diff --git a/RELEASE-NOTES b/RELEASE-NOTES index 565ca5e3be..3e42f0d424 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -4,7 +4,7 @@ curl and libcurl 8.10.0 Command line options: 265 curl_easy_setopt() options: 306 Public functions in libcurl: 94 - Contributors: 3224 + Contributors: 3225 This release includes the following changes: @@ -20,6 +20,7 @@ This release includes the following changes: o curl: use libuv for parallel transfers with --test-event [82] o getinfo: add CURLINFO_POSTTRANSFER_TIME_T [87] o mbedtls: add CURLOPT_TLS13_CIPHERS support [78] + o rustls: add support for setting TLS version and ciphers [113] o vtls: stop offering alpn http/1.1 for http2-prior-knowledge [53] o wolfssl: add CURLOPT_TLS13_CIPHERS support [76] o wolfssl: add support for ssl cert blob / ssl key blob options [50] @@ -38,8 +39,10 @@ This release includes the following bugfixes: o cmake: add `CURL_USE_PKGCONFIG` option [138] o cmake: add Linux CI job, fix pytest with cmake [71] o cmake: add math library when using wolfssl and ngtcp2 [66] + o cmake: add missing `pkg-config` hints to Find modules [158] o cmake: add rustls [116] o cmake: add support for versioned symbols option [51] + o cmake: add wolfSSH support [117] o cmake: allow `pkg-config` in more envs [147] o cmake: cleanup header paths [59] o cmake: delete MSVC warning suppression for tests/server [101] @@ -54,10 +57,14 @@ This release includes the following bugfixes: o cmake: exclude tests/http/clients builds by default [110] o cmake: fix `GSS_VERSION` for Heimdal found via pkg-config [77] o cmake: fix `pkg-config`-based detection in `FindGSS.cmake` [94] + o cmake: fix and tidy up c-ares builds, enable in more CI jobs [156] + o cmake: fix find rustls [148] o cmake: limit libidn2 `pkg-config` detection to `UNIX` [109] o cmake: more small tidy-ups and fixes [80] o cmake: show CMake platform/compiler flags [63] + o cmake: show warning if libpsl is not found [154] o cmake: sync up formatting in Find modules [129] + o cmake: TLS 1.3 warning only for bearssl and sectranp [118] o cmake: update `curl-config.cmake.in` template var list o cmake: update list of "advanced" variables [119] o cmake: use numeric comparison for `HAVE_WIN32_WINNT` [69] @@ -68,6 +75,7 @@ This release includes the following bugfixes: o cookie.md: try to articulate the two different uses this option has [92] o curl: allow 500MB data URL encode strings [38] o curl: fix --proxy-pinnedpubkey [91] + o curl: fix the -w urle.* variables [153] o curl: warn on unsupported SSL options [106] o Curl_rand_bytes to control env override [17] o curl_sha512_256: fix symbol collisions with nettle library [131] @@ -80,6 +88,7 @@ This release includes the following bugfixes: o dist: fix reproducible build from release tarball [36] o dmaketgz: only run 'make distclean' if Makefile exists o docs: mention "@-" in more places [67] + o docs: remove ALTSVC.md, HSTS.md, HTTP2.md and PARALLEL-TRANSFERS.md [105] o docs: update CIPHERS.md [140] o doh-url.md: point out DOH server IP pinning [37] o easy: fix curl_easy_upkeep for shared connection caches [52] @@ -107,15 +116,19 @@ This release includes the following bugfixes: o lib: fix building with wolfSSL without DES support [134] o lib: prefer `CURL_SHA256_DIGEST_LENGTH` over the unprefixed name [132] o libcurl.pc: add `Cflags.private` [10] + o libcurl.pc: add reference to `libgsasl` [150] o libcurl/docs: expand on redirect following and secrets to other hosts [85] o llist: remove direct struct accesses, use only functions [72] o Makefile.mk: fixup enabling libidn2 [61] o Makefile: remove 'scripts' duplicate from DIST_SUBDIRS o maketgz: accept option to include latest commit hash [5] + o managen: wordwrap long example lines in ASCII output [143] o manpage: ensure a maximum width for the text version [75] o max-filesize.md: mention zero disables the limit [93] + o mime: avoid inifite loop in client reader [155] o mk-ca-bundle.pl: include a link to the caextract webpage [68] o multi: make the "general" list of easy handles a Curl_llist [97] + o multi: on socket callback error, remove socket hash entry nonetheless [149] o ngtcp2: use NGHTTP3 prefix instead of NGTCP2 for errors in h3 callbacks [79] o openssl: improve shutdown handling [44] o progress: ratelimit/progress tweaks [32] @@ -123,11 +136,14 @@ This release includes the following bugfixes: o runtests: if DISABLED cannot be read, error out [56] o runtests: log ignored but passed tests [130] o rustls: make all tests pass [1] + o scorecard: tweak request measurements [139] o sha256: fix symbol collision between nettle (GnuTLS) and OpenSSL [135] o sigpipe: init the struct so that first apply ignores [49] o smtp: add tracing feature [120] + o splay: use access functions, add asserts, use Curl_timediff [121] o spnego_gssapi: implement TLS channel bindings for openssl [146] o test httpd: tweak cipher list [124] + o test1707: output diff more for debugging differences in CI outputs o test556: improve robustness [64] o test579: improve robustness [60] o test587: improve robustness [123] @@ -173,13 +189,14 @@ This release would not have looked like this without help, code, reports and advice from friends like these: Alex Snast, Antoine du Hamel, Austin Moore, Bo Anderson, Christoph Reiter, - Dan Fandrich, Daniel Stenberg, David Sardari, dependabot[bot], Jan Venekamp, - Jiacai Liu, Joe Birr-Pixton, John Haugabook, kit-ty-kate on github, - MasterInQuestion on github, Matt Jolly, Max Faxälv, Micah Snyder, - Moritz Buhl, Pete Cordell, Rasmus Thomsen, Ray Satiro, renovate[bot], - Ryan Carsten Schmidt, Sergio Durigan Junior, Slaven Rezić, Stefan Eissing, - Steffen Kieß, Tal Regev, Tim Yuer, Viktor Szakats, Yedaya Katsman, 罗朝辉 - (33 contributors) + Dan Fandrich, Daniel Stenberg, David Sardari, dependabot[bot], + Emanuele Torre, Gruber Glass, Jan Venekamp, Jiacai Liu, Joe Birr-Pixton, + John Haugabook, kit-ty-kate on github, MasterInQuestion on github, + Matt Jolly, Max Faxälv, Micah Snyder, Moritz Buhl, Pete Cordell, + Rasmus Thomsen, Ray Satiro, renovate[bot], Ryan Carsten Schmidt, + Sergio Durigan Junior, Slaven Rezić, Stefan Eissing, Steffen Kieß, Tal Regev, + Tim Yuer, Viktor Szakats, Yedaya Katsman, 罗朝辉 + (35 contributors) References to bug reports and discussions on issues: @@ -287,6 +304,7 @@ References to bug reports and discussions on issues: [102] = https://curl.se/bug/?i=14427 [103] = https://curl.se/bug/?i=7229 [104] = https://curl.se/bug/?i=14397 + [105] = https://curl.se/bug/?i=14553 [106] = https://curl.se/bug/?i=14406 [107] = https://curl.se/bug/?i=14406 [108] = https://curl.se/bug/?i=14404 @@ -294,11 +312,15 @@ References to bug reports and discussions on issues: [110] = https://curl.se/bug/?i=14477 [111] = https://curl.se/bug/?i=14469 [112] = https://curl.se/bug/?i=14464 + [113] = https://curl.se/bug/?i=14535 [114] = https://curl.se/bug/?i=14459 [115] = https://curl.se/bug/?i=14467 [116] = https://curl.se/bug/?i=14534 + [117] = https://curl.se/bug/?i=14568 + [118] = https://curl.se/bug/?i=14566 [119] = https://curl.se/bug/?i=14540 [120] = https://curl.se/bug/?i=14531 + [121] = https://curl.se/bug/?i=14562 [122] = https://curl.se/bug/?i=14526 [123] = https://curl.se/bug/?i=14525 [124] = https://curl.se/bug/?i=14502 @@ -316,9 +338,19 @@ References to bug reports and discussions on issues: [136] = https://curl.se/bug/?i=14516 [137] = https://curl.se/bug/?i=14510 [138] = https://curl.se/bug/?i=14504 + [139] = https://curl.se/bug/?i=14564 [140] = https://curl.se/bug/?i=14460 [142] = https://curl.se/bug/?i=14505 + [143] = https://curl.se/bug/?i=14543 [144] = https://curl.se/bug/?i=14480 [145] = https://curl.se/bug/?i=14458 [146] = https://curl.se/bug/?i=13098 [147] = https://curl.se/bug/?i=14483 + [148] = https://curl.se/bug/?i=14567 + [149] = https://curl.se/bug/?i=14557 + [150] = https://curl.se/bug/?i=14556 + [153] = https://curl.se/bug/?i=14550 + [154] = https://curl.se/bug/?i=14533 + [155] = https://curl.se/bug/?i=14532 + [156] = https://curl.se/bug/?i=14541 + [158] = https://curl.se/bug/?i=14545