RELEASE-NOTES: synced

diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index b95c70c800b98407570a0f897a65e4b2be7d1f04..8b4dc7813144f0415c76c6ddecbffa0f9430c21e 100644 (file)
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -4,7 +4,7 @@ curl and libcurl 8.13.0
  Command line options:         268
  curl_easy_setopt() options:   307
  Public functions in libcurl:  96
- Contributors:                 3367
+ Contributors:                 3369
 
 This release includes the following changes:
 
@@ -25,12 +25,14 @@ This release includes the following bugfixes:
  o asyn-thread: avoid the separate curl_mutex_t alloc [6]
  o asyn-thread: do not allocate thread_data separately [21]
  o asyn-thread: remove 'status' from struct Curl_async [36]
+ o base64: drop `BUILDING_CURL` macro, always include in tests/server [234]
  o build: add Windows CE / CeGCC support, with CI jobs [87]
  o build: cmake multi-pkg-config detection improvements (brotli, ldap, mbedtls) [192]
  o build: drop unused `getpart` tool [107]
  o build: enable -Wjump-misses-init for GCC 4.5+ [62]
  o build: enable `-Wcast-qual`, fix or silence compiler warnings [208]
  o build: fix compiler warnings in feature detections [39]
+ o build: replace Curl_ prefix with curlx_ for functions used in servers [236]
  o build: set `-O3` and tune WinCE in CI, fix `getpart`, `vtls_scache` fallouts [137]
  o build: set `HAVE_STDINT_H` if `stdint.h` is available [155]
  o build: set `HAVE_WRITABLE_ARGV` for Apple cross-builds [8]
@@ -66,6 +68,7 @@ This release includes the following bugfixes:
  o cmake: restrict static CRT builds to static curl exe, test in CI [113]
  o cmake: sync cutoff version with autotools for picky option `-ftree-vrp` [99]
  o cmake: sync OpenSSL(-fork) feature checks with `./configure` [49]
+ o cmake: unity mode optimization for non-`CURLDEBUG` `testdeps` targets [231]
  o CODE_STYLE: readability and banned functions [35]
  o configure: call the blocking resolver "blocking", not "default" [220]
  o configure: silence compiler warnings in feature checks, drop duplicates [86]
@@ -76,18 +79,21 @@ This release includes the following bugfixes:
  o cookie: do prefix matching case-sensitively [82]
  o cookie: minor parser simplification [58]
  o cookie: simplify invalid_octets() [24]
+ o core: stop redefining `E*` macros on Windows, map `EACCES`, related fixes [233]
  o curl.h: change some enums to defines with L suffix [84]
  o curl.h: convert CURLUSESSL* names to defines [146]
  o curl.h: stop defining non-curl `__has_declspec_attribute` [142]
  o curl.h: switch `CURL_HTTP_VERSION*` enums to long constants [160]
  o curl: add my_setopt_long() and _offt() [158]
  o curl_msh3: remove verify bypass from DEBUGBUILDs [43]
+ o curl_setup: drop `ERANGE` (for WinCE), no longer used [249]
  o curl_setup_once: drop `E*` macro redefines unused (with winsock2) [164]
  o curl_setup_once: stop redefining `ENAMETOOLONG` to winsock2 error code [163]
  o curl_trc: fix build with CURL_DISABLE_VERBOSE_STRINGS [109]
  o CURLMOPT_SOCKETFUNCTION.md: add advice for socket callback invocation[69]
  o CURLOPT_HTTPHEADER.md: add comments to the example [90]
  o CURLOPT_HTTPHEADER.md: rephrases [108]
+ o curltime: use libcurl time functions in src and tests/server [247]
  o DISABLED: add 313 for sectransp (move from GHA/macos) [209]
  o docs/cmdline-opts: unify HTTP version style in --help output [139]
  o docs: adapt to removed --with-random [177]
@@ -97,6 +103,7 @@ This release includes the following bugfixes:
  o docs: minor edits to please the new spellchecker regime
  o docs: vulnerabilities in debug code are not eligible for a bounty [118]
  o doh: improve HTTPS RR svcparams parsing [198]
+ o doh: remove wrong but unreachable exit path from doh_decode_rdata_name [199]
  o easy: fix warning about possible comma misuse [219]
  o eventfd: allow use on all CPUs [93]
  o examples: prefer `return` over `exit()` (cont.) [110]
@@ -143,12 +150,17 @@ This release includes the following bugfixes:
  o libssh: fix freeing of resources in disconnect [206]
  o libssh: fix scp large file upload for 32-bit size_t systems [211]
  o libtest/libprereq.c: set CURLOPT_FOLLOWLOCATION with a long [89]
+ o managen: accept more markdown-quote-markers [243]
  o managen: correct the warning for un-escaped '<' and '>' [1]
+ o memdebug.h: avoid `-Wredundant-decls` with an extra guard [230]
  o mprintf: switch three number parsers to use strparse [221]
  o msvc: drop support for VS2005 and older [96]
+ o multi: call protocol handler done() if PROTOCONNECT or later [238]
  o multi: event based rework [74]
+ o multi: kill off remaining internal handles in curl_multi_cleanup [248]
  o multi: start the loop over when handles are removed [129]
  o ngtcp2: do not iterate over multi handles [194]
+ o ntlm: merge ntlm.h into ntlm.c [235]
  o openssl-quic: do not iterate over multi handles [188]
  o openssl: check return value of X509_get0_pubkey [105]
  o openssl: drop support for old OpenSSL/LibreSSL versions [95]
@@ -158,6 +170,7 @@ This release includes the following bugfixes:
  o quiche: do not iterate over multi handles [182]
  o RELEASE-PROCEDURE.md: explain release candidates [161]
  o request: clear sendbuf_hds_len when resetting request bufq [166]
+ o resolve: fix building without Unix sockets and `CURLDEBUG` [213]
  o runtests: accept `CURL_DIRSUFFIX` without ending slash [133]
  o runtests: check and report if `diff` tool is missing [162]
  o runtests: drop recognizing 'winssl' as Schannel [102]
@@ -165,6 +178,7 @@ This release includes the following bugfixes:
  o runtests: fix SSH server not starting in cases, re-ignore failing vcpkg CI jobs [225]
  o runtests: recognize AWS-LC as OpenSSL [103]
  o runtests: support multi-target cmake, drop workarounds from CI [116]
+ o rustls: cap maximum allowed CRL file size to 8MB [196]
  o schannel: deduplicate Windows Vista detection [98]
  o schannel: enable ALPN support under WINE 6.0+ [92]
  o schannel: enable ALPN with MinGW, fix ALPN for UWP builds [71]
@@ -172,6 +186,7 @@ This release includes the following bugfixes:
  o scripts/managen: fix option 'single' [31]
  o scripts/managen: fix parsing of markdown code sections [30]
  o sectransp: add support for HTTP/2 in gcc builds [200]
+ o sendf: client reader line conversion: do not change data->state.infilesize [244]
  o setopt: illegal CURLOPT_SOCKS5_AUTH should return error [185]
  o setopt: remove unnecessary void pointer typecasts [76]
  o setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine [197]
@@ -180,6 +195,7 @@ This release includes the following bugfixes:
  o src: avoid strdup on platforms not doing UTF-8 conversions [176]
  o src: cleanup ISBLANK vs ISSPACE [195]
  o src: remove Curl_ prefix from tool-specific function [205]
+ o src: remove final uses of Curl_ symbol prefixes in tool code [242]
  o src: replace strto[u][ld] with curlx_str_ parsers [222]
  o ssh: consider sftp quote commands case sensitive [33]
  o ssl session cache: add exportable flag [56]
@@ -194,6 +210,7 @@ This release includes the following bugfixes:
  o tests/server: replace `errno` with `SOCKERRNO` in sockfilt, socksd, sws [183]
  o tests/server: replace `strerror` with `sstrerror` in socksd
  o tests/server: sync `wait_ms()` with the libcurl implementation [226]
+ o tests/server: use `curlx_str_numblanks()` to avoid `errno` [250]
  o tests/servers.pm: remove unused variable 'portrange' [227]
  o tests: fix comment in lib533 [121]
  o tests: fix enum/int confusion, fix autotools `CFLAGS` for `servers` [27]
@@ -217,6 +234,7 @@ This release includes the following bugfixes:
  o tool_operate: remove unnecessary (long) typecasts [141]
  o tool_paramhlp: do --proto parsing without strtok [170]
  o tool_parsecfg: make my_get_line skip comments and newlines [130]
+ o tool_setopt: reduce use of "code hiding" macros [203]
  o url: call protocol handler's disconnect in Curl_conn_free [193]
  o urlapi: fix redirect from file:// with query, and simplify [136]
  o urlapi: simplify junkscan [23]
@@ -256,16 +274,17 @@ advice from friends like these:
 
   Anthony Hu, Carlos Henrique Lima Melara, Catena cyber, Christian Schmitz,
   Dan Fandrich, Daniel Stenberg, dependabot[bot], Derek Huang, Dexter Gerig,
-  Ethan Wilkes, Harry Sintonen, Jeremy Drake, John Bampton, Joseph Chen,
-  Justin Steventon, Kai Pastor, kayrus on github, kriztalz, Lars Karlitski,
-  Laurențiu Nicola, lf- on github, Marcel Raad, Mark Phillips, Martxel,
-  Michał Antoniak, Ondřej Hlavatý, Orgad Shaneh, Peng-Yu Chen,
-  Philippe Antoine, qhill on github, Ray Satiro, renovate[bot],
-  rmg-x on github, RubisetCie on github, saimen, Samuel Dionne-Riel,
-  Samuel Henrique, Sergey, Stefan Eissing, stevenpackardblp on github,
-  Tatsuhiro Tsujikawa, Tianyi Song, Timo Tijhof, tiymat, Viktor Szakats,
-  Yedaya Katsman, Zenju on github, Zhang Wen, Zhaoming Luo
-  (49 contributors)
+  Ethan Wilkes, Harry Sintonen, Jan Macku, Jeremy Drake, John Bampton,
+  Joseph Chen, Justin Steventon, Kai Pastor, kayrus on github, kriztalz,
+  Lars Karlitski, Laurențiu Nicola, lf- on github, Marcel Raad, Mark Phillips,
+  Martxel, Michał Antoniak, Ondřej Hlavatý, Orgad Shaneh, Peng-Yu Chen,
+  Philippe Antoine, qhill on github, Ray Satiro, renovate[bot], Rinku Das,
+  rmg-x on github, Ronald Crane, RubisetCie on github, saimen,
+  Samuel Dionne-Riel, Samuel Henrique, Scott Talbert, Sergey, Stefan Eissing,
+  stevenpackardblp on github, Tatsuhiro Tsujikawa, Tianyi Song, Timo Tijhof,
+  tiymat, Viktor Szakats, Yedaya Katsman, Zenju on github, Zhang Wen,
+  Zhaoming Luo
+  (53 contributors)
 
 References to bug reports and discussions on issues:
 
@@ -464,17 +483,21 @@ References to bug reports and discussions on issues:
  [193] = https://curl.se/bug/?i=16604
  [194] = https://curl.se/bug/?i=16606
  [195] = https://curl.se/bug/?i=16589
+ [196] = https://curl.se/bug/?i=16716
  [197] = https://curl.se/bug/?i=16599
  [198] = https://curl.se/bug/?i=16598
+ [199] = https://curl.se/bug/?i=16710
  [200] = https://curl.se/bug/?i=16581
  [201] = https://curl.se/bug/?i=16583
  [202] = https://curl.se/bug/?i=16577
+ [203] = https://curl.se/bug/?i=16709
  [205] = https://curl.se/bug/?i=16657
  [206] = https://curl.se/bug/?i=16659
  [207] = https://curl.se/bug/?i=16656
  [208] = https://curl.se/bug/?i=16142
  [209] = https://curl.se/bug/?i=16660
  [211] = https://curl.se/bug/?i=16641
+ [213] = https://curl.se/bug/?i=16700
  [214] = https://curl.se/bug/?i=16649
  [215] = https://curl.se/bug/?i=16645
  [216] = https://issues.oss-fuzz.com/issues/401869346
@@ -488,3 +511,17 @@ References to bug reports and discussions on issues:
  [226] = https://curl.se/bug/?i=16627
  [227] = https://curl.se/bug/?i=16632
  [228] = https://curl.se/bug/?i=16630
+ [230] = https://curl.se/bug/?i=16696
+ [231] = https://curl.se/bug/?i=16695
+ [233] = https://curl.se/bug/?i=16553
+ [234] = https://curl.se/bug/?i=16691
+ [235] = https://curl.se/bug/?i=16690
+ [236] = https://curl.se/bug/?i=16689
+ [238] = https://curl.se/bug/?i=16681
+ [242] = https://curl.se/bug/?i=16678
+ [243] = https://curl.se/bug/?i=16685
+ [244] = https://issues.oss-fuzz.com/issues/402476456
+ [247] = https://curl.se/bug/?i=16653
+ [248] = https://curl.se/bug/?i=16674
+ [249] = https://curl.se/bug/?i=16673
+ [250] = https://curl.se/bug/?i=16671