for CVEs.


-- 
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.76.1-2

2021-05-17 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.76.1-2
* libcurl4  7.76.1-2
* libcurl-devel 7.76.1-2
* libcurl-doc   7.76.1-2
* mingw64-x86_64-curl   7.76.1-2
* mingw64-i686-curl 7.76.1-2

Command line tool and Library supporting transferring files with URL
syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation
for complete details:

https://curl.se/changes.html

curl and libcurl 7.76.1-2

This release was built using libssh2 1.9+ to enable new features
including updated ciphers and security patches for CVEs.



[ANNOUNCEMENT] Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.76.1

2021-04-18 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.76.1
* libcurl4  7.76.1
* libcurl-devel 7.76.1
* libcurl-doc   7.76.1
* mingw64-x86_64-curl   7.76.1
* mingw64-i686-curl 7.76.1

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation
for complete details:

https://curl.se/changes.html

curl and libcurl 7.76.1

* Public curl releases: 199
* Command line options: 240
* curl_easy_setopt() options:   288
* Public functions in libcurl:  85
* Contributors: 2356

This release includes the following known bugs:

* see /usr/share/doc/curl/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* configure: disable min version set for Darwin
* configure: include  unconditionally
* configure: remove use of RETSIGTYPE
* docs/HTTP3.md: update the build instruction using gnutls
* examples/hiperfifo.c: check event_initialized before delete
* file: support GETing directories again
* github/workflow: add "security-extended" to codeql-analysis.yml
* h2: allow 100 streams by default
* hostip: fix builds that disable all asynchronous DNS
* http_proxy: only loop on 407 + close if we have credentials
* install: add instructions for Apple Darwin platforms
* lib: remove unused HAVE_INET_NTOA_R* defines
* libssh: get rid of PATH_MAX
* ngtcp2+gnutls: clear credentials when freed
* ngtcp2: Use ALPN h3-29 for now
* ntlm: fix negotiated flags usage
* ntlm: support version 2 on 32-bit platforms
* openssl: fix CURLOPT_SSLCERT_BLOB without CURLOPT_SSLCERT_KEY
* TLS: fix HTTP/2 selection
* tool_progress: fix progress meter final update in parallel mode
* typecheck-gcc: make the ssl-ctx-cb check use SSL_CTX pointers

--
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.76.1

2021-04-18 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.76.1
* libcurl4  7.76.1
* libcurl-devel 7.76.1
* libcurl-doc   7.76.1
* mingw64-x86_64-curl   7.76.1
* mingw64-i686-curl 7.76.1

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation
for complete details:

https://curl.se/changes.html

curl and libcurl 7.76.1

* Public curl releases: 199
* Command line options: 240
* curl_easy_setopt() options:   288
* Public functions in libcurl:  85
* Contributors: 2356

This release includes the following known bugs:

* see /usr/share/doc/curl/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* configure: disable min version set for Darwin
* configure: include  unconditionally
* configure: remove use of RETSIGTYPE
* docs/HTTP3.md: update the build instruction using gnutls
* examples/hiperfifo.c: check event_initialized before delete
* file: support GETing directories again
* github/workflow: add "security-extended" to codeql-analysis.yml
* h2: allow 100 streams by default
* hostip: fix builds that disable all asynchronous DNS
* http_proxy: only loop on 407 + close if we have credentials
* install: add instructions for Apple Darwin platforms
* lib: remove unused HAVE_INET_NTOA_R* defines
* libssh: get rid of PATH_MAX
* ngtcp2+gnutls: clear credentials when freed
* ngtcp2: Use ALPN h3-29 for now
* ntlm: fix negotiated flags usage
* ntlm: support version 2 on 32-bit platforms
* openssl: fix CURLOPT_SSLCERT_BLOB without CURLOPT_SSLCERT_KEY
* TLS: fix HTTP/2 selection
* tool_progress: fix progress meter final update in parallel mode
* typecheck-gcc: make the ssl-ctx-cb check use SSL_CTX pointers



[ANNOUNCEMENT] Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.76

2021-04-03 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.76
* libcurl4  7.76
* libcurl-devel 7.76
* libcurl-doc   7.76
* mingw64-x86_64-curl   7.76
* mingw64-i686-curl 7.76

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation
for complete details:

https://curl.se/changes.html

curl and libcurl 7.76:

* Public curl releases: 198
* Command line options: 240
* curl_easy_setopt() options:   288
* Public functions in libcurl:  85
* Contributors: 2356

This release includes the following changes:

* cookies: Support multiple -b parameters [69]
* curl: add --fail-with-body [17]
* doh: add options to disable ssl verification [5]
* http: add support to read and store the referrer header [30]
* sasl: support SCRAM-SHA-1 and SCRAM-SHA-256 via libgsasl [4]
* vtls: initial implementation of rustls backend [3]

This release includes the following known bugs:

* see /usr/share/doc/curl/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* CVE-2021-22876: strip credentials from the auto-referer header field [88]
* CVE-2021-22890: add 'isproxy' argument to Curl_ssl_get/addsessionid() [55]
* asyn-ares: use consistent resolve error message [37]
* BUG-BOUNTY: removed the cooperation mention
* build: delete unused feature guards [51]
* build: fix --disable-dateparse [1]
* build: fix --disable-http-auth
* build: remove all traces of USE_BLOCKING_SOCKETS [70]
* c-hyper: Remove superfluous pointer check [56]
* c-hyper: support automatic content-encoding [74]
* CI/azure: disable test 433 on azure-ubuntu [105]
* CI/azure: replace python-impacket with python3-impacket [61]
* ci: stop building on freebsd-12-1 [38]
* cmake: fix import library name for non-MS compiler on Windows [10]
* cmake: use CMAKE_INSTALL_INCLUDEDIR indirection [49]
* cmake: support WinIDN [100]
* config: fix building SMB with configure using Win32 Crypto [91]
* config: fix detection of restricted Windows App environment
* configure: fail if --with-quiche is used and quiche isn't found [48]
* configure: make AC_TRY_* into AC_*_IFELSE
* configure: make hyper opt-in, and fail if missing [53]
* configure: only add OpenSSL paths if they are defined [68]
* configure: provide Largefile feature for curl-config [79]
* configure: remove use of deprecated macros
* configure: s/AC_HELP_STRING/AS_HELP_STRING [110]
* cookies: Fix potential NULL pointer deref with PSL [66]
* curl: set CURLOPT_NEW_FILE_PERMS if requested [65]
* curl_easy_setopt.3: add curl_easy_option* functions to SEE ALSO
* curl_multibyte: always return a heap-allocated copy of string [29]
* curl_multibyte: fall back to local code page stat/access on Windows [8]
* Curl_timeleft: check both timeouts during connect [109]
* curl_url_set.3: mention CURLU_PATH_AS_IS [13]
* CURLOPT_QUOTE.3: clarify that libcurl doesn't parse what's sent [16]
* docs/HTTP2: remove the outdated remark about multiplexing for the tool
* docs/Makefile.inc: format to be update-friendly [11]
* docs: add CURLOPT_CURLU to 'See also' in curl_url_ functions [52]
* docs: add missing Arg tag to --stderr [58]
* docs: Add SSL backend names to CURL_SSL_BACKEND [106]
* docs: clarify timeouts for queued transfers in multi API [101]
* docs: Explain DOH transfers inherit some SSL settings [107]
* docs: fix FILE example url in --metalink documentation [19]
* docs: make gen.pl support *italic* and **bold** [112]
* doh: Fix sharing user's resolve list with DOH handles [46]
* doh: Inherit CURLOPT_STDERR from user's easy handle [60]
* dynbuf: bump the max HTTP request to 1MB [39]
* examples: Remove threaded-shared-conn.c due to bug [119]
* file: Support unicode urls on windows [9]
* ftp: add 'list_only' to the transfer state struct [35]
* ftp: add 'prefer_ascii' to the transfer state struct [36]
* FTP: allow SIZE to fail when doing (resumed) upload [78]
* ftp: avoid SIZE when asking for a TYPE A file [23]
* ftp: fix Codacy/cppcheck warning about null pointer arithmetic [34]
* ftp: fix memory leak in ftp_done [96]
* ftp: never set data->set.ftp_append outside setopt [14]
* gen.pl: quote "bare" minuses in the nroff curl.1 [92]
* github: add torture-ftp for FTP-only torture testing [94]
* gnutls: assume nettle crypto support [33]
* gskit: correct the gskit_send() prototype [21]
* hostip: fix build with sync resolver [20]
* hostip: fix crash in sync resolver builds 

Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.76

2021-04-03 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.76
* libcurl4  7.76
* libcurl-devel 7.76
* libcurl-doc   7.76
* mingw64-x86_64-curl   7.76
* mingw64-i686-curl 7.76

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation
for complete details:

https://curl.se/changes.html

curl and libcurl 7.76:

* Public curl releases: 198
* Command line options: 240
* curl_easy_setopt() options:   288
* Public functions in libcurl:  85
* Contributors: 2356

This release includes the following changes:

* cookies: Support multiple -b parameters [69]
* curl: add --fail-with-body [17]
* doh: add options to disable ssl verification [5]
* http: add support to read and store the referrer header [30]
* sasl: support SCRAM-SHA-1 and SCRAM-SHA-256 via libgsasl [4]
* vtls: initial implementation of rustls backend [3]

This release includes the following known bugs:

* see /usr/share/doc/curl/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

* CVE-2021-22876: strip credentials from the auto-referer header field [88]
* CVE-2021-22890: add 'isproxy' argument to Curl_ssl_get/addsessionid() [55]
* asyn-ares: use consistent resolve error message [37]
* BUG-BOUNTY: removed the cooperation mention
* build: delete unused feature guards [51]
* build: fix --disable-dateparse [1]
* build: fix --disable-http-auth
* build: remove all traces of USE_BLOCKING_SOCKETS [70]
* c-hyper: Remove superfluous pointer check [56]
* c-hyper: support automatic content-encoding [74]
* CI/azure: disable test 433 on azure-ubuntu [105]
* CI/azure: replace python-impacket with python3-impacket [61]
* ci: stop building on freebsd-12-1 [38]
* cmake: fix import library name for non-MS compiler on Windows [10]
* cmake: use CMAKE_INSTALL_INCLUDEDIR indirection [49]
* cmake: support WinIDN [100]
* config: fix building SMB with configure using Win32 Crypto [91]
* config: fix detection of restricted Windows App environment
* configure: fail if --with-quiche is used and quiche isn't found [48]
* configure: make AC_TRY_* into AC_*_IFELSE
* configure: make hyper opt-in, and fail if missing [53]
* configure: only add OpenSSL paths if they are defined [68]
* configure: provide Largefile feature for curl-config [79]
* configure: remove use of deprecated macros
* configure: s/AC_HELP_STRING/AS_HELP_STRING [110]
* cookies: Fix potential NULL pointer deref with PSL [66]
* curl: set CURLOPT_NEW_FILE_PERMS if requested [65]
* curl_easy_setopt.3: add curl_easy_option* functions to SEE ALSO
* curl_multibyte: always return a heap-allocated copy of string [29]
* curl_multibyte: fall back to local code page stat/access on Windows [8]
* Curl_timeleft: check both timeouts during connect [109]
* curl_url_set.3: mention CURLU_PATH_AS_IS [13]
* CURLOPT_QUOTE.3: clarify that libcurl doesn't parse what's sent [16]
* docs/HTTP2: remove the outdated remark about multiplexing for the tool
* docs/Makefile.inc: format to be update-friendly [11]
* docs: add CURLOPT_CURLU to 'See also' in curl_url_ functions [52]
* docs: add missing Arg tag to --stderr [58]
* docs: Add SSL backend names to CURL_SSL_BACKEND [106]
* docs: clarify timeouts for queued transfers in multi API [101]
* docs: Explain DOH transfers inherit some SSL settings [107]
* docs: fix FILE example url in --metalink documentation [19]
* docs: make gen.pl support *italic* and **bold** [112]
* doh: Fix sharing user's resolve list with DOH handles [46]
* doh: Inherit CURLOPT_STDERR from user's easy handle [60]
* dynbuf: bump the max HTTP request to 1MB [39]
* examples: Remove threaded-shared-conn.c due to bug [119]
* file: Support unicode urls on windows [9]
* ftp: add 'list_only' to the transfer state struct [35]
* ftp: add 'prefer_ascii' to the transfer state struct [36]
* FTP: allow SIZE to fail when doing (resumed) upload [78]
* ftp: avoid SIZE when asking for a TYPE A file [23]
* ftp: fix Codacy/cppcheck warning about null pointer arithmetic [34]
* ftp: fix memory leak in ftp_done [96]
* ftp: never set data->set.ftp_append outside setopt [14]
* gen.pl: quote "bare" minuses in the nroff curl.1 [92]
* github: add torture-ftp for FTP-only torture testing [94]
* gnutls: assume nettle crypto support [33]
* gskit: correct the gskit_send() prototype [21]
* hostip: fix build with sync resolver [20]
* hostip: fix crash in sync resolver builds 

[ANNOUNCEMENT] Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.75

2021-02-06 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.75
* libcurl4  7.75
* libcurl-devel 7.75
* libcurl-doc   7.75
* mingw64-x86_64-curl   7.75
* mingw64-i686-curl 7.75

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation
for complete details:

https://curl.se/changes.html

curl and libcurl 7.75.0:

Public curl releases:197
Command line options:237
curl_easy_setopt() options:  285
Public functions in libcurl:  85
Contributors:   2322

This release includes the following changes:

o curl: add --create-file-mode [mode] [28]
o curl: add new variables to --write-out [25]
o dns: extend CURLOPT_RESOLVE syntax for adding non-permanent entries [53]
o gopher: implement secure gopher protocol [2]
o http: add Hyper as new optional HTTP backend [24]
o http: introduce AWS HTTP v4 Signature support [26]

This release includes the following known bugs:

o see /usr/share/doc/curl/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

o badsymbols.pl: add verbose mode -v [31]
o badsymbols.pl: ignore stand-alone single hash lines [40]
o BUG-BOUNTY: minor language updates [5]
o build: fix djgpp builds [84]
o cleanup: fix empty expression statement has no effect
o cmake: Add an option to disable libidn2 [48]
o cmake: enable gophers correctly in curl-config [10]
o cmake: expose CURL_DISABLE_OPENSSL_AUTO_LOAD_CONFIG [32]
o cmdline-opts/gen.pl: return hard on errors [11]
o cmdline-opts/retry.d: mention response code 429 as well [47]
o configure: set -Wextra-semi-stmt for clang with --enable-debug [52]
o connect: defer port selection until connect() time [22]
o connect: mark intentional ignores of setsockopt return values [75]
o connect: on linux, enable reporting of all ICMP errors on UDP sockets [27]
o connect: zero variable on stack to silence valgrind complaint [23]
o cookie: avoid the C1001 internal compiler error with MSVC 14 [36]
o curl.1: fix typo microsft -> microsoft [56]
o curl: fix handling of -q option [39]
o curl: include the file name in --xattr/--remote-time error msgs
o curl: move fprintf outputs to warnf [105]
o Curl_chunker: shrink the struct [104]
o curl_easy_pause.3: add multiplexed pause effects [41]
o CURLINFO_PRETRANSFER_TIME.3: clarify [61]
o CURLOPT_URL.3: remove scheme specific details [12]
o digest_sspi: Show InitializeSecurityContext errors in verbose mode [8]
o docs/examples: adjust prototypes for CURLOPT_READFUNCTION [51]
o docs/URL-SYNTAX: the URL syntax curl accepts and works with [15]
o docs: enable syntax highlighting in several docs files [16]
o docs: fix line length bug in gen.pl [70]
o docs: fix typos in NEW-PROTOCOL.md [102]
o docs: fix wrong documentation in help.d [71]
o docs: remove redundant "better" in --fail help [55]
o doh: allocate state struct on demand [85]
o examples/libtest: add .checksrc to dist [14]
o examples: remove superfluous asterisk uses
o failf: remove newline from formatting strings [35]
o file: don't provide content-length for directories [49]
o getinfo: build with disabled HTTP support
o gitattributes: Set batch files to CRLF line endings on checkout [65]
o h2: do not wait for RECV on paused transfers [43]
o HISTORY: added dates to early history
o http: empty reply connection are not left intact [80]
o http: get CURLOPT_REQUEST_TARGET working with a HTTP proxy [83]
o http: have CURLOPT_FAILONERROR fail after all headers [54]
o http: make providing Proxy-Connection header not cause duplicated headers [92]
o http: show the request as headers even when split-sending [7]
o http_chunks: correct and clarify a comment on hexnumber length [88]
o http_proxy: Fix CONNECT chunked encoding race condition [76]
o httpauth: make multi-request auth work with custom port [45]
o INSTALL: now at 85 operating systems
o INSTALL: update the list known OSes and CPU archs curl has run on [38]
o lib/unit tests: add missing curl_global_cleanup() calls
o lib1564/5: verify that curl_multi_wakeup returns OK
o lib: pass in 'struct Curl_easy *' to most functions [101]
o lib: remove Curl_ prefix from many static functions [66]
o lib: save a bit of space with some structure packing [82]
o libssh2: fix "Value stored to 'readdir_len' is never read"
o libssh2: move data from connection object to transfer object [114]
o libssh: avoid plain free() of libssh-memory [99]
o mime: make sure 

Updated: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.75

2021-02-06 Thread Cygwin curl Maintainer
The following packages have been upgraded in the Cygwin distribution:

* curl  7.75
* libcurl4  7.75
* libcurl-devel 7.75
* libcurl-doc   7.75
* mingw64-x86_64-curl   7.75
* mingw64-i686-curl 7.75

Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.

For more information see the project home page:

https://curl.se/

As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation
for complete details:

https://curl.se/changes.html

curl and libcurl 7.75.0:

Public curl releases:197
Command line options:237
curl_easy_setopt() options:  285
Public functions in libcurl:  85
Contributors:   2322

This release includes the following changes:

o curl: add --create-file-mode [mode] [28]
o curl: add new variables to --write-out [25]
o dns: extend CURLOPT_RESOLVE syntax for adding non-permanent entries [53]
o gopher: implement secure gopher protocol [2]
o http: add Hyper as new optional HTTP backend [24]
o http: introduce AWS HTTP v4 Signature support [26]

This release includes the following known bugs:

o see /usr/share/doc/curl/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release includes the following bugfixes:

o badsymbols.pl: add verbose mode -v [31]
o badsymbols.pl: ignore stand-alone single hash lines [40]
o BUG-BOUNTY: minor language updates [5]
o build: fix djgpp builds [84]
o cleanup: fix empty expression statement has no effect
o cmake: Add an option to disable libidn2 [48]
o cmake: enable gophers correctly in curl-config [10]
o cmake: expose CURL_DISABLE_OPENSSL_AUTO_LOAD_CONFIG [32]
o cmdline-opts/gen.pl: return hard on errors [11]
o cmdline-opts/retry.d: mention response code 429 as well [47]
o configure: set -Wextra-semi-stmt for clang with --enable-debug [52]
o connect: defer port selection until connect() time [22]
o connect: mark intentional ignores of setsockopt return values [75]
o connect: on linux, enable reporting of all ICMP errors on UDP sockets [27]
o connect: zero variable on stack to silence valgrind complaint [23]
o cookie: avoid the C1001 internal compiler error with MSVC 14 [36]
o curl.1: fix typo microsft -> microsoft [56]
o curl: fix handling of -q option [39]
o curl: include the file name in --xattr/--remote-time error msgs
o curl: move fprintf outputs to warnf [105]
o Curl_chunker: shrink the struct [104]
o curl_easy_pause.3: add multiplexed pause effects [41]
o CURLINFO_PRETRANSFER_TIME.3: clarify [61]
o CURLOPT_URL.3: remove scheme specific details [12]
o digest_sspi: Show InitializeSecurityContext errors in verbose mode [8]
o docs/examples: adjust prototypes for CURLOPT_READFUNCTION [51]
o docs/URL-SYNTAX: the URL syntax curl accepts and works with [15]
o docs: enable syntax highlighting in several docs files [16]
o docs: fix line length bug in gen.pl [70]
o docs: fix typos in NEW-PROTOCOL.md [102]
o docs: fix wrong documentation in help.d [71]
o docs: remove redundant "better" in --fail help [55]
o doh: allocate state struct on demand [85]
o examples/libtest: add .checksrc to dist [14]
o examples: remove superfluous asterisk uses
o failf: remove newline from formatting strings [35]
o file: don't provide content-length for directories [49]
o getinfo: build with disabled HTTP support
o gitattributes: Set batch files to CRLF line endings on checkout [65]
o h2: do not wait for RECV on paused transfers [43]
o HISTORY: added dates to early history
o http: empty reply connection are not left intact [80]
o http: get CURLOPT_REQUEST_TARGET working with a HTTP proxy [83]
o http: have CURLOPT_FAILONERROR fail after all headers [54]
o http: make providing Proxy-Connection header not cause duplicated headers [92]
o http: show the request as headers even when split-sending [7]
o http_chunks: correct and clarify a comment on hexnumber length [88]
o http_proxy: Fix CONNECT chunked encoding race condition [76]
o httpauth: make multi-request auth work with custom port [45]
o INSTALL: now at 85 operating systems
o INSTALL: update the list known OSes and CPU archs curl has run on [38]
o lib/unit tests: add missing curl_global_cleanup() calls
o lib1564/5: verify that curl_multi_wakeup returns OK
o lib: pass in 'struct Curl_easy *' to most functions [101]
o lib: remove Curl_ prefix from many static functions [66]
o lib: save a bit of space with some structure packing [82]
o libssh2: fix "Value stored to 'readdir_len' is never read"
o libssh2: move data from connection object to transfer object [114]
o libssh: avoid plain free() of libssh-memory [99]
o mime: make sure